Add rules for AntiCheat.TheiaAntiTamper

[ghost]

Games using AntiCheat.TheiaAntiTamper

The Finals
Battlefield 2042
Spectre Divide
SUPERVIVE
Apex Legends
Battlefield 6
ARC Raiders

Brief explanation of the change

Added a rule to match Theia's auxiliary dll ("preloader.dll") that is responsible for mapping in the main module usually called "runtime.dll".

[CR3Swapper]

LGTM

[xPaw]

Don't use .* regexes (in this case just make a group). The name preloader is unfortunate, I expect false positives.

[ghost]

Don't use .* regexes (in this case just make a group). The name preloader is unfortunate, I expect false positives.

A cleaner check could be done based on file content , but I expect that steam db only parses the manifests and does not actually download the depots.

[SteamDB-Tracker]

After running changed rules in this pull request (this bot only tests rules.ini changes):

Changed technologies: AntiCheat.TheiaAntiTamper

These apps now match: (32) 868270 1238810 1238840 1262240 1283700 1517290 1796470 1811260 1849250 1922560 2073850 2140330 2195250 2295890 2434630 2443720 2488620 2582560 2669320 2705720 2881650 2940200 2963840 2980700 3011460 3028240 3059520 3081410 3230400 3380930 3411270 3643930

Please confirm that all these changed apps are correct.

[xPaw]

Seems like it can be reduced to just preloader.dll and preloader_l.dll

[ghost]

Seems like it can be reduced to just preloader.dll and preloader_l.dll

EA's bundled anticheat also has it there it is named "preloader_s.dll" I believe the developers are free to name the file whatever they want but preloader is the default name. The 2 Unity games may be false positives the others can be confirmed to be correct. I will have to investigate the Unity games to confirm.

[xPaw]

I didn't find any files besides these 2 in search.

[AnalogCyberNuke]

I didn't find any files besides these 2 in search.

Yes the preloader_s.dll is dropped by the anticheat installer. So these 2 patterns probably suffice for games

[ghost]

I didn't find any files besides these 2 in search.

Yes the preloader_s.dll is dropped by the anticheat installer. So these 2 patterns probably suffice for games

Interesting, I noticed FACEIT also has it but I don't think that is on steam. I updated the rules to only match "preloader.dll" and "preloader_l.dll"

[xPaw]

Reduce the description to 1-2 sentences please.

[ghost]

done

[AnalogCyberNuke]

ZeroIT DMCA moment 🤯