Cheat Engine

Xtensity · Newbie cheater Reputation: 0 Joined: 15 Mar 2010 Posts: 11

I figure there should be some sort of guideline for finding an unknown value for movement speed in order to modify it, that could be applied to all games.

To be specific I am looking to modify the movement speed for the MMO Runes of Magic.

Simply changing the speed in Cheat-Engine DC's me after about 20 seconds of using it.

I have seen people before modify their character movement speed to be able to move very quickly, yet not be kicked.

I have tried to compare values of me running, standing still, using my mount, etc. I figure, once I find the actual value for the speed of my movement, I can modify the address that writes to it when I run, so that the actual speed of my run is adjusted.

Is there some sort of procedure or tips I can follow to try to find the value for movement speed?

Edit:

I managed to find the value for when I am moving forward and standing still. Then I managed to find out what writes to that address. Is there any way I can figure out what tells that address to change, and then figure out what else it tells to change. This should lead me to find movement speed, but I have no idea how to do this.

Edit:
I managed to find the speed value. It was a float. I have confirmed it many times. Speed value is 50 while walking, and 77.5 when on a mount. The mount gives an increase of 55%. 50*1.55 = 77.5

It's definitely the right value... but changing it does nothing for my speed. Looking at the disassembler I don't really see much I can change to modify my moving speed. Any tips?

Edit:
This is the piece of line that writes to the value of my speed.
movss [esi+00000788],xmm2

I have no clue what xmm2 means or how to play around with it.

DaSpamer · Posted: Tue Mar 12, 2013 7:07 am Post subject:

you can write
addsss xmm2,xmm2 //float...
And see if it increases your speed.

There muche easier way to make a sort of "moving faster".
Just find player coords, e.g player coord is 150, then check what access/writes to it (i use what access), look at the first call, and then auto assemble it.
And do
label(value)

addss xmm2 [value]
movss [esi+00000788],xmm2
jmp exit

exit:
jmp returnhere

value:
dd (float)0.5

This ofcourse an example.

++METHOS · Posted: Tue Mar 12, 2013 9:10 am Post subject:

OP: You probably won't get anywhere with the address that you've found. I would recommend dissecting data structures at the health address (or coordinates). Adjust your offset to see the entire player structure, and go through the list, making changes. You'll probably freeze up the game quite a bit, but you might be surprised by what you find in there. This is what I usually do to find character speed...but, all games are different.

thenibble · Newbie cheater Reputation: 0 Joined: 30 Nov 2010 Posts: 22

The server may be storing your actual movement speed so changing it from the client won't affect anything. Another possibility is that the routine that is accessing your movement speed value is not using the address that you've found. Try searching the exact value of type float of the movement speed again to see if you can find more addresses and see where they are being accessed.

DaSpamer · Posted: Fri Mar 15, 2013 6:48 am Post subject:

Nah you're here wrong..
Find coords, above the coods functions there should be couple of functions that gets the speed value and based that sets the coords increasement...

Made through it a "speed" hack for the Multiplayer Game TDP4 (Not really using it, Just tried to see how can I do it in unity3d games..).