FearLess Cheat Engine

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>44</ID>
      <Description>"Inf HP Player Team"</Description>
      <LastState />
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : TaleWorlds.MountAndBlade.Launcher.exe
  Version:
  Date   : 2020-03-31
  Author : chodn

  This script does blah blah blah
}

[ENABLE]

aobscan(INJECTTEAMHP,C4 E1 78 2E C8) // should be unique
registersymbol(INJECTTEAMHP)
alloc(newmem,$1000,INJECTTEAMHP)
//assert(TaleWorlds.MountAndBlade.Agent::set_Health+7F,C4 E1 78 2E C8)
//alloc(newmem,$1000,TaleWorlds.MountAndBlade.Agent::set_Health+7F)
//assembly symbols don't get loaded if CE is attached before the function is compiled

label(code)
label(return)

alloc(leaderteam,8)
registersymbol(leaderteam)

newmem:
  push rax
  mov rax,[rsi+000000A8] //"Team"
  cmp rax,#0
  je code
  mov rax,[rax+A8] //"MBTeam"
  cmp rax,#0
  je code
  mov rax,[rax+C8] //"_mainAgent"
  mov rax,[rax+A8] //"Team"
  mov rax,[rax+90] //"Side"
  mov [leaderteam],rax //load leader's team
  //we want to do this step every time so the player doesn't need to
  //reactivate the script every single battle. takes a lot longer tho
  mov rax,[rsi+000000A8] //"Team"
  mov rax,[rax+90] //"Side"
  cmp [leaderteam],rax //check if leader's team
  jne code
  vmovss xmm0,[rsi+00000168]
  vmovss xmm2,[rsi+00000168]
  vmovss xmm3,[rsi+00000168]
code:
  pop rax
  vucomiss xmm1,xmm0
  jmp return

leaderteam:
  dq 0

//TaleWorlds.MountAndBlade.Agent::set_Health+7F:
INJECTTEAMHP:
  jmp newmem
return:

[DISABLE]

//TaleWorlds.MountAndBlade.Agent::set_Health+7F:
INJECTTEAMHP:
  db C4 E1 78 2E C8

unregistersymbol(INJECTTEAMHP)
unregistersymbol(leaderteam)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: 7FFDA261618F

7FFDA2616150: C4 E1 62 2A D9              -  vcvtsi2ss xmm3,ebx,ecx
7FFDA2616155: C4 E1 78 28 D3              -  vmovaps xmm2,xmm3
7FFDA261615A: C4 E1 7A 10 86 68 01 00 00  -  vmovss xmm0,[rsi+00000168]
7FFDA2616163: C4 E1 7A 5C C2              -  vsubss xmm0,xmm0,xmm2
7FFDA2616168: C4 E1 7A 10 0D 5F 00 00 00  -  vmovss xmm1,[7FFDA26161D0]
7FFDA2616171: C4 E1 78 54 C1              -  vandps xmm0,xmm0,xmm1
7FFDA2616176: C4 E1 7A 10 0D 59 00 00 00  -  vmovss xmm1,[7FFDA26161D8]
// ---------- INJECTING HERE ----------
7FFDA261617F: C4 E1 78 2E C8              -  vucomiss xmm1,xmm0
// ---------- DONE INJECTING  ----------
7FFDA2616184: 73 3D                       -  jae 7FFDA26161C3
7FFDA2616186: C4 E1 7A 10 86 68 01 00 00  -  vmovss xmm0,[rsi+00000168]
7FFDA261618F: C4 E1 7A 11 96 68 01 00 00  -  vmovss [rsi+00000168],xmm2
7FFDA2616198: 48 8B 4E 10                 -  mov rcx,[rsi+10]
7FFDA261619C: 48 85 C9                    -  test rcx,rcx
7FFDA261619F: 75 06                       -  jne 7FFDA26161A7
7FFDA26161A1: 48 83 C4 30                 -  add rsp,30
7FFDA26161A5: 5E                          -  pop rsi
7FFDA26161A6: C3                          -  ret
7FFDA26161A7: 48 89 4C 24 28              -  mov [rsp+28],rcx
7FFDA26161AC: 48 8D 51 08                 -  lea rdx,[rcx+08]
7FFDA26161B0: 48 8B 0A                    -  mov rcx,[rdx]
7FFDA26161B3: 48 8B D6                    -  mov rdx,rsi
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>