Unreal Tournament > General Discussion

ACE and .text section

(1/1)

nospamforme9:
Could someone tell me how ACE or any other anti-cheat detects changes in the .text section?
More precise: a jump to new allocated memory and then a jump back. Could it for example be that ACE does not detect a push addr, ret instead of a jmp?

Thx

FYI: I'm memory editing. Not doing anything with uscript.

lien:
ACE does compare .text section in memory with the file on your hdd. If you just change one byte, ace will detect this. So push adrr, ret won't work ;)

lien:
I don't think so it would work. If Im right, ACE does check md5 of the file. So if you hook ReadFile and change some bytes you will get kicked for unknown file. Or it can even check if jmp is outside .text section or module.

lien:
It does. But .data section is the way ;)

Navigation

[0] Message Index