Community Cheat Tables of Cheat Engine
https://fearlessrevolution.com/
May I ask, how can I use your Rapid Fire Scan ? I did find the Address but don't know how to use itxorps wrote: ↑Sat Mar 21, 2020 8:35 amWell I do not know. The ammo function there is reworked very well. I mean if you implement it normally, and not 155 filters.
I'll take another look at it tonight!
Unlimited HealthNo reloadSpoiler
Code: Select all
[ENABLE] aobscanmodule(_unlimited_health_,re3demo.exe,8B 40 58 48 8B * * * 48 83 C4 * * C3 48 8B * * * * 01 * * * 48 83 C4 * * C3) alloc(newmem,$1000,_unlimited_health_) label(code) label(return) newmem: mov ebx,[rax+54] mov [rax+58],ebx code: mov eax,[rax+58] mov rbx,[rsp+30] jmp return _unlimited_health_: jmp newmem db 90 90 90 return: registersymbol(_unlimited_health_) [DISABLE] _unlimited_health_: db 8B 40 58 48 8B 5C 24 30 unregistersymbol(_unlimited_health_) dealloc(newmem)GrenadesSpoiler
Code: Select all
[ENABLE] aobscanmodule(_no_reload_weapon_,re3demo.exe,48 8B 74 24 38 48 83 * * * * * * B8 F2 41 B8 01 00 00 00) _no_reload_weapon_+11: db 00 registersymbol(_no_reload_weapon_) [DISABLE] _no_reload_weapon_+11: db 01 unregistersymbol(_no_reload_weapon_)No recoilSpoiler
Code: Select all
[ENABLE] aobscanmodule(_unlimited_grenades_,re3demo.exe,F2 0F 11 4B 10 * * * * * 41 B9 01 00 00 00) _unlimited_grenades_+0C: db 00 registersymbol(_unlimited_grenades_) [DISABLE] _unlimited_grenades_+0C: db 01 unregistersymbol(_unlimited_grenades_)SpreadSpoiler
Code: Select all
[ENABLE] aobscanmodule(_no_recoil_weapon_,re3demo.exe,0F 84 * * * * 48 8B 47 50 48 8B * * * * * * 83 * * * 0F 85 * * * * 48 85 * 75 13) _no_recoil_weapon_: db 90 E9 registersymbol(_no_recoil_weapon_) [DISABLE] _no_recoil_weapon_: db 0F 84 unregistersymbol(_no_recoil_weapon_)Universal keySpoiler
Code: Select all
[ENABLE] aobscanmodule(_no_spread_weapon_,re3demo.exe,75 94 * * * * F3 0F 11 87 28 01 00 00) alloc(newmem,$1000,_no_spread_weapon_) label(_spread_weapon_) label(return) newmem: movss xmm0,[_spread_weapon_] movss [rdi+00000128],xmm0 jmp return _spread_weapon_: dd (float)100 _no_spread_weapon_+06: jmp newmem db 90 90 90 return: registersymbol(_no_spread_weapon_) [DISABLE] _no_spread_weapon_+06: db F3 0F 11 87 28 01 00 00 unregistersymbol(_no_spread_weapon_) dealloc(newmem)Damage weaponSpoiler
Code: Select all
[ENABLE] aobscanmodule(_keu.1_,re3demo.exe,74 * 48 85 * 74 * * 39 * * 74 * 48 85 * 74 * 8B * * * * * * 48 85 * 74) _keu.1_: db EB registersymbol(_keu.1_) aobscanmodule(_keu.2_,re3demo.exe,74 * 48 * * 74 * 83 * * * 74 * 48 * * 74 * 8B * * 48 * * 74 * 48) _keu.2_: db EB registersymbol(_keu.2_) [DISABLE] _keu.1_: db 74 unregistersymbol(_keu.1_) _keu.2_: db 74 unregistersymbol(_keu.2_)Max slotSpoiler
Code: Select all
[ENABLE] aobscanmodule(_damage_weapon_,re3demo.exe,48 8B 48 58 48 85 * 74 * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * F3 0F 10 74 91 20) // should be unique alloc(newmem,$1000,_damage_weapon_) label(damage) label(return) newmem: movss xmm6,[rcx+rdx*4+20] mulss xmm6,[damage] jmp return damage: dd (float)50 _damage_weapon_+3F: jmp newmem db 90 return: registersymbol(_damage_weapon_) [DISABLE] _damage_weapon_+3F: db F3 0F 10 74 91 20 unregistersymbol(_damage_weapon_) dealloc(newmem)Rapid fire scanSpoiler
Code: Select all
[ENABLE] aobscanmodule(_max_slot_,re3demo.exe,39 BE 90 00 00 00 0F 9F * EB 02) alloc(newmem,$1000,"re3demo.exe"+131F9D0B) label(code) label(return) newmem: mov [rsi+00000090],#20 code: cmp [rsi+00000090],edi jmp return _max_slot_: jmp newmem nop return: registersymbol(_max_slot_) [DISABLE] _max_slot_: db 39 BE 90 00 00 00 unregistersymbol(_max_slot_) dealloc(newmem)I shared my experience with you guysSpoiler
Code: Select all
44 39 61 30 0F 9F D1 48 8B 43 50 * * * * * * * * * * * * * * * * * * * 8B 96 B0 00 00 00
By the way. In the second part of the game - it worked like this:
Function ammoSpoiler
Code: Select all
{ Game : re2.exe Version: Date : 2019-07-21 Author : LIRW This script does blah blah blah } [ENABLE] aobscanmodule(_unlimited_ammo_1_,re2.exe,48 * * 74 * 48 * * * 48 * * 74 * 8B * * 41 * * 49 * * 44 * * * 48) _unlimited_ammo_1_+11: db 90 90 90 registersymbol(_unlimited_ammo_1_) aobscanmodule(_unlimited_ammo_2_,re2.exe,48 * * 74 * 48 * * * 48 * * 74 * 8B * * 41 * * 49 * * 48) _unlimited_ammo_2_+11: db 90 90 90 registersymbol(_unlimited_ammo_2_) aobscanmodule(_unlimited_ammo_3_,re2.exe,48 * * 48 * * E8 * * * * 48 * * * 48 * * * 0F 85 * * * * 49 * * * * 41 * * 41 * * 48 * * 74 * 48 * * * 48) _unlimited_ammo_3_+21: db 90 90 90 registersymbol(_unlimited_ammo_3_) [DISABLE] _unlimited_ammo_1_+11: db 41 2B FA unregistersymbol(_unlimited_ammo_1_) _unlimited_ammo_2_+11: db 41 2B FE unregistersymbol(_unlimited_ammo_2_) _unlimited_ammo_3_+21: db 41 2B D7 unregistersymbol(_unlimited_ammo_3_) { // ORIGINAL CODE - INJECTION POINT: "re2.exe"+1832FB7 "re2.exe"+1832F9D: 74 05 - je re2.exe+1832FA4 "re2.exe"+1832F9F: 8B 4A 20 - mov ecx,[rdx+20] "re2.exe"+1832FA2: EB 02 - jmp re2.exe+1832FA6 "re2.exe"+1832FA4: 8B CF - mov ecx,edi "re2.exe"+1832FA6: 48 85 C0 - test rax,rax "re2.exe"+1832FA9: 74 0C - je re2.exe+1832FB7 "re2.exe"+1832FAB: 48 8B 50 10 - mov rdx,[rax+10] "re2.exe"+1832FAF: 48 85 D2 - test rdx,rdx "re2.exe"+1832FB2: 74 03 - je re2.exe+1832FB7 "re2.exe"+1832FB4: 8B 7A 20 - mov edi,[rdx+20] // ---------- INJECTING HERE ---------- "re2.exe"+1832FB7: 41 2B FA - sub edi,r10d //_unlimited_ammo_1_ "re2.exe"+1832FBA: 49 8B D4 - mov rdx,r12 // ---------- DONE INJECTING ---------- "re2.exe"+1832FBD: 44 8D 04 39 - lea r8d,[rcx+rdi] "re2.exe"+1832FC1: 48 8B CB - mov rcx,rbx "re2.exe"+1832FC4: 45 03 C7 - add r8d,r15d "re2.exe"+1832FC7: E8 94 4C 65 FF - call re2.exe+E87C60 "re2.exe"+1832FCC: 48 8B 43 50 - mov rax,[rbx+50] "re2.exe"+1832FD0: 48 83 78 18 00 - cmp qword ptr [rax+18],00 "re2.exe"+1832FD5: 0F 85 FB DF FF FF - jne re2.exe+1830FD6 "re2.exe"+1832FDB: 44 8B 44 24 40 - mov r8d,[rsp+40] "re2.exe"+1832FE0: 48 8B D6 - mov rdx,rsi "re2.exe"+1832FE3: 48 8B CB - mov rcx,rbx } { // ORIGINAL CODE - INJECTION POINT: "re2.exe"+1833067 "re2.exe"+1833047: 48 8B 43 50 - mov rax,[rbx+50] "re2.exe"+183304B: 48 39 78 18 - cmp [rax+18],rdi "re2.exe"+183304F: 74 37 - je re2.exe+1833088 "re2.exe"+1833051: E9 80 DF FF FF - jmp re2.exe+1830FD6 "re2.exe"+1833056: 48 85 C0 - test rax,rax "re2.exe"+1833059: 74 0C - je re2.exe+1833067 "re2.exe"+183305B: 48 8B 48 10 - mov rcx,[rax+10] "re2.exe"+183305F: 48 85 C9 - test rcx,rcx "re2.exe"+1833062: 74 03 - je re2.exe+1833067 "re2.exe"+1833064: 8B 79 20 - mov edi,[rcx+20] // ---------- INJECTING HERE ---------- "re2.exe"+1833067: 41 2B FE - sub edi,r14d // _unlimited_ammo_2_ "re2.exe"+183306A: 49 8B D4 - mov rdx,r12 // ---------- DONE INJECTING ---------- "re2.exe"+183306D: 48 8B CB - mov rcx,rbx "re2.exe"+1833070: 45 8D 04 3F - lea r8d,[r15+rdi] "re2.exe"+1833074: E8 E7 4B 65 FF - call re2.exe+E87C60 "re2.exe"+1833079: 48 8B 43 50 - mov rax,[rbx+50] "re2.exe"+183307D: 48 83 78 18 00 - cmp qword ptr [rax+18],00 "re2.exe"+1833082: 0F 85 4E DF FF FF - jne re2.exe+1830FD6 "re2.exe"+1833088: B0 01 - mov al,01 "re2.exe"+183308A: E9 49 DF FF FF - jmp re2.exe+1830FD8 "re2.exe"+183308F: CC - int 3 "re2.exe"+1833090: 48 89 5C 24 08 - mov [rsp+08],rbx } { // ORIGINAL CODE - INJECTION POINT: "re2.exe"+1833020 "re2.exe"+1832FF4: 0F 84 8E 00 00 00 - je re2.exe+1833088 "re2.exe"+1832FFA: E9 D7 DF FF FF - jmp re2.exe+1830FD6 "re2.exe"+1832FFF: 48 8B D6 - mov rdx,rsi "re2.exe"+1833002: 48 8B CB - mov rcx,rbx "re2.exe"+1833005: E8 56 4C 65 FF - call re2.exe+E87C60 "re2.exe"+183300A: 48 8B 43 50 - mov rax,[rbx+50] "re2.exe"+183300E: 48 39 78 18 - cmp [rax+18],rdi "re2.exe"+1833012: 0F 85 BE DF FF FF - jne re2.exe+1830FD6 "re2.exe"+1833018: 49 8B 44 24 18 - mov rax,[r12+18] "re2.exe"+183301D: 41 8B D6 - mov edx,r14d // ---------- INJECTING HERE ---------- "re2.exe"+1833020: 41 2B D7 - sub edx,r15d // _unlimited_ammo_3_ "re2.exe"+1833023: 48 85 C0 - test rax,rax // ---------- DONE INJECTING ---------- "re2.exe"+1833026: 74 0E - je re2.exe+1833036 "re2.exe"+1833028: 48 8B 48 10 - mov rcx,[rax+10] "re2.exe"+183302C: 48 85 C9 - test rcx,rcx "re2.exe"+183302F: 74 05 - je re2.exe+1833036 "re2.exe"+1833031: 8B 49 20 - mov ecx,[rcx+20] "re2.exe"+1833034: EB 02 - jmp re2.exe+1833038 "re2.exe"+1833036: 8B CF - mov ecx,edi "re2.exe"+1833038: 3B D1 - cmp edx,ecx "re2.exe"+183303A: 7C 1A - jl re2.exe+1833056 "re2.exe"+183303C: 49 8B D4 - mov rdx,r12 }
Here's a script I made from it. I definitely recommend using no recoil and infinite ammo. Possibly no spread as well but the gun seems pretty accurate to me.AwakenZero wrote: ↑Wed Mar 25, 2020 7:10 amMay I ask, how can I use your Rapid Fire Scan ? I did find the Address but don't know how to use it
Code: Select all
{ Game : re3demo.exe
Version:
Date : 2020-03-25
Author : Deathwing Zero + xorps for AOB
}
[ENABLE]
aobscanmodule(rapidfire,re3demo.exe,48 8B 43 50 4C 39 60 18 0F 85 0D 02 00 00 84) // should be unique
alloc(newmem,$1000,"re3demo.exe"+13A2CFA2)
label(code)
label(return)
newmem:
code:
nop
nop
nop
nop
cmp [rax+18],r12
jmp return
rapidfire:
jmp newmem
nop 3
return:
registersymbol(rapidfire)
[DISABLE]
rapidfire:
db 48 8B 43 50 4C 39 60 18
unregistersymbol(rapidfire)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: "re3demo.exe"+13A2CFA2
"re3demo.exe"+13A2CF84: 48 85 C9 - test rcx,rcx
"re3demo.exe"+13A2CF87: 75 12 - jne re3demo.exe+13A2CF9B
"re3demo.exe"+13A2CF89: 8D 51 38 - lea edx,[rcx+38]
"re3demo.exe"+13A2CF8C: 45 31 C0 - xor r8d,r8d
"re3demo.exe"+13A2CF8F: 48 89 D9 - mov rcx,rbx
"re3demo.exe"+13A2CF92: E8 39 86 86 EE - call re3demo.exe+22955D0
"re3demo.exe"+13A2CF97: 30 C9 - xor cl,cl
"re3demo.exe"+13A2CF99: EB 07 - jmp re3demo.exe+13A2CFA2
"re3demo.exe"+13A2CF9B: 44 39 61 30 - cmp [rcx+30],r12d
"re3demo.exe"+13A2CF9F: 0F 9F D1 - setg cl
// ---------- INJECTING HERE ----------
"re3demo.exe"+13A2CFA2: 48 8B 43 50 - mov rax,[rbx+50]
"re3demo.exe"+13A2CFA6: 4C 39 60 18 - cmp [rax+18],r12
// ---------- DONE INJECTING ----------
"re3demo.exe"+13A2CFAA: 0F 85 0D 02 00 00 - jne re3demo.exe+13A2D1BD
"re3demo.exe"+13A2CFB0: 84 C9 - test cl,cl
"re3demo.exe"+13A2CFB2: 0F 84 05 02 00 00 - je re3demo.exe+13A2D1BD
"re3demo.exe"+13A2CFB8: 49 8B 96 B0 00 00 00 - mov rdx,[r14+000000B0]
"re3demo.exe"+13A2CFBF: 45 31 C0 - xor r8d,r8d
"re3demo.exe"+13A2CFC2: 48 89 D9 - mov rcx,rbx
"re3demo.exe"+13A2CFC5: 48 85 D2 - test rdx,rdx
"re3demo.exe"+13A2CFC8: 75 0F - jne re3demo.exe+13A2CFD9
"re3demo.exe"+13A2CFCA: BA 38 00 00 00 - mov edx,00000038
"re3demo.exe"+13A2CFCF: E8 FC 85 86 EE - call re3demo.exe+22955D0
}set chance trigger to 0 , set min health trigger to disable.mateusre6g wrote: ↑Wed Mar 25, 2020 2:57 amkey trigger: does not work when holding the space bar
in the update 7 table, but the update 6 table works perfect
Adding lock picks to the game can't be done. Even if they could be added there would be no point in it. The yellow padlocks are non-interactable. If they were you would be able to use the universal key item cheat to open them. As for no clip, it's possible but also not very much point in it. There isn't anywhere you can really go.
so, re-download and test.Update.9
- added controller support for perfect dodge mod, slow motion, and universal item key. NONE of them are tested. report!
no.
for head explodes/limp detaches, not for now. maybe I'll add it back later.mateusre6g wrote: ↑Thu Mar 26, 2020 6:57 pmcould create piercing ammunition that explodes on zombie heads and damage multiplier, please.
