Archlord Dupe Development

02/21/2008 22:43 Sageone#1
Calling all Developers and present hackers.

I am currently working on an Archlord dupe hack which to my knowledge was first discovered by thedynasty. It was worked on by Over and now its in production to becoming a nasty MoFo for archlord staff.

I will post news on its progress.

Now I know it won't go public because that means it'll become patched and we won't have anywhere to start from. So, in order for others to start using it I will give out hints but in the end you need to put in the work to actually be able to do it. No one is here to hold your hand so leechers you can just leave the forum now.

P.S. You can flame me all you want and I don't give a fck if you remain broke for the rest of your life.

First news coming soon.
02/22/2008 00:27 newproyect#2
now i got it i will post ir later im at work now
02/22/2008 09:48 coipu#3
It's unlikely that we can create an item from nothing, all anyone does with any of these hacks is substitute small pieces of info for others in the send packets. If you look in Malv's video (that second one he made) he briefly displays a text file which describes nearly all of how to mess around with the merchant. There is a lot more to an item than just the 16-23 range. I think it may be possible to sell 1 item and make the merch think you are selling 99 unfortunately i am thick as pigshite and it is taking me a long while to sus it out from the screenshot.


packet size for large hpot=56 variable range 32-55 so far i can only freeze item by swapping 40-47(which is the amount bit i think)

update2

okay i can buy 1 of anything from the store and get 99, still getting charged for 99 though so now we have to figure where the cost of the item is kept within the packet
02/22/2008 14:57 Sageone#4
Try buying two items consecutively with different prices. Then check the packets.
02/22/2008 15:18 Overdramatics#5
uhm i try to dupe gold and try this : i have 50k in my storage and 1 gold in my bag ...so than i start to sniff and put the 1 gold into my storage...stop sniffing and write down the code
than i take 1 gold out of my storage and into my bag ...and start sniff and do the same again
i put 1 gold into the storage and stop sniffing...
look the code and see ... 2 diffrent codes i think server sided ;D
humm and to yur theory coipu : uhm i try the same ;D
i want to buy 1 pot and wanna get 99 ...i think if we do it like Malv so later reset the codes..it maybe work^^
ill try it^^
good work guys and well post ur opinions and experiences in this thread pls^^
02/22/2008 21:10 Sageone#6
Been doing some testing...
[B]
Ok guys, I recommend all developers to get this software called BeyondCompare. I have Version 2 full. You can get 30 day trial. Anyways lok for it on google or piratebay.org and search in application. It allows you to compare 2 files or 2 folders.

So what I did was I copy pasted my 2 112 packets into 2 notepad files and compared them. Also I saw that when I want to move an item it creates 2 48 packets (send) and 2 112 packets (receive).

I started playing with them. Using Beyond compare I saw that there were differences in the 112 packets between lines 16-32 and 40-47. And differences in the 2 real 48 were 4 and 16-31. So what I wanted to do was send a 48 packet (that doesn't exist) to get an actual 112 packet (hence duping the item) - ? you might say.

Basically when you move the stones, each movement of a stone sends a 48 packet and receives a 112 packet. That's why you get 2 of 48s and 2 of 112s since 2 stones. When I did the client sided dupe, it remained client sided because I would be sending a 48 packet (my duped stone) and not receiving a 112 packet.

As I said before the 2 areas where there are differences in packet strings are 16-32 and 40-47.

I tested and the 40-47 codes for location. So depending on where I place the item, it changes this section.

The 16-32 however is most likely (just an assumption) coding for the item, most likely type, amount, etc. I tried using the 48 into search and 112 into modify but no luck as of yet. I tried replacing 16-32 and 16-31 (just in case).

Next what I did was I duped a stone but its client sided (remember). Then, I tried moving the duped stone and I would keep getting the same 48 packet except with a difference at 4. However the item wouldn't take the next inventory space (what I mean is it would "teleport" back to where I initially had it (meaning it wouldn't move at all).

However, I got a 48 code out of it and compared it to the other 48 codes I was sending (with the real stones). Here the differences were at 24-39 and 4. I tried real 16-31 into modify and fake into search. What happened I was able to move the real stone when I tried moving the fake, lol.:D

So for the long post but you can see I was busy.

Alright so in the end, I hope this helps some of you.

We are getting close I can feel it.

P.S. On the other hand, we might end up just getting client sided stuff, in that case we would need to change our approach entirely. Since in case we can't create items from others we might be able to change their properties such as price (value) or quantity like coipu is attempting now. ;)

Hope this helps and I'll check back soon to see if any of you have any ideas. ;)
02/23/2008 00:35 Sageone#7
This is my 2nd post in a row so read the first.

This one is for coipu.
I recommend you to buy 1 health pot and 99 health pots and move each one square down in inventory. Check the 112s and BeyondCompare them to see which might code for value (price) or quantity. Maybe you already got it I dunno.

Anyways, goodluck and will be back soon with more info and ideas.
02/23/2008 01:45 Sageone#8
Sorry guys, 3rd post in a row. In my opinion, the price part of the packet shouldn't change since your Hp pot doesn't change price does it? In order to find where that part of the packet that codes for price we need to buy 2 items from the auction house that are exactly identical (stats, type, etc.) and see where the packets differ that would probably yield the price most likely and the location (meaning the auction house or other player selling it or something like that). Happy hacking. Sorry I can't test all of this right now. Got exams Monday. I will still be coming back to check for any of your breakthroughs and/or progress and do a little hacking myself even though I got my tests.

Aaah! University sux!;)
02/23/2008 11:56 Overdramatics#9
uhm very good sage ^.^
so itry it with the AH and its only shit :D
uhm...first : ive bought 2 identically items

Problems : other place in AH , otehr place in ur inventory if u buy it , and other codes XD
so its quite diffrent^^
doesnt work .___.
thats the same like my golddupe-try

Storage:-------------inventory:
50.000gold-------------1 gold

50.000gold <-------------1gold (switch into storage)
50.001gold --------------0gold
packets save
50.001----1gold/back--->1gold
50.000<---------------1gold
50.001 ----------------0gold
save pakets

DIFFRENT !
Doesnt work...the pakets are diffrent with every try
02/23/2008 14:29 Sageone#10
Overdram, I believe we're working in the wrong direction. We need to follow coipu's idea. Basically hack the amount and price of an item.
02/23/2008 16:07 Overdramatics#11
yes but i wanna show u that this is unpossible^^
uhm...we can hack Codemasters and change server stats ;D
thats the right and most best way XDD
joke^^
uhm jes the price^^
i can explain all better if i can speak german xD
so muh ^^
02/24/2008 19:56 coipu#12
okay so the packet we are concerned with ie for a health potion is size 64 and is a SEND packet, and 56-63 is area where the price lives (i converted the hex back to decimal and sure enough 91 05 was in there which converts to 37125 the price of pot at tor fortress). the trouble is the price is the same for both 1 pot and 99 as i see, this area contains the price for one pot and the server must multiply by how many you buy.
please note , i tried switching the 56-63 area with another item like arrows but this freezes up the hp pots so i'm getting closer slowly.

THERE IS NO POINT PLAYING WITH RECIEVED PACKETS LIKE 112 THEY WILL ONLY AFFECT CLIENT SIDE NOT THE SERVER.
02/24/2008 21:14 Sageone#13
You're right about the send packets since we want the server to send us a packet back (receive). Once we figure out how to fiddle with these send packets, we'll be able to pull on the servers' strings. Thx for the info, gonna play with it tonight.
02/25/2008 07:55 MAXAR#14
good work guys ill try to hlp out as much i can but im thiking of somthing else to, where this packets location is? im trying to find out the exact location where the packets are saved in pc so mabe what we can do is change the location where they saved to somewhere else so that it doesnt efects the game and then in the exact location whe send ours so no need to send packets to server and get trackt down our urses. i thing this way our work it would be easeyer. not sure abut this theory but give out ur ideas!
thx


Quote:
Originally Posted by Sageone View Post
You're right about the send packets since we want the server to send us a packet back (receive). Once we figure out how to fiddle with these send packets, we'll be able to pull on the servers' strings. Thx for the info, gonna play with it tonight.
02/25/2008 18:30 Overdramatics#15
My BitDefender delete WPE PRO XDD
hmz must kick its ass XD
tomorrow i can help u again^^
mfg good works Over