64
"Enable"
00FF00
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-12
Author : NightfaII#2516
}
[ENABLE]
luacall(showMessage('Made by NightfaII#2516'))
aobscanmodule(getBase,HogwartsLegacy.exe,48 8B 06 0F 95 C2 FF 90 08 0E)
alloc(newmem,$1000,getBase)
alloc(pbase,8)
label(code)
label(return)
pbase:
dd 00
newmem:
mov [pbase],rcx
code:
mov rax,[rsi]
setne dl
jmp return
getBase:
jmp newmem
nop
return:
registersymbol(getBase pbase)
[DISABLE]
getBase:
db 48 8B 06 0F 95 C2
unregistersymbol(*)
dealloc(*)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+321194F
HogwartsLegacy.exe+3211925: 49 8B 40 20 - mov rax,[r8+20]
HogwartsLegacy.exe+3211929: 48 89 83 80 00 00 00 - mov [rbx+00000080],rax
HogwartsLegacy.exe+3211930: E8 AB 0E 6A 00 - call HogwartsLegacy.exe+38B27E0
HogwartsLegacy.exe+3211935: 48 8B 43 20 - mov rax,[rbx+20]
HogwartsLegacy.exe+3211939: 48 8B CE - mov rcx,rsi
HogwartsLegacy.exe+321193C: 48 85 C0 - test rax,rax
HogwartsLegacy.exe+321193F: 40 0F 95 C7 - setne dil
HogwartsLegacy.exe+3211943: 48 03 F8 - add rdi,rax
HogwartsLegacy.exe+3211946: 83 7C 24 30 00 - cmp dword ptr [rsp+30],00
HogwartsLegacy.exe+321194B: 48 89 7B 20 - mov [rbx+20],rdi
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+321194F: 48 8B 06 - mov rax,[rsi]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+3211952: 0F 95 C2 - setne dl
HogwartsLegacy.exe+3211955: FF 90 08 0E 00 00 - call qword ptr [rax+00000E08]
HogwartsLegacy.exe+321195B: 48 8B 5C 24 38 - mov rbx,[rsp+38]
HogwartsLegacy.exe+3211960: 48 8B 74 24 40 - mov rsi,[rsp+40]
HogwartsLegacy.exe+3211965: 48 83 C4 20 - add rsp,20
HogwartsLegacy.exe+3211969: 5F - pop rdi
HogwartsLegacy.exe+321196A: C3 - ret
HogwartsLegacy.exe+321196B: CC - int 3
HogwartsLegacy.exe+321196C: CC - int 3
HogwartsLegacy.exe+321196D: CC - int 3
}
8
"Inf Broom"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-10
Author : NFC
This script does blah blah blah
}
[ENABLE]
aobscanmodule(broomfly,HogwartsLegacy.exe,F3 0F 11 46 40 41) // should be unique
alloc(newmem,$1000,broomfly)
label(code)
label(return)
newmem:
code:
//movss [rsi+40],xmm0
jmp return
broomfly:
jmp newmem
return:
registersymbol(broomfly)
aobscanmodule(broom2,HogwartsLegacy.exe,4E C1 A2 00 F3 0F 11 46 40) // should be unique
alloc(newmem2,$1000,broom2)
label(code2)
label(return2)
newmem2:
code2:
//movss [rsi+40],xmm0
jmp return2
broom2+04:
jmp newmem2
return2:
registersymbol(broom2)
[DISABLE]
broomfly:
db F3 0F 11 46 40
unregistersymbol(broomfly)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2BE7AEC
HogwartsLegacy.exe+2BE7AC2: 0F B6 83 BA 07 00 00 - movzx eax,byte ptr [rbx+000007BA]
HogwartsLegacy.exe+2BE7AC9: 84 C0 - test al,al
HogwartsLegacy.exe+2BE7ACB: 74 70 - je HogwartsLegacy.exe+2BE7B3D
HogwartsLegacy.exe+2BE7ACD: 80 BB 78 05 00 00 00 - cmp byte ptr [rbx+00000578],00
HogwartsLegacy.exe+2BE7AD4: 74 67 - je HogwartsLegacy.exe+2BE7B3D
HogwartsLegacy.exe+2BE7AD6: F3 0F 10 5F 04 - movss xmm3,[rdi+04]
HogwartsLegacy.exe+2BE7ADB: 41 0F 28 D0 - movaps xmm2,xmm8
HogwartsLegacy.exe+2BE7ADF: F3 0F 10 46 40 - movss xmm0,[rsi+40]
HogwartsLegacy.exe+2BE7AE4: 0F 28 CF - movaps xmm1,xmm7
HogwartsLegacy.exe+2BE7AE7: E8 64 C1 A2 00 - call HogwartsLegacy.exe+3613C50
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2BE7AEC: F3 0F 11 46 40 - movss [rsi+40],xmm0
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2BE7AF1: 41 0F 28 D0 - movaps xmm2,xmm8
HogwartsLegacy.exe+2BE7AF5: F3 0F 10 5F 08 - movss xmm3,[rdi+08]
HogwartsLegacy.exe+2BE7AFA: 0F 57 C9 - xorps xmm1,xmm1
HogwartsLegacy.exe+2BE7AFD: E8 4E C1 A2 00 - call HogwartsLegacy.exe+3613C50
HogwartsLegacy.exe+2BE7B02: F3 0F 11 46 40 - movss [rsi+40],xmm0
HogwartsLegacy.exe+2BE7B07: 0F 54 05 22 49 A0 03 - andps xmm0,[HogwartsLegacy.exe+65EC430]
HogwartsLegacy.exe+2BE7B0E: 0F 2F 05 C3 3C A2 03 - comiss xmm0,[HogwartsLegacy.exe+660B7D8]
HogwartsLegacy.exe+2BE7B15: 76 13 - jna HogwartsLegacy.exe+2BE7B2A
HogwartsLegacy.exe+2BE7B17: 80 BB B9 07 00 00 00 - cmp byte ptr [rbx+000007B9],00
HogwartsLegacy.exe+2BE7B1E: 75 5C - jne HogwartsLegacy.exe+2BE7B7C
}
broom2+04:
db F3 0F 11 46 40
unregistersymbol(broom2)
dealloc(newmem2)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2BE7B02
HogwartsLegacy.exe+2BE7AD6: F3 0F 10 5F 04 - movss xmm3,[rdi+04]
HogwartsLegacy.exe+2BE7ADB: 41 0F 28 D0 - movaps xmm2,xmm8
HogwartsLegacy.exe+2BE7ADF: F3 0F 10 46 40 - movss xmm0,[rsi+40]
HogwartsLegacy.exe+2BE7AE4: 0F 28 CF - movaps xmm1,xmm7
HogwartsLegacy.exe+2BE7AE7: E8 64 C1 A2 00 - call HogwartsLegacy.exe+3613C50
HogwartsLegacy.exe+2BE7AEC: F3 0F 11 46 40 - movss [rsi+40],xmm0
HogwartsLegacy.exe+2BE7AF1: 41 0F 28 D0 - movaps xmm2,xmm8
HogwartsLegacy.exe+2BE7AF5: F3 0F 10 5F 08 - movss xmm3,[rdi+08]
HogwartsLegacy.exe+2BE7AFA: 0F 57 C9 - xorps xmm1,xmm1
HogwartsLegacy.exe+2BE7AFD: E8 4E C1 A2 00 - call HogwartsLegacy.exe+3613C50
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2BE7B02: F3 0F 11 46 40 - movss [rsi+40],xmm0
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2BE7B07: 0F 54 05 22 49 A0 03 - andps xmm0,[HogwartsLegacy.exe+65EC430]
HogwartsLegacy.exe+2BE7B0E: 0F 2F 05 C3 3C A2 03 - comiss xmm0,[HogwartsLegacy.exe+660B7D8]
HogwartsLegacy.exe+2BE7B15: 76 13 - jna HogwartsLegacy.exe+2BE7B2A
HogwartsLegacy.exe+2BE7B17: 80 BB B9 07 00 00 00 - cmp byte ptr [rbx+000007B9],00
HogwartsLegacy.exe+2BE7B1E: 75 5C - jne HogwartsLegacy.exe+2BE7B7C
HogwartsLegacy.exe+2BE7B20: 48 8B CB - mov rcx,rbx
HogwartsLegacy.exe+2BE7B23: E8 B8 95 FF FF - call HogwartsLegacy.exe+2BE10E0
HogwartsLegacy.exe+2BE7B28: EB 52 - jmp HogwartsLegacy.exe+2BE7B7C
HogwartsLegacy.exe+2BE7B2A: 80 BB B9 07 00 00 00 - cmp byte ptr [rbx+000007B9],00
HogwartsLegacy.exe+2BE7B31: 74 49 - je HogwartsLegacy.exe+2BE7B7C
made by NightfaII#2516
}
122
"Invisible"
Auto Assembler Script
{$lua}
[ENABLE]
writeByte('[pbase]+3A20',1)
[DISABLE]
writeByte('[pbase]+3A20',0)
86
"Combat"
1
77
"FinisherDamage"
Float
[pbase]+1C08
78
"MaxFocus"
Float
[pbase]+1C10
79
"FinisherFocusCost"
Float
[pbase]+1C18
80
"PushFocusCost"
Float
[pbase]+1C20
81
"ComboResetTime"
Float
[pbase]+1C88
83
"DefenseStat.Current"
Float
[pbase]+1E80
84
"DefenseStat.Base"
Float
[pbase]+1E84
111
"CharStats"
1
106
"OffenseStat.Current"
Float
[pbase]+1DF0
109
"OffenseStat.Max"
Float
[pbase]+1DFC
107
"DefenseStat.Current"
Float
[pbase]+1E80
108
"DefenseStat.Max"
Float
[pbase]+1E8C
110
"CooldownStat.Current"
Float
[pbase]+1F10
112
"CooldownStat.Max"
Float
[pbase]+1F1C
120
"Invisible"
Byte
[pbase]+3A20
91
"HealthStats"
1
104
"SecondsAfterCombatBeforeRecoveryStarts"
Float
[pbase]+1D74
87
"HealingCooldownGroupModifier.Current"
Float
[pbase]+3308
88
"PercentHealthRecoverdPerSecond"
Float
[pbase]+1D70
89
"CriticalHealthFadeOutTime"
Float
[pbase]+1D60
90
"HealthIncreasePerLevel"
Float
[pbase]+1CCC
66
"Movement"
1
127
"IgnoreFallDamage"
Byte
[pbase]+18E0
99
"SprintMovementSpeed"
Float
[pbase]+578
98
"JogMovementSpeed"
Float
[pbase]+574
96
"WalkMovementSpeed"
Float
[pbase]+56C
95
"SlowWalkMovementSpeed"
Float
[pbase]+568
97
"FastWalkMovementSpeed"
Float
[pbase]+570
85
"InventorySizeModification.Current"
4 Bytes
[pbase]+1FA0
67
"GravityScale"
Float
[pbase]+2B0
168
69
"MaxWalkSpeedCrouched"
Float
[pbase]+2B0
1B0
70
"MaxSwimSpeed"
Float
[pbase]+2B0
1B4
71
"MaxFlySpeed"
Float
[pbase]+2B0
1B8
72
"RotationRate.Pitch"
Float
[pbase]+2B0
204
73
"RotationRate.Yaw"
Float
[pbase]+2B0
208
75
"RotationRate.Roll"
Float
[pbase]+2B0
20C
76
"Mass"
Float
[pbase]+2B0
228
92
"MovementMode"
1:Default
2:Low Collision
3:Freeze
4:???
5:yBug
Byte
[pbase]+2B0
181
94
"WalkableFloorAngle"
Float
[pbase]+2B0
178
101
"MAX_HEIGHT_FOR_CLIMB"
Float
[pbase]+16B8
102
"MAX_HEIGHT_FOR_HANG"
Float
[pbase]+16BC
103
"MAX_HEIGHT_FOR_JUMPWAIST"
Float
[pbase]+16C0
105
"Testing"
1
100
"Debug[1]"
Byte
[pbase]+5F5
114
"LootDropCountModifier.Current"
Float
[pbase]+26E0
115
"CreatureAgroFleeDistanceModifier.Current"
Float
[pbase]+2A40
116
"FocusModifier.Current"
Float
[pbase]+2AD0
117
"UseConsumeableForFreeChance.Current"
Float
[pbase]+2BF0
118
"UsePotionForFreeChance.Current"
Float
[pbase]+2C80
119
"InStealthMode[1]"
Byte
[pbase]+3A18
121
"bInCombatMode[1]"
Byte
[pbase]+38F1
123
"cloakVis[1]"
Byte
[pbase]+3E98
124
"bHoldingProtegoParry[1]"
Byte
[pbase]+3A24
125
"Combo"
4 Bytes
[pbase]+3EC4
126
"ChainAttack[1]"
Byte
[pbase]+3EC1
65
"pbase"
0
4 Bytes
[pbase]
62
"bbfox scripts"
1
23
"XP multiplier"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-10
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_XP_MULTI,HogwartsLegacy.exe,42 8D 14 31 4C 89 A4 24 D8 00 00 00 48 8B CE) // should be unique
alloc(newmem,$1000)
label(code)
label(return)
label(vf_xp_multi)
label(i_base_xp_addr2)
newmem:
mov [i_base_xp_addr2], rsi
movss xmm14, [vf_xp_multi]
cvtsi2ss xmm15, r14
mulss xmm15, xmm14
cvtss2si r14, xmm15
code:
lea edx,[rcx+r14]
mov [rsp+000000D8],r12
mov rcx,rsi
jmp far return
align 10 cc
vf_xp_multi:
dd (float)1.5
i_base_xp_addr2:
dq 0
INJECT_XP_MULTI:
jmp far newmem
nop
return:
registersymbol(INJECT_XP_MULTI)
registersymbol(vf_xp_multi)
registersymbol(i_base_xp_addr2)
[DISABLE]
INJECT_XP_MULTI:
db 42 8D 14 31 4C 89 A4 24 D8 00 00 00 48 8B CE
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2A318FB
HogwartsLegacy.exe+2A318D2: 4C 89 AC 24 D0 00 00 00 - mov [rsp+000000D0],r13
HogwartsLegacy.exe+2A318DA: 44 8B 6E 44 - mov r13d,[rsi+44]
HogwartsLegacy.exe+2A318DE: 44 89 6D 07 - mov [rbp+07],r13d
HogwartsLegacy.exe+2A318E2: 41 83 FD 28 - cmp r13d,28
HogwartsLegacy.exe+2A318E6: 0F 84 5F 06 00 00 - je HogwartsLegacy.exe+2A31F4B
HogwartsLegacy.exe+2A318EC: 8B 4E 38 - mov ecx,[rsi+38]
HogwartsLegacy.exe+2A318EF: 8B 46 3C - mov eax,[rsi+3C]
HogwartsLegacy.exe+2A318F2: 89 4D F7 - mov [rbp-09],ecx
HogwartsLegacy.exe+2A318F5: 89 45 FB - mov [rbp-05],eax
HogwartsLegacy.exe+2A318F8: 8B 46 40 - mov eax,[rsi+40]
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2A318FB: 42 8D 14 31 - lea edx,[rcx+r14]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2A318FF: 4C 89 A4 24 D8 00 00 00 - mov [rsp+000000D8],r12
HogwartsLegacy.exe+2A31907: 48 8B CE - mov rcx,rsi
HogwartsLegacy.exe+2A3190A: 4C 8D 66 3C - lea r12,[rsi+3C]
HogwartsLegacy.exe+2A3190E: 89 56 38 - mov [rsi+38],edx
HogwartsLegacy.exe+2A31911: 89 45 FF - mov [rbp-01],eax
HogwartsLegacy.exe+2A31914: E8 57 B2 00 00 - call HogwartsLegacy.exe+2A3CB70
HogwartsLegacy.exe+2A31919: 83 7F 08 01 - cmp dword ptr [rdi+08],01
HogwartsLegacy.exe+2A3191D: 8B D8 - mov ebx,eax
HogwartsLegacy.exe+2A3191F: 0F 8E 02 01 00 00 - jng HogwartsLegacy.exe+2A31A27
HogwartsLegacy.exe+2A31925: E8 86 F8 CA FF - call HogwartsLegacy.exe+26E11B0
}
22
"multiplier"
0
C08000
Float
vf_xp_multi
45
"XP (available after XP changed)"
0
FF8080
4 Bytes
i_base_xp_addr2
38
46
"Get XP"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-11
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_XP,HogwartsLegacy.exe,FF 41 33 04 10 52) // should be unique
alloc(newmem,$1000,INJECT_GET_XP)
label(code)
label(return)
label(i_base_xp_addr)
newmem:
push rax
lea rax, [r8+rdx]
mov [i_base_xp_addr], rax
pop rax
code:
xor eax,[r8+rdx]
push rdx
jmp return
align 10 cc
i_base_xp_addr:
dq 0
INJECT_GET_XP+01:
jmp newmem
return:
registersymbol(INJECT_GET_XP)
registersymbol(i_base_xp_addr)
[DISABLE]
INJECT_GET_XP+01:
db 41 33 04 10 52
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+193D5F22
HogwartsLegacy.exe+193D5EF4: 48 89 C8 - mov rax,rcx
HogwartsLegacy.exe+193D5EF7: 48 05 F5 89 D9 AA - add rax,FFFFFFFFAAD989F5
HogwartsLegacy.exe+193D5EFD: 66 44 89 91 EC 00 00 00 - mov [rcx+000000EC],r10w
HogwartsLegacy.exe+193D5F05: 66 44 89 98 57 77 26 55 - mov [rax+55267757],r11w
HogwartsLegacy.exe+193D5F0D: 66 89 B1 36 01 00 00 - mov [rcx+00000136],si
HogwartsLegacy.exe+193D5F14: 50 - push rax
HogwartsLegacy.exe+193D5F15: F7 D0 - not eax
HogwartsLegacy.exe+193D5F17: 33 04 24 - xor eax,[rsp]
HogwartsLegacy.exe+193D5F1A: 48 8D 64 24 08 - lea rsp,[rsp+08]
HogwartsLegacy.exe+193D5F1F: 83 F0 FF - xor eax,-01
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+193D5F22: 41 33 04 10 - xor eax,[r8+rdx]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+193D5F26: 52 - push rdx
HogwartsLegacy.exe+193D5F27: 48 F7 D2 - not rdx
HogwartsLegacy.exe+193D5F2A: 21 14 24 - and [rsp],edx
HogwartsLegacy.exe+193D5F2D: 5A - pop rdx
HogwartsLegacy.exe+193D5F2E: 31 C2 - xor edx,eax
HogwartsLegacy.exe+193D5F30: C1 FA 10 - sar edx,10
HogwartsLegacy.exe+193D5F33: 48 8D 64 24 F8 - lea rsp,[rsp-08]
HogwartsLegacy.exe+193D5F38: 55 - push rbp
HogwartsLegacy.exe+193D5F39: 81 E2 FF FF 00 00 - and edx,0000FFFF
HogwartsLegacy.exe+193D5F3F: 48 8D 6C 24 08 - lea rbp,[rsp+08]
}
5
"Usage: open main menu"
FF00FF
1
47
"Current XP"
0
FF8080
4 Bytes
i_base_xp_addr
-8
6
"Prev level XP?"
0
FF8080
4 Bytes
i_base_xp_addr
-4
7
"Next level XP?"
0
FF8080
4 Bytes
i_base_xp_addr
0
48
"Lv"
0
FF8080
4 Bytes
i_base_xp_addr
4
9
"??"
0
FF8080
4 Bytes
i_base_xp_addr
8
25
"Get player HP"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-10
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_HP,HogwartsLegacy.exe,F3 0F 10 81 A4 01 00 00 C3 0F) // should be unique
alloc(newmem,$1000,INJECT_GET_HP)
label(code)
label(return)
label(i_base_hp_addr)
label(vf_min_hp)
label(is_keep_hp_high)
label(i_criteria_1)
label(i_criteria_2)
label(i_criteria_3)
label(i_criteria_4)
label(i_criteria_5)
label(i_criteria_6)
newmem:
cmp byte ptr [i_criteria_1], 1
jne chk_2
chk_1:
cmp dword ptr [rcx+188], 0
jne code
chk_2:
cmp byte ptr [i_criteria_2], 1
jne chk_3
cmp dword ptr [rcx+1B8], 0
jne code
chk_3:
cmp byte ptr [i_criteria_3], 1
jne chk_4
cmp dword ptr [rcx+15C], 0
jne code
chk_4:
cmp byte ptr [i_criteria_4], 1
jne chk_5
cmp dword ptr [rcx+160], 0
jne code
chk_5:
cmp byte ptr [i_criteria_5], 1
jne chk_6
cmp dword ptr [rcx+158], 0
jne code
chk_6:
cmp byte ptr [i_criteria_6], 1
jne code
cmp dword ptr [rcx+164], 0
jne code
mov [i_base_hp_addr], rcx
cmp dword ptr [is_keep_hp_high], 1
jne code
movss xmm15, dword ptr [rcx+1A4]
movss xmm14, [vf_last_hp_high]
ucomiss xmm14, xmm15
jb set_hp_high
ja set_hp_to_watermark
jmp code
set_hp_high:
movss [vf_last_hp_high], xmm15
jmp code
set_hp_to_watermark:
movss dword ptr [rcx+1A4], xmm14
code:
movss xmm0,[rcx+000001A4]
jmp return
align 10 cc
i_base_hp_addr:
dq 0
vf_min_hp:
dd (float)250
is_keep_hp_high:
dd 1
vf_last_hp_high:
dd 0
db EB 3B
db 54 68 69 73 20 74 61 62 6C 65 20 63 6F 6D
db 65 73 20 66 72 6F 6D 20
db 68 74 74 70 73 3A 2F
db 2F 6F 70 65 6E 63 68 65 61 74
db 74 61 62 6C 65 73 2E 63 6F 6D 20 2F 20 43 45 20 37 2E 34 2B
i_criteria_1:
db 1
i_criteria_2:
db 1
i_criteria_3:
db 1
i_criteria_4:
db 1
i_criteria_5:
db 1
i_criteria_6:
db 1
INJECT_GET_HP:
jmp newmem
nop 3
return:
registersymbol(INJECT_GET_HP)
registersymbol(i_base_hp_addr)
registersymbol(vf_min_hp)
registersymbol(is_keep_hp_high)
registersymbol(i_criteria_1)
registersymbol(i_criteria_2)
registersymbol(i_criteria_3)
registersymbol(i_criteria_4)
registersymbol(i_criteria_5)
registersymbol(i_criteria_6)
[DISABLE]
INJECT_GET_HP:
db F3 0F 10 81 A4 01 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2CDA3C9
HogwartsLegacy.exe+2CDA37A - CC - int 3
HogwartsLegacy.exe+2CDA37B - CC - int 3
HogwartsLegacy.exe+2CDA37C - CC - int 3
HogwartsLegacy.exe+2CDA37D - CC - int 3
HogwartsLegacy.exe+2CDA37E - CC - int 3
HogwartsLegacy.exe+2CDA37F - CC - int 3
HogwartsLegacy.exe+2CDA380 - 48 83 EC 28 - sub rsp,28
HogwartsLegacy.exe+2CDA384 - 48 8B 89 50010000 - mov rcx,[rcx+00000150]
HogwartsLegacy.exe+2CDA38B - 48 85 C9 - test rcx,rcx
HogwartsLegacy.exe+2CDA38E - 74 16 - je HogwartsLegacy.exe+2CDA3A6
HogwartsLegacy.exe+2CDA390 - 48 8B 01 - mov rax,[rcx]
HogwartsLegacy.exe+2CDA393 - FF 90 70020000 - call qword ptr [rax+00000270]
HogwartsLegacy.exe+2CDA399 - F3 0F10 80 C0000000 - movss xmm0,[rax+000000C0]
HogwartsLegacy.exe+2CDA3A1 - 48 83 C4 28 - add rsp,28
HogwartsLegacy.exe+2CDA3A5 - C3 - ret
HogwartsLegacy.exe+2CDA3A6 - 33 C0 - xor eax,eax
HogwartsLegacy.exe+2CDA3A8 - F3 0F10 80 C0000000 - movss xmm0,[rax+000000C0]
HogwartsLegacy.exe+2CDA3B0 - 48 83 C4 28 - add rsp,28
HogwartsLegacy.exe+2CDA3B4 - C3 - ret
HogwartsLegacy.exe+2CDA3B5 - CC - int 3
HogwartsLegacy.exe+2CDA3B6 - CC - int 3
HogwartsLegacy.exe+2CDA3B7 - CC - int 3
HogwartsLegacy.exe+2CDA3B8: CC - int 3
HogwartsLegacy.exe+2CDA3B9: CC - int 3
HogwartsLegacy.exe+2CDA3BA: CC - int 3
HogwartsLegacy.exe+2CDA3BB: CC - int 3
HogwartsLegacy.exe+2CDA3BC: CC - int 3
HogwartsLegacy.exe+2CDA3BD: CC - int 3
HogwartsLegacy.exe+2CDA3BE: CC - int 3
HogwartsLegacy.exe+2CDA3BF: CC - int 3
HogwartsLegacy.exe+2CDA3C0: 80 B9 BF 01 00 00 00 - cmp byte ptr [rcx+000001BF],00
HogwartsLegacy.exe+2CDA3C7: 7C 09 - jl HogwartsLegacy.exe+2CDA3D2
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2CDA3C9: F3 0F 10 81 A4 01 00 00 - movss xmm0,[rcx+000001A4]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2CDA3D1: C3 - ret
HogwartsLegacy.exe+2CDA3D2: 0F 57 C0 - xorps xmm0,xmm0
HogwartsLegacy.exe+2CDA3D5: C3 - ret
HogwartsLegacy.exe+2CDA3D6: CC - int 3
HogwartsLegacy.exe+2CDA3D7: CC - int 3
HogwartsLegacy.exe+2CDA3D8: CC - int 3
HogwartsLegacy.exe+2CDA3D9: CC - int 3
HogwartsLegacy.exe+2CDA3DA: CC - int 3
HogwartsLegacy.exe+2CDA3DB: CC - int 3
HogwartsLegacy.exe+2CDA3DC: CC - int 3
HogwartsLegacy.exe+2CDA3DD - CC - int 3
HogwartsLegacy.exe+2CDA3DE - CC - int 3
HogwartsLegacy.exe+2CDA3DF - CC - int 3
HogwartsLegacy.exe+2CDA3E0 - 48 83 EC 28 - sub rsp,28
HogwartsLegacy.exe+2CDA3E4 - 48 8B 89 50010000 - mov rcx,[rcx+00000150]
HogwartsLegacy.exe+2CDA3EB - 48 85 C9 - test rcx,rcx
HogwartsLegacy.exe+2CDA3EE - 74 15 - je HogwartsLegacy.exe+2CDA405
HogwartsLegacy.exe+2CDA3F0 - 48 8B 01 - mov rax,[rcx]
HogwartsLegacy.exe+2CDA3F3 - FF 90 70020000 - call qword ptr [rax+00000270]
HogwartsLegacy.exe+2CDA3F9 - 0FB6 80 28010000 - movzx eax,byte ptr [rax+00000128]
HogwartsLegacy.exe+2CDA400 - 48 83 C4 28 - add rsp,28
HogwartsLegacy.exe+2CDA404 - C3 - ret
HogwartsLegacy.exe+2CDA405 - 33 C0 - xor eax,eax
HogwartsLegacy.exe+2CDA407 - 0FB6 80 28010000 - movzx eax,byte ptr [rax+00000128]
HogwartsLegacy.exe+2CDA40E - 48 83 C4 28 - add rsp,28
HogwartsLegacy.exe+2CDA412 - C3 - ret
HogwartsLegacy.exe+2CDA413 - CC - int 3
HogwartsLegacy.exe+2CDA414 - CC - int 3
HogwartsLegacy.exe+2CDA415 - CC - int 3
HogwartsLegacy.exe+2CDA416 - CC - int 3
HogwartsLegacy.exe+2CDA417 - CC - int 3
HogwartsLegacy.exe+2CDA418 - CC - int 3
HogwartsLegacy.exe+2CDA419 - CC - int 3
HogwartsLegacy.exe+2CDA41A - CC - int 3
HogwartsLegacy.exe+2CDA41B - CC - int 3
HogwartsLegacy.exe+2CDA41C - CC - int 3
HogwartsLegacy.exe+2CDA41D - CC - int 3
HogwartsLegacy.exe+2CDA41E - CC - int 3
HogwartsLegacy.exe+2CDA41F - CC - int 3
HogwartsLegacy.exe+2CDA420 - 40 53 - push rbx
HogwartsLegacy.exe+2CDA422 - 48 83 EC 20 - sub rsp,20
}
31
"Only tested under early game progress"
FF00FF
1
33
"Player HP check criteria flags"
C08000
1
32
"Criteria 1"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_1:
db 1
[DISABLE]
i_criteria_1:
db 0
34
"Criteria 2"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_2:
db 1
[DISABLE]
i_criteria_2:
db 0
35
"Criteria 3"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_3:
db 1
[DISABLE]
i_criteria_3:
db 0
36
"Criteria 4"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_4:
db 1
[DISABLE]
i_criteria_4:
db 0
37
"Criteria 5"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_5:
db 1
[DISABLE]
i_criteria_5:
db 0
38
"Criteria 6"
C08000
Auto Assembler Script
[ENABLE]
i_criteria_6:
db 1
[DISABLE]
i_criteria_6:
db 0
26
"??"
0
FF8080
Float
i_base_hp_addr
1A0
29
"Current HP"
0
FF8080
Float
i_base_hp_addr
1A4
28
"(dead flag?)"
0
FF8080
Byte
i_base_hp_addr
1BF
27
"Keep HP high?"
0:No
1:Yes
0
C08000
4 Bytes
is_keep_hp_high
49
"Quick ancient magic"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-11
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_QUICK_ANC_SPELL_CHARGE,HogwartsLegacy.exe,F3 0F 11 BB 00 3C 00 00) // should be unique
alloc(newmem,$1000,INJECT_QUICK_ANC_SPELL_CHARGE)
label(code)
label(return)
label(vf_min_anc_magic)
label(i_base_anc_magic_addr)
newmem:
mov [i_base_anc_magic_addr], rbx
movss xmm14, [vf_min_anc_magic]
comiss xmm7, xmm14
jae code
movaps xmm7, xmm14
//movss xmm7, [vf_min_anc_magic]
code:
movss [rbx+00003C00],xmm7
jmp return
align 10 cc
i_base_anc_magic_addr:
dq 0
vf_min_anc_magic:
dd (float)200
INJECT_QUICK_ANC_SPELL_CHARGE:
jmp newmem
nop 3
return:
registersymbol(INJECT_QUICK_ANC_SPELL_CHARGE)
registersymbol(vf_min_anc_magic)
registersymbol(i_base_anc_magic_addr)
[DISABLE]
INJECT_QUICK_ANC_SPELL_CHARGE:
db F3 0F 11 BB 00 3C 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+27A1793
HogwartsLegacy.exe+27A1764: F3 44 0F 10 8B 00 3C 00 00 - movss xmm9,[rbx+00003C00]
HogwartsLegacy.exe+27A176D: F3 41 0F 59 C8 - mulss xmm1,xmm8
HogwartsLegacy.exe+27A1772: F3 41 0F 59 CA - mulss xmm1,xmm10
HogwartsLegacy.exe+27A1777: F3 41 0F 58 C9 - addss xmm1,xmm9
HogwartsLegacy.exe+27A177C: 0F 2F CF - comiss xmm1,xmm7
HogwartsLegacy.exe+27A177F: 72 0F - jb HogwartsLegacy.exe+27A1790
HogwartsLegacy.exe+27A1781: F3 0F 10 83 10 1C 00 00 - movss xmm0,[rbx+00001C10]
HogwartsLegacy.exe+27A1789: F3 0F 5D C1 - minss xmm0,xmm1
HogwartsLegacy.exe+27A178D: 0F 28 F8 - movaps xmm7,xmm0
HogwartsLegacy.exe+27A1790: 0F 28 CE - movaps xmm1,xmm6
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+27A1793: F3 0F 11 BB 00 3C 00 00 - movss [rbx+00003C00],xmm7
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+27A179B: F3 0F 5E 8B 18 1C 00 00 - divss xmm1,[rbx+00001C18]
HogwartsLegacy.exe+27A17A3: 0F 28 C1 - movaps xmm0,xmm1
HogwartsLegacy.exe+27A17A6: F3 41 0F 59 C9 - mulss xmm1,xmm9
HogwartsLegacy.exe+27A17AB: F3 0F 59 C7 - mulss xmm0,xmm7
HogwartsLegacy.exe+27A17AF: 0F 28 BC 24 30 01 00 00 - movaps xmm7,[rsp+00000130]
HogwartsLegacy.exe+27A17B7: F3 0F 2C C1 - cvttss2si eax,xmm1
HogwartsLegacy.exe+27A17BB: F3 0F 2C C8 - cvttss2si ecx,xmm0
HogwartsLegacy.exe+27A17BF: 3B C8 - cmp ecx,eax
HogwartsLegacy.exe+27A17C1: 74 2E - je HogwartsLegacy.exe+27A17F1
HogwartsLegacy.exe+27A17C3: E8 E8 F9 F3 FF - call HogwartsLegacy.exe+26E11B0
}
50
"min. value"
0
C08000
Float
vf_min_anc_magic
52
"data"
1
51
"Charge"
0
FF8080
Float
i_base_anc_magic_addr
3C00
54
"??"
0
FF8080
Float
i_base_anc_magic_addr
3BF4
55
"??"
0
FF8080
Float
i_base_anc_magic_addr
3BF8
56
"??"
0
FF8080
Float
i_base_anc_magic_addr
3BFC
57
"??"
0
FF8080
Float
i_base_anc_magic_addr
3C04
58
"??"
0
FF8080
Float
i_base_anc_magic_addr
3C08
59
"??"
0
FF8080
Float
i_base_anc_magic_addr
3C0C
60
"??"
0
FF8080
Float
i_base_anc_magic_addr
3C10
41
"Set min potion / ingredients #"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-10
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_MATERIALS,HogwartsLegacy.exe,48 0F BE 01 49 89 00) // should be unique
alloc(newmem,$1000,INJECT_GET_MATERIALS)
label(code)
label(return)
label(i_min_ingredients)
newmem:
push rax
mov al, [rcx]
mov ah, [rcx+1]
cmp ah, 8
jne endp
cmp al, [i_min_ingredients]
jae endp
mov al, [i_min_ingredients]
mov byte ptr [rcx], al
//movsx rax,byte ptr [rcx]
endp:
pop rax
code:
movsx rax,byte ptr [rcx]
mov [r8],rax
jmp return
align 10 cc
i_min_ingredients:
db 14
INJECT_GET_MATERIALS:
jmp newmem
nop 2
return:
registersymbol(INJECT_GET_MATERIALS)
registersymbol(i_min_ingredients)
[DISABLE]
INJECT_GET_MATERIALS:
db 48 0F BE 01 49 89 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+F2B706
HogwartsLegacy.exe+F2B6E5: 41 89 40 0C - mov [r8+0C],eax
HogwartsLegacy.exe+F2B6E9: 41 89 00 - mov [r8],eax
HogwartsLegacy.exe+F2B6EC: B8 01 40 00 00 - mov eax,00004001
HogwartsLegacy.exe+F2B6F1: 66 41 89 40 08 - mov [r8+08],ax
HogwartsLegacy.exe+F2B6F6: 33 C0 - xor eax,eax
HogwartsLegacy.exe+F2B6F8: C3 - ret
HogwartsLegacy.exe+F2B6F9: B8 01 00 00 00 - mov eax,00000001
HogwartsLegacy.exe+F2B6FE: 66 41 89 40 08 - mov [r8+08],ax
HogwartsLegacy.exe+F2B703: 33 C0 - xor eax,eax
HogwartsLegacy.exe+F2B705: C3 - ret
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+F2B706: 48 0F BE 01 - movsx rax,byte ptr [rcx]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+F2B70A: 49 89 00 - mov [r8],rax
HogwartsLegacy.exe+F2B70D: B8 04 00 00 00 - mov eax,00000004
HogwartsLegacy.exe+F2B712: 66 41 89 40 08 - mov [r8+08],ax
HogwartsLegacy.exe+F2B717: B8 01 00 00 00 - mov eax,00000001
HogwartsLegacy.exe+F2B71C: C3 - ret
HogwartsLegacy.exe+F2B71D: 0F BE 01 - movsx eax,byte ptr [rcx]
HogwartsLegacy.exe+F2B720: C1 E0 08 - shl eax,08
HogwartsLegacy.exe+F2B723: 48 63 C8 - movsxd rcx,eax
HogwartsLegacy.exe+F2B726: 41 0F B6 42 01 - movzx eax,byte ptr [r10+01]
HogwartsLegacy.exe+F2B72B: 48 0B C8 - or rcx,rax
}
43
"WARNING: not fully tested; disable immediately after use"
FF00FF
1
44
"item # must >=2"
FF00FF
1
42
"min. value (don't set too high)"
0
C08000
Byte
i_min_ingredients
0
"Compact UI Cheat engine"
808080
Auto Assembler Script
[ENABLE]
luacall(function cycleFullCompact(sender,force); local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full view Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu(); if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
luacall(cycleFullCompact(nil,false))
Change of ucomiss xmm6,[rsi+00000574]
HogwartsLegacy.exe+266B865
28
F0
41
8B
FC
0F
2E
B6
74
05
00
00
41
BF
01
00
00
Change of ucomiss xmm2,[rsi+00000574]
HogwartsLegacy.exe+266CB53
F3
0F
10
55
EC
0F
2E
96
74
05
00
00
0F
85
A0
02
00
Made by NightfaII#2516