Newbie Spellweaver
- Joined
- Jul 7, 2018
- Messages
- 6
- Reaction score
- 8
Hi all,
Just found some patch points to pass XC in x64 client which from ogrefest's GameClient_2100.torrent.
My goal is make it always load loose assets instead of PAZs, and somewhat playable offline (without server/emu).
The hash of that original BlackDesert64.exe is:
Things in the attachment rar are:
To use this, you have to replace that 5MB+ xinput1_3.dll with xinput1_2.dll, then run the launcher OR the unpacked 53.2mb exe with dummy args like 1111,2222.
The things in my current xem ram patch are:
a. Access into character creation (LobbyUI) without connection, you can change 0x43D in xcorona_x64.xem to see different PAprocessors load:
03=LoginUI (original)
04=ServerSelect
05=LobbyUI
06=LoadingUI (?, not go anywhere)
07=ClientPlay (black screen only)
0B=FaceCamera (black screen only)
b. always load loose files, NOP out 0x460, 0xF bytes if you still use PAZs (don't know are there XC traps in PAZ loading funcs tho)
PS. IAT-restored code.bin and import trees in xml (pw: same as 02092018A__1_.7z):
Just found some patch points to pass XC in x64 client which from ogrefest's GameClient_2100.torrent.
My goal is make it always load loose assets instead of PAZs, and somewhat playable offline (without server/emu).
The hash of that original BlackDesert64.exe is:
Code:
MD5: cb9c14d0a7793f29574f921c213716ab
SHA1: 610aa03922c5aa2886bf59d9c1f0b587e49d3c5a
CRC32: e87901d2
Things in the attachment rar are:
Code:
xc //replace original xc folder with this one.
lucha.exe // launcher, patch 2 points to let the modified xem load.
xem.c // source code of that 2kb xcorona_x64.xem
deTMDstatic.exe // TMD decompressor, rename BlackDesert64.exe to tmds.exe, then it will produce tmdee.bin, which is the clean code (requires restore FTs on IAT). Also works on other x64 themida packed exe/dlls theologically.
ssiiu4.dd64 // some comments and labels for x64dbg.
To use this, you have to replace that 5MB+ xinput1_3.dll with xinput1_2.dll, then run the launcher OR the unpacked 53.2mb exe with dummy args like 1111,2222.
The things in my current xem ram patch are:
a. Access into character creation (LobbyUI) without connection, you can change 0x43D in xcorona_x64.xem to see different PAprocessors load:
03=LoginUI (original)
04=ServerSelect
05=LobbyUI
06=LoadingUI (?, not go anywhere)
07=ClientPlay (black screen only)
0B=FaceCamera (black screen only)
b. always load loose files, NOP out 0x460, 0xF bytes if you still use PAZs (don't know are there XC traps in PAZ loading funcs tho)
PS. IAT-restored code.bin and import trees in xml (pw: same as 02092018A__1_.7z):
You must be registered to see links
Attachments
You must be registered for see attachments list
Last edited: