this is a repost from another forum. thanks to sd333221 for the info.

Code:
Arma Memory scan, offset 0x1b280 sig len 0x20 sig ( 55 00 6e 00 6c 00 69 00 6d 00 69 00 74 00 65 00 64 00 20 00 41 00 6d 00 6d 00 6f 00 00 00 00 00 ) plaintext ( U.n.l.i.m.i.t.e.d. .A.m.m.o..... )
Arma Memory scan, offset 0x17280 sig len 0x20 sig ( 55 00 6e 00 6c 00 69 00 6d 00 69 00 74 00 65 00 64 00 20 00 41 00 6d 00 6d 00 6f 00 00 00 00 00 ) plaintext ( U.n.l.i.m.i.t.e.d. .A.m.m.o..... )
Arma Memory scan, offset 0x1129 sig len 0x20 sig ( 20 39 42 20 30 33 20 36 39 20 33 39 20 33 30 20 32 46 20 41 46 20 38 45 20 37 30 20 31 34 00 4e ) plaintext (  9B 03 69 39 30 2F AF 8E 70 14.N )
Arma Memory scan, offset 0x6182 sig len 0x20 sig ( 42 20 30 33 20 36 39 20 33 39 20 33 30 20 32 46 20 41 46 20 38 45 20 37 30 20 31 34 00 4e 61 6d ) plaintext ( B 03 69 39 30 2F AF 8E 70 14.Nam )
Arma Memory scan, offset 0xb6 sig len 0x20 sig ( 00 00 72 65 63 76 00 00 00 00 77 73 32 5f 33 32 2e 64 6c 6c 00 00 57 53 4f 43 4b 33 32 2e 64 6c ) plaintext ( ..recv....ws2_32.dll..WSOCK32.dl )
Arma Memory scan, offset 0x5f sig len 0x20 sig ( 00 72 65 63 76 66 72 6f 6d 00 73 65 6e 64 00 53 65 61 72 63 68 00 46 69 6c 74 65 72 20 00 48 6f ) plaintext ( .recvfrom.send.Search.Filter .Ho )
Arma Memory scan, offset 0x2e1a3 sig len 0x20 sig ( 2e 74 78 74 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 3b 00 30 78 00 43 75 73 ) plaintext ( .txt|All files (*.*)|*.*;.0x.Cus )
Arma Memory scan, offset 0x2f187 sig len 0x20 sig ( 2e 74 78 74 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 3b 00 30 78 00 43 75 73 ) plaintext ( .txt|All files (*.*)|*.*;.0x.Cus )
Arma Memory scan, offset 0x18196 sig len 0x20 sig ( 2e 74 78 74 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 3b 00 30 78 00 43 75 73 ) plaintext ( .txt|All files (*.*)|*.*;.0x.Cus )
Arma Memory scan, offset 0x66 sig len 0x20 sig ( 01 00 00 00 00 00 49 6e 69 74 69 61 6c 69 7a 65 53 70 65 65 64 68 61 63 6b 00 72 65 61 6c 47 65 ) plaintext ( ......InitializeSpeedhack.realGe )
Arma Memory scan, offset 0x1911 sig len 0x20 sig ( 21 00 00 49 6e 66 69 6e 69 74 65 44 61 6d 61 67 65 20 77 61 73 20 72 65 6d 6f 76 65 64 20 66 6f ) plaintext ( !..InfiniteDamage was removed fo )
Arma Memory scan, offset 0x3917a sig len 0x20 sig ( 2e 74 78 74 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 3b 00 30 78 00 43 75 73 ) plaintext ( .txt|All files (*.*)|*.*;.0x.Cus )
Arma Memory scan, offset 0x120c sig len 0x20 sig ( 4d 61 79 4a 75 6e 4a 75 6c 41 75 67 53 65 70 4f 63 74 4e 6f 76 44 65 63 00 00 00 00 65 78 65 63 ) plaintext ( MayJunJulAugSepOctNovDec....exec )
Arma Memory scan, offset 0x11e6 sig len 0x20 sig ( 78 78 78 78 78 78 78 3f 3f 3f 3f 78 78 78 78 78 78 78 78 00 00 00 e8 00 00 00 00 83 7e 18 00 8b ) plaintext ( xxxxxxx????xxxxxxxx.........~... )
Arma Memory scan, offset 0x7189 sig len 0x20 sig ( 8b 48 04 2b 08 b8 93 24 49 92 f7 e9 03 d1 c1 fa 04 8b c2 c1 e8 1f 03 c2 3d f4 01 00 00 77 6b bf ) plaintext ( .H.+...$I...............=....wk. )
Arma Memory scan, offset 0x3077 sig len 0x20 sig ( 64 6f 77 57 00 50 72 6f 63 65 73 73 20 48 69 64 65 72 20 4f 70 74 69 6f 6e 73 00 57 69 6e 64 6f ) plaintext ( dowW.Process Hider Options.Windo )
Arma Memory scan, offset 0x3077 sig len 0x20 sig ( 11 22 33 57 00 50 72 6f 63 65 73 73 20 48 69 64 65 72 20 4f 70 74 69 6f 6e 73 00 57 69 6e 64 6f ) plaintext ( ."3W.Process Hider Options.Windo )
Arma Memory scan, offset 0x171c sig len 0x20 sig ( 00 c7 45 d4 5f 5f 4e 4f 66 c7 45 d8 50 45 88 5d da 8d 4d d4 8b c7 8a 10 3a 11 75 1a 3a d3 74 12 ) plaintext ( ..E.__NOf.E.PE.]..M.....:.u.:.t. )
Arma Memory scan, offset 0x1447 sig len 0x20 sig ( 00 6e 00 74 00 2e 00 64 00 6c 00 6c 00 00 00 00 00 53 65 74 74 69 6e 67 73 20 44 65 74 6f 75 72 ) plaintext ( .n.t...d.l.l.....Settings Detour )
Arma Memory scan, offset 0x72af sig len 0x20 sig ( 8b 48 04 2b 08 b8 93 24 49 92 f7 e9 03 d1 c1 fa 04 8b c2 c1 e8 1f 03 c2 3d f4 01 00 00 77 75 8b ) plaintext ( .H.+...$I...............=....wu. )
Arma Memory scan, offset 0x7468 sig len 0x20 sig ( 8b 48 04 2b 08 b8 93 24 49 92 f7 e9 03 d1 c1 fa 04 8b c2 c1 e8 1f 03 c2 3d f4 01 00 00 77 75 8b ) plaintext ( .H.+...$I...............=....wu. )
Arma Memory scan, offset 0x517e sig len 0x20 sig ( 6a 2e ff 13 a8 01 74 0e e8 d1 02 00 00 8b c8 6a 04 e8 b0 00 00 00 e8 c3 02 00 00 8b c8 e8 9c 00 ) plaintext ( j.....t........j................ )
Arma RPM constant offset scan, offset 0xfea10 sig len 0x20 sig ( 43 68 65 61 74 74 61 62 6c 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 00 00 00 00 41 64 64 65 ) plaintext ( Cheattable multiplied by....Adde )
Arma RPM constant offset scan, offset 0x106a2c sig len 0x20 sig ( 43 68 65 61 74 74 61 62 6c 65 20 6d 75 6c 74 69 70 6c 69 65 64 20 62 79 00 00 00 00 41 64 64 65 ) plaintext ( Cheattable multiplied by....Adde )
Arma RPM constant offset scan, offset 0x11f3f4 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x17f324 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x183abc sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x18646c sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0xf3b80 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0xac5b3 sig len 0x20 sig ( 69 6e 64 5f 48 65 78 00 00 42 55 46 46 45 52 5f 50 41 43 4b 45 54 4d 41 58 00 00 00 00 4c 6f 67 ) plaintext ( ind_Hex..BUFFER_PACKETMAX....Log )
Arma RPM constant offset scan, offset 0x2f6350 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x3dc578 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x1333a1 sig len 0x20 sig ( 00 00 00 ff ff ff ff 1c 00 00 00 4e 6f 20 4d 45 4d 20 66 69 6c 65 28 2a 2e 6d 65 6d 29 20 66 6f ) plaintext ( ...........No MEM file(*.mem) fo )
Arma RPM constant offset scan, offset 0x307313 sig len 0x20 sig ( 00 00 00 00 00 54 68 65 20 41 50 49 20 74 6f 20 68 6f 6f 6b 20 6d 75 73 74 20 62 65 20 73 75 70 ) plaintext ( .....The API to hook must be sup )
Arma RPM constant offset scan, offset 0x3a4904 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x4ca8a8 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x17f430 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x3f3494 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x51c918 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x6c851 sig len 0x20 sig ( 2e 73 71 66 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 00 43 61 6c 6c 20 54 69 ) plaintext ( .sqf|All files (*.*)|*.*.Call Ti )
Arma RPM constant offset scan, offset 0x6d92 sig len 0x20 sig ( 00 41 00 00 05 30 00 78 00 00 0f 61 00 72 00 6d 00 61 00 32 00 6f 00 61 00 00 13 63 00 68 00 65 ) plaintext ( .A...0.x...a.r.m.a.2.o.a...c.h.e )
Arma RPM constant offset scan, offset 0x25373 sig len 0x20 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 5b 31 5d 20 3d 20 7b 75 73 65 72 3a 31 2c 6e 61 6d 65 3a 22 ) plaintext ( zMarkerSetsX[1] = {user:1,name:" )
Arma RPM constant offset scan, offset 0x6c7e0 sig len 0x20 sig ( 2e 73 71 66 7c 41 6c 6c 20 66 69 6c 65 73 20 28 2a 2e 2a 29 7c 2a 2e 2a 00 43 61 6c 6c 20 54 69 ) plaintext ( .sqf|All files (*.*)|*.*.Call Ti )
Arma RPM constant offset scan, offset 0x10c11 sig len 0x20 sig ( 65 61 6c 74 68 61 72 72 61 79 5f 63 6e 74 00 69 73 44 65 61 64 00 62 61 63 6b 50 61 63 6b 00 49 ) plaintext ( ealtharray_cnt.isDead.backPack.I )
Arma RPM constant offset scan, offset 0x13ccf sig len 0x20 sig ( 65 61 6c 74 68 61 72 72 61 79 5f 63 6e 74 00 69 73 44 65 61 64 00 62 61 63 6b 50 61 63 6b 00 49 ) plaintext ( ealtharray_cnt.isDead.backPack.I )
Arma RPM constant offset scan, offset 0x45b9d4 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x45c598 sig len 0x10 sig ( 53 70 65 65 64 68 61 63 6b 20 31 20 73 70 65 65 ) plaintext ( Speedhack 1 spee )
Arma RPM constant offset scan, offset 0x1b4be sig len 0x20 sig ( 20 70 72 6f 63 65 73 73 20 28 50 49 44 3a 20 30 78 25 58 29 2e 00 46 61 69 6c 65 64 20 74 6f 20 ) plaintext (  process (PID: 0x%X)..Failed to  )
Arma RPM constant offset scan, offset 0xe386 sig len 0x20 sig ( 78 65 00 00 00 00 54 68 72 65 61 64 3a 20 25 69 20 7c 20 25 73 20 5b 30 78 25 58 5d 0a 00 54 68 ) plaintext ( xe....Thread: %i | %s [0x%X]..Th )
Arma RPM constant offset scan, offset 0x82f0 sig len 0x20 sig ( 78 65 00 00 54 68 72 65 61 64 3a 20 25 69 20 7c 20 25 73 20 5b 30 78 25 58 5d 0a 00 54 68 72 65 ) plaintext ( xe..Thread: %i | %s [0x%X]..Thre )
Arma RPM constant offset scan, offset 0xe4af sig len 0x20 sig ( 78 65 00 00 00 54 68 72 65 61 64 3a 20 25 69 20 7c 20 25 73 20 5b 30 78 25 58 5d 0a 00 54 68 72 ) plaintext ( xe...Thread: %i | %s [0x%X]..Thr )
Arma RPM constant offset scan, offset 0x831e sig len 0x20 sig ( 78 65 00 00 00 00 54 68 72 65 61 64 3a 20 25 69 20 7c 20 25 73 20 5b 30 78 25 58 5d 0a 00 54 68 ) plaintext ( xe....Thread: %i | %s [0x%X]..Th )
Arma RPM constant offset scan, offset 0xe4a3 sig len 0x20 sig ( 78 65 00 00 00 54 68 72 65 61 64 3a 20 25 69 20 7c 20 25 73 20 5b 30 78 25 58 5d 0a 00 54 68 72 ) plaintext ( xe...Thread: %i | %s [0x%X]..Thr )
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"onload"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"players"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"restart"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"mission"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"ban"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"Kick"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"logout"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"login"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"reassign"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"missions"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"shutdown"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_restart"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_reassign"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_missions"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_mission"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_kick"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = private ["_dummy"]; _dummy = [_this,"vote_admin"]   B =  execVM "\ca\ui\scripts\dedicatedServerInterface.sqf";
Arma Script Detector: A = call gear_ui_init;if (isNil('IGUI_GEAR_activeFilter')) then { IGUI_GEAR_activeFilter = 0;}; private ['_dummy']; _dummy = [_this,'initDialog'] call compile preprocessFile	   B = '\ca\ui\scripts\handleGear.sqf'; _dummy = [_this,'onLoad'] execVM	'\ca\ui\scripts\handleGear.sqf'; _dummy;
Arma Script Detector: A = call gear_ui_init;if (isNil('IGUI_GEAR_activeFilter')) then { IGUI_GEAR_activeFilter = 0;}; private ['_dummy']; _dummy = [_this,'initDialog'] call compile preprocessFile    B = '\ca\ui\scripts\handleGear.sqf'; _dummy = [_this,'onLoad'] execVM '\ca\ui\scripts\handleGear.sqf'; _dummy;
Scan Arma-Module at 2 offsets for a pattern sig ( e9 ) plaintext ( . )
Array Positions are: ( 12060,0 )
Scan Arma-Module at 1 offsets for a pattern sig ( 81 ec d0 02 00 00 a1 ) plaintext ( ....... )
Array Positions are: ( 1590 )
Arma GetThreadContext-Relative to EBP - RPM constant offset scan, offset 0x3365 sig len 0x20 sig ( 53 75 72 76 69 76 6f 72 57 32 5f 44 5a 00 00 00 52 6f 63 6b 65 74 5f 44 5a 00 00 00 53 75 72 76 ) plaintext ( SurvivorW2_DZ..****cket_DZ...Surv )
Arma GetThreadContext-Relative to EBP - RPM constant offset scan, offset 0x3472 sig len 0x20 sig ( 53 75 72 76 69 76 6f 72 32 5f 44 5a 00 00 00 00 52 6f 63 6b 65 74 5f 44 5a 00 00 00 53 75 72 76 ) plaintext ( Survivor2_DZ...****cket_DZ...Surv )
Arma GetThreadContext-Relative to EBP - RPM constant offset scan, offset 0x2e82 sig len 0x20 sig ( 53 75 72 76 69 76 6f 72 32 5f 44 5a 00 00 00 00 52 6f 63 6b 65 74 5f 44 5a 00 00 00 53 75 72 76 ) plaintext ( Survivor2_DZ...****cket_DZ...Surv )
Arma GetThreadContext-Relative to EBP - RPM constant offset scan, offset 0xcfff sig len 0x20 sig ( 61 63 68 65 64 20 74 6f 20 41 72 6d 61 21 00 00 00 42 45 43 6c 69 65 6e 74 2e 64 6c 6c 00 00 00 ) plaintext ( ached to Arma!...BEClient.dll... )
Arma GetThreadContext-Relative to EBP - RPM constant offset scan, offset 0xca3f sig len 0x20 sig ( 61 63 68 65 64 20 74 6f 20 41 72 6d 61 21 00 00 00 00 00 00 00 4e 69 63 65 2c 20 42 45 20 69 73 ) plaintext ( ached to Arma!.......Nice, BE is )
RPM every executable section on system with kickid 1102, sig len 0x57 sig ( 0c 02 00 00 e8 98 0c 00 00 83 c4 10 3b c3 74 0a 8b 4c 24 30 2b ce 8d 44 08 ee 83 c9 ff 8d 54 24 24 52 8b 54 24 1c 6a 04 89 4c 24 1c 89 4c 24 2c 8d 4c 24 1c 51 50 52 ff 15 ) plaintext ( ............;.t..L$0+..D......T$$R.T$.j..L$..L$,.L$.QPR.. )
RPM every executable section on system with kickid 1304, sig len 0x32 sig ( 66 65 65 70 6d 6b 6e 29 23 00 00 00 66 45 45 50 6d 4b 4e 29 23 00 00 00 19 45 45 50 29 23 00 00 ) plaintext ( feepmkn)#...fEEPmKN)#....EEP)#.. )
RPM every executable section on system with kickid 1304, sig len 0x64 sig ( 58 a3 3a 13 00 00 60 68 37 13 00 00 68 38 13 00 00 68 39 13 00 00 6a 01 e8 11 11 11 11 61 e8 44 44 44 44 60 68 37 13 00 00 68 38 13 00 00 68 39 13 00 00 6a 00 e8 33 33 33 33 61 ff 25 3a 13 00 ) plaintext ( X.:...`h7...h8...h9...j......a.DDDD`h7...h8...h9...j..3333a.%:.. )
Scan process with name firefox.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
Scan process with name chrome.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
Scan process with name opera.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
Scan process with name arma2oa.exe for a payload of length 80 sig ( 30 2e 37 2c 20 74 72 75 65 5d 3b 09 7d 3b 09 7d 20 66 6f 72 65 61 63 68 20 65 6e 74 69 74 69 65 73 20 27 41 6c 6c 56 65 68 69 63 6c 65 73 27 3b 20 68 69 6e 74 20 27 50 6c 61 79 65 72 73 20 61 72 65 20 6e 6f 77 20 76 69 73 69 62 6c 65 27 3b ) plaintext ( 0.7, true];.};.} foreach entities 'AllVehicles'; hint 'Players are now visible'; ) on detection kick with 1283
MD5-Scan by invoking proc (A,B)=(773e73,770410)
Scan Battleye-Module at 5 offsets for a pattern sig ( 8b 80 80 18 00 00 8b 08 52 8b 55 14 ) plaintext ( ........R.U. )
Array Positions are: ( 9d9334,1880,0,44,32 )
Force virtualprotect at arma offset 0x2b9277 len 0x451
Force virtualprotect at arma offset 0x2c964f len 0x452
Force virtualprotect at arma offset 0x3b9f64 len 0x453
web browser scans are also here
Code:
Scan process with name firefox.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
Scan process with name chrome.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
Scan process with name opera.exe for a payload of length 64 sig ( 7a 4d 61 72 6b 65 72 53 65 74 73 58 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 09 09 0a 0a 0a 0a 0a 0a 09 09 09 63 6c 65 61 72 4d 61 72 6b 65 72 73 28 29 3b 0a 0a 0a 0a 0a 0a 09 09 09 64 61 79 ) plaintext ( zMarkerSetsX.length > 0) {...........clearMarkers();.........day ) on detection kick with 1104
here's how our survival hack WOULD NORMALLY get detected.
Code:
Scan process with name arma2oa.exe for a payload of length 80 sig ( 30 2e 37 2c 20 74 72 75 65 5d 3b 09 7d 3b 09 7d 20 66 6f 72 65 61 63 68 20 65 6e 74 69 74 69 65 73 20 27 41 6c 6c 56 65 68 69 63 6c 65 73 27 3b 20 68 69 6e 74 20 27 50 6c 61 79 65 72 73 20 61 72 65 20 6e 6f 77 20 76 69 73 69 62 6c 65 27 3b ) plaintext ( 0.7, true];.};.} foreach entities 'AllVehicles'; hint 'Players are now visible'; ) on detection kick with 1283
and the last bit of info, an intuitive one.
Code:
Scan Battleye-Module at 5 offsets for a pattern sig ( 8b 80 80 18 00 00 8b 08 52 8b 55 14 ) plaintext ( ........R.U. )
Array Positions are: ( 9d9334,1880,0,44,32 )

with the verify:  [[BEBase+0x9d9334]+0x1880]+0]... = that sig
and again credits to sd333221, not me.