Borderlands 3 [Engine:Unreal 4.20] - Console enabler, Dumper and more..

Upload your cheat tables here (No requests)
Post Reply
User avatar
SunBeam
Administration
Administration
Posts: 3035
Joined: Sun Feb 04, 2018 7:16 pm
Reputation: 1405

Borderlands 3 [Engine:Unreal 4.20] - Console enabler, Dumper and more..

Post by SunBeam » Fri Sep 13, 2019 2:21 am

[ 05 Nov '19 - Not An Update ]

For the whiny sissies, here's Csimbi's table updated for the latest build: viewtopic.php?p=110731#p110731.

[ 07 Oct '19 - Update #6 ]

Brought table content up to speed with 1.0.2. Also some more stuff in there, don't ask :)

Borderlands3.CT
Updated for 1.0.2 - Update #6
(56.25 KiB) Downloaded 9768 times

[ 27 Sep '19 - Update #5 ]

Updated the table for v1.0.1. You now also have access to the controlled item spawner. Like I said, you can't spawn a specific individual item, but you can control which ItemPool your item should be spawned from. For example, SpawnAwesomeItems dumps 10 items in total: 1 Artifact, 1 ClassMod, 1 GrenadeMod, 1 Shield, 4 Guns, 1 Eridium stack and 1 stack of Money.

Image

Borderlands3.CT
Updated for 1.0.1 + Item Spawner
(52.19 KiB) Downloaded 5815 times

How to use it:

1) Start the game, hit Continue, let it load. Once in the game map, pause via Escape key (DO NOT un-pause and pause again, as this will destroy the UWorld UObject in OakDeveloperPerks, then this latter one will be destroyed as well in 60 seconds). Better yet, go to some quiet place and don't press Escape at all.
2) Inject the Console/Dumper .dll. Let it do its thing (takes ~8 seconds to finish). Check that the console works by pressing Tilde 3 times (mid-open, full open, close).
3) Open CE, target Borderlands3.exe, open this table and activate the [ Enable ] script.
4) Activate the Item Spawner script.
5) You will have to fill in the 'pItemPool' address with the address of an ItemPool you can find in the ObjectsDump.txt file.
6) If you want more than 1 item spawned, change that in 'iAmount'.
7) Press Numpad Del (Numpad .).

P.S.: You can change the hotkey in the scripts itself, line 33 - use this list - my key is VK_DECIMAL/0x6E from that page.

Example of usage from this post:

1)
Image

2)
Image

3)
Image

Always remember you cannot spawn an item from an ItemPool if the pool package was not loaded by the Engine. In dumb terms: you can't spawn boss items outside their maps. Just in case you start bitching "it crashes when I try this".

BR,
Sun

[ 25 Sep '19 - Update #4 ]

Added some additional items in the [ Debug ] section:

Image

Borderlands3.CT
1.4 - Update #4
(44.87 KiB) Downloaded 1903 times

The video below describes usage:



The only ones to be increased are Fire Rate and Damage (I recommend changing both base and calculated). The rest need to be 0-ed out for best effect.

Note that I am currently playing as Operative, so I'm not 100% sure if the tree works properly for other classes. If you don't see proper information populated, let me know. And if you have any questions, do ask.

And, of course, they are NOT PERMANENT. Speaking of which, I kindly ask you to think logically: the weapon settings are read from .uasset files; these files are found within the .pak archives the game comes with. If the changes were to be permanent, then no fucking refresh should've happened when the game loads/unloads data. Since the engine does that, it will always refresh the params with the default ones, thus "not permanent in your lifetime". Unless you manage to unpack all of the data, find the respective .uasset files, change params physically with a hex editor or something, repak the content, make BL3 run with the modified data (yes, there are checks).. so unless you do all of that.. there's no method that will make those changes stick. So.. fucking stop asking already.. and use logic.

They are permanent for your game session, however. If you transition to other maps, the changes stick.

BR,
Sun

[ 24 Sep '19 - Update #3 ]
  • Added some more control over SpawnAwesomeItems in the [ Debug ] section
Borderlands3.CT
1.3 - Update #3
(33.92 KiB) Downloaded 1910 times

How to use:

- run game, get into the game world
- inject the .dll, let it dump ObjectsDump.txt
- open the above file and look for SpawnAwesomeItems; example on my end:

[00205956] Function BP_DevPerks.BP_DevPerks_C.SpawnAwesomeItems 0x0000000072D6CF40

- copy above address in bold into the table here:

Image

- the rest of the fields will auto-update
- with same .txt file, now look for anything that's "ItemPoolData ItemPool_" related (I only show the Legendary ones):

Code: Select all

[00166923] ItemPoolData ItemPool_SnipeRifles_Legendary.ItemPool_SnipeRifles_Legendary                           0x000000006A658EC0
[00166924] ItemPoolData ItemPool_SMGs_Legendary.ItemPool_SMGs_Legendary                                         0x000000006A658F80
[00166925] ItemPoolData ItemPool_Shotguns_Legendary.ItemPool_Shotguns_Legendary                                 0x000000006A659100
[00166926] ItemPoolData ItemPool_Pistols_Legendary.ItemPool_Pistols_Legendary                                   0x000000006A6591C0
[00166927] ItemPoolData ItemPool_Heavy_Legendary.ItemPool_Heavy_Legendary                                       0x000000006A659340
[00166928] ItemPoolData ItemPool_AssaultRifles_Legendary.ItemPool_AssaultRifles_Legendary                       0x000000006A6594C0
[00192545] ItemPoolData ItemPool_ClassMods_Siren_05_Legendary.ItemPool_ClassMods_Siren_05_Legendary             0x000000006EB8C940
[00192546] ItemPoolData ItemPool_ClassMods_Operative_05_Legendary.ItemPool_ClassMods_Operative_05_Legendary     0x000000006EB89A00
[00192547] ItemPoolData ItemPool_ClassMods_Gunner_05_Legendary.ItemPool_ClassMods_Gunner_05_Legendary           0x000000006EB8F940
[00192548] ItemPoolData ItemPool_ClassMods_Beastmaster_05_Legendary.ItemPool_ClassMods_Beastmaster_05_Legendary 0x000000006EB8F7C0
[00192558] ItemPoolData ItemPool_ClassMods_05_Legendary.ItemPool_ClassMods_05_Legendary                         0x000000006EB8F640
[00192559] ItemPoolData ItemPool_Artifacts_05_Legendary.ItemPool_Artifacts_05_Legendary                         0x000000006EB8FD00
[00192560] ItemPoolData ItemPool_Shields_05_Legendary.ItemPool_Shields_05_Legendary                             0x000000006EB8CF40
[00192561] ItemPoolData ItemPool_Guns_Legendary.ItemPool_Guns_Legendary                                         0x000000006EB8D780
[00192562] ItemPoolData ItemPool_GrenadeMods_05_Legendary.ItemPool_GrenadeMods_05_Legendary                     0x000000006EB8E800
[00306420] ItemPoolData ItemPool_Customizations_RoomDeco_Loot_Legendary.ItemPool_Customizations_RoomDeco_Loot_Legendary 0x0000000071496400
[00315769] ItemPoolData ItemPool_SlotMachine_Guns_S_Legendary.ItemPool_SlotMachine_Guns_S_Legendary             0x000000006F298500
[00315776] ItemPoolData ItemPool_SlotMachine_Guns_L_Legendary.ItemPool_SlotMachine_Guns_L_Legendary             0x000000006F290040
[00315830] ItemPoolData ItemPool_ManufacturerRewards_Dahl_Legendary.ItemPool_ManufacturerRewards_Dahl_Legendary 0x000000006F293700
[00315914] ItemPoolData ItemPool_Sniper_Heavy_Legendary.ItemPool_Sniper_Heavy_Legendary                         0x00000000557F6D00
[00315928] ItemPoolData ItemPool_AR_Shotgun_SMG_Legendary.ItemPool_AR_Shotgun_SMG_Legendary                     0x00000000557FB500
- copy one of the addresses from YOUR file (yes, the addresses will be different!)
- select all 11 rows in the table and press Enter
- change the value to one of the addresses you find in the list above; as example, I used 6A658EC0, SnipeRifles_Legendary:

Image

- run the command in the console:

Image

What you see above are only SNIPER RIFLES :P

BR,
Sun

[ 23 Sep '19 - Update #2 ]
  • " [ Enable ] " script now takes care of the UWorld deletion flag in OakDeveloperPerks; no need to be 60s-fast while using SpawnAwesomeItems; pointer is stable, doesn't get destroyed and you can use it for the entirety of your game session
  • " Restore 'god', 'playersonly', 'fly', 'ghost', 'walk' " script will now statically find SpawnAwesomeItems UFunction and adjust its flags for you (no need to do steps 5-8); MAKE SURE YOU ENABLE THIS SCRIPT IN GAME WORLD, NOT AT MAIN MENU! Else it won't do the SpawnAwesomeItems part. Follow the script model to tweak other functions.
Borderlands3.CT
1.2 - Update #2
(27.71 KiB) Downloaded 865 times

BR,
Sun

[ 22 Sep '19 - Update #1 ]

Image

Borderlands3.CT
1.1 - Update #1
(24.57 KiB) Downloaded 870 times

Added two more commands:
  • god (you will need to run this each level you load due to re-init)
  • playersonly (freezes game world allowing you to move around and do stuff; wanna unfreeze player actions, press V, then use firing like normal - works 1 time; then you need to do V again, and so on)
You can now run spawndeveloperitems. How?

1. You must be in the game world (not at main menu).

2. You must have the DLL injected, thus access to the console.

3. Enable Rig 'UPlayer::Exec' script.

4. Look in the [ Debug ] section and make sure 'OakDeveloperPerks' is a valid pointer. There are times when this gets NULL-ed out, for some reason. I've not yet figured out why, will do later. Just make sure it's valid (see my pic above); it should not be 0000000000000000. If it's 0, exit to main menu and re-enter game world.

EDIT: Looks like it gets 0 when you enter and exit a vehicle. It never gets re-initialized. So beware of that, if you see the command doesn't do anything anymore.

5. Once in game world, press Numpad / to re-dump ObjectsDump.txt. Open the file and Ctrl+F for 'Function BP_DevPerks.BP_DevPerks_C.SpawnAwesomeItems'. Once found, make a note of the address:

"[00209856] Function BP_DevPerks.BP_DevPerks_C.SpawnAwesomeItems 0x0000000073C95200"

Yes, it will be different for everyone out there. So don't expect to see "0x0000000073C95200".

6. Copy that address -> 73C95200. Then add 0x88 to it and add it to your list in CE. As 4 bytes.

Image

7. Right-click it and choose "Show as hexadecimal":

Image

8. Change value to 04020600.

Now open the console and type in 'spawnawesomeitems' (without the '').

Notes:
  • if the OakDeveloperPerks is 0, exit to main menu and back in
  • you don't need to do step 8 every time; just one time while you game is running (if you close the game, re-open, then yes, you need to do all steps again)
BR,
Sun

P.S.: I'm not interested in simplifying this process; so feel free to adjust it and make it more noob-friendly.

* * *

Game Name: Borderlands 3
Game Vendor: Epic Store
Game Version: OAK-PADDISEL 1-39
Game Process: Borderlands3.exe
Game File Version: 4.20.3.0

Image

Hello folks.

This topic will not tackle the usual crap you find in trainers. Please don't fill it in with puny requests; I won't look at them. You can find trainers with god, ammo, etc. in the Trainers section; your choice whose you want to use. This topic is about Unreal Engine 4, console, the default engine cheats (god, slomo, playersonly, fly, ghost, hud, etc.) and dumping the in-engine objectalia.

[ 18 Sep '19 - Initial Release ]

Attached below is a DLL that will do the following:
  • Run threaded UE4 code to create the UConsole UObject, member of GameViewportClient; you may then use Tilde (~) key to open up the console. As far as what you can or can't do with the console, well.. I'm not the game developer :) You'll have to google around for commands, test stuff out and return with feedback. As opposed to just asking "what are the commands?" and doing shit about it.
  • Will dump the UE4 FNameArray and UObjectArray, along with their addresses. What this means is you can then know what the fuck you're looking at in memory, when debugging/tracing or mapping structures, and come up with your own conclusions. Just like I did with my table below.
Borderlands3_Console_Dumper.zip
password: sunbeamFRF
(1.33 MiB) Downloaded 16015 times

Usage instructions:
  • Run the game; get to main menu.
  • Download the archive; extract content to a folder of your choice.
  • Open the injector (don't care if your AV says shit; your choice if you want to use my "virus"). You should see this already happening for you:
Image
  • Click 'Select', then 'Window List'; double-click on 'Borderlands(c) 3'. The reason you need to do this is there are 2 Borderlands3.exe processes; the injector will pick the first process, in the order of creation pid, instead of the second one (the one we want).
  • Inject.
  • P.S.: You can use any other injector or even Cheat Engine, if you don't like the method above.
You may close the injector after that. Give it 6-10 seconds to initialize, then press Tilde (~) key and you should see this:

Image

Notes:
  • The dump location is your game folder (e.g.: G:\Epic Games\Borderlands3\OakGame\Binaries\Win64). You will find 2 files there: NamesDump.txt and ObjectsDump.txt. You'll be very interested in the 2nd one :)
  • The .txt files are generated at "run-time". What this means is if you transition in-game from one map to another or from main menu to game world and backwards, you need to re-dump them. Why? UE4 destroys and recreates UObjects; re-initialization. To re-dump the .txt files press Numpad / (no, key can't be changed).
  • Yes, I know activating the console will change TAB key's behavior. It will now pop the console, as if you pressed Tilde. If you use it to bring up the Inventory, press Ctrl+Tab to bypass that :) Can't change it, I believe it's read as such from the DefaultInput.ini file within the game's archived content (in the .paks). I'll let you know if I figure out a way to adjust this.
And now the cheat table:

Image

Borderlands3.CT
1.0 - Initial stuff
(11.85 KiB) Downloaded 1385 times

Notes:
  • FOR THE SCRIPTS UNDER [ ENABLE ] TO WORK YOU HAVE TO BE IN-GAME, NOT AT MAIN MENU, WHEN ACTIVATING THEM!. Don't say I didn't tell you.
  • god will be toggled on/off, based on script status, if enabled or disabled. Don't want god anymore? Disable the script. No need to type anything in the console (the command/UFunction is not compiled in, anyway).
  • Once you enable the second script, leave it like that for your current session (no need to disable it). Then open the console and type fly [Enter]. You'll see what happens :) To return to the ground, type walk [Enter]. Now.. if you want to no-clip (move through solid objects, change 'Fly or Ghost?' to Ghost. Then type fly [Enter] in the console. Note that while active, you won't receive damage (all your Character's components turn to non-solid).
Demo video:



Other Information:
  • the game is compiled with UE4 v4.20.0
  • most of the UCheatManager UFunctions are not compiled in Shipping mode (they're basically replaced with a RET 0); same goes for all others the developers chose to use the below #id-#endif

Code: Select all

void ACharacter::ClientCheatWalk_Implementation()
{
#if !UE_BUILD_SHIPPING
	SetActorEnableCollision(true);
	if (CharacterMovement)
	{
		CharacterMovement->bCheatFlying = false;
		CharacterMovement->SetMovementMode(MOVE_Falling);
	}
#endif
}
A big THANK YOU flies out to Otis_Inf for the corrected UObjectIterator for UE4 4.20+. And, of course, the UE4 SDK Dumper author, KN4CK3R (the source is available on github; several people forked it -> here).

Enjoy! :)

BR,
Sun

P.S. #1: Yeah, doing it for fun and fuck if I care if you use this shit for your own damn work. But if you do, it wouldn't hurt linking to here or mentioning some greets, just so it's fair and square. Thanks!

P.S. #2: Worked out that image above myself, in Adobe Fireworks. You won't find it anywhere, so if you plan on using it, do ask for my permission first, please (drop me a PM).

sebastianyyz
Expert Cheater
Expert Cheater
Posts: 128
Joined: Sun Jul 09, 2017 3:33 am
Reputation: 7

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by sebastianyyz » Fri Sep 13, 2019 3:20 am

Nice, thank you

tontsa00
Expert Cheater
Expert Cheater
Posts: 326
Joined: Wed Mar 08, 2017 5:17 am
Reputation: 10

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by tontsa00 » Fri Sep 13, 2019 5:24 am

Is there any anti cheat in place btw?

User avatar
STN
Founder
Founder
Posts: 3596
Joined: Thu Mar 02, 2017 7:48 pm
Reputation: 1256

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by STN » Fri Sep 13, 2019 5:32 am

tontsa00 wrote:
Fri Sep 13, 2019 5:24 am
Is there any anti cheat in place btw?
Nopes

Dank Rafft
What is cheating?
What is cheating?
Posts: 3
Joined: Sat Oct 14, 2017 12:59 pm
Reputation: 1

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by Dank Rafft » Fri Sep 13, 2019 11:45 am

tontsa00 wrote:
Fri Sep 13, 2019 5:24 am
Is there any anti cheat in place btw?
There's probably some sort of sanity check for items like in the previous Borderlands games.

Xaelroa
Noobzor
Noobzor
Posts: 5
Joined: Fri May 04, 2018 11:11 pm
Reputation: 0

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by Xaelroa » Fri Sep 13, 2019 3:56 pm

STN wrote:
Fri Sep 13, 2019 5:32 am
tontsa00 wrote:
Fri Sep 13, 2019 5:24 am
Is there any anti cheat in place btw?
Nopes
So the denuvo anti cheat tag on the store is incorrect?

User avatar
NumberXer0
Expert Cheater
Expert Cheater
Posts: 535
Joined: Sun Mar 12, 2017 2:17 pm
Reputation: 26

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by NumberXer0 » Fri Sep 13, 2019 5:04 pm

Xaelroa wrote:
Fri Sep 13, 2019 3:56 pm
STN wrote:
Fri Sep 13, 2019 5:32 am
tontsa00 wrote:
Fri Sep 13, 2019 5:24 am
Is there any anti cheat in place btw?
Nopes
So the denuvo anti cheat tag on the store is incorrect?
There are already multiple trainers and a table. And correct me if I'm wrong, but isnt Denuvo's anti cheat basically just a scare tactic? I've never seen it protect anything yet.

Xaelroa
Noobzor
Noobzor
Posts: 5
Joined: Fri May 04, 2018 11:11 pm
Reputation: 0

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by Xaelroa » Fri Sep 13, 2019 5:07 pm

NumberXer0 wrote:
Fri Sep 13, 2019 5:04 pm
Xaelroa wrote:
Fri Sep 13, 2019 3:56 pm
STN wrote:
Fri Sep 13, 2019 5:32 am


Nopes
So the denuvo anti cheat tag on the store is incorrect?
There are already multiple trainers and a table. And correct me if I'm wrong, but isnt Denuvo's anti cheat basically just a scare tactic? I've never seen it protect anything yet.
I know a couple of people who lost games to it. It's not hard to get around, but it can and does trigger if you don't circumvent it and are unlucky.

reaper91
Noobzor
Noobzor
Posts: 5
Joined: Wed Apr 10, 2019 6:44 pm
Reputation: 1

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by reaper91 » Fri Sep 13, 2019 8:49 pm

Xaelroa wrote:
Fri Sep 13, 2019 3:56 pm
STN wrote:
Fri Sep 13, 2019 5:32 am
tontsa00 wrote:
Fri Sep 13, 2019 5:24 am
Is there any anti cheat in place btw?
Nopes
So the denuvo anti cheat tag on the store is incorrect?
Pretty sure it just uses Denuvo Anti-Tamper not anti cheat. which is just a DRM solution that protects games from being pirated.

User avatar
SunBeam
Administration
Administration
Posts: 3035
Joined: Sun Feb 04, 2018 7:16 pm
Reputation: 1405

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by SunBeam » Sat Sep 14, 2019 6:48 am

Sorry for the delay, guys. Will post all of my findings tomorrow night. Had an unplanned visit to take up on. In short: was able to create the UConsole, UCheatManager, god is stripped, ghost is stripped, fly and playersonly are there but just the exec wrappers, so I had to rebuild them, toggledebugcamera works (you just need to invert mouse vertical axis) and I think I can also get 'set' to work. Apart from that, no other observations given the limited dev functionality left in at Shipping compile time.

Image

Image

Image

Talk to ya later :)

User avatar
Chiados
Fearless Donors
Fearless Donors
Posts: 132
Joined: Tue Apr 25, 2017 6:56 am
Reputation: 83

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by Chiados » Sat Sep 14, 2019 6:47 pm

Looking good Sunbean, cant wait to see everything you've gathered.

User avatar
FryGuy
Fearless Donors
Fearless Donors
Posts: 22
Joined: Fri Mar 03, 2017 4:50 am
Reputation: 3

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by FryGuy » Sat Sep 14, 2019 10:32 pm

This may be the wrong thread to ask on, and I probably just need to do some research into the UnReal engine, but when Sunbeam does complete this console enabler, would I be able to modify the player class variables? Most of my recent in-game use of a console comes from Elder Scrolls/Fallout games using Bethesda's Creation Engine, where you can add/sub skill points or stats or spawn enemies/weapons, etc. Would this be possible to do in Borderlands? Could I spawn a weapon with certain perks, or give my player skill points? I guess I'll just have to wait and see for now.

In any case, I look forward to you're results SunBeam :)

darkzonez
Expert Cheater
Expert Cheater
Posts: 56
Joined: Fri Mar 09, 2018 1:57 pm
Reputation: 8

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by darkzonez » Mon Sep 16, 2019 7:03 pm

This looks promising! :o

User avatar
SunBeam
Administration
Administration
Posts: 3035
Joined: Sun Feb 04, 2018 7:16 pm
Reputation: 1405

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by SunBeam » Tue Sep 17, 2019 9:21 am

Progress report: been battling a bit with the SDK dumper, as starting with 4.20+ onward Epic decided to make some core changes. As such, the UObjects are now stored in chunks of 0x1000 bytes. As such, iterating up to 65535 works, but past that big ass crash :) The console is already in, I've mapped the several cheats for which I could recreate the code. I just need the UObjects dumper to work so I can release this DLL :)

darkzonez
Expert Cheater
Expert Cheater
Posts: 56
Joined: Fri Mar 09, 2018 1:57 pm
Reputation: 8

Re: Borderlands 3 [Engine:Unreal Engine 4] - Console enabler, Dumper and more..

Post by darkzonez » Tue Sep 17, 2019 4:25 pm

SunBeam wrote:
Tue Sep 17, 2019 9:21 am
Progress report: been battling a bit with the SDK dumper, as starting with 4.20+ onward Epic decided to make some core changes. As such, the UObjects are now stored in chunks of 0x1000 bytes. As such, iterating up to 65535 works, but past that big ass crash :) The console is already in, I've mapped the several cheats for which I could recreate the code. I just need the UObjects dumper to work so I can release this DLL :)
Oh wow nice mate!

Post Reply

Who is online

Users browsing this forum: batf247, Google Adsense [Bot], krish_1786, LorgrenBenirus