Kingdom Come Deliverance

[Expired6978]

For Horse (Can't find horse body armor):

Also been trying to find the horse body armor but no luck so far.

The horse armor doesn't appear to be implemented going by the item files. Though oddly enough they've added polearms that can't be equipped.

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[The Mogician]

Hi, I've been trying to milk as much as I can from the intro bit and being trying to use the dice game bet amount pointer, but it's always pointed to null. Any idea why? Like, it shows "???" on the place bet screen.

Also, none of the skill pointers work for me. The vital pointers seems fine though.

Make sure you are using the right match of game and table.

[lcmiracle]

Hi, I've been trying to milk as much as I can from the intro bit and being trying to use the dice game bet amount pointer, but it's always pointed to null. Any idea why? Like, it shows "???" on the place bet screen.

Also, none of the skill pointers work for me. The vital pointers seems fine though.

Make sure you are using the right match of game and table.

Well game's right since I just downloaded it from steam today. Although the skill points are, or rather, have been working, I just didn't realized it's was perk points.

[The Mogician]

wh_cheat_additem 8895b262-ddfb-4392-a784-eee616798c96 gives a heavenly kingdom dice, which seems to only roll 1 and 6

[The Mogician]

For Horse (Can't find horse body armor):

Also been trying to find the horse body armor but no luck so far.

The horse armor doesn't appear to be implemented going by the item files. Though oddly enough they've added polearms that can't be equipped.

it is kinda implemented
wh_cheat_additem 46021c09-1a2e-2683-bd92-d17cb66fb390
gives you horse armor

[bloodaxis]

it is kinda implemented
wh_cheat_additem 46021c09-1a2e-2683-bd92-d17cb66fb390
gives you horse armor

That gives you Horse Head Armor, still looking for the body piece.

[cdtrico]

it is kinda implemented
wh_cheat_additem 46021c09-1a2e-2683-bd92-d17cb66fb390
gives you horse armor

That gives you Horse Head Armor, still looking for the body piece.

THe head armor is also actually ingame, found on a dead horse in a nest on a cliff east of Ledetchko.

On another note, the Console Unlock script works great for cheat commands and godmode etc, but some commands like ai_ignoreplayer (which would make the player essentially invisible) don't work for some reason, it seems there's still more restrictions.

[bloodaxis]

THe head armor is also actually ingame, found on a dead horse in a nest on a cliff east of Ledetchko.

Managed to find that legit yesterday, but yeah it seems as if the body armor isn't in the game files, been going through all clothing/armor items assigned to horses and none of the item ids correspond to anything that would go in the horse body armor slot.

[cdtrico]

THe head armor is also actually ingame, found on a dead horse in a nest on a cliff east of Ledetchko.

Managed to find that legit yesterday, but yeah it seems as if the body armor isn't in the game files, been going through all clothing/armor items assigned to horses and none of the item ids correspond to anything that would go in the horse body armor slot.

So they put in the slot but not the armor, so misleading...

[gideon25]

Enable Console Functions:

Hopefully the aobscan works, whatever game version I am using seems to differ from everyone else's here.

Console Unlocker

Code: Select all

{ Game   : KingdomCome.exe
  Version: 
  Date   : 2018-02-18
  This script enables the KCD console for variables and functions that were dev disabled
}

[ENABLE]

aobscanmodule(VariableExec,WHGame.DLL,81 E3 02 00 00 03) // should be unique
alloc(newmem,$1000,"WHGame.DLL"+6F7882)

label(code)
label(return)

newmem:

code:
  and ebx,03000000
  jmp return

VariableExec:
  jmp newmem
  nop
return:
registersymbol(VariableExec)

aobscanmodule(FunctionExec,WHGame.DLL,F7 47 18 02 00 00 03) // should be unique
alloc(newmem2,$1000,"WHGame.DLL"+6F7AF8)

label(code2)
label(return2)

newmem2:

code2:
  test [rdi+18],3000000
  jmp return2

FunctionExec:
  jmp newmem2
  nop
  nop
return2:
registersymbol(FunctionExec)

[DISABLE]

VariableExec:
  db 81 E3 02 00 00 03

unregistersymbol(VariableExec)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "WHGame.DLL"+6F7882

"WHGame.DLL"+6F7861: 4D 8B F8                 -  mov r15,r8
"WHGame.DLL"+6F7864: 48 8B FA                 -  mov rdi,rdx
"WHGame.DLL"+6F7867: FF 90 88 00 00 00        -  call qword ptr [rax+00000088]
"WHGame.DLL"+6F786D: 4C 8B 0F                 -  mov r9,[rdi]
"WHGame.DLL"+6F7870: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7873: 40 8A E8                 -  mov bpl,al
"WHGame.DLL"+6F7876: 41 FF 51 60              -  call qword ptr [r9+60]
"WHGame.DLL"+6F787A: 4C 8B 07                 -  mov r8,[rdi]
"WHGame.DLL"+6F787D: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7880: 8B D8                    -  mov ebx,eax
// ---------- INJECTING HERE ----------
"WHGame.DLL"+6F7882: 81 E3 02 00 00 03        -  and ebx,03000002
// ---------- DONE INJECTING  ----------
"WHGame.DLL"+6F7888: 41 0F 95 C4              -  setne r12l
"WHGame.DLL"+6F788C: 41 FF 50 60              -  call qword ptr [r8+60]
"WHGame.DLL"+6F7890: 48 8B 17                 -  mov rdx,[rdi]
"WHGame.DLL"+6F7893: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7896: 44 8B F0                 -  mov r14d,eax
"WHGame.DLL"+6F7899: 41 81 E6 00 08 00 00     -  and r14d,00000800
"WHGame.DLL"+6F78A0: 41 0F 95 C5              -  setne r13l
"WHGame.DLL"+6F78A4: FF 52 60                 -  call qword ptr [rdx+60]
"WHGame.DLL"+6F78A7: 25 00 00 00 40           -  and eax,40000000
"WHGame.DLL"+6F78AC: 0F 95 84 24 80 00 00 00  -  setne byte ptr [rsp+00000080]
}
FunctionExec:
  db F7 47 18 02 00 00 03

unregistersymbol(FunctionExec)
dealloc(newmem2)

{
// ORIGINAL CODE - INJECTION POINT: "WHGame.DLL"+6F7AF8

"WHGame.DLL"+6F7ACC: 48 8B 51 08                 -  mov rdx,[rcx+08]
"WHGame.DLL"+6F7AD0: 0F B6 05 31 06 77 01        -  movzx eax,byte ptr [WHGame.DLL+1E68108]
"WHGame.DLL"+6F7AD7: 44 0F B6 02                 -  movzx r8d,byte ptr [rdx]
"WHGame.DLL"+6F7ADB: 44 2B C0                    -  sub r8d,eax
"WHGame.DLL"+6F7ADE: 75 0F                       -  jne WHGame.DLL+6F7AEF
"WHGame.DLL"+6F7AE0: 44 0F B6 42 01              -  movzx r8d,byte ptr [rdx+01]
"WHGame.DLL"+6F7AE5: 0F B6 05 1D 06 77 01        -  movzx eax,byte ptr [WHGame.DLL+1E68109]
"WHGame.DLL"+6F7AEC: 44 2B C0                    -  sub r8d,eax
"WHGame.DLL"+6F7AEF: 45 85 C0                    -  test r8d,r8d
"WHGame.DLL"+6F7AF2: 0F 84 DA F3 A0 00           -  je WHGame.DLL+1106ED2
// ---------- INJECTING HERE ----------
"WHGame.DLL"+6F7AF8: F7 47 18 02 00 00 03        -  test [rdi+18],3000002
// ---------- DONE INJECTING  ----------
"WHGame.DLL"+6F7AFF: 0F 85 E2 F3 A0 00           -  jne WHGame.DLL+1106EE7
"WHGame.DLL"+6F7B05: 48 8B 47 20                 -  mov rax,[rdi+20]
"WHGame.DLL"+6F7B09: 48 85 C0                    -  test rax,rax
"WHGame.DLL"+6F7B0C: 0F 84 17 F4 A0 00           -  je WHGame.DLL+1106F29
"WHGame.DLL"+6F7B12: 48 8D 0D 97 08 78 01        -  lea rcx,[WHGame.DLL+1E783B0]
"WHGame.DLL"+6F7B19: 48 89 75 07                 -  mov [rbp+07],rsi
"WHGame.DLL"+6F7B1D: 48 89 4D F7                 -  mov [rbp-09],rcx
"WHGame.DLL"+6F7B21: 48 8D 4D D7                 -  lea rcx,[rbp-29]
"WHGame.DLL"+6F7B25: 48 89 4D FF                 -  mov [rbp-01],rcx
"WHGame.DLL"+6F7B29: 48 8D 4D F7                 -  lea rcx,[rbp-09]
}

Should allow you to use commands like:
wh_cheat_addItem
wh_cheat_money
It also allows setting of some cVars that are normally not allowed to be set, though it seems many of the interesting ones do nothing.

wh_cheat_addItem takes the item GUID, these can be found in
Data\Tables.pak\Libs\Tables\item\item.xml

For Example:
wh_cheat_addItem 57ace80d-3683-486a-93b1-1bbe4c21e598
Would give you a Yew Longbow

when i try to add this as a LUA script ii keep getting errors :/

Its just a normal script. Here.

[LazerPazer]

what id for saved shnaps))!&!&

[Ghostknight12354]

¨when activating horse pointers its locked in the bottom. please fix it so that its at max

[cryptonat]

Has anyone had a look at:
\Data\Scripts.pak\Libs\Haste\

Will we be able to use the commands in this file with the console unlocker? It seems there are quite a few useful developer commands available in this file.

[KyraAltair]

Enable Console Functions:

Hopefully the aobscan works, whatever game version I am using seems to differ from everyone else's here.

Console Unlocker

Code: Select all

{ Game   : KingdomCome.exe
  Version: 
  Date   : 2018-02-18
  This script enables the KCD console for variables and functions that were dev disabled
}

[ENABLE]

aobscanmodule(VariableExec,WHGame.DLL,81 E3 02 00 00 03) // should be unique
alloc(newmem,$1000,"WHGame.DLL"+6F7882)

label(code)
label(return)

newmem:

code:
  and ebx,03000000
  jmp return

VariableExec:
  jmp newmem
  nop
return:
registersymbol(VariableExec)

aobscanmodule(FunctionExec,WHGame.DLL,F7 47 18 02 00 00 03) // should be unique
alloc(newmem2,$1000,"WHGame.DLL"+6F7AF8)

label(code2)
label(return2)

newmem2:

code2:
  test [rdi+18],3000000
  jmp return2

FunctionExec:
  jmp newmem2
  nop
  nop
return2:
registersymbol(FunctionExec)

[DISABLE]

VariableExec:
  db 81 E3 02 00 00 03

unregistersymbol(VariableExec)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "WHGame.DLL"+6F7882

"WHGame.DLL"+6F7861: 4D 8B F8                 -  mov r15,r8
"WHGame.DLL"+6F7864: 48 8B FA                 -  mov rdi,rdx
"WHGame.DLL"+6F7867: FF 90 88 00 00 00        -  call qword ptr [rax+00000088]
"WHGame.DLL"+6F786D: 4C 8B 0F                 -  mov r9,[rdi]
"WHGame.DLL"+6F7870: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7873: 40 8A E8                 -  mov bpl,al
"WHGame.DLL"+6F7876: 41 FF 51 60              -  call qword ptr [r9+60]
"WHGame.DLL"+6F787A: 4C 8B 07                 -  mov r8,[rdi]
"WHGame.DLL"+6F787D: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7880: 8B D8                    -  mov ebx,eax
// ---------- INJECTING HERE ----------
"WHGame.DLL"+6F7882: 81 E3 02 00 00 03        -  and ebx,03000002
// ---------- DONE INJECTING  ----------
"WHGame.DLL"+6F7888: 41 0F 95 C4              -  setne r12l
"WHGame.DLL"+6F788C: 41 FF 50 60              -  call qword ptr [r8+60]
"WHGame.DLL"+6F7890: 48 8B 17                 -  mov rdx,[rdi]
"WHGame.DLL"+6F7893: 48 8B CF                 -  mov rcx,rdi
"WHGame.DLL"+6F7896: 44 8B F0                 -  mov r14d,eax
"WHGame.DLL"+6F7899: 41 81 E6 00 08 00 00     -  and r14d,00000800
"WHGame.DLL"+6F78A0: 41 0F 95 C5              -  setne r13l
"WHGame.DLL"+6F78A4: FF 52 60                 -  call qword ptr [rdx+60]
"WHGame.DLL"+6F78A7: 25 00 00 00 40           -  and eax,40000000
"WHGame.DLL"+6F78AC: 0F 95 84 24 80 00 00 00  -  setne byte ptr [rsp+00000080]
}
FunctionExec:
  db F7 47 18 02 00 00 03

unregistersymbol(FunctionExec)
dealloc(newmem2)

{
// ORIGINAL CODE - INJECTION POINT: "WHGame.DLL"+6F7AF8

"WHGame.DLL"+6F7ACC: 48 8B 51 08                 -  mov rdx,[rcx+08]
"WHGame.DLL"+6F7AD0: 0F B6 05 31 06 77 01        -  movzx eax,byte ptr [WHGame.DLL+1E68108]
"WHGame.DLL"+6F7AD7: 44 0F B6 02                 -  movzx r8d,byte ptr [rdx]
"WHGame.DLL"+6F7ADB: 44 2B C0                    -  sub r8d,eax
"WHGame.DLL"+6F7ADE: 75 0F                       -  jne WHGame.DLL+6F7AEF
"WHGame.DLL"+6F7AE0: 44 0F B6 42 01              -  movzx r8d,byte ptr [rdx+01]
"WHGame.DLL"+6F7AE5: 0F B6 05 1D 06 77 01        -  movzx eax,byte ptr [WHGame.DLL+1E68109]
"WHGame.DLL"+6F7AEC: 44 2B C0                    -  sub r8d,eax
"WHGame.DLL"+6F7AEF: 45 85 C0                    -  test r8d,r8d
"WHGame.DLL"+6F7AF2: 0F 84 DA F3 A0 00           -  je WHGame.DLL+1106ED2
// ---------- INJECTING HERE ----------
"WHGame.DLL"+6F7AF8: F7 47 18 02 00 00 03        -  test [rdi+18],3000002
// ---------- DONE INJECTING  ----------
"WHGame.DLL"+6F7AFF: 0F 85 E2 F3 A0 00           -  jne WHGame.DLL+1106EE7
"WHGame.DLL"+6F7B05: 48 8B 47 20                 -  mov rax,[rdi+20]
"WHGame.DLL"+6F7B09: 48 85 C0                    -  test rax,rax
"WHGame.DLL"+6F7B0C: 0F 84 17 F4 A0 00           -  je WHGame.DLL+1106F29
"WHGame.DLL"+6F7B12: 48 8D 0D 97 08 78 01        -  lea rcx,[WHGame.DLL+1E783B0]
"WHGame.DLL"+6F7B19: 48 89 75 07                 -  mov [rbp+07],rsi
"WHGame.DLL"+6F7B1D: 48 89 4D F7                 -  mov [rbp-09],rcx
"WHGame.DLL"+6F7B21: 48 8D 4D D7                 -  lea rcx,[rbp-29]
"WHGame.DLL"+6F7B25: 48 89 4D FF                 -  mov [rbp-01],rcx
"WHGame.DLL"+6F7B29: 48 8D 4D F7                 -  lea rcx,[rbp-09]
}

Should allow you to use commands like:
wh_cheat_addItem
wh_cheat_money
It also allows setting of some cVars that are normally not allowed to be set, though it seems many of the interesting ones do nothing.

wh_cheat_addItem takes the item GUID, these can be found in
Data\Tables.pak\Libs\Tables\item\item.xml

For Example:
wh_cheat_addItem 57ace80d-3683-486a-93b1-1bbe4c21e598
Would give you a Yew Longbow

when i try to add this as a LUA script ii keep getting errors :/

Its just a normal script. Here.

how actually this script work?
i had the game updated to 1.22
then use your script, enabled it
when i loaded my save game, it crash (KCD.exe has stopped working)

[affenasm]

Anyone got the ID of the Augsburg Armor?