0
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "Horizon Zero Dawn Remastered"
local gameProcess = "HorizonZeroDawnRemastered.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2024 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF. All other sources are allowed with permission.")
else
end
[DISABLE]
1
"[POINTERS]"
Auto Assembler Script
[ENABLE]
define(Player,HorizonZeroDawnRemastered.exe+99A8D28)
define(Capacity,HorizonZeroDawnRemastered.exe+99A88A8)
define(Statistics,HorizonZeroDawnRemastered.exe+99A8D30)
define(Timer,HorizonZeroDawnRemastered.exe+99A9A38)
define(Medicine,HorizonZeroDawnRemastered.exe+99A8448)
registersymbol(Player)
registersymbol(Capacity)
registersymbol(Statistics)
registersymbol(Timer)
registersymbol(Medicine)
[DISABLE]
unregistersymbol(Player)
unregistersymbol(Capacity)
unregistersymbol(Statistics)
unregistersymbol(Timer)
unregistersymbol(Medicine)
8
"Data"
1
7
"InventoryCapacityComponentResource"
1
1337092304
"Header"
0
String
64
0
0
1
Capacity
0
20
138
E0
110
A70
AE0
6F8
20
D8
1337092305
"Weapons"
0
4 Bytes
Capacity
28
138
E0
110
A70
AE0
6F8
20
D8
1337092306
"??"
0
4 Bytes
Capacity
2C
138
E0
110
A70
AE0
6F8
20
D8
1337092307
"??"
0
4 Bytes
Capacity
30
138
E0
110
A70
AE0
6F8
20
D8
1337092308
"Modifications"
0
4 Bytes
Capacity
34
138
E0
110
A70
AE0
6F8
20
D8
1337092309
"Outfits"
0
4 Bytes
Capacity
38
138
E0
110
A70
AE0
6F8
20
D8
1337092310
"Resources"
0
4 Bytes
Capacity
3C
138
E0
110
A70
AE0
6F8
20
D8
14
"Player"
1
1337092190
"Base Health"
0
Float
Player
2C
30
208
30
1337092189
"Godmode"
0
Byte
Player
60
208
30
13
"Health"
0
Float
Player
64
208
30
15
"Max"
0
Float
Player
68
208
30
16
"Bonus"
0
Float
Player
74
208
30
1337092295
"Medicine Pouch"
1
1337092294
"Medicine"
0
Float
Player
60
E8
2A8
30
1337092296
"Max"
0
Float
Player
64
E8
2A8
30
1337092351
"Medicine Pouch (Alt)"
1
1337092360
"Medicine"
0
Float
Medicine
60
E0
20
18
18
1337092361
"Max"
0
Float
Medicine
64
E0
20
18
18
1337092196
"Progress"
1
1337092195
"Experience"
0
4 Bytes
Player
58
170
2A8
30
1337092200
"Level"
0
4 Bytes
Player
5C
170
2A8
30
1337092201
"Max Level"
0
4 Bytes
Player
60
170
2A8
30
1337092354
"Experience (Prestige)"
0
4 Bytes
Player
64
170
2A8
30
1337092202
"Skill Points"
0
4 Bytes
Player
68
170
2A8
30
1337092290
"Statistics"
1
1337092350
"Challenge Timers"
1
1337092348
"Challenge 1"
0
Float
Timer
1C
20
0
18
60
1337092349
"Challenge 2"
0
Float
Timer
1C
20
8
18
60
1337092317
"Challenge 3"
0
Float
Timer
1C
20
10
18
60
2
"[SCRIPTS]"
1
1337092225
"Get Coil"
Auto Assembler Script
[ENABLE]
aobscanmodule(getCoil,HorizonZeroDawnRemastered.exe,49 8B 56 60 48 8D 4C 24 38) // should be unique
alloc(newmem,$64,getCoil)
label(code)
label(return)
registersymbol(gCoil)
label(gCoil)
newmem:
code:
mov [gCoil],r14
mov rdx,[r14+60]
lea rcx,[rsp+38]
jmp return
gCoil:
dq 0
getCoil:
jmp newmem
nop 4
return:
registersymbol(getCoil)
[DISABLE]
getCoil:
db 49 8B 56 60 48 8D 4C 24 38
unregistersymbol(getCoil)
dealloc(newmem)
unregistersymbol(gCoil)
{
// ORIGINAL CODE - INJECTION POINT: HorizonZeroDawnRemastered.exe+106BA8B
HorizonZeroDawnRemastered.exe+106BA63: 48 8B 44 24 30 - mov rax,[rsp+30]
HorizonZeroDawnRemastered.exe+106BA68: 48 83 C0 F0 - add rax,-10
HorizonZeroDawnRemastered.exe+106BA6C: 48 3B C7 - cmp rax,rdi
HorizonZeroDawnRemastered.exe+106BA6F: 74 05 - je HorizonZeroDawnRemastered.exe+106BA76
HorizonZeroDawnRemastered.exe+106BA71: F0 44 0F C1 20 - lock xadd [rax],r12d
HorizonZeroDawnRemastered.exe+106BA76: 48 83 C0 10 - add rax,10
HorizonZeroDawnRemastered.exe+106BA7A: 48 89 43 30 - mov [rbx+30],rax
HorizonZeroDawnRemastered.exe+106BA7E: 48 8D 56 68 - lea rdx,[rsi+68]
HorizonZeroDawnRemastered.exe+106BA82: 48 8D 4B 38 - lea rcx,[rbx+38]
HorizonZeroDawnRemastered.exe+106BA86: E8 E5 90 02 FF - call HorizonZeroDawnRemastered.exe+94B70
// ---------- INJECTING HERE ----------
HorizonZeroDawnRemastered.exe+106BA8B: 49 8B 56 60 - mov rdx,[r14+60]
// ---------- DONE INJECTING ----------
HorizonZeroDawnRemastered.exe+106BA8F: 48 8D 4C 24 38 - lea rcx,[rsp+38]
HorizonZeroDawnRemastered.exe+106BA94: E8 47 F8 DE FF - call HorizonZeroDawnRemastered.exe+E5B2E0
HorizonZeroDawnRemastered.exe+106BA99: 48 8B D0 - mov rdx,rax
HorizonZeroDawnRemastered.exe+106BA9C: 48 8D 4B 40 - lea rcx,[rbx+40]
HorizonZeroDawnRemastered.exe+106BAA0: E8 CB 90 02 FF - call HorizonZeroDawnRemastered.exe+94B70
HorizonZeroDawnRemastered.exe+106BAA5: 48 8B 44 24 38 - mov rax,[rsp+38]
HorizonZeroDawnRemastered.exe+106BAAA: 4C 8B A4 24 80 00 00 00 - mov r12,[rsp+00000080]
HorizonZeroDawnRemastered.exe+106BAB2: 48 85 C0 - test rax,rax
HorizonZeroDawnRemastered.exe+106BAB5: 74 1D - je HorizonZeroDawnRemastered.exe+106BAD4
HorizonZeroDawnRemastered.exe+106BAB7: 48 8D 48 F0 - lea rcx,[rax-10]
}
1337092226
"Stat Pointer"
1
0
8 Bytes
gCoil
60
1337092232
"Stat 1"
1
1337092230
"Amount"
0
4 Bytes
gCoil
10
60
1337092231
"Type"
0
2 Bytes
gCoil
18
60
1337092233
"Name"
0
String
16
0
0
1
gCoil
0
20
18
60
1337092234
"Stat 2"
1
1337092235
"Amount"
0
4 Bytes
gCoil
30
60
1337092236
"Type"
0
2 Bytes
gCoil
38
60
1337092237
"Name"
0
String
16
0
0
1
gCoil
0
20
38
60
1337092238
"Stat 3"
1
1337092239
"Amount"
0
4 Bytes
gCoil
50
60
1337092240
"Type"
0
2 Bytes
gCoil
58
60
1337092241
"Name"
0
String
16
0
0
1
gCoil
0
20
58
60
1337092242
"Stat 4"
1
1337092243
"Amount"
0
4 Bytes
gCoil
70
60
1337092244
"Type"
0
2 Bytes
gCoil
78
60
1337092245
"Name"
0
String
16
0
0
1
gCoil
0
20
78
60
1337092318
"Get Coil"
Auto Assembler Script
[ENABLE]
alloc(cCoilTable,$128)
aobscanmodule(getCoil,HorizonZeroDawnRemastered.exe,49 8B 56 60 48 8D 4C 24 38) // should be unique
alloc(newmem,$64,getCoil)
label(code)
label(return)
registersymbol(gCoil)
label(gCoil)
label(cTable)
registersymbol(cTable)
cCoilTable:
cTable:
dd 0
newmem:
code:
mov [gCoil],r14
mov rdx,[r14+60]
lea rcx,[rsp+38]
jmp return
gCoil:
dq 0
getCoil:
jmp newmem
nop 4
return:
registersymbol(getCoil)
[DISABLE]
getCoil:
db 49 8B 56 60 48 8D 4C 24 38
unregistersymbol(getCoil)
dealloc(newmem)
unregistersymbol(gCoil)
unregistersymbol(cTable)
dealloc(cCoilTable)
{
// ORIGINAL CODE - INJECTION POINT: HorizonZeroDawnRemastered.exe+106BA8B
HorizonZeroDawnRemastered.exe+106BA63: 48 8B 44 24 30 - mov rax,[rsp+30]
HorizonZeroDawnRemastered.exe+106BA68: 48 83 C0 F0 - add rax,-10
HorizonZeroDawnRemastered.exe+106BA6C: 48 3B C7 - cmp rax,rdi
HorizonZeroDawnRemastered.exe+106BA6F: 74 05 - je HorizonZeroDawnRemastered.exe+106BA76
HorizonZeroDawnRemastered.exe+106BA71: F0 44 0F C1 20 - lock xadd [rax],r12d
HorizonZeroDawnRemastered.exe+106BA76: 48 83 C0 10 - add rax,10
HorizonZeroDawnRemastered.exe+106BA7A: 48 89 43 30 - mov [rbx+30],rax
HorizonZeroDawnRemastered.exe+106BA7E: 48 8D 56 68 - lea rdx,[rsi+68]
HorizonZeroDawnRemastered.exe+106BA82: 48 8D 4B 38 - lea rcx,[rbx+38]
HorizonZeroDawnRemastered.exe+106BA86: E8 E5 90 02 FF - call HorizonZeroDawnRemastered.exe+94B70
// ---------- INJECTING HERE ----------
HorizonZeroDawnRemastered.exe+106BA8B: 49 8B 56 60 - mov rdx,[r14+60]
// ---------- DONE INJECTING ----------
HorizonZeroDawnRemastered.exe+106BA8F: 48 8D 4C 24 38 - lea rcx,[rsp+38]
HorizonZeroDawnRemastered.exe+106BA94: E8 47 F8 DE FF - call HorizonZeroDawnRemastered.exe+E5B2E0
HorizonZeroDawnRemastered.exe+106BA99: 48 8B D0 - mov rdx,rax
HorizonZeroDawnRemastered.exe+106BA9C: 48 8D 4B 40 - lea rcx,[rbx+40]
HorizonZeroDawnRemastered.exe+106BAA0: E8 CB 90 02 FF - call HorizonZeroDawnRemastered.exe+94B70
HorizonZeroDawnRemastered.exe+106BAA5: 48 8B 44 24 38 - mov rax,[rsp+38]
HorizonZeroDawnRemastered.exe+106BAAA: 4C 8B A4 24 80 00 00 00 - mov r12,[rsp+00000080]
HorizonZeroDawnRemastered.exe+106BAB2: 48 85 C0 - test rax,rax
HorizonZeroDawnRemastered.exe+106BAB5: 74 1D - je HorizonZeroDawnRemastered.exe+106BAD4
HorizonZeroDawnRemastered.exe+106BAB7: 48 8D 48 F0 - lea rcx,[rax-10]
}
1337092339
"Price"
0
4 Bytes
gCoil
2C
38
A0
1337092363
"Rarity"
0
4 Bytes
gCoil
48
68
A0
1337092362
"Slots"
0
4 Bytes
gCoil
58
1337092344
"Stat Pointer"
1
0
8 Bytes
gCoil
60
1337092320
"Stat 1"
1
1337092321
"Amount"
0
4 Bytes
gCoil
10
60
1337092322
"Type"
0
2 Bytes
gCoil
18
60
1337092323
"Name"
0
String
16
0
0
1
gCoil
0
20
18
60
1337092336
"AOB"
1
0
Array of byte
32
gCoil
0
60
1337092324
"Stat 2"
1
1337092325
"Amount"
0
4 Bytes
gCoil
30
60
1337092326
"Type"
0
2 Bytes
gCoil
38
60
1337092327
"Name"
0
String
16
0
0
1
gCoil
0
20
38
60
1337092337
"AOB"
1
0
Array of byte
32
gCoil
20
60
1337092328
"Stat 3"
1
1337092329
"Amount"
0
4 Bytes
gCoil
50
60
1337092330
"Type"
0
2 Bytes
gCoil
58
60
1337092331
"Name"
0
String
16
0
0
1
gCoil
0
20
58
60
1337092338
"AOB"
1
0
Array of byte
32
gCoil
40
60
1337092332
"Stat 4"
1
1337092333
"Amount"
0
4 Bytes
gCoil
70
60
1337092334
"Type"
0
2 Bytes
gCoil
78
60
1337092335
"Name"
0
String
16
0
0
1
gCoil
0
20
78
60
1337092341
"Custom Table Pointer"
1
1337092340
"Stat 1"
1
0
Array of byte
32
cTable
1337092342
"Stat 2"
1
0
Array of byte
32
cTable+20
1337092343
"Stat 3"
1
0
Array of byte
32
cTable+40
1337092345
"Stat 4"
1
0
Array of byte
32
cTable+60
1337092346
"Stat 5"
1
0
Array of byte
32
cTable+80
3
"[DEBUG]"
0000FF
1
1337092187
"Fetch Base Addresses (Easy)"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"4C 8B 35 ?? ?? ?? ?? 45 33 E4 49 8B CE 4C 89 75 58 4C 89 65 E8 4C 89 65 F0",
"48 83 3D ?? ?? ?? ?? 00 74 44 48 8B 58 40 48 63 78 38",
"48 8B 0D ?? ?? ?? ?? 49 8D 56 08 E8 ?? ?? ?? ?? 84 C0",
"48 8B 05 ?? ?? ?? ?? 48 8B 68 60 48 8D 75 30 48 8B CE",
"48 83 3D ?? ?? ?? ?? 00 0F 84 ?? ?? ?? ?? 49 8B 85 A0 00 00 00 48 8D 54 24 30 4D 8B 34 04 49 8B 5E 20"
}
local aobNames = {
"Player",
"CapacityComponentResource",
"Statistics",
"Timer",
"Medicine Alt"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: %s+%X",aobNames[i],process,address))
end
[DISABLE]
1337092247
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonZeroDawnRemastered.exe
Version:
Date : 2024-11-01
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(getCoil,HorizonZeroDawnRemastered.exe,48 8B 41 60 48 8D 55 F7) // should be unique
alloc(newmem,$64,getCoil)
label(code)
label(return)
registersymbol(gCoil)
label(gCoil)
newmem:
code:
mov [gCoil],rcx
mov rax,[rcx+60]
lea rdx,[rbp-09]
jmp return
gCoil:
dq 0
getCoil:
jmp newmem
nop 3
return:
registersymbol(getCoil)
[DISABLE]
getCoil:
db 48 8B 41 60 48 8D 55 F7
unregistersymbol(getCoil)
dealloc(newmem)
unregistersymbol(gCoil)
{
// ORIGINAL CODE - INJECTION POINT: HorizonZeroDawnRemastered.exe+B77863
HorizonZeroDawnRemastered.exe+B7783E: 48 85 C0 - test rax,rax
HorizonZeroDawnRemastered.exe+B77841: 74 18 - je HorizonZeroDawnRemastered.exe+B7785B
HorizonZeroDawnRemastered.exe+B77843: 48 8D 88 A0 02 00 00 - lea rcx,[rax+000002A0]
HorizonZeroDawnRemastered.exe+B7784A: 48 8D 15 3F 6B 5C 01 - lea rdx,[HorizonZeroDawnRemastered.exe+213E390]
HorizonZeroDawnRemastered.exe+B77851: E8 EA 03 BC FF - call HorizonZeroDawnRemastered.exe+737C40
HorizonZeroDawnRemastered.exe+B77856: 48 8B C8 - mov rcx,rax
HorizonZeroDawnRemastered.exe+B77859: EB 03 - jmp HorizonZeroDawnRemastered.exe+B7785E
HorizonZeroDawnRemastered.exe+B7785B: 49 8B CF - mov rcx,r15
HorizonZeroDawnRemastered.exe+B7785E: 48 85 C9 - test rcx,rcx
HorizonZeroDawnRemastered.exe+B77861: 74 1B - je HorizonZeroDawnRemastered.exe+B7787E
// ---------- INJECTING HERE ----------
HorizonZeroDawnRemastered.exe+B77863: 48 8B 41 60 - mov rax,[rcx+60]
// ---------- DONE INJECTING ----------
HorizonZeroDawnRemastered.exe+B77867: 48 8D 55 F7 - lea rdx,[rbp-09]
HorizonZeroDawnRemastered.exe+B7786B: 48 89 45 F7 - mov [rbp-09],rax
HorizonZeroDawnRemastered.exe+B7786F: 8B 41 58 - mov eax,[rcx+58]
HorizonZeroDawnRemastered.exe+B77872: 48 8D 4D E7 - lea rcx,[rbp-19]
HorizonZeroDawnRemastered.exe+B77876: 89 45 FF - mov [rbp-01],eax
HorizonZeroDawnRemastered.exe+B77879: E8 42 39 03 00 - call HorizonZeroDawnRemastered.exe+BAB1C0
HorizonZeroDawnRemastered.exe+B7787E: 49 8B 46 30 - mov rax,[r14+30]
HorizonZeroDawnRemastered.exe+B77882: FF C7 - inc edi
HorizonZeroDawnRemastered.exe+B77884: 48 FF C3 - inc rbx
HorizonZeroDawnRemastered.exe+B77887: 48 83 C6 18 - add rsi,18
}
1337092249
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonZeroDawnRemastered.exe
Version:
Date : 2024-11-02
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonZeroDawnRemastered.exe,8B 44 11 10 89 02) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov eax,[rcx+rdx+10]
mov eax,#85
mov [rdx],eax
jmp return
INJECT:
jmp newmem
nop
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 8B 44 11 10 89 02
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonZeroDawnRemastered.exe+106ECF7
HorizonZeroDawnRemastered.exe+106ECCF: 4C 2B CD - sub r9,rbp
HorizonZeroDawnRemastered.exe+106ECD2: 4C 8D 15 FF 8A 92 00 - lea r10,[HorizonZeroDawnRemastered.exe+19977D8]
HorizonZeroDawnRemastered.exe+106ECD9: 4C 8D 1D 70 8F 92 00 - lea r11,[HorizonZeroDawnRemastered.exe+1997C50]
HorizonZeroDawnRemastered.exe+106ECE0: 48 8D 42 F0 - lea rax,[rdx-10]
HorizonZeroDawnRemastered.exe+106ECE4: 48 85 C0 - test rax,rax
HorizonZeroDawnRemastered.exe+106ECE7: 74 32 - je HorizonZeroDawnRemastered.exe+106ED1B
HorizonZeroDawnRemastered.exe+106ECE9: 49 8B 4F 08 - mov rcx,[r15+08]
HorizonZeroDawnRemastered.exe+106ECED: 49 03 C9 - add rcx,r9
HorizonZeroDawnRemastered.exe+106ECF0: 4C 89 10 - mov [rax],r10
HorizonZeroDawnRemastered.exe+106ECF3: 4C 89 5A F8 - mov [rdx-08],r11
// ---------- INJECTING HERE ----------
HorizonZeroDawnRemastered.exe+106ECF7: 8B 44 11 10 - mov eax,[rcx+rdx+10]
// ---------- DONE INJECTING ----------
HorizonZeroDawnRemastered.exe+106ECFB: 89 02 - mov [rdx],eax
HorizonZeroDawnRemastered.exe+106ECFD: 48 8B 44 11 18 - mov rax,[rcx+rdx+18]
HorizonZeroDawnRemastered.exe+106ED02: 48 89 42 08 - mov [rdx+08],rax
HorizonZeroDawnRemastered.exe+106ED06: 4C 8B 44 11 18 - mov r8,[rcx+rdx+18]
HorizonZeroDawnRemastered.exe+106ED0B: 4D 85 C0 - test r8,r8
HorizonZeroDawnRemastered.exe+106ED0E: 74 0B - je HorizonZeroDawnRemastered.exe+106ED1B
HorizonZeroDawnRemastered.exe+106ED10: B8 01 00 00 00 - mov eax,00000001
HorizonZeroDawnRemastered.exe+106ED15: F0 41 0F C1 40 18 - lock xadd [r8+18],eax
HorizonZeroDawnRemastered.exe+106ED1B: 41 8B 1F - mov ebx,[r15]
HorizonZeroDawnRemastered.exe+106ED1E: FF C6 - inc esi
}
1337092293
"Auto Assemble script"
Auto Assembler Script
{ Game : HorizonZeroDawnRemastered.exe
Version:
Date : 2024-11-10
Author : Administrator
This script does blah blah blah
}
[ENABLE]
aobscanmodule(INJECT,HorizonZeroDawnRemastered.exe,8B 4C 30 14 89 4C 24 40) // should be unique
alloc(newmem,$1000,INJECT)
label(code)
label(return)
newmem:
code:
mov ecx,[rax+rsi+14]
mov ecx,#1
mov [rsp+40],ecx
jmp return
INJECT:
jmp newmem
nop 3
return:
registersymbol(INJECT)
[DISABLE]
INJECT:
db 8B 4C 30 14 89 4C 24 40
unregistersymbol(INJECT)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: HorizonZeroDawnRemastered.exe+873326
HorizonZeroDawnRemastered.exe+8732FD: 48 8D 4F 08 - lea rcx,[rdi+08]
HorizonZeroDawnRemastered.exe+873301: E8 CA 87 8F FF - call HorizonZeroDawnRemastered.exe+16BAD0
HorizonZeroDawnRemastered.exe+873306: 83 F8 FF - cmp eax,-01
HorizonZeroDawnRemastered.exe+873309: 75 30 - jne HorizonZeroDawnRemastered.exe+87333B
HorizonZeroDawnRemastered.exe+87330B: 48 8D 55 04 - lea rdx,[rbp+04]
HorizonZeroDawnRemastered.exe+87330F: 49 8B CE - mov rcx,r14
HorizonZeroDawnRemastered.exe+873312: E8 B9 0F C9 FF - call HorizonZeroDawnRemastered.exe+5042D0
HorizonZeroDawnRemastered.exe+873317: 48 8B 47 18 - mov rax,[rdi+18]
HorizonZeroDawnRemastered.exe+87331B: 48 8D 54 24 40 - lea rdx,[rsp+40]
HorizonZeroDawnRemastered.exe+873320: 41 B8 04 00 00 00 - mov r8d,00000004
// ---------- INJECTING HERE ----------
HorizonZeroDawnRemastered.exe+873326: 8B 4C 30 14 - mov ecx,[rax+rsi+14]
// ---------- DONE INJECTING ----------
HorizonZeroDawnRemastered.exe+87332A: 89 4C 24 40 - mov [rsp+40],ecx
HorizonZeroDawnRemastered.exe+87332E: 49 8B 8E 60 11 00 00 - mov rcx,[r14+00001160]
HorizonZeroDawnRemastered.exe+873335: 48 8B 01 - mov rax,[rcx]
HorizonZeroDawnRemastered.exe+873338: FF 50 08 - call qword ptr [rax+08]
HorizonZeroDawnRemastered.exe+87333B: 8B 57 24 - mov edx,[rdi+24]
HorizonZeroDawnRemastered.exe+87333E: 66 90 - nop 2
HorizonZeroDawnRemastered.exe+873340: 48 63 C3 - movsxd rax,ebx
HorizonZeroDawnRemastered.exe+873343: FF C3 - inc ebx
HorizonZeroDawnRemastered.exe+873345: 3B DA - cmp ebx,edx
HorizonZeroDawnRemastered.exe+873347: 7D 8D - jnl HorizonZeroDawnRemastered.exe+8732D6
}
Code :mov edi,[rax+rdx*8+14]
HorizonZeroDawnRemastered.exe+73DEB1
3C
D0
00
74
16
8B
7C
D0
14
48
85
DB
74
09
Code :vsubss xmm1,xmm0,[rax+1C]
HorizonZeroDawnRemastered.exe+DFA821
C5
FA
10
40
14
C5
FA
5C
48
1C
C5
C2
5F
D1
C5
1.4
- Updated for Patch 1.4
- Updated for Patch 1.3
- Updated for Patch 1.2
- Updated for Patch 1.1
- Initial Release
AOB - Capacity
05 00 00 00 0A 00 00 00 01 00 00 00 0A 00 00 00 05 00 00 00 14 00 00 00 01