0
"Hotshot Racing"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(One,HotshotRacing.exe,89 91 E0 0B 1E 00)
aobscanmodule(Two,HotshotRacing.exe,8B 94 8E B8 01 00 00 48)
aobscanmodule(Three,HotshotRacing.exe,F3 0F 10 88 40 01 00 00 E8 15)
aobscanmodule(Four,HotshotRacing.exe,F3 0F 10 8A 40 01 00 00)
alloc(newmemOne,$1000,One)
alloc(newmemTwo,$1000,Two)
alloc(newmemThree,$1000,Three)
alloc(newmemFour,$1000,Four)
alloc(Five,8)
alloc(Six,8)
alloc(Seven,1)
alloc(Eight,1)
alloc(Nine,1)
registersymbol(One)
registersymbol(Two)
registersymbol(Three)
registersymbol(Four)
registersymbol(Five)
registersymbol(Six)
registersymbol(Seven)
registersymbol(Eight)
registersymbol(Nine)
label(codeOne)
label(codeTwo)
label(codeThree)
label(codeFour)
label(codeFive)
label(codeSix)
label(codeSeven)
label(codeEight)
label(codeNine)
label(codeTen)
label(codeEleven)
label(codeTwelve)
label(returnOne)
label(returnTwo)
label(returnThree)
label(returnFour)
label(Ten)
label(Eleven)
label(Twelve)
label(Thirteen)
label(Fourteen)
label(Fifteen)
Five:
dq 0
Six:
dq 0
Seven:
db 0
Eight:
db 0
Nine:
db 0
newmemOne:
codeOne:
mov qword ptr [Five],rcx
mov [rcx+001E0BE0],edx
jmp returnOne
One:
jmp newmemOne
nop
returnOne:
newmemTwo:
cmp dword ptr [rax+84],1
jne codeTwo
mov qword ptr [Six],rsi
codeTwo:
mov edx,[rsi+rcx*4+000001B8]
jmp returnTwo
Two:
jmp newmemTwo
nop 2
returnTwo:
newmemThree:
cmp [rax+84],1
jne codeThree
cmp byte ptr [Seven],1
je codeFour
cmp byte ptr [Eight],1
je codeFive
jmp codeSeven
codeThree:
cmp byte ptr [Nine],1
je codeSix
jmp codeSeven
codeFour:
movss xmm1,[Ten]
movss [rax+00000140],xmm1
jmp returnThree
codeFive:
movss xmm1,[Eleven]
movss [rax+00000140],xmm1
jmp returnThree
codeSix:
movss xmm0,[rax+00000140]
comiss xmm0,[Twelve]
jbe codeSeven
movss xmm0,[Twelve]
movss [rax+00000140],xmm0
codeSeven:
movss xmm1,[rax+00000140]
jmp returnThree
Ten:
dd (float)1
Eleven:
dd (float)0.2
Twelve:
dd (float)0.01
Three:
jmp newmemThree
nop 3
returnThree:
newmemFour:
cmp [rdx+84],1
jne codeEight
cmp byte ptr [Seven],1
je codeNine
cmp byte ptr [Eight],1
je codeTen
jmp codeTwelve
codeEight:
cmp byte ptr [Nine],1
je codeEleven
jmp codeTwelve
codeNine:
movss xmm1,[Thirteen]
movss [rdx+00000140],xmm1
jmp returnFour
codeTen:
movss xmm1,[Fourteen]
movss [rdx+00000140],xmm1
jmp returnFour
codeEleven:
movss xmm0,[rdx+00000140]
comiss xmm0,[Fifteen]
jbe codeTwelve
movss xmm0,[Fifteen]
movss [rdx+00000140],xmm0
codeTwelve:
movss xmm1,[rdx+00000140]
jmp returnFour
Thirteen:
dd (float)1
Fourteen:
dd (float)0.2
Fifteen:
dd (float)0.01
Four:
jmp newmemFour
nop 3
returnFour:
[DISABLE]
One:
db 89 91 E0 0B 1E 00
Two:
db 8B 94 8E B8 01 00 00
Three:
db F3 0F 10 88 40 01 00 00
Four:
db F3 0F 10 8A 40 01 00 00
unregistersymbol(One)
unregistersymbol(Two)
unregistersymbol(Three)
unregistersymbol(Four)
unregistersymbol(Five)
unregistersymbol(Six)
unregistersymbol(Seven)
unregistersymbol(Eight)
unregistersymbol(Nine)
dealloc(newmemOne)
dealloc(newmemTwo)
dealloc(newmemThree)
dealloc(newmemFour)
dealloc(Five)
dealloc(Six)
dealloc(Seven)
dealloc(Eight)
dealloc(Nine)
2
"==== General ===="
C080FF
1
21
"Freeze Time"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Sixteen,HotshotRacing.exe,F3 0F 11 43 38 E8 A3)
registersymbol(Sixteen)
HotshotRacing.exe+197979:
db 90 90 90 90 90
[DISABLE]
Sixteen:
db F3 0F 11 43 38
unregistersymbol(Sixteen)
47
"Infinite Boost"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Seventeen,HotshotRacing.exe,F3 0F 10 40 54 0F)
alloc(newmem,$1000,Seventeen)
label(code)
label(return)
label(Eighteen)
newmem:
code:
movss xmm0,[Eighteen]
movss [rax+54],xmm0
jmp return
Eighteen:
dd (float)4
Seventeen:
jmp newmem
return:
registersymbol(Seventeen)
[DISABLE]
Seventeen:
db F3 0F 10 40 54
unregistersymbol(Seventeen)
dealloc(newmem)
51
"Infinite Gain Boost"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Nineteen,HotshotRacing.exe,F3 0F 11 73 54 E8 2D)
alloc(newmem,$1000,Nineteen)
label(code)
label(return)
label(Twenty)
newmem:
cmp dword ptr [rbx+3C],0
je code
movss xmm6,[Twenty]
code:
movss [rbx+54],xmm6
jmp return
Twenty:
dd (float)4
Nineteen:
jmp newmem
return:
registersymbol(Nineteen)
[DISABLE]
Nineteen:
db F3 0F 11 73 54
unregistersymbol(Nineteen)
dealloc(newmem)
53
"⬆You only get maximum boost when you gain some."
C0C0C0
1
17
"Infinite Health"
C08000
Auto Assembler Script
[ENABLE]
Seven:
db 1
[DISABLE]
Seven:
db 0
18
"Infinite Health + Barely Breathing"
C08000
Auto Assembler Script
[ENABLE]
Eight:
db 1
[DISABLE]
Eight:
db 0
52
"⬆You’ll be on fire for the Barely Breathing achievement."
C0C0C0
1
7
"Infinite Bounty"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentyone,HotshotRacing.exe,F3 0F 11 84 83 98 01 00 00)
alloc(newmem,$1000,Twentyone)
label(code)
label(return)
newmem:
code:
cmp [rdi+84],1
je return
movss [rbx+rax*4+00000198],xmm0
jmp return
Twentyone:
jmp newmem
nop 4
return:
registersymbol(Twentyone)
[DISABLE]
Twentyone:
db F3 0F 11 84 83 98 01 00 00
unregistersymbol(Twentyone)
dealloc(newmem)
6
"Opponents Zero Cash"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentytwo,HotshotRacing.exe,8B 8C 87 B8 01 00 00)
alloc(newmem,$1000,Twentytwo)
label(code)
label(return)
newmem:
cmp [rbx+84],1
je code
xor ecx,ecx
mov [rdi+rax*4+000001B8],ecx
jmp return
code:
mov ecx,[rdi+rax*4+000001B8]
jmp return
Twentytwo:
jmp newmem
nop 2
return:
registersymbol(Twentytwo)
[DISABLE]
Twentytwo:
db 8B 8C 87 B8 01 00 00
unregistersymbol(Twentytwo)
dealloc(newmem)
50
"Opponents Zero Boost"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentythree,HotshotRacing.exe,51 F3 0F 10 0D * * * * 0F 57 C0 F3 0F 10 53 54)
alloc(newmem,$1000,Twentythree)
label(code)
label(return)
newmem:
code:
xorps xmm2,xmm2
movss [rbx+54],xmm2
jmp return
Twentythree+0C:
jmp newmem
return:
registersymbol(Twentythree)
[DISABLE]
Twentythree+0C:
db F3 0F 10 53 54
unregistersymbol(Twentythree)
dealloc(newmem)
64
"Disable Opponent Vehicles"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentyfour,HotshotRacing.exe,F3 0F 10 40 08 F3 0F 5F 40 4C F3)
alloc(newmem,$1000,Twentyfour)
label(code)
label(return)
label(Twentyfive)
newmem:
cmp [rbx+78],1
jne code
movss xmm0,[rax+08]
jmp return
code:
movss xmm0,[Twentyfive]
movss [rax+08],xmm0
jmp return
Twentyfive:
dd (float)-1
Twentyfour:
jmp newmem
return:
registersymbol(Twentyfour)
[DISABLE]
Twentyfour:
db F3 0F 10 40 08
unregistersymbol(Twentyfour)
dealloc(newmem)
20
"Quick Explode"
C08000
Auto Assembler Script
[ENABLE]
Nine:
db 1
[DISABLE]
Nine:
db 0
59
"=== Challenges ==="
C080FF
1
56
"Drift 300 Times"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentysix,HotshotRacing.exe,01 41 20 48 8B C3)
alloc(newmem,$1000,Twentysix)
label(code)
label(return)
newmem:
code:
mov dword ptr [rcx+20],12C
mov rax,rbx
jmp return
Twentysix:
jmp newmem
nop
return:
registersymbol(Twentysix)
[DISABLE]
Twentysix:
db 01 41 20 48 8B C3
unregistersymbol(Twentysix)
dealloc(newmem)
67
"Drift 20 times in a single race"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentyseven,HotshotRacing.exe,46 3B 44 18 2C)
alloc(newmem,$1000,Twentyseven)
label(code)
label(return)
newmem:
code:
mov dword ptr [rax+r11+2C],14
cmp r8d,[rax+r11+2C]
jmp return
Twentyseven:
jmp newmem
return:
registersymbol(Twentyseven)
[DISABLE]
Twentyseven:
db 46 3B 44 18 2C
unregistersymbol(Twentyseven)
dealloc(newmem)
57
"Drifted for 5 seconds in one go"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Twentyeight,HotshotRacing.exe,42 0F 2F 4C 00 30)
alloc(newmem,$1000,Twentyeight)
label(code)
label(return)
label(Twentynine)
newmem:
code:
movss xmm1,[Twentynine]
movss [rax+r8+30],xmm1
jmp return
Twentynine:
dd (float)5
Twentyeight:
jmp newmem
nop
return:
registersymbol(Twentyeight)
[DISABLE]
Twentyeight:
db 42 0F 2F 4C 00 30
unregistersymbol(Twentyeight)
dealloc(newmem)
58
"Drifted for 250/500 seconds in total"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Thirty,HotshotRacing.exe,F3 0F 58 44 08 1C)
alloc(newmem,$1000,Thirty)
label(code)
label(return)
label(Thirtyone)
newmem:
code:
movss xmm0,[Thirtyone]
movss [rax+rcx+1C],xmm0
jmp return
Thirtyone:
dd (float)500
Thirty:
jmp newmem
nop
return:
registersymbol(Thirty)
[DISABLE]
Thirty:
db F3 0F 58 44 08 1C
unregistersymbol(Thirty)
dealloc(newmem)
63
"Boosted 10 times in a single race"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Thirtytwo,HotshotRacing.exe,8B 41 28 0F 57 D2)
alloc(newmem,$1000,Thirtytwo)
label(code)
label(return)
newmem:
code:
mov dword ptr [rcx+28],A
mov eax,[rcx+28]
xorps xmm2,xmm2
jmp return
Thirtytwo:
jmp newmem
nop
return:
registersymbol(Thirtytwo)
[DISABLE]
Thirtytwo:
db 8B 41 28 0F 57 D2
unregistersymbol(Thirtytwo)
dealloc(newmem)
55
"Boosted 100 Times"
C08000
Auto Assembler Script
[ENABLE]
aobscanmodule(Thirtythree,HotshotRacing.exe,01 41 18 48 8B C3)
alloc(newmem,$1000,Thirtythree)
label(code)
label(return)
newmem:
code:
mov dword ptr [rcx+18],64
mov rax,rbx
jmp return
Thirtythree:
jmp newmem
nop
return:
registersymbol(Thirtythree)
[DISABLE]
Thirtythree:
db 01 41 18 48 8B C3
unregistersymbol(Thirtythree)
dealloc(newmem)
68
"⬆Complete a race in each vehicle to unlock its challenges."
C0C0C0
1
1
"==== Extras ====="
C080FF
1
3
"Money"
??:Waiting
0
C08000
4 Bytes
[Five]+1E0BE0
5
"⬆Earn money, or purchase an item from the Raceshop to populate value."
C0C0C0
1
4
"Banked Score"
??:Waiting
0
C08000
4 Bytes
[Six]+1B8
Created by: Outrun
https://opencheattables.com