[hidden]What is Flex Anticheat?
Flex Anticheat is anticheat for Counter-Strike 1.6.[/hidden]
This anticheat has got an *.exe file, which is an updater and looks for a newer version in an exact website. (The *exe file is packed with UPX 0.89.6 - 1.02 / 1.05 - 2.90 -> Markus & Laszlo so unpacking is very easy).
The *.ex file is the main form of the anticheat (picture above).
Also the anticheat contains hl.exe as an embed resources and later, after pressing the button "Start Counter-Strike 1.6" it saves it with different 20-symbols name each time in the game folder (for example: 12345678901234567890.exe). - it's not packed with anything, because it's the game executable.
The anticheat contains *.tmp file which is being injected in the game process (12345678901234567890.exe) and it also has a name with 20 different symbols (for example 09876543210987654321.tmp, but it is NOT the same like the game process name) The *.tmp file is a *.dll file with changed extension and it saves into temp folder (C:\Users\user name\AppData\Local\Temp - for win 7) (%temp% in run to get there. - For xp and 7)
Also the anticheat searches for hacking tools (things that will make the hacking easier) - it searches the hacking tools with using FindWindow in a timer.
After the anticheat injects the *.tmp file in the game process, it patches some info and hooks some functions so the game begins to contain info that will be used for protecting againts cheats and using for authorization by the server-side part.
:virus_free:
Official site:
http://cs.man1a.com/news.php
Download FAC(official site):
http://cs.man1a.com/request.php?36
Download FAC(mirror-mediafire):
http://www.mediafire.com/?hthru6zhh6c5qh3
Works for windows xp, vista 7 (x86 and x64).
p.s. Lastest version of *.exe, *.ex and *.tmp files aren't packed.
If you have enough time and want to help me hack this anticheat, you are welcome.