Darksiders 3 [Engine:UE4] - Console enabler, Dumper and more..

[Jevnaker]

^ Why didn't you use toggledebugcamera/teleport? I don't think the summoned humans will count even if you get to materialize them.

because it was before this trainer/ cheat engine thing was made. p.s. getting command not recognised have i done something wrong?

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[SunBeam]

Read the next post. You have to patch yourself your executable.

[SunBeam]

Any help to activate cheat 1 on gog ver darksidrs.exe? There r seem to be a bit different (cant find offset)

I believe I don't have to tell you there's a search functionality in Hex Workshop. Find the array of bytes in your exe, then patch it as indicated.

[Cielos]

for anyone who are interested, I've made a quick (and cheap) script with the info SunBeam shared...

undead
- needs the "[ Enable ]" script of SunBeam's table activated to work.
- when activated, health still drop when being attacked but you won't die.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>94</ID>
      <Description>"undead"</Description>
      <LastState Activated="1"/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(dminhealthdefault,(float)10)

aobscanmodule(currentHealthReadCallerOnHit,Darksiders3-Win64-Shipping.exe,F3 0F ** ** ** 49 ** ** 49 ** ** FF ** ** F3)
registersymbol(currentHealthReadCallerOnHit)

label(bPlayerHealthCalOnChange)
registersymbol(bPlayerHealthCalOnChange)
label(dMinHealth)
registersymbol(dMinHealth)

alloc(newmem,2048,currentHealthReadCallerOnHit) //"Darksiders3-Win64-Shipping.exe"+304A3D)
label(returnhere)
label(originalcode_undead)
registersymbol(originalcode_undead)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
mov rax,r15
lea rax,[rax+f4]
lea rax,[rax-814]
mov rcx,LocalPlayer
mov rcx,[rcx]
test rcx,rcx
jz @f
mov rcx,[rcx+30]
cmp [rcx+348],rax
jne @f

mov rcx,bPlayerHealthCalOnChange
mov byte ptr [rcx],1

@@:

originalcode_undead:
readmem(currentHealthReadCallerOnHit,5)
//movss xmm6,[rdi+18]

exit:
jmp returnhere

///
bPlayerHealthCalOnChange:
dd 0
dMinHealth:
dd dminhealthdefault
///

currentHealthReadCallerOnHit: //"Darksiders3-Win64-Shipping.exe"+304A3D:
jmp newmem
returnhere:

///*********************************************///
aobscanmodule(currentHealthRead2AOB,Darksiders3-Win64-Shipping.exe,FF ** ** F3 0F 59 ** ** ** ** ** F3 0F 59 ** ** ** ** ** 48 ** ** ** 5B C3)
registersymbol(currentHealthRead2AOB)

alloc(newmem2,2048,currentHealthRead2AOB+3) //"Darksiders3-Win64-Shipping.exe"+318C7F)
label(returnhere2)
label(originalcode2_undead)
registersymbol(originalcode2_undead)
label(exit2)

newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
sub rsp,10
movdqu dqword [rsp],xmm15
sub rsp,10
movdqu dqword [rsp],xmm14
push rax
push rcx

mov rax,bPlayerHealthCalOnChange
cmp byte ptr [rax],1
jne @f
mov byte ptr [rax],0
readmem(currentHealthRead2AOB+3,1)
db 44 0F 10 BB
readmem(currentHealthRead2AOB+7,4)
//movss xmm15,[rbx+f4]
movss xmm14,xmm6
mov rax,currentHealthRead2AOB
cmp byte ptr [rax+e],5
jne @f
xor rcx,rcx
mov ecx,[rax+f]
lea rax,[rax+rcx+13]
divss xmm14,[rax]
//divss xmm14,[141A4AF30]
divss xmm14,xmm0
subss xmm15,xmm14
mov rax,dMinHealth
comiss xmm15,[rax]
jae @f
addss xmm14,[rax]
readmem(currentHealthRead2AOB+3,1)
db 44 0F 11 B3
readmem(currentHealthRead2AOB+7,4)
//movss [rbx+f4],xmm14

@@:
pop rcx
pop rax
movdqu xmm14,dqword [rsp]
add rsp,10
movdqu xmm15,dqword [rsp]
add rsp,10

originalcode2_undead:
readmem(currentHealthRead2AOB+3,8)
//mulss xmm0,[rbx+000000F4]

exit2:
jmp returnhere2

///

currentHealthRead2AOB+3: //"Darksiders3-Win64-Shipping.exe"+318C7F:
jmp newmem2
nop
nop
nop
returnhere2:




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
currentHealthReadCallerOnHit: //"Darksiders3-Win64-Shipping.exe"+304A3D:
readmem(originalcode_undead,5)
//db F3 0F 10 77 18
//Alt: movss xmm6,[rdi+18]
unregistersymbol(originalcode_undead)

unregistersymbol(bPlayerHealthCalOnChange)
unregistersymbol(dMinHealth)

///*********************************************///
dealloc(newmem2)
currentHealthRead2AOB+3: //"Darksiders3-Win64-Shipping.exe"+318C7F:
readmem(originalcode2_undead,8)
//db F3 0F 59 83 F4 00 00 00
//Alt: mulss xmm0,[rbx+000000F4]
unregistersymbol(originalcode2_undead)
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT1:
made another quick one.

ignore wrath
- when activated, you can use the Wrath Attack anytime you want, regardless of your current wrath bar.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>4491</ID>
      <Description>"ignore wrath .2"</Description>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(wrathBarChkFullOnUsageAttemptAOB,Darksiders3-Win64-Shipping.exe,F3 0F ** ** ** 74 ** E8 ** ** ** ** EB)
registersymbol(wrathBarChkFullOnUsageAttemptAOB)

///
aobscanmodule(wrathRead1AOB,Darksiders3-Win64-Shipping.exe,F3 0F ** ** ** ** ** ** 0F ** ** ** ** ** ** 75 ** 80 ** ** ** ** ** 00 75 ** 0F ** ** C3)
registersymbol(wrathRead1AOB)
///

alloc(newmem,2048,wrathBarChkFullOnUsageAttemptAOB) //"Darksiders3-Win64-Shipping.exe"+3CA9B6)
label(returnhere)
label(originalcode_ignorewrath)
registersymbol(originalcode_ignorewrath)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(wrathBarChkFullOnUsageAttemptAOB,5)
//movss xmm6,[rdi+3c]
readmem(wrathRead1AOB,2)
db 11 B1
readmem(wrathRead1AOB+4,4)
//movss [rcx+130],xmm6

originalcode_ignorewrath:
readmem(wrathBarChkFullOnUsageAttemptAOB,5)
//movss xmm6,[rdi+3C]

exit:
jmp returnhere

///

wrathBarChkFullOnUsageAttemptAOB: //"Darksiders3-Win64-Shipping.exe"+3CA9B6:
jmp newmem
returnhere:


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
wrathBarChkFullOnUsageAttemptAOB: //"Darksiders3-Win64-Shipping.exe"+3CA9B6:
readmem(originalcode_ignorewrath,5)
//db F3 0F 10 77 3C
//Alt: movss xmm6,[rdi+3C]
unregistersymbol(originalcode_ignorewrath)
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT2:
another....

custom walk key
- by script default, when activated, hold X1 Mouse Button and move to walk.
- when activated, the in-game walk toggle key will be rendered useless.
- the key can be changed from the dropdown list of the walk key entry.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>4476</ID>
      <Description>"custom walk key"</Description>
      <Options moHideChildren="1"/>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
define(walkkeyiddefault,05)

aobscanmodule(walkKeyFlagChk1AOB,Darksiders3-Win64-Shipping.exe,74 ** 80 ** ** ** ** ** 00 74 ** F3 0F ** ** ** ** ** ** 0F ** ** 0F)
registersymbol(walkKeyFlagChk1AOB)

label(bWalkKeyID)
registersymbol(bWalkKeyID)
label(bCustWalkFlag)
registersymbol(bCustWalkFlag)

alloc(newmem,2048,"Darksiders3-Win64-Shipping.exe"+355C19) 
label(returnhere)
label(originalcode_custwalkkey)
registersymbol(originalcode_custwalkkey)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,bCustWalkFlag
mov al,[rax]
db 88 81
readmem(walkKeyFlagChk1AOB+4,4)
//mov [rcx+18c],al
pop rax

originalcode_custwalkkey:
readmem(walkKeyFlagChk1AOB+2,7)
//cmp byte ptr [rcx+0000018C],00

exit:
jmp returnhere

///
bWalkKeyID:
dd walkkeyiddefault
bCustWalkFlag:
dd 0
///

walkKeyFlagChk1AOB+2: //"Darksiders3-Win64-Shipping.exe"+355C19:
jmp newmem
nop
nop
returnhere:

///********************************************************///
label(bEndThread_walkKey_keylistener_mem)
registersymbol(bEndThread_walkKey_keylistener_mem)

alloc(walkKey_keylistener_mem,1024,"Darksiders3-Win64-Shipping.exe")
registersymbol(walkKey_keylistener_mem)
createthread(walkKey_keylistener_mem)
label(keylistenerstart)
label(keylistenerend)
label(keylistenerexit)

walkKey_keylistener_mem:
sub rsp,28

keylistenerstart:
mov rcx,bWalkKeyID
mov rcx,[rcx]
call GetAsyncKeyState
//add rsp,08
shr ax,#15
mov rcx,bCustWalkFlag
mov [rcx],ax
{test ax,ax
jnz keylistenerend

@@:}

keylistenerend:
mov rcx,#100
call Sleep
mov rbx,bEndThread_walkKey_keylistener_mem
cmp dword ptr [rbx],1
jne keylistenerstart

keylistenerexit:
add rsp,28
mov rbx,bEndThread_walkKey_keylistener_mem
mov dword ptr [rbx],2
ret

///
bEndThread_walkKey_keylistener_mem:
dd 0
///


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
//modified from SubBeam's ACS script - start//
{$lua}

if( syntaxcheck == false ) then --actual execution
  local starttime = getTickCount()

if readInteger( "bEndThread_walkKey_keylistener_mem" ) == 0 then --could be 2 already
  writeInteger( "bEndThread_walkKey_keylistener_mem", 1 ) --tell the thread to kill itself
end

while( getTickCount() &lt; starttime + 1000 ) and ( readInteger( "bEndThread_walkKey_keylistener_mem" ) ~=2 ) do --wait till it has finished
  sleep( 20 )
end

if( getTickCount() &gt; starttime + 1000 ) then --could happen when the window is shown
  showMessage( 'Disabling the thread failed!' )
  error( 'Thread disabling failed!' )
end
  sleep( 1 )
end

{$asm}
//obtained from SubBeam's ACS script - end//

//bEndThread_walkKey_keylistener_mem:
//dd 1

///********************************************************///
dealloc(newmem)
walkKeyFlagChk1AOB+2: //"Darksiders3-Win64-Shipping.exe"+355C19:
readmem(originalcode_custwalkkey,7)
//db 80 B9 8C 01 00 00 00
//Alt: cmp byte ptr [rcx+0000018C],00
unregistersymbol(originalcode_custwalkkey)

unregistersymbol(bWalkKeyID)
unregistersymbol(bCustWalkFlag)

///********************************************************///
unregistersymbol(bEndThread_walkKey_keylistener_mem)

dealloc(walkKey_keylistener_mem)
unregistersymbol(walkKey_keylistener_mem)
</AssemblerScript>
      <CheatEntries>
        <CheatEntry>
          <ID>4477</ID>
          <Description>"walk key"</Description>
          <DropDownList ReadOnly="1" DescriptionOnly="1" DisplayValueAsItem="1">10:SHIFT key
11:CTRL key
12:ALT key
14:CAPS LOCK key
04:Middle Mouse Button
05:X1 Mouse Button
06:X2 Moust Button
</DropDownList>
          <LastState Value="05" RealAddress="13FAF0029"/>
          <ShowAsHex>1</ShowAsHex>
          <Color>008000</Color>
          <VariableType>Byte</VariableType>
          <Address>bWalkKeyID</Address>
        </CheatEntry>
      </CheatEntries>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT3:
updated the ignore wrath above. the previous one doesn't work well when using sustain wrath skills, as it was just manipulate the flag flipping only...
also made the following one:

ignore havoc
- when activated, allows you to transform into Havoc form anytime you want, regardless of your current havoc bar.
- havoc bar still deplete when you're in Havoc form, but you can actually stay in Havoc form as long as you want, until you choose to exit the form manually.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>4490</ID>
      <Description>"ignore havoc"</Description>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(someReadOnUsageAttemptAOB,Darksiders3-Win64-Shipping.exe,0F ** ** 0F ** ** F3 0F ** ** ** ** ** ** 0F 2E ** ** ** ** ** 75 ** 80 ** ** ** ** ** 00 75 ** 0F ** ** EB)
registersymbol(someReadOnUsageAttemptAOB)

///
aobscanmodule(havocActivationCallerAOB,Darksiders3-Win64-Shipping.exe,41 ** ** ** 4C ** ** ** ** 48 ** ** ** ** 48 ** ** ** ** 4D ** ** 74)
registersymbol(havocActivationCallerAOB)

label(bHavocActivation)
registersymbol(bHavocActivation)
label(dMinHavocBar)
registersymbol(dMinHavocBar)
label(pHavocBarAOB)
registersymbol(pHavocBarAOB)

alloc(newmem,2048,someReadOnUsageAttemptAOB+6) //"Darksiders3-Win64-Shipping.exe"+2DD1BF)
label(returnhere)
label(originalcode_ignorehavoc)
registersymbol(originalcode_ignorehavoc)
label(exit)

newmem: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
//mov rax,"Darksiders3-Win64-Shipping.exe"+711555
mov rax,havocActivationCallerAOB
lea rax,[rax+4]
cmp [rsp+7c0],rax
pop rax
jne @f
push rax
mov rax,pHavocBarAOB
mov [rax],rbx
mov rax,bHavocActivation
mov byte ptr [rax],1
pop rax
//movss xmm0,[rbx+00000130]
//movss [rbx+130],xmm0
//jmp exit

originalcode_ignorehavoc:
readmem(someReadOnUsageAttemptAOB+6,8)
//movss xmm0,[rbx+00000130]

exit:
jmp returnhere

///
bHavocActivation:
dd 0
dMinHavocBar:
dd (float)10
pHavocBarAOB:
dq 0
///

someReadOnUsageAttemptAOB+6: //"Darksiders3-Win64-Shipping.exe"+2DD1BF:
jmp newmem
nop
nop
nop
returnhere:

///***********************************///
aobscanmodule(someReadOnSustainUsageAOB,Darksiders3-Win64-Shipping.exe,E8 ** ** ** ** 44 ** ** ** F3 0F ** ** ** ** ** ** 0F 2E ** ** ** ** ** 75 ** 80 ** ** ** ** ** 00 75 ** 0F ** ** EB)
registersymbol(someReadOnSustainUsageAOB)

alloc(newmem2,2048,someReadOnSustainUsageAOB+9) //"Darksiders3-Win64-Shipping.exe"+2CF44C)
label(returnhere2)
label(originalcode2_ignorehavoc)
registersymbol(originalcode2_ignorehavoc)
label(exit2)

newmem2: //this is allocated memory, you have read,write,execute access
//place your code here
push rax
mov rax,pHavocBarAOB
cmp [rax],rbx
jne @f
mov rax,dMinHavocBar
movss xmm0,[rax]
db 0F 2F
readmem(someReadOnSustainUsageAOB+c,5)
//comiss xmm0,[rbx+130]
jbe @f
readmem(someReadOnSustainUsageAOB+9,2)
db 11
readmem(someReadOnSustainUsageAOB+c,5)
//movss [rbx+130],xmm0
//movss xmm0,[rbx+130]
@@:
pop rax

originalcode2_ignorehavoc:
readmem(someReadOnSustainUsageAOB+9,8)
//movss xmm0,[rbx+00000130]

exit2:
jmp returnhere2

///

someReadOnSustainUsageAOB+9: //"Darksiders3-Win64-Shipping.exe"+2CF44C:
jmp newmem2
nop
nop
nop
returnhere2:

///***********************************///
aobscanmodule(someFullFlagSet1AOB,Darksiders3-Win64-Shipping.exe,0F 2F ** ** ** 48 ** ** ** 48 ** ** ** ** 0F 93 C0 88 ** 48 ** ** ** 5F C3)
registersymbol(someFullFlagSet1AOB)

alloc(newmem11,2048,someFullFlagSet1AOB+e) //"Darksiders3-Win64-Shipping.exe"+177132F)
label(returnhere11)
label(originalcode11_ignorehavoc)
registersymbol(originalcode11_ignorehavoc)
label(exit11)

newmem11: //this is allocated memory, you have read,write,execute access
//place your code here
readmem(someFullFlagSet1AOB+e,3)
//setae al

push rbx
mov rbx,bHavocActivation
cmp byte ptr [rbx],1
jne @f
mov byte ptr [rbx],0
mov al,1

@@:
pop rbx
readmem(someFullFlagSet1AOB+11,2)
//mov [rdi],al
jmp exit11

originalcode11_ignorehavoc:
readmem(someFullFlagSet1AOB+e,5)
//setae al
//mov [rdi],al

exit11:
jmp returnhere11

///

someFullFlagSet1AOB+e: //"Darksiders3-Win64-Shipping.exe"+177132F:
jmp newmem11
returnhere11:

///***********************************///




[DISABLE]
//code from here till the end of the code will be used to disable the cheat
dealloc(newmem)
someReadOnUsageAttemptAOB+6: //"Darksiders3-Win64-Shipping.exe"+2DD1BF:
readmem(originalcode_ignorehavoc,8)
//db F3 0F 10 83 30 01 00 00
//Alt: movss xmm0,[rbx+00000130]
unregistersymbol(originalcode_ignorehavoc)

unregistersymbol(bHavocActivation)
unregistersymbol(dMinHavocBar)
unregistersymbol(pHavocBarAOB)

///***********************************///
dealloc(newmem2)
someReadOnSustainUsageAOB+9: //"Darksiders3-Win64-Shipping.exe"+2CF44C:
readmem(originalcode2_ignorehavoc,8)
//db F3 0F 10 83 30 01 00 00
//Alt: movss xmm0,[rbx+00000130]
unregistersymbol(originalcode2_ignorehavoc)

///***********************************///
dealloc(newmem11)
someFullFlagSet1AOB+e: //"Darksiders3-Win64-Shipping.exe"+177132F:
readmem(originalcode11_ignorehavoc,5)
//db 0F 93 C0 88 07
//Alt: setae al
//Alt: mov [rdi],al
unregistersymbol(originalcode11_ignorehavoc)

///***********************************///
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT5:
ignore consumable quantity
- when activated, you can use any consumables regardless of the current quantities.
- you can use the consumable even if you don't have any of it on you.
- quantities still drop until they reach zeros when you use them.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>4510</ID>
      <Description>"ignore consumable quantity"</Description>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(itemQChkZeroOnConsumableScrollAOB,Darksiders3-Win64-Shipping.exe,83 ** ** 00 0F 8E ** ** ** ** 41 ** ** FF)
registersymbol(itemQChkZeroOnConsumableScrollAOB)

alloc(originalcode_ignoreconsumable,8,itemQChkZeroOnConsumableScrollAOB+4)
registersymbol(originalcode_ignoreconsumable)

originalcode_ignoreconsumable:
readmem(itemQChkZeroOnConsumableScrollAOB+4,6)

///

itemQChkZeroOnConsumableScrollAOB+4: //"Darksiders3-Win64-Shipping.exe"+389E00:
db 90 90 90 90 90 90

///******************************************///
aobscanmodule(nephilimRespiteQChkZeroOnUseAOB,Darksiders3-Win64-Shipping.exe,83 ** ** 00 7E ** 83 ** ** ** ** ** 00 48)
registersymbol(nephilimRespiteQChkZeroOnUseAOB)

alloc(originalcode1_ignoreconsumable,8,nephilimRespiteQChkZeroOnUseAOB+4)
registersymbol(originalcode1_ignoreconsumable)

originalcode1_ignoreconsumable:
readmem(nephilimRespiteQChkZeroOnUseAOB+4,2)

///

nephilimRespiteQChkZeroOnUseAOB+4: //"Darksiders3-Win64-Shipping.exe"+398F0B:
db 90 90

///******************************************///
aobscanmodule(consumableQChkZeroOnUseAOB,Darksiders3-Win64-Shipping.exe,83 ** ** 00 7E ** 48 ** ** ** ** ** ** 48 ** ** 74 ** 48 ** ** ** 48 ** ** E8)
registersymbol(consumableQChkZeroOnUseAOB)

alloc(originalcode2_ignoreconsumable,8,consumableQChkZeroOnUseAOB+4)
registersymbol(originalcode2_ignoreconsumable)

originalcode2_ignoreconsumable:
readmem(consumableQChkZeroOnUseAOB+4,2)

///

consumableQChkZeroOnUseAOB+4: //"Darksiders3-Win64-Shipping.exe"+3A275D:
db 90 90

///******************************************///
aobscanmodule(itemQWriteOnUseAOB,Darksiders3-Win64-Shipping.exe,48 ** ** ** ** 00 00 48 ** ** 74 03 89 ** ** C3)
registersymbol(itemQWriteOnUseAOB)

alloc(newmem3,2048,itemQWriteOnUseAOB+a) //"Darksiders3-Win64-Shipping.exe"+39B1FA)
label(returnhere3)
label(originalcode3_ignoreconsumable)
registersymbol(originalcode3_ignoreconsumable)
label(exit3)

newmem3: //this is allocated memory, you have read,write,execute access
//place your code here
reassemble(itemQWriteOnUseAOB+a)
//je Darksiders3-Win64-Shipping.exe+39B1FF
test edx,edx
jge @f
xor edx,edx
@@:
readmem(itemQWriteOnUseAOB+c,3)
//mov [rax+2C],edx
jmp exit3

originalcode3_ignoreconsumable:
readmem(itemQWriteOnUseAOB+a,5)
//je Darksiders3-Win64-Shipping.exe+39B1FF
//mov [rax+2C],edx

exit3:
jmp returnhere3

///

itemQWriteOnUseAOB+a: //"Darksiders3-Win64-Shipping.exe"+39B1FA:
jmp newmem3
returnhere3:

///******************************************///





[DISABLE]
//code from here till the end of the code will be used to disable the cheat
itemQChkZeroOnConsumableScrollAOB+4: //"Darksiders3-Win64-Shipping.exe"+389E00:
readmem(originalcode_ignoreconsumable,6)
//db 0F 8E EC 00 00 00
//Alt: jng Darksiders3-Win64-Shipping.exe+389EF2
dealloc(originalcode_ignoreconsumable)
unregistersymbol(originalcode_ignoreconsumable)

///******************************************///
nephilimRespiteQChkZeroOnUseAOB+4: //"Darksiders3-Win64-Shipping.exe"+398F0B:
readmem(originalcode1_ignoreconsumable,2)
//db 7E 57
//Alt: jle Darksiders3-Win64-Shipping.exe+398F64
unregistersymbol(originalcode1_ignoreconsumable)

///******************************************///
consumableQChkZeroOnUseAOB+4: //"Darksiders3-Win64-Shipping.exe"+3A275D:
readmem(originalcode2_ignoreconsumable,2)
//db 7E 29
//Alt: jle Darksiders3-Win64-Shipping.exe+3A2788
unregistersymbol(originalcode2_ignoreconsumable)

///******************************************///
dealloc(newmem3)
itemQWriteOnUseAOB+a: //"Darksiders3-Win64-Shipping.exe"+39B1FA:
readmem(originalcode3_ignoreconsumable,5)
//db 74 03 89 50 2C
//Alt: je Darksiders3-Win64-Shipping.exe+39B1FF
//Alt: mov [rax+2C],edx
unregistersymbol(originalcode3_ignoreconsumable)

///******************************************///
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

EDIT6:
ignore ingredients
- when activated, allows you to upgrade your weapons/enhancements without owning any ingredients.
- ingredients still drop when you upgrade weapons/enhancements until they reach zero.
- copy & paste the following ONto your table. preferably under "[ Scripts ]" header for easy navigation.

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>4526</ID>
      <Description>"ignore ingredients .2"</Description>
      <LastState Activated="1"/>
      <Color>FF0000</Color>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>[ENABLE]
//code from here to '[DISABLE]' will be used to enable the cheat
aobscanmodule(canCraftFlagUnsetAOB,Darksiders3-Win64-Shipping.exe,44 ** ** ** ** 00 00 E8 ** ** ** ** 84 C0 74 0D B0 01 48 ** ** ** ** 48 ** ** ** 5F C3 32 C0 48 ** ** ** ** 48 ** ** ** 5F C3)
registersymbol(canCraftFlagUnsetAOB)

alloc(originalcode_ignoreingredients,8,canCraftFlagUnsetAOB+1d)
registersymbol(originalcode_ignoreingredients)

originalcode_ignoreingredients:
readmem(canCraftFlagUnsetAOB+1d,2)

///

canCraftFlagUnsetAOB+1d: //"Darksiders3-Win64-Shipping.exe"+2A2AEA:
db B0 01


 
 
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
canCraftFlagUnsetAOB+1d: //"Darksiders3-Win64-Shipping.exe"+2A2AEA:
readmem(originalcode_ignoreingredients,2)
//db 32 C0
//Alt: xor al,al
unregistersymbol(originalcode_ignoreingredients)
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[demorest]

Any help to activate cheat 1 on gog ver darksidrs.exe? There r seem to be a bit different (cant find offset)

I believe I don't have to tell you there's a search functionality in Hex Workshop. Find the array of bytes in your exe, then patch it as indicated.

[Link]
No luck
[Link]
Short offset

[beguiler]

Short offset

I found it in my GoG executable. Are you sure you are looking at the right one? You need to look at the Darksiders3-Win64-Shipping.exe in the Binaries\Win64 directory and not the Darksiders3.exe file. Just FYI it's at offset 153F32E.

[SunBeam]

I doubt the 0x750 offset is changed in the GoG version; but if that were the case, array becomes FF90????000084C075??40. Search for that, then patch as indicated.

[SunBeam]

So, uhm.. I was able to replicate the fly, ghost, walk instructions; however, the flight state doesn't hold if you press Shift or Space keys; nor does the player movement head in the direction you point the mouse to (Z isn't touched). Think I can write-up a simple fly mode; you'll have to combine it with the "ghost" injected code (which lets you move through walls -- noclip) Catch up later

[SunBeam]

Here's what I've done so far



Next-up.. adjusting Z with hotkeys up/down, so you can actually make use of it ..then.. adjusting flying speed (adding a modifier) ..OR.. a fly cam mode like in Origins/Odyssey with teleportation to camera position. Will also attempt doing movement per mouse orientation (with sin/cos functions). Cielos, you can contribute if you want You like those damn modifiers.

BR,
Sun

P.S.: Reason I'm doing all this is not Darksiders 3, but wanna see how much custom stuff I can do with shipped UE4 games (remember devs disable most stuff).

[Cielos]

^ looking for the normalized vector now...

EDIT:
ok, seems I've found a reliable one:

Code: Select all

Darksiders3-Win64-Shipping.exe+16D1A00 - 48 89 91 70020000     - mov [rcx+00000270],rdx
Darksiders3-Win64-Shipping.exe+16D1A07 - 4C 8B C1              - mov r8,rcx
Darksiders3-Win64-Shipping.exe+16D1A0A - 48 85 D2              - test rdx,rdx
Darksiders3-Win64-Shipping.exe+16D1A0D - 74 65                 - je Darksiders3-Win64-Shipping.exe+16D1A74
Darksiders3-Win64-Shipping.exe+16D1A0F - 48 8B 0D BADDBE01     - mov rcx,[Darksiders3-Win64-Shipping.exe+32BF7D0] { [158CE020] }
Darksiders3-Win64-Shipping.exe+16D1A16 - 48 83 B9 F00A0000 00  - cmp qword ptr [rcx+00000AF0],00 { 0 }
Darksiders3-Win64-Shipping.exe+16D1A1E - 74 17                 - je Darksiders3-Win64-Shipping.exe+16D1A37
Darksiders3-Win64-Shipping.exe+16D1A20 - 83 BA B0080000 00     - cmp dword ptr [rdx+000008B0],00 { 0 }
Darksiders3-Win64-Shipping.exe+16D1A27 - 74 0E                 - je Darksiders3-Win64-Shipping.exe+16D1A37
Darksiders3-Win64-Shipping.exe+16D1A29 - 48 8B 89 F00A0000     - mov rcx,[rcx+00000AF0]
Darksiders3-Win64-Shipping.exe+16D1A30 - 48 8B 01              - mov rax,[rcx]
Darksiders3-Win64-Shipping.exe+16D1A33 - 48 FF 60 58           - jmp qword ptr [rax+58]
Darksiders3-Win64-Shipping.exe+16D1A37 - 0F28 82 E0010000      - movaps xmm0,[rdx+000001E0]
Darksiders3-Win64-Shipping.exe+16D1A3E - 41 0F11 80 80020000   - movups [r8+00000280],xmm0
Darksiders3-Win64-Shipping.exe+16D1A46 - 0F28 8A F0010000      - movaps xmm1,[rdx+000001F0]
Darksiders3-Win64-Shipping.exe+16D1A4D - 41 0F11 88 90020000   - movups [r8+00000290],xmm1
Darksiders3-Win64-Shipping.exe+16D1A55 - 0F28 82 00020000      - movaps xmm0,[rdx+00000200]
Darksiders3-Win64-Shipping.exe+16D1A5C - 41 0F11 80 A0020000   - movups [r8+000002A0],xmm0
Darksiders3-Win64-Shipping.exe+16D1A64 - 0F28 8A 10020000      - movaps xmm1,[rdx+00000210]
Darksiders3-Win64-Shipping.exe+16D1A6B - 41 0F11 88 B0020000   - movups [r8+000002B0],xmm1
Darksiders3-Win64-Shipping.exe+16D1A73 - C3                    - ret 
Darksiders3-Win64-Shipping.exe+16D1A74 - 33 C0                 - xor eax,eax
Darksiders3-Win64-Shipping.exe+16D1A76 - 48 C7 81 80020000 0000803F - mov qword ptr [rcx+00000280],3F800000 { [E3060070] }
Darksiders3-Win64-Shipping.exe+16D1A81 - 48 89 81 88020000     - mov [rcx+00000288],rax
Darksiders3-Win64-Shipping.exe+16D1A88 - 89 81 90020000        - mov [rcx+00000290],eax
Darksiders3-Win64-Shipping.exe+16D1A8E - 48 89 81 9C020000     - mov [rcx+0000029C],rax
Darksiders3-Win64-Shipping.exe+16D1A95 - 89 81 A4020000        - mov [rcx+000002A4],eax
Darksiders3-Win64-Shipping.exe+16D1A9B - 48 89 81 B0020000     - mov [rcx+000002B0],rax
Darksiders3-Win64-Shipping.exe+16D1AA2 - 89 81 B8020000        - mov [rcx+000002B8],eax
Darksiders3-Win64-Shipping.exe+16D1AA8 - 48 C7 81 94020000 0000803F - mov qword ptr [rcx+00000294],3F800000 { [E3060070] }
Darksiders3-Win64-Shipping.exe+16D1AB3 - 48 C7 81 A8020000 0000803F - mov qword ptr [rcx+000002A8],3F800000 { [E3060070] }
Darksiders3-Win64-Shipping.exe+16D1ABE - C7 81 BC020000 0000803F - mov [rcx+000002BC],3F800000 { [E3060070] }
Darksiders3-Win64-Shipping.exe+16D1AC8 - C3                    - ret 

fetch rcx at the start of this call.
[rcx+28c] and [rcx+29c] and [rcx+2ac]
just put them together in a xmm, than apply it (together with the delta of course) to the coord.
I don't remember how unreal handle coords (or maybe I just never made a no-clip for games using this engine..), you may need to rearrange the order of the elements accordingly.

there are quite many normalized vector that stack together but I've yet to find a reliable opcodes that would read them alone. you may want to see if you can locate a whole normalized vector that is stack together already in one of the structures you found. should be more convenient.
but if you want to stick with this one, shufps should always do the trick~

as for the 2d normalized vector (for strafing left/right), they can be found in the Character structure (if memory serves) already, but I forgot to save them... and I gotta sleep now... so....
hope this would speed the things up and I'll have a free no-clip to play with the next time I play the game~
thanks in advance!

[SunBeam]

I got that Want the camera, sin/cos, player coords, etc.? See attached table.

• CollisionCylinder -> X,Y,Z (player)

• DSStateCamera -> MovieSceneFloatSection_3 -> X,Y,Z (camera)

Rotators are in DSStateCamera; check that offset I listed; it's 1.00 when rotate further left-back, etc.

Darksiders3-Win64-Shipping.CT

1.3

(25.48 KiB) Downloaded 75 times

Meanwhile: viewtopic.php?p=70654#p70654

[Cielos]

^ damn. I should read more carefully before doing shit...
time to sleep then.
good night~

[teinousi]

Darksiders3-Win64-Shipping.CT

Sorry I hav't play this game yet but I check your cheat table I have a question , is this game have no any special attack using "wrath" or something ?

[Ewgendi]

[Link]
what am I doing wrong?((((((

[Kadaji]

[Link]
what am I doing wrong?((((((

You patched the wrong bytes in the exe