client/UserInterface/HackShield.cpp

#include "StdAfx.h"
#include "Hackshield.h"

#ifdef USE_AHNLAB_HACKSHIELD

#if defined(LOCALE_SERVICE_EUROPE)
#define METIN2HS_MONITORING_SERVER_ADDR "79.110.88.84"
#elif
#define METIN2HS_MONITORING_SERVER_ADDR "79.110.88.84" // GF
#endif
//#define METIN2HS_MONITORING_SERVER_ADDR "119.192.130.160"  //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> pc

#include METIN2HS_INCLUDE_HSUPCHK
#include METIN2HS_INCLUDE_HSUSERUTIL
#include METIN2HS_INCLUDE_HSHIELD
#include METIN2HS_INCLUDE_HSHIELDLIBLINK

#define MA_MAX_PATH MAX_PATH
#define MA_T
#define MA_TCHAR char
#define MA_StringFormat snprintf
#define MA_ARRAYCOUNT sizeof

static DWORD gs_dwMainThreadID = 0;

static bool gs_isHackDetected = false;
static char gs_szHackMsg[256];

void MA_PathSplit(MA_TCHAR* src, MA_TCHAR* branch, size_t branchLen, MA_TCHAR* leaf, size_t leafLen)
{
	char* p = src;
	char* n = p;
	while (n = strchr(p, '\\'))
		p = n + 1;

	if (branch)
		strncpy(branch, src, p - src);

	if (leaf)
		strcpy(leaf, p);	
}

void MA_PathMerge(MA_TCHAR* dst, size_t dstLen, MA_TCHAR* branch, MA_TCHAR* leaf)
{
	snprintf(dst, dstLen, "%s\\%s", branch, leaf);
}

int __stdcall AhnHS_Callback(long lCode, long lParamSize, void* pParam)
{
	switch (lCode)
	{
		//Engine Callback
	case AHNHS_ENGINE_DETECT_GAME_HACK:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_GAME_HACK\n%s"), (char*)pParam);
			gs_isHackDetected = true;
			break;
		}
		//â<><C3A2><EFBFBD><EFBFBD> <20><>ŷ<EFBFBD><C5B7> <20><><EFBFBD><EFBFBD>
	case AHNHS_ENGINE_DETECT_WINDOWED_HACK:
		{
			//MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_WINDOWED_HACK"));
			//gs_isHackDetected = true;
			break;
		}

		//Speed <20><><EFBFBD><EFBFBD>
	case AHNHS_ACTAPC_DETECT_SPEEDHACK:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_SPEED_HACK"));
			gs_isHackDetected = true;
			break;
		}

		//<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> 
	case AHNHS_ACTAPC_DETECT_KDTRACE:
//	case AHNHS_ACTAPC_DETECT_KDTRACE_CHANGED:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_DEBUGING(checkCode=%x)"), lCode);			
			gs_isHackDetected = true;
			break;
		}

	case AHNHS_ACTAPC_DETECT_AUTOMACRO:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_MACRO(checkCode=%x)"), lCode);
			gs_isHackDetected = true;
			break;
		}

		// <20>ڵ<EFBFBD> <20><>ġ <20><><EFBFBD><EFBFBD>
	case AHNHS_ACTAPC_DETECT_ABNORMAL_MEMORY_ACCESS:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_MEMORY_ACCESS\n%s"), (char*)pParam);
			gs_isHackDetected = true;
			break;
		}

		//<2F>޸<EFBFBD><DEB8><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>.
	case AHNHS_ACTAPC_DETECT_MEM_MODIFY_FROM_LMP:  //<2F><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20>ּ<EFBFBD> (Randomized Base Address) Ȯ<><C8AE><EFBFBD>غ<EFBFBD><D8BA><EFBFBD>. Linker->Advanced->(/DYNAMICBASE:NO)
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_MEMORY_MODIFY"));
			gs_isHackDetected = true;
			
		}
		break;

		// <20>ٽ<EFBFBD><D9BD><EFBFBD> <20><><EFBFBD><EFBFBD> <20>޸<EFBFBD><DEB8><EFBFBD> <20><>ȣ <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20>ʽ<EFBFBD><CABD>ϴ<EFBFBD>.
	case AHNHS_ACTAPC_DETECT_LMP_FAILED:
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("LOCAL_MEMORY_PROTECT_FAILED"));
			gs_isHackDetected = true;
			
		}
		break;

		//<2F>׿<EFBFBD> <20><>ŷ <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20>̻<EFBFBD> 
//	case AHNHS_ACTAPC_DETECT_AUTOMOUSE:
	case AHNHS_ACTAPC_DETECT_DRIVERFAILED:
	case AHNHS_ACTAPC_DETECT_HOOKFUNCTION:
//	case AHNHS_ACTAPC_DETECT_MESSAGEHOOK:
//	case AHNHS_ACTAPC_DETECT_MODULE_CHANGE:
	case AHNHS_ACTAPC_DETECT_ENGINEFAILED:
	case AHNHS_ACTAPC_DETECT_CODEMISMATCH:
//	case AHNHS_ACTAPC_DETECT_PROTECTSCREENFAILED:	
		{
			MA_StringFormat(gs_szHackMsg, MA_ARRAYCOUNT(gs_szHackMsg), MA_T("DETECT_HACKING(checkCode = %x)\n"), lCode);
			gs_isHackDetected = true;
			break;
		}
	}
	return 1;
}

bool HackShield_PollEvent()
{
	return gs_isHackDetected;
	//return false;
}

bool HackShield_Init()
{

	MA_TCHAR szModuleDirPath[MA_MAX_PATH];
	::GetCurrentDirectory(MA_ARRAYCOUNT(szModuleDirPath), szModuleDirPath);

#ifndef _DEBUG
	//<2F>ٽ<EFBFBD><D9BD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ʈ
	DWORD dwUpRet = 0; 
	MA_TCHAR szFullFilePath[MA_MAX_PATH];
	// <20>ٽ<EFBFBD><D9BD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><>ġ<EFBFBD><C4A1> <20><><EFBFBD><EFBFBD><EFBFBD>մϴ<D5B4>. 
	MA_PathMerge(szFullFilePath, MA_ARRAYCOUNT(szFullFilePath), szModuleDirPath, "hshield");
	AHNHS_EXT_ERRORINFO HsExtError = {0,}; 
	
	// _AhnHS_HSUpdate <20>Լ<EFBFBD> ȣ<><C8A3> 
	dwUpRet = _AhnHS_HSUpdateEx( szFullFilePath, // <20>ٽ<EFBFBD><D9BD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> 
							1000 * 600, // <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ʈ <20><>ü Ÿ<><C5B8> <20>ƿ<EFBFBD> 
							METIN2HS_CODE, // <20><><EFBFBD><EFBFBD> <20>ڵ<EFBFBD> 
							AHNHSUPDATE_CHKOPT_HOSTFILE| AHNHSUPDATE_CHKOPT_GAMECODE, 
							HsExtError, 
							1000* 20 ); // <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> Ÿ<>Ӿƿ<D3BE> 
							
	// Ex <20>Լ<EFBFBD><D4BC><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>ϽǶ<CFBD><C7B6><EFBFBD> <20>ݵ<EFBFBD><DDB5><EFBFBD> HSUpSetEnv.exe <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> env <20><><EFBFBD>Ͽ<EFBFBD> 
	// <20><><EFBFBD><EFBFBD> <20>ڵ带 <20>Է<EFBFBD><D4B7>ϼž<CFBC> <20>մϴ<D5B4>. 
	if ( dwUpRet != ERROR_SUCCESS) 
	{ 
		
		// <20><><EFBFBD><EFBFBD> ó<><C3B3> 
		switch ( dwUpRet ) 
		{ 
			case HSERROR_ENVFILE_NOTREAD: 
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_ENVFILE_NOTREAD"), "HACK_SHIELD", MB_OK);
				break;
			case HSERROR_ENVFILE_NOTWRITE: 
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_ENVFILE_NOTWRITE"), "HACK_SHIELD", MB_OK);
				break;
			case HSERROR_NETWORK_CONNECT_FAIL: 
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_NETWORK_CONNECT_FAIL"), "HACK_SHIELD", MB_OK);
				break;
			case HSERROR_HSUPDATE_TIMEOUT: 
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_HSUPDATE_TIMEOUT"), "HACK_SHIELD", MB_OK);
				break;
			case HSERROR_MISMATCH_ENVFILE:
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_MISMATCH_ENVFILE"), "HACK_SHIELD", MB_OK);
				break;
			case HSERROR_HOSTFILE_MODIFICATION: 
				MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR : HSERROR_HOSTFILE_MODIFICATION"), "HACK_SHIELD", MB_OK);
				break;
			default:
				break;
		}
		
		MessageBox(NULL, MA_T("HACK_SHIELD_UPDATE_ERROR"), "HACK_SHIELD", MB_OK);

		return false;
		
	}
#endif

	MA_TCHAR szInterfaceFilePath[MA_MAX_PATH];
	{
		if (!_AhnHSUserUtil_IsAdmin() && !_AhnHsUserUtil_IsEnableHSAdminRights())
		{
			DWORD dwRet = _AhnHsUserUtil_CreateUser();
			switch (dwRet)
			{
			case HSUSERUTIL_ERR_OK: // pass
				break;
			case HSUSERUTIL_ERR_NOT_ADMIN: // <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>ϹǷ<CFB9> <20><><EFBFBD><EFBFBD> <20>ƴ<EFBFBD>
				break;
			case HSUSERUTIL_ERR_NOT_NT: // 98 <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD>ϹǷ<CFB9> <20><><EFBFBD><EFBFBD> <20>ƴ<EFBFBD>
				break;
			case HSUSERUTIL_ERR_DELHIDEIDINFO_FAIL:
				MessageBox(NULL, MA_T("DEL_SHADOW_HIDDEN_ERROR"), "HACK_SHIELD", MB_OK);
				return false;
			case HSUSERUTIL_ERR_DELSHADOWACNT_FAIL:
				MessageBox(NULL, MA_T("DEL_SHADOW_ACCOUNT_ERROR"), "HACK_SHIELD", MB_OK);
				return false;			
			case HSUSERUTIL_ERR_ADDSHADOWACNT_FAIL:
				MessageBox(NULL, MA_T("ADD_SHADOW_ACCOUNT_ERROR"), "HACK_SHIELD", MB_OK);
				return false;						
			}

		}

#ifdef _DEBUG
		MA_PathMerge(szInterfaceFilePath, MA_ARRAYCOUNT(szInterfaceFilePath), szModuleDirPath, "hshield\\EHsvc.dll");
#else
		MA_PathMerge(szInterfaceFilePath, MA_ARRAYCOUNT(szInterfaceFilePath), szModuleDirPath, "hshield\\EHsvc.dll");
#endif
	}

#ifndef _DEBUG
	{
		AHNHS_EXT_ERRORINFO HsExtError = { 0, };
		strcpy(HsExtError.szServer, METIN2HS_MONITORING_SERVER_ADDR); //<2F><><EFBFBD><EFBFBD><EFBFBD>͸<EFBFBD> <20>ּ<EFBFBD>	
		strcpy(HsExtError.szGameVersion, "1.0.0.0"); //Game <20><><EFBFBD><EFBFBD>
		strcpy(HsExtError.szUserId, "Metin2User_test"); //<2F><><EFBFBD><EFBFBD> ID

		DWORD dwRet = _AhnHS_StartMonitor (HsExtError, szInterfaceFilePath);
		if( dwRet != ERROR_SUCCESS )
		{
			MessageBox(NULL, MA_T("START_MONITORING_SERVICE_ERROR"), "HACK_SHIELD", MB_OK);
		}
	}
#endif

	{
		int nRet = _AhnHS_Initialize(szInterfaceFilePath, AhnHS_Callback, 
			METIN2HS_CODE,
			METIN2HS_LICENSE,
			AHNHS_CHKOPT_SPEEDHACK 
			| AHNHS_CHKOPT_READWRITEPROCESSMEMORY 
			| AHNHS_CHKOPT_KDTRACER 
//			| AHNHS_CHKOPT_OPENPROCESS 
			| AHNHS_CHKOPT_AUTOMOUSE 			
			| AHNHS_CHKOPT_MESSAGEHOOK
			| AHNHS_CHKOPT_PROTECT_D3DX
			| AHNHS_CHKOPT_LOCAL_MEMORY_PROTECTION // <20>ڵ<EFBFBD> <20><><EFBFBD><EFBFBD> <20>ε<EFBFBD> <20><>ȣ
			//| AHNHS_CHKOPT_ANTIFREESERVER // <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>
			| AHNHS_USE_LOG_FILE			
//			| AHNHS_ALLOW_SVCHOST_OPENPROCESS
			//| AHNHS_ALLOW_LSASS_OPENPROCESS // <20>ſ<EFBFBD> ī<><C4AB> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>
			//| AHNHS_ALLOW_CSRSS_OPENPROCESS // <20>ſ<EFBFBD> ī<><C4AB> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD>
			//| AHNHS_CHKOPT_SELF_DESTRUCTION // <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> ó<><C3B3>: <20>ݹ<EFBFBD> ó<><C3B3> <20><><EFBFBD><EFBFBD>
			| AHNHS_CHKOPT_PROCESSSCAN
			| AHNHS_CHKOPT_UPDATED_FILE_CHECK
			| AHNHS_CHKOPT_SEND_MONITOR_ONCE // <20><><EFBFBD><EFBFBD><EFBFBD>͸<EFBFBD><CDB8><EFBFBD>: 1ȸ<31><C8B8> <20><><EFBFBD><EFBFBD>
			| AHNHS_CHKOPT_SEND_MONITOR_DELAY // <20><><EFBFBD><EFBFBD><EFBFBD>͸<EFBFBD><CDB8><EFBFBD>: <20><><EFBFBD>̵<EFBFBD><CCB5><EFBFBD> õõ<C3B5><C3B5> <20><><EFBFBD><EFBFBD>
			| AHNHS_DONOT_TERMINATE_PROCESS, // <20><><EFBFBD><EFBFBD> <20>˸<EFBFBD>	
			AHNHS_SPEEDHACK_SENSING_RATIO_NORMAL
			);

		if (nRet != HS_ERR_OK) 
		{
			//Error ó<><C3B3> 
			switch(nRet)
			{
				case HS_ERR_ANOTHER_SERVICE_RUNNING:
				{
					MessageBox(NULL, MA_T("ANOTHER_SERVICE_RUNNING"), "HACK_SHIELD", MB_OK);
					break;
				}
				case HS_ERR_INVALID_LICENSE:
				{
					MessageBox(NULL, MA_T("INVALID_LICENSE"), "HACK_SHIELD", MB_OK);
					break;
				}
				case HS_ERR_INVALID_FILES:
				{
					MessageBox(NULL, MA_T("INVALID_FILES"), "HACK_SHIELD", MB_OK);
					break;
				}
				case HS_ERR_DEBUGGER_DETECT:
				{
					MessageBox(NULL, MA_T("DEBUG_DETECT"), "HACK_SHIELD", MB_OK);
					break;
				}
				case HS_ERR_NEED_ADMIN_RIGHTS:
				{
					MessageBox(NULL, MA_T("NEED_ADMIN_RIGHTS"), "HACK_SHIELD", MB_OK);
					break;
				}
				case HS_ERR_COMPATIBILITY_MODE_RUNNING:
				{
					MessageBox(NULL, MA_T("COMPATIBILITY_MODE_RUNNING"), "HACK_SHIELD", MB_OK);
					break;
				}
				default:
				{
					MA_TCHAR szMsg[255];
					MA_StringFormat(szMsg, MA_ARRAYCOUNT(szMsg), MA_T("UNKNOWN_ERROR(errorCode=%x)"), nRet);
					MessageBox(NULL, szMsg, "HACK_SHIELD", MB_OK);
					break;
				}
			}
			return false;
		}
	}

	gs_dwMainThreadID = GetCurrentThreadId();

	{
		int nRet = _AhnHS_StartService();
		assert(nRet != HS_ERR_NOT_INITIALIZED);
		assert(nRet != HS_ERR_ALREADY_SERVICE_RUNNING);

		if (nRet != HS_ERR_OK)
			{
			MA_TCHAR szMsg[255];
			MA_StringFormat(szMsg, MA_ARRAYCOUNT(szMsg), MA_T("START_SERVICE_ERROR(errorCode=%x)"), nRet);
			MessageBox(NULL, szMsg, "HACK_SHIELD", MB_OK);
			return false;
		}
	}
	return true;
}

bool HackShield_Shutdown()
{
	if (gs_dwMainThreadID)
	{
		gs_dwMainThreadID = 0;
		_AhnHS_StopService();
	}

	int nRet = _AhnHS_Uninitialize();
	if (nRet != HS_ERR_OK)
	{
		MA_TCHAR szMsg[255];
		MA_StringFormat(szMsg, MA_ARRAYCOUNT(szMsg), MA_T("UNINITIALIZE_ERROR(errorCode=%x)"), nRet);
		MessageBox(NULL, szMsg, "HACK_SHIELD", MB_OK);
	}

	if (_AhnHsUserUtil_CheckHSShadowAccount())
	{
		 _AhnHsUserUtil_DeleteUser();
	}

	if (gs_isHackDetected)
	{
		MessageBox(NULL, gs_szHackMsg, "HACK_SHIELD", MB_OK);
	}
	return true;
}

#define PREFIX_LOCALE		"locale/"

void HackShield_SetUserInfo(const char* szAccountName)
{
	MA_TCHAR szUserInfo[256];

	const char* szLocaleName = LocaleService_IsYMIR() ? MA_T("unknown") : LocaleService_GetLocalePath();
	if( strncmp( szLocaleName, PREFIX_LOCALE, strlen(PREFIX_LOCALE) ) == 0 )
		szLocaleName += strlen(PREFIX_LOCALE);
	MA_StringFormat(szUserInfo, MA_ARRAYCOUNT(szUserInfo), MA_T("%s / %s"), szAccountName, szLocaleName );
	_AhnHS_SetUserId(szUserInfo);
}

#endif /* USE_AHNLAB_HACKSHIELD */