1
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "Horizon Forbidden West"
local gameProcess = "HorizonForbiddenWest.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2024 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF. All other sources are allowed with permission.")
else
end
[DISABLE]
17
"[POINTERS]"
Auto Assembler Script
[ENABLE]
define(player,HorizonForbiddenWest.exe+8982DA0)
define(PlayerManagerGame,HorizonForbiddenWest.exe+8982C80)
define(GameModule,HorizonForbiddenWest.exe+8983150)
define(Debug,HorizonForbiddenWest.exe+89581E0)
define(DifficultyManager,HorizonForbiddenWest.exe+8957280)
define(Unknown,HorizonForbiddenWest.exe+8983128)
define(FactDatabase,HorizonForbiddenWest.exe+8983128)
define(GameLibSystemAssets,HorizonForbiddenWest.exe+8983128)
registersymbol(player)
registersymbol(PlayerManagerGame)
registersymbol(GameModule)
registersymbol(Debug)
registersymbol(DifficultyManager)
registersymbol(Unknown)
registersymbol(FactDatabase)
registersymbol(GameLibSystemAssets)
[DISABLE]
unregistersymbol(player)
unregistersymbol(PlayerManagerGame)
unregistersymbol(GameModule)
unregistersymbol(Debug)
unregistersymbol(DifficultyManager)
unregistersymbol(Unknown)
unregistersymbol(FactDatabase)
unregistersymbol(GameLibSystemAssets)
256909
"Data"
1
257243
"Pouches"
1
257139
"Acid Arrows"
1
257140
"Level 1"
0
4 Bytes
Unknown
0
C0
588
30
70
2C8
257141
"Level 2"
0
4 Bytes
Unknown
4
C0
588
30
70
2C8
257142
"Level 3"
0
4 Bytes
Unknown
8
C0
588
30
70
2C8
257143
"Level 4"
0
4 Bytes
Unknown
C
C0
588
30
70
2C8
257144
"Level 5"
0
4 Bytes
Unknown
10
C0
588
30
70
2C8
256926
"Advanced Hunting Arrows"
1
256934
"Level 1"
0
4 Bytes
Unknown
0
C0
590
30
70
2C8
256938
"Level 2"
0
4 Bytes
Unknown
4
C0
590
30
70
2C8
256937
"Level 3"
0
4 Bytes
Unknown
8
C0
590
30
70
2C8
256936
"Level 4"
0
4 Bytes
Unknown
C
C0
590
30
70
2C8
256935
"Level 5"
0
4 Bytes
Unknown
10
C0
590
30
70
2C8
257133
"Fire Arrows"
1
257134
"Level 1"
0
4 Bytes
Unknown
0
C0
598
30
70
2C8
257135
"Level 2"
0
4 Bytes
Unknown
4
C0
598
30
70
2C8
257136
"Level 3"
0
4 Bytes
Unknown
8
C0
598
30
70
2C8
257137
"Level 4"
0
4 Bytes
Unknown
C
C0
598
30
70
2C8
257138
"Level 5"
0
4 Bytes
Unknown
10
C0
598
30
70
2C8
257259
"Frost Arrows"
1
257260
"Level 1"
0
4 Bytes
Unknown
0
C0
5A8
30
70
2C8
257261
"Level 2"
0
4 Bytes
Unknown
4
C0
5A8
30
70
2C8
257262
"Level 3"
0
4 Bytes
Unknown
8
C0
5A8
30
70
2C8
257263
"Level 4"
0
4 Bytes
Unknown
C
C0
5A8
30
70
2C8
257264
"Level 5"
0
4 Bytes
Unknown
10
C0
5A8
30
70
2C8
257120
"Advanced Shock Arrows"
1
257121
"Level 1"
0
4 Bytes
Unknown
0
C0
5F0
30
70
2C8
257122
"Level 2"
0
4 Bytes
Unknown
4
C0
5F0
30
70
2C8
257123
"Level 3"
0
4 Bytes
Unknown
8
C0
5F0
30
70
2C8
257124
"Level 4"
0
4 Bytes
Unknown
C
C0
5F0
30
70
2C8
257125
"Level 5"
0
4 Bytes
Unknown
10
C0
5F0
30
70
2C8
257300
"Advanced Frost Arrows"
1
257301
"Level 1"
0
4 Bytes
Unknown
0
C0
5E8
30
70
2C8
257302
"Level 2"
0
4 Bytes
Unknown
4
C0
5E8
30
70
2C8
257303
"Level 3"
0
4 Bytes
Unknown
8
C0
5E8
30
70
2C8
257304
"Level 4"
0
4 Bytes
Unknown
C
C0
5E8
30
70
2C8
257305
"Level 5"
0
4 Bytes
Unknown
10
C0
5E8
30
70
2C8
257127
"Advanced Fire Arrows"
1
257128
"Level 1"
0
4 Bytes
Unknown
0
C0
5F8
30
70
2C8
257129
"Level 2"
0
4 Bytes
Unknown
4
C0
5F8
30
70
2C8
257130
"Level 3"
0
4 Bytes
Unknown
8
C0
5F8
30
70
2C8
257131
"Level 4"
0
4 Bytes
Unknown
C
C0
5F8
30
70
2C8
257132
"Level 5"
0
4 Bytes
Unknown
10
C0
5F8
30
70
2C8
257294
"Advanced Acid Arrows"
1
257295
"Level 1"
0
4 Bytes
Unknown
0
C0
608
30
70
2C8
257296
"Level 2"
0
4 Bytes
Unknown
4
C0
608
30
70
2C8
257297
"Level 3"
0
4 Bytes
Unknown
8
C0
608
30
70
2C8
257298
"Level 4"
0
4 Bytes
Unknown
C
C0
608
30
70
2C8
257299
"Level 5"
0
4 Bytes
Unknown
10
C0
608
30
70
2C8
256925
"Medicine Pouch"
1
257268
"Level 1"
0
4 Bytes
Unknown
10
C0
730
30
70
2C8
257267
"Level 2"
0
4 Bytes
Unknown
14
C0
730
30
70
2C8
257266
"Level 3"
0
4 Bytes
Unknown
18
C0
730
30
70
2C8
257265
"Level 4"
0
4 Bytes
Unknown
1C
C0
730
30
70
2C8
257244
"Ammo Damage"
1
257249
"Hunter Arrow"
0
Float
GameLibSystemAssets
50
20
0
30
0
40
0
30
108
128
50
D0
98
257250
"Fire Arrow"
0
Float
GameLibSystemAssets
50
20
0
30
0
40
8
30
108
128
50
D0
98
257251
"Acid Arrow"
0
Float
GameLibSystemAssets
50
20
0
30
0
40
50
30
108
128
50
D0
98
257255
"Ammo Secondary"
1
257256
"Hunter Arrow"
0
Float
GameLibSystemAssets
60
20
8
30
0
40
0
30
108
128
50
D0
98
257257
"Fire Arrow"
0
Float
GameLibSystemAssets
60
20
0
30
0
40
8
30
108
128
50
D0
98
257258
"Acid Arrow"
0
Float
GameLibSystemAssets
60
20
0
30
0
40
50
30
108
128
50
D0
98
91
"Debug"
1
97
"??"
0
Byte
Debug
10
100
"??"
0
Byte
Debug
24
99
"Unlimited Ammo"
0
Byte
Debug
28
93
"Infinite Stamina / Oxygen"
0
Byte
Debug
29
98
"??"
0
Byte
Debug
2B
94
"Rapid Fire / Infinite Ammo"
0
Byte
Debug
30
256952
"FactDatabase"
1
256951
"Burrower Kills"
0
4 Bytes
FactDatabase
908
20
34E90
18
256953
"Burrower Kills (Notebook)"
0
4 Bytes
FactDatabase
9B0
20
34E90
18
256870
"DifficultyManager"
1
256871
"DifficultyPresetResource"
1
0
8 Bytes
DifficultyManager
10
257308
"Ultra Hard Pointer"
Float
"HorizonForbiddenWest.exe"+08950AE8
418
230
470
257190
"Very Hard Ratio"
0
Float
DifficultyManager
30
28
30
30
90
8
257195
"Hard Ratio"
0
Float
DifficultyManager
34
28
30
30
90
8
257191
"AI Difficulty"
0
Float
DifficultyManager
40
10
256872
"??"
0
4 Bytes
DifficultyManager
44
10
77
"GameModule"
1
256978
"Time of Day"
0
Float
GameModule
20
58
256868
"Enable Day/Night"
0
Float
GameModule
24
58
256867
"Time Played"
0
4 Bytes
GameModule
7C
256866
"New Game Plus"
0
4 Bytes
GameModule
670
256913
"??"
0
Float
GameModule
40
D0
68
50
78
"Challenge State (3 Then 2)"
0
Byte
GameModule
80
18
190
51
"PlayerManagerGame"
1
256898
"Health (Base)"
0
Float
PlayerManagerGame
24
30
D0
48
48
256918
"Health (Base)"
0
Float
PlayerManagerGame
24
30
D0
48
48
256900
"Health"
0
Float
PlayerManagerGame
74
D0
48
48
256901
"Health (Bonus)"
0
Float
PlayerManagerGame
84
D0
48
48
50
"Health (Excess)"
0
Float
PlayerManagerGame
50
380
A8
48
48
256899
"Max"
0
Float
PlayerManagerGame
54
380
A8
48
48
256845
"Focus"
0
Float
PlayerManagerGame
5C
1D0
A8
48
48
256917
"Stamina"
0
Float
PlayerManagerGame
50
2A8
A8
48
48
120
"Valor Surge"
0
Float
PlayerManagerGame
80
120
A8
48
48
256933
"Skill Points"
0
4 Bytes
PlayerManagerGame
70
250
A8
48
48
23
"Base Health"
0
Float
player
24
30
D0
10
0
1C10
75
"Health"
0
Float
player
74
D0
10
0
1C10
13
"Health (Bonus)"
0
Float
player
84
D0
10
0
1C10
121
"??"
0
4 Bytes
player
D8
D0
10
0
1C10
72
"Focus"
0
Float
player
5C
1C8
A8
10
0
1C10
73
"Max"
0
Float
player
58
1C8
A8
10
0
1C10
69
"Oxygen"
0
Float
player
50
280
A8
10
0
1C10
70
"Max"
0
Float
player
54
280
A8
10
0
1C10
257326
"Oxygen"
0
Float
player
50
280
A8
10
0
1C10
257327
"Max"
0
Float
player
54
280
A8
10
0
1C10
67
"Stamina"
0
Float
player
50
2A8
A8
10
0
1C10
68
"Max"
0
Float
player
54
2A8
A8
10
0
1C10
47
"Player Progression"
1
42
"Experience"
0
4 Bytes
player
50
250
A8
10
0
1C10
43
"Level"
0
4 Bytes
player
68
250
A8
10
0
1C10
44
"Max Level"
0
4 Bytes
player
6C
250
A8
10
0
1C10
45
"Skill Points"
0
4 Bytes
player
70
250
A8
10
0
1C10
46
"??"
0
4 Bytes
player
74
250
A8
10
0
1C10
65
"Position"
1
64
"Base"
0
Double
player
0
60
98
C0
10
0
1C10
102
"X"
0
Double
player
100
60
98
C0
10
0
1C10
104
"Y"
0
Double
player
108
60
98
C0
10
0
1C10
103
"Z"
0
Double
player
110
60
98
C0
10
0
1C10
32
"[SCRIPTS]"
1
256849
"Get Machine"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-30
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getMachine,HorizonForbiddenWest.exe,C4 41 78 28 CA 48 8B 88) // should be unique
alloc(newmem,$1000,getMachine)
label(code)
label(return)
label(gMachine)
registersymbol(gMachine)
newmem:
code:
vmovaps xmm9,xmm10
mov [gMachine],rax
jmp return
gMachine:
dq 0
getMachine:
jmp newmem
return:
registersymbol(getMachine)
[DISABLE]
getMachine:
db C4 41 78 28 CA
unregistersymbol(getMachine)
dealloc(newmem)
unregistersymbol(gMachine)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+1096F9B
HorizonForbiddenWest.exe+1096F65: E8 26 43 00 00 - call HorizonForbiddenWest.exe+109B290
HorizonForbiddenWest.exe+1096F6A: 48 63 4F 68 - movsxd rcx,dword ptr [rdi+68]
HorizonForbiddenWest.exe+1096F6E: 49 8B 85 30 01 00 00 - mov rax,[r13+00000130]
HorizonForbiddenWest.exe+1096F75: 4C 8B 34 C8 - mov r14,[rax+rcx*8]
HorizonForbiddenWest.exe+1096F79: 4C 89 74 24 48 - mov [rsp+48],r14
HorizonForbiddenWest.exe+1096F7E: 4D 85 F6 - test r14,r14
HorizonForbiddenWest.exe+1096F81: 0F 84 7D 07 00 00 - je HorizonForbiddenWest.exe+1097704
HorizonForbiddenWest.exe+1096F87: 49 8B 45 48 - mov rax,[r13+48]
HorizonForbiddenWest.exe+1096F8B: C5 7A 10 15 51 8D 91 00 - vmovss xmm10,[HorizonForbiddenWest.exe+19AFCE4]
HorizonForbiddenWest.exe+1096F93: C5 7A 10 25 91 93 91 00 - vmovss xmm12,[HorizonForbiddenWest.exe+19B032C]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+1096F9B: C4 41 78 28 CA - vmovaps xmm9,xmm10
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+1096FA0: 48 8B 88 D0 00 00 00 - mov rcx,[rax+000000D0]
HorizonForbiddenWest.exe+1096FA7: 48 85 C9 - test rcx,rcx
HorizonForbiddenWest.exe+1096FAA: 74 28 - je HorizonForbiddenWest.exe+1096FD4
HorizonForbiddenWest.exe+1096FAC: 48 8B 41 30 - mov rax,[rcx+30]
HorizonForbiddenWest.exe+1096FB0: C5 FA 10 40 24 - vmovss xmm0,[rax+24]
HorizonForbiddenWest.exe+1096FB5: C5 FA 58 89 84 00 00 00 - vaddss xmm1,xmm0,[rcx+00000084]
HorizonForbiddenWest.exe+1096FBD: C4 C1 78 2E CB - vucomiss xmm1,xmm11
HorizonForbiddenWest.exe+1096FC2: 7A 09 - jp HorizonForbiddenWest.exe+1096FCD
HorizonForbiddenWest.exe+1096FC4: 75 07 - jne HorizonForbiddenWest.exe+1096FCD
HorizonForbiddenWest.exe+1096FC6: C4 C1 78 28 F2 - vmovaps xmm6,xmm10
}
256850
"Health"
0
Float
gMachine
74
D0
256877
"Component"
1
256878
"Component 1?"
0
Float
gMachine
868
E0
D0
31
"Get Machine"
Auto Assembler Script
[ENABLE]
aobscanmodule(getMachine,HorizonForbiddenWest.exe,C5 F8 2F 7F 74) // should be unique
alloc(newmem,$64,getMachine)
label(code)
label(return)
label(gMachine)
registersymbol(gMachine)
newmem:
code:
mov [gMachine],rdi
vcomiss xmm7,[rdi+74]
jmp return
gMachine:
dq 0
getMachine:
jmp newmem
return:
registersymbol(getMachine)
[DISABLE]
getMachine:
db C5 F8 2F 7F 74
unregistersymbol(getMachine)
dealloc(newmem)
unregistersymbol(gMachine)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+92D630
HorizonForbiddenWest.exe+92D601: C5 BA 5C C1 - vsubss xmm0,xmm8,xmm1
HorizonForbiddenWest.exe+92D605: C5 FA 58 95 E8 00 00 00 - vaddss xmm2,xmm0,[rbp+000000E8]
HorizonForbiddenWest.exe+92D60D: C5 FA 11 95 E8 00 00 00 - vmovss [rbp+000000E8],xmm2
HorizonForbiddenWest.exe+92D615: 49 8B 45 78 - mov rax,[r13+78]
HorizonForbiddenWest.exe+92D619: 48 85 C0 - test rax,rax
HorizonForbiddenWest.exe+92D61C: 74 0A - je HorizonForbiddenWest.exe+92D628
HorizonForbiddenWest.exe+92D61E: 44 38 60 31 - cmp [rax+31],r12b
HorizonForbiddenWest.exe+92D622: 0F 84 8E 01 00 00 - je HorizonForbiddenWest.exe+92D7B6
HorizonForbiddenWest.exe+92D628: 48 8B CF - mov rcx,rdi
HorizonForbiddenWest.exe+92D62B: E8 10 F6 FF FF - call HorizonForbiddenWest.exe+92CC40
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+92D630: C5 F8 2F 7F 74 - vcomiss xmm7,[rdi+74]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+92D635: 72 0A - jb HorizonForbiddenWest.exe+92D641
HorizonForbiddenWest.exe+92D637: 8B 45 28 - mov eax,[rbp+28]
HorizonForbiddenWest.exe+92D63A: C1 E8 03 - shr eax,03
HorizonForbiddenWest.exe+92D63D: A8 01 - test al,01
HorizonForbiddenWest.exe+92D63F: 74 09 - je HorizonForbiddenWest.exe+92D64A
HorizonForbiddenWest.exe+92D641: 45 84 FF - test r15b,r15b
HorizonForbiddenWest.exe+92D644: 75 04 - jne HorizonForbiddenWest.exe+92D64A
HorizonForbiddenWest.exe+92D646: 32 C0 - xor al,al
HorizonForbiddenWest.exe+92D648: EB 02 - jmp HorizonForbiddenWest.exe+92D64C
HorizonForbiddenWest.exe+92D64A: B0 01 - mov al,01
}
33
"Health"
0
Float
gMachine
74
108
"Component"
1
107
"Component 1?"
0
Float
gMachine
868
E0
109
"Component 1?"
0
Float
gMachine
8C0
E0
110
"Component 1?"
0
Float
gMachine
D38
E0
113
"Component 1?"
0
Float
gMachine
1368
E0
54
"Get Player"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-22
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getPlayer,HorizonForbiddenWest.exe,48 8B 91 D0 00 00 00 48 85 D2 74 12) // should be unique
alloc(newmem,$64,getPlayer)
label(code)
label(return)
label(gPlayer)
registersymbol(gPlayer)
newmem:
code:
mov [gPlayer],rcx
mov rdx,[rcx+000000D0]
jmp return
gPlayer:
dq 0
getPlayer:
jmp newmem
nop 2
return:
registersymbol(getPlayer)
[DISABLE]
getPlayer:
db 48 8B 91 D0 00 00 00
unregistersymbol(getPlayer)
dealloc(newmem)
unregistersymbol(gPlayer)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+946820
HorizonForbiddenWest.exe+946816: C3 - ret
HorizonForbiddenWest.exe+946817: CC - int 3
HorizonForbiddenWest.exe+946818: CC - int 3
HorizonForbiddenWest.exe+946819: CC - int 3
HorizonForbiddenWest.exe+94681A: CC - int 3
HorizonForbiddenWest.exe+94681B: CC - int 3
HorizonForbiddenWest.exe+94681C: CC - int 3
HorizonForbiddenWest.exe+94681D: CC - int 3
HorizonForbiddenWest.exe+94681E: CC - int 3
HorizonForbiddenWest.exe+94681F: CC - int 3
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+946820: 48 8B 91 D0 00 00 00 - mov rdx,[rcx+000000D0]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+946827: 48 85 D2 - test rdx,rdx
HorizonForbiddenWest.exe+94682A: 74 12 - je HorizonForbiddenWest.exe+94683E
HorizonForbiddenWest.exe+94682C: 48 8B 42 30 - mov rax,[rdx+30]
HorizonForbiddenWest.exe+946830: C5 FA 10 40 24 - vmovss xmm0,[rax+24]
HorizonForbiddenWest.exe+946835: C5 FA 58 82 84 00 00 00 - vaddss xmm0,xmm0,[rdx+00000084]
HorizonForbiddenWest.exe+94683D: C3 - ret
HorizonForbiddenWest.exe+94683E: C5 FA 10 05 2E 88 06 01 - vmovss xmm0,[HorizonForbiddenWest.exe+19AF074]
HorizonForbiddenWest.exe+946846: C3 - ret
HorizonForbiddenWest.exe+946847: CC - int 3
HorizonForbiddenWest.exe+946848: CC - int 3
}
55
"Base Health"
0
Float
gPlayer
24
30
D0
74
"Health"
0
Float
gPlayer
74
D0
56
"Bonus Health"
0
Float
gPlayer
84
D0
256839
"??"
0
4 Bytes
gPlayer
D8
D0
57
"Focus"
0
Float
gPlayer
5C
1C8
A8
58
"Max"
0
Float
gPlayer
58
1C8
A8
256835
"Oxygen"
0
Float
gPlayer
50
280
A8
256836
"Max"
0
Float
gPlayer
54
280
A8
256837
"Stamina"
0
Float
gPlayer
50
290
A8
256838
"Max"
0
Float
gPlayer
54
290
A8
59
"Player Progression"
1
60
"Experience"
0
4 Bytes
gPlayer
50
250
A8
62
"Level"
0
4 Bytes
gPlayer
68
250
A8
61
"Max Level"
0
4 Bytes
gPlayer
6C
250
A8
63
"Skill Points"
0
4 Bytes
gPlayer
70
250
A8
256841
"Position"
1
256842
"X"
0
Double
gPlayer
100
60
98
C0
256843
"Y"
0
Double
gPlayer
108
60
98
C0
256844
"Z"
0
Double
gPlayer
110
60
98
C0
256864
"Other"
1
256865
"Valor Surge"
0
Float
gPlayer
80
118
A8
256840
"Valor Surge"
0
Float
gPlayer
80
118
A8
83
"Get Valor"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-23
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getValor,HorizonForbiddenWest.exe,C5 FA 10 9E 80 00 00 00) // should be unique
alloc(newmem,$64,getValor)
label(code)
label(return)
label(gValor)
registersymbol(gValor)
newmem:
code:
mov [gValor],rsi
vmovss xmm3,[rsi+00000080]
jmp return
gValor:
dq 0
getValor:
jmp newmem
nop 3
return:
registersymbol(getValor)
[DISABLE]
getValor:
db C5 FA 10 9E 80 00 00 00
unregistersymbol(getValor)
dealloc(newmem)
unregistersymbol(gValor)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+1475B1E
HorizonForbiddenWest.exe+1475AEC: C5 FA 10 64 C8 F8 - vmovss xmm4,[rax+rcx*8-08]
HorizonForbiddenWest.exe+1475AF2: C5 FA 11 63 04 - vmovss [rbx+04],xmm4
HorizonForbiddenWest.exe+1475AF7: EB 07 - jmp HorizonForbiddenWest.exe+1475B00
HorizonForbiddenWest.exe+1475AF9: C5 D8 57 E4 - vxorps xmm4,xmm4,xmm4
HorizonForbiddenWest.exe+1475AFD: 49 8B D1 - mov rdx,r9
HorizonForbiddenWest.exe+1475B00: 48 63 45 38 - movsxd rax,dword ptr [rbp+38]
HorizonForbiddenWest.exe+1475B04: 4C 8B 55 40 - mov r10,[rbp+40]
HorizonForbiddenWest.exe+1475B08: C4 C1 7A 10 46 20 - vmovss xmm0,[r14+20]
HorizonForbiddenWest.exe+1475B0E: C5 FB 10 96 B8 00 00 00 - vmovsd xmm2,[rsi+000000B8]
HorizonForbiddenWest.exe+1475B16: C5 F9 2E 15 AA 99 53 00 - vucomisd xmm2,[HorizonForbiddenWest.exe+19AF4C8]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+1475B1E: C5 FA 10 9E 80 00 00 00 - vmovss xmm3,[rsi+00000080]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+1475B26: 48 8D 0C 40 - lea rcx,[rax+rax*2]
HorizonForbiddenWest.exe+1475B2A: C6 43 28 01 - mov byte ptr [rbx+28],01
HorizonForbiddenWest.exe+1475B2E: C4 C1 7A 5E 4C CA F8 - vdivss xmm1,xmm0,[r10+rcx*8-08]
HorizonForbiddenWest.exe+1475B35: C5 FA 11 4B 24 - vmovss [rbx+24],xmm1
HorizonForbiddenWest.exe+1475B3A: C5 FA 11 1B - vmovss [rbx],xmm3
HorizonForbiddenWest.exe+1475B3E: 0F 8A E3 00 00 00 - jp HorizonForbiddenWest.exe+1475C27
HorizonForbiddenWest.exe+1475B44: 0F 85 DD 00 00 00 - jne HorizonForbiddenWest.exe+1475C27
HorizonForbiddenWest.exe+1475B4A: C4 C1 7A 10 42 10 - vmovss xmm0,[r10+10]
HorizonForbiddenWest.exe+1475B50: C5 FA 5E CC - vdivss xmm1,xmm0,xmm4
HorizonForbiddenWest.exe+1475B54: C5 FA 11 4B 10 - vmovss [rbx+10],xmm1
}
84
"Valor"
0
Float
gValor
80
111
"Instant Component Destroyed"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-24
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(desComponent,HorizonForbiddenWest.exe,C4 C1 7A 10 7F 28 * * * * 76) // should be unique
alloc(newmem,$64,desComponent)
label(code)
label(return)
newmem:
code:
mov [r15+28],(float)1.0
vmovss xmm7,[r15+28]
jmp return
desComponent:
jmp newmem
nop
return:
registersymbol(desComponent)
[DISABLE]
desComponent:
db C4 C1 7A 10 7F 28
unregistersymbol(desComponent)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+930243
HorizonForbiddenWest.exe+930217: 48 8B CE - mov rcx,rsi
HorizonForbiddenWest.exe+93021A: E8 F1 53 00 00 - call HorizonForbiddenWest.exe+935610
HorizonForbiddenWest.exe+93021F: C5 FA 10 9C 24 E8 00 00 00 - vmovss xmm3,[rsp+000000E8]
HorizonForbiddenWest.exe+930228: EB 16 - jmp HorizonForbiddenWest.exe+930240
HorizonForbiddenWest.exe+93022A: 8B 5B 08 - mov ebx,[rbx+08]
HorizonForbiddenWest.exe+93022D: C1 EB 02 - shr ebx,02
HorizonForbiddenWest.exe+930230: C5 E0 57 DB - vxorps xmm3,xmm3,xmm3
HorizonForbiddenWest.exe+930234: 80 E3 01 - and bl,01
HorizonForbiddenWest.exe+930237: C5 FA 11 9C 24 E8 00 00 00 - vmovss [rsp+000000E8],xmm3
HorizonForbiddenWest.exe+930240: 4D 03 FE - add r15,r14
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+930243: C4 C1 7A 10 7F 28 - vmovss xmm7,[r15+28]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+930249: C5 F8 2F FE - vcomiss xmm7,xmm6
HorizonForbiddenWest.exe+93024D: 76 12 - jna HorizonForbiddenWest.exe+930261
HorizonForbiddenWest.exe+93024F: C5 F8 2F DE - vcomiss xmm3,xmm6
HorizonForbiddenWest.exe+930253: 0F 87 B0 00 00 00 - ja HorizonForbiddenWest.exe+930309
HorizonForbiddenWest.exe+930259: 84 DB - test bl,bl
HorizonForbiddenWest.exe+93025B: 0F 85 AC 00 00 00 - jne HorizonForbiddenWest.exe+93030D
HorizonForbiddenWest.exe+930261: 4C 8B 74 24 50 - mov r14,[rsp+50]
HorizonForbiddenWest.exe+930266: 48 8B 84 24 08 03 00 00 - mov rax,[rsp+00000308]
HorizonForbiddenWest.exe+93026E: C5 F8 28 BC 24 90 02 00 00 - vmovaps xmm7,[rsp+00000290]
HorizonForbiddenWest.exe+930277: C5 F8 28 B4 24 A0 02 00 00 - vmovaps xmm6,[rsp+000002A0]
}
256863
"Instant Component Removed"
0080FF
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-30
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(killComp,HorizonForbiddenWest.exe,C5 FA 11 81 5C 01 00 00 4C) // should be unique
alloc(newmem,$1000,killComp)
label(code)
label(return)
newmem:
code:
vmovss [rcx+0000015C],xmm0
mov [rcx+15C],(float)1000.0
jmp return
killComp:
jmp newmem
nop 3
return:
registersymbol(killComp)
[DISABLE]
killComp:
db C5 FA 11 81 5C 01 00 00
unregistersymbol(killComp)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+109FAF0
HorizonForbiddenWest.exe+109FABF: 72 17 - jb HorizonForbiddenWest.exe+109FAD8
HorizonForbiddenWest.exe+109FAC1: 48 8B 05 88 FA 8C 07 - mov rax,[HorizonForbiddenWest.exe+896F550]
HorizonForbiddenWest.exe+109FAC8: C5 FB 10 80 A8 00 00 00 - vmovsd xmm0,[rax+000000A8]
HorizonForbiddenWest.exe+109FAD0: C5 FB 11 81 D0 01 00 00 - vmovsd [rcx+000001D0],xmm0
HorizonForbiddenWest.exe+109FAD8: C5 7A 10 1D 54 0A 91 00 - vmovss xmm11,[HorizonForbiddenWest.exe+19B0534]
HorizonForbiddenWest.exe+109FAE0: 45 84 E4 - test r12b,r12b
HorizonForbiddenWest.exe+109FAE3: 75 06 - jne HorizonForbiddenWest.exe+109FAEB
HorizonForbiddenWest.exe+109FAE5: C5 9A 58 C1 - vaddss xmm0,xmm12,xmm1
HorizonForbiddenWest.exe+109FAE9: EB 05 - jmp HorizonForbiddenWest.exe+109FAF0
HorizonForbiddenWest.exe+109FAEB: C4 C1 78 28 C3 - vmovaps xmm0,xmm11
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+109FAF0: C5 FA 11 81 5C 01 00 00 - vmovss [rcx+0000015C],xmm0
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+109FAF8: 4C 8B B1 70 01 00 00 - mov r14,[rcx+00000170]
HorizonForbiddenWest.exe+109FAFF: 41 80 BE B0 00 00 00 00 - cmp byte ptr [r14+000000B0],00
HorizonForbiddenWest.exe+109FB07: 75 1A - jne HorizonForbiddenWest.exe+109FB23
HorizonForbiddenWest.exe+109FB09: 41 80 BE C8 00 00 00 00 - cmp byte ptr [r14+000000C8],00
HorizonForbiddenWest.exe+109FB11: 75 10 - jne HorizonForbiddenWest.exe+109FB23
HorizonForbiddenWest.exe+109FB13: C4 C1 7A 10 40 4C - vmovss xmm0,[r8+4C]
HorizonForbiddenWest.exe+109FB19: C5 F8 2F C7 - vcomiss xmm0,xmm7
HorizonForbiddenWest.exe+109FB1D: 76 04 - jna HorizonForbiddenWest.exe+109FB23
HorizonForbiddenWest.exe+109FB1F: C5 72 5E C8 - vdivss xmm9,xmm1,xmm0
HorizonForbiddenWest.exe+109FB23: 48 8B 05 26 FA 8C 07 - mov rax,[HorizonForbiddenWest.exe+896F550]
}
256830
"Get Highlighted Resource"
Auto Assembler Script
[ENABLE]
aobscanmodule(getResource,HorizonForbiddenWest.exe,6C 4C 8B D1 49 C1 E0 05 4A 8B 4C 01 10) // should be unique
alloc(newmem,$64,getResource)
label(code)
label(return)
label(gResource)
registersymbol(gResource)
newmem:
code:
mov rcx,[rcx+r8+10]
mov [gResource],rcx
jmp return
gResource:
dq 0
getResource+08:
jmp newmem
return:
registersymbol(getResource)
[DISABLE]
getResource+08:
db 4A 8B 4C 01 10
unregistersymbol(getResource)
dealloc(newmem)
unregistersymbol(gResource)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+11FD0B4
HorizonForbiddenWest.exe+11FD093: 73 69 - jae HorizonForbiddenWest.exe+11FD0FE
HorizonForbiddenWest.exe+11FD095: 48 8B 4E 60 - mov rcx,[rsi+60]
HorizonForbiddenWest.exe+11FD099: 4C 63 C0 - movsxd r8,eax
HorizonForbiddenWest.exe+11FD09C: 49 8B D0 - mov rdx,r8
HorizonForbiddenWest.exe+11FD09F: 48 C1 E2 05 - shl rdx,05
HorizonForbiddenWest.exe+11FD0A3: 83 7C 0A 18 00 - cmp dword ptr [rdx+rcx+18],00
HorizonForbiddenWest.exe+11FD0A8: 74 54 - je HorizonForbiddenWest.exe+11FD0FE
HorizonForbiddenWest.exe+11FD0AA: 8B 56 6C - mov edx,[rsi+6C]
HorizonForbiddenWest.exe+11FD0AD: 4C 8B D1 - mov r10,rcx
HorizonForbiddenWest.exe+11FD0B0: 49 C1 E0 05 - shl r8,05
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+11FD0B4: 4A 8B 4C 01 10 - mov rcx,[rcx+r8+10]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+11FD0B9: 03 79 50 - add edi,[rcx+50]
HorizonForbiddenWest.exe+11FD0BC: 8D 48 01 - lea ecx,[rax+01]
HorizonForbiddenWest.exe+11FD0BF: 8D 42 FF - lea eax,[rdx-01]
HorizonForbiddenWest.exe+11FD0C2: 23 C1 - and eax,ecx
HorizonForbiddenWest.exe+11FD0C4: 4C 63 C8 - movsxd r9,eax
HorizonForbiddenWest.exe+11FD0C7: 49 C1 E1 05 - shl r9,05
HorizonForbiddenWest.exe+11FD0CB: 43 8B 4C 11 18 - mov ecx,[r9+r10+18]
HorizonForbiddenWest.exe+11FD0D0: 85 C9 - test ecx,ecx
HorizonForbiddenWest.exe+11FD0D2: 74 23 - je HorizonForbiddenWest.exe+11FD0F7
HorizonForbiddenWest.exe+11FD0D4: 43 3B 4C 10 18 - cmp ecx,[r8+r10+18]
}
256831
"UUID"
1
0
8 Bytes
gResource
8
257206
"UUID"
1
0
8 Bytes
gResource
10
257205
"Amount"
0
4 Bytes
gResource
50
257218
"Name"
0
String
16
0
0
1
gResource
0
20
48
20
0
48
257157
"Description"
0
String
64
0
0
1
gResource
0
20
58
20
0
48
257209
"Stack"
0
Byte
gResource
B1
20
0
48
257208
"Stack"
0
Byte
gResource
B8
20
0
48
257156
"Max Stack"
0
4 Bytes
gResource
10
40
20
0
48
257289
"Inventory Resource UUID"
1
0
8 Bytes
gResource
8
20
0
48
257291
"Inventory Resource UUID"
1
0
8 Bytes
gResource
10
20
0
48
257232
"Coil Data (When Highlighted)"
1
257231
"Display Value"
0
Float
gResource
6C
0
40
20
0
48
257233
"CombatStatDamageValue"
0
Float
gResource
34
28
0
58
0
40
20
0
48
257269
"CombatStatDamageValue (Elite)"
0
Float
gResource
3C
28
0
58
0
40
20
0
48
257234
"CombatStatDamageValue"
0
Float
gResource
34
28
8
58
0
40
20
0
48
257274
"CombatStatDamageValue (Elite)"
0
Float
gResource
3C
28
8
58
0
40
20
0
48
257235
"CombatStatDamageValue"
0
Float
gResource
34
28
10
58
0
40
20
0
48
257270
"CombatStatDamageValue (Elite)"
0
Float
gResource
3C
28
10
58
0
40
20
0
48
257240
"CombatStatDamageValue"
0
Float
gResource
34
28
18
58
0
40
20
0
48
257239
"CombatStatDamageValue"
0
Float
gResource
34
28
20
58
0
40
20
0
48
257238
"CombatStatDamageValue"
0
Float
gResource
34
28
28
58
0
40
20
0
48
257237
"CombatStatDamageValue"
0
Float
gResource
34
28
30
58
0
40
20
0
48
257236
"CombatStatDamageValue"
0
Float
gResource
34
28
38
58
0
40
20
0
48
257241
"CombatStatDamageValue"
0
Float
gResource
34
28
38
58
0
40
20
0
48
257282
"Armor Data"
1
257310
"Base1"
1
257283
"CombatStatDamageValue"
0
Float
gResource
34
28
0
28
8
40
20
0
48
257315
"CombatStatDamageValue"
0
Float
gResource
34
28
8
28
8
40
20
0
48
257314
"CombatStatDamageValue"
0
Float
gResource
34
28
10
28
8
40
20
0
48
257313
"CombatStatDamageValue"
0
Float
gResource
34
28
18
28
8
40
20
0
48
257317
"CombatStatDamageValue"
0
Float
gResource
34
28
20
28
8
40
20
0
48
257312
"CombatStatDamageValue"
0
Float
gResource
34
28
28
28
8
40
20
0
48
257318
"CombatStatDamageValue"
0
Float
gResource
34
28
30
28
8
40
20
0
48
257311
"CombatStatDamageValue"
0
Float
gResource
34
28
38
28
8
40
20
0
48
257316
"CombatStatDamageValue"
0
Float
gResource
34
28
38
28
8
40
20
0
48
257309
"CombatStatDamageValue"
0
Float
gResource
34
28
0
28
20
40
20
0
48
257284
"CombatStatDamageValue"
0
Float
gResource
34
28
10
28
20
40
20
0
48
257287
"CombatStatDamageValue"
0
Float
gResource
34
28
0
28
10
40
20
0
48
257288
"CombatStatDamageValue"
0
Float
gResource
34
28
10
28
10
40
20
0
48
257207
"Upgrade 1 Cost"
0
4 Bytes
gResource
20
0
28
20
0
38
18
40
20
0
48
257214
"Upgrade 1 Cost"
0
4 Bytes
gResource
20
0
28
20
0
38
18
40
20
0
48
256960
"Get Machine Strike Unit"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-04-10
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getBoardUnit,HorizonForbiddenWest.exe,48 8B 87 40 01 00 00 48 8D) // should be unique
alloc(newmem,$64,getBoardUnit)
label(code)
label(return)
label(gBoardUnit)
registersymbol(gBoardUnit)
newmem:
code:
mov [gBoardUnit],rdi
mov rax,[rdi+00000140]
jmp return
gBoardUnit:
dq 0
getBoardUnit:
jmp newmem
nop 2
return:
registersymbol(getBoardUnit)
[DISABLE]
getBoardUnit:
db 48 8B 87 40 01 00 00
unregistersymbol(getBoardUnit)
dealloc(newmem)
unregistersymbol(gBoardUnit)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+14FB93F
HorizonForbiddenWest.exe+14FB912: 41 8B D7 - mov edx,r15d
HorizonForbiddenWest.exe+14FB915: 48 8B CB - mov rcx,rbx
HorizonForbiddenWest.exe+14FB918: E8 13 BA E7 FE - call HorizonForbiddenWest.exe+377330
HorizonForbiddenWest.exe+14FB91D: 49 8B D5 - mov rdx,r13
HorizonForbiddenWest.exe+14FB920: 48 8D 8F F8 00 00 00 - lea rcx,[rdi+000000F8]
HorizonForbiddenWest.exe+14FB927: F2 48 0F 38 F1 D3 - crc32 rdx,rbx
HorizonForbiddenWest.exe+14FB92D: 4C 8D 45 D8 - lea r8,[rbp-28]
HorizonForbiddenWest.exe+14FB931: E8 8A 83 C9 FE - call HorizonForbiddenWest.exe+193CC0
HorizonForbiddenWest.exe+14FB936: 48 8D 4D 38 - lea rcx,[rbp+38]
HorizonForbiddenWest.exe+14FB93A: E8 F1 77 C0 FE - call HorizonForbiddenWest.exe+103130
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+14FB93F: 48 8B 87 40 01 00 00 - mov rax,[rdi+00000140]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+14FB946: 48 8D 15 2B 0B 4A 00 - lea rdx,[HorizonForbiddenWest.exe+199C478]
HorizonForbiddenWest.exe+14FB94D: 41 B8 15 00 00 00 - mov r8d,00000015
HorizonForbiddenWest.exe+14FB953: 4C 89 6D B8 - mov [rbp-48],r13
HorizonForbiddenWest.exe+14FB957: 0F B6 40 3C - movzx eax,byte ptr [rax+3C]
HorizonForbiddenWest.exe+14FB95B: 8B C8 - mov ecx,eax
HorizonForbiddenWest.exe+14FB95D: C1 E8 04 - shr eax,04
HorizonForbiddenWest.exe+14FB960: 83 E1 0F - and ecx,0F
HorizonForbiddenWest.exe+14FB963: 89 45 40 - mov [rbp+40],eax
HorizonForbiddenWest.exe+14FB966: 8B F1 - mov esi,ecx
HorizonForbiddenWest.exe+14FB968: 89 4D 38 - mov [rbp+38],ecx
}
256967
"Board Unit Data"
1
256961
"??"
0
Byte
gBoardUnit
8
50
50
10
140
256963
"Attack Type"
0
Byte
gBoardUnit
A
50
50
10
140
256964
"Movement Range"
0
Byte
gBoardUnit
B
50
50
10
140
256965
"Attack Range"
0
Byte
gBoardUnit
C
50
50
10
140
256966
"HP"
0
Byte
gBoardUnit
D
50
50
10
140
256977
"Attack Power"
0
Byte
gBoardUnit
E
50
50
10
140
256969
"Front Weak Spot"
1
Byte
gBoardUnit
10
50
50
10
140
256970
"Back Weak Spot"
1
Byte
gBoardUnit
12
50
50
10
140
256971
"Board Unit"
1
256972
"Board Unit Name"
0
String
32
0
0
1
gBoardUnit
0
20
20
8
140
256973
"HP"
0
Byte
gBoardUnit
50
8
140
256974
"??"
0
Byte
gBoardUnit
54
8
140
256975
"Movement Range"
0
Byte
gBoardUnit
58
8
140
256976
"Attack Power"
0
Byte
gBoardUnit
60
8
140
256968
"Game Board Unit"
1
256962
"HP"
0
4 Bytes
gBoardUnit
3A
140
256827
"Hunting Ground Timer"
Auto Assembler Script
[ENABLE]
aobscanmodule(huntTimer,HorizonForbiddenWest.exe,C5 F3 5A D9 C5 EA 5F C3 C3 * * * * A0 * * * * * * * * * * * * * * * * * * * C5 FB 10 91 98) // should be unique
huntTimer:
vxorps xmm3,xmm3,xmm3
huntTimer+21:
vmovsd xmm2,[rcx+000000A0]
registersymbol(huntTimer)
[DISABLE]
huntTimer:
vcvtsd2ss xmm3,xmm1,xmm1
huntTimer+21:
vmovsd xmm2,[rcx+00000098]
unregistersymbol(huntTimer)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+E5B264
HorizonForbiddenWest.exe+E5B23C: CC - int 3
HorizonForbiddenWest.exe+E5B23D: CC - int 3
HorizonForbiddenWest.exe+E5B23E: CC - int 3
HorizonForbiddenWest.exe+E5B23F: CC - int 3
HorizonForbiddenWest.exe+E5B240: 80 B9 80 00 00 00 02 - cmp byte ptr [rcx+00000080],02
HorizonForbiddenWest.exe+E5B247: 75 24 - jne HorizonForbiddenWest.exe+E5B26D
HorizonForbiddenWest.exe+E5B249: 48 8B 05 C0 20 B1 07 - mov rax,[HorizonForbiddenWest.exe+896D310]
HorizonForbiddenWest.exe+E5B250: C5 E8 57 D2 - vxorps xmm2,xmm2,xmm2
HorizonForbiddenWest.exe+E5B254: C5 FB 10 80 A8 00 00 00 - vmovsd xmm0,[rax+000000A8]
HorizonForbiddenWest.exe+E5B25C: C5 FB 5C 89 98 00 00 00 - vsubsd xmm1,xmm0,[rcx+00000098]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+E5B264: C5 F3 5A D9 - vcvtsd2ss xmm3,xmm1,xmm1
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+E5B268: C5 EA 5F C3 - vmaxss xmm0,xmm2,xmm3
HorizonForbiddenWest.exe+E5B26C: C3 - ret
HorizonForbiddenWest.exe+E5B26D: C5 FB 10 89 A0 00 00 00 - vmovsd xmm1,[rcx+000000A0]
HorizonForbiddenWest.exe+E5B275: C5 FB 10 05 4B 42 B5 00 - vmovsd xmm0,[HorizonForbiddenWest.exe+19AF4C8]
HorizonForbiddenWest.exe+E5B27D: C5 F9 2E C8 - vucomisd xmm1,xmm0
HorizonForbiddenWest.exe+E5B281: 7A 02 - jp HorizonForbiddenWest.exe+E5B285
HorizonForbiddenWest.exe+E5B283: 74 10 - je HorizonForbiddenWest.exe+E5B295
HorizonForbiddenWest.exe+E5B285: C5 FB 10 91 98 00 00 00 - vmovsd xmm2,[rcx+00000098]
HorizonForbiddenWest.exe+E5B28D: C5 F9 2E D0 - vucomisd xmm2,xmm0
HorizonForbiddenWest.exe+E5B291: 7A 0B - jp HorizonForbiddenWest.exe+E5B29E
}
116
"Infinite Jump"
Auto Assembler Script
[ENABLE]
aobscanmodule(infJump,HorizonForbiddenWest.exe,80 BB 50 01 00 00 00 0F B6) // should be unique
infJump:
db 80 BB 50 01 00 00 01
registersymbol(infJump)
[DISABLE]
infJump:
db 80 BB 50 01 00 00 00
unregistersymbol(infJump)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+13B0246
HorizonForbiddenWest.exe+13B0216: 48 8B 41 48 - mov rax,[rcx+48]
HorizonForbiddenWest.exe+13B021A: 49 89 6B 08 - mov [r11+08],rbp
HorizonForbiddenWest.exe+13B021E: 4D 89 73 18 - mov [r11+18],r14
HorizonForbiddenWest.exe+13B0222: C5 F8 29 74 24 50 - vmovaps [rsp+50],xmm6
HorizonForbiddenWest.exe+13B0228: 48 8B 90 00 03 00 00 - mov rdx,[rax+00000300]
HorizonForbiddenWest.exe+13B022F: 49 89 73 10 - mov [r11+10],rsi
HorizonForbiddenWest.exe+13B0233: 4C 8B B2 A8 01 00 00 - mov r14,[rdx+000001A8]
HorizonForbiddenWest.exe+13B023A: 49 8B CE - mov rcx,r14
HorizonForbiddenWest.exe+13B023D: 49 8B 06 - mov rax,[r14]
HorizonForbiddenWest.exe+13B0240: FF 90 08 02 00 00 - call qword ptr [rax+00000208]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+13B0246: 80 BB 50 01 00 00 00 - cmp byte ptr [rbx+00000150],00
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+13B024D: 0F B6 E8 - movzx ebp,al
HorizonForbiddenWest.exe+13B0250: 48 8B 4B 48 - mov rcx,[rbx+48]
HorizonForbiddenWest.exe+13B0254: C5 C8 57 F6 - vxorps xmm6,xmm6,xmm6
HorizonForbiddenWest.exe+13B0258: C5 FB 10 89 E8 00 00 00 - vmovsd xmm1,[rcx+000000E8]
HorizonForbiddenWest.exe+13B0260: C5 FB 11 4C 24 30 - vmovsd [rsp+30],xmm1
HorizonForbiddenWest.exe+13B0266: 0F 85 43 01 00 00 - jne HorizonForbiddenWest.exe+13B03AF
HorizonForbiddenWest.exe+13B026C: 80 BB 51 01 00 00 00 - cmp byte ptr [rbx+00000151],00
HorizonForbiddenWest.exe+13B0273: 0F 85 44 01 00 00 - jne HorizonForbiddenWest.exe+13B03BD
HorizonForbiddenWest.exe+13B0279: C5 F8 2F B3 80 01 00 00 - vcomiss xmm6,[rbx+00000180]
HorizonForbiddenWest.exe+13B0281: 76 5F - jna HorizonForbiddenWest.exe+13B02E2
}
256958
"Machines Spawn No Armor"
Auto Assembler Script
[ENABLE]
aobscanmodule(getSpawnArmor,fullgame.dll,8B AB F0 09 00 00) // should be unique
alloc(newmem,$64,getSpawnArmor)
label(code)
label(return)
newmem:
code:
mov ebp,[rbx+000009F0]
add ebp,#500
jmp return
getSpawnArmor:
jmp newmem
nop
return:
registersymbol(getSpawnArmor)
[DISABLE]
getSpawnArmor:
db 8B AB F0 09 00 00
unregistersymbol(getSpawnArmor)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: fullgame.dll+771F8B
fullgame.dll+771F60: E9 14 05 00 00 - jmp fullgame.dll+772479
fullgame.dll+771F65: 80 7E 02 00 - cmp byte ptr [rsi+02],00
fullgame.dll+771F69: C6 46 02 01 - mov byte ptr [rsi+02],01
fullgame.dll+771F6D: 0F 84 F9 04 00 00 - je fullgame.dll+77246C
fullgame.dll+771F73: 48 8B 0F - mov rcx,[rdi]
fullgame.dll+771F76: FF 15 A4 0F DB 0F - call qword ptr [fullgame.dll+10522F20]
fullgame.dll+771F7C: 31 C9 - xor ecx,ecx
fullgame.dll+771F7E: 48 85 C0 - test rax,rax
fullgame.dll+771F81: 0F 84 79 0D 00 00 - je fullgame.dll+772D00
fullgame.dll+771F87: 89 6C 24 4C - mov [rsp+4C],ebp
// ---------- INJECTING HERE ----------
fullgame.dll+771F8B: 8B AB F0 09 00 00 - mov ebp,[rbx+000009F0]
// ---------- DONE INJECTING ----------
fullgame.dll+771F91: 4C 8B BB E8 06 00 00 - mov r15,[rbx+000006E8]
fullgame.dll+771F98: 4C 8B B3 F8 09 00 00 - mov r14,[rbx+000009F8]
fullgame.dll+771F9F: 48 8B 0F - mov rcx,[rdi]
fullgame.dll+771FA2: FF 15 08 2B DB 0F - call qword ptr [fullgame.dll+10524AB0]
fullgame.dll+771FA8: 48 89 C1 - mov rcx,rax
fullgame.dll+771FAB: 4C 89 F2 - mov rdx,r14
fullgame.dll+771FAE: FF 15 B4 11 DB 0F - call qword ptr [fullgame.dll+10523168]
fullgame.dll+771FB4: 48 3B 83 00 0A 00 00 - cmp rax,[rbx+00000A00]
fullgame.dll+771FBB: 0F 84 06 02 00 00 - je fullgame.dll+7721C7
fullgame.dll+771FC1: 49 89 C4 - mov r12,rax
}
257118
"Reveal Fog of War"
Auto Assembler Script
[ENABLE]
aobscanmodule(getFullMap,HorizonForbiddenWest.exe,48 89 86 F0 04 00 00) // should be unique
alloc(newmem,$64,getFullMap)
label(code)
label(return)
newmem:
code:
xor rax,rax
mov [rsi+000004F0],rax
jmp return
getFullMap:
jmp newmem
nop 2
return:
registersymbol(getFullMap)
[DISABLE]
getFullMap:
db 48 89 86 F0 04 00 00
unregistersymbol(getFullMap)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: WorldDrawableMap_Open_hookspot
HorizonForbiddenWest.exe+139417E: 48 8B 0D BB 8F BE 00 - mov rcx,[HorizonForbiddenWest.exe+1F7D140]
HorizonForbiddenWest.exe+1394185: E8 76 01 D7 FE - call HorizonForbiddenWest.exe+104300
HorizonForbiddenWest.exe+139418A: 48 8B 0F - mov rcx,[rdi]
HorizonForbiddenWest.exe+139418D: 48 8D 55 20 - lea rdx,[rbp+20]
HorizonForbiddenWest.exe+1394191: 48 83 C1 60 - add rcx,60
HorizonForbiddenWest.exe+1394195: 89 44 24 20 - mov [rsp+20],eax
HorizonForbiddenWest.exe+1394199: 41 B9 08 00 00 00 - mov r9d,00000008
HorizonForbiddenWest.exe+139419F: 45 33 C0 - xor r8d,r8d
HorizonForbiddenWest.exe+13941A2: E8 C9 99 DE FE - call HorizonForbiddenWest.exe+17DB70
HorizonForbiddenWest.exe+13941A7: 48 8B 45 20 - mov rax,[rbp+20]
// ---------- INJECTING HERE ----------
WorldDrawableMap_Open_hookspot: 48 89 86 F0 04 00 00 - mov [rsi+000004F0],rax
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+13941B2: 48 8B 0D B7 95 BE 00 - mov rcx,[HorizonForbiddenWest.exe+1F7D770]
HorizonForbiddenWest.exe+13941B9: E8 42 01 D7 FE - call HorizonForbiddenWest.exe+104300
HorizonForbiddenWest.exe+13941BE: 48 8B 0F - mov rcx,[rdi]
HorizonForbiddenWest.exe+13941C1: 48 8D 55 20 - lea rdx,[rbp+20]
HorizonForbiddenWest.exe+13941C5: 48 83 C1 60 - add rcx,60
HorizonForbiddenWest.exe+13941C9: 89 44 24 20 - mov [rsp+20],eax
HorizonForbiddenWest.exe+13941CD: 41 B9 08 00 00 00 - mov r9d,00000008
HorizonForbiddenWest.exe+13941D3: 45 33 C0 - xor r8d,r8d
HorizonForbiddenWest.exe+13941D6: E8 95 99 DE FE - call HorizonForbiddenWest.exe+17DB70
HorizonForbiddenWest.exe+13941DB: 48 8B 45 20 - mov rax,[rbp+20]
}
16
"[DEBUG]"
0000FF
1
15
"Fetch Base Addresses (Easy)"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"48 8B 05 ?? ?? ?? ?? 48 85 C0 74 06 89 98 68 38 00 00",
"48 8B 0D ?? ?? ?? ?? 48 85 C9 75 08 33 C0 48 83 C4 30 5F C3",
"48 8B 05 ?? ?? ?? ?? 0F B6 80 70 06 00 00",
"48 8B 05 ?? ?? ?? ?? 80 78 2C 00 75 ?? 48 8D 91",
"48 8B 05 ?? ?? ?? ?? 48 85 C0 75 1A 48 8B 0D ?? ?? ?? ?? 48 8B 89 88 00 00 00",
"48 8B 05 ?? ?? ?? ?? 48 8B F9 48 8B 0D ?? ?? ?? ?? 48 89 74 24 38 48 8B B0 20 01 00 00",
"48 8B 05 ?? ?? ?? ?? 48 8B F9 48 8B 0D ?? ?? ?? ?? 48 89 74 24 38 48 8B B0 20 01 00 00 80 79 28 00"
}
local aobNames = {
"Player",
"PlayerManagerGame",
"GameModule",
"Debug Settings",
"Difficulty Manager",
"Unknown",
"GameLibSystemAssets"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: %s+%X",aobNames[i],process,address))
end
[DISABLE]
82
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-23
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getValor,HorizonForbiddenWest.exe,C5 FA 10 9E 80 00 00 00) // should be unique
alloc(newmem,$64,getValor)
label(code)
label(return)
newmem:
code:
vmovss xmm3,[rsi+00000080]
jmp return
getValor:
jmp newmem
nop 3
return:
registersymbol(getValor)
[DISABLE]
getValor:
db C5 FA 10 9E 80 00 00 00
unregistersymbol(getValor)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+1475B1E
HorizonForbiddenWest.exe+1475AEC: C5 FA 10 64 C8 F8 - vmovss xmm4,[rax+rcx*8-08]
HorizonForbiddenWest.exe+1475AF2: C5 FA 11 63 04 - vmovss [rbx+04],xmm4
HorizonForbiddenWest.exe+1475AF7: EB 07 - jmp HorizonForbiddenWest.exe+1475B00
HorizonForbiddenWest.exe+1475AF9: C5 D8 57 E4 - vxorps xmm4,xmm4,xmm4
HorizonForbiddenWest.exe+1475AFD: 49 8B D1 - mov rdx,r9
HorizonForbiddenWest.exe+1475B00: 48 63 45 38 - movsxd rax,dword ptr [rbp+38]
HorizonForbiddenWest.exe+1475B04: 4C 8B 55 40 - mov r10,[rbp+40]
HorizonForbiddenWest.exe+1475B08: C4 C1 7A 10 46 20 - vmovss xmm0,[r14+20]
HorizonForbiddenWest.exe+1475B0E: C5 FB 10 96 B8 00 00 00 - vmovsd xmm2,[rsi+000000B8]
HorizonForbiddenWest.exe+1475B16: C5 F9 2E 15 AA 99 53 00 - vucomisd xmm2,[HorizonForbiddenWest.exe+19AF4C8]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+1475B1E: C5 FA 10 9E 80 00 00 00 - vmovss xmm3,[rsi+00000080]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+1475B26: 48 8D 0C 40 - lea rcx,[rax+rax*2]
HorizonForbiddenWest.exe+1475B2A: C6 43 28 01 - mov byte ptr [rbx+28],01
HorizonForbiddenWest.exe+1475B2E: C4 C1 7A 5E 4C CA F8 - vdivss xmm1,xmm0,[r10+rcx*8-08]
HorizonForbiddenWest.exe+1475B35: C5 FA 11 4B 24 - vmovss [rbx+24],xmm1
HorizonForbiddenWest.exe+1475B3A: C5 FA 11 1B - vmovss [rbx],xmm3
HorizonForbiddenWest.exe+1475B3E: 0F 8A E3 00 00 00 - jp HorizonForbiddenWest.exe+1475C27
HorizonForbiddenWest.exe+1475B44: 0F 85 DD 00 00 00 - jne HorizonForbiddenWest.exe+1475C27
HorizonForbiddenWest.exe+1475B4A: C4 C1 7A 10 42 10 - vmovss xmm0,[r10+10]
HorizonForbiddenWest.exe+1475B50: C5 FA 5E CC - vdivss xmm1,xmm0,xmm4
HorizonForbiddenWest.exe+1475B54: C5 FA 11 4B 10 - vmovss [rbx+10],xmm1
}
256834
"Get Machine Pawn"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-25
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonForbiddenWest.exe,0F B6 48 3A EB 20) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
movzx ecx,byte ptr [rax+3A]
jmp HorizonForbiddenWest.exe+14F79C5
jmp return
INJECT:
jmp newmem
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 0F B6 48 3A EB 20
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+14F799F
HorizonForbiddenWest.exe+14F7972: E8 D9 A5 C9 FE - call HorizonForbiddenWest.exe+191F50
HorizonForbiddenWest.exe+14F7977: 48 8D 4D 58 - lea rcx,[rbp+58]
HorizonForbiddenWest.exe+14F797B: E8 10 9F C0 FE - call HorizonForbiddenWest.exe+101890
HorizonForbiddenWest.exe+14F7980: 41 0F B6 86 2C 01 00 00 - movzx eax,byte ptr [r14+0000012C]
HorizonForbiddenWest.exe+14F7988: 41 B8 06 00 00 00 - mov r8d,00000006
HorizonForbiddenWest.exe+14F798E: 2C 02 - sub al,02
HorizonForbiddenWest.exe+14F7990: 48 89 75 58 - mov [rbp+58],rsi
HorizonForbiddenWest.exe+14F7994: 3C 01 - cmp al,01
HorizonForbiddenWest.exe+14F7996: 76 0D - jna HorizonForbiddenWest.exe+14F79A5
HorizonForbiddenWest.exe+14F7998: 49 8B 86 40 01 00 00 - mov rax,[r14+00000140]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+14F799F: 0F B6 48 3A - movzx ecx,byte ptr [rax+3A]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+14F79A3: EB 20 - jmp HorizonForbiddenWest.exe+14F79C5
HorizonForbiddenWest.exe+14F79A5: 49 8B 8E 40 01 00 00 - mov rcx,[r14+00000140]
HorizonForbiddenWest.exe+14F79AC: 48 8B 41 10 - mov rax,[rcx+10]
HorizonForbiddenWest.exe+14F79B0: 48 8B 50 50 - mov rdx,[rax+50]
HorizonForbiddenWest.exe+14F79B4: 0F B6 41 39 - movzx eax,byte ptr [rcx+39]
HorizonForbiddenWest.exe+14F79B8: 48 8D 0C 40 - lea rcx,[rax+rax*2]
HorizonForbiddenWest.exe+14F79BC: 48 8B 42 50 - mov rax,[rdx+50]
HorizonForbiddenWest.exe+14F79C0: 0F B6 4C C8 0D - movzx ecx,byte ptr [rax+rcx*8+0D]
HorizonForbiddenWest.exe+14F79C5: 89 4D 40 - mov [rbp+40],ecx
HorizonForbiddenWest.exe+14F79C8: 48 8D 15 8D 75 3F 00 - lea rdx,[HorizonForbiddenWest.exe+18EEF5C]
}
256857
"Component Tear"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-03-30
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getComponent,HorizonForbiddenWest.exe,C5 FA 10 87 5C 01 00 00 C4 41) // should be unique
alloc(newmem,$1000,getComponent)
label(code)
label(return)
newmem:
code:
vmovss xmm0,[rdi+0000015C]
jmp return
getComponent:
jmp newmem
nop 3
return:
registersymbol(getComponent)
[DISABLE]
getComponent:
db C5 FA 10 87 5C 01 00 00
unregistersymbol(getComponent)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+10A2069
HorizonForbiddenWest.exe+10A203D: 48 8B F9 - mov rdi,rcx
HorizonForbiddenWest.exe+10A2040: C5 F8 29 7C 24 50 - vmovaps [rsp+50],xmm7
HorizonForbiddenWest.exe+10A2046: C5 78 29 4C 24 30 - vmovaps [rsp+30],xmm9
HorizonForbiddenWest.exe+10A204C: C5 78 29 54 24 20 - vmovaps [rsp+20],xmm10
HorizonForbiddenWest.exe+10A2052: 48 8B 48 78 - mov rcx,[rax+78]
HorizonForbiddenWest.exe+10A2056: C5 78 28 D1 - vmovaps xmm10,xmm1
HorizonForbiddenWest.exe+10A205A: 48 85 C9 - test rcx,rcx
HorizonForbiddenWest.exe+10A205D: 74 0A - je HorizonForbiddenWest.exe+10A2069
HorizonForbiddenWest.exe+10A205F: 80 79 31 00 - cmp byte ptr [rcx+31],00
HorizonForbiddenWest.exe+10A2063: 0F 84 B2 00 00 00 - je HorizonForbiddenWest.exe+10A211B
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+10A2069: C5 FA 10 87 5C 01 00 00 - vmovss xmm0,[rdi+0000015C]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+10A2071: C4 41 30 57 C9 - vxorps xmm9,xmm9,xmm9
HorizonForbiddenWest.exe+10A2076: C5 78 2F C8 - vcomiss xmm9,xmm0
HorizonForbiddenWest.exe+10A207A: 72 25 - jb HorizonForbiddenWest.exe+10A20A1
HorizonForbiddenWest.exe+10A207C: 80 BF 91 01 00 00 00 - cmp byte ptr [rdi+00000191],00
HorizonForbiddenWest.exe+10A2083: 0F 84 92 00 00 00 - je HorizonForbiddenWest.exe+10A211B
HorizonForbiddenWest.exe+10A2089: C6 87 91 01 00 00 00 - mov byte ptr [rdi+00000191],00
HorizonForbiddenWest.exe+10A2090: 32 C0 - xor al,al
HorizonForbiddenWest.exe+10A2092: C7 87 94 01 00 00 00 00 80 BF - mov [rdi+00000194],BF800000
HorizonForbiddenWest.exe+10A209C: E9 45 02 00 00 - jmp HorizonForbiddenWest.exe+10A22E6
HorizonForbiddenWest.exe+10A20A1: C5 FA 10 BF 88 01 00 00 - vmovss xmm7,[rdi+00000188]
}
256883
"Get Trading Item Value"
Auto Assembler Script
[ENABLE]
aobscanmodule(getTradingItem,HorizonForbiddenWest.exe,48 8B 49 40 4C 8B F2 E8) // should be unique
alloc(newmem,$64,getTradingItem)
label(code)
label(return)
label(gTradingItem)
registersymbol(gTradingItem)
newmem:
code:
mov [gTradingItem],rcx
mov rcx,[rcx+40]
mov r14,rdx
jmp return
gTradingItem:
dq 0
getTradingItem:
jmp newmem
nop 2
return:
registersymbol(getTradingItem)
[DISABLE]
getTradingItem:
db 48 8B 49 40 4C 8B F2
unregistersymbol(getTradingItem)
dealloc(newmem)
unregistersymbol(gTradingItem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+13A7730
HorizonForbiddenWest.exe+13A771A: CC - int 3
HorizonForbiddenWest.exe+13A771B: CC - int 3
HorizonForbiddenWest.exe+13A771C: CC - int 3
HorizonForbiddenWest.exe+13A771D: CC - int 3
HorizonForbiddenWest.exe+13A771E: CC - int 3
HorizonForbiddenWest.exe+13A771F: CC - int 3
HorizonForbiddenWest.exe+13A7720: 48 89 6C 24 18 - mov [rsp+18],rbp
HorizonForbiddenWest.exe+13A7725: 48 89 74 24 20 - mov [rsp+20],rsi
HorizonForbiddenWest.exe+13A772A: 41 56 - push r14
HorizonForbiddenWest.exe+13A772C: 48 83 EC 40 - sub rsp,40
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+13A7730: 48 8B 49 40 - mov rcx,[rcx+40]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+13A7734: 4C 8B F2 - mov r14,rdx
HorizonForbiddenWest.exe+13A7737: E8 44 CD 9C FF - call HorizonForbiddenWest.exe+D74480
HorizonForbiddenWest.exe+13A773C: 48 8B E8 - mov rbp,rax
HorizonForbiddenWest.exe+13A773F: 48 83 78 28 00 - cmp qword ptr [rax+28],00
HorizonForbiddenWest.exe+13A7744: 75 15 - jne HorizonForbiddenWest.exe+13A775B
HorizonForbiddenWest.exe+13A7746: 33 F6 - xor esi,esi
HorizonForbiddenWest.exe+13A7748: 8B C6 - mov eax,esi
HorizonForbiddenWest.exe+13A774A: 48 8B 6C 24 60 - mov rbp,[rsp+60]
HorizonForbiddenWest.exe+13A774F: 48 8B 74 24 68 - mov rsi,[rsp+68]
HorizonForbiddenWest.exe+13A7754: 48 83 C4 40 - add rsp,40
}
256884
"Buy Value (Resource)"
0
4 Bytes
gTradingItem
20
0
28
28
0
40
40
256888
"Buy Value"
0
4 Bytes
gTradingItem
20
0
28
28
8
40
40
256886
"Buy Value (Trap)"
0
4 Bytes
gTradingItem
20
0
28
28
10
40
40
256889
"Buy Value (Outfit)"
0
4 Bytes
gTradingItem
20
0
28
28
28
40
40
256932
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-04-08
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonForbiddenWest.exe,8B C0 FE 49 8B 8E 40 01 00 00) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov rcx,[r14+00000140]
jmp return
INJECT+03:
jmp newmem
nop 2
return:
registersymbol(INJECT)
[DISABLE]
INJECT+03:
db 49 8B 8E 40 01 00 00
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+14FA5D4
HorizonForbiddenWest.exe+14FA5A7: 41 8B D4 - mov edx,r12d
HorizonForbiddenWest.exe+14FA5AA: 48 8B CB - mov rcx,rbx
HorizonForbiddenWest.exe+14FA5AD: E8 7E CD E7 FE - call HorizonForbiddenWest.exe+377330
HorizonForbiddenWest.exe+14FA5B2: 48 8B D6 - mov rdx,rsi
HorizonForbiddenWest.exe+14FA5B5: 49 8D 8E F8 00 00 00 - lea rcx,[r14+000000F8]
HorizonForbiddenWest.exe+14FA5BC: F2 48 0F 38 F1 D3 - crc32 rdx,rbx
HorizonForbiddenWest.exe+14FA5C2: 4C 8D 45 F0 - lea r8,[rbp-10]
HorizonForbiddenWest.exe+14FA5C6: E8 F5 96 C9 FE - call HorizonForbiddenWest.exe+193CC0
HorizonForbiddenWest.exe+14FA5CB: 48 8D 4D 58 - lea rcx,[rbp+58]
HorizonForbiddenWest.exe+14FA5CF: E8 5C 8B C0 FE - call HorizonForbiddenWest.exe+103130
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+14FA5D4: 49 8B 8E 40 01 00 00 - mov rcx,[r14+00000140]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+14FA5DB: 41 B8 0C 00 00 00 - mov r8d,0000000C
HorizonForbiddenWest.exe+14FA5E1: 48 89 75 58 - mov [rbp+58],rsi
HorizonForbiddenWest.exe+14FA5E5: 48 8B 41 10 - mov rax,[rcx+10]
HorizonForbiddenWest.exe+14FA5E9: 48 8B 50 50 - mov rdx,[rax+50]
HorizonForbiddenWest.exe+14FA5ED: 0F B6 41 39 - movzx eax,byte ptr [rcx+39]
HorizonForbiddenWest.exe+14FA5F1: 48 8D 0C 40 - lea rcx,[rax+rax*2]
HorizonForbiddenWest.exe+14FA5F5: 48 8B 42 50 - mov rax,[rdx+50]
HorizonForbiddenWest.exe+14FA5F9: 48 8D 15 28 0B 4A 00 - lea rdx,[HorizonForbiddenWest.exe+199B128]
HorizonForbiddenWest.exe+14FA600: 44 0F B6 64 C8 0C - movzx r12d,byte ptr [rax+rcx*8+0C]
HorizonForbiddenWest.exe+14FA606: 48 8D 4D 58 - lea rcx,[rbp+58]
}
257219
"Get Highlighted Weapon"
Auto Assembler Script
[ENABLE]
aobscanmodule(getWeapon,HorizonForbiddenWest.exe,4C 8B 50 30 48 63 40 28 4D 8D 1C) // should be unique
alloc(newmem,$64,getWeapon)
label(code)
label(return)
label(gWeapon)
registersymbol(gWeapon)
newmem:
code:
mov [gWeapon],rax
mov r10,[rax+30]
movsxd rax,dword ptr [rax+28]
jmp return
gWeapon:
dq 0
getWeapon:
jmp newmem
nop 3
return:
registersymbol(getWeapon)
[DISABLE]
getWeapon:
db 4C 8B 50 30 48 63 40 28
unregistersymbol(getWeapon)
dealloc(newmem)
unregistersymbol(gWeapon)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+15D15F7
HorizonForbiddenWest.exe+15D15D4: 55 - push rbp
HorizonForbiddenWest.exe+15D15D5: 41 54 - push r12
HorizonForbiddenWest.exe+15D15D7: 41 56 - push r14
HorizonForbiddenWest.exe+15D15D9: 41 57 - push r15
HorizonForbiddenWest.exe+15D15DB: 48 8D 6C 24 C8 - lea rbp,[rsp-38]
HorizonForbiddenWest.exe+15D15E0: 48 81 EC 38 01 00 00 - sub rsp,00000138
HorizonForbiddenWest.exe+15D15E7: 48 8B 85 80 00 00 00 - mov rax,[rbp+00000080]
HorizonForbiddenWest.exe+15D15EE: 4D 8B E1 - mov r12,r9
HorizonForbiddenWest.exe+15D15F1: 4C 8B F2 - mov r14,rdx
HorizonForbiddenWest.exe+15D15F4: 4C 8B F9 - mov r15,rcx
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+15D15F7: 4C 8B 50 30 - mov r10,[rax+30]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+15D15FB: 48 63 40 28 - movsxd rax,dword ptr [rax+28]
HorizonForbiddenWest.exe+15D15FF: 4D 8D 1C C2 - lea r11,[r10+rax*8]
HorizonForbiddenWest.exe+15D1603: 4D 3B D3 - cmp r10,r11
HorizonForbiddenWest.exe+15D1606: 0F 84 FA 0A 00 00 - je HorizonForbiddenWest.exe+15D2106
HorizonForbiddenWest.exe+15D160C: 49 8B 51 08 - mov rdx,[r9+08]
HorizonForbiddenWest.exe+15D1610: 4D 8B 01 - mov r8,[r9]
HorizonForbiddenWest.exe+15D1613: 4C 8D 0D 26 1A 1C 00 - lea r9,[HorizonForbiddenWest.exe+1793040]
HorizonForbiddenWest.exe+15D161A: 48 89 9C 24 30 01 00 00 - mov [rsp+00000130],rbx
HorizonForbiddenWest.exe+15D1622: 49 8B 1A - mov rbx,[r10]
HorizonForbiddenWest.exe+15D1625: 48 8B 43 20 - mov rax,[rbx+20]
}
257220
"Ammo Damage 1"
0
Float
gWeapon
50
20
0
30
0
40
0
30
257221
"Ammo Damage 1"
0
Float
gWeapon
50
20
0
30
0
40
50
30
257225
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-04-18
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonForbiddenWest.exe,32 FF 84 C0 74 38 45 84 F6 75 0C C5 FA 10 53 34) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
vmovss xmm2,[rbx+34]
jmp return
INJECT+0B:
jmp newmem
return:
registersymbol(INJECT)
[DISABLE]
INJECT+0B:
db C5 FA 10 53 34
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+15D1B59
HorizonForbiddenWest.exe+15D1B3D: 75 4D - jne HorizonForbiddenWest.exe+15D1B8C
HorizonForbiddenWest.exe+15D1B3F: 48 8B 4F 40 - mov rcx,[rdi+40]
HorizonForbiddenWest.exe+15D1B43: 48 85 C9 - test rcx,rcx
HorizonForbiddenWest.exe+15D1B46: 74 0C - je HorizonForbiddenWest.exe+15D1B54
HorizonForbiddenWest.exe+15D1B48: 49 8B D4 - mov rdx,r12
HorizonForbiddenWest.exe+15D1B4B: E8 D0 76 32 FF - call HorizonForbiddenWest.exe+8F9220
HorizonForbiddenWest.exe+15D1B50: 84 C0 - test al,al
HorizonForbiddenWest.exe+15D1B52: 74 38 - je HorizonForbiddenWest.exe+15D1B8C
HorizonForbiddenWest.exe+15D1B54: 45 84 F6 - test r14b,r14b
HorizonForbiddenWest.exe+15D1B57: 75 0C - jne HorizonForbiddenWest.exe+15D1B65
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+15D1B59: C5 FA 10 53 34 - vmovss xmm2,[rbx+34]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+15D1B5E: C5 FA 10 4B 30 - vmovss xmm1,[rbx+30]
HorizonForbiddenWest.exe+15D1B63: EB 10 - jmp HorizonForbiddenWest.exe+15D1B75
HorizonForbiddenWest.exe+15D1B65: 41 80 FE 01 - cmp r14b,01
HorizonForbiddenWest.exe+15D1B69: 75 21 - jne HorizonForbiddenWest.exe+15D1B8C
HorizonForbiddenWest.exe+15D1B6B: C5 FA 10 53 3C - vmovss xmm2,[rbx+3C]
HorizonForbiddenWest.exe+15D1B70: C5 FA 10 4B 38 - vmovss xmm1,[rbx+38]
HorizonForbiddenWest.exe+15D1B75: 48 8B 43 28 - mov rax,[rbx+28]
HorizonForbiddenWest.exe+15D1B79: 48 8D 4C 24 40 - lea rcx,[rsp+40]
HorizonForbiddenWest.exe+15D1B7E: 4C 8B 4B 20 - mov r9,[rbx+20]
HorizonForbiddenWest.exe+15D1B82: 48 89 44 24 20 - mov [rsp+20],rax
}
257328
"Potion Data?"
Auto Assembler Script
{ Game : HorizonForbiddenWest.exe
Version:
Date : 2024-05-16
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonForbiddenWest.exe,49 8B 4F 58 44 8B 44 D1 08) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov rcx,[r15+58]
mov r8d,[rcx+rdx*8+08]
jmp return
INJECT:
jmp newmem
nop 4
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 49 8B 4F 58 44 8B 44 D1 08
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+1203116
HorizonForbiddenWest.exe+12030F4: E8 E7 A5 EF FE - call HorizonForbiddenWest.exe+FD6E0
HorizonForbiddenWest.exe+12030F9: 8B F8 - mov edi,eax
HorizonForbiddenWest.exe+12030FB: 83 F8 FF - cmp eax,-01
HorizonForbiddenWest.exe+12030FE: 75 04 - jne HorizonForbiddenWest.exe+1203104
HorizonForbiddenWest.exe+1203100: 41 8B 7F 64 - mov edi,[r15+64]
HorizonForbiddenWest.exe+1203104: 48 8B D3 - mov rdx,rbx
HorizonForbiddenWest.exe+1203107: 49 8B CC - mov rcx,r12
HorizonForbiddenWest.exe+120310A: E8 01 E3 FF FF - call HorizonForbiddenWest.exe+1201410
HorizonForbiddenWest.exe+120310F: 48 63 CF - movsxd rcx,edi
HorizonForbiddenWest.exe+1203112: 48 8D 14 49 - lea rdx,[rcx+rcx*2]
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+1203116: 49 8B 4F 58 - mov rcx,[r15+58]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+120311A: 44 8B 44 D1 08 - mov r8d,[rcx+rdx*8+08]
HorizonForbiddenWest.exe+120311F: 44 2B C0 - sub r8d,eax
HorizonForbiddenWest.exe+1203122: 44 0F 48 C5 - cmovs r8d,ebp
HorizonForbiddenWest.exe+1203126: 45 89 45 18 - mov [r13+18],r8d
HorizonForbiddenWest.exe+120312A: E9 DF 00 00 00 - jmp HorizonForbiddenWest.exe+120320E
HorizonForbiddenWest.exe+120312F: 48 85 F6 - test rsi,rsi
HorizonForbiddenWest.exe+1203132: 75 0B - jne HorizonForbiddenWest.exe+120313F
HorizonForbiddenWest.exe+1203134: 48 8B 87 C0 00 00 00 - mov rax,[rdi+000000C0]
HorizonForbiddenWest.exe+120313B: 8B 18 - mov ebx,[rax]
HorizonForbiddenWest.exe+120313D: EB 4B - jmp HorizonForbiddenWest.exe+120318A
}
256876
"4x Loot per Kill"
0080FF
Auto Assembler Script
[ENABLE]
aobscanmodule(getMoreItems,HorizonForbiddenWest.exe,8B 42 50 85 DB) // should be unique
alloc(newmem,$64,getMoreItems)
label(code)
label(return)
newmem:
code:
mov eax,[rdx+50]
imul eax,eax,#4
test ebx,ebx
jmp return
getMoreItems:
jmp newmem
return:
registersymbol(getMoreItems)
[DISABLE]
getMoreItems:
db 8B 42 50 85 DB
unregistersymbol(getMoreItems)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonForbiddenWest.exe+11FC294
HorizonForbiddenWest.exe+11FC265: 5D - pop rbp
HorizonForbiddenWest.exe+11FC266: C3 - ret
HorizonForbiddenWest.exe+11FC267: 41 BA FF FF FF 7F - mov r10d,7FFFFFFF
HorizonForbiddenWest.exe+11FC26D: 44 89 54 24 44 - mov [rsp+44],r10d
HorizonForbiddenWest.exe+11FC272: EB 04 - jmp HorizonForbiddenWest.exe+11FC278
HorizonForbiddenWest.exe+11FC274: 4C 8B 4D 5F - mov r9,[rbp+5F]
HorizonForbiddenWest.exe+11FC278: 49 8B 55 00 - mov rdx,[r13+00]
HorizonForbiddenWest.exe+11FC27C: 48 89 B4 24 40 01 00 00 - mov [rsp+00000140],rsi
HorizonForbiddenWest.exe+11FC284: 4C 89 A4 24 F8 00 00 00 - mov [rsp+000000F8],r12
HorizonForbiddenWest.exe+11FC28C: 4C 89 B4 24 F0 00 00 00 - mov [rsp+000000F0],r14
// ---------- INJECTING HERE ----------
HorizonForbiddenWest.exe+11FC294: 8B 42 50 - mov eax,[rdx+50]
// ---------- DONE INJECTING ----------
HorizonForbiddenWest.exe+11FC297: 85 DB - test ebx,ebx
HorizonForbiddenWest.exe+11FC299: 7E 07 - jle HorizonForbiddenWest.exe+11FC2A2
HorizonForbiddenWest.exe+11FC29B: 3B C3 - cmp eax,ebx
HorizonForbiddenWest.exe+11FC29D: 0F 4C D8 - cmovl ebx,eax
HorizonForbiddenWest.exe+11FC2A0: EB 02 - jmp HorizonForbiddenWest.exe+11FC2A4
HorizonForbiddenWest.exe+11FC2A2: 8B D8 - mov ebx,eax
HorizonForbiddenWest.exe+11FC2A4: 48 8B 4A 48 - mov rcx,[rdx+48]
HorizonForbiddenWest.exe+11FC2A8: 48 85 C9 - test rcx,rcx
HorizonForbiddenWest.exe+11FC2AB: 74 1A - je HorizonForbiddenWest.exe+11FC2C7
HorizonForbiddenWest.exe+11FC2AD: 4C 8B 01 - mov r8,[rcx]
}
1.2.7
- Updated for 1.5
- Updated for 1.4.59
- Updated for 1.3.55
- Updated Highlighted Item with Coils
- Updated for 1.2.48
- Updated Get Machine Strike Unit
- Update for 1.1.47
- Update for 1.0.43
- Added Infinite Jump
- Added Component Destroy
- Added Debug Options
- Initial Release