Problem with code cave making wall undeteced.

[hotshizle]

Oka read up on code caving and etc.

there were many tuts and i read the best of them all =)

so first the problem is that fat boy said:

code cave the hook int3->Jmp then in the code cave->Jmp(detour)d3d functions ->jmp back to original flow ;Hook hopin

what code cave basically is:

A code-cave is a name designated to a method where you assemble (write to) an unused portion of your memory in order to change the behavior of the original operations.
A code-cave normally consists of 2 parts:
- The Cave, located at a free portion of your memory. The cave itself consists of a copy of the original code, the changes you wish to make to the original code and a jump back to the original code.
- The Jump-gate, located in the original code. You can compare a jump-gate with a crossroad. Instead of letting traffic (dataflow) use the highway, you put up a roadblock (the jump-gate), diverting traffic to a road you control (whatever changes you wish


so we use code cave to basically be undetected by GG -,-

but how can i edit the memory (the game in this case SF) if i cannot open ollydbg and edit the game itself without alt+tabbing..

FAtboy you said this method would make the wallhack undetected but how can i edit the memory itself

[Nek0]

record all the memory and go thru it 1 by 1 .. not worth the time & effort your going to waste.

[xxcoderxx]

ya wat Neko said is true, but theres an easier way, make an exe bypass! or detour! a lot easier or play legit and last option make new wall hack from scratch with different color modules than fatboys and a new hook :D

[Hourumiyamoro]

*sigh* i don't know what i am telling you this, but i'll give you a hint, simply because i can see you did put effort into it...

look at what fatboy exactly typed.. its not jump, its JMP.. look it up and you will find that JMP is a Jump Code in ASM (Assembly, which is an old code.)

By using ASM you can specify the jump to the unused memory block... finding out what the Memory block is, is not too terribly hard, you should be able to open up Soldier Front.exe in the debugger and see where the memory is placed.

[awesty]

You can open SF in olly, go to File>Open then browse to the SF .exe. (I can't remember what it's called)

You don't need to use olly to edit the memory. You could inject a .dll with the ASM in it into SF.

[hotshizle]

Originally Posted by Hourumiyamoro

*sigh* i don't know what i am telling you this, but i'll give you a hint, simply because i can see you did put effort into it...

look at what fatboy exactly typed.. its not jump, its JMP.. look it up and you will find that JMP is a Jump Code in ASM (Assembly, which is an old code.)

By using ASM you can specify the jump to the unused memory block... finding out what the Memory block is, is not too terribly hard, you should be able to open up Soldier Front.exe in the debugger and see where the memory is placed.

I know what JMP mean i know it does not mean like jump off a cliff with searching for code cave i discovered that therre were jump gates where you can easily tell the gameguard what to scan (like a fake object) and then return to wen it finished scanning

its hard to explain and i need more help on how to debugging SF..plz pm me

[omgitgod520]

too complictaed for me............ and how do u make an .exe bypass just asking???

[Hourumiyamoro]

Well theres a few ways to do it, i've never examined a .exe. bypass for SF but for other games using PunkBuster the .exe bypass was a 'Mini-Clone' of the original game .exe, so it had some of the original game .exe and pretended to be the actual game, but it just intercepted punkbusters code, acted like it wasn't hacked, or had any .dlls injected into it, and the real .exe slipped through the crack..

we sometimes do this to Crack games and make it No CD checking... its kind of on the same premise.. only with game cracking we have to write the whole .exe file

[stickleback]

Just so you know, if you don't want to spend time making code caves for Sf. There are much simpler ways. Look at some threads that people have posted about whats detected, then edit your wall hack source accordingly.
Better yet, bypass GameGuard.
As a starter you need to know what and how it checks before you bypass it.

[hotshizle]

bypass GG is hard because i dont know what to fix i searched nothing.

and also yea imma try to code cave which can help in all games.