UTCheats.net - Unreal Tournament & Tactical Ops cheats and hacks
Unreal Tournament => General Discussion => Topic started by: nospamforme9 on July 18, 2011, 03:01:29 PM
-
Could someone tell me how ACE or any other anti-cheat detects changes in the .text section?
More precise: a jump to new allocated memory and then a jump back. Could it for example be that ACE does not detect a push addr, ret instead of a jmp?
Thx
FYI: I'm memory editing. Not doing anything with uscript.
-
ACE does compare .text section in memory with the file on your hdd. If you just change one byte, ace will detect this. So push adrr, ret won't work ;)
-
I don't think so it would work. If Im right, ACE does check md5 of the file. So if you hook ReadFile and change some bytes you will get kicked for unknown file. Or it can even check if jmp is outside .text section or module.
-
It does. But .data section is the way ;)