Horizon Zero Dawn [Engine:Decima]

[Renagede77]

Confirm it worked.

Yay! That worked (once I found where to manually add addresses ).
Thank you!

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[NukeZen]

I made a few try but; i'm a moron and i dont understand how to use the table (possible but not probable) or it's not possible for now. This is the point, tha game has modification, every modification has it own values, like this:

50% Damage / 33% Handling / 17% Freeze

49% Tear / 25% Damage / 17% Fire

67% Handling / 25% Damage / 17% Corruption

50% Corruption / 33% Handling / 17% Shock

47% Damage / 24% Tear / 16% Fire

46% Shock / 23% Damage / 15% Fire

What im try to do, its to find a way to edit those values, so a 50% Corruption / 33% Handling / 17% Shock can tranform in to a 50% Corruption / 50% Handling / 50% Shock

Is it feasible or not?

[Solgath]

in all honesty, i'd be interested in multipliers, rather than out right max everything, this way the game isn't to grindy, but still fun, it's why i mostly use tables for the exp multipliers and such, for this, gathering, shards and xp would be perfect.

Shards is a simple 4 byte value, super easy to find and manipulate. Makes things a LOT easier from the start.

Talent points is also the same, 4 byte value, easy to find.

XP ist also 4 byte, but it's counting all XP for all levels, so you can't just look for what you see in the HUD.
But "unknown initial value" and then "incremented by X" works very well.
I noticed however that when I give myself too many levels at once, the game crashes.
So going from 100.000 XP (around lvl14) to 300.000 or even just to 200.000 crashed the game every time I tried it.
So don't be greedy
Or bind a key to it with "increment by 10.000" or something like that. Should be safer.

nah, i was talking more like increasing the rate you can xp like 10x Exp gain, 5x the amount of resources/shards, that kind of thing, i like being able to run around do everything, but still level at a decent pace without having to grind all that much, the fearlessrevolution trainer has an Experience multiplier that can go as high as 16x the amount you gain, just lacking a gathering one for resources and shards.

[Drazerak]

You mean this ?

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>89796</ID>
      <Description>"Resource Multiplier"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{
====================
Horizon Zero Dawn
====================
}
[ENABLE]
aobscanmodule(ResourceMultiplier,HorizonZeroDawn.exe,01 51 58 4C 8B F9)
alloc(newmem,$1000,"HorizonZeroDawn.exe")
label(code)
label(return)
registersymbol(ResourceMultiplier)

newmem:
  imul edx,[ResMult]

code:
  add [rcx+58],edx
  mov r15,rcx
  jmp return

ResMult:
  dd 05 //Multiplier

ResourceMultiplier:
  jmp newmem
  nop
return:

[DISABLE]
ResourceMultiplier:
  db 01 51 58 4C 8B F9
unregistersymbol(ResourceMultiplier)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "HorizonZeroDawn.exe"+FCB62E

"HorizonZeroDawn.exe"+FCB610: 48 8B C4                 -  mov rax,rsp
"HorizonZeroDawn.exe"+FCB613: 44 88 48 20              -  mov [rax+20],r9l
"HorizonZeroDawn.exe"+FCB617: 44 88 40 18              -  mov [rax+18],r8l
"HorizonZeroDawn.exe"+FCB61B: 89 50 10                 -  mov [rax+10],edx
"HorizonZeroDawn.exe"+FCB61E: 55                       -  push rbp
"HorizonZeroDawn.exe"+FCB61F: 53                       -  push rbx
"HorizonZeroDawn.exe"+FCB620: 56                       -  push rsi
"HorizonZeroDawn.exe"+FCB621: 41 57                    -  push r15
"HorizonZeroDawn.exe"+FCB623: 48 8D 68 C8              -  lea rbp,[rax-38]
"HorizonZeroDawn.exe"+FCB627: 48 81 EC 18 01 00 00     -  sub rsp,00000118
// ---------- INJECTING HERE ----------
"HorizonZeroDawn.exe"+FCB62E: 01 51 58                 -  add [rcx+58],edx
"HorizonZeroDawn.exe"+FCB631: 4C 8B F9                 -  mov r15,rcx
// ---------- DONE INJECTING  ----------
"HorizonZeroDawn.exe"+FCB634: 48 8B 59 48              -  mov rbx,[rcx+48]
"HorizonZeroDawn.exe"+FCB638: 8B F2                    -  mov esi,edx
"HorizonZeroDawn.exe"+FCB63A: 48 8B 8B C8 01 00 00     -  mov rcx,[rbx+000001C8]
"HorizonZeroDawn.exe"+FCB641: 48 85 C9                 -  test rcx,rcx
"HorizonZeroDawn.exe"+FCB644: 0F 84 25 02 00 00        -  je HorizonZeroDawn.exe+FCB86F
"HorizonZeroDawn.exe"+FCB64A: 48 81 C1 88 02 00 00     -  add rcx,00000288
"HorizonZeroDawn.exe"+FCB651: 4C 89 68 D0              -  mov [rax-30],r13
"HorizonZeroDawn.exe"+FCB655: 48 8D 15 D4 87 7B 01     -  lea rdx,[HorizonZeroDawn.exe+2783E30]
"HorizonZeroDawn.exe"+FCB65C: E8 EF F9 B8 FF           -  call HorizonZeroDawn.exe+B5B050
"HorizonZeroDawn.exe"+FCB661: 4C 8B E8                 -  mov r13,rax
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[Solgath]

it works, but it also seems to effect the bow and how many arrows it has ready to fire, but other wise it is pretty much what i was looking for, seems to have like 5 arrows loaded at once, i had 7, fired bow, lost 5, for a quick code that is pretty good, apart from that it is near perfect, cheers

[gremlinbc]

You mean this ?

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>89796</ID>
      <Description>"Resource Multiplier"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{
====================
Horizon Zero Dawn
====================
}
[ENABLE]
aobscanmodule(ResourceMultiplier,HorizonZeroDawn.exe,01 51 58 4C 8B F9)
alloc(newmem,$1000,"HorizonZeroDawn.exe")
label(code)
label(return)
registersymbol(ResourceMultiplier)

newmem:
  imul edx,[ResMult]

code:
  add [rcx+58],edx
  mov r15,rcx
  jmp return

ResMult:
  dd 05 //Multiplier

ResourceMultiplier:
  jmp newmem
  nop
return:

[DISABLE]
ResourceMultiplier:
  db 01 51 58 4C 8B F9
unregistersymbol(ResourceMultiplier)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "HorizonZeroDawn.exe"+FCB62E

"HorizonZeroDawn.exe"+FCB610: 48 8B C4                 -  mov rax,rsp
"HorizonZeroDawn.exe"+FCB613: 44 88 48 20              -  mov [rax+20],r9l
"HorizonZeroDawn.exe"+FCB617: 44 88 40 18              -  mov [rax+18],r8l
"HorizonZeroDawn.exe"+FCB61B: 89 50 10                 -  mov [rax+10],edx
"HorizonZeroDawn.exe"+FCB61E: 55                       -  push rbp
"HorizonZeroDawn.exe"+FCB61F: 53                       -  push rbx
"HorizonZeroDawn.exe"+FCB620: 56                       -  push rsi
"HorizonZeroDawn.exe"+FCB621: 41 57                    -  push r15
"HorizonZeroDawn.exe"+FCB623: 48 8D 68 C8              -  lea rbp,[rax-38]
"HorizonZeroDawn.exe"+FCB627: 48 81 EC 18 01 00 00     -  sub rsp,00000118
// ---------- INJECTING HERE ----------
"HorizonZeroDawn.exe"+FCB62E: 01 51 58                 -  add [rcx+58],edx
"HorizonZeroDawn.exe"+FCB631: 4C 8B F9                 -  mov r15,rcx
// ---------- DONE INJECTING  ----------
"HorizonZeroDawn.exe"+FCB634: 48 8B 59 48              -  mov rbx,[rcx+48]
"HorizonZeroDawn.exe"+FCB638: 8B F2                    -  mov esi,edx
"HorizonZeroDawn.exe"+FCB63A: 48 8B 8B C8 01 00 00     -  mov rcx,[rbx+000001C8]
"HorizonZeroDawn.exe"+FCB641: 48 85 C9                 -  test rcx,rcx
"HorizonZeroDawn.exe"+FCB644: 0F 84 25 02 00 00        -  je HorizonZeroDawn.exe+FCB86F
"HorizonZeroDawn.exe"+FCB64A: 48 81 C1 88 02 00 00     -  add rcx,00000288
"HorizonZeroDawn.exe"+FCB651: 4C 89 68 D0              -  mov [rax-30],r13
"HorizonZeroDawn.exe"+FCB655: 48 8D 15 D4 87 7B 01     -  lea rdx,[HorizonZeroDawn.exe+2783E30]
"HorizonZeroDawn.exe"+FCB65C: E8 EF F9 B8 FF           -  call HorizonZeroDawn.exe+B5B050
"HorizonZeroDawn.exe"+FCB661: 4C 8B E8                 -  mov r13,rax
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

I had hopes when I seen this but when I tried it out nothing changed so this code does not work

[SunBeam]

^ It doesn't work on picking up, but selling/buying. Furthermore, it's generic (there's no filter in there). I'd advise not to use it if you don't wanna fuck up more you shit.

[Drazerak]

This should work better. Multiplies loot from corpses and pick up things (not dropped), possibly quest items too. Needs some testing...

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>89796</ID>
      <Description>"Resource Multiplier"</Description>
      <LastState/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{
====================
Horizon Zero Dawn
====================
}
[ENABLE]
aobscanmodule(ResourceMultiplier,HorizonZeroDawn.exe,45 39 67 58 7E 2A)
alloc(newmem,$1000,"HorizonZeroDawn.exe")
label(code)
label(return)
registersymbol(ResourceMultiplier)

newmem:
  cmp rsi,0
  je @f
  jmp MultLoot

MultPickup:
  cmp rax,0
  je code
  cmp r11,08
  jg code
  push rax
  mov rax,rdi
  sub [r15+58],rdi
  imul rax,[ResMult]
  add [r15+58],rax
  pop rax
  jmp code

MultLoot:
  push rax
  mov rax,[rsp+110]
  sub [r15+58],rax
  imul rax,[ResMult]
  add [r15+58],rax
  pop rax

code:
  cmp [r15+58],r12d
  jle HorizonZeroDawn.exe+FCB826
  jmp return

ResMult:
  dd 02 //Multiplier

ResourceMultiplier:
  jmp newmem
  nop
return:

[DISABLE]
ResourceMultiplier:
  db 45 39 67 58 7E 2A
unregistersymbol(ResourceMultiplier)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "HorizonZeroDawn.exe"+FCB7F6

"HorizonZeroDawn.exe"+FCB7C4: 89 44 24 70              -  mov [rsp+70],eax
"HorizonZeroDawn.exe"+FCB7C8: 0F B6 45 50              -  movzx eax,byte ptr [rbp+50]
"HorizonZeroDawn.exe"+FCB7CC: 88 44 24 74              -  mov [rsp+74],al
"HorizonZeroDawn.exe"+FCB7D0: 0F B6 45 58              -  movzx eax,byte ptr [rbp+58]
"HorizonZeroDawn.exe"+FCB7D4: 88 44 24 75              -  mov [rsp+75],al
"HorizonZeroDawn.exe"+FCB7D8: 4C 89 74 24 78           -  mov [rsp+78],r14
"HorizonZeroDawn.exe"+FCB7DD: 48 89 75 80              -  mov [rbp-80],rsi
"HorizonZeroDawn.exe"+FCB7E1: E8 5A 64 BE FF           -  call HorizonZeroDawn.exe+BB1C40
"HorizonZeroDawn.exe"+FCB7E6: 4C 8B B4 24 00 01 00 00  -  mov r14,[rsp+00000100]
"HorizonZeroDawn.exe"+FCB7EE: 48 8B BC 24 40 01 00 00  -  mov rdi,[rsp+00000140]
// ---------- INJECTING HERE ----------
"HorizonZeroDawn.exe"+FCB7F6: 45 39 67 58              -  cmp [r15+58],r12d
"HorizonZeroDawn.exe"+FCB7FA: 7E 2A                    -  jle HorizonZeroDawn.exe+FCB826
// ---------- DONE INJECTING  ----------
"HorizonZeroDawn.exe"+FCB7FC: 44 38 25 B9 8A 15 06     -  cmp [HorizonZeroDawn.exe+71242BC],r12l
"HorizonZeroDawn.exe"+FCB803: 49 8B 4F 48              -  mov rcx,[r15+48]
"HorizonZeroDawn.exe"+FCB807: 75 04                    -  jne HorizonZeroDawn.exe+FCB80D
"HorizonZeroDawn.exe"+FCB809: 4C 8D 61 50              -  lea r12,[rcx+50]
"HorizonZeroDawn.exe"+FCB80D: 48 81 C1 F8 01 00 00     -  add rcx,000001F8
"HorizonZeroDawn.exe"+FCB814: 4C 8D 05 C5 85 6E 01     -  lea r8,[HorizonZeroDawn.exe+26B3DE0]
"HorizonZeroDawn.exe"+FCB81B: 4D 8B CF                 -  mov r9,r15
"HorizonZeroDawn.exe"+FCB81E: 49 8B D4                 -  mov rdx,r12
"HorizonZeroDawn.exe"+FCB821: E8 BA ED C0 FF           -  call HorizonZeroDawn.exe+BDA5E0
"HorizonZeroDawn.exe"+FCB826: 48 8D 4C 24 58           -  lea rcx,[rsp+58]
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>

[IcyPurpose99]

I made a few try but; i'm a moron and i dont understand how to use the table (possible but not probable) or it's not possible for now. This is the point, tha game has modification, every modification has it own values, like this:

50% Damage / 33% Handling / 17% Freeze

49% Tear / 25% Damage / 17% Fire

67% Handling / 25% Damage / 17% Corruption

50% Corruption / 33% Handling / 17% Shock

47% Damage / 24% Tear / 16% Fire

46% Shock / 23% Damage / 15% Fire

What im try to do, its to find a way to edit those values, so a 50% Corruption / 33% Handling / 17% Shock can tranform in to a 50% Corruption / 50% Handling / 50% Shock

Is it feasible or not?

It should be, unless there is a unique uuid for these we might be fucked

[Exeter]

Might be a similar system to what AC Odyssey has. Each modifier type probably has an ID, and the value has a different ID as well I guess.

I know you can get 7,9,12% Damage, etc. as standalones as well.

[IcyPurpose99]

Might be a similar system to what AC Odyssey has. Each modifier type probably has an ID, and the value has a different ID as well I guess.

I know you can get 7,9,12% Damage, etc. as standalones as well.

i'd imagine they are unique in a way, but lets hope they are purely random 1,2,3 and value limits. If they are making custom mod coils should be possible.

[NukeZen]

Might be a similar system to what AC Odyssey has. Each modifier type probably has an ID, and the value has a different ID as well I guess.

I know you can get 7,9,12% Damage, etc. as standalones as well.

i'd imagine they are unique in a way, but lets hope they are purely random 1,2,3 and value limits. If they are making custom mod coils should be possible.

[Link] In this page are detailed the rules about modifications. It appears that aside from some specifics rules about the type of modifications, the bounses are randomly generated every time we find one in the game.

[tedios]

I managed to screw up my metal flowers like this and i can't collect more now
Does anyone know the to address for them?

There's three different sets of metal flowers, which one was it?

Mine is Mark I and Mark III

For me it's mark 1 only

[acecel]

I would also love to be able to edit weapons/armor bonuses, out of my current capacity so i am going to wait and hope while playing the game so there is worst punition i guess

And also being able to raise the number of slots on a armor/weapon to 3 or even more

[bloodaxis]

Being able to repopulate the bluegleam merchants armor/weapojn selection would be nice too since if you bought their master armors/weapons already before changing into new game + they don't sell the adept versions, not that that matters all that much.