[Spyglass Notification Thread] I will post here about ongoing changes with Spyglass.

I am creating this thread to help script developers keep an eye on the largest used antihack in arma 3.

This thread will contain new patches and new information about spyglass.

Posts for Ideas / Proof of Concepts for bypasses are welcome here.

Notice: All spyglass updates will be coming from the extDB build (latest version)

Current Version: 3.1.4
Locked Variables:

Code:

W_O_O_K_I_E_ANTI_ANTI_HAX
W_O_O_K_I_E_FUD_ANTI_ANTI_HAX
E_X_T_A_S_Y_ANTI_ANTI_HAX
E_X_T_A_S_Y_Pro_RE
E_X_T_A_S_Y_Car_RE
DO_NUKE
JxMxE_spunkveh
JxMxE_spunkveh2
JxMxE_spunkair
JJJJ_MMMM___EEEEEEE_LLYYSSTTIICCC_SHIT_RE
JJJJ_MMMM___EEEEEEE_LLYYSSTTIICCC_SHIT_RE_OLD
JJJJ_MMMM___EEEEEEE_SPAWN_VEH
JJJJ_MMMM___EEEEEEE_SPAWN_WEAPON

Blocked Cheatengine Variables

Code:

RscDisplayGetReady
RscDisplayInventory
RscDisplayLoadMission
RscDisplayInterrupt
RscDisplayOptionsVideo
RscDisplayOptions

Blocked Dialogs:

Code:

display 3030
display 64 control 101
display 162
display 129
RscDisplayRemoteMissions
RscDisplayDebugPublic
display 148
RscDisplayArsenal
display 125 //   @gladtwoown
RscDisplayInsertMarker (executer)

Detected Variables:

Code:

JxMxE_hide
JME_Keybinds
JME_has_yet_to_fuck_this_shit
JME_deleteC
JME_Tele
JME_ANAL_PLOW
JME_M_E_N_U_initMenu
JME_M_E_N_U_hax_toggled
W_O_O_K_I_E_FUD_Pro_RE
W_O_O_K_I_E_FUD_Car_RE
W_O_O_K_I_E_FUD_Car_RE
JxMxE_Veh_M
JxMxE_LifeCash500k
W_O_O_K_I_E_FUD_FuckUp_GunStore
W_O_O_K_I_E_FUD_M_E_N_U_initMenu
W_O_O_K_I_E_FuckUp_GunStore_a
JME_KillCursor
JME_OPTIONS
JME_M_E_N_U_fill_TROLLmenu
ASSPLUNGE
FOXBYPASS
POLICE_IN_HELICOPTA
JxMxE_EBRP
W_O_O_K_I_E_M_E_N_U_funcs_inited
Menu_Init_Lol
E_X_T_A_S_Y_Atm
W_O_O_K_I_E_Pro_RE
W_O_O_K_I_E_Debug_Mon
W_O_O_K_I_E_Debug_1337
Veh_S_P_A_W_N_Shitt
sfsefse
tw4etinitMenu
tw4etgetControl
JxMxEsp
JxMxE_GOD
JxMxE_Heal
efr4243234
sdfwesrfwesf233
sdgff4535hfgvcxghn
adadawer24_1337
lkjhgfuyhgfd
E_X_T_A_S_Y_M_E_N_U_funcs_inited
dayz_serverObjectMonitor
fsfgdggdzgfd
fsdddInfectLOL
Wookie_List
JxMxE_TP
Wookie_Pro_RE
Wookie_Car_RE
Wookie_Debug_Mon
faze_funcs_inited
advertising_banner_infiSTAR
atext_star_xa
Monky_hax_dbclick
qopfkqpofqk
debug_star_colorful
AntiAntiAntiAntiHax
antiantiantiantih4x
JxMxE_Infect
hub
scrollinit
gfYJV
Lystic_LMAOOOOOOOOOOOOOOOOOOO
Lystic_Re
Lysto_Lyst
E_X_T_A_S_Y_Keybinds
Menulocations
Lystic_Init
scroll_m_init_star
exstr1
pathtoscrdir3
Monky_funcs_inited
JxMxE_secret
Monky_initMenu
player_zombieCheck
E_X_T_A_S_Y_Recoil
godlol
playericons
abcdefGEH
wierdo
go_invisible_infiSTAR
serverObjectMonitor
enamearr
initarr3
locdb
sCode
infAmmoIndex
nukeDONEstar
Wookie_List
Wookie_Pro_RE
FUCKTONIC
E_X_T_A_S_Y_FuckUp_GunStore_a
E_X_T_A_S_Y_Cash_1k_t
E_X_T_A_S_Y_Cash_a
E_X_T_A_S_Y_LicenseDrive
E_X_T_A_S_Y_Menu_LOOOOOOOOOL
Metallica_vehicleg0dv3_infiSTAR
JJJJ_MMMM___EEEEEEE_INIT_MENU
JJJJ_MMMM___EEEEEEE_GAPER
JJJJ_MMMM___EEEEEEE_SMOKExWEEDxEVERYDAY_BUM_RAPE
JJJJ_MMMM___EEEEEEE_OPTIONS
JJJJ_MMMM___EEEEEEE_M_E_N_U_fill_Target
E3p
Jesus_MODE
ESP
MissileStrike
AL_Liscenses
NoIllegal
NoWeight
m0nkyaatp_sadksadxa
m0nkyaatp_RANDSTR
myvar23
player_adminlevel
TNK
I_like_turtles
BIGM
Does_Tonic_Like_to_take_Turtle_penis_in_the_ass_LODESTARS
Does_Tonic_Like_to_take_Turtle_penis_in_the_ass_LODESTAR1
GMod
No_No_No_Tonic_likes_A_Big_Fat_Sheep_Cock_Right_in_the_bum_G0d_Mode
Sload
T3le
life_no_injection
Tonic_has_a_gaping_vagina
my_anus_hurtz
aKFerm
aKMMenu
aKTitans
aKLikeaG0d
riasgremory_G0d_Mode
aKCarG0d
riasgremory_Car_Jesus
aKE5p
riasgremory_isseilol
aKPMark
riasgremory_Noobs
riasgremory_Bitches
riasgremory_Map_Markers
aKUnMmo
jenesuispasuncheateur_unamo
aKVoit
Loljesaispasquoiecriremdr
isseigremory
gremorysama
aKTaCu
aKCardetroy
aKGetKey
aKKillcursor
aKNoEscort
aKEscort
aKtroll
aKTPall
aKUnrestrain
aKNoEscortMe
aKNoTaze
aKJailplayer
aKLisense
riasgremory_titans_shit_reold
Tonic_merde
jaimepaslepoisin_HLEAL
TTTT_IIII___TTTTTTT_RAP_FR
TTTT_IIII___TTTTTTT_REPGA
TTTT_IIII___TTTTTTT_REPGAs
jaimepaslepoisin_HLEAL
Root_Main4
Root_Pistol4
Root_Rifle4
Root_Machinegun4
Root_Sniper4
Root_Launcher4
Root_Attachement4

Detected Scripts:

Code:

No Recoil

Code Used When Detected:

Code:

[[profileName,getPlayerUID player,"REASON"],"SPY_fnc_cookieJar",false,false] spawn life_fnc_MP;
[[profileName,"REASON"],"SPY_fnc_notifyAdmins",true,false] spawn life_fnc_MP;
sleep 0.5;
["SpyGlass",false,false] call _endM;

note: _endM is bis_fnc_endMission

Notes on recent changes:

Code:

Removed Spy_cfg_isEnabled (anticheat is always running)
Added more menus
Modified No recoil check

Notes on how to hide code from variable scanner:

Code:

//Detected version
JME_OPTIONS = "Testing Variable Detection!";
hint JME_OPTIONS;

//Undetected Version - example code with variables that would otherwise be detected
with uiNamespace do {
     JME_OPTIONS = "Testing Variable Detection!";
     hint JME_OPTIONS;
};

As tonic stated below:

Code:

RscDisplayMPInterrupt

is scanned for its controls. Don't use POOP.pbo or Extasy's PBO anymore

This method will only work with code snippets and not entire menus so be cautious!

Spyglass GITHUB: https://github.com/TAWTonic/Altis-Li...Altis/SpyGlass

Any changes I missed? PM me (do not post here please, I would rather not have a wall of spam between updates)
Anything you would like to add? Do some research and post your findings here!

Check Below For Updates

@Lystic ahh I see what you did there

Nice!

Don't forget about the RscDisplayMPInterrupt, it's validated so that things like poop.pbo that use Kronzky's SP Cheat Menu are detected.

Code:

_children = [configFile >> "RscDisplayMPInterrupt" >> "controls",0] call BIS_fnc_returnChildren;
_allowedChildren = [
"Title","MissionTitle","DifficultyTitle","PlayersName","ButtonCancel","ButtonSAVE","ButtonSkip","ButtonRespawn","ButtonOptions",
"ButtonVideo","ButtonAudio","ButtonControls","ButtonGame","ButtonTutorialHints","ButtonAbort","DebugConsole","Feedback","MessageBox"
];

{
	if(!((configName _x) in _allowedChildren)) exitWith {
		[[profileName,getPlayerUID player,"Modified_MPInterrupt"],"SPY_fnc_cookieJar",false,false] spawn life_fnc_MP;
		[[profileName,"Devcon like executor detected"],"SPY_fnc_notifyAdmins",true,false] spawn life_fnc_MP;
		sleep 0.5;
		["SpyGlass",false,false] call _endM;
	};
} foreach _children;

Also note that with newer versions SPY_fnc_xxx functions don't generally matter.
Keep up the great work guys!

Originally Posted by Tonic-_-

Don't forget about the RscDisplayMPInterrupt, it's validated so that things like poop.pbo that use Kronzky's SP Cheat Menu are detected.

Code:

_children = [configFile >> "RscDisplayMPInterrupt" >> "controls",0] call BIS_fnc_returnChildren;
_allowedChildren = [
"Title","MissionTitle","DifficultyTitle","PlayersName","ButtonCancel","ButtonSAVE","ButtonSkip","ButtonRespawn","ButtonOptions",
"ButtonVideo","ButtonAudio","ButtonControls","ButtonGame","ButtonTutorialHints","ButtonAbort","DebugConsole","Feedback","MessageBox"
];

{
	if(!((configName _x) in _allowedChildren)) exitWith {
		[[profileName,getPlayerUID player,"Modified_MPInterrupt"],"SPY_fnc_cookieJar",false,false] spawn life_fnc_MP;
		[[profileName,"Devcon like executor detected"],"SPY_fnc_notifyAdmins",true,false] spawn life_fnc_MP;
		sleep 0.5;
		["SpyGlass",false,false] call _endM;
	};
} foreach _children;

Also note that with newer versions SPY_fnc_xxx functions don't generally matter.
Keep up the great work guys!

Welcome to the dark side

Lystic caught you with my .paa in your a3 directory! I'm honoured u would use my cheats!

Originally Posted by Jme

Welcome to the dark side

Lystic caught you with my .paa in your a3 directory! I'm honoured u would use my cheats!

I only had the image there to detect the menu. I like to minimize errors as much as possible because bad coding and 1352 errors across my screen drive me nuts. If I wanted to cheat I wouldn't use script, I can do a lot of evil stuff with the source code for the engine, scripting would be an insult >

Originally Posted by Tonic-_-

I only had the image there to detect the menu. I like to minimize errors as much as possible because bad coding and 1352 errors across my screen drive me nuts. If I wanted to cheat I wouldn't use script, I can do a lot of evil stuff with the source code for the engine, scripting would be an insult >

"Scripting would be an insult"

Me: "Still bypassed his anticheat in under 5 minutes of research" (that is, post update

)

Originally Posted by Tonic-_-

I only had the image there to detect the menu. I like to minimize errors as much as possible because bad coding and 1352 errors across my screen drive me nuts. If I wanted to cheat I wouldn't use script, I can do a lot of evil stuff with the source code for the engine, scripting would be an insult >

You show me a memory cheat with a nuke, and I'm sold!

I can only apologize about the state of the menus I force upon you, they are mainly Wookies functions and design with some Extasy code on top, what could be worse

Maybe sometime i will release an actual menu I coded, I think you would be proud

Update

Detected Displays:

Code:

display 69
display 19
display 71
display 45
display 132
display 32
display 165
display 157
display 2727
RscDisplayInsertMarker

More Detected CheatEngine Variables:

Code:

RscDisplayAVTerminal
RscDisplayConfigureAction
RscDisplayConfigureControllers
RscDisplayControlSchemes
RscDisplayCustomizeController
RscDisplayDebriefing
RscDisplayDiary
RscDisplayGameOptions
RscDisplayJoystickSchemes
RscDisplayLoading
RscDisplayMicSensitivityOptions
RscDisplayOptionsAudio
RscDisplayOptionsLayout
RscDisplayStart
RscDisplayVehicleMsgBox

Update!

Detected Display:

RscDisplayTemplateLoad
findDisplay 30

Update 9-14-2014

Update Detected Displays:

Code:

display 30

Code:

[] spawn {
	waitUntil {!isNull (findDisplay 30)};
	[[profileName,getPlayerUID player,"MenuBasedHack_DISPLAY_30"],"SPY_fnc_cookieJar",false,false] spawn life_fnc_MP;
	[[profileName,"Menu Hack: DISPLAY 30"],"SPY_fnc_notifyAdmins",true,false] spawn life_fnc_MP;
	sleep 0.5;
	["SpyGlass",false,false] call compile preprocessFileLineNumbers "\a3\functions_f\Misc\fn_endMission.sqf";
};

For me that work !

but i dont use CE

RscDisplayOptionsVideo

Originally Posted by extasy hosting

For me that work !

but i dont use CE

Maybe your on an older version of Spyglass?

Originally Posted by Lystic

Maybe your on an older version of Spyglass?

No on 3.1.4.5... Probably my .exe

Originally Posted by extasy hosting

No on 3.1.4.5... Probably my .exe

the latest patch was done literally yesterday. unless you are hosting it yourself i doubt its the latest

[Spyglass Notification Thread] I will post here about ongoing changes with Spyglass.

Post a Reply

Similar Threads

Tags for this Thread