True Speedhack

Discussion on Helbreath Hacks. New ones Released. and how to work them.
tommu00
Regular
Posts: 47
Joined: Mon Feb 09, 2004 3:31 pm

Post by tommu00 »

This hack bypasses almost entirely the server's speed-hack detection as they are flawed in many ways.
With this ready-made client, by changing IP-addresses and such to connect to target server, you can do the following:

-Hit 7 times in a row, then keep(necessary) about 1sec pause(to be safe), and then again repeat < no cl, and if cl, it wont get logged :)
-Cast magics very fast (1sec pause must occur between last cast and next precast, otherwise cl and gets logged)
-Walk and run like wind from hell :D Err just check it out and you'll know :) < no cl in any case

(invihack, fast logout and -restart included)

Happy hacking :)

Code: Select all

"timeGetTime()'s return value" in eax is set to 0 which is sent to server and cleverly used in part of the server speedhack detection functions
0040592F |> 33C0 XOR EAX,EAX

These next parts of code do capture one call to timeGetTime() and increase it's value by 20(ms) thus the
client runs faster

00496A5C |. BE 62D44900 MOV ESI,oma127Dw.0049D462;put esi to point to my function instead of timeGetTime()
00496A61 |. 90 NOP;nopped "unused" byte

0049D462 . FF15 64724B00 CALL DWORD PTR DS:[<&winmm.timeGetTime>]; call to timeGetTime() pointed by import table
0049D468 . 0305 B8D44900 ADD EAX,DWORD PTR DS:[49D4B8];add value from last call to this hijacked function, to the retun value of timeGetTime()
0049D46E . EB 63 JMP SHORT oma127Dw.0049D4D3;continue code caveat as this part isnt big enough to hold the whole code

0049D4D3 > 8305 B8D44900 >ADD DWORD PTR DS:[49D4B8],14;add 0x14 to the memory address used earlier
0049D4DA . C3 RETN;return from this call to 0x496A6F

Link: <a href='http://ten.byethost12.com/' target='_blank'>http://ten.byethost12.com/</a> (at the bottom of the page, "Speed Client")

EDIT-->
For 3.51 (yes, this information is late)
<--EDIT
Simpa
Regular
Posts: 40
Joined: Sun Dec 18, 2005 7:34 pm

Post by Simpa »

It's packed and i tryed to unpack but it just get fucked up... :S Come on unpack it for meh please


O.o fuck my fault it aint packed sheeshh sry
''If you can't beat them, join them.
Drajwer
&lt;3 bd long time
Posts: 841
Joined: Fri Dec 10, 2004 3:24 pm

Post by Drajwer »

Simpa wrote: It's packed and i tryed to unpack but it just get fucked up... :S Come on unpack it for meh please


O.o fuck my fault it aint packed sheeshh sry
owned
<img src='http://img440.imageshack.us/img440/2627/15pt.jpg' border='0' alt='user posted image' /><br><br>HBPolska characters:<br><br>Hellios 150+ Aresden Hero Mage<br>TheBill 120 Aresden plrider<br>Kill_Me 100 Full-Hero plrider<br>Rockeater 110+ Aresden Plate Mage<br><br><a href='http://www.helbreath.org' target='_blank'>http://www.helbreath.org</a> come and play (250 ppl online)
noel
Member
Posts: 102
Joined: Sat Oct 30, 2004 4:40 pm

Post by noel »

this doesnt work, i change ip and wont connect to any servers zz
EvilHit
Loyal fan
Posts: 356
Joined: Sun Jan 16, 2005 3:20 am

Post by EvilHit »

maybe u need to change the server mode u n00b
noel
Member
Posts: 102
Joined: Sat Oct 30, 2004 4:40 pm

Post by noel »

dude zz the prob is it says world sserver not activated, maybe its blocked already
Dshaked
&lt;3 bd long time
Posts: 747
Joined: Tue Oct 11, 2005 6:40 pm

Post by Dshaked »

Maybe guys are changed WL Server name? :D
Old Helbreath Nemesis Player<br><img src='http://img232.imageshack.us/img232/9784/dshakedqc5.jpg' border='0' alt='user posted image' /><br><img src='http://img232.imageshack.us/img232/6475 ... barqj0.jpg' border='0' alt='user posted image' /><br><a href='index.php?showtopic=7107&hl=' target='_blank'>MainServer Hexing Tutorial</a><br><a href='index.php?showtopic=7663&hl=x-mas' target='_blank'>My Files</a>
tommu00
Regular
Posts: 47
Joined: Mon Feb 09, 2004 3:31 pm

Post by tommu00 »

You worms! No positive feedback yet ! >:(
Sheesh, just kiddin :P

But still, I'd like to (aye, I sure would) hear some comments about the speed in-game, the client (as far as I remember) has these:

-Destination MLServer IP: 127.0.0.1
-Destination MLServer port: 2848
-World server name: WS1


And believe when I say, It Does Work! You can run like you had speederxp or such timegettime-fastener program running and you see the character animations (byproduct) go faster as well.
No-1
Loyal fan
Posts: 291
Joined: Sun Sep 12, 2004 5:57 am
Location: tdy

Post by No-1 »

i changed to ip to this client but i cant connect the seconds just keep running when i type in acc and pw. I guess something else is changed on that server how do i find it and change it in this speed hack client?
Support Outpost@HBTop50<br><a href='http://hbtop50.berserkvision.com/in.php?id=582' target='_blank'>Outpost@HBTop50</a><br>
pertti1
just visiting
Posts: 8
Joined: Sat Jan 22, 2005 7:33 pm

Post by pertti1 »

this is imba <3
ADDKiD
&lt;3 bd long time
Posts: 967
Joined: Tue Jul 12, 2005 8:07 pm
Location: Washington, USA
Contact:

Post by ADDKiD »

Good Work Tommu. I got it to work on my own server. Congrats. If I could sticky it. I would...
bone-you
Spamtastic
Posts: 1310
Joined: Wed Mar 16, 2005 3:12 am

Post by bone-you »

Sounds like the hacks are getting better and harder to catch. This all can still be caught server sided through timers on last action though. If it works, then congrats :)
<img src='http://www.helbreathx.net/sig/sig.jpeg' border='0' alt='user posted image' /><br><a href='http://mafia.cheats4us.org/index.php?x=231030' target='_blank'>#1 on Mafia :D</a><br><!--QuoteBegin-Slipknight+--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td><b>QUOTE</b> (Slipknight)</td></tr><tr><td id='QUOTE'><!--QuoteEBegin-->100mb Internet, burstable too 10GB oc192<br>his speed can go up too 10gbs<br>...<br>Yes my car can have a top speed of 1000mph<!--QuoteEnd--></td></tr></table><div class='signature'><!--QuoteEEnd--><br>^^ I wonder where the retard went to.
ADDKiD
&lt;3 bd long time
Posts: 967
Joined: Tue Jul 12, 2005 8:07 pm
Location: Washington, USA
Contact:

Post by ADDKiD »

To an extent though. If I go Idle, I crash, if I run fast and all that, then stop, I crash...
jonisan
Member
Posts: 164
Joined: Sat Jan 07, 2006 1:14 pm
Location: Fin

Post by jonisan »

Any how to change the name of wl server.
And the port.
<img src='http://i72.imagethrust.com/i/160466/newww.png' border='0' alt='user posted image' /><br><br><img src='http://img154.imageshack.us/img154/9360/tagi7wk.png' border='0' alt='user posted image' /><br><br><img src='http://img446.imageshack.us/img446/6094/uusi0xr.png' border='0' alt='user posted image' /><br><br><img src='http://img73.imageshack.us/img73/9738/xpuser3xy.png' border='0' alt='user posted image' /><br><br><b><u><span style='color:red'>Noobie List:</span></u></b><br><span style='color:blue'><i>BlueChristmas</i></span>
projectx
Loyal fan
Posts: 201
Joined: Sun Jul 16, 2006 12:01 pm

Post by projectx »

Code wasent do by tommu
Post Reply