FearLess Cheat Engine

hi , i decided to update the table to work for latest RPCS3 master build...
> This Table only Work for MGS4 25th Anniversary - BLES00246 updated to version 02.00 patch.

> And use this RPCS3 version : rpcs3-v0.0.11-10814 (Custom Build for MGS4) by illusion <-- to get better performance and stability of MGS4

> Link for RPCS3 Custom Build : httpx://github.com/illusion0001/rpcs3/releases
> Download & use latest RPCS3 master build : [Link]

> Don't forget to add big endian to CE value type : httpx://forum.cheatengine.org/viewtopic.php?p=5305367
> Use CE 7.5 and enable Extra Custom Types :


> On RPCS3, Custom Configuration, Set SPU Block Size to Giga :

List Cheat on the Table:
- Infinite Health
- Infinite Stamina
- Stress % (Set to 0)
- Infinite Battery
- Infinite Ammo
- No Reload
- Infinite Suppressor
- Infinite DP (Drebin's Point)
- Invisible (Camo Always 100%)

update 3
- modify the script using 14 bytes jmp instead 5 bytes to avoid error from allocation memory...
- added Infinite REX HP
- added Infinite Chaff Grenade

let me know if the table doesnt work...

Almahdi wrote: ↑

Thu Oct 29, 2020 10:06 am

> This Table only Work for MGS4 25th Anniversary - BLES00246 updated to version 02.00 patch.

> And use this RPCS3 version : rpcs3-v0.0.11-10814 (Custom Build for MGS4) by illusion <-- to get better performance and stability of MGS4

> Link for RPCS3 Custom Build : [Link]

> Don't forget to add big endian to CE value type : [Link]

List Cheat on the Table:
- Infinite Health
- Infinite Stamina
- Stress % (Set to 0)
- Infinite Battery
- Infinite Ammo
- No Reload
- Infinite Suppressor
- Infinite DP (Drebin's Point)
- Invisible (Camo Always 100%)

hi mate, thanks for the CT, but somehow the Camo option not working, prompted the below error message:

<<Error while scanning for AOB's : invisibility Error: Not all results found>>

im running rpcs3-illusion build, MGS4 BLES00246 v2.0, CE 7.2 +big endian.

Thanks! I can confirm this table also works for BLUS30109 version 2.00.

I'm playing BLUS30109, and the only cheat that doesn't work is the 100% camo. Any tips on how to find the AOB for that one? Tried looking for similar AOBs but couldn't really get a good match. I'm guessing camo is some kind of float between 0 and 2?

value type is 4 byte big endian, address for camo on my system (BLES00246) is 3009DE534 <--- add this address on your table and find out what writes this address, NOP that instruction, set the value of 3009DE534 to 512 in 4 Byte big endian and freeze it...... hope that help you.

Hmm i think i was able to find it at 3009DE520 for my version. I'm checking whats writing to address, and getting two opcodes which are very similar. I've tried NOPing both of them out, and setting the camo value to 512, but its causing some weird effects. Its not settings camo to 100%, and it also causes my character to start crouching. I've tried different values and they don't seem to map properly to the camo value.

Almahdi wrote: ↑

Wed Jan 27, 2021 11:43 am

value type is 4 byte big endian, address for camo on my system (BLES00246) is 3009DE534 <--- add this address on your table and find out what writes this address, NOP that instruction, set the value of 3009DE534 to 512 in 4 Byte big endian and freeze it...... hope that help you.

Can you also explain your script a bit? I wanted to know what the CMP is doing, and why we are doing a MOV with a value of 2?

The MOV of 2 is because x86 is little-endian and PS3 is big-endian PPC. In 16-bits:
512 in little-endian: 00000010 00000000
512 in big-endian: 00000000 00000010
And 2 in little-endian: 00000000 00000010
So MOV with 2 is appropriate to write a big-endian value of 512.

anji wrote: ↑

Thu Jan 28, 2021 1:47 am

The MOV of 2 is because x86 is little-endian and PS3 is big-endian PPC. In 16-bits:
512 in little-endian: 00000010 00000000
512 in big-endian: 00000000 00000010
And 2 in little-endian: 00000000 00000010
So MOV with 2 is appropriate to write a big-endian value of 512.

Ah that makes a lot of sense, thanks! Any idea on the CMP, and why the MOV is to a different address than the main movbe op code?

makotech222 wrote: ↑

Thu Jan 28, 2021 2:10 am

Ah that makes a lot of sense, thanks! Any idea on the CMP, and why the MOV is to a different address than the main movbe op code?

No. The 100% camo script also doesn't work for me (AOB not found), and I couldn't find a reasonable address for camo either...

I did find Chaff grenades for BLUS30109 at 30058BE88 (2 byte big endian) in case anyone needs some extra.

anji wrote: ↑

Thu Jan 28, 2021 2:53 am

makotech222 wrote: ↑

Thu Jan 28, 2021 2:10 am

Ah that makes a lot of sense, thanks! Any idea on the CMP, and why the MOV is to a different address than the main movbe op code?

No. The 100% camo script also doesn't work for me (AOB not found), and I couldn't find a reasonable address for camo either...

I did find Chaff grenades for BLUS30109 at 30058BE88 (2 byte big endian) in case anyone needs some extra.

Try the address I have above (3009DE520 ), it worked for me. Also, i'm on latest master branch release of rpcs3. Might make for different op codes.

makotech222 wrote: ↑

Thu Jan 28, 2021 3:38 am

Try the address I have above (3009DE520 ), it worked for me. Also, i'm on latest master branch release of rpcs3. Might make for different op codes.

You must have quite a rig if you can play MGS4 with mainline RPCS3... Only illusion0001's build gives me >30fps on a Ryzen 3600.

I saw your address and took a look earlier today, in both RPCS3 branches I use. However I think the values in this region of memory might be related to player movement instead of camo... For example if I stay stationary and switch between different camo options the indicator in the top right will change, but the value at this address doesn't. It might be camo-related but perhaps only part of the puzzle.

Alright, finally got 100% camo working, for BLUS30109 V2.0, on master branch rpcs3 (no special build).

I can't get any of the cheats to work.

anyone has an updated table for camo, I tried updating it but no luck on my knowledge with CE? BLES00246