0
"[ACTIVATE]"
Auto Assembler Script
// Original Code by G40sty.
[ENABLE]
{$lua}
local gameName = "Hogwarts Legacy"
local gameProcess = "HogwartsLegacy.exe"
if getProcessIDFromProcessName(gameProcess) ~= nil then
if readInteger(process) == nil then
openProcess(gameProcess)
else
if readInteger(process) ~= readInteger(gameProcess) then
openProcess(gameProcess)
end
end
else
beep() error(showMessage(string.format("%s is not running.",gameName)))
end
--; Auto Attach Process For User
if syntaxcheck then return end
if messageDialog([[
Copyright © 2023 OpenCheatTables.com
Table Creator: Marcus101RR
Would you like to read additional information?
]],mtInformation,mbYes,mbNo) == mrYes then
messageDialog("This information has been added to deter users of FRF (Fearless Revolution Forums) to violate the GPL License. You are hereby informed that use of this table is strictly forbidden from distribution, upload, or alterations with or without consent from this author on FRF or affiliates thereof. All other sources are allowed with permission.")
else
end
[DISABLE]
4
"[POINTERS]"
Auto Assembler Script
[ENABLE]
define(HL_Player,HogwartsLegacy.exe+986BF60)
define(HL_Character,HogwartsLegacy.exe+94C45C8)
define(HL_Data,HogwartsLegacy.exe+94CA538)
registersymbol(HL_Player)
registersymbol(HL_Character)
registersymbol(HL_Data)
[DISABLE]
unregistersymbol(HL_Player)
unregistersymbol(HL_Character)
unregistersymbol(HL_Data)
64
"Data"
1
73
"Desk of Description Limit"
0
4 Bytes
HL_Data
104
698
10
428
63
"Large Hopping Pot Limit"
0
4 Bytes
HL_Data
1F8
698
10
428
72
"Refiner Limit"
0
4 Bytes
HL_Data
26C
698
10
428
74
"Small Hopping Pot Limit"
0
4 Bytes
HL_Data
35C
698
10
428
66
"Small Potion Station Limit"
0
4 Bytes
HL_Data
3D4
698
10
428
14
"Player"
1
82
"Offense"
0
Float
HL_Player
1F0C
278
30
76
"Defense"
0
Float
HL_Player
1F9C
278
30
79
"Health"
0
Float
HL_Player
1A4
D30
278
30
3
"Character"
1
12
"Experience"
0
4 Bytes
HL_Character
38
38
"Starting Experience"
0
4 Bytes
HL_Character
3C
39
"Last Experience"
0
4 Bytes
HL_Character
40
13
"Level"
0
4 Bytes
HL_Character
44
40
"??"
0
4 Bytes
HL_Character
48
5
"[SCRIPTS]"
1
6
"Get Health"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-11
Author : Administrator
Get HP Player
}
[ENABLE]
aobscanmodule(getHP,HogwartsLegacy.exe,48 8B 40 08 48 85 C0 75 22) // should be unique
alloc(newmem,$64,getHP)
label(code)
label(return)
label(gHP)
registersymbol(gHP)
newmem:
code:
mov [gHP],rax
mov rax,[rax+08]
test rax,rax
jmp return
gHP:
dq 0
getHP:
jmp newmem
nop 2
return:
registersymbol(getHP)
[DISABLE]
getHP:
db 48 8B 40 08 48 85 C0
unregistersymbol(getHP)
dealloc(newmem)
unregistersymbol(gHP)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2D035F1
HogwartsLegacy.exe+2D035CD: 48 8D 48 38 - lea rcx,[rax+38]
HogwartsLegacy.exe+2D035D1: E8 3A 2B 27 FE - call HogwartsLegacy.exe+F76110
HogwartsLegacy.exe+2D035D6: 48 63 4C 24 30 - movsxd rcx,dword ptr [rsp+30]
HogwartsLegacy.exe+2D035DB: 83 F9 FF - cmp ecx,-01
HogwartsLegacy.exe+2D035DE: 74 1A - je HogwartsLegacy.exe+2D035FA
HogwartsLegacy.exe+2D035E0: 48 8B 47 38 - mov rax,[rdi+38]
HogwartsLegacy.exe+2D035E4: 48 8D 0C 49 - lea rcx,[rcx+rcx*2]
HogwartsLegacy.exe+2D035E8: 48 8D 04 C8 - lea rax,[rax+rcx*8]
HogwartsLegacy.exe+2D035EC: 48 85 C0 - test rax,rax
HogwartsLegacy.exe+2D035EF: 74 09 - je HogwartsLegacy.exe+2D035FA
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2D035F1: 48 8B 40 08 - mov rax,[rax+08]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2D035F5: 48 85 C0 - test rax,rax
HogwartsLegacy.exe+2D035F8: 75 22 - jne HogwartsLegacy.exe+2D0361C
HogwartsLegacy.exe+2D035FA: F6 43 74 02 - test byte ptr [rbx+74],02
HogwartsLegacy.exe+2D035FE: 74 1A - je HogwartsLegacy.exe+2D0361A
HogwartsLegacy.exe+2D03600: 48 8B D3 - mov rdx,rbx
HogwartsLegacy.exe+2D03603: 48 8B CF - mov rcx,rdi
HogwartsLegacy.exe+2D03606: 48 8B 5C 24 38 - mov rbx,[rsp+38]
HogwartsLegacy.exe+2D0360B: 48 8B 74 24 40 - mov rsi,[rsp+40]
HogwartsLegacy.exe+2D03610: 48 83 C4 20 - add rsp,20
HogwartsLegacy.exe+2D03614: 5F - pop rdi
}
7
"Health"
0
Float
gHP
1A4
8
37
"[DEBUG]"
0000FF
1
36
"Fetch Base Addresses"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
print(string.format("Fetching Base Addresses..."))
local aobList = {
"48 8D 05 ?? ?? ?? ?? 48 83 C4 28 C3 48 8D 0D ?? ?? ?? ?? E8 ?? ?? ?? ?? 83 3D ?? ?? ?? ?? FF 75 DF 66 0F 6F 05 ?? ?? ?? ?? 48 8D 05 ?? ?? ?? ?? 48 89 5C 24 20",
"48 8B 15 ?? ?? ?? ?? 48 8B F9 48 85 D2 75 0C E8 ?? ?? ?? ?? 48 8B 15 83 F7 6C 06 48 8B 9F 60 01 00 00",
"48 8B 05 ?? ?? ?? ?? C3 CC CC CC CC CC CC CC CC 40 53 48 83 EC 20 48 8B 05 ?? ?? ?? ?? 48 85 C0"
}
local aobNames = {
"HL_Player (+D0)",
"HL_Character",
"HL_Data"
}
local xbase = readInteger(process)and GetAddress(process)
print(string.format("Base: %X",xbase))
for i = 1, #aobList do
local aob = AOBScan(aobList[i],"+X*C*W")
local instruct = getAddressSafe(aob[0])
local distance = getAddressSafe(instruct)+3
distance = readInteger(distance)
local instructSize = getInstructionSize(instruct)
local address = (instruct + distance + instructSize) - xbase
print(string.format("%s: %s+%X",aobNames[i],process,address))
end
[DISABLE]
45
"Get Player"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-15
Author : Administrator
Get Player
}
[ENABLE]
aobscanmodule(getPlayer,HogwartsLegacy.exe,48 83 78 30 00 0F 84 33) // should be unique
alloc(newmem,$64,getPlayer)
label(code)
label(return)
label(gPlayer)
registersymbol(gPlayer)
newmem:
code:
mov [gPlayer],rax
cmp qword ptr [rax+30],00
jmp return
gPlayer:
dq 0
getPlayer:
jmp newmem
return:
registersymbol(getPlayer)
[DISABLE]
getPlayer:
db 48 83 78 30 00
unregistersymbol(getPlayer)
dealloc(newmem)
unregistersymbol(gPlayer)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+4F3F7CF
HogwartsLegacy.exe+4F3F7AB: 48 85 DB - test rbx,rbx
HogwartsLegacy.exe+4F3F7AE: 75 0B - jne HogwartsLegacy.exe+4F3F7BB
HogwartsLegacy.exe+4F3F7B0: 48 8B CF - mov rcx,rdi
HogwartsLegacy.exe+4F3F7B3: E8 38 5D 31 00 - call HogwartsLegacy.exe+52554F0
HogwartsLegacy.exe+4F3F7B8: 48 8B D8 - mov rbx,rax
HogwartsLegacy.exe+4F3F7BB: 48 8B CF - mov rcx,rdi
HogwartsLegacy.exe+4F3F7BE: E8 1D F6 FA FF - call HogwartsLegacy.exe+4EEEDE0
HogwartsLegacy.exe+4F3F7C3: 4C 8B E0 - mov r12,rax
HogwartsLegacy.exe+4F3F7C6: 48 85 C0 - test rax,rax
HogwartsLegacy.exe+4F3F7C9: 0F 84 3E 03 00 00 - je HogwartsLegacy.exe+4F3FB0D
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+4F3F7CF: 48 83 78 30 00 - cmp qword ptr [rax+30],00
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+4F3F7D4: 0F 84 33 03 00 00 - je HogwartsLegacy.exe+4F3FB0D
HogwartsLegacy.exe+4F3F7DA: 48 8B 17 - mov rdx,[rdi]
HogwartsLegacy.exe+4F3F7DD: 48 8B CF - mov rcx,rdi
HogwartsLegacy.exe+4F3F7E0: FF 92 70 04 00 00 - call qword ptr [rdx+00000470]
HogwartsLegacy.exe+4F3F7E6: 84 C0 - test al,al
HogwartsLegacy.exe+4F3F7E8: 0F 84 1F 03 00 00 - je HogwartsLegacy.exe+4F3FB0D
HogwartsLegacy.exe+4F3F7EE: 48 8B 87 B8 00 00 00 - mov rax,[rdi+000000B8]
HogwartsLegacy.exe+4F3F7F5: 80 78 70 00 - cmp byte ptr [rax+70],00
HogwartsLegacy.exe+4F3F7F9: 0F 8C 0E 03 00 00 - jl HogwartsLegacy.exe+4F3FB0D
HogwartsLegacy.exe+4F3F7FF: 80 BF 60 05 00 00 00 - cmp byte ptr [rdi+00000560],00
}
53
"Health"
0
Float
gPlayer
1A4
D30
68
288
30
56
"Get Conjur Limit"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-19
Author : Marcus101RR
Get Conjur Limit Room of Requirement
}
[ENABLE]
aobscanmodule(getConjurLimit,HogwartsLegacy.exe,3B 57 10 8D 4A 01) // should be unique
alloc(newmem,$64,getConjurLimit)
label(code)
label(return)
label(gConjurLimit)
registersymbol(gConjurLimit)
newmem:
code:
mov [gConjurLimit],rdi
cmp edx,[rdi+10]
lea ecx,[rdx+01]
jmp return
gConjurLimit:
dq 0
getConjurLimit:
jmp newmem
nop
return:
registersymbol(getConjurLimit)
[DISABLE]
getConjurLimit:
db 3B 57 10 8D 4A 01
unregistersymbol(getConjurLimit)
dealloc(newmem)
unregistersymbol(gConjurLimit)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2D787C9
HogwartsLegacy.exe+2D787A0: 83 F8 FF - cmp eax,-01
HogwartsLegacy.exe+2D787A3: 75 EB - jne HogwartsLegacy.exe+2D78790
HogwartsLegacy.exe+2D787A5: 4C 8D 84 24 90 00 00 00 - lea r8,[rsp+00000090]
HogwartsLegacy.exe+2D787AD: 8B D3 - mov edx,ebx
HogwartsLegacy.exe+2D787AF: 48 8D 4F 18 - lea rcx,[rdi+18]
HogwartsLegacy.exe+2D787B3: E8 B8 B4 FD FF - call HogwartsLegacy.exe+2D53C70
HogwartsLegacy.exe+2D787B8: 0F B6 9C 24 90 00 00 00 - movzx ebx,byte ptr [rsp+00000090]
HogwartsLegacy.exe+2D787C0: 48 8B F0 - mov rsi,rax
HogwartsLegacy.exe+2D787C3: 8B 16 - mov edx,[rsi]
HogwartsLegacy.exe+2D787C5: 44 0F B6 C3 - movzx r8d,bl
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2D787C9: 3B 57 10 - cmp edx,[rdi+10]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2D787CC: 8D 4A 01 - lea ecx,[rdx+01]
HogwartsLegacy.exe+2D787CF: 0F 4D 4F 10 - cmovge ecx,[rdi+10]
HogwartsLegacy.exe+2D787D3: 48 8D 54 24 50 - lea rdx,[rsp+50]
HogwartsLegacy.exe+2D787D8: 89 0E - mov [rsi],ecx
HogwartsLegacy.exe+2D787DA: 48 8B CD - mov rcx,rbp
HogwartsLegacy.exe+2D787DD: E8 CE 21 FF FF - call HogwartsLegacy.exe+2D6A9B0
HogwartsLegacy.exe+2D787E2: 48 8D 1D AF E6 85 03 - lea rbx,[HogwartsLegacy.exe+65D6E98]
HogwartsLegacy.exe+2D787E9: 83 78 08 00 - cmp dword ptr [rax+08],00
HogwartsLegacy.exe+2D787ED: 74 10 - je HogwartsLegacy.exe+2D787FF
HogwartsLegacy.exe+2D787EF: 48 8B 38 - mov rdi,[rax]
}
57
"No description"
0
4 Bytes
gConjurLimit
10
61
"Get Conjur Data"
Auto Assembler Script
{ Game : HogwartsLegacy.exe
Version:
Date : 2023-02-19
Author : Marcus101RR
Conjur Data
}
[ENABLE]
aobscanmodule(getConjurData,HogwartsLegacy.exe,48 8B 88 28 04 00 00 48 8B 59 30) // should be unique
alloc(newmem,$64,getConjurData)
label(code)
label(return)
label(gConjurData)
registersymbol(gConjurData)
newmem:
code:
mov [gConjurData],rax
mov rcx,[rax+00000428]
jmp return
gConjurData:
dq 0
getConjurData:
jmp newmem
nop 2
return:
registersymbol(getConjurData)
[DISABLE]
getConjurData:
db 48 8B 88 28 04 00 00
unregistersymbol(getConjurData)
dealloc(newmem)
unregistersymbol(gConjurData)
{
// ORIGINAL CODE - INJECTION POINT: HogwartsLegacy.exe+2C7A716
HogwartsLegacy.exe+2C7A6EF: CC - int 3
HogwartsLegacy.exe+2C7A6F0: 48 83 EC 28 - sub rsp,28
HogwartsLegacy.exe+2C7A6F4: E8 97 64 E6 FF - call HogwartsLegacy.exe+2AE0B90
HogwartsLegacy.exe+2C7A6F9: 48 85 C0 - test rax,rax
HogwartsLegacy.exe+2C7A6FC: 74 61 - je HogwartsLegacy.exe+2C7A75F
HogwartsLegacy.exe+2C7A6FE: E8 8D 64 E6 FF - call HogwartsLegacy.exe+2AE0B90
HogwartsLegacy.exe+2C7A703: 83 B8 30 04 00 00 06 - cmp dword ptr [rax+00000430],06
HogwartsLegacy.exe+2C7A70A: 7E 53 - jle HogwartsLegacy.exe+2C7A75F
HogwartsLegacy.exe+2C7A70C: 48 89 5C 24 20 - mov [rsp+20],rbx
HogwartsLegacy.exe+2C7A711: E8 7A 64 E6 FF - call HogwartsLegacy.exe+2AE0B90
// ---------- INJECTING HERE ----------
HogwartsLegacy.exe+2C7A716: 48 8B 88 28 04 00 00 - mov rcx,[rax+00000428]
// ---------- DONE INJECTING ----------
HogwartsLegacy.exe+2C7A71D: 48 8B 59 30 - mov rbx,[rcx+30]
HogwartsLegacy.exe+2C7A721: 48 85 DB - test rbx,rbx
HogwartsLegacy.exe+2C7A724: 74 2D - je HogwartsLegacy.exe+2C7A753
HogwartsLegacy.exe+2C7A726: E8 65 15 68 00 - call HogwartsLegacy.exe+32FBC90
HogwartsLegacy.exe+2C7A72B: 48 8B 4B 10 - mov rcx,[rbx+10]
HogwartsLegacy.exe+2C7A72F: 48 83 C0 30 - add rax,30
HogwartsLegacy.exe+2C7A733: 48 63 50 08 - movsxd rdx,dword ptr [rax+08]
HogwartsLegacy.exe+2C7A737: 3B 51 38 - cmp edx,[rcx+38]
HogwartsLegacy.exe+2C7A73A: 7F 17 - jg HogwartsLegacy.exe+2C7A753
HogwartsLegacy.exe+2C7A73C: 48 8B 49 30 - mov rcx,[rcx+30]
}
62
"Hopping Pot Limit"
0
4 Bytes
gConjurData
1F8
698
10
428
Code :lea rsi,[rax+04]
HogwartsLegacy.exe+2EC7B6D
24
70
48
85
C0
48
8D
70
04
48
0F
44
F2
48
m_orkintel
1D5E0046
newmem2
1545AF5D
Buff
16D59A93
CreditsCode
2E923244
AddCredits
0A560037
Movement_Code
2E8FE252
MinMovement_Points
0A430039
Clip_Ammo
2E8FE664
Skill_Cooldown
2E8F54B0
Magic_Essence
19CC294E
Magic_Power
19C7F18B
aob_xp
006A6A83
aob_arr
00CD19E4
aob_foc
00CD1FBC
aob_com
00CD9751
aob_easy
00C94A0F
aob_rune
007CBAB9
aob_miss
00C53583
aob_god
00C3473A
aob_uruk
0058CB93
poin_orkintel
01DE003F
_copyfun
007CEE80
nHealthMax
7FF63F810000
bHealthFriendly
7FF63F810010
1.0
- Initial Release