Here is how Warden works... from what ive seen Anti-Warden script doing...
Warden looks at the data of your WC3.exe and the Dlls, compares it with clean files, and if something isnt like it should be, it detects what it is (if its something minor i think it might overlook it, but im not sure on that) as i have seen lots of Warden Bypasses that work with a log and it sends fake WC3 data to Warden to simulate it being a legit version (which is why when WC3.exe updates a little bit like, a few arrays hacks stop working... because they dont send the right data anymore)