FearLess Cheat Engine

Code: Select all

<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
  <CheatEntries>
    <CheatEntry>
      <ID>85</ID>
      <Description>"Infinite Weight Limit (Trade Items To Activate)"</Description>
      <LastState Activated="1"/>
      <VariableType>Auto Assembler Script</VariableType>
      <AssemblerScript>{ Game   : bg3.exe
  Version: 
  Date   : 2020-10-07
  Author : Zach

  This script does blah blah blah
}

[ENABLE]

aobscanmodule(INJECT,bg3.exe,F3 0F 11 4B 50 48 8B 01) // should be unique
alloc(newmem,$1000,"bg3.exe"+2DDE0A5)

label(code)
label(return)

newmem:

code:
  mov [rbx+50],(float)1
  jmp return

INJECT:
  jmp newmem
return:
registersymbol(INJECT)

[DISABLE]

INJECT:
  db F3 0F 11 4B 50

unregistersymbol(INJECT)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "bg3.exe"+2DDE0A5

"bg3.exe"+2DDE07D: E8 3E 96 C9 FE           -  call bg3.exe+1A776C0
"bg3.exe"+2DDE082: F3 0F 10 43 50           -  movss xmm0,[rbx+50]
"bg3.exe"+2DDE087: 66 0F 6E C8              -  movd xmm1,eax
"bg3.exe"+2DDE08B: 0F 5B C9                 -  cvtdq2ps xmm1,xmm1
"bg3.exe"+2DDE08E: F3 0F 59 0D 5E 01 2A 02  -  mulss xmm1,[bg3.exe+507E1F4]
"bg3.exe"+2DDE096: 0F 2E C1                 -  ucomiss xmm0,xmm1
"bg3.exe"+2DDE099: 7A 02                    -  jp bg3.exe+2DDE09D
"bg3.exe"+2DDE09B: 74 2D                    -  je bg3.exe+2DDE0CA
"bg3.exe"+2DDE09D: 48 8B 4B 48              -  mov rcx,[rbx+48]
"bg3.exe"+2DDE0A1: 48 83 C1 10              -  add rcx,10
// ---------- INJECTING HERE ----------
"bg3.exe"+2DDE0A5: F3 0F 11 4B 50           -  movss [rbx+50],xmm1
// ---------- DONE INJECTING  ----------
"bg3.exe"+2DDE0AA: 48 8B 01                 -  mov rax,[rcx]
"bg3.exe"+2DDE0AD: FF 50 30                 -  call qword ptr [rax+30]
"bg3.exe"+2DDE0B0: 8B 4B 54                 -  mov ecx,[rbx+54]
"bg3.exe"+2DDE0B3: 4C 8D 44 24 38           -  lea r8,[rsp+38]
"bg3.exe"+2DDE0B8: 48 8B 53 48              -  mov rdx,[rbx+48]
"bg3.exe"+2DDE0BC: 89 4C 24 38              -  mov [rsp+38],ecx
"bg3.exe"+2DDE0C0: 48 8B C8                 -  mov rcx,rax
"bg3.exe"+2DDE0C3: 4C 8B 08                 -  mov r9,[rax]
"bg3.exe"+2DDE0C6: 41 FF 51 28              -  call qword ptr [r9+28]
"bg3.exe"+2DDE0CA: 48 8B CF                 -  mov rcx,rdi
}
</AssemblerScript>
    </CheatEntry>
  </CheatEntries>
</CheatTable>