Arctic Combat hacks discussion!

[Trinityx]

What is this thread about?

This thread is about the different things you've learnt about AC, things that look interesting and theorys you have about this game.

My input to this thread.

First of all, I tried to learn how the game works, what AntiHacks it has, what DLLS do what and anything interesting.

So far I learnt that AC is using a modified version of Unreal tournament 2004 edition.


The following files in the above source code is relevant to AC:

009D4050  PUSH OFFSET 00D51A54                     UNICODE "BatteryNet.u"
009D405C  PUSH OFFSET 00D51A70                     UNICODE "BTData.u"
009D4068  PUSH OFFSET 00D51A84                     UNICODE "Core.u"
009D4074  PUSH OFFSET 00D51A94                     UNICODE "Editor.u"
009D4080  PUSH OFFSET 00D51AA8                     UNICODE "Engine.u"
009D408C  PUSH OFFSET 00D51ABC                     UNICODE "Fire.u"
009D4098  PUSH OFFSET 00D51ACC                     UNICODE "GamePlay.u"
009D40A4  PUSH OFFSET 00D51AE4                     UNICODE "GUI2K4.u"
009D40B0  PUSH OFFSET 00D51AF8                     UNICODE "GUIWarfare.u"
009D40BC  PUSH OFFSET 00D51B14                     UNICODE "GUIWarfareControls.u"
009D40C8  PUSH OFFSET 00D51B40                     UNICODE "GUIWarfareStyles.u"
009D40D4  PUSH OFFSET 00D51B68                     UNICODE "IpDrv.u"
009D40E0  PUSH OFFSET 00D51B78                     UNICODE "UnitTests.u"
009D40EC  PUSH OFFSET 00D51B90                     UNICODE "UnrealEd.u"
009D40F8  PUSH OFFSET 00D51BA8                     UNICODE "UnrealGame.u"
009D4104  PUSH OFFSET 00D51BC4                     UNICODE "UT2k4Assault.u"
009D4110  PUSH OFFSET 00D51BE4                     UNICODE "UTClassic.u"
009D411C  PUSH OFFSET 00D51BFC                     UNICODE "UTV2004c.u"
009D4128  PUSH OFFSET 00D51C14                     UNICODE "UTV2004s.u"
009D4134  PUSH OFFSET 00D51C2C                     UNICODE "UWeb.u"
009D4140  PUSH OFFSET 00D51C3C                     UNICODE "Vehicles.u"
009D414C  PUSH OFFSET 00D51C54                     UNICODE "WGame.u"
009D4158  PUSH OFFSET 00D51C64                     UNICODE "wMainPageTest.u"
009D4164  PUSH OFFSET 00D51C84                     UNICODE "WMission.u"
009D4170  PUSH OFFSET 00D51C9C                     UNICODE "WWeapons.u"
009D417C  PUSH OFFSET 00D51CB4                     UNICODE "WWeapons_Res.u"
009D4188  PUSH OFFSET 00D51CD4                     UNICODE "XAdmin.u"
009D4194  PUSH OFFSET 00D51CE8                     UNICODE "XEffects.u"
009D41A0  PUSH OFFSET 00D51D00                     UNICODE "XGame_rc.u"
009D41AC  PUSH OFFSET 00D51D18                     UNICODE "XInterface.u"
009D41B8  PUSH OFFSET 00D51D34                     UNICODE "XPickups.u"
009D41C4  PUSH OFFSET 00D51D4C                     UNICODE "XPickups_rc.u"
009D41D0  PUSH OFFSET 00D51D68                     UNICODE "xVoting.u"
009D41DC  PUSH OFFSET 00D51D7C                     UNICODE "XWeapons.u"
009D41E8  PUSH OFFSET 00D51D94                     UNICODE "XWeapons_rc.u"
009D41F4  PUSH OFFSET 00D51DB0                     UNICODE "XWebAdmin.u"

Obviously there are things that you wont bother looking at which is obvious for example "xAdmin.u" as you will not do anything/ gain anything from that file.

I started looking into Core.u as this seems to be the basis of the game, some things after looking sounded useful for hacks such as:

[Note that I used OlyDebug to find this]
Text strings referenced in BatteryNet.dll, item 582
  Address = 1072CE24
  Command = PUSH OFFSET 1093AABC
  Comments = UNICODE "rfReqUpdateWeaponDurability"

If you were to NOP this then the client wouldn't send the packet and therefore your weapons wouldn't lose their durability after/ during the usage of your gun/rifle etc.

Another thing that I thought was interesting is this:

 /* ShakeView()
Call this function to shake the player's view
shaketime = how long to roll view
RollMag = how far to roll view as it shakes
OffsetMag = max view offset
RollRate = how fast to roll view
OffsetRate = how fast to offset view
OffsetTime = how long to offset view (number of shakes)
*/
function ShakeView(vector shRotMag,    vector shRotRate,    float shRotTime,
                   vector shOffsetMag, vector shOffsetRate, float shOffsetTime)

If you were to redirect this function to your own function in your DLL then you wouldn't have to worry about any screen shakes you get in the game, also using this you can go into many different things if you look hard enough.

If you've got anything else to share, I'm more than happy to hear your input!

-Regards Trinityx

[Trinityx]

Or not and we can see fewer hacks, that's cool guys.

[[MPGH]Austin]

Or not and we can see fewer hacks, that's cool guys.

I removed the external download link, if you want people to see it upload the .rar to mpgh.

[Trinityx]

Doesn't matter, threads going to die anyway.

[Margherita]

Looks like you've learned a handful, good job

[Trinityx]

Thank you, do you know if vtables are detected or not?

[dino42]

Well why dont we start making a hack?

[Trinityx]

Well why dont we start making a hack?

That's what this thread is about dude, post anything you think is valuable and hopefully someone will start developing hacks, I'm currently in the process of learning C and therefore I'll only be making one within a months time or so.

   Text strings referenced in Engine, item 11278
  Address = 007CFC6D
  Command = PUSH OFFSET 00AAEE20
  Comments = UNICODE "WeaponReload"

[dino42]

Well i go start create 1 but VIP hack so selling if i post Public wil be patched quickly.

[zionsoldier]

Well i go start create 1 but VIP hack so selling if i post Public wil be patched quickly.

dude I got 2 keys for AC, you willing to trade the hack for keys? will not upload to public

[Trinityx]

dude I got 2 keys for AC, you willing to trade the hack for keys? will not upload to public

Zion, if you've got nothing to input into this thread don't post - you could have pmed him instead.

[Trinityx]

Well I'm sorry to hear that you're actually wanting money from a small game like this, with a bit of luck - after I've completed my course I'll have a logger to update my hack anyway.

[davidbarril]

AMIGO ONDE SE TOMA ESSES CURSO E É CURSO DE QUE ?

[Trinityx]

Text strings referenced in CShell, item 582
  Address = 1072CE24
  Command = PUSH OFFSET 1093AABC
  Comments = UNICODE "rfReqUpdateWeaponDurability"

  Text strings referenced in Engine, item 11278
  Address = 007CFC6D
  Command = PUSH OFFSET 00AAEE20
  Comments = UNICODE "WeaponReload"

  Search - Text strings referenced in Engine, item 6436
  Address = 008F3470
  Command = PUSH OFFSET 00C116BC
  Comments = UNICODE "GameManager"

  Search - Text strings referenced in Engine, item 6437
  Address = 008F347B
  Command = PUSH OFFSET 00C116D4
  Comments = UNICODE "WeaponManager"

  Search - Text strings referenced in Engine, item 6397
  Address = 008F12CB
  Command = PUSH OFFSET 00C11360
  Comments = UNICODE "APlayerController::GetViewTarget"

  Search - Text strings referenced in Engine, item 3702
  Address = 0089FE68
  Command = PUSH OFFSET 00BFEFE4
  Comments = UNICODE "TargetEyeHeight"
  
Search - Text strings referenced in Engine, item 3704
  Address = 0089FF67
  Command = PUSH OFFSET 00BFF010
  Comments = UNICODE "bFreeView"

  Search - Text strings referenced in Engine, item 3840
  Address = 008A352E
  Command = PUSH OFFSET 00BFFDEC
  Comments = UNICODE "RespawnTime"

[Trinityx]

I knew this would die..