Resident Evil 4 Remake Cheat table request

[dizoEX2]

Game Name: Resident Evil 4 Remake
Game Engine: RE engine
Game Version: v1.0.0
Options Required: Health, Ammo,One hit kill, No reload , Easy crafting
Steam Website: /

[Atmosk]

Ammo (in clip/noreload), Money (Petas?), Spinel are all 4 byte.

Health starts at 50 and is either float or double (goes down in decimals). I found health but game crashed before I could get a pointer.

Sorry - I'm not super experienced, but I'll post something if I can!

[daniman]

+1

[chrisreddot3]

+1
inventory editor

[kkkfox]

I try to find a pointer but the game crash, I think we need a new REFramework dll, like RE8.

[ShawnLin]

+1 please

[saaheer]

+1

[dooglewd]

Anyone find health yet? The float values that start at 50 on full health are only visual.

[Franseven]

+1

[Glowmoss]

It has the Same anti tamper bs re8 has Praydog has just [Link]

[Mister Modification]

You need Praydogs framework. Just unzip his files in your re4 main game folder.

99999 Shooting Range Points
Always 999 Jetons (You need at least 1 Jeton. insert it in your Jeton Machine and let my magic happen)

[wurstpirat]

When I played the game for a bit this morning, I just looked for the amount of ammo and froze that, and edited my money to 999.999.999
TBH, you won't need much more than that to get through the game, infinite health isn't really necessary if you have infinite ammo. Just waste away

[Mister Modification]

Shoot 1 Skull To Complete Shooting Range Task

Code: Select all

{ Game   : re4.exe
  Version: 
  Date   : 2023-03-26
  Author : Handsome Tom

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(skulls,re4.exe,8B 8E D8 01 00 00 89) // should be unique
alloc(newmem,$1000,skulls)

label(code)
label(return)

newmem:

code:
  mov ecx,[rsi+000001DC]
  mov [rsi+000001D8],ecx
  jmp return

skulls:
  jmp newmem
  nop
return:
registersymbol(skulls)

[DISABLE]

skulls:
  db 8B 8E D8 01 00 00

unregistersymbol(skulls)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+25D51A6

re4.exe+25D516D: E8 EE BE 01 00           - call re4.exe+25F1060
re4.exe+25D5172: 48 8B 15 BF 8A B3 0A     - mov rdx,[re4.exe+D10DC38]
re4.exe+25D5179: 45 33 C0                 - xor r8d,r8d
re4.exe+25D517C: 48 8B 1D 45 CF C5 0A     - mov rbx,[re4.exe+D2320C8]
re4.exe+25D5183: 48 8B CF                 - mov rcx,rdi
re4.exe+25D5186: E8 15 99 FB 00           - call re4.exe+358EAA0
re4.exe+25D518B: 4C 8D 84 24 88 00 00 00  - lea r8,[rsp+00000088]
re4.exe+25D5193: C6 84 24 88 00 00 00 00  - mov byte ptr [rsp+00000088],00
re4.exe+25D519B: 48 8B E8                 - mov rbp,rax
re4.exe+25D519E: 48 C7 40 10 FF FF FF FF  - mov qword ptr [rax+10],FFFFFFFFFFFFFFFF
// ---------- INJECTING HERE ----------
re4.exe+25D51A6: 8B 8E D8 01 00 00        - mov ecx,[rsi+000001D8]
// ---------- DONE INJECTING  ----------
re4.exe+25D51AC: 89 48 10                 - mov [rax+10],ecx
re4.exe+25D51AF: 8B 8E DC 01 00 00        - mov ecx,[rsi+000001DC]
re4.exe+25D51B5: 89 48 14                 - mov [rax+14],ecx
re4.exe+25D51B8: 48 8B CF                 - mov rcx,rdi
re4.exe+25D51BB: 4C 8B 73 70              - mov r14,[rbx+70]
re4.exe+25D51BF: 49 8B D6                 - mov rdx,r14
re4.exe+25D51C2: E8 19 6E 06 01           - call re4.exe+363BFE0
re4.exe+25D51C7: 48 8B 53 70              - mov rdx,[rbx+70]
re4.exe+25D51CB: 4C 8D 4C 24 40           - lea r9,[rsp+40]
re4.exe+25D51D0: 41 B8 57 00 00 00        - mov r8d,00000057
}

All Shooting Range Targets Killed

Code: Select all

{ Game   : re4.exe
  Version: 
  Date   : 2023-03-26
  Author : Handsome Tom

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(maxKill,re4.exe,48 8B D7 49 8B CE 45 32) // should be unique
alloc(newmem,$1000,maxKill)

label(code)
label(return)

newmem:

code:
  mov edx,[rdi+000001AC]
  mov [rdi+000001A8],edx
  mov rdx,rdi
  mov rcx,r14
  jmp return

maxKill:
  jmp newmem
  nop
return:
registersymbol(maxKill)

[DISABLE]

maxKill:
  db 48 8B D7 49 8B CE

unregistersymbol(maxKill)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+25D545A

re4.exe+25D5439: EB 1B                 - jmp re4.exe+25D5456
re4.exe+25D543B: 41 8B C5              - mov eax,r13d
re4.exe+25D543E: 38 87 E0 01 00 00     - cmp [rdi+000001E0],al
re4.exe+25D5444: 0F 95 C0              - setne al
re4.exe+25D5447: 85 C0                 - test eax,eax
re4.exe+25D5449: 0F 95 C0              - setne al
re4.exe+25D544C: 84 C0                 - test al,al
re4.exe+25D544E: 75 06                 - jne re4.exe+25D5456
re4.exe+25D5450: FF 87 A8 01 00 00     - inc [rdi+000001A8]
re4.exe+25D5456: 48 8B 46 10           - mov rax,[rsi+10]
// ---------- INJECTING HERE ----------
re4.exe+25D545A: 48 8B D7              - mov rdx,rdi
// ---------- DONE INJECTING  ----------
re4.exe+25D545D: 49 8B CE              - mov rcx,r14
re4.exe+25D5460: 45 32 FF              - xor r15l,r15l
re4.exe+25D5463: 4C 8B 80 D0 00 00 00  - mov r8,[rax+000000D0]
re4.exe+25D546A: E8 01 45 FB FF        - call re4.exe+2589970
re4.exe+25D546F: 84 C0                 - test al,al
re4.exe+25D5471: 0F 85 9A 01 00 00     - jne re4.exe+25D5611
re4.exe+25D5477: 48 8B 46 10           - mov rax,[rsi+10]
re4.exe+25D547B: 48 8B 88 D0 00 00 00  - mov rcx,[rax+000000D0]
re4.exe+25D5482: 48 85 C9              - test rcx,rcx
re4.exe+25D5485: 74 0A                 - je re4.exe+25D5491
}

Shooting Range Results Function

Code: Select all

// ORIGINAL CODE - INJECTION POINT: re4.exe+25F7C85

re4.exe+25F7C58: 45 33 C0                 - xor r8d,r8d
re4.exe+25F7C5B: 48 8B 35 66 A4 C3 0A     - mov rsi,[re4.exe+D2320C8]
re4.exe+25F7C62: 49 8B CF                 - mov rcx,r15
re4.exe+25F7C65: E8 36 6E F9 00           - call re4.exe+358EAA0
re4.exe+25F7C6A: 41 8B 8D 98 01 00 00     - mov ecx,[r13+00000198]
re4.exe+25F7C71: 48 8B D8                 - mov rbx,rax
re4.exe+25F7C74: 89 48 10                 - mov [rax+10],ecx
re4.exe+25F7C77: 80 BC 24 D8 00 00 00 00  - cmp byte ptr [rsp+000000D8],00
re4.exe+25F7C7F: 0F 95 C1                 - setne cl
re4.exe+25F7C82: 88 48 30                 - mov [rax+30],cl
// ---------- INJECTING HERE ----------
re4.exe+25F7C85: 41 8B 8D A8 01 00 00     - mov ecx,[r13+000001A8]
// ---------- DONE INJECTING  ----------
re4.exe+25F7C8C: 89 48 14                 - mov [rax+14],ecx
re4.exe+25F7C8F: 41 8B 8D AC 01 00 00     - mov ecx,[r13+000001AC]
re4.exe+25F7C96: 89 48 18                 - mov [rax+18],ecx
re4.exe+25F7C99: 8B 44 24 6C              - mov eax,[rsp+6C]
re4.exe+25F7C9D: 89 43 1C                 - mov [rbx+1C],eax
re4.exe+25F7CA0: 41 8B 8D D8 01 00 00     - mov ecx,[r13+000001D8]
re4.exe+25F7CA7: 89 4B 40                 - mov [rbx+40],ecx
re4.exe+25F7CAA: 41 8B 8D DC 01 00 00     - mov ecx,[r13+000001DC]
re4.exe+25F7CB1: 89 4B 44                 - mov [rbx+44],ecx
re4.exe+25F7CB4: 41 8B 85 9C 01 00 00     - mov eax,[r13+0000019C]
}

[Neodio]

Shoot 1 Skull To Complete Shooting Range Task

Code: Select all

{ Game   : re4.exe
  Version: 
  Date   : 2023-03-26
  Author : Handsome Tom

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(skulls,re4.exe,8B 8E D8 01 00 00 89) // should be unique
alloc(newmem,$1000,skulls)

label(code)
label(return)

newmem:

code:
  mov ecx,[rsi+000001DC]
  mov [rsi+000001D8],ecx
  jmp return

skulls:
  jmp newmem
  nop
return:
registersymbol(skulls)

[DISABLE]

skulls:
  db 8B 8E D8 01 00 00

unregistersymbol(skulls)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+25D51A6

re4.exe+25D516D: E8 EE BE 01 00           - call re4.exe+25F1060
re4.exe+25D5172: 48 8B 15 BF 8A B3 0A     - mov rdx,[re4.exe+D10DC38]
re4.exe+25D5179: 45 33 C0                 - xor r8d,r8d
re4.exe+25D517C: 48 8B 1D 45 CF C5 0A     - mov rbx,[re4.exe+D2320C8]
re4.exe+25D5183: 48 8B CF                 - mov rcx,rdi
re4.exe+25D5186: E8 15 99 FB 00           - call re4.exe+358EAA0
re4.exe+25D518B: 4C 8D 84 24 88 00 00 00  - lea r8,[rsp+00000088]
re4.exe+25D5193: C6 84 24 88 00 00 00 00  - mov byte ptr [rsp+00000088],00
re4.exe+25D519B: 48 8B E8                 - mov rbp,rax
re4.exe+25D519E: 48 C7 40 10 FF FF FF FF  - mov qword ptr [rax+10],FFFFFFFFFFFFFFFF
// ---------- INJECTING HERE ----------
re4.exe+25D51A6: 8B 8E D8 01 00 00        - mov ecx,[rsi+000001D8]
// ---------- DONE INJECTING  ----------
re4.exe+25D51AC: 89 48 10                 - mov [rax+10],ecx
re4.exe+25D51AF: 8B 8E DC 01 00 00        - mov ecx,[rsi+000001DC]
re4.exe+25D51B5: 89 48 14                 - mov [rax+14],ecx
re4.exe+25D51B8: 48 8B CF                 - mov rcx,rdi
re4.exe+25D51BB: 4C 8B 73 70              - mov r14,[rbx+70]
re4.exe+25D51BF: 49 8B D6                 - mov rdx,r14
re4.exe+25D51C2: E8 19 6E 06 01           - call re4.exe+363BFE0
re4.exe+25D51C7: 48 8B 53 70              - mov rdx,[rbx+70]
re4.exe+25D51CB: 4C 8D 4C 24 40           - lea r9,[rsp+40]
re4.exe+25D51D0: 41 B8 57 00 00 00        - mov r8d,00000057
}

All Shooting Range Targets Killed

Code: Select all

{ Game   : re4.exe
  Version: 
  Date   : 2023-03-26
  Author : Handsome Tom

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(maxKill,re4.exe,48 8B D7 49 8B CE 45 32) // should be unique
alloc(newmem,$1000,maxKill)

label(code)
label(return)

newmem:

code:
  mov edx,[rdi+000001AC]
  mov [rdi+000001A8],edx
  mov rdx,rdi
  mov rcx,r14
  jmp return

maxKill:
  jmp newmem
  nop
return:
registersymbol(maxKill)

[DISABLE]

maxKill:
  db 48 8B D7 49 8B CE

unregistersymbol(maxKill)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: re4.exe+25D545A

re4.exe+25D5439: EB 1B                 - jmp re4.exe+25D5456
re4.exe+25D543B: 41 8B C5              - mov eax,r13d
re4.exe+25D543E: 38 87 E0 01 00 00     - cmp [rdi+000001E0],al
re4.exe+25D5444: 0F 95 C0              - setne al
re4.exe+25D5447: 85 C0                 - test eax,eax
re4.exe+25D5449: 0F 95 C0              - setne al
re4.exe+25D544C: 84 C0                 - test al,al
re4.exe+25D544E: 75 06                 - jne re4.exe+25D5456
re4.exe+25D5450: FF 87 A8 01 00 00     - inc [rdi+000001A8]
re4.exe+25D5456: 48 8B 46 10           - mov rax,[rsi+10]
// ---------- INJECTING HERE ----------
re4.exe+25D545A: 48 8B D7              - mov rdx,rdi
// ---------- DONE INJECTING  ----------
re4.exe+25D545D: 49 8B CE              - mov rcx,r14
re4.exe+25D5460: 45 32 FF              - xor r15l,r15l
re4.exe+25D5463: 4C 8B 80 D0 00 00 00  - mov r8,[rax+000000D0]
re4.exe+25D546A: E8 01 45 FB FF        - call re4.exe+2589970
re4.exe+25D546F: 84 C0                 - test al,al
re4.exe+25D5471: 0F 85 9A 01 00 00     - jne re4.exe+25D5611
re4.exe+25D5477: 48 8B 46 10           - mov rax,[rsi+10]
re4.exe+25D547B: 48 8B 88 D0 00 00 00  - mov rcx,[rax+000000D0]
re4.exe+25D5482: 48 85 C9              - test rcx,rcx
re4.exe+25D5485: 74 0A                 - je re4.exe+25D5491
}

Shooting Range Results Function

Code: Select all

// ORIGINAL CODE - INJECTION POINT: re4.exe+25F7C85

re4.exe+25F7C58: 45 33 C0                 - xor r8d,r8d
re4.exe+25F7C5B: 48 8B 35 66 A4 C3 0A     - mov rsi,[re4.exe+D2320C8]
re4.exe+25F7C62: 49 8B CF                 - mov rcx,r15
re4.exe+25F7C65: E8 36 6E F9 00           - call re4.exe+358EAA0
re4.exe+25F7C6A: 41 8B 8D 98 01 00 00     - mov ecx,[r13+00000198]
re4.exe+25F7C71: 48 8B D8                 - mov rbx,rax
re4.exe+25F7C74: 89 48 10                 - mov [rax+10],ecx
re4.exe+25F7C77: 80 BC 24 D8 00 00 00 00  - cmp byte ptr [rsp+000000D8],00
re4.exe+25F7C7F: 0F 95 C1                 - setne cl
re4.exe+25F7C82: 88 48 30                 - mov [rax+30],cl
// ---------- INJECTING HERE ----------
re4.exe+25F7C85: 41 8B 8D A8 01 00 00     - mov ecx,[r13+000001A8]
// ---------- DONE INJECTING  ----------
re4.exe+25F7C8C: 89 48 14                 - mov [rax+14],ecx
re4.exe+25F7C8F: 41 8B 8D AC 01 00 00     - mov ecx,[r13+000001AC]
re4.exe+25F7C96: 89 48 18                 - mov [rax+18],ecx
re4.exe+25F7C99: 8B 44 24 6C              - mov eax,[rsp+6C]
re4.exe+25F7C9D: 89 43 1C                 - mov [rbx+1C],eax
re4.exe+25F7CA0: 41 8B 8D D8 01 00 00     - mov ecx,[r13+000001D8]
re4.exe+25F7CA7: 89 4B 40                 - mov [rbx+40],ecx
re4.exe+25F7CAA: 41 8B 8D DC 01 00 00     - mov ecx,[r13+000001DC]
re4.exe+25F7CB1: 89 4B 44                 - mov [rbx+44],ecx
re4.exe+25F7CB4: 41 8B 85 9C 01 00 00     - mov eax,[r13+0000019C]
}

This is great stuff, I was having quite a hard time getting all the cursed skulls, even with 'item adder mod' rocket launcher -_-

Thanks!!