SC2 Memory Protection (Prevent memory editing)

[Vuno]

Copied from my site. Some information was intentionally left out. On my site I posted the exact code that SC2 uses to protect their memory during run-time.

During the TLS Callback on process creation, SC2 calls NtCreateSection, NtUnmapViewOfSection, NtMapViewOfSection to prevent memory editing. There’s a couple of ways to defeat this, but the easiest would be...

Set the following perimeters to these:

AllocationType = NULL;
Protect = PAGE_EXECUTE_READWRITE;

However, SC2 does have remap protection. The game will remap, but it will crash. you'll have to figure how to fix the crash.

Side note: Warden is checking to see if the SC2 module was remapped. If so, you are probably flagged to be banned for cheating. The addresses below are from my Warden tool.

0x00007FF79C730000[48]
0x00007FF79FF10000[48]
0x00007FF7A41D0000[48]
0x00007FF7A44A0000[48]
0x00007FF7A44B0000[48]