UTCheats.net - Unreal Tournament & Tactical Ops cheats and hacks

Please login or register.

Login with username, password and session length
Advanced search  

News:

Welcome to UTCHEATS.NET

Author Topic: ACE and .text section  (Read 4604 times)

nospamforme9

  • Newbie
  • *
  • Posts: 1
    • View Profile
ACE and .text section
« on: July 18, 2011, 03:01:29 PM »
Could someone tell me how ACE or any other anti-cheat detects changes in the .text section?
More precise: a jump to new allocated memory and then a jump back. Could it for example be that ACE does not detect a push addr, ret instead of a jmp?

Thx

FYI: I'm memory editing. Not doing anything with uscript.
Logged

lien

  • Administrator
  • Dominating
  • ******
  • Posts: 327
    • View Profile
Re: ACE and .text section
« Reply #1 on: July 18, 2011, 10:15:22 PM »
ACE does compare .text section in memory with the file on your hdd. If you just change one byte, ace will detect this. So push adrr, ret won't work ;)
Logged

lien

  • Administrator
  • Dominating
  • ******
  • Posts: 327
    • View Profile
Re: ACE and .text section
« Reply #2 on: July 20, 2011, 04:58:15 PM »
I don't think so it would work. If Im right, ACE does check md5 of the file. So if you hook ReadFile and change some bytes you will get kicked for unknown file. Or it can even check if jmp is outside .text section or module.
Logged

lien

  • Administrator
  • Dominating
  • ******
  • Posts: 327
    • View Profile
Re: ACE and .text section
« Reply #3 on: July 26, 2011, 11:50:10 PM »
It does. But .data section is the way ;)
Logged