UTCheats.net - Unreal Tournament & Tactical Ops cheats and hacks

Unreal Tournament => General Discussion => Topic started by: nospamforme9 on July 18, 2011, 03:01:29 PM

Title: ACE and .text section
Post by: nospamforme9 on July 18, 2011, 03:01:29 PM

Could someone tell me how ACE or any other anti-cheat detects changes in the .text section?
More precise: a jump to new allocated memory and then a jump back. Could it for example be that ACE does not detect a push addr, ret instead of a jmp?

Thx

FYI: I'm memory editing. Not doing anything with uscript.

Title: Re: ACE and .text section
Post by: lien on July 18, 2011, 10:15:22 PM

ACE does compare .text section in memory with the file on your hdd. If you just change one byte, ace will detect this. So push adrr, ret won't work ;)

Title: Re: ACE and .text section
Post by: lien on July 20, 2011, 04:58:15 PM

I don't think so it would work. If Im right, ACE does check md5 of the file. So if you hook ReadFile and change some bytes you will get kicked for unknown file. Or it can even check if jmp is outside .text section or module.

Title: Re: ACE and .text section
Post by: lien on July 26, 2011, 11:50:10 PM

It does. But .data section is the way ;)