Cheat Engine

Zanzer · Posted: Tue Feb 07, 2017 7:39 pm Post subject:

I was actually suggesting he find the structure that holds a pointer to the structure he's after.
Although, it sounds like his automated pointer scan may not be exactly accurate.

Can try this another way.
With the prior version instruction, select More Information and get the value of RSI.
Do an 8-byte search for that hex value.
Find out what accesses the found addresses (hopefully only one?).
Then see if those same instructions exist in the new version.

You can also try as ++METHOS suggested, to find the other addresses within the same structure.
Looking further down in that instruction, it appears to be a fairly big structure (at least 0x130).

Also try scrolling up from that found instruction and find an instruction that sets RSI.

++METHOS · Posted: Tue Feb 07, 2017 7:40 pm Post subject:

Zanzer · Posted: Tue Feb 07, 2017 7:42 pm Post subject:

Oh, you're trying to bring back console commands?
You'd probably be better off finding the address of certain flags that the console enabled.

For instance, when you turn god mode on and off, there might be a 1-byte address changing from 1 to 0.
Then, inside the "take damage" function, the game checks whether this flag is 1.
If so, it skips the "do damage" logic, thereby giving you god mode.

Even when the console is disabled, the check for such a 1-byte variable may still exist in the running code.

++METHOS · Posted: Tue Feb 07, 2017 7:46 pm Post subject:

With the old version, you can backtrace to see where the new version is changing course, or, as previously suggested, just reroute code from wherever you want (or try to manually call via thread) in order to execute the sub-routine that is responsible for enabling the console menu. Seeing as you have an older version of the target where the code for the console menu is being executed, this should be relatively easy - assuming that the newer version has all of the necessary code intact.

Greenhouse · Cheater Reputation: 0 Joined: 20 Aug 2016 Posts: 44

++METHOS · Posted: Tue Feb 07, 2017 8:12 pm Post subject:

I might take a look when I have time. In the meantime, you can check out SunBeam's posts, as he has documented his experiences with unlocking consoles with Unreal Engine. I will add that most documented analyses are for UE3, and that UE4 is apparently very different. I've not looked myself. I wouldn't get your hopes up, that being said.

Greenhouse · Cheater Reputation: 0 Joined: 20 Aug 2016 Posts: 44

++METHOS · Posted: Tue Feb 07, 2017 8:38 pm Post subject:

Well, since you seem to have all of the angles covered and we seem to be wasting your time, then maybe you would be better off tackling this problem solo. Very Happy

Greenhouse · Cheater Reputation: 0 Joined: 20 Aug 2016 Posts: 44

++METHOS · Posted: Tue Feb 07, 2017 8:50 pm Post subject:

Great. Good luck.