1337095168
"Compact mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1337096160
"Allow VEH"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
local symbolName = "KERNELBASE.SetThreadContext"
[ENABLE]
local bt = {195, 144, 144, 144} --C3 90 90 90 (ret nop nop nop)
writeBytes(symbolName, bt)
[DISABLE]
local bt = {72, 131, 236, 40} --48 83 EC 28 (sub rsp, 28)
writeBytes(symbolName, bt)
1337096161
"+Scripts"
1
87685
"Min. Zenny 500,000"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_MONEY_SELL_DEC,MonsterHunterRise.exe,8B 00 89 42 18 E9) // should be unique
alloc(newmem,$1000,INJECT_MONEY_SELL_DEC)
label(code)
label(return)
newmem:
code:
mov eax,[rax]
cmp eax, #500000
jg @F
mov eax, #500000
@@:
mov [rdx+18],eax
jmp return
INJECT_MONEY_SELL_DEC:
jmp newmem
return:
registersymbol(INJECT_MONEY_SELL_DEC)
[DISABLE]
INJECT_MONEY_SELL_DEC:
db 8B 00 89 42 18 E9
unregistersymbol(INJECT_MONEY_SELL_DEC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1C685C4
MonsterHunterRise.exe+1C6859B: 45 85 C0 - test r8d,r8d
MonsterHunterRise.exe+1C6859E: 7F 2E - jg MonsterHunterRise.exe+1C685CE
MonsterHunterRise.exe+1C685A0: 44 03 42 18 - add r8d,[rdx+18]
MonsterHunterRise.exe+1C685A4: 48 8D 4C 24 10 - lea rcx,[rsp+10]
MonsterHunterRise.exe+1C685A9: 44 8B 0D 44 82 CF 0C - mov r9d,[MonsterHunterRise.exe+E9607F4]
MonsterHunterRise.exe+1C685B0: 45 3B C1 - cmp r8d,r9d
MonsterHunterRise.exe+1C685B3: 44 89 4C 24 18 - mov [rsp+18],r9d
MonsterHunterRise.exe+1C685B8: 48 0F 4D C1 - cmovge rax,rcx
MonsterHunterRise.exe+1C685BC: 44 89 44 24 10 - mov [rsp+10],r8d
MonsterHunterRise.exe+1C685C1: 49 8B CB - mov rcx,r11
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1C685C4: 8B 00 - mov eax,[rax]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1C685C6: 89 42 18 - mov [rdx+18],eax
MonsterHunterRise.exe+1C685C9: E9 C2 50 0E 00 - jmp MonsterHunterRise.exe+1D4D690
MonsterHunterRise.exe+1C685CE: 8B 15 1C 82 CF 0C - mov edx,[MonsterHunterRise.exe+E9607F0]
MonsterHunterRise.exe+1C685D4: 4C 8D 4C 24 10 - lea r9,[rsp+10]
MonsterHunterRise.exe+1C685D9: 41 8B 4A 18 - mov ecx,[r10+18]
MonsterHunterRise.exe+1C685DD: 41 03 C8 - add ecx,r8d
MonsterHunterRise.exe+1C685E0: 89 54 24 10 - mov [rsp+10],edx
MonsterHunterRise.exe+1C685E4: 3B CA - cmp ecx,edx
MonsterHunterRise.exe+1C685E6: 89 4C 24 18 - mov [rsp+18],ecx
MonsterHunterRise.exe+1C685EA: 49 0F 4D C1 - cmovge rax,r9
}
1337096176
"Get Damage / defense limit cap...etc"
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
local _dbg = true
if (_dbg) then
AOBs = {
{["name"]="damage", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? F3 48 0F 2C C9", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="damage_base"},
{["name"]="defense", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? 48 8B 83", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="defense_base"},
{["name"]="wirebug3dur", ["aob"]="F2 44 0F 10 3D ?? ?? ?? ?? 48 89 B4 24 ?? ?? ?? ?? 48 89", ["pos"]= 5, ["aoblen"]= 9 , ["symbol"]="wirebug3dur_base"},
{["name"]="itembuff", ["aob"]="F2 0F 5C 05 ?? ?? ?? ?? F2 0F 5A C0 F3 0F 11 46 ??", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="itembuff_base"},
}
local a1 = 'n/a'
local a2 = 'n/a'
local a3 = 0
local a4 = 0
local a5 = 'n/a'
for k,v in pairs(AOBs) do
-- k = array seq.
for k1,v1 in pairs(v) do
if (k1 == 'name') then
a1 = v1
end
if (k1 == 'aob') then
a2 = v1
end
if (k1 == 'pos') then
a3 = v1
end
if (k1 == 'aoblen') then
a4 = v1
end
if (k1 == 'symbol') then
a5 = v1
end
--print(k1,v1)
end
local aob_addr_str = AOBScanModule('MonsterHunterRise.exe', a2, '+X-C-W')
local name_addr_str = getAddressSafe(aob_addr_str[0])+a3
local name_addr_val = readInteger(name_addr_str)
local aob_addr_val = tonumber(aob_addr_str[0], 16)
local final_addr_val = name_addr_val + aob_addr_val + a4
--print(a1 .. " addr: " .. string.format("%08X", final_addr_val))
registerSymbol(a5, final_addr_val)
--print('-------')
end
--local ttt = readDouble('wirebug3dur_base')
--print(getAddress('wirebug3dur_base'))
--writeDouble(getAddress('wirebug3dur_base'), 450)
--writeInteger('defense_base', 3120)
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
local disable_array = {"damage_base", "defense_base", "wirebug3dur_base", "itembuff_base"}
local a_len = #(disable_array)
local i = 0
for i = 1, a_len do
--print(disable_array[i])
unregisterSymbol(disable_array[i])
end
getLuaEngine().Close()
1337096177
"Damage"
0
Float
damage_base
1337096178
"Defense"
0
Float
defense_base
1337096234
"Wirebug+ duration (90, 450, 1180, 3690...)"
0
Double
wirebug3dur_base
1337096235
"Item buff duration"
0
Double
itembuff_base
1337096173
"Swap item in itembox (confirm menu) -> fill count"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-07-02
Author : bbfox @ https://opencheattables.org
}
[ENABLE]
aobscanmodule(INJECT_SWAP_ITEM_IN_ITEMBOX,MonsterHunterRise.exe,48 8B 46 20 01 68 14) // should be unique
alloc(newmem,$1000,INJECT_SWAP_ITEM_IN_ITEMBOX)
label(code)
label(return)
label(i_min_count)
newmem:
cmp ebp, [i_min_count]
jg @F
mov ebp, [i_min_count]
code:
mov rax,[rsi+20]
add [rax+14],ebp
jmp return
align 10 cc
i_min_count:
dd #2000
INJECT_SWAP_ITEM_IN_ITEMBOX:
jmp newmem
nop 2
return:
registersymbol(INJECT_SWAP_ITEM_IN_ITEMBOX)
registersymbol(i_min_count)
[DISABLE]
INJECT_SWAP_ITEM_IN_ITEMBOX:
db 48 8B 46 20 01 68 14
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+319FF69
MonsterHunterRise.exe+319FF4F: 48 8B 41 30 - mov rax,[rcx+30]
MonsterHunterRise.exe+319FF53: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+319FF56: FF D0 - call rax
MonsterHunterRise.exe+319FF58: 3B C7 - cmp eax,edi
MonsterHunterRise.exe+319FF5A: 73 04 - jae MonsterHunterRise.exe+319FF60
MonsterHunterRise.exe+319FF5C: 8B DF - mov ebx,edi
MonsterHunterRise.exe+319FF5E: 2B D8 - sub ebx,eax
MonsterHunterRise.exe+319FF60: 48 8B 7C 24 30 - mov rdi,[rsp+30]
MonsterHunterRise.exe+319FF65: 3B EB - cmp ebp,ebx
MonsterHunterRise.exe+319FF67: 73 09 - jae MonsterHunterRise.exe+319FF72
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+319FF69: 48 8B 46 20 - mov rax,[rsi+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+319FF6D: 01 68 14 - add [rax+14],ebp
MonsterHunterRise.exe+319FF70: EB 07 - jmp MonsterHunterRise.exe+319FF79
MonsterHunterRise.exe+319FF72: 48 8B 46 20 - mov rax,[rsi+20]
MonsterHunterRise.exe+319FF76: 01 58 14 - add [rax+14],ebx
MonsterHunterRise.exe+319FF79: 48 8B 5C 24 38 - mov rbx,[rsp+38]
MonsterHunterRise.exe+319FF7E: 48 8B 6C 24 40 - mov rbp,[rsp+40]
MonsterHunterRise.exe+319FF83: 48 8B 74 24 48 - mov rsi,[rsp+48]
MonsterHunterRise.exe+319FF88: 48 83 C4 20 - add rsp,20
MonsterHunterRise.exe+319FF8C: 41 5E - pop r14
MonsterHunterRise.exe+319FF8E: C3 - ret
}
1337096179
"***Turn off when not in use***"
400080
1
1337096174
"Min. count"
0
4 Bytes
i_min_count
1337096180
"Turn following scripts on / off (Disable scripts to avoid crash during zoning if not using REFramework)"
Auto Assembler Script
[ENABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
battle_array = {87687, 1337095479, 1337095185, 1337095183, 1337095187, 1337095320, 1337096164, 1337096166, 1337095309}
--battle_array_off = {87685, 87687, 1337095479, 1337096129, 1337095185, 1337095183, 1337096131, 1337096132}
--1337095187 xCrit up buff long duration
--1337095320 xPrevent debuff duration+ (snake)
--1337095479 Stamina never below 2000
local a_len = #(battle_array)
local i = 0
for i = 1, a_len do
getAddressList().getMemoryRecordByID(battle_array[i]).Active = true
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
local a_len_d = #(battle_array)
local i1 = 0
for i1 = 1, a_len_d do
if (getAddressList().getMemoryRecordByID(battle_array[i1]).Active)
then
getAddressList().getMemoryRecordByID(battle_array[i1]).Active = false
end
end
getLuaEngine().Close()
87687
"Items do not decrease"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_ITEM_SELL_DEC,MonsterHunterRise.exe,29 72 14 EB 03) // should be unique
alloc(newmem,$1000,INJECT_ITEM_SELL_DEC)
label(code)
label(return)
label(is_inc_when_dec)
label(i_last_item_count_addr)
label(i_last_item_id)
label(is_limit_item)
label(is_bag_only)
label(is_ammo_only)
label(item_container_id)
label(item_container_id2)
label(is_env_item_only)
newmem:
code:
push rax
lea rax, [rdx+14]
mov [i_last_item_count_addr], rax
xor eax, eax
mov ax, [rdx+10]
mov [i_last_item_id], ax
mov ax, [rdx+14+2C]
mov [item_container_id], ax
mov ax, [rdx+14+2E]
mov [item_container_id2], ax
pop rax
sub [rdx+14],esi
// ignore list
cmp [i_last_item_id], #122 //raw meat
je last_chk
cmp [is_limit_item], 1
jne no_limit_chk
// General
// 1-9
cmp [i_last_item_id], #9
jle no_limit_chk
// 13 - 15
cmp [i_last_item_id], #12
jle last_chk
cmp [i_last_item_id], #21
jle no_limit_chk
// ammo
// 30-58
cmp [i_last_item_id], #30
jl last_chk
cmp [i_last_item_id], #58
jle no_limit_chk
// ammo
// 60-65
cmp [i_last_item_id], #60
jl last_chk
cmp [i_last_item_id], #65
jle no_limit_chk
// General
// 123, 129, 137
cmp [i_last_item_id], #123
je no_limit_chk
cmp [i_last_item_id], #129
je no_limit_chk
cmp [i_last_item_id], #137
je no_limit_chk
// Ammo
// 138-140
cmp [i_last_item_id], #138
jl last_chk
cmp [i_last_item_id], #140
jle no_limit_chk
// Ammo
//152-162
cmp [i_last_item_id], #152
jl last_chk
cmp [i_last_item_id], #162
jle no_limit_chk
// General
// 163, 467-468, 471, 473, 475-480, 482-484, 487, 491, 493-494
cmp [i_last_item_id], #163
je no_limit_chk
cmp [i_last_item_id], #467
je no_limit_chk
cmp [i_last_item_id], #468
je no_limit_chk
cmp [i_last_item_id], #471
je no_limit_chk
cmp [i_last_item_id], #473
je no_limit_chk
cmp [i_last_item_id], #475
jl last_chk
cmp [i_last_item_id], #480
jle no_limit_chk
cmp [i_last_item_id], #482
jl last_chk
cmp [i_last_item_id], #484
jle no_limit_chk
cmp [i_last_item_id], #487
je no_limit_chk
cmp [i_last_item_id], #491
je no_limit_chk
cmp [i_last_item_id], #493
je no_limit_chk
cmp [i_last_item_id], #494
je no_limit_chk
jmp last_chk
no_limit_chk:
cmp [is_bag_only], 1
jne chk_ammo_only
cmp [item_container_id], 1
je go_add_back
//jmp chk_ammo_only
chk_ammo_only:
cmp [is_ammo_only], 1
jne chk_env_item_only
cmp [item_container_id], 3
je go_add_back
//cmp [item_container_id], 4
//je go_add_back
//jmp chk_env_item_only
chk_env_item_only:
cmp [is_env_item_only], 1
jne any_only_flag_chk
cmp [item_container_id2], 3
je go_add_back
any_only_flag_chk: //check if any "only" switch on
push rax
xor eax, eax
add eax, [is_bag_only]
add eax, [is_ammo_only]
add eax, [is_env_item_only]
cmp eax, 0
pop rax
jne last_chk
go_add_back:
add [rdx+14],esi
cmp [is_inc_when_dec], 1
jne @F
add [rdx+14],esi
last_chk:
//jmp MonsterHunterRise.exe+32A7E92
reassemble(INJECT_ITEM_SELL_DEC+3)
jmp return
align 10 cc
is_inc_when_dec:
dd 0
i_last_item_count_addr:
dq 0
i_last_item_id:
dd 0
is_limit_item:
dd 0
is_bag_only:
dd 1 // Off. 2C; 1
is_ammo_only:
dd 1 // Off. 2C; 3
is_env_item_only:
dd 1 // Off. 2E; 3
item_container_id:
dd a
item_container_id2:
dd a
INJECT_ITEM_SELL_DEC:
jmp newmem
return:
registersymbol(is_env_item_only)
registersymbol(is_ammo_only)
registersymbol(is_bag_only)
registersymbol(is_limit_item)
registersymbol(i_last_item_count_addr)
registersymbol(i_last_item_id)
registersymbol(is_inc_when_dec)
registersymbol(INJECT_ITEM_SELL_DEC)
[DISABLE]
INJECT_ITEM_SELL_DEC:
db 29 72 14 EB 03
unregistersymbol(is_env_item_only)
unregistersymbol(is_ammo_only)
unregistersymbol(is_bag_only)
unregistersymbol(is_limit_item)
unregistersymbol(i_last_item_count_addr)
unregistersymbol(i_last_item_id)
unregistersymbol(is_inc_when_dec)
unregistersymbol(INJECT_ITEM_SELL_DEC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+29FD76A
MonsterHunterRise.exe+29FD749: 49 8B 42 28 - mov rax,[r10+28]
MonsterHunterRise.exe+29FD74D: FF D0 - call rax
MonsterHunterRise.exe+29FD74F: 3D 00 00 00 04 - cmp eax,04000000
MonsterHunterRise.exe+29FD754: 74 75 - je MonsterHunterRise.exe+29FD7CB
MonsterHunterRise.exe+29FD756: 48 89 7C 24 30 - mov [rsp+30],rdi
MonsterHunterRise.exe+29FD75B: 48 8B 53 20 - mov rdx,[rbx+20]
MonsterHunterRise.exe+29FD75F: 33 FF - xor edi,edi
MonsterHunterRise.exe+29FD761: 48 63 42 14 - movsxd rax,dword ptr [rdx+14]
MonsterHunterRise.exe+29FD765: 48 3B C6 - cmp rax,rsi
MonsterHunterRise.exe+29FD768: 7C 05 - jl MonsterHunterRise.exe+29FD76F
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+29FD76A: 29 72 14 - sub [rdx+14],esi
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+29FD76D: EB 03 - jmp MonsterHunterRise.exe+29FD772
MonsterHunterRise.exe+29FD76F: 89 7A 14 - mov [rdx+14],edi
MonsterHunterRise.exe+29FD772: 48 8B 05 27 B5 69 09 - mov rax,[MonsterHunterRise.exe+C098CA0]
MonsterHunterRise.exe+29FD779: 83 B8 D0 00 00 00 01 - cmp dword ptr [rax+000000D0],01
MonsterHunterRise.exe+29FD780: 74 1B - je MonsterHunterRise.exe+29FD79D
MonsterHunterRise.exe+29FD782: 48 8B 43 20 - mov rax,[rbx+20]
MonsterHunterRise.exe+29FD786: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+29FD789: 48 8B 15 98 57 69 09 - mov rdx,[MonsterHunterRise.exe+C092F28]
MonsterHunterRise.exe+29FD790: 44 8B 48 14 - mov r9d,[rax+14]
MonsterHunterRise.exe+29FD794: 44 8B 40 10 - mov r8d,[rax+10]
}
Toggle Activation
18
65
0
1337095182
"***Notice: Disable when quest completed (if hang) & crafting***"
800080
1
87688
"increase#, when decreased (On/Off)"
0:Off
1:On
0
4 Bytes
is_inc_when_dec
1337096181
"Limit items"
1
1337095180
"Limit items (Ammos & some general stuff) (On/Off)"
0:Off
1:On
0
4 Bytes
is_limit_item
1337096182
"Bag only (On/Off)"
0:Off
1:On
0
4 Bytes
is_bag_only
1337095316
"Ammo only (On/Off)"
0:Off
1:On
0
4 Bytes
is_ammo_only
1337095317
"Hunting Helpers only (On/Off)"
0:Off
1:On
0
4 Bytes
is_env_item_only
1337095181
"_debug"
1
1337095174
"Last dec. item address"
1
0
8 Bytes
i_last_item_id_addr
1337095176
"Last dec. item address count"
0
4 Bytes
i_last_item_count_addr
0
1337095177
"Last dec. item ID"
0
FF8080
2 Bytes
i_last_item_count_addr
-4
1337095178
"(Unknown) Last dec. item ??"
0410:General?
0420:Env. item?
1
0
2 Bytes
i_last_item_count_addr
-2
1337095179
"Last dec. item ?? & ID (hex; use w/ caution)"
04200000:泥球甲蟲
04200001:麻痺斯蛙
04200002:魁儡蜘蛛
04200003:落雨蝸牛
04200004:塗泥陸龜
04200005:臭臭鼬鼠
04200006:子泣雉雞
04200007:火石甲蟲
04200008:雷毛甲蟲
04200009:雪石甲蟲
0420000A:撒菱蟲
0420000B:提燈妖蟲
0420000C:加釀兔
0420000D:轆轤蛇
0420000E:睡眠瓦斯蛙
04200010:炸彈瓦斯蛙
04200014:一目蟹
1
0
4 Bytes
i_last_item_count_addr
-4
1337096162
"Last dec. item Serial"
0
2 Bytes
i_last_item_count_addr
30
1337095312
"Last dec. item Serial -2"
0:Bag/Temp. bag/Ammo
1:Item box
3:Env. item
18426:18426
0
2 Bytes
i_last_item_count_addr
2E
1337095313
"Last dec. item Serial -4"
0:Item box/Env. item
1:Bag
2:Temp. bag
3:Ammo
0
C08000
2 Bytes
i_last_item_count_addr
2C
1337095311
"Last dec. item ????"
2:Item box/Env. item
3:Bag/Temp. Bag
4:Bag/Ammo
0
4 Bytes
i_last_item_count_addr
24
1337096163
"Damage -> recovery bar"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-06-30
Author :
}
[ENABLE]
aobscanmodule(INJECT_HP_DMG,MonsterHunterRise.exe,89 43 24 48 8B 5C 24 50) // should be unique
alloc(newmem,$1000,INJECT_HP_DMG)
label(code)
label(return)
newmem:
mov eax, [rbx+18]
code:
mov [rbx+24],eax
mov rbx,[rsp+50]
jmp return
INJECT_HP_DMG:
jmp newmem
nop 3
return:
registersymbol(INJECT_HP_DMG)
[DISABLE]
INJECT_HP_DMG:
db 89 43 24 48 8B 5C 24 50
unregistersymbol(INJECT_HP_DMG)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+39D6929
MonsterHunterRise.exe+39D6900: 0F 5A D8 - cvtps2pd xmm3,xmm0
MonsterHunterRise.exe+39D6903: 66 0F 5A C6 - cvtpd2ps xmm0,xmm6
MonsterHunterRise.exe+39D6907: F2 0F 59 D9 - mulsd xmm3,xmm1
MonsterHunterRise.exe+39D690B: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+39D690E: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+39D6912: F2 0F 5E 1D FE A9 58 03 - divsd xmm3,[MonsterHunterRise.exe+6F61318]
MonsterHunterRise.exe+39D691A: F3 0F 2A C8 - cvtsi2ss xmm1,eax
MonsterHunterRise.exe+39D691E: 0F 5A D1 - cvtps2pd xmm2,xmm1
MonsterHunterRise.exe+39D6921: F2 0F 58 DA - addsd xmm3,xmm2
MonsterHunterRise.exe+39D6925: F2 0F 2C C3 - cvttsd2si eax,xmm3
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+39D6929: 89 43 24 - mov [rbx+24],eax
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+39D692C: 48 8B 5C 24 50 - mov rbx,[rsp+50]
MonsterHunterRise.exe+39D6931: 0F 28 74 24 30 - movaps xmm6,[rsp+30]
MonsterHunterRise.exe+39D6936: 48 8B 6C 24 58 - mov rbp,[rsp+58]
MonsterHunterRise.exe+39D693B: 48 8B 74 24 60 - mov rsi,[rsp+60]
MonsterHunterRise.exe+39D6940: 48 8B 7C 24 68 - mov rdi,[rsp+68]
MonsterHunterRise.exe+39D6945: 48 83 C4 40 - add rsp,40
MonsterHunterRise.exe+39D6949: 41 5E - pop r14
MonsterHunterRise.exe+39D694B: C3 - ret
MonsterHunterRise.exe+39D694C: CC - int 3
MonsterHunterRise.exe+39D694D: CC - int 3
}
1337095309
"+Buff time+ / Stamina (turn on before use item)"
1
1337095479
"Stamina never below 2000"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_MIN_STEMIA,MonsterHunterRise.exe,F3 0F 11 48 28 77) // should be unique
alloc(newmem,$1000,INJECT_MIN_STEMIA)
label(code)
label(return)
label(xmm_tmp10)
label(fl_stemia_watermark)
newmem:
code:
movq [xmm_tmp10], xmm10
movq xmm10, [fl_stemia_watermark]
pushf
comiss, xmm1, xmm10
ja @F
movss xmm1, xmm10
@@:
popf
movss [rax+28],xmm1
movq xmm10, [xmm_tmp10]
jmp return
align 10 cc
fl_stemia_watermark:
dq (float)3000
xmm_tmp10:
dq 0
INJECT_MIN_STEMIA:
jmp newmem
return:
registersymbol(INJECT_MIN_STEMIA)
[DISABLE]
INJECT_MIN_STEMIA:
db F3 0F 11 48 28
unregistersymbol(INJECT_MIN_STEMIA)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+39DBE5E
MonsterHunterRise.exe+39DBE33: F2 0F 59 C8 - mulsd xmm1,xmm0
MonsterHunterRise.exe+39DBE37: 66 44 0F 5A C1 - cvtpd2ps xmm8,xmm1
MonsterHunterRise.exe+39DBE3C: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+39DBE43: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+39DBE46: F3 41 0F 5A C0 - cvtss2sd xmm0,xmm8
MonsterHunterRise.exe+39DBE4B: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+39DBE50: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+39DBE53: F2 0F 58 C8 - addsd xmm1,xmm0
MonsterHunterRise.exe+39DBE57: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+39DBE5B: 0F 2F CF - comiss xmm1,xmm7
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+39DBE5E: F3 0F 11 48 28 - movss [rax+28],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+39DBE63: 77 07 - ja MonsterHunterRise.exe+39DBE6C
MonsterHunterRise.exe+39DBE65: C7 40 28 00 00 00 00 - mov [rax+28],00000000
MonsterHunterRise.exe+39DBE6C: F3 0F 10 50 2C - movss xmm2,[rax+2C]
MonsterHunterRise.exe+39DBE71: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+39DBE76: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+39DBE79: 0F 5A C2 - cvtps2pd xmm0,xmm2
MonsterHunterRise.exe+39DBE7C: 66 0F 2F C1 - comisd xmm0,xmm1
MonsterHunterRise.exe+39DBE80: 77 05 - ja MonsterHunterRise.exe+39DBE87
MonsterHunterRise.exe+39DBE82: F3 0F 11 50 28 - movss [rax+28],xmm2
MonsterHunterRise.exe+39DBE87: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
}
1337096164
"Demon Powder up+ (Power) / long duration"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_DEMON_POWDER_UP,MonsterHunterRise.exe,F3 0F 11 80 A8 00 00 00 E8) // should be unique
alloc(newmem,$1000,INJECT_DEMON_POWDER_UP)
label(code)
label(return)
label(i_atk_up)
newmem:
code:
push rbx
mov ebx, [i_atk_up]
mov [rax+A0],ebx
mov rbx, (float)324000
movq xmm0, rbx
pop rbx
movss [rax+000000A8],xmm0
jmp return
align 10 cc
i_atk_up:
dd #120
INJECT_DEMON_POWDER_UP:
jmp newmem
nop 3
return:
registersymbol(i_atk_up)
registersymbol(INJECT_DEMON_POWDER_UP)
[DISABLE]
INJECT_DEMON_POWDER_UP:
db F3 0F 11 80 A8 00 00 00
unregistersymbol(i_atk_up)
unregistersymbol(INJECT_DEMON_POWDER_UP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3B136A9
MonsterHunterRise.exe+3B1367A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B13681: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3B13684: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3B13688: 41 B9 6E 00 00 00 - mov r9d,0000006E
MonsterHunterRise.exe+3B1368E: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B13691: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B13694: 89 98 A0 00 00 00 - mov [rax+000000A0],ebx
MonsterHunterRise.exe+3B1369A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B136A1: 45 8D 41 F6 - lea r8d,[r9-0A]
MonsterHunterRise.exe+3B136A5: 66 0F 5A C1 - cvtpd2ps xmm0,xmm1
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3B136A9: F3 0F 11 80 A8 00 00 00 - movss [rax+000000A8],xmm0
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3B136B1: E8 BA 54 DD FF - call MonsterHunterRise.exe+38E8B70
MonsterHunterRise.exe+3B136B6: 45 8B C7 - mov r8d,r15d
MonsterHunterRise.exe+3B136B9: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136BC: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B136BF: E8 EC 36 00 00 - call MonsterHunterRise.exe+3B16DB0
MonsterHunterRise.exe+3B136C4: E9 DF 1F 00 00 - jmp MonsterHunterRise.exe+3B156A8
MonsterHunterRise.exe+3B136C9: 48 8B 05 A0 8E E4 0A - mov rax,[skills_current]
MonsterHunterRise.exe+3B136D0: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136D3: F3 0F 10 05 15 0C E5 0A - movss xmm0,[MonsterHunterRise.exe+E9642F0]
MonsterHunterRise.exe+3B136DB: 0F 5A C0 - cvtps2pd xmm0,xmm0
}
1337096165
"Atk+ value"
10:10
25:25
45:45
100:100
500:500
0
4 Bytes
i_atk_up
1337095187
"Crit up buff long duration"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_CRIT_TIME,MonsterHunterRise.exe,F3 0F 11 88 C4 00 00 00 E9) // should be unique
alloc(newmem,$1000,INJECT_CRIT_TIME)
label(code)
label(return)
newmem:
code:
push rbx
mov rbx (float)324000
movq xmm1, rbx
pop rbx
movss [rax+000000C4],xmm1
jmp return
INJECT_CRIT_TIME:
jmp newmem
nop 3
return:
registersymbol(INJECT_CRIT_TIME)
[DISABLE]
INJECT_CRIT_TIME:
db F3 0F 11 88 C4 00 00 00
unregistersymbol(INJECT_CRIT_TIME)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3A95AED
MonsterHunterRise.exe+3A95ABD: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
MonsterHunterRise.exe+3A95AC4: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3A95AC7: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3A95ACB: F3 0F 10 05 1D E8 EC 0A - movss xmm0,[MonsterHunterRise.exe+E9642F0]
MonsterHunterRise.exe+3A95AD3: F2 0F 59 0D 2D B8 4C 03 - mulsd xmm1,[MonsterHunterRise.exe+6F61308]
MonsterHunterRise.exe+3A95ADB: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+3A95ADE: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+3A95AE2: 0F 5A D1 - cvtps2pd xmm2,xmm1
MonsterHunterRise.exe+3A95AE5: F2 0F 59 D0 - mulsd xmm2,xmm0
MonsterHunterRise.exe+3A95AE9: 66 0F 5A CA - cvtpd2ps xmm1,xmm2
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3A95AED: F3 0F 11 88 C4 00 00 00 - movss [rax+000000C4],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3A95AF5: E9 AA 03 00 00 - jmp MonsterHunterRise.exe+3A95EA4
MonsterHunterRise.exe+3A95AFA: 48 8B 0D AF 92 EC 0A - mov rcx,[quest_session]
MonsterHunterRise.exe+3A95B01: 48 85 C9 - test rcx,rcx
MonsterHunterRise.exe+3A95B04: 74 0B - je MonsterHunterRise.exe+3A95B11
MonsterHunterRise.exe+3A95B06: 48 83 79 10 00 - cmp qword ptr [rcx+10],00
MonsterHunterRise.exe+3A95B0B: 74 04 - je MonsterHunterRise.exe+3A95B11
MonsterHunterRise.exe+3A95B0D: 32 C0 - xor al,al
MonsterHunterRise.exe+3A95B0F: EB 02 - jmp MonsterHunterRise.exe+3A95B13
MonsterHunterRise.exe+3A95B11: B0 01 - mov al,01
MonsterHunterRise.exe+3A95B13: 0F B6 C0 - movzx eax,al
}
1337095185
"Hardshell Powder+ (Power) / long duration"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_Hardshell_Powder,MonsterHunterRise.exe,F3 0F 11 98 AC 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_Hardshell_Powder)
label(code)
label(return)
label(i_hardshell_atk)
newmem:
code:
push rbx
mov ebx, [i_hardshell_atk]
mov [rax+000000A4],ebx
mov rbx, (Double)324000
movq xmm3, rbx
pop rbx
movss [rax+000000AC],xmm3
jmp return
align 10 cc
i_hardshell_atk:
dd #385
INJECT_Hardshell_Powder:
jmp newmem
nop 3
return:
registersymbol(i_hardshell_atk)
registersymbol(INJECT_Hardshell_Powder)
[DISABLE]
INJECT_Hardshell_Powder:
db F3 0F 11 98 AC 00 00 00
unregistersymbol(i_hardshell_atk)
unregistersymbol(INJECT_Hardshell_Powder)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3AB6DC8
MonsterHunterRise.exe+3AB6D9D: 48 8B 15 54 6D EA 0A - mov rdx,[MonsterHunterRise.exe+E95DAF8]
MonsterHunterRise.exe+3AB6DA4: E8 F7 DF 07 FE - call MonsterHunterRise.exe+1B34DA0
MonsterHunterRise.exe+3AB6DA9: 48 83 C4 38 - add rsp,38
MonsterHunterRise.exe+3AB6DAD: C3 - ret
MonsterHunterRise.exe+3AB6DAE: CC - int 3
MonsterHunterRise.exe+3AB6DAF: CC - int 3
MonsterHunterRise.exe+3AB6DB0: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3AB6DB7: 44 89 80 A4 00 00 00 - mov [rax+000000A4],r8d
MonsterHunterRise.exe+3AB6DBE: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+3AB6DC1: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3AB6DC8: F3 0F 11 98 AC 00 00 00 - movss [rax+000000AC],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3AB6DD0: E9 AB FE FE FF - jmp MonsterHunterRise.exe+3AA6C80
MonsterHunterRise.exe+3AB6DD5: CC - int 3
MonsterHunterRise.exe+3AB6DD6: CC - int 3
MonsterHunterRise.exe+3AB6DD7: CC - int 3
MonsterHunterRise.exe+3AB6DD8: CC - int 3
MonsterHunterRise.exe+3AB6DD9: CC - int 3
MonsterHunterRise.exe+3AB6DDA: CC - int 3
MonsterHunterRise.exe+3AB6DDB: CC - int 3
MonsterHunterRise.exe+3AB6DDC: CC - int 3
MonsterHunterRise.exe+3AB6DDD: CC - int 3
}
1337095186
"Def+ value"
10:10
25:25
45:45
100:100
220:220
500:500
1500:1500
0
4 Bytes
i_hardshell_atk
1337095183
"Dash juice long duration"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_DASH_JUICE_LONG,MonsterHunterRise.exe,F3 0F 11 90 9C 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_DASH_JUICE_LONG)
label(code)
label(return)
newmem:
code:
push rax
mov rax, (Float)324000
movq xmm2, rax
pop rax
movss [rax+0000009C],xmm2
jmp return
INJECT_DASH_JUICE_LONG:
jmp newmem
nop 3
return:
registersymbol(INJECT_DASH_JUICE_LONG)
[DISABLE]
INJECT_DASH_JUICE_LONG:
db F3 0F 11 90 9C 00 00 00
unregistersymbol(INJECT_DASH_JUICE_LONG)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+521B7F
MonsterHunterRise.exe+521B5D: CC - int 3
MonsterHunterRise.exe+521B5E: CC - int 3
MonsterHunterRise.exe+521B5F: CC - int 3
MonsterHunterRise.exe+521B60: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+521B67: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+521B6A: F3 0F 5A C2 - cvtss2sd xmm0,xmm2
MonsterHunterRise.exe+521B6E: F3 0F 10 88 9C 00 00 00 - movss xmm1,[rax+0000009C]
MonsterHunterRise.exe+521B76: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+521B79: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+521B7D: 73 08 - jae MonsterHunterRise.exe+521B87
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+521B7F: F3 0F 11 90 9C 00 00 00 - movss [rax+0000009C],xmm2
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+521B87: C3 - ret
MonsterHunterRise.exe+521B88: CC - int 3
MonsterHunterRise.exe+521B89: CC - int 3
MonsterHunterRise.exe+521B8A: CC - int 3
MonsterHunterRise.exe+521B8B: CC - int 3
MonsterHunterRise.exe+521B8C: CC - int 3
MonsterHunterRise.exe+521B8D: CC - int 3
MonsterHunterRise.exe+521B8E: CC - int 3
MonsterHunterRise.exe+521B8F: CC - int 3
MonsterHunterRise.exe+521B90: 44 8B 42 70 - mov r8d,[rdx+70]
}
1337095320
"Prevent debuff duration+ (snake)"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_SNAKE_PREV_DEBUFF,MonsterHunterRise.exe,F3 0F 11 88 DC 00 00 00 F3) // should be unique
alloc(newmem,$1000,INJECT_SNAKE_PREV_DEBUFF)
label(code)
label(return)
newmem:
code:
push rbx
mov rbx, (float)324000
movq xmm1, rbx
pop rbx
movss [rax+000000DC],xmm1
jmp return
INJECT_SNAKE_PREV_DEBUFF:
jmp newmem
nop 3
return:
registersymbol(INJECT_SNAKE_PREV_DEBUFF)
[DISABLE]
INJECT_SNAKE_PREV_DEBUFF:
db F3 0F 11 88 DC 00 00 00
unregistersymbol(INJECT_SNAKE_PREV_DEBUFF)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3AB64D3
MonsterHunterRise.exe+3AB64A0: 0F 84 F3 03 00 00 - je MonsterHunterRise.exe+3AB6899
MonsterHunterRise.exe+3AB64A6: 4C 89 74 24 58 - mov [rsp+58],r14
MonsterHunterRise.exe+3AB64AB: 0F 29 74 24 30 - movaps [rsp+30],xmm6
MonsterHunterRise.exe+3AB64B0: 45 84 C0 - test r8l,r8l
MonsterHunterRise.exe+3AB64B3: 74 26 - je MonsterHunterRise.exe+3AB64DB
MonsterHunterRise.exe+3AB64B5: F3 0F 10 05 33 DE EA 0A - movss xmm0,[MonsterHunterRise.exe+E9642F0]
MonsterHunterRise.exe+3AB64BD: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3AB64C4: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+3AB64C7: F2 0F 59 05 09 B7 4A 03 - mulsd xmm0,[MonsterHunterRise.exe+6F61BD8]
MonsterHunterRise.exe+3AB64CF: 66 0F 5A C8 - cvtpd2ps xmm1,xmm0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3AB64D3: F3 0F 11 88 DC 00 00 00 - movss [rax+000000DC],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3AB64DB: F3 0F 10 82 1C 08 00 00 - movss xmm0,[rdx+0000081C]
MonsterHunterRise.exe+3AB64E3: 45 33 F6 - xor r14d,r14d
MonsterHunterRise.exe+3AB64E6: 41 8B C6 - mov eax,r14d
MonsterHunterRise.exe+3AB64E9: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+3AB64EC: 0F 2F C6 - comiss xmm0,xmm6
MonsterHunterRise.exe+3AB64EF: 0F 97 C0 - seta al
MonsterHunterRise.exe+3AB64F2: 85 C0 - test eax,eax
MonsterHunterRise.exe+3AB64F4: 74 08 - je MonsterHunterRise.exe+3AB64FE
MonsterHunterRise.exe+3AB64F6: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+3AB64F9: E8 B2 46 8E FC - call MonsterHunterRise.exe+39ABB0
}
1337096166
"Might seed up+ (Power) / long duration"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_MIGHT_SEED_BUFF,MonsterHunterRise.exe,F3 0F 11 98 90 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_MIGHT_SEED_BUFF)
label(code)
label(return)
label(i_might_seed)
newmem:
code:
push rbx
mov ebx, [i_might_seed]
mov [rax+84],ebx
mov rbx, (float)324000
movq xmm3, rbx
pop rbx
movss [rax+00000090],xmm3
jmp return
jmp return
align 10 cc
i_might_seed:
dd #60
INJECT_MIGHT_SEED_BUFF:
jmp newmem
nop 3
return:
registersymbol(i_might_seed)
registersymbol(INJECT_MIGHT_SEED_BUFF)
[DISABLE]
INJECT_MIGHT_SEED_BUFF:
db F3 0F 11 98 90 00 00 00
unregistersymbol(i_might_seed)
unregistersymbol(INJECT_MIGHT_SEED_BUFF)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3AB20CD
MonsterHunterRise.exe+3AB209F: CC - int 3
MonsterHunterRise.exe+3AB20A0: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3AB20A7: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+3AB20AA: F3 0F 5A C3 - cvtss2sd xmm0,xmm3
MonsterHunterRise.exe+3AB20AE: F3 0F 10 88 90 00 00 00 - movss xmm1,[rax+00000090]
MonsterHunterRise.exe+3AB20B6: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+3AB20B9: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+3AB20BD: 73 16 - jae MonsterHunterRise.exe+3AB20D5
MonsterHunterRise.exe+3AB20BF: 44 89 80 84 00 00 00 - mov [rax+00000084],r8d
MonsterHunterRise.exe+3AB20C6: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3AB20CD: F3 0F 11 98 90 00 00 00 - movss [rax+00000090],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3AB20D5: C3 - ret
MonsterHunterRise.exe+3AB20D6: CC - int 3
MonsterHunterRise.exe+3AB20D7: CC - int 3
MonsterHunterRise.exe+3AB20D8: CC - int 3
MonsterHunterRise.exe+3AB20D9: CC - int 3
MonsterHunterRise.exe+3AB20DA: CC - int 3
MonsterHunterRise.exe+3AB20DB: CC - int 3
MonsterHunterRise.exe+3AB20DC: CC - int 3
MonsterHunterRise.exe+3AB20DD: CC - int 3
MonsterHunterRise.exe+3AB20DE: CC - int 3
}
1337095173
"Atk up+"
10:10
25:25
45:45
100:100
500:500
0
4 Bytes
i_might_seed
1337096167
"Affinity"
0
Float
current_player
C4
120
E0
1337096168
"Immunity Buff timer"
0
Float
current_player
DC
120
E0
1337096169
"_not Working"
1
1337096170
"Fast HP refill (potion)"
Auto Assembler Script
[ENABLE]
aobscanmodule(INJECT_HP_INC,MonsterHunterRise.exe,89 43 24 BB 14 02 00 00) // should be unique
alloc(newmem,$1000,INJECT_HP_INC)
label(code)
label(return)
newmem:
mov eax, [rbx+1C]
code:
mov [rbx+24],eax
mov ebx,00000214
jmp return
INJECT_HP_INC:
jmp newmem
nop 3
return:
registersymbol(INJECT_HP_INC)
[DISABLE]
INJECT_HP_INC:
db 89 43 24 BB 14 02 00 00
unregistersymbol(INJECT_HP_INC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+39DFADC
MonsterHunterRise.exe+39DFAB4: 48 8B 52 10 - mov rdx,[rdx+10]
MonsterHunterRise.exe+39DFAB8: E8 73 DD F8 FE - call MonsterHunterRise.exe+296D830
MonsterHunterRise.exe+39DFABD: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+39DFAC1: 3B D8 - cmp ebx,eax
MonsterHunterRise.exe+39DFAC3: 7D 1A - jnl MonsterHunterRise.exe+39DFADF
MonsterHunterRise.exe+39DFAC5: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+39DFAC8: 48 8B 9F 20 01 00 00 - mov rbx,[rdi+00000120]
MonsterHunterRise.exe+39DFACF: 48 8B 53 10 - mov rdx,[rbx+10]
MonsterHunterRise.exe+39DFAD3: E8 58 DD F8 FE - call MonsterHunterRise.exe+296D830
MonsterHunterRise.exe+39DFAD8: F3 0F 2C C0 - cvttss2si eax,xmm0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+39DFADC: 89 43 24 - mov [rbx+24],eax
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+39DFADF: BB 14 02 00 00 - mov ebx,00000214
MonsterHunterRise.exe+39DFAE4: 80 BC 24 88 00 00 00 00 - cmp byte ptr [rsp+00000088],00
MonsterHunterRise.exe+39DFAEC: 4C 8B 74 24 58 - mov r14,[rsp+58]
MonsterHunterRise.exe+39DFAF1: 74 0B - je MonsterHunterRise.exe+39DFAFE
MonsterHunterRise.exe+39DFAF3: 49 8B D7 - mov rdx,r15
MonsterHunterRise.exe+39DFAF6: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+39DFAF9: E8 52 AA 1B 00 - call MonsterHunterRise.exe+3B9A550
MonsterHunterRise.exe+39DFAFE: 4C 8B 7C 24 50 - mov r15,[rsp+50]
MonsterHunterRise.exe+39DFB03: 81 FB 16 02 00 00 - cmp ebx,00000216
MonsterHunterRise.exe+39DFB09: 75 2B - jne MonsterHunterRise.exe+39DFB36
}
1337096236
"Some player data (Need Marcus101RR's table in NexusMod)"
1
1337096193
"Times Liked"
0
4 Bytes
guild_card
48
70
1337096189
"Hub MR Quests"
0
4 Bytes
guild_card
B4
70
1337096190
"Follower Collab Quests -> Support Surveys"
0
4 Bytes
guild_card
B8
70
1337096191
"Follower Collab Quests -> Follower Quests"
0
4 Bytes
guild_card
BC
70
1337096192
"Anomaly Quests"
0
4 Bytes
guild_card
C0
70
1337096194
"Quests Completed -> Jungle"
0
4 Bytes
guild_card
50
C8
70
1337096195
"Quests Completed -> Citadel"
0
4 Bytes
guild_card
54
C8
70
1337096183
"Arena Records -> Arena 06"
1
1337096184
"Record 1"
0
Float
guild_card
10
20
10
10
80
170
70
1337096185
"Record 2"
0
Float
guild_card
10
28
10
10
80
170
70
1337096186
"Record 3"
0
Float
guild_card
10
30
10
10
80
170
70
1337096187
"Record 4"
0
Float
guild_card
10
38
10
10
80
170
70
1337096188
"Record 5"
0
Float
guild_card
10
40
10
10
80
170
70
1337096198
"Arena Records -> MR Arena 01"
1
1337096199
"Record 1"
0
Float
guild_card
10
20
10
10
20
178
70
1337096200
"Record 2"
0
Float
guild_card
10
28
10
10
20
178
70
1337096201
"Record 3"
0
Float
guild_card
10
30
10
10
20
178
70
1337096202
"Record 4"
0
Float
guild_card
10
38
10
10
20
178
70
1337096203
"Record 5"
0
Float
guild_card
10
40
10
10
20
178
70
1337096204
"Arena Records -> MR Arena 02"
1
1337096205
"Record 1"
0
Float
guild_card
10
20
10
10
28
178
70
1337096206
"Record 2"
0
Float
guild_card
10
28
10
10
28
178
70
1337096207
"Record 3"
0
Float
guild_card
10
30
10
10
28
178
70
1337096208
"Record 4"
0
Float
guild_card
10
38
10
10
28
178
70
1337096209
"Record 5"
0
Float
guild_card
10
40
10
10
28
178
70
1337096210
"Arena Records -> MR Arena 03"
1
1337096211
"Record 1"
0
Float
guild_card
10
20
10
10
30
178
70
1337096212
"Record 2"
0
Float
guild_card
10
28
10
10
30
178
70
1337096213
"Record 3"
0
Float
guild_card
10
30
10
10
30
178
70
1337096214
"Record 4"
0
Float
guild_card
10
38
10
10
30
178
70
1337096215
"Record 5"
0
Float
guild_card
10
40
10
10
30
178
70
1337096216
"Arena Records -> MR Arena 04"
1
1337096217
"Record 1"
0
Float
guild_card
10
20
10
10
38
178
70
1337096218
"Record 2"
0
Float
guild_card
10
28
10
10
38
178
70
1337096219
"Record 3"
0
Float
guild_card
10
30
10
10
38
178
70
1337096220
"Record 4"
0
Float
guild_card
10
38
10
10
38
178
70
1337096221
"Record 5"
0
Float
guild_card
10
40
10
10
38
178
70
1337096222
"Arena Records -> MR Arena 05"
1
1337096223
"Record 1"
0
Float
guild_card
10
20
10
10
40
178
70
1337096224
"Record 2"
0
Float
guild_card
10
28
10
10
40
178
70
1337096225
"Record 3"
0
Float
guild_card
10
30
10
10
40
178
70
1337096226
"Record 4"
0
Float
guild_card
10
38
10
10
40
178
70
1337096227
"Record 5"
0
Float
guild_card
10
40
10
10
40
178
70
1337096228
"Arena Records -> MR Arena 06"
1
1337096229
"Record 1"
0
Float
guild_card
10
20
10
10
48
178
70
1337096230
"Record 2"
0
Float
guild_card
10
28
10
10
48
178
70
1337096231
"Record 3"
0
Float
guild_card
10
30
10
10
48
178
70
1337096232
"Record 4"
0
Float
guild_card
10
38
10
10
48
178
70
1337096233
"Record 5"
0
Float
guild_card
10
40
10
10
48
178
70
1337096237
"_tmp"
1
1337096196
"MR Arena 01 - 01 - 623.1203613"
0
Float
24051B40
1337096238
"Monster Hunter Rise 10.0.3.0 / https://opencheattables.com / CE 7.4+"
400080
1
buffs
70634204
afish
37CB8990
_playerbase
0BCB0000
recipe1
1222F75D
recipe2
1222F76C
recipe3
1222F77D
ivy
24FDA2DE
_infmp
18CE1070
_infammo
18CE7079
_fastuse
18CE7323
_fastuse2
18CE1FFC
_infplacing
18CF60E2
_fastwater
2775519B
_minvctimer
164A375E
minionstr
1C3B3C78
magicstr
1C3B3C6A
wardingdef
1C3BA46A
minioncount
206D4213
player_index
002978DC
mapRanges
354840D3
players2
1114D1B4
playerz
10E80047
players
1118D1B4
IndexID
13470668
timer_aob
110D2436
invBase
0A4E0000
InvCaps_
9EDF25E0
playerBase
AFA70000
InfItems
B84A507B
LogBase
10780000
ExtraCap2
B65707CF
INJECT
83454DBE
IntCap
834A4E32
InvStorage_
0F009000
itemBase
0B540000
aobHealthAOB
4044F7FE
logs
53CB0000
thaumaturge
66630000
infarrows
28351A38404
damage_base
146F62C6C
defense_base
146F6A460
wirebug3dur_base
146F61BC8
itembuff_base
146F61BD8
function AOBScanModule(moduleName, signature, aobSignaturePrivileges, alignmentType, alignmentParam)
--checkArgType(moduleName, 1, 'string')
if not signature or not moduleName then return end
index = index or 1
local modStartAddr = getAddress(moduleName)
local modEndAddr = modStartAddr + getModuleSize(moduleName)
local ms = createMemScan()
if type(signature) == 'table' then
local sig = ''
for i, byte in ipairs(signature) do
sig = sig..string.format('%02X', byte)
end
signature = sig
end
ms.firstScan(soExactValue, vtByteArray, nil, signature, nil, modStartAddr, modEndAddr,
aobSignaturePrivileges, alignmentType, alignmentParam, true, true, false, false)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
ms.destroy()
return results
end
registerLuaFunctionHighlight('AOBScanModule')