[Release] Rohan Hacks

Sorien's Rohan Hack has been updated to be used with the latest 1.0.255 Rohan client. Below is how to fix your client.

What to do... ( [Only registered and activated users can see links. Click Here To Register...] )

Quote:

1. Well, basically you need the Rohan Game Client.

2. Then you should download OllyDBG v1.10

3. After following the step by step tutorial, make sure you back up your original rohanclient.exe.

4. Finally, save the new edited rohanclient.exe into your installed directory and launch the game from rohanclient.exe itself. Do not run Rohan via the launcher as it will just repatch your edited rohanclient.exe

Step by Step Tutorial

Quote:

Make sure you do this before [anything else].

Initialize Code Cave
Go to 00427A90 and change the command there to RETN.

Now highlight and select from address 00427A91 to 00427C09, right click, Binary -> Fill with NOPs.

Rohan Hack #1 - Enable GM Commands

First, go to the address 00411095 you should see this:
MOVZX EAX,BYTE PTR SS:[ESP+A9]

So you create a call at that address to a code cave you found/created, in this example, I'll be using the address 00427A92 as my code cave.

So you change the code at 00411095 to:
CALL 00427A92

then you go to 00427A92 and write this code:
MOV BYTE PTR SS:[ESP+0A9],0FA
MOVZX EAX,BYTE PTR SS:[ESP+0A9]
RETN

which changes your access level to FA which is the highest level admin.

Rohan Hack #2 - Increased Damage

Normally when you attack, you tell the server to start an attack on a target and the server handles everything from there, updating you when you attack and what not.

But there's a way to make attacking client-side, it's a pretty simple exploit, that once built into the game, can become a very good hack.

This hack does not increase your damage, it just makes you attack extremely fast.

You'll need to hack two different things for this one, you need to disable the animations for attacking while its in use and the actual attacking.

(If you leave the animation on, it won't work correctly.)

This is probably going to be a long one so bear with me. :x

Disable Attack Animation
Go to 0048AA0B and change the command there to JE 0048AA9D .

This will disable the attack animation for players. (Yourself and others)

Damage Hack

For this hack, I'll be using 00427AA4 as the start of the code cave.

Go to 00487E51 and change that code to CALL 00427AA4.
This command will jump to our custom code.

Go to 00487E57, right click it, go to Binary, and Fill With NOPs.
This change will disable the client from setting the current attack state.

Go to 00487E87, right click it, go to Binary, and Fill With NOPs.
This change will disable attack speed, so your next attack is called instantly.

Now go to 00427AA4 and put this code. (Make sure it's perfect)

XOR EDI,EDI
MOV EDX,DWORD PTR DS:[0AF62FC]
MOV EAX,DWORD PTR DS:[0AF62F8]
MOV ECX,DWORD PTR DS:[0AC7FB8]
PUSH EDX
PUSH EAX
PUSH 0
PUSH 1308
CALL 00407050
MOV EDX,DWORD PTR DS:[0AF62FC]
MOV EAX,DWORD PTR DS:[0AF62F8]
PUSH EDX
PUSH EAX
LEA ECX,DWORD PTR SS:[ESP+1C]
PUSH ECX
MOV ECX,DWORD PTR DS:[0AC7FB8]
PUSH 1307
CALL 00407050
INC EDI
CMP EDI,4
JL SHORT 00427AA6
MOV EDI,EBP
RETN

This code sends 4 sets of stop attacking / start attacking commands to the server.

The 4 in CMP EDI, 4 is how many loops it does, so you can change it to suit your needs.
(I dont suggest going over 20, 4 should be the perfect number for everyone.. Going too high may make you do less damage.)

Rohan Hack #3 - Bypass Patcher

Go to 0043EFB1 in the code area, right click it and go to Follow in dump -> Immediate Constant.

Now in the dump area, change [Only registered and activated users can see links. Click Here To Register...] to [Only registered and activated users can see links. Click Here To Register...]

Highlight what you just changed, right click it and click Copy to executable file, right click the new window and click save file.

Now press CTRL F2.

Once its restarted, go to 0043EF20 and change the code there to MOV EDX, 9FB1CC

Also, make sure Fill with NOPs is checked in the assemble window.

Go to 0043EF48 and right click then Binary -> Fill with Nops.

Right click the CPU window, Copy to Executable -> All Modifications.

Click Copy All, and then in the new window, right click the code area and click Save file.

Credits: [Only registered and activated users can see links. Click Here To Register...]