[Info] Attack Speed!

[syntex]

Hey all,
last hour I tryt all to find the Attack Speed.

Here is what Ive got:
The Attack speed is hardly protected , like all stuff that could be hacked.
It changes every secon beetwen 100 , and if you change it will fighting you will have a fast attack but your game crash after 20 secs.

I think we have to figure out the algorythm.

Another way would be to code a Sniffer! And then find out the Cryption make a table of it and find the XOR Key. When this is done we can easy hack Skills/Teleports/Maybe Enchanting/Maybe CardGame/Attack Speed.

C++ Snippet [ JUST RECV PACKETS / NOT DE/EN-CRYPT! ]

int WINAPI MyRecv(SOCKET s, const char* buf, int len, int flags)
{
    Sleep(100);
    DWORD sub_52F060 = 0x52F060;
 
       printf("RECV: 0x%0.2x LÖL: %snSize: %xn",buf,buf,len);

    _asm 
     { 
          mov     storeECX, ecx 
     }
    _asm 
     { 
          mov     edx, flags 
          push    edx           ; flags 
          mov     edx, len 
          push    edx             ; len 
          mov     edx, buf 
          push    edx             ; buf 
          mov     edx, s 
          push    edx             ; s 
          mov     ecx, storeECX 
          call    sub_52F060     ; Call Procedure 
    }
}

void RECV()
{
    Sleep(2000);
    Intercept(INST_CALL,0x0052CB81,(DWORD)MyRecv,5);        
}

Why do I code a sniffer?
cause WPE and rpE cant find packets, so I inject a sniffer that will work 100%

Also found out that you can wear Lv100 items when you are Lv1.. but only for 1 sec..

now you think that sucks, no it doesnt... we could code a dll that switch fast beetwen 2 weapons, try the weapon switch its pretty fast .. cause the dmg the lv100 wpn has will be done in that 1 sec ^^

[coolninja]

woah, you are the first one who are talking about real hacking rohan,
all i could find on google is about Bot,
I used to hack maple story with CE and asm code.
I wonder if i can help a bit or not,
im currently still finding a way to create a godmode in rohan,
my idea is either make all damage to miss or we freeze the auto-healing timer to 0.
all the thing i can do now with CE are locally...=.=
please advice me for anything, thanks and have a nice day.

[Dj_Wiki_Wiki]

Wouldn't all of this be client-sided? Don't know why the game files ain't protected :S

[rashi]

try to find out how the Refiner works would be more helpfull if it always succeds :P refining lvl 62 Unique is pretty expensive -.-

[Dj_Wiki_Wiki]

I think with when refining the server decides if its successful or not.

[xiita]

Really hope its possible to make speed hack....

Coz it have started a anti-bot contest whit non botters to find botting ppl

Still i think that we have the smarter dudes on ower side :-)

so i cant wait untill speed attack comes :-)

allsaw good 4 ppl that cant play 24/7 to have a chanse to lvl up ^^

\ Thx alot boys keep going strong ;-) .... regards Tomas

[syntex]

@Rashi,
the CardGame and the Refiner are LUCK! you cant get a algorythm for that. It depends on luck!. But there may is a exploit to evoid that the weapon down grades or even fail.

@DjWiki
I think you dont know how it works, but I give you a explain how:
Your Client use to send packets to the Server to say "HEY I ATTACKED A MOB!" , the server sends the packet back then to show you the dmg. Now the trick with CE is making the Value higher so you will send your packets faster (dont works in some MMORPGS, in some it does) .

[Djinny]

haha good luck! tell us if u have success

[syntex]

I will, if you are intressted to find this address by your self.

1 » Download CheatEngine 5.4
2 » Make Settings ( use my otherwise it will take ages! )
»
3 » Get to different Weapons Ingame (example Weapon Speed Medium and Fast)
4 » Put on the Mediuem Weapon and search for Unknown Inital Value
5 » When the search finished, change your Weapon to Fast and search for Value Increased (now you say why the value does decrease on character info, easy it just shows it like this)
6 » When you finished the search put on the Medium Speed Weapon and search for Decreased Value
7 » Repeat this till 10 results left
8 » Change Weapons and look which Value changes on Header (example Value was 1520000 before and goes to 1720000)
9 » When you found the 2 Values, both got the same Value (they are contiously switching) make Hotkey on them with W and change the Value the Fast Weapon (or equip a very fast weapon to get header) if you change the Header to high = crash , but you will crash after 2minutes anyway

good luck!

[Djinny]

i just came home from work, im willing to help =)

i try my best

[bloodx]

Syntex when you use my source dont forgot that the people need to change this :P

Intercept(INST_CALL,0x0052CB81,(DWORD)MyRecv,5);
call sub_52F060 ; Call Procedure
DWORD sub_52F060 = 0x52F060;

cuz this addresses not for Rohan h3h3 xD

you can use this source ,too for SEND packets easy... only need the send address :P

0x00A56B1C = WSARecv
0x00A56B24 = WSASend(?)
0x00AA3228 = WSASend

there are many send/recv strings try to call them maybe you get something like sendAttack =P

[qtimporta]

any news on this?
any1 could find a speed hack or anything?

[nosseir63]

Originally Posted by syntex

7 » Repeat this till 10 results left
8 » Change Weapons and look which Value changes on Header (example Value was 1520000 before and goes to 1720000)
good luck!

you made it? i mean you got a Value of attack speed? plz if u did tell me it...cuz my pc Freez when i made Scan Type ( unknown Initial Value )...i need make it ( Value Betwwn )...then results will descrease and scan not freez my PC.....thx

[bluetoast]

Send me a pm. I made a couple hacks myself, like Noclip, and runspeed(Both Really easy). =]

Heres one example.
Noclip(old): 0045888b DEC --> INC

Its very comical when your an archer, and you stand in some sort of doodad like a tree, or underground and bot standing in one place. You see arrows flying from the ground or from walls.

You can find protection at these lines (old)

|- Signature 77073096 found at offset 0064521C (VA: 00A4521C)
|- Signature ee0e612c found at offset 00645220 (VA: 00A45220)
|- Signature 990951ba found at offset 00645224 (VA: 00A45224)
|- Signature 076dc419 found at offset 00645228 (VA: 00A45228)
|- Signature 706af48f found at offset 0064522C (VA: 00A4522C)
|- Signature e963a535 found at offset 00645230 (VA: 00A45230)
|- Signature 9e6495a3 found at offset 00645234 (VA: 00A45234)
|- Signature 0edb8832 found at offset 00645238 (VA: 00A45238)
|- Signature 79dcb8a4 found at offset 0064523C (VA: 00A4523C)
|- Signature e0d5e91e found at offset 00645240 (VA: 00A45240)
|- Signature 97d2d988 found at offset 00645244 (VA: 00A45244)
|- Signature 09b64c2b found at offset 00645248 (VA: 00A45248)
|- Signature 7eb17cbd found at offset 0064524C (VA: 00A4524C)
|- Signature e7b82d07 found at offset 00645250 (VA: 00A45250)
|- Signature 90bf1d91 found at offset 00645254 (VA: 00A45254)
|- Signature 1db71064 found at offset 00645258 (VA: 00A45258)
|- Signature 6ab020f2 found at offset 0064525C (VA: 00A4525C)
|- Signature f3b97148 found at offset 00645260 (VA: 00A45260)
|- Signature 84be41de found at offset 00645264 (VA: 00A45264)
|- Signature 1adad47d found at offset 00645268 (VA: 00A45268)

[syntex]

look my attach!