First of all.Quote:
It would make my life easier if you stopped updating your hack app, but I guess that's part of the job. It's fairly difficult(and time consuming) to make a proper anticheat without either generating false positives or in some way, negatively impacting legitimate end-users.
This will just be a game of cat and mouse, unless I decide to rework the movement networking to allow serversided position verification without causing a shitton of issues to legitimate users. Even then, I'll still have to deal with the botting clientsided.
Also, out of curiosity, is there a reason you chose not to detour functions and rather work entirely with RPM and WPM? You would avoid a lot of spammed API calls if you just detoured a few functions. I haven't bothered to reverse engineer your code, but your offsets seem strange as well. Very minor changes seem to throw the auto-leveling bot off. That being said, it's a bit more challenging to write an anticheat when you're just using WPM.
Nothing I've done yet is very complex; I've played with some code checksum verification, but it's somewhat useless unless I make a post-build tool to write the checksum onto the exe image itself. Even then, it's pretty simple to bypass with a few well placed NOPs. I've considered putting the checksums of choice code segments serversided, that way the client would need to send something at least. I'm pretty sure Blizzard's Warden does something similar, but it takes away a lot of the development flexibility.
Regardless, I'll keep playing this game as long as you will.
Congrats, you've successfully been able to keep cheaters away from the server for a good while.
I've not seen anything like it in the FlyFF community before.
But that's the thing that dragged me to it, that no one has been able to bypass it.
I like myself a good challenge, but a reward to keep me motivated is needed aswell.
So before you say it, no, I will not download crackmes and start cracking worthless programs without any reward to motivate me.
Alright, when that's out of the way.
I know that it's difficult to create a proper working anti-cheat. That's the reason why no one has ever done it.
You're unable to protect something entirely sadly, and happily :rolleyes:
If you wish for me to stop updating it, I will. That's no problem for me and I respect that.
I respect the fact that you're the one telling me to stop since it annoys you.
Most admins / developers wouldn't do that since it shows weakness.
I don't care about any weakness though, if you want me to stop, I'll stop.
Reworking the movement networking won't be necessary, unless someone else decides to crap on the server.
But no one will, they can't :pimp:
Even if you would rework it, it would most likely cause some players to lagg and more effort from the server computer would be necessary.
I've not worked with detours before and never used them. They haven't been necessary for what I do.
I've only reversed for about 1 year on and off, maybe less.
I've programmed for about 2 years on and off and I'm only 17 years old. I'm not that experienced at all, don't expect much from me.
I'm just havin' fun while learning, ya know?
By the way, I've already succeeded to avoid all the crappy spammed function calls.
Kinda silly way to break the bot, it worked though, that's what matters.
The way I do it now, there's only two needed addresses to be changed. One for the speed checks and one for the teleportation checks. Nothing else.
I understand that nothing you've done has been complex. It hasn't been needed at all.
No one yet (except now) has been able to bypass it (I think).
To conclude,
I'll stop updating it but I'll keep it up on the thread free for download.
You'll have to patch it again though :cool:
Btw, would appreciate if you would reply just so I know you've read it.