How to create..SpeedHack with cheat engine..

[kuma96]

Hi everyone i am looking for a guide for a speedhack in bdo ..
I have searched for many places but never a jus .. and the post is too old ..
or maybe something similar to understand I have to find the right values.

[__chkstk]

Hello, here is a simple tutorial for you.

First, scan this:

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

BlackDesert64.exe+2BE95E - 48 8B 0D 53A78803     - mov rcx,[BlackDesert64.exe+3B490B8] { (0) }
BlackDesert64.exe+2BE965 - 48 85 C9              - test rcx,rcx
BlackDesert64.exe+2BE968 - 0F84 23010000         - je BlackDesert64.exe+2BEA91
BlackDesert64.exe+2BE96E - 80 3D B8FB8303 00     - cmp byte ptr [BlackDesert64.exe+3AFE52D],00 { (0),0 }
BlackDesert64.exe+2BE975 - 0F85 16010000         - jne BlackDesert64.exe+2BEA91

So, as you can understand, [BlackDesert64.exe + 3B490B8] gonna give my local. (It seems 0 because Im not in the game.)

So, now you need to find movespeed offsets. For this, your brother took a signature for automatically find these necs offsets...

Offsetmain_Adr: 89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

When you scan it you will have this result:

BlackDesert64.exe+77A599 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi
BlackDesert64.exe+77A5A0 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d
BlackDesert64.exe+77A5A8 - 45 84 FF              - test r15l,r15l
BlackDesert64.exe+77A5AB - 74 54                 - je BlackDesert64.exe+77A601
BlackDesert64.exe+77A5AD - 83 E9 01              - sub ecx,01 { 1 }
BlackDesert64.exe+77A5B0 - 74 2A                 - je BlackDesert64.exe+77A5DC

So,

movespeedoffset = 0x0B58
attackspeedspeedoffset = movespeedoffset + 0x4 = 0x0B5C
castspeedoffset = movespeedoffset + 0x8 = 0x0B60

Have a nice day

[calipso888]

Originally Posted by nader11ndeu

Hello, here is a simple tutorial for you.

First, scan this:

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

BlackDesert64.exe+2BE95E - 48 8B 0D 53A78803     - mov rcx,[BlackDesert64.exe+3B490B8] { (0) }
BlackDesert64.exe+2BE965 - 48 85 C9              - test rcx,rcx
BlackDesert64.exe+2BE968 - 0F84 23010000         - je BlackDesert64.exe+2BEA91
BlackDesert64.exe+2BE96E - 80 3D B8FB8303 00     - cmp byte ptr [BlackDesert64.exe+3AFE52D],00 { (0),0 }
BlackDesert64.exe+2BE975 - 0F85 16010000         - jne BlackDesert64.exe+2BEA91

So, as you can understand, [BlackDesert64.exe + 3B490B8] gonna give my local. (It seems 0 because Im not in the game.)

So, now you need to find movespeed offsets. For this, your brother took a signature for automatically find these necs offsets...

Offsetmain_Adr: 89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

When you scan it you will have this result:

BlackDesert64.exe+77A599 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi
BlackDesert64.exe+77A5A0 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d
BlackDesert64.exe+77A5A8 - 45 84 FF              - test r15l,r15l
BlackDesert64.exe+77A5AB - 74 54                 - je BlackDesert64.exe+77A601
BlackDesert64.exe+77A5AD - 83 E9 01              - sub ecx,01 { 1 }
BlackDesert64.exe+77A5B0 - 74 2A                 - je BlackDesert64.exe+77A5DC

So,

movespeedoffset = 0x0B58
attackspeedspeedoffset = movespeedoffset + 0x4 = 0x0B5C
castspeedoffset = movespeedoffset + 0x8 = 0x0B60

Have a nice day

kek

[kuma96]

Thanks

[Farolly]

Don't forget patch isClean flag in few packets

[Epiral]

Originally Posted by nader11ndeu

Hello, here is a simple tutorial for you.

First, scan this:

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

BlackDesert64.exe+2BE95E - 48 8B 0D 53A78803     - mov rcx,[BlackDesert64.exe+3B490B8] { (0) }
BlackDesert64.exe+2BE965 - 48 85 C9              - test rcx,rcx
BlackDesert64.exe+2BE968 - 0F84 23010000         - je BlackDesert64.exe+2BEA91
BlackDesert64.exe+2BE96E - 80 3D B8FB8303 00     - cmp byte ptr [BlackDesert64.exe+3AFE52D],00 { (0),0 }
BlackDesert64.exe+2BE975 - 0F85 16010000         - jne BlackDesert64.exe+2BEA91

So, as you can understand, [BlackDesert64.exe + 3B490B8] gonna give my local. (It seems 0 because Im not in the game.)

So, now you need to find movespeed offsets. For this, your brother took a signature for automatically find these necs offsets...

Offsetmain_Adr: 89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

When you scan it you will have this result:

BlackDesert64.exe+77A599 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi
BlackDesert64.exe+77A5A0 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d
BlackDesert64.exe+77A5A8 - 45 84 FF              - test r15l,r15l
BlackDesert64.exe+77A5AB - 74 54                 - je BlackDesert64.exe+77A601
BlackDesert64.exe+77A5AD - 83 E9 01              - sub ecx,01 { 1 }
BlackDesert64.exe+77A5B0 - 74 2A                 - je BlackDesert64.exe+77A5DC

So,

movespeedoffset = 0x0B58
attackspeedspeedoffset = movespeedoffset + 0x4 = 0x0B5C
castspeedoffset = movespeedoffset + 0x8 = 0x0B60

Have a nice day

Im really sorry but i want to ask you how do you "scan it"? is there a tutorial / guide i can follow ? ( i jus got started into game hacking with guidedhacks.com , so i only know basic but i really wanna know how you can scan

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

thanks!


Also one more question do I have to learn assembly if I want to "understand" more some stuff? ( I only know C, i'm a freshman at university )

[killzone]

Originally Posted by Epiral

Im really sorry but i want to ask you how do you "scan it"? is there a tutorial / guide i can follow ? ( i jus got started into game hacking with guidedhacks.com , so i only know basic but i really wanna know how you can scan

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

thanks!


Also one more question do I have to learn assembly if I want to "understand" more some stuff? ( I only know C, i'm a freshman at university )

[Epiral]

Originally Posted by killzone

Thank you alot, I just started learning stuff at guidedhacking and was about to watch this video

Originally Posted by killzone

I have a quick question, now that I have the offset for movement speed ( ive followed the steps on the vid and managed to get localplayer, now after scanning this

89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

I found this

BlackDesert64.exe+744979 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi

BlackDesert64.exe+744980 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d

BlackDesert64.exe+744988 - 45 84 FF        - test r15l,r15l

BlackDesert64.exe+74498B - 74 54  - je BlackDesert64.exe+7449E1


BlackDesert64.exe+74498D - 83 E9 01       - sub ecx,01 { 1 }

BlackDesert64.exe+744990 - 74 2A   - je BlackDesert64.exe+7449BC

Thanks to @ i know that the movement speed offset is 0x0B58

now I'd like to know, what should I do with the offset ? ik that its how far my address is from its base but, I've done a pointer scan and the value of the address is "5000", when trying to change it / freeze it It just goes back to 5000, does it have to do with multi-level pointers by any chance? ( srry i might be talking rubbish but i'm kinda confused )

what should I do ?

any answer would be appreciated

EDIT -- initial value was 5000, i changed it and freezed it to 1000000000 and I could move like 2x faster than usual ( only ), and it was kinda laggy / weird ex : when moving to the left it takes 1 sec to start moving faster , same for all the directions, is there any specific way to find the correct value or idk

[__chkstk]

Originally Posted by Epiral

Thank you alot, I just started learning stuff at guidedhacking and was about to watch this video



I have a quick question, now that I have the offset for movement speed ( ive followed the steps on the vid and managed to get localplayer, now after scanning this

89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

I found this

BlackDesert64.exe+744979 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi

BlackDesert64.exe+744980 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d

BlackDesert64.exe+744988 - 45 84 FF        - test r15l,r15l

BlackDesert64.exe+74498B - 74 54  - je BlackDesert64.exe+7449E1


BlackDesert64.exe+74498D - 83 E9 01       - sub ecx,01 { 1 }

BlackDesert64.exe+744990 - 74 2A   - je BlackDesert64.exe+7449BC

Thanks to @ i know that the movement speed offset is 0x0B58

now I'd like to know, what should I do with the offset ? ik that its how far my address is from its base but, I've done a pointer scan and the value of the address is "5000", when trying to change it / freeze it It just goes back to 5000, does it have to do with multi-level pointers by any chance? ( srry i might be talking rubbish but i'm kinda confused )

what should I do ?

any answer would be appreciated

EDIT -- initial value was 5000, i changed it and freezed it to 1000000000 and I could move like 2x faster than usual ( only ), and it was kinda laggy / weird ex : when moving to the left it takes 1 sec to start moving faster , same for all the directions, is there any specific way to find the correct value or idk

Because game has clientsided protection for these cheats. You need to use debugger for find their protection and then reverse it. But they added a lot of new things so at the end you will get ban.

[Epiral]

Originally Posted by nader11ndeu

Because game has clientsided protection for these cheats. You need to use debugger for find their protection and then reverse it. But they added a lot of new things so at the end you will get ban.

I see, also I'm trying it on acharnes pserver ( they have ngameguard and is really easy to bypass )

[FallenEdge]

Originally Posted by nader11ndeu

Hello, here is a simple tutorial for you.

First, scan this:

*LocalPlayer: 48 8B 0D ?? ?? ?? ?? 48 ?? ?? 0F 84 ?? ?? ?? ?? 80 ?? ?? ?? ?? ?? ?? 0F 85 ?? ?? ?? ?? 48 8B ??

BlackDesert64.exe+2BE95E - 48 8B 0D 53A78803     - mov rcx,[BlackDesert64.exe+3B490B8] { (0) }
BlackDesert64.exe+2BE965 - 48 85 C9              - test rcx,rcx
BlackDesert64.exe+2BE968 - 0F84 23010000         - je BlackDesert64.exe+2BEA91
BlackDesert64.exe+2BE96E - 80 3D B8FB8303 00     - cmp byte ptr [BlackDesert64.exe+3AFE52D],00 { (0),0 }
BlackDesert64.exe+2BE975 - 0F85 16010000         - jne BlackDesert64.exe+2BEA91

So, as you can understand, [BlackDesert64.exe + 3B490B8] gonna give my local. (It seems 0 because Im not in the game.)

So, now you need to find movespeed offsets. For this, your brother took a signature for automatically find these necs offsets...

Offsetmain_Adr: 89 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 45 84 FF 74 ?? 83 E9 01 74 ?? 83 F9 01 75 6D 41 8D 0C 1E 33 CE ?? ?? ?? ?? ?? ?? ?? ?? 8D 0C 1A 33 CE 33 DE 89 ?? ?? ?? ?? ?? ?? 89 ?? ?? ?? ?? ?? ?? EB 48

When you scan it you will have this result:

BlackDesert64.exe+77A599 - 89 B4 87 580B0000     - mov [rdi+rax*4+00000B58],esi
BlackDesert64.exe+77A5A0 - 44 89 A4 87 640B0000  - mov [rdi+rax*4+00000B64],r12d
BlackDesert64.exe+77A5A8 - 45 84 FF              - test r15l,r15l
BlackDesert64.exe+77A5AB - 74 54                 - je BlackDesert64.exe+77A601
BlackDesert64.exe+77A5AD - 83 E9 01              - sub ecx,01 { 1 }
BlackDesert64.exe+77A5B0 - 74 2A                 - je BlackDesert64.exe+77A5DC

So,

movespeedoffset = 0x0B58
attackspeedspeedoffset = movespeedoffset + 0x4 = 0x0B5C
castspeedoffset = movespeedoffset + 0x8 = 0x0B60

Have a nice day

Help getting mount speed, accel, speed, turn, stop, offsets, please

[Cotec]

How are you guys using cheat engine with xigncode? I recompiled it with different titles, texts, ... but it still was detected. From the short time i invested in reversing how they detect it, it seemed like they detect it from kernel (NtUserBuildHwndList, ...) but reversing further did not make sense due to vmprotect :/

[she55668tw]

How No falling with a high movement speed..?

use Cheatengine