1337187108
"━━━━━━━━ Hot Brass ━━━━━━━━"
1
3746
"━━━━━━━━ 🖥️ COMPACT VIEW ━━━━━━━━"
Auto Assembler Script
[ENABLE]
// Script Created By mgr.inz.Player On CE Forums
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1337187050
"━━━━━━━━ 🧍 PLAYER ━━━━━━━━"
Auto Assembler Script
{
==============================================
Hot Brass by SeryogaSK
----------------------------------------------
Process : Hot Brass.exe
Game Title : Hot Brass
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
{$lua}
if syntaxcheck then return end
function gps_aob_register(sym, ...)
local patterns = {...}
local function showErrorMsg(msg)
local f = createForm(false)
f.Caption = 'GenPointerScript - Error'
f.Width = 400
f.Height = 200
f.Position = poScreenCenter
f.BorderStyle = bsDialog
local lbl = createLabel(f)
lbl.Caption = msg
lbl.Left = 20
lbl.Top = 20
lbl.Width = 360
lbl.Height = 100
lbl.WordWrap = true
local btn = createButton(f)
btn.Caption = 'OK'
btn.Left = 150
btn.Top = 130
btn.Width = 80
btn.Height = 30
btn.OnClick = function() f.close() end
f.show()
end
for i, pat in ipairs(patterns) do
local instr = AOBScan(pat, '+X')
if instr and instr.Count > 0 then
if instr.Count == 1 then
local addy = instr[0]
instr.destroy()
unregisterSymbol(sym)
registerSymbol(sym, tonumber(addy, 16))
return
else
instr.destroy()
end
else
if instr then instr.destroy() end
end
end
end
gps_aob_register("wpn_reloadsa",
"48 63 7E 40 48 8B C7 48",
"48 ?? ?? ?? 48 ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? ?? 48 ?? ?? ?? C3 BA")
-- Detect RIP-relative addressing: scan instruction bytes for ModR/M = 00 xxx 101 (x64 only)
function gps_isRipRelative(addr, len)
if not targetIs64Bit() then return false end
local bytes = readBytes(addr, len, true)
if not bytes or #bytes < 2 then return false end
local i = 1
-- Skip legacy prefixes
while i <= #bytes do
local b = bytes[i]
if b == 0xF0 or b == 0xF2 or b == 0xF3 or
b == 0x2E or b == 0x36 or b == 0x3E or b == 0x26 or b == 0x64 or b == 0x65 or
b == 0x66 or b == 0x67 then
i = i + 1
else break end
end
-- Skip REX (0x40-0x4F)
if i <= #bytes and bytes[i] >= 0x40 and bytes[i] <= 0x4F then i = i + 1 end
if i > #bytes then return false end
local op = bytes[i]; i = i + 1
-- 2-byte (0F xx) and 3-byte (0F 38/3A xx) opcodes
if op == 0x0F then
if i > #bytes then return false end
local op2 = bytes[i]; i = i + 1
if op2 == 0x38 or op2 == 0x3A then
if i > #bytes then return false end
i = i + 1
end
end
-- Check ModR/M: mod (bits 7-6) == 00 and rm (bits 2-0) == 101
if i > #bytes then return false end
local modrm = bytes[i]
local mod = math.floor(modrm / 64)
local rm = modrm % 8
return (mod == 0 and rm == 5)
end
function gps_calculateInstructionDetails(address)
local totalSize = 0
local currentAddr = tonumber(address)
local codeLines = {}
while totalSize < 5 do
local size = getInstructionSize(currentAddr)
if not size or size == 0 then
error('Could not determine instruction size at address: ' .. string.format('0x%X', currentAddr))
end
local dis = disassemble(currentAddr)
local mnemonic, target = '', ''
if dis then
local instrText = dis:match('-%s+([^-]+)$') or dis:match('-%s+(.+)$') or ''
instrText = instrText:gsub('^%s+',''):gsub('%s+$','')
mnemonic = (instrText:match('^(%w+)') or ''):lower()
if mnemonic == 'call' or mnemonic == 'jmp' or mnemonic:sub(1,1) == 'j' then
target = (instrText:match('^%w+%s+(.+)$') or ''):gsub('^%s+',''):gsub('%s+$','')
end
end
if target ~= '' and (mnemonic == 'call' or mnemonic == 'jmp' or mnemonic:sub(1,1) == 'j') then
table.insert(codeLines, ' ' .. mnemonic .. ' ' .. target)
elseif gps_isRipRelative(currentAddr, size) then
-- RIP-relative instruction: reassemble re-evaluates the displacement at the new location
table.insert(codeLines, string.format(' reassemble(%X)', currentAddr))
else
table.insert(codeLines, string.format(' readmem(%X,%d)', currentAddr, size))
end
totalSize = totalSize + size
currentAddr = currentAddr + size
end
local nopCount = totalSize - 5
return totalSize, nopCount, table.concat(codeLines, '\n')
end
local wpn_reloadsaAddr = getAddressSafe('wpn_reloadsa')
if not wpn_reloadsaAddr then error('wpn_reloadsa address not found!') end
local gps_wpn_reloadsaTotalBytes, gps_wpn_reloadsaNopCount, gps_wpn_reloadsaCodeBlock = gps_calculateInstructionDetails(wpn_reloadsaAddr)
_G.gps_wpn_reloadsaTotalBytes = gps_wpn_reloadsaTotalBytes
_G.gps_wpn_reloadsaNopCount = gps_wpn_reloadsaNopCount
_G.gps_wpn_reloadsaCodeBlock = gps_wpn_reloadsaCodeBlock
_G.gps_wpn_reloadsaNopInstructions = ''
if gps_wpn_reloadsaNopCount > 0 then
for i = 1, gps_wpn_reloadsaNopCount do
_G.gps_wpn_reloadsaNopInstructions = _G.gps_wpn_reloadsaNopInstructions .. 'nop\n'
end
_G.gps_wpn_reloadsaNopInstructions = _G.gps_wpn_reloadsaNopInstructions:sub(1, -2)
end
{$asm}
alloc(newmem_wpn_reloadsa,$1000)
alloc(wpn_reloadsaCopy,$50)
registersymbol(newmem_wpn_reloadsa)
registersymbol(wpn_reloadsaCopy)
registersymbol(seewpn_reloadsa)
registersymbol(seewpn_reloadsaStatus)
wpn_reloadsaCopy:
{$lua}
return string.format('readmem(wpn_reloadsa,%d)', _G.gps_wpn_reloadsaTotalBytes or 8)
{$asm}
wpn_reloadsaCopy+40:
{$lua}
return string.format('db %02X', _G.gps_wpn_reloadsaTotalBytes or 8)
{$asm}
label(code)
label(return)
alloc(seewpn_reloadsa,168)
alloc(seewpn_reloadsaStatus,8)
newmem_wpn_reloadsa:
mov [seewpn_reloadsa],rsi
code:
{$lua}
return _G.gps_wpn_reloadsaCodeBlock
{$asm}
jmp return
seewpn_reloadsa:
dq 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
seewpn_reloadsaStatus:
dq 0
wpn_reloadsa:
jmp newmem_wpn_reloadsa
{$lua}
return _G.gps_wpn_reloadsaNopInstructions
{$asm}
return:
{$lua}
local gps_wpn_reloadsaRegOffsets = { rbx=8, rsi=24, rdi=40, rcx=56, rdx=72, rax=88, r8=104, r9=120, r10=136, r11=152, r12=264, r13=280, r14=296, r15=312, rbp=328, rsp=344 }
local function gps_scanForwpn_reloadsaPattern(baseAddr, searchLimit)
local currentAddress = tonumber(baseAddr)
for i = 1, (searchLimit or 8) do
local disasmStr = disassemble(currentAddress)
if disasmStr then
local memExpr = disasmStr:match("%[([^%]]+)%]")
if memExpr then
memExpr = memExpr:gsub('%s+',''):lower()
local function isReg(tok)
return gps_wpn_reloadsaRegOffsets[tok] ~= nil
end
local b, i2, sc, dp = memExpr:match('^([%w]+)%+([%w]+)%*(%d+)%+([%x]+)$')
if b and isReg(b) and isReg(i2) then return b, tonumber(dp,16), i2, tonumber(sc), nil end
b, i2, sc = memExpr:match('^([%w]+)%+([%w]+)%*(%d+)$')
if b and isReg(b) and isReg(i2) then return b, 0, i2, tonumber(sc), nil end
b, i2, dp = memExpr:match('^([%w]+)%+([%w]+)%+([%x]+)$')
if b and isReg(b) and isReg(i2) then return b, tonumber(dp,16), i2, 1, nil end
b, i2 = memExpr:match('^([%w]+)%+([%w]+)$')
if b and isReg(b) and isReg(i2) then return b, 0, i2, 1, nil end
b, dp = memExpr:match('^([%w]+)%+([%x]+)$')
if b and isReg(b) then return b, tonumber(dp,16), nil, 1, nil end
if isReg(memExpr) then return memExpr, 0, nil, 1, nil end
local absAddr = memExpr:match('^([%x]+)$')
if absAddr and #absAddr >= 4 then return nil, 0, nil, 1, tonumber(absAddr, 16) end
end
end
currentAddress = currentAddress + (getInstructionSize(currentAddress) or 1)
end
return nil, 0, nil, 1, nil
end
_G.gps_wpn_reloadsaOriginalStaticAddr = nil
_G.gps_wpn_reloadsaAddressEntry = nil
local function gps_forceRefreshwpn_reloadsaEntry(symbolName, newAddress)
local addrList = getAddressList()
for i = 0, addrList.Count-1 do
local entry = addrList[i]
if entry.Address == symbolName then
entry.Address = string.format("0x%X", newAddress)
sleep(1)
entry.Address = symbolName
return true
end
end
return false
end
local function gps_findOrCreatewpn_reloadsaEntry()
local addrList = getAddressList()
if memrec then
for i = 0, memrec.Count-1 do
local child = memrec.Child[i]
if child.Address == "seewpn_reloadsaStatus" then
_G.gps_wpn_reloadsaAddressEntry = child
return child
end
end
end
local entry = addrList.createMemoryRecord()
entry.Description = "wpn_reloadsa (See Value)"
entry.Type = vtDword
entry.Address = "seewpn_reloadsaStatus"
if memrec then entry.appendToEntry(memrec) end
_G.gps_wpn_reloadsaAddressEntry = entry
return entry
end
local function gps_wpn_reloadsaTimerCallback()
local injectionAddr = getAddressSafe("wpn_reloadsaCopy")
if not injectionAddr then return end
local reg, immediate, reg2, scale, absAddr = gps_scanForwpn_reloadsaPattern(injectionAddr, 8)
if absAddr then
if not _G.gps_wpn_reloadsaOriginalStaticAddr then
_G.gps_wpn_reloadsaOriginalStaticAddr = getAddressSafe("seewpn_reloadsaStatus")
end
unregisterSymbol("seewpn_reloadsaStatus")
registerSymbol("seewpn_reloadsaStatus", absAddr)
gps_forceRefreshwpn_reloadsaEntry("seewpn_reloadsaStatus", absAddr)
if not _G.gps_wpn_reloadsaEntryCreated then
gps_findOrCreatewpn_reloadsaEntry()
_G.gps_wpn_reloadsaEntryCreated = true
end
return
end
if not reg then return end
local debugBufferAddr = getAddressSafe("seewpn_reloadsa")
if not debugBufferAddr then return end
local bufferOffset = gps_wpn_reloadsaRegOffsets[reg]
if not bufferOffset then return end
local pointerBase = readQword(debugBufferAddr + bufferOffset)
if not pointerBase or pointerBase == 0 then return end
_G.gps_wpn_reloadsaBasePointer = pointerBase
_G.gps_wpn_reloadsaCurrentRegister = reg
local indexValue = 0
if reg2 and gps_wpn_reloadsaRegOffsets[reg2] then
local r2v = readQword(debugBufferAddr + gps_wpn_reloadsaRegOffsets[reg2])
if r2v then indexValue = r2v * (scale or 1) end
end
local targetAddr = pointerBase + indexValue + (immediate or 0)
if not _G.gps_wpn_reloadsaOriginalStaticAddr then
_G.gps_wpn_reloadsaOriginalStaticAddr = getAddressSafe("seewpn_reloadsaStatus")
end
unregisterSymbol("seewpn_reloadsaStatus")
registerSymbol("seewpn_reloadsaStatus", targetAddr)
gps_forceRefreshwpn_reloadsaEntry("seewpn_reloadsaStatus", targetAddr)
if not _G.gps_wpn_reloadsaEntryCreated then
gps_findOrCreatewpn_reloadsaEntry()
_G.gps_wpn_reloadsaEntryCreated = true
end
end
if _G.gps_wpn_reloadsaTimer and _G.gps_wpn_reloadsaTimer.destroy then
_G.gps_wpn_reloadsaTimer.destroy()
_G.gps_wpn_reloadsaTimer = nil
end
if not syntaxcheck then
local startupTimer = createTimer(nil, false)
startupTimer.Interval = 50
startupTimer.OnTimer = function(timer)
if timer and timer.destroy then timer.destroy() end
_G.gps_wpn_reloadsaTimer = createTimer(nil, false)
_G.gps_wpn_reloadsaTimer.Interval = 555
_G.gps_wpn_reloadsaTimer.OnTimer = gps_wpn_reloadsaTimerCallback
_G.gps_wpn_reloadsaTimer.Enabled = true
end
startupTimer.Enabled = true
end
{$asm}
[DISABLE]
{$lua}
if _G.gps_wpn_reloadsaTimer and _G.gps_wpn_reloadsaTimer.destroy then
_G.gps_wpn_reloadsaTimer.destroy()
_G.gps_wpn_reloadsaTimer = nil
end
if _G.gps_wpn_reloadsaOriginalStaticAddr then
unregisterSymbol("seewpn_reloadsaStatus")
registerSymbol("seewpn_reloadsaStatus", _G.gps_wpn_reloadsaOriginalStaticAddr)
local addrList = getAddressList()
for i = 0, addrList.Count-1 do
local entry = addrList[i]
if entry.Address == "seewpn_reloadsaStatus" then
entry.Address = string.format("0x%X", _G.gps_wpn_reloadsaOriginalStaticAddr)
sleep(1)
entry.Address = "seewpn_reloadsaStatus"
break
end
end
else
local allocatedAddr = getAddressSafe("seewpn_reloadsaStatus")
if allocatedAddr then
unregisterSymbol("seewpn_reloadsaStatus")
registerSymbol("seewpn_reloadsaStatus", allocatedAddr)
if _G.gps_wpn_reloadsaAddressEntry then
_G.gps_wpn_reloadsaAddressEntry.Address = string.format("0x%X", allocatedAddr)
sleep(1)
_G.gps_wpn_reloadsaAddressEntry.Address = "seewpn_reloadsaStatus"
end
end
end
_G.gps_wpn_reloadsaEntryCreated = false
_G.gps_wpn_reloadsaAddressEntry = nil
_G.gps_wpn_reloadsaValueEntry = nil
_G.gps_wpn_reloadsaOriginalStaticAddr = nil
{$asm}
{$lua}
local symName = "wpn_reloadsa"
local copyName = symName .. "Copy"
local seeName = "seewpn_reloadsa"
local seeStatusName = "seewpn_reloadsaStatus"
local copyAddr = getAddress(copyName)
local origin = getAddress(symName)
local restoreLen = 0
if copyAddr and copyAddr ~= 0 then
local marker = readBytes(copyAddr + 0x40, 1)
if marker and marker > 0 then restoreLen = marker end
end
if restoreLen == 0 then restoreLen = _G.gps_wpn_reloadsaTotalBytes or 16 end
if origin and origin ~= 0 and copyAddr and copyAddr ~= 0 then
local bytes = readBytes(copyAddr, restoreLen, true)
if bytes then writeBytes(origin, bytes) end
end
local newmemAddr = getAddress("newmem_wpn_reloadsa")
if newmemAddr and newmemAddr ~= 0 then deAlloc(newmemAddr) end
if copyAddr and copyAddr ~= 0 then deAlloc(copyAddr) end
local seeAddr = getAddress(seeName)
if seeAddr and seeAddr ~= 0 then deAlloc(seeAddr) end
local seeStatusAddr = getAddress(seeStatusName)
if seeStatusAddr and seeStatusAddr ~= 0 then
if _G.gps_wpn_reloadsaOriginalStaticAddr == nil then
deAlloc(seeStatusAddr)
end
end
if getAddress(symName) then unregisterSymbol(symName) end
if getAddress(copyName) then unregisterSymbol(copyName) end
if getAddress(seeName) then unregisterSymbol(seeName) end
if getAddress(seeStatusName) then unregisterSymbol(seeStatusName) end
if getAddress("newmem_wpn_reloadsa") then unregisterSymbol("newmem_wpn_reloadsa") end
_G.gps_wpn_reloadsaTotalBytes = nil
_G.gps_wpn_reloadsaNopCount = nil
_G.gps_wpn_reloadsaCodeBlock = nil
_G.gps_wpn_reloadsaNopInstructions = nil
{$asm}
{
04 03 01 50 00 00 00 00 00 00 00 00 55 48 8B EC
48 83 EC 50 48 89 75 F0 4C 89 7D F8 4C 8B F9 48
89 55 E0 49 8B F0 49 BB 90 0F 51 03 0C 02 00 00
41 FF D3 85 C0 75 13 C6 45 E8 00 41 C6 47 55 00
41 C6 47 54 00 E9 41 00 00 00 85 F6 74 38 41 0F
B6 47 4C 85 C0 74 28 41 0F B6 47 54 85 C0 75 1F
49 63 47 50 39 45 E0 40 0F 9C C0 48 0F B6 C0 85
C0 40 0F 94 C0 48 0F B6 C0 41 88 47 54 EB 0C 41
C6 47 55 01 EB 05 41 C6 47 55 00 41 88 77 4C F3
41 0F 10 47 58 F3 0F 5A C0 49 8B 47 18 F3 0F 10
88 20 01 00 00 F3 0F 5A C9 66 0F 2F C8 0F 8A 6C
00 00 00 0F 83 66 00 00 00 F3 41 0F 10 47 58 F3
0F 5A C0 F2 0F 11 45 D8 49 8B 47 18 48 8B C8 83
38 00 49 BB 70 43 BE 04 0C 02 00 00 41 FF D3 F3
0F 5A C8 F2 0F 10 45 D8 F2 0F 5C C1 49 8B 47 18
F3 0F 10 88 20 01 00 00 F3 0F 5A C9 F2 0F 5A C9
F2 0F 5A C0 49 BB D0 95 C8 37 0C 02 00 00 41 FF
D3 F3 0F 5A C0 F2 0F 5A E8 F3 41 0F 11 6F 58 48
8B 75 F0 4C 8B 7D F8 48 8D 65 00 5D C3 00 00 00
00 00 00 00 01 04 02 05 04 03 01 50 00 E8 AA F2
52 22 08 70 81 66 30 0C 02 00 00 E8 9C F2 52 22
08 10 B4 B5 0E 0C 02 00 00 00 00 00 55 48 8B EC
48 83 EC 30 48 89 4D F8 49 BB E0 0F 51 03 0C 02
00 00 41 FF D3 85 C0 40 0F 94 C0 48 0F B6 C0 48
8D 65 00 5D C3 00 00 00 00 00 00 00 01 04 02 05
04 03 01 50 00 E8 52 F2 52 22 08 38 B4 B5 0E 0C
02 00 00 00 00 00 00 00 00 00 00 00 48 83 EC 18
48 89 34 24 48 89 7C 24 08 48 8B F1 48 8B 46 18
48 63 80 F0 00 00 00 83 F8 03 40 0F 94 C0 48 0F
B6 C0 85 C0 74 1E 48 8B 46 20 48 63 4E 48 48 63
C9 39 48 18 0F 86 1F 00 00 00 48 8D 44 88 20 48
63 38 EB 04
// ORIGINAL CODE - INJECTION POINT: ""+20C03511028
""+20C0351100C: 20C0351100C - 46 20 48 63 - and [rax+63],r9b
""+20C03511010: 20C03511010 - 4E 48 - dec rax
""+20C03511012: 20C03511012 - 48 63 C9 - movsxd rcx,ecx
""+20C03511015: 20C03511015 - 39 48 18 - cmp [rax+18],ecx
""+20C03511018: 20C03511018 - 0F86 1F000000 - jbe 20C0351103D
""+20C0351101E: 20C0351101E - 48 8D 44 88 20 - lea rax,[rax+rcx*4+20]
""+20C03511023: 20C03511023 - 48 63 38 - movsxd rdi,dword ptr [rax]
// ---------- INJECTING HERE ----------
""+20C03511026: 20C03511026 - EB 04 - jmp 20C0351102C
""+20C03511028: 20C03511028 - 48 63 7E 40 - movsxd rdi,dword ptr [rsi+40] - 48 63 7E 40
// ---------- DONE INJECTING ----------
""+20C0351102C: 20C0351102C - 48 8B C7 - mov rax,rdi
""+20C0351102F: 20C0351102F - 48 8B 34 24 - mov rsi,[rsp]
""+20C03511033: 20C03511033 - 48 8B 7C 24 08 - mov rdi,[rsp+08]
""+20C03511038: 20C03511038 - 48 83 C4 18 - add rsp,18
""+20C0351103C: 20C0351103C - C3 - ret
""+20C0351103D: 20C0351103D - BA 3C000000 - mov edx,0000003C
""+20C03511042: 20C03511042 - B9 1E010000 - mov ecx,0000011E
""+20C03511047: 20C03511047 - 49 BB B023A4250C020000 - mov r11,0000020C25A423B0
""+20C03511051: 20C03511051 - 41 FF D3 - call r11
""+20C03511054: 20C03511054 - 00 00 - add [rax],al
""+20C03511056: 20C03511056 - 00 00 - add [rax],al
""+20C03511058: 20C03511058 - 01 04 01 - add [rcx+rax],eax
""+20C0351105B: 20C0351105B - 00 04 22 - add [rdx],al
""+20C0351105E: 20C0351105E - 00 00 - add [rax],al
""+20C03511060: 20C03511060 - 00 00 - add [rax],al
""+20C03511062: 20C03511062 - 00 00 - add [rax],al
""+20C03511064: 20C03511064 - 00 00 - add [rax],al
""+20C03511066: 20C03511066 - 00 00 - add [rax],al
""+20C03511068: 20C03511068 - 00 00 - add [rax],al
""+20C0351106A: 20C0351106A - 00 00 - add [rax],al
""+20C0351106C: 20C0351106C - 00 00 - add [rax],al
""+20C0351106E: 20C0351106E - 00 00 - add [rax],al
""+20C03511070: 20C03511070 - 55 - push rbp
""+20C03511071: 20C03511071 - 48 8B EC - mov rbp,rsp
""+20C03511074: 20C03511074 - 48 83 EC 30 - sub rsp,30
""+20C03511078: 20C03511078 - 48 89 75 F8 - mov [rbp-08],rsi
""+20C0351107C: 20C0351107C - 48 8B F1 - mov rsi,rcx
""+20C0351107F: 20C0351107F - 48 8B 06 - mov rax,[rsi]
""+20C03511082: 20C03511082 - FF 50 60 - call qword ptr [rax+60]
""+20C03511085: 20C03511085 - 48 8B 80 98000000 - mov rax,[rax+00000098]
48 63 7E 40 48 8B C7 48 8B 34 24 48 8B 7C 24 08
48 83 C4 18 C3 BA 3C 00 00 00 B9 1E 01 00 00 49
BB B0 23 A4 25 0C 02 00 00 41 FF D3 00 00 00 00
01 04 01 00 04 22 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 55 48 8B EC 48 83 EC 30
48 89 75 F8 48 8B F1 48 8B 06 FF 50 60 48 8B 80
98 00 00 00 48 63 4E 34 83 C1 09 48 63 C9 39 48
18 0F 86 18 00 00 00 48 6B C9 18 48 03 C1 48 83
C0 20 0F B6 00 48 8B 75 F8 48 8D 65 00 5D C3 BA
35 00 00 00 B9 1E 01 00 00 49 BB B0 23 A4 25 0C
02 00 00 41 FF D3 00 00 01 04 02 05 04 03 01 50
00 00 00 00 00 00 00 00 55 48 8B EC 48 83 EC 30
48 89 4D F8 48 89 55 F0 48 8B C1 48 8B 80 A8 00
00 00 48 8B C8 0F B6 55 F0 83 38 00 49 BB 40 7E
03 03 0C 02 00 00 41 FF D3 48 8D 65 00 5D C3 00
01 04 02 05 04 03 01 50 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 55 48 8B EC 48 83 EC 30
48 89 75 F8 48 8B F1 48 8B 06 FF 50 60 48 8B 80
98 00 00 00 48 63 4E 34 83 C1 0A 48 63 C9 39 48
18 0F 86 18 00 00 00 48 6B C9 18 48 03 C1 48 83
C0 20 0F B6 00 48 8B 75 F8 48 8D 65 00 5D C3 BA
35 00 00 00 B9 1E 01 00 00 49 BB B0 23 A4 25 0C
02 00 00 41 FF D3 00 00 01 04 02 05 04 03 01 50
00 00 00 00 00 00 E8 4D FD 52 22 08 50 2C B6 0E
0C 02 00 00 E8 3F FD 52 22 08 E0 2C B6 0E 0C 02
00 00 00 00 00 00 00 00 55 48 8B EC 48 81 EC 80
00 00 00 48 89 75 E8 48 89 7D F0 4C 89 7D F8 48
8B F9 48 8B F2 0F B6 87 88 03 00 00 3B C6 0F 84
43 04 00 00 48 8B CF 49 BB F0 D9 0F 34 0C 02 00
00 41 FF D3 4C 8B C0 F3 0F 10 0D C9 04 00 00 F3
0F 5A C9 66 0F 57 C0 48 8B D5 48 83 C2 D8 F2 0F
5A E9 F3 0F
aobscan(wpn_reloadsa, 48 ?? ?? ?? 48 ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? ?? 48 ?? ?? ?? C3 BA)
}
1337187085
"_health"
4 Bytes
[seewpn_reloadsa]+10
2F4
1337187086
"_armor"
4 Bytes
[seewpn_reloadsa]+10
2F8
1337187052
"_roundsInFirearm"
4 Bytes
[seewpn_reloadsa]+40
1337187054
"CurrentSpreadRange"
Float
[seewpn_reloadsa]+58
1337187062
"Damage"
4 Bytes
[seewpn_reloadsa]+18
10C
1337187100
"Unlock All"
Auto Assembler Script
{
==============================================
Hot Brass by SeryogaSK
----------------------------------------------
Process : Hot Brass.exe
Game Title : Hot Brass
Game Version : 1.0 // maybe wrong since can' find right Game Version
Author : SeryogaSK
----------------------------------------------
Warning: Online use may trigger anti-cheat!
==============================================
}
[ENABLE]
{$lua}
if syntaxcheck then return end
function aob_register(sym, pat1, pat2)
-- Function to show error message
local function showErrorMessage(message)
local errorForm = createForm(false)
errorForm.Caption = "AOB Registration Error"
errorForm.Width = 400
errorForm.Height = 150
errorForm.Position = "poScreenCenter"
errorForm.BorderStyle = "bsDialog"
errorForm.FormStyle = "fsStayOnTop"
local label = createLabel(errorForm)
label.Caption = message
label.Left = 20
label.Top = 30
label.Width = 360
label.Height = 60
label.Alignment = "taCenter"
label.Font.Size = 10
errorForm.show()
-- Auto-close after 3 seconds
local closeTimer = createTimer(errorForm)
closeTimer.Interval = 3000
closeTimer.OnTimer = function()
closeTimer.destroy()
errorForm.close()
end
closeTimer.Enabled = true
end
-- Try first pattern (exact)
local instr = AOBScan(pat1, "+X")
if instr and instr.Count > 0 then
if instr.Count == 1 then
-- First pattern is unique, use it
local addy = instr[0]
instr.destroy()
unregisterSymbol(sym)
registerSymbol(sym, tonumber(addy,16))
return
else
-- First pattern found multiple results
instr.destroy()
end
else
if instr then instr.destroy() end
end
-- Try second pattern (wildcard)
instr = AOBScan(pat2, "+X")
if instr and instr.Count > 0 then
if instr.Count == 1 then
-- Second pattern is unique, use it
local addy = instr[0]
instr.destroy()
unregisterSymbol(sym)
registerSymbol(sym, tonumber(addy,16))
return
else
-- Second pattern found multiple results
local count = instr.Count
instr.destroy()
showErrorMessage("Pattern not unique!\n\nPattern 2 found " .. count .. " results.\nCannot enable script.")
end
else
if instr then instr.destroy() end
showErrorMessage("AOB patterns not found!\n\nBoth patterns failed to locate the injection point.\nThe game may have been updated.")
end
end
aob_register("ply_unlockallza","41 0F B6 47 48 85 C0 75 23 49 8B 47 30 48 8B C8 48 8B D7 4C 63 45 E0 83 38 00 49 BB 20 16 C3 02 0C 02 00 00 41 FF D3"
, "41 ?? ?? ?? ?? 85 ?? 75 ?? 49 ?? ?? ?? 48 ?? ?? 48 ?? ?? 4C ?? ?? ?? 83 ?? ?? 49 ?? ?? ?? ?? ?? ?? ?? ?? ?? 41 ?? ?? 4C ?? ?? EB ?? 41 ?? ?? ?? ?? ?? 49 ?? ?? 48 ?? ?? ?? 4C ?? ?? ?? 4C ?? ?? ?? 48 ?? ?? ?? 5D C3 00 ?? 00 ?? 00 ?? 00 ?? 04 ?? 05 ?? ?? ?? ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 55 48 ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? 4C ?? ?? ??")
{$asm}
alloc(newmem,$1000)
alloc(ply_unlockallzaCopy,30)
registersymbol(ply_unlockallzaCopy)
ply_unlockallzaCopy:
readmem(ply_unlockallza,30)
label(code)
label(return)
newmem:
mov [r15+48],1
code:
// Original code
readmem(ply_unlockallza,5)
jmp return
ply_unlockallza:
jmp newmem
return:
//registersymbol(ply_unlockallza)
[DISABLE]
ply_unlockallza:
readmem(ply_unlockallzaCopy,30)
unregistersymbol(*)
dealloc(*)
{
49 BB C0 DA 7F 31 0C 02 00 00 41 FF D3 48 8B 47
30 48 8B C8 48 8B D5 48 83 C2 A8 4C 8B 85 68 FF
FF FF 4C 89 45 A8 4C 8B 85 70 FF FF FF 4C 89 45
B0 48 8D 12 48 8B 00 FF 90 C0 01 00 00 48 8B 85
60 FF FF FF 48 8B C8 48 8B D5 48 83 C2 B8 4C 8B
85 68 FF FF FF 4C 89 45 B8 4C 8B 85 70 FF FF FF
4C 89 45 C0 48 8D 12 48 8B 00 FF 90 C0 01 00 00
48 8B 47 28 48 8B C8 83 39 00 48 8B C8 33 D2 83
38 00 49 BB 60 30 C8 37 0C 02 00 00 41 FF D3 48
8B 47 30 48 8B C8 83 38 00 49 BB 50 9C 0F 34 0C
02 00 00 41 FF D3 48 8B C8 BA 01 00 00 00 83 38
00 49 BB 60 30 C8 37 0C 02 00 00 41 FF D3 E9 E7
00 00 00 48 8B 47 20 48 89 85 60 FF FF FF 48 B8
60 EC C9 32 0C 02 00 00 48 63 00 89 45 C8 48 8B
CD 48 81 C1 68 FF FF FF 48 8B 55 C8 49 BB A4 DA
7F 31 0C 02 00 00 41 FF D3 48 8B 47 30 48 8B C8
48 8B D5 48 83 C2 D0 4C 8B 85 68 FF FF FF 4C 89
45 D0 4C 8B 85 70 FF FF FF 4C 89 45 D8 48 8D 12
48 8B 00 FF 90 C0 01 00 00 48 8B 85 60 FF FF FF
48 8B C8 48 8B D5 48 83 C2 E0 4C 8B 85 68 FF FF
FF 4C 89 45 E0 4C 8B 85 70 FF FF FF 4C 89 45 E8
48 8D 12 48 8B 00 FF 90 C0 01 00 00 48 8B 47 28
48 8B C8 83 39 00 48 8B C8 33 D2 83 38 00 49 BB
3A 30 C8 37 0C 02 00 00 41 FF D3 48 8B 47 30 48
8B C8 83 38 00 49 BB 9A 89 0F 34 0C 02 00 00 41
FF D3 48 8B C8 BA 01 00 00 00 83 38 00 49 BB 3A
30 C8 37 0C 02 00 00 41 FF D3 48 8B 75 F0 48 8B
7D F8 48 8D 65 00 5D C3 00 00 01 04 02 05 04 03
01 50 00 00 00 00 00 00 00 00 55 48 8B EC 48 83
EC 40 48 89 7D E8 4C 89 75 F0 4C 89 7D F8 4C 8B
F9 48 8B FA 4C 89 45 E0 48 8B 47 48 48 63 40 18
85 C0 7E 09
// ORIGINAL CODE - INJECTION POINT: ""+20C02C37CBA
""+20C02C37CA1: 20C02C37CA1 - mov [rbp-08],edi
""+20C02C37CA4: 20C02C37CA4 - mov r15,rcx
""+20C02C37CA7: 20C02C37CA7 - mov rdi,rdx
""+20C02C37CAA: 20C02C37CAA - mov [rbp-20],r8
""+20C02C37CAE: 20C02C37CAE - mov rax,[rdi+48]
""+20C02C37CB2: 20C02C37CB2 - movsxd rax,dword ptr [rax+18]
""+20C02C37CB6: 20C02C37CB6 - test eax,eax
""+20C02C37CB8: 20C02C37CB8 - jle 20C02C37CC3
// ---------- INJECTING HERE ----------
""+20C02C37CBA: 20C02C37CBA - movzx eax,byte ptr [r15+48] - 41 0F B6 47 48
// ---------- DONE INJECTING ----------
""+20C02C37CBF: 20C02C37CBF - test eax,eax
""+20C02C37CC1: 20C02C37CC1 - jne 20C02C37CE6
""+20C02C37CC3: 20C02C37CC3 - mov rax,[r15+30]
""+20C02C37CC7: 20C02C37CC7 - mov rcx,rax
""+20C02C37CCA: 20C02C37CCA - mov rdx,rdi
""+20C02C37CCD: 20C02C37CCD - movsxd r8,dword ptr [rbp-20]
""+20C02C37CD1: 20C02C37CD1 - cmp dword ptr [rax],00
""+20C02C37CD4: 20C02C37CD4 - mov r11,0000020C02C31620
""+20C02C37CDE: 20C02C37CDE - call r11
41 0F B6 47 48 85 C0 75 23 49 8B 47 30 48 8B C8
48 8B D7 4C 63 45 E0 83 38 00 49 BB 20 16 C3 02
0C 02 00 00 41 FF D3 4C 8B F0 EB 06 41 BE 01 00
00 00 49 8B C6 48 8B 7D E8 4C 8B 75 F0 4C 8B 7D
F8 48 8D 65 00 5D C3 00 00 00 00 00 00 00 01 04
02 05 04 03 01 50 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 55 48 8B EC 48 83 EC 70 48 89
75 E0 48 89 7D E8 4C 89 75 F0 4C 89 7D F8 48 8B
F9 48 8B F2 48 8B 47 18 48 8B C8 48 8B D6 83 38
00 49 BB B0 7E C3 02 0C 02 00 00 41 FF D3 48 8B
47 38 48 85 C0 0F 84 B7 00 00 00 48 8B 47 38 0F
B6 40 5D 85 C0 0F 84 A7 00 00 00 4C 8B 7F 20 85
F6 74 1A 48 8B 47 38 48 8B 48 18 49 BB 88 98 64
33 0C 02 00 00 41 FF D3 4C 8B F0 EB 0A 49 BE C0
E1 E2 32 0C 02 00 00 49 8B CE 49 BB A0 30 64 33
0C 02 00 00 41 FF D3 48 8B D0 49 8B CF 41 83 3F
00 49 BB 38 4C C9 37 0C 02 00 00 41 FF D3 4C 8B
7F 28 85 F6 74 1B 48 8B 4F 38 33 D2 45 33 C0 49
BB 94 71 C3 02 0C 02 00 00 41 FF D3 4C 8B F0 EB
1A 48 B9 80 E1 E2 32 0C 02 00 00 49 BB A0 30 64
33 0C 02 00 00 41 FF D3 4C 8B F0 49 8B CF 49 8B
D6 41 83 3F 00 49 BB 38 4C C9 37 0C 02 00 00 41
FF D3 4C 8B 7F 20 85 F6 74 12 48 B8 6C EC C9 32
0C 02 00 00 48 63 00 89 45 B8 EB 10 48 B8 60 EC
C9 32 0C 02 00 00 48 63 00 89 45 B8 48 8B CD 48
83 C1 C0 48 8B 55 B8 49 BB C0 DA 7F 31 0C 02 00
00 41 FF D3 49 8B CF 48 8B C5 48 83 C0 D0 48 8B
55 C0 48 89 55 D0 48 8B 55 C8 48 89 55 D8 48 8D
10 49 8B 07 FF 90 C0 01 00 00 48 8B 75 E0 48 8B
7D E8 4C 8B 75 F0 4C 8B 7D F8 48 8D 65 00 5D C3
00 00 00 00 00 00 01 04 02 05 04 03 01 50 00 00
00 00 00 00
aobscan(ply_unlockallza, 41 ?? ?? ?? ?? 85 ?? 75 ?? 49 ?? ?? ?? 48 ?? ?? 48 ?? ?? 4C ?? ?? ?? 83 ?? ?? 49 ?? ?? ?? ?? ?? ?? ?? ?? ?? 41 ?? ?? 4C ?? ?? EB ?? 41 ?? ?? ?? ?? ?? 49 ?? ?? 48 ?? ?? ?? 4C ?? ?? ?? 4C ?? ?? ?? 48 ?? ?? ?? 5D C3 00 ?? 00 ?? 00 ?? 00 ?? 04 ?? 05 ?? ?? ?? ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 00 ?? 55 48 ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? 48 ?? ?? ?? 4C ?? ?? ??)
}
1337187082
"--------------------------------------------- ----------------------------------------------"
1
1337187053
"RoundsInPool"
4 Bytes
[seewpn_reloadsa]+44
1337187055
"EquipmentCategory"
4 Bytes
[seewpn_reloadsa]+18
9C
1337187056
"WeaponType"
4 Bytes
[seewpn_reloadsa]+18
E8
1337187057
"NPCAmount"
4 Bytes
[seewpn_reloadsa]+18
F8
1337187058
"AdditionalCameraLead"
Float
[seewpn_reloadsa]+18
FC
1337187059
"CameraSpeedMultiplier"
Float
[seewpn_reloadsa]+18
100
1337187060
"MaxDistance"
Float
[seewpn_reloadsa]+18
104
1337187061
"RoundsPerMinute"
4 Bytes
[seewpn_reloadsa]+18
108
1337187063
"IsIgnoreArmor"
Byte
[seewpn_reloadsa]+18
114
1337187064
"_fireInterval"
4 Bytes
[seewpn_reloadsa]+18
118
1337187065
"_fireEmptyDelay"
Float
[seewpn_reloadsa]+18
11C
1337187066
"BaseSpread"
Float
[seewpn_reloadsa]+18
120
1337187067
"MaxSpread"
Float
[seewpn_reloadsa]+18
124
1337187068
"SpreadIncreasePerShot"
Float
[seewpn_reloadsa]+18
128
1337187069
"_spreadDecreasePerSecond"
Float
[seewpn_reloadsa]+18
12C
1337187070
"_spreadDecreasePerFrame"
Float
[seewpn_reloadsa]+18
130
1337187071
"Amount"
4 Bytes
[seewpn_reloadsa]+18
134
1337187072
"IsNoRefill"
Byte
[seewpn_reloadsa]+18
138
1337187075
"IsRoundInChamber"
Byte
[seewpn_reloadsa]+18
144
1337187076
"RoundsPerMagazine"
4 Bytes
[seewpn_reloadsa]+18
148
1337187077
"Magazines"
4 Bytes
[seewpn_reloadsa]+18
14C
1337187078
"ShellCasingSoundDelay"
Float
[seewpn_reloadsa]+18
150
1337187079
"ShakeIntensity"
Float
[seewpn_reloadsa]+18
154
1337187080
"FireVibrationLevel"
Float
[seewpn_reloadsa]+18
158
1337187081
"FireVibrationDuration"
Float
[seewpn_reloadsa]+18
15C
1337187083
"IsVIP"
Byte
[seewpn_reloadsa]+10
2E8
1337187084
"_hasShownInitialMapTitle"
Byte
[seewpn_reloadsa]+10
2F0
1337187087
"_bloodFootprints"
4 Bytes
[seewpn_reloadsa]+10
32C
1337187088
"_miniMapVisibleTweenID"
4 Bytes
[seewpn_reloadsa]+10
370
1337187089
"_currentMiniMapVisibility"
Float
[seewpn_reloadsa]+10
374
1337187090
"HasDoorCamera"
Byte
[seewpn_reloadsa]+10
390
1337187091
"HasDoorRam"
Byte
[seewpn_reloadsa]+10
392
1337187092
"HasGasMask"
Byte
[seewpn_reloadsa]+10
393
1337187093
"IsTacticalOn"
Byte
[seewpn_reloadsa]+10
395
1337187094
"_isDoorCameraTacticalOn"
Byte
[seewpn_reloadsa]+10
394
1337187095
"_tacticalTweenId"
4 Bytes
[seewpn_reloadsa]+10
398
1337187096
"_currentTacticalValue"
Float
[seewpn_reloadsa]+10
39C
1337187097
"_isTasing"
Byte
[seewpn_reloadsa]+10
3A0
1337187098
"_hasTaseDamaged"
Byte
[seewpn_reloadsa]+10
3B1
1337187105
"━━━━━━━━ 📡 Links ━━━━━━━━"
1
1337187106
"├─ YouTube"
Auto Assembler Script
{$lua}
[ENABLE]
shellExecute("https://www.youtube.com/@SeryogaSK");
createThread(function();sleep(100);memrec.Active=false;end);
[DISABLE]
1337187107
"└─ OCT PROFILE"
Auto Assembler Script
{$lua}
if syntaxcheck then return end
--if not monopipe then if LaunchMonoDataCollector() == 0 then error(MessageDialog('Failed to Launch Mono Data Collector', mtError, mbClose)) end end
{$asm}
[ENABLE]
{$lua}
shellExecute("https://opencheattables.com/memberlist.php?mode=viewprofile&u=6096");
createThread(function();sleep(100);memrec.Active=false;end);
{$asm}
[DISABLE]
3755
"━━━━━━━━ 📜 Last Update ━━━━━━━━"
1
3756
"└─ 20.06.2026"
1
-- Cheat Table Decorator
function decorateSSKTable()
local mainForm = getMainForm()
-- Main Form Styling
mainForm.Caption = 'Hot Brass (Steam) - Enhanced Table [by SeryogaSK] {Habibrahimov.com}'
getAutoAttachList().add("Hot Brass.exe")
end
-- Execute when table loads
decorateSSKTable()