I am working on an Osu Replay Composer for osu! standard. This replay composer allows you to record your input and mouse position, which when you pause or leave the current played map creates a replay without ever finishing it (and submitting anything). It comes with a Replay Editor that I did build into the Developer Version of Osu (https://******.com/ppy/osu).

This was my take on the fact that I don't want to use the replays of other players. But instead, improve my own gameplay by replaying certain parts of a map inside the replay editor. I do this by setting my cursor position to the last position I want to start from inside the replay editor. And then start playing as if I hit everything perfect up until this "checkpoint". Without having to (re)play the three minutes I already do perfectly. This in theory would allow me to perfect any map circle by circle. With human-looking inputs. Which I then could replay with a replay bot. But I am not so sure yet when it comes to mouse movement and keyboard/mouse input.

My question would be, doesn't the osu game client check for input simulation/injection by checking if the input has got the injected flag? All releases I have seen so far use input methods that should be detected. Or does the anticheat just doesn't care and mainly focus on server-sided analytics/signatures/processes? I can overkill deep-dive into Windows Hooking (using my DMA Card), but I don't see any reason yet to go that hard on this game.