Metro Last Light Redux - table v: 1.0.7 CT

UltimatePoto42 · Post by **UltimatePoto42** » Wed Feb 27, 2019 3:19 am

RETIRED - Use this cheat table instead viewtopic.php?t=820

Metro Last Light Redux - table v: 1.0.7 CT
Game Name: Metro Last Light Redux
Game Vendor: Steam
Game Version:
Game Process: metro.exe
Game File Version: 1.0.0.3

Made by
SunBeam
The Majestic

Features:

Features

I2CETState
Saves and loads table state (i.e.: what memory records are enabled).
Uses named states (i.e.: 'default', 'testState', or 'SuperCheated'), if no name is given then 'default' is used.
- Save Table State : Default
- Save Table State : Casual
- Save Table State : Full
- Save Table State : Test
- Load Table State : Default
- Load Table State : Casual
- Load Table State : Full
- Load Table State : Test
Pointers
Health Dec. Hook
Combatant Health Dec. Hook
Health Inc. Multiplier
Infinite Med Kits
No Reload
Infinite Ammo
Ammo Pickup Multiplier
Ammo Cap. Multiplier
Infinite Throwables
Throwables Pickup Multiplier
Infinite Turret Ammo
Infinite Air Pressure
Weapon Charge Dec. Multiplier
Weapon Charge Inc. Multiplier
Gas Mask Durability Dec. Hook
Infinite Filter Reserve
Filter Reserve Pickup Multiplier
Infinite Filter
Filter Dec. Multiplier
Battery Dec. Multiplier
Battery Charge Multiplier
Charge Battery Anytime
Super Accuracy { SunBeam }
No Recoil { SunBeam }
Weapon Fire Rate Hook
Big Clip
No Weapon Heat
No Turret Heat

General Helper Scripts:

Fill Health
+50 Military Rounds
+100 Military Rounds
+500 Military Rounds
Fill Battery
Fill Air Pressure
Fix Gas Mask
New Filter
Fill Filter Reserves

Other Features:

Auto Table Updater
Auto Attach to process
Simple Logger (with levels)
Debug Section:
- Helpers:
  - Print Game Module Info
  - Print Game Module Version
  - Enable Compact Mode
  - Disable Compact Mode
  - Set Logger Level : WARN (Default)
  - Set Logger Level : INFO
  - Set Logger Level : DEBUG
  - Set Logger Level : TRACE
- All hooks have their own section, check scripts for real hook names.

Versions:

Table Versions Info

v 1.0.1: Initial release
v 1.0.2:
- Added:
  - Big Clip
  - Charge Battery Anytime
  - Super Accuracy { SunBeam }
  - No Recoil { SunBeam }
  - General Helpers:
    - Fill Air Pressure
    - Charge Weapon
v 1.0.3: Fixed some things in my Lua modules. The CT updater is no longer silent, but will only prompt you if a new table is available.
v 1.0.4:
- Added:
  - "Combatant Health Dec. Hook"
  - More ammo pointers to the "Pointers" section.
  - Added "Darts" to "Infinite Ammo".
- Changed:
  - "Infinite Gas Mask Durability" to "Gas Mask Durability Dec. Hook", now uses flag for damage multiplier or infinite durability.
  - Now acts on player only.
    - No Reload
    - Infinite Ammo
    - Gas Mask Durability Dec. Hook
    - Infinite Filter
    - Filter Dec. Multiplier
    - Super Accuracy { SunBeam }
    - Weapon Fire Rate Hook
v 1.0.5: Fixed "+$xx Military Ammo" in the general helpers.
v 1.0.6: Fixed "Infinite Ammo".
v 1.0.7: Fixed "Ammo Cap. Multiplier".

Current Table:

Metro 2033 Redux cheat table can be found here.

Errors and Bugs:

Errors and Bugs, follow these steps

[Link]
Open CE and open the settings window (Edit -> Settings).
Then check that you are allowing Lua scripts to run, you can select any one of the three shown here.
[Link]
Click Ok and then close CE.
Start the game.
Open the CE table file by double clicking it.
Give the table a second to load, run the Lua scripts, and attach to the game.
- [Link], if not auto attached.
Print the game module infromation.
[Link]
Set the Logger level to "Debug".
[Link]
Activate the "Main Hooks".
[Link]
Activate any of the scripts/hooks that you wish to use.
You can also load the table state "test".
If error is during deactivation of scripts, then deactivate all scripts.
You can load the table state "none".
Copy all the output text of the CE's "Lua Engine" window.
[Link]
Post the output text here in side code blocks. i.e. [code][/code]
[Link]

If you find anything you want to know more about how it works (the Lua stuff, or any of the AA scripts), just let me know.

Older Table Versions:

How to use this cheat table?

Install Cheat Engine
Double-click the .CT file in order to open it.
Click the PC icon in Cheat Engine in order to select the game process.
Keep the list.
Activate the trainer options by checking boxes or setting values from 0 to 1

UltimatePoto42 · Post by **UltimatePoto42** » Wed Feb 27, 2019 6:20 am

Here's a script to let you charge your battery even if it's mostly charged.

I don't know about you'll, but I can crawl through real tunnels with real spiders. But the ones in this game make me want to constantly charge the battery just for comfort, else I'm freaked out the whole time.

I'll be adding it to the next table.

Code: Select all

{
	Process			: metro.exe  -  (x64)
	Module			: metro.exe
	Game Title		: Metro Last Light Redux
	Game Version	: 1.0.0.3
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 02/26/19
	Author			: ShyTwig16
	Name			: BatteryChargeCheckHook

	Battery Charge Check Hook
}

{$STRICT}

define(address, metro.exe+1CE88E)
define(oldBytes, 0F 97 C0) // seta al
define(newBytes, B0 01 90) // mov al,1
						   // nop

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobBatteryChargeCheckHook, metro.exe, F3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxx0F2Fxx0F97xxC3)
// i2aobScanModule(aobBatteryChargeCheckHook, metro.exe, F3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxxxxxxxxxxF3xxxxxx0F2Fxx0F97xxC3)
define(injBatteryChargeCheckHook, aobBatteryChargeCheckHook+27)
assert(injBatteryChargeCheckHook, oldBytes)
// i2assert(injBatteryChargeCheckHook, oldBytes)
registerSymbol(injBatteryChargeCheckHook)


////
//// ---------- Injection Point ----------
injBatteryChargeCheckHook:
	db newBytes


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injBatteryChargeCheckHook:
	db oldBytes

unregisterSymbol(injBatteryChargeCheckHook)

{
//// Injection Point: metro.exe+1CE88E  -  000000013F91E88E
//// AOB address: 000000013F91E867  -  metro.exe+1CE867
//// Process: metro.exe  -  000000013F750000
//// Module: metro.exe  -  000000013F750000
//// Module Size: 00000000013CA000
metro.exe+1CE83E:  C1 E8 13                    -  shr eax,13                         
metro.exe+1CE841:  83 E0 01                    -  and eax,01                         
metro.exe+1CE844:  C3                          -  ret                                
metro.exe+1CE845:  CC                          -  int 3                              
metro.exe+1CE846:  CC                          -  int 3                              
metro.exe+1CE847:  CC                          -  int 3                              
metro.exe+1CE848:  48 8B 91 88FDFFFF           -  mov rdx,[rcx-00000278]             
metro.exe+1CE84F:  F3 0F10 51 50               -  movss xmm2,[rcx+50]                
metro.exe+1CE854:  33 C0                       -  xor eax,eax                        
metro.exe+1CE856:  48 85 D2                    -  test rdx,rdx                       
metro.exe+1CE859:  74 09                       -  je 13F91E864                       
metro.exe+1CE85B:  48 81 C2 58FFFFFF           -  add rdx,FFFFFF58                   
metro.exe+1CE862:  EB 03                       -  jmp 13F91E867                      
metro.exe+1CE864:  48 8B D0                    -  mov rdx,rax                        
metro.exe+1CE867:  F3 0F10 82 58050000         -  movss xmm0,[rdx+00000558]          <<<--- AOB Starts Here
metro.exe+1CE86F:  F3 0F10 0D 852FA500         -  movss xmm1,[1403717FC]             [(float)1.0000]
metro.exe+1CE877:  F3 0F58 91 54020000         -  addss xmm2,dword ptr [rcx+00000254]
metro.exe+1CE87F:  F3 0F59 05 E12DA500         -  mulss xmm0,[140371668]             [(float)0.1000]
metro.exe+1CE887:  F3 0F5C C8                  -  subss xmm1,xmm0                    
metro.exe+1CE88B:  0F2F CA                     -  comiss xmm1,xmm2                   
////  INJECTING START  ----------------------------------------------------------
metro.exe+1CE88E:  0F97 C0                     -  seta al                            
////  INJECTING END  ----------------------------------------------------------
metro.exe+1CE891:  C3                          -  ret                                
metro.exe+1CE892:  CC                          -  int 3                              
metro.exe+1CE893:  CC                          -  int 3                              
metro.exe+1CE894:  40 53                       -  push rbx                           
metro.exe+1CE896:  48 83 EC 20                 -  sub rsp,20                         
metro.exe+1CE89A:  48 8B D9                    -  mov rbx,rcx                        
metro.exe+1CE89D:  E8 1E000000                 -  call 13F91E8C0                     
metro.exe+1CE8A2:  33 D2                       -  xor edx,edx                        
metro.exe+1CE8A4:  85 C0                       -  test eax,eax                       
metro.exe+1CE8A6:  75 09                       -  jne 13F91E8B1                      
metro.exe+1CE8A8:  80 BB D8020000 48           -  cmp byte ptr [rbx+000002D8],48     
metro.exe+1CE8AF:  75 05                       -  jne 13F91E8B6                      
metro.exe+1CE8B1:  BA 01000000                 -  mov edx,00000001                   
metro.exe+1CE8B6:  8B C2                       -  mov eax,edx                        
metro.exe+1CE8B8:  48 83 C4 20                 -  add rsp,20                         
metro.exe+1CE8BC:  5B                          -  pop rbx                            
metro.exe+1CE8BD:  C3                          -  ret                                
metro.exe+1CE8BE:  CC                          -  int 3                              
metro.exe+1CE8BF:  CC                          -  int 3                              
metro.exe+1CE8C0:  B8 01000000                 -  mov eax,00000001                   
//// Template: I2CEA_AOBInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

TimFun13 · Post by **TimFun13** » Sat Mar 02, 2019 6:17 am

Table Updated:

v 1.0.2:
- Added:
  - Big Clip
  - Charge Battery Anytime
  - Super Accuracy { SunBeam }
  - No Recoil { SunBeam }
  - General Helpers:
    - Fill Air Pressure
    - Charge Weapon

okok044041 · Post by **okok044041** » Sat Mar 02, 2019 6:54 am

thank you

Post by **SunBeam** » Sat Mar 02, 2019 5:01 pm

Suggesting calling the table "metroLL.[v1.0.2].CT"

I almost overwrote the one I had for 2033

Starting my journey! Fingers crossed

TimFun13 · Post by **TimFun13** » Sat Mar 02, 2019 5:58 pm

SunBeam wrote: ↑
Sat Mar 02, 2019 5:01 pm
Suggesting calling the table "metroLL.[v1.0.2].CT" I almost overwrote the one I had for 2033 Starting my journey! Fingers crossed

I keep everything in separate folders, I wasn't thinking about if they were in the same folder. I make sure the next one has the different name.

Post by **SunBeam** » Sat Mar 02, 2019 6:27 pm

And you should use this for Last Light as well:

Code: Select all

[ENABLE]

aobscanmodule( SuperAccuracy, metro.exe, F30F58B614050000 )
registersymbol( SuperAccuracy )
alloc( Hook, 0x1000, metro.exe )

Hook:
mov [rsi+00000514],BF800000
addss xmm6,dword ptr [rsi+00000514]
jmp back

SuperAccuracy:
jmp Hook
db 90 90 90
back:

[DISABLE]

SuperAccuracy:
db F3 0F 58 B6 14 05 00 00

dealloc( Hook )
unregistersymbol( SuperAccuracy )

The "Super Accuracy" script in your table doesn't really work. Try a Bastard Gun, you'll see how the bullets still spread around.

BR,
Sun

Post by **SunBeam** » Sat Mar 02, 2019 6:32 pm

Also.. note the enemy gets the same effects: super accuracy, no recoil and fire rate

So you might want to filter the stuff out? Will help if needed to get weapon<->inventory<->player correspondence.

TimFun13 · Post by **TimFun13** » Sat Mar 02, 2019 10:39 pm

SunBeam wrote: ↑
Sat Mar 02, 2019 6:27 pm
And you should use this for Last Light as well:
...
The "Super Accuracy" script in your table doesn't really work. Try a Bastard Gun, you'll see how the bullets still spread around.

BR,
Sun

It was actually in there I just forgot to add the call for it in the script.
EDIT: Thanks for pointing that out, didn't even notice.

SunBeam wrote: ↑
Sat Mar 02, 2019 6:32 pm
Also.. note the enemy gets the same effects: super accuracy, no recoil and fire rate So you might want to filter the stuff out? Will help if needed to get weapon<->inventory<->player correspondence.

Yeah, I figured out a lot of code is shared but I couldn't seem to find a way to seperate them out. But I do have to coordinates hooked so I could add the check like you said, I'll see if I can't find a pointer path to the coordinates.

Post by **SunBeam** » Sun Mar 03, 2019 12:53 am

Wait.. what? What's up with the 'corrdinates'? You must be tired.. that you read 'correspondence' as 'coordinates'

I meant filtering the entity who fires a gun, thus the entity for which no recoil, super accuracy and fire rate would apply (our player)

TimFun13 · Post by **TimFun13** » Sun Mar 03, 2019 1:34 am

SunBeam wrote: ↑
Sun Mar 03, 2019 12:53 am
Wait.. what? What's up with the 'corrdinates'? You must be tired.. that you read 'correspondence' as 'coordinates' I meant filtering the entity who fires a gun, thus the entity for which no recoil, super accuracy and fire rate would apply (our player)

HA!
https://www.youtube.com/watch?v=ON4sOlxvtbU

I had just woke up from a nap; guess I wasn't quite wake yet, or so I hope. It's pretty funny though, only the first two letters match.

But yeah, just have to dig into the code more. Been more just playing for now, I'm really get into the atmosphere of these games. Plus the story is top notch too. I really want to read the books after playing these.

TimFun13 · Post by **TimFun13** » Sun Mar 03, 2019 1:41 am

So there's a part with a zip line, of sorts. I didn't get it figured out yet. But if you experience crashes in that part; only use infinite health (or multiplier) and infinite ammo and filter cheats, until you get to the next area (i.e. after the cutscene and the next area loads).

EDIT: So it seems to be happening randomly now, just having a hard time testing it.

EDIT2: HA! So it was an edit to "ClipWrtChangeHook" that I forgot I made.

TimFun13 · Post by **TimFun13** » Sun Mar 03, 2019 6:27 am

Table Updated:

v 1.0.3: Fixed some things in my Lua modules. The CT updater is no longer silent, but will only prompt you if a new table is available.

EDIT:
I'm still getting crashes from "Big Clip", might be best not to use that one tell I figure it out.

TimFun13 · Post by **TimFun13** » Sun Mar 03, 2019 8:25 am

Well, so far this seems to be a play only no reload.

Code: Select all

{
	Process			: metro.exe  -  (x64)
	Module			: metro.exe
	Game Title		: Metro Last Light Redux
	Game Version	: 1.0.0.3
	CE Version		: 6.83
	Script Version	: 0.0.1
	Date			: 03/03/19
	Author			: ShyTwig16
	Name			: ClipDecHook

	Clip Dec Hook
}

{$STRICT}

define(address, metro.exe+2BF69A)
define(bytes, 2B CB 8B D1 48 8B CE)

////
//// ------------------------------ ENABLE ------------------------------
[ENABLE]
aobScanModule(aobClipDecHook, metro.exe, 74xx48xxxx2Bxx8Bxx48xxxxFFxxxxxxxxxx48xxxxE8)
// i2aobScanModule(aobClipDecHook, metro.exe, 74xx48xxxx2Bxx8Bxx48xxxxFFxxxxxxxxxx48xxxxE8)
define(injClipDecHook, aobClipDecHook+5)
assert(injClipDecHook, bytes)
// i2assert(injClipDecHook, bytes)
registerSymbol(injClipDecHook)

alloc(memClipDecHook, 0x400, injClipDecHook)

label(ptrClipDecHook)
registerSymbol(ptrClipDecHook)

label(n_code)
label(o_code)
label(exit)
label(return)

memClipDecHook:
	ptrClipDecHook:
		dq 0
		dq 0
	align 10 CC
	n_code:
		pushfq
		push r8
		mov r8,[ptrHealthHook]
		test r8,r8
		jz @f
			mov r8,[r8+A0]
			test r8,r8
			jz @f
				cmp [rsi+118],r8
				jne @f
					mov [ptrClipDecHook],rsi
					jmp o_code
		@@:
			mov [ptrClipDecHook+8],rsi
			sub ecx,ebx
	o_code:
		// sub ecx,ebx
		mov edx,ecx
		mov rcx,rsi
	exit:
		pop r8
		popfq
		jmp return


////
//// ---------- Injection Point ----------
injClipDecHook:
	jmp n_code
	nop
	nop
	return:


////
//// ------------------------------ DISABLE ------------------------------
[DISABLE]
////
//// ---------- Injection Point ----------
injClipDecHook:
	db bytes

unregisterSymbol(injClipDecHook)

unregisterSymbol(ptrClipDecHook)

dealloc(memClipDecHook)

{
//// Injection Point: metro.exe+2BF69A  -  000000013FE1F69A
//// AOB address: 000000013FE1F695  -  metro.exe+2BF695
//// Process: metro.exe  -  000000013FB60000
//// Module: metro.exe  -  000000013FB60000
//// Module Size: 00000000013CA000
metro.exe+2BF61D:  44 0F28 BC 24 80010000      -  movaps xmm15,[rsp+00000180]        
metro.exe+2BF626:  44 0F28 84 24 F0010000      -  movaps xmm8,[rsp+000001F0]         
metro.exe+2BF62F:  0F28 BC 24 00020000         -  movaps xmm7,[rsp+00000200]         
metro.exe+2BF637:  0F28 B4 24 10020000         -  movaps xmm6,[rsp+00000210]         
metro.exe+2BF63F:  48 8B 06                    -  mov rax,[rsi]                      
metro.exe+2BF642:  48 8B CE                    -  mov rcx,rsi                        
metro.exe+2BF645:  FF 90 D8130000              -  call qword ptr [rax+000013D8]      
metro.exe+2BF64B:  4C 8B A4 24 68020000        -  mov r12,[rsp+00000268]             
metro.exe+2BF653:  44 0F28 B4 24 90010000      -  movaps xmm14,[rsp+00000190]        
metro.exe+2BF65C:  44 0F28 AC 24 A0010000      -  movaps xmm13,[rsp+000001A0]        
metro.exe+2BF665:  44 0F28 A4 24 B0010000      -  movaps xmm12,[rsp+000001B0]        
metro.exe+2BF66E:  F6 40 7C 10                 -  test byte ptr [rax+7C],10          
metro.exe+2BF672:  44 0F28 9C 24 C0010000      -  movaps xmm11,[rsp+000001C0]        
metro.exe+2BF67B:  44 0F28 94 24 D0010000      -  movaps xmm10,[rsp+000001D0]        
metro.exe+2BF684:  44 0F28 8C 24 E0010000      -  movaps xmm9,[rsp+000001E0]         
metro.exe+2BF68D:  75 18                       -  jne 13FE1F6A7                      
metro.exe+2BF68F:  8B 4C 24 70                 -  mov ecx,[rsp+70]                   
metro.exe+2BF693:  85 C9                       -  test ecx,ecx                       
metro.exe+2BF695:  74 10                       -  je 13FE1F6A7                       <<<--- AOB Starts Here
metro.exe+2BF697:  48 8B 06                    -  mov rax,[rsi]                      
////  INJECTING START  ----------------------------------------------------------
metro.exe+2BF69A:  2B CB                       -  sub ecx,ebx                        
metro.exe+2BF69C:  8B D1                       -  mov edx,ecx                        
metro.exe+2BF69E:  48 8B CE                    -  mov rcx,rsi                        
////  INJECTING END  ----------------------------------------------------------
metro.exe+2BF6A1:  FF 90 50130000              -  call qword ptr [rax+00001350]      
metro.exe+2BF6A7:  48 8B CE                    -  mov rcx,rsi                        
metro.exe+2BF6AA:  E8 E1D8FEFF                 -  call 13FE0CF90                     
metro.exe+2BF6AF:  48 8B 06                    -  mov rax,[rsi]                      
metro.exe+2BF6B2:  48 8B CE                    -  mov rcx,rsi                        
metro.exe+2BF6B5:  FF 90 70100000              -  call qword ptr [rax+00001070]      
metro.exe+2BF6BB:  48 8B 55 E8                 -  mov rdx,[rbp-18]                   
metro.exe+2BF6BF:  48 85 D2                    -  test rdx,rdx                       
metro.exe+2BF6C2:  74 24                       -  je 13FE1F6E8                       
metro.exe+2BF6C4:  F0 FF 4A 14                 -  lock dec [rdx+14]                  
metro.exe+2BF6C8:  75 1E                       -  jne 13FE1F6E8                      
metro.exe+2BF6CA:  48 8D 4D E8                 -  lea rcx,[rbp-18]                   
metro.exe+2BF6CE:  E8 6D9ED4FF                 -  call 13FB69540                     
metro.exe+2BF6D3:  48 8B 4D E8                 -  mov rcx,[rbp-18]                   
metro.exe+2BF6D7:  BB 00000000                 -  mov ebx,00000000                   
metro.exe+2BF6DC:  85 C0                       -  test eax,eax                       
metro.exe+2BF6DE:  48 0F45 CB                  -  cmovne rcx,rbx                     
metro.exe+2BF6E2:  48 89 4D E8                 -  mov [rbp-18],rcx                   
//// Template: I2CEA_AOBFullInjection
//// Generated with: I2 Cheat Engine Auto Assembler Script Template Generator
//// Code Happy, Code Freely, Be Awesome.
}

TimFun13 · Post by **TimFun13** » Sun Mar 03, 2019 6:43 pm

Table Updated:

v 1.0.4:
- Added:
  - "Combatant Health Dec. Hook"
  - More ammo pointers to the "Pointers" section.
  - Added "Darts" to "Infinite Ammo".
- Changed:
  - "Infinite Gas Mask Durability" to "Gas Mask Durability Dec. Hook", now uses flag for damage multiplier or infinite durability.
  - Now acts on player only.
    - No Reload
    - Infinite Ammo
    - Gas Mask Durability Dec. Hook
    - Infinite Filter
    - Filter Dec. Multiplier
    - Super Accuracy { SunBeam }
    - Weapon Fire Rate Hook

FearLess Cheat Engine

Metro Last Light Redux - table v: 1.0.7 CT

Metro Last Light Redux - table v: 1.0.7 CT

Re: Metro Last Light Redux - table v: 1.0.1 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.2 CT

Re: Metro Last Light Redux - table v: 1.0.3 CT

Re: Metro Last Light Redux - table v: 1.0.3 CT

Re: Metro Last Light Redux - table v: 1.0.4 CT

Who is online