Once a code cave is created, you can execute it using either thread injection or thread hijacking. […] Additionally, you'd need to make sure that the cave properly cleans the stack.