1337095168
"Compact mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1337096378
"Allow VEH"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
local symbolName = "KERNELBASE.SetThreadContext"
[ENABLE]
local bt = {195, 144, 144, 144} --C3 90 90 90 (ret nop nop nop)
writeBytes(symbolName, bt)
[DISABLE]
local bt = {72, 131, 236, 40} --48 83 EC 28 (sub rsp, 28)
writeBytes(symbolName, bt)
1337096379
"+Scripts"
1
87685
"Min. Zeny 500,000 (Usage: buy from vender) / Zeny最少數500,000；取得已獲得Zeny總額 (啟用：商店中買東西)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
Revise:
2022/08/13: Bug fix; added total zenny earned record
}
[ENABLE]
aobscanmodule(INJECT_MONEY_SELL_DEC,MonsterHunterRise.exe,8B 00 89 42 18 EB) // should be unique
alloc(newmem,$1000,INJECT_MONEY_SELL_DEC)
label(code)
label(return)
label(i_base_zenny_addr)
newmem:
mov [i_base_zenny_addr], rdx
code:
mov eax,[rax]
cmp eax, #500000
jg @F
mov eax, #500000
@@:
mov [rdx+18],eax
jmp return
align 10 cc
i_base_zenny_addr:
dq 0
INJECT_MONEY_SELL_DEC:
jmp newmem
return:
registersymbol(INJECT_MONEY_SELL_DEC)
registersymbol(i_base_zenny_addr)
[DISABLE]
INJECT_MONEY_SELL_DEC:
db 8B 00 89 42 18 EB
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+18C8C30
MonsterHunterRise.exe+18C8C07: 48 8B F9 - mov rdi,rcx
MonsterHunterRise.exe+18C8C0A: 45 85 C0 - test r8d,r8d
MonsterHunterRise.exe+18C8C0D: 7F 28 - jg MonsterHunterRise.exe+18C8C37
MonsterHunterRise.exe+18C8C0F: 44 03 42 18 - add r8d,[rdx+18]
MonsterHunterRise.exe+18C8C13: 48 8D 4C 24 38 - lea rcx,[rsp+38]
MonsterHunterRise.exe+18C8C18: 44 8B 0D 05 C7 57 0D - mov r9d,[MonsterHunterRise.exe+EE45324]
MonsterHunterRise.exe+18C8C1F: 45 3B C1 - cmp r8d,r9d
MonsterHunterRise.exe+18C8C22: 44 89 4C 24 40 - mov [rsp+40],r9d
MonsterHunterRise.exe+18C8C27: 48 0F 4D C1 - cmovge rax,rcx
MonsterHunterRise.exe+18C8C2B: 44 89 44 24 38 - mov [rsp+38],r8d
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+18C8C30: 8B 00 - mov eax,[rax]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+18C8C32: 89 42 18 - mov [rdx+18],eax
MonsterHunterRise.exe+18C8C35: EB 28 - jmp MonsterHunterRise.exe+18C8C5F
MonsterHunterRise.exe+18C8C37: 8B 15 E3 C6 57 0D - mov edx,[MonsterHunterRise.exe+EE45320]
MonsterHunterRise.exe+18C8C3D: 4C 8D 4C 24 38 - lea r9,[rsp+38]
MonsterHunterRise.exe+18C8C42: 8B 4B 18 - mov ecx,[rbx+18]
MonsterHunterRise.exe+18C8C45: 41 03 C8 - add ecx,r8d
MonsterHunterRise.exe+18C8C48: 89 54 24 38 - mov [rsp+38],edx
MonsterHunterRise.exe+18C8C4C: 3B CA - cmp ecx,edx
MonsterHunterRise.exe+18C8C4E: 89 4C 24 40 - mov [rsp+40],ecx
MonsterHunterRise.exe+18C8C52: 49 0F 4D C1 - cmovge rax,r9
}
1337096603
"Zeny"
0
4 Bytes
i_base_zenny_addr
18
1337096604
"Zeny total earned / 已獲得Zeny總額"
0
4 Bytes
i_base_zenny_addr
1C
1337096380
"Get Damage / defense limit cap...etc / 取得攻擊力和防禦力上限等等"
A00000
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
local _dbg = true
if (_dbg) then
AOBs = {
{["name"]="damage", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? F3 48 0F 2C C9", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="damage_base"},
{["name"]="defense", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? 48 8B 83", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="defense_base"},
{["name"]="wirebug3dur", ["aob"]="F2 44 0F 10 3D ?? ?? ?? ?? 48 89 B4 24 ?? ?? ?? ?? 48 89", ["pos"]= 5, ["aoblen"]= 9 , ["symbol"]="wirebug3dur_base"},
{["name"]="itembuff", ["aob"]="F2 0F 5C 05 ?? ?? ?? ?? F2 0F 5A C0 F3 0F 11 46 ??", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="itembuff_base"},
}
local a1 = 'n/a'
local a2 = 'n/a'
local a3 = 0
local a4 = 0
local a5 = 'n/a'
for k,v in pairs(AOBs) do
-- k = array seq.
for k1,v1 in pairs(v) do
if (k1 == 'name') then
a1 = v1
end
if (k1 == 'aob') then
a2 = v1
end
if (k1 == 'pos') then
a3 = v1
end
if (k1 == 'aoblen') then
a4 = v1
end
if (k1 == 'symbol') then
a5 = v1
end
--print(k1,v1)
end
local aob_addr_str = AOBScanModule('MonsterHunterRise.exe', a2, '+X-C-W')
local name_addr_str = getAddressSafe(aob_addr_str[0])+a3
local name_addr_val = readInteger(name_addr_str)
local aob_addr_val = tonumber(aob_addr_str[0], 16)
local final_addr_val = name_addr_val + aob_addr_val + a4
--print(a1 .. " addr: " .. string.format("%08X", final_addr_val))
registerSymbol(a5, final_addr_val)
--print('-------')
end
--local ttt = readDouble('wirebug3dur_base')
--print(getAddress('wirebug3dur_base'))
--writeDouble(getAddress('wirebug3dur_base'), 450)
--writeInteger('defense_base', 3120)
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
local disable_array = {"damage_base", "defense_base", "wirebug3dur_base", "itembuff_base"}
local a_len = #(disable_array)
local i = 0
for i = 1, a_len do
--print(disable_array[i])
unregisterSymbol(disable_array[i])
end
getLuaEngine().Close()
1337096381
"Damage / 傷害上限"
0
Float
damage_base
1337096382
"Defense / 防禦力上限"
0
Float
defense_base
1337096383
"Wirebug+ duration (90, 450, 1180, 3690...) / 第三翔蟲持續時間 (改此值log顯示會異常)"
0
Double
wirebug3dur_base
1337096384
"Item buff duration / 道具Buff時間"
0
Double
itembuff_base
1337096455
"Get base guild card data (Usage: menu-> Guild card -> View) / 取得基本公會名片資料 (公會名片->確認)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-13
Author : bbfox@https://opencheattables.com
Rev.
2022/08/27: Revised for 11.0.2.0
}
[ENABLE]
aobscanmodule(INJECT_GET_ANORES_PT,MonsterHunterRise.exe,8B 41 2C 48 8B CD 89) // should be unique
alloc(newmem,$1000,INJECT_GET_ANORES_PT)
label(code)
label(return)
label(i_base_anores_addr)
aobscanmodule(INJECT_GET_GUILD_CARD_REC1,MonsterHunterRise.exe,33 10 48 29 C0 49 89 90 90 00) // should be unique
alloc(newmem1,$1000,INJECT_GET_GUILD_CARD_REC1)
label(code1)
label(return1)
label(i_base_quest_and_kill_cnt_data)
//--------------------------------------------
newmem:
mov [i_base_anores_addr], rcx
code:
mov eax,[rcx+2C]
mov rcx,rbp
jmp return
align 10 cc
i_base_anores_addr:
dq 0
INJECT_GET_ANORES_PT:
jmp newmem
nop
return:
registersymbol(INJECT_GET_ANORES_PT)
registersymbol(i_base_anores_addr)
//--------------------------------------------
newmem1:
cmp qword ptr [i_base_quest_and_kill_cnt_data], 0
jne chk1_next1
mov [i_base_quest_and_kill_cnt_data], rax
chk1_next1:
cmp [i_base_quest_and_kill_cnt_data], rax
jbe endp1
mov [i_base_quest_and_kill_cnt_data], rax
endp1:
code1:
xor edx,[rax]
sub rax,rax
jmp return1
align 10 cc
i_base_quest_and_kill_cnt_data:
dq 0
INJECT_GET_GUILD_CARD_REC1:
jmp newmem1
return1:
registersymbol(INJECT_GET_GUILD_CARD_REC1)
registersymbol(i_base_quest_and_kill_cnt_data)
[DISABLE]
INJECT_GET_ANORES_PT:
db 8B 41 2C 48 8B CD
INJECT_GET_GUILD_CARD_REC1:
db 33 10 48 29 C0
unregistersymbol(*)
dealloc(newmem)
unregistersymbol(INJECT_GET_GUILD_CARD_REC1)
unregistersymbol(i_base_quest_and_kill_cnt_data)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+25F3B88
MonsterHunterRise.exe+25F3B5E: 84 C0 - test al,al
MonsterHunterRise.exe+25F3B60: 41 B8 C8 03 00 00 - mov r8d,000003C8
MonsterHunterRise.exe+25F3B66: 0F 95 C0 - setne al
MonsterHunterRise.exe+25F3B69: 88 46 36 - mov [rsi+36],al
MonsterHunterRise.exe+25F3B6C: 48 8B 05 1D 94 86 0C - mov rax,[MonsterHunterRise.exe+EE5CF90]
MonsterHunterRise.exe+25F3B73: 48 8B 48 68 - mov rcx,[rax+68]
MonsterHunterRise.exe+25F3B77: 8B 41 28 - mov eax,[rcx+28]
MonsterHunterRise.exe+25F3B7A: 89 46 38 - mov [rsi+38],eax
MonsterHunterRise.exe+25F3B7D: 48 8B 05 0C 94 86 0C - mov rax,[MonsterHunterRise.exe+EE5CF90]
MonsterHunterRise.exe+25F3B84: 48 8B 48 68 - mov rcx,[rax+68]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+25F3B88: 8B 41 2C - mov eax,[rcx+2C]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+25F3B8B: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+25F3B8E: 89 46 3C - mov [rsi+3C],eax
MonsterHunterRise.exe+25F3B91: 48 8B 15 60 8B 85 0C - mov rdx,[MonsterHunterRise.exe+EE4C6F8]
MonsterHunterRise.exe+25F3B98: E8 73 33 E5 FF - call MonsterHunterRise.exe+2446F10
MonsterHunterRise.exe+25F3B9D: 84 C0 - test al,al
MonsterHunterRise.exe+25F3B9F: 0F 95 C0 - setne al
MonsterHunterRise.exe+25F3BA2: 88 46 40 - mov [rsi+40],al
MonsterHunterRise.exe+25F3BA5: 8B 05 D9 89 85 0C - mov eax,[MonsterHunterRise.exe+EE4C584]
MonsterHunterRise.exe+25F3BAB: 89 46 44 - mov [rsi+44],eax
MonsterHunterRise.exe+25F3BAE: F3 0F 10 05 DA 89 85 0C - movss xmm0,[MonsterHunterRise.exe+EE4C590]
}
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+211B8993
MonsterHunterRise.exe+211B8965: 66 66 2E 0F 1F 84 00 00 00 00 00 - nop word ptr cs:[rax+rax+00000000]
MonsterHunterRise.exe+211B8970: 48 31 C0 - xor rax,rax
MonsterHunterRise.exe+211B8973: 49 2B 80 90 00 00 00 - sub rax,[r8+00000090]
MonsterHunterRise.exe+211B897A: 52 - push rdx
MonsterHunterRise.exe+211B897B: 48 F7 D2 - not rdx
MonsterHunterRise.exe+211B897E: 21 14 24 - and [rsp],edx
MonsterHunterRise.exe+211B8981: 5A - pop rdx
MonsterHunterRise.exe+211B8982: 48 C7 C5 F6 E8 0F A2 - mov rbp,FFFFFFFFA20FE8F6
MonsterHunterRise.exe+211B8989: 48 F7 D8 - neg rax
MonsterHunterRise.exe+211B898C: 48 8D AD DA 17 F0 5D - lea rbp,[rbp+5DF017DA]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+211B8993: 33 10 - xor edx,[rax]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+211B8995: 48 29 C0 - sub rax,rax
MonsterHunterRise.exe+211B8998: 49 89 90 90 00 00 00 - mov [r8+00000090],rdx
MonsterHunterRise.exe+211B899F: 48 31 E8 - xor rax,rbp
MonsterHunterRise.exe+211B89A2: BD 18 92 EF 15 - mov ebp,15EF9218
MonsterHunterRise.exe+211B89A7: 67 8D AD 42 67 FB 2D - lea ebp,[rbp+2DFB6742]
MonsterHunterRise.exe+211B89AE: 89 EE - mov esi,ebp
MonsterHunterRise.exe+211B89B0: 41 89 F1 - mov r9d,esi
MonsterHunterRise.exe+211B89B3: 41 C1 E9 18 - shr r9d,18
MonsterHunterRise.exe+211B89B7: C1 E6 08 - shl esi,08
MonsterHunterRise.exe+211B89BA: 48 8D 2D 0E 6A 5B 04 - lea rbp,[MonsterHunterRise.exe+2576F3CF]
}
1337096457
"HR"
0
4 Bytes
i_base_anores_addr
18
1337096458
"HR EXP"
0
4 Bytes
i_base_anores_addr
1C
1337096459
"MR"
0
4 Bytes
i_base_anores_addr
20
1337096460
"MR EXP"
0
4 Bytes
i_base_anores_addr
24
1337096461
"Anomaly research LV / 傀異研究等級"
0
4 Bytes
i_base_anores_addr
28
1337096462
"Anomaly research EXP / 傀異研究經驗值"
0
4 Bytes
i_base_anores_addr
2C
1337096602
"???"
1
0
4 Bytes
i_base_anores_addr
3C
1337096599
"Play Time / 總遊戲時間"
0
Double
i_base_quest_and_kill_cnt_data
-68
1337096598
"Times Liked / 收到的讚數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-60
1337096773
"Wiredash count / 疾翔次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-5C
1337096597
"Well-Done Steaks Cooked / 完美烤肉次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-58
1337096774
"??"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-54
1337096596
"Golden Spiribug Collected / 金靈瓢蟲取得數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-50
1337096595
"Hunting Helpers Collected / 獵具撿取數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-4C
1337096594
"Shabby canyne saddle time / 加爾克騎乘總時間"
0
Double
i_base_quest_and_kill_cnt_data
-40
1337096606
"Shabby canyne saddle time % / 加爾克騎乘總時間百分比"
0
Float
i_base_quest_and_kill_cnt_data
-3C
1337096605
"Online quest count / 線上任務次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-38
1337096607
"Meowcenaries / 隨從隱密隊"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-34
1337096608
"Gifts count from Pingarh the Sailor / 從水手皮卡爾取得禮物次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-30
1337096609
"Dango / 用餐次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-2C
1337096610
"The Argosy / 交易船次數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-28
1337096611
"??"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-24
1337096612
"??"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-20
1337096584
"Village Quests / 村莊任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-8
1337096582
"Low Rank Hub Quests / 集會所初階任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
-4
1337096581
"High Rank Hub Quests / 集會所進階任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
0
1337096583
"Rampage Quests / 百龍夜行"
0
4 Bytes
i_base_quest_and_kill_cnt_data
4
1337096585
"Arena Quests / 鬥技大會任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
8
1337096586
"Hub MR Quests / 集會所MR任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
C
1337096587
"Follower Collab Quests -> Support Surveys / 盟友任務->重要調查任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
10
1337096588
"Follower Collab Quests -> Follower Quests / 盟友任務->盟友同行任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
14
1337096589
"Anomaly Quests / 傀異任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
18
1337096590
"Anomaly Investigations / 傀異探究任務"
0
4 Bytes
i_base_quest_and_kill_cnt_data
1C
1337096591
"? Monster captured (non-MR) / 初低階捕獲數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
30
1337096592
"Monsters total / 魔物總數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
34
1337096593
"Monsters captured / 總計捕獲數"
0
4 Bytes
i_base_quest_and_kill_cnt_data
38
1337096637
"Get weapon usage / Not fully working (Guild card-View) / 取得武器使用次數資料；非完全有效"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-13
Author : bbfox@https://opencheattables.com
Revised:
2022/08/15: bug fix
2022/08/27: Revised for 11.0.2.0
}
[ENABLE]
aobscanmodule(INJECT_GET_WEAPON_USAGE_DATA,MonsterHunterRise.exe,41 0B 07 4D 31 FF) // should be unique
alloc(newmem,$1000,INJECT_GET_WEAPON_USAGE_DATA)
label(code)
label(return)
label(i_base_weapon_usage_addr)
label(i_base_rampage_weapon_usage_addr)
newmem:
inc [i_cnt]
cmp dword ptr [i_cnt], 4
jne chk_next0
mov [i_base_rampage_weapon_usage_addr], r15
jmp chk_next
chk_next0:
cmp qword ptr [i_base_weapon_usage_addr], 0
jne chk_next
mov [i_base_weapon_usage_addr], r15
jmp code
chk_next:
cmp [i_base_weapon_usage_addr], r15
jbe code
mov [i_base_weapon_usage_addr], r15
code:
or eax,[r15]
xor r15,r15
jmp return
align 10 cc
i_base_weapon_usage_addr:
dq 0
i_base_rampage_weapon_usage_addr:
dq 0
i_cnt:
dd 0
INJECT_GET_WEAPON_USAGE_DATA:
jmp newmem
nop
return:
registersymbol(INJECT_GET_WEAPON_USAGE_DATA)
registersymbol(i_base_weapon_usage_addr)
registersymbol(i_base_rampage_weapon_usage_addr)
[DISABLE]
INJECT_GET_WEAPON_USAGE_DATA:
db 41 0B 07 4D 31 FF
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+24C03FEC
MonsterHunterRise.exe+24C03FC6: C3 - ret
MonsterHunterRise.exe+24C03FC7: 8D 58 63 - lea ebx,[rax+63]
MonsterHunterRise.exe+24C03FCA: C6 C2 3C - mov dl,3C
MonsterHunterRise.exe+24C03FCD: F3 CB - repe ret
MonsterHunterRise.exe+24C03FCF: 4C 92 - xchg rax,rdx
MonsterHunterRise.exe+24C03FD1: 22 1D 08 66 66 66 - and bl,[1CB26A5DF]
MonsterHunterRise.exe+24C03FD7: 2E 0F 1F 84 00 00 00 00 00 - nop dword ptr cs:[rax+rax+00000000]
MonsterHunterRise.exe+24C03FE0: 29 C0 - sub eax,eax
MonsterHunterRise.exe+24C03FE2: 4D 31 FF - xor r15,r15
MonsterHunterRise.exe+24C03FE5: 4D 33 B8 90 00 00 00 - xor r15,[r8+00000090]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+24C03FEC: 41 0B 07 - or eax,[r15]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+24C03FEF: 4D 31 FF - xor r15,r15
MonsterHunterRise.exe+24C03FF2: 49 89 80 90 00 00 00 - mov [r8+00000090],rax
MonsterHunterRise.exe+24C03FF9: 4D 2B B8 48 01 00 00 - sub r15,[r8+00000148]
MonsterHunterRise.exe+24C04000: 48 8D 64 24 F8 - lea rsp,[rsp-08]
MonsterHunterRise.exe+24C04005: 48 C7 04 24 00 00 00 00 - mov qword ptr [rsp],00000000
MonsterHunterRise.exe+24C0400D: 4C 29 3C 24 - sub [rsp],r15
MonsterHunterRise.exe+24C04011: 4C 8D 24 24 - lea r12,[rsp]
MonsterHunterRise.exe+24C04015: 4C 8B 3C 24 - mov r15,[rsp]
MonsterHunterRise.exe+24C04019: 49 81 C4 80 A0 2B C8 - add r12,FFFFFFFFC82BA080
MonsterHunterRise.exe+24C04020: 49 89 84 24 80 5F D4 37 - mov [r12+37D45F80],rax
}
1337096652
"All / 綜合"
1
1337096638
"Great Sword / 大劍"
0
4 Bytes
i_base_weapon_usage_addr
0
1337096639
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_weapon_usage_addr
4
1337096640
"Long Sword / 太刀"
0
4 Bytes
i_base_weapon_usage_addr
8
1337096641
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_weapon_usage_addr
C
1337096642
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_weapon_usage_addr
10
1337096643
"Hammer / 大錘"
0
4 Bytes
i_base_weapon_usage_addr
14
1337096644
"Gunlance / 銃槍"
0
4 Bytes
i_base_weapon_usage_addr
18
1337096645
"Lance / 長槍"
0
4 Bytes
i_base_weapon_usage_addr
1C
1337096646
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_weapon_usage_addr
20
1337096647
"Dual Blades / 雙劍"
0
4 Bytes
i_base_weapon_usage_addr
24
1337096648
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_weapon_usage_addr
28
1337096649
"Charge Blade / 充能斧"
0
4 Bytes
i_base_weapon_usage_addr
2C
1337096650
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_weapon_usage_addr
30
1337096651
"Bow / 弓"
0
4 Bytes
i_base_weapon_usage_addr
34
1337096653
"Village Quests / 村莊任務"
1
1337096654
"Great Sword / 大劍"
0
4 Bytes
i_base_weapon_usage_addr
60
1337096655
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_weapon_usage_addr
64
1337096656
"Long Sword / 太刀"
0
4 Bytes
i_base_weapon_usage_addr
68
1337096657
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_weapon_usage_addr
6C
1337096658
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_weapon_usage_addr
70
1337096659
"Hammer / 大錘"
0
4 Bytes
i_base_weapon_usage_addr
74
1337096660
"Gunlance / 銃槍"
0
4 Bytes
i_base_weapon_usage_addr
78
1337096661
"Lance / 長槍"
0
4 Bytes
i_base_weapon_usage_addr
7C
1337096662
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_weapon_usage_addr
80
1337096663
"Dual Blades / 雙劍"
0
4 Bytes
i_base_weapon_usage_addr
84
1337096664
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_weapon_usage_addr
88
1337096665
"Charge Blade / 充能斧"
0
4 Bytes
i_base_weapon_usage_addr
8C
1337096666
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_weapon_usage_addr
90
1337096667
"Bow / 弓"
0
4 Bytes
i_base_weapon_usage_addr
94
1337096668
"Hub Quests / 集會所任務"
1
1337096669
"Great Sword / 大劍"
0
4 Bytes
i_base_weapon_usage_addr
C0
1337096670
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_weapon_usage_addr
C4
1337096671
"Long Sword / 太刀"
0
4 Bytes
i_base_weapon_usage_addr
C8
1337096672
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_weapon_usage_addr
CC
1337096673
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_weapon_usage_addr
D0
1337096674
"Hammer / 大錘"
0
4 Bytes
i_base_weapon_usage_addr
D4
1337096675
"Gunlance / 銃槍"
0
4 Bytes
i_base_weapon_usage_addr
D8
1337096676
"Lance / 長槍"
0
4 Bytes
i_base_weapon_usage_addr
DC
1337096677
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_weapon_usage_addr
E0
1337096678
"Dual Blades / 雙劍"
0
4 Bytes
i_base_weapon_usage_addr
E4
1337096679
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_weapon_usage_addr
E8
1337096680
"Charge Blade / 充能斧"
0
4 Bytes
i_base_weapon_usage_addr
EC
1337096681
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_weapon_usage_addr
F0
1337096682
"Bow / 弓"
0
4 Bytes
i_base_weapon_usage_addr
F4
1337096991
"Rampage / 百龍夜行"
1
1337096992
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-64
1337096993
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-60
1337096994
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-5C
1337096995
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-58
1337096996
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-54
1337096997
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-50
1337096998
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-4C
1337096999
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-48
1337097000
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-44
1337097001
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-40
1337097002
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-3C
1337097003
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-38
1337097004
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-34
1337097005
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-30
1337097021
"Support Surveys / 盟友調查任務"
1
1337097022
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
-4
1337097023
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
0
1337097024
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
4
1337097025
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
8
1337097026
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
C
1337097027
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
10
1337097028
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
14
1337097029
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
18
1337097030
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1C
1337097031
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
20
1337097032
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
24
1337097033
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
28
1337097034
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
2C
1337097035
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
30
1337097036
"Follower Quests / 盟友同行任務"
1
1337097037
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
5C
1337097038
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
60
1337097039
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
64
1337097040
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
68
1337097041
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
6C
1337097042
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
70
1337097043
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
74
1337097044
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
78
1337097045
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
7C
1337097046
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
80
1337097047
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
84
1337097048
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
88
1337097049
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
8C
1337097050
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
90
1337097006
"Hub MR Quests / 集會所MR任務"
1
1337097007
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
BC
1337097008
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
C0
1337097009
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
C4
1337097010
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
C8
1337097011
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
CC
1337097012
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
D0
1337097013
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
D4
1337097014
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
D8
1337097015
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
DC
1337097016
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
E0
1337097017
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
E4
1337097018
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
E8
1337097019
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
EC
1337097020
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
F0
1337096946
"Anomaly Quests / 傀異任務"
1
1337096947
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
11C
1337096948
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
120
1337096949
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
124
1337096950
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
128
1337096951
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
130
1337096952
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
134
1337096953
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
138
1337096954
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
13C
1337096955
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
140
1337096956
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
144
1337096957
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
148
1337096958
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
14C
1337096959
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
150
1337096960
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
154
1337096931
"Anomaly Investigations / 傀異探究任務"
1
1337096932
"Great Sword / 大劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
17C
1337096933
"Switch Axe / 斬擊斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
180
1337096934
"Long Sword / 太刀"
0
4 Bytes
i_base_rampage_weapon_usage_addr
184
1337096935
"Light Bowgun / 輕弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
188
1337096936
"Heavy Bowgun / 重弩"
0
4 Bytes
i_base_rampage_weapon_usage_addr
18C
1337096937
"Hammer / 大錘"
0
4 Bytes
i_base_rampage_weapon_usage_addr
190
1337096938
"Gunlance / 銃槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
194
1337096939
"Lance / 長槍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
198
1337096940
"Sword & Shield / 單手劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
19C
1337096941
"Dual Blades / 雙劍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1A0
1337096942
"Hunting Horn / 狩獵笛"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1A4
1337096943
"Charge Blade / 充能斧"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1A8
1337096944
"Insect Glaive / 操蟲棍"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1AC
1337096945
"Bow / 弓"
0
4 Bytes
i_base_rampage_weapon_usage_addr
1B0
1337096616
"Get hunting record (Usage: Hunter's Notes->Large Monster) / 取得狩獵資料 (獵人筆記 -> 大型魔物清單)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-13
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_HUNTING_DATA,MonsterHunterRise.exe,42 8B 54 80 20 48 8B 81) // should be unique
alloc(newmem,$1000,INJECT_GET_HUNTING_DATA)
label(code)
label(return)
label(i_base_hunting_data_addr)
label(i_monster_idx)
newmem:
push rbx
lea rbx, [rax+r8*4]
mov [i_base_hunting_data_addr], rbx
mov [i_monster_idx], r8
pop rbx
code:
mov edx,[rax+r8*4+20]
jmp return
align 10 cc
i_base_hunting_data_addr:
dq 0
i_monster_idx:
dq 0
INJECT_GET_HUNTING_DATA:
jmp newmem
return:
registersymbol(INJECT_GET_HUNTING_DATA)
registersymbol(i_base_hunting_data_addr)
registersymbol(i_monster_idx)
[DISABLE]
INJECT_GET_HUNTING_DATA:
db 42 8B 54 80 20
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: INJECT_GET_HUNTING_DATA
MonsterHunterRise.exe+151F78A: 89 4D F8 - mov [rbp-08],ecx
MonsterHunterRise.exe+151F78D: 66 44 89 45 FE - mov [rbp-02],r8w
MonsterHunterRise.exe+151F792: 4C 89 4D 00 - mov [rbp+00],r9
MonsterHunterRise.exe+151F796: 48 8B C8 - mov rcx,rax
MonsterHunterRise.exe+151F799: E8 32 1D B1 02 - call MonsterHunterRise.AK::WriteBytesCount::SetCount+8AC0
MonsterHunterRise.exe+151F79E: 4C 8B 44 24 40 - mov r8,[rsp+40]
MonsterHunterRise.exe+151F7A3: 48 8B 05 F6 21 93 0D - mov rax,[MonsterHunterRise.exe+EE519A0]
MonsterHunterRise.exe+151F7AA: 49 8B 75 50 - mov rsi,[r13+50]
MonsterHunterRise.exe+151F7AE: 48 8B 48 70 - mov rcx,[rax+70]
MonsterHunterRise.exe+151F7B2: 48 8B 81 30 01 00 00 - mov rax,[rcx+00000130]
// ---------- INJECTING HERE ----------
INJECT_GET_HUNTING_DATA: 42 8B 54 80 20 - mov edx,[rax+r8*4+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+151F7BE: 48 8B 81 48 01 00 00 - mov rax,[rcx+00000148]
MonsterHunterRise.exe+151F7C5: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+151F7C8: 89 55 98 - mov [rbp-68],edx
MonsterHunterRise.exe+151F7CB: 48 8B 15 BE DA 78 0D - mov rdx,[MonsterHunterRise.exe+ECAD290]
MonsterHunterRise.exe+151F7D2: 42 8B 44 80 20 - mov eax,[rax+r8*4+20]
MonsterHunterRise.exe+151F7D7: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+151F7DA: 89 44 24 3C - mov [rsp+3C],eax
MonsterHunterRise.exe+151F7DE: 48 8B 05 AB 0C A1 0D - mov rax,[MonsterHunterRise.exe+EF30490]
MonsterHunterRise.exe+151F7E5: 48 8B B8 60 74 05 00 - mov rdi,[rax+00057460]
MonsterHunterRise.exe+151F7EC: E8 2F 5F 84 02 - call MonsterHunterRise.exe+3D65720
}
1337096618
"Monster index"
0
808080
4 Bytes
i_monster_idx
1337096617
"Total hunted / 狩獵數"
0
4 Bytes
i_base_hunting_data_addr
20
1337096620
"Total captured / 捕獲數"
0
4 Bytes
i_base_hunting_data_addr
440
1337096622
"Anomaly / 傀異化個體討伐數"
0
4 Bytes
i_base_hunting_data_addr
230
1337096630
"MR count? / MR狩獵數?"
0
4 Bytes
i_base_hunting_data_addr
34
1337096634
"??"
0
4 Bytes
i_base_hunting_data_addr
50
1337096621
"Part break? / 部位破壞次數?"
0
4 Bytes
i_base_hunting_data_addr
138
1337096625
"??"
0
4 Bytes
i_base_hunting_data_addr
140
1337096624
"??"
0
4 Bytes
i_base_hunting_data_addr
1B4
1337096790
"Get arena time record (Usage: Talk to arena NPC->list quest) / 取得鬥技場時間記錄 (於亞爾羅教官中點選相關任務)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-15
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ARENA_RECORD_2,MonsterHunterRise.exe,F3 0F 10 71 10 48 85) // should be unique
alloc(newmem,$1000,INJECT_GET_ARENA_RECORD_2)
label(code)
label(return)
label(i_base_arena_record_addr)
newmem:
mov [i_base_arena_record_addr], rcx
code:
movss xmm6,[rcx+10]
jmp return
align 10 cc
i_base_arena_record_addr:
dq 0
INJECT_GET_ARENA_RECORD_2:
jmp newmem
return:
registersymbol(INJECT_GET_ARENA_RECORD_2)
registersymbol(i_base_arena_record_addr)
[DISABLE]
INJECT_GET_ARENA_RECORD_2:
db F3 0F 10 71 10
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1BBE6D8
MonsterHunterRise.exe+1BBE6AE: 48 8B 15 3B C0 0A 0D - mov rdx,[MonsterHunterRise.exe+EC6A6F0]
MonsterHunterRise.exe+1BBE6B5: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+1BBE6B8: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+1BBE6BB: E8 60 70 1A 02 - call MonsterHunterRise.exe+3D65720
MonsterHunterRise.exe+1BBE6C0: 48 8B D0 - mov rdx,rax
MonsterHunterRise.exe+1BBE6C3: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+1BBE6C6: E8 D5 90 1A 02 - call MonsterHunterRise.exe+3D677A0
MonsterHunterRise.exe+1BBE6CB: 48 8B CB - mov rcx,rbx
MonsterHunterRise.exe+1BBE6CE: 49 8B BE B8 02 00 00 - mov rdi,[r14+000002B8]
MonsterHunterRise.exe+1BBE6D5: 0F 57 FF - xorps xmm7,xmm7
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1BBE6D8: F3 0F 10 71 10 - movss xmm6,[rcx+10]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1BBE6DD: 48 85 FF - test rdi,rdi
MonsterHunterRise.exe+1BBE6E0: 0F 84 84 00 00 00 - je MonsterHunterRise.exe+1BBE76A
MonsterHunterRise.exe+1BBE6E6: 49 8B 44 24 10 - mov rax,[r12+10]
MonsterHunterRise.exe+1BBE6EB: 39 58 18 - cmp [rax+18],ebx
MonsterHunterRise.exe+1BBE6EE: 7E 0A - jle MonsterHunterRise.exe+1BBE6FA
MonsterHunterRise.exe+1BBE6F0: 48 8B 40 10 - mov rax,[rax+10]
MonsterHunterRise.exe+1BBE6F4: 48 8B 48 20 - mov rcx,[rax+20]
MonsterHunterRise.exe+1BBE6F8: EB 20 - jmp MonsterHunterRise.exe+1BBE71A
MonsterHunterRise.exe+1BBE6FA: 48 8B 15 EF BF 0A 0D - mov rdx,[MonsterHunterRise.exe+EC6A6F0]
MonsterHunterRise.exe+1BBE701: 45 33 C0 - xor r8d,r8d
}
1337096791
"Record 1"
0
Float
i_base_arena_record_addr
10
1337096792
"Record 2"
0
Float
i_base_arena_record_addr
40
1337096793
"Record 3"
0
Float
i_base_arena_record_addr
70
1337096794
"Record 4"
0
Float
i_base_arena_record_addr
A0
1337096795
"Record 5"
0
Float
i_base_arena_record_addr
D0
1337096385
"Swap item in itembox (Manage Items -> Sell Items) -> fill count (turn off when not in use) / 管理道具->確認、出售道具中。交換道具可充填數量 (不用時馬上停用)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-07-02
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SWAP_ITEM_IN_ITEMBOX,MonsterHunterRise.exe,48 8B 46 20 01 68 14) // should be unique
alloc(newmem,$1000,INJECT_SWAP_ITEM_IN_ITEMBOX)
label(code)
label(return)
label(i_min_count)
newmem:
cmp ebp, [i_min_count]
jg @F
mov ebp, [i_min_count]
code:
mov rax,[rsi+20]
add [rax+14],ebp
jmp return
align 10 cc
i_min_count:
dd #3000
INJECT_SWAP_ITEM_IN_ITEMBOX:
jmp newmem
nop 2
return:
registersymbol(INJECT_SWAP_ITEM_IN_ITEMBOX)
registersymbol(i_min_count)
[DISABLE]
INJECT_SWAP_ITEM_IN_ITEMBOX:
db 48 8B 46 20 01 68 14
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+303AE59
MonsterHunterRise.exe+303AE3F: 48 8B 41 30 - mov rax,[rcx+30]
MonsterHunterRise.exe+303AE43: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+303AE46: FF D0 - call rax
MonsterHunterRise.exe+303AE48: 3B C7 - cmp eax,edi
MonsterHunterRise.exe+303AE4A: 73 04 - jae MonsterHunterRise.exe+303AE50
MonsterHunterRise.exe+303AE4C: 8B DF - mov ebx,edi
MonsterHunterRise.exe+303AE4E: 2B D8 - sub ebx,eax
MonsterHunterRise.exe+303AE50: 48 8B 7C 24 30 - mov rdi,[rsp+30]
MonsterHunterRise.exe+303AE55: 3B EB - cmp ebp,ebx
MonsterHunterRise.exe+303AE57: 73 09 - jae MonsterHunterRise.exe+303AE62
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+303AE59: 48 8B 46 20 - mov rax,[rsi+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+303AE5D: 01 68 14 - add [rax+14],ebp
MonsterHunterRise.exe+303AE60: EB 07 - jmp MonsterHunterRise.exe+303AE69
MonsterHunterRise.exe+303AE62: 48 8B 46 20 - mov rax,[rsi+20]
MonsterHunterRise.exe+303AE66: 01 58 14 - add [rax+14],ebx
MonsterHunterRise.exe+303AE69: 48 8B 5C 24 38 - mov rbx,[rsp+38]
MonsterHunterRise.exe+303AE6E: 48 8B 6C 24 40 - mov rbp,[rsp+40]
MonsterHunterRise.exe+303AE73: 48 8B 74 24 48 - mov rsi,[rsp+48]
MonsterHunterRise.exe+303AE78: 48 83 C4 20 - add rsp,20
MonsterHunterRise.exe+303AE7C: 41 5E - pop r14
MonsterHunterRise.exe+303AE7E: C3 - ret
}
1337096386
"***Turn off when not in use***"
400080
1
1337096387
"Min. count"
0
4 Bytes
i_min_count
1337096388
"Turn following scripts on / off (Disable scripts to avoid crash during zoning if not using REFramework)"
808000
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
Revised:
2022/08/13: Fixed ID
}
[ENABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
battle_array = {87687, 1337095181, 1337095309, 1337095479, 1337096393, 1337095187, 1337095185, 1337095183, 1337095320, 1337096395}
local a_len = #(battle_array)
local i = 0
for i = 1, a_len do
getAddressList().getMemoryRecordByID(battle_array[i]).Active = true
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
local a_len_d = #(battle_array)
local i1 = 0
for i1 = 1, a_len_d do
if (getAddressList().getMemoryRecordByID(battle_array[i1]).Active)
then
getAddressList().getMemoryRecordByID(battle_array[i1]).Active = false
end
end
getLuaEngine().Close()
87687
"Items do not decrease (not working for all items) (道具數不減<有小bug，有的依然會減>)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_ITEM_SELL_DEC,MonsterHunterRise.exe,29 72 14 EB 03) // should be unique
alloc(newmem,$1000,INJECT_ITEM_SELL_DEC)
label(code)
label(return)
label(is_inc_when_dec)
label(i_last_item_count_addr)
label(i_last_item_id)
label(is_limit_item)
label(is_bag_only)
label(is_ammo_only)
label(item_container_id)
label(item_container_id2)
label(is_env_item_only)
newmem:
code:
push rax
lea rax, [rdx+14]
mov [i_last_item_count_addr], rax
xor eax, eax
mov ax, [rdx+10]
mov [i_last_item_id], ax
mov ax, [rdx+14+2C]
mov [item_container_id], ax
mov ax, [rdx+14+2E]
mov [item_container_id2], ax
pop rax
sub [rdx+14],esi
// ignore list
cmp [i_last_item_id], #122 //raw meat
je last_chk
cmp [is_limit_item], 1
jne no_limit_chk
// General
// 1-9
cmp [i_last_item_id], #9
jle no_limit_chk
// 13 - 15
cmp [i_last_item_id], #12
jle last_chk
cmp [i_last_item_id], #21
jle no_limit_chk
// ammo
// 30-58
cmp [i_last_item_id], #30
jl last_chk
cmp [i_last_item_id], #58
jle no_limit_chk
// ammo
// 60-65
cmp [i_last_item_id], #60
jl last_chk
cmp [i_last_item_id], #65
jle no_limit_chk
// General
// 123, 129, 137
cmp [i_last_item_id], #123
je no_limit_chk
cmp [i_last_item_id], #129
je no_limit_chk
cmp [i_last_item_id], #137
je no_limit_chk
// Ammo
// 138-140
cmp [i_last_item_id], #138
jl last_chk
cmp [i_last_item_id], #140
jle no_limit_chk
// Ammo
//152-162
cmp [i_last_item_id], #152
jl last_chk
cmp [i_last_item_id], #162
jle no_limit_chk
// General
// 163, 467-468, 471, 473, 475-480, 482-484, 487, 491, 493-494
cmp [i_last_item_id], #163
je no_limit_chk
cmp [i_last_item_id], #467
je no_limit_chk
cmp [i_last_item_id], #468
je no_limit_chk
cmp [i_last_item_id], #471
je no_limit_chk
cmp [i_last_item_id], #473
je no_limit_chk
cmp [i_last_item_id], #475
jl last_chk
cmp [i_last_item_id], #480
jle no_limit_chk
cmp [i_last_item_id], #482
jl last_chk
cmp [i_last_item_id], #484
jle no_limit_chk
cmp [i_last_item_id], #487
je no_limit_chk
cmp [i_last_item_id], #491
je no_limit_chk
cmp [i_last_item_id], #493
je no_limit_chk
cmp [i_last_item_id], #494
je no_limit_chk
jmp last_chk
no_limit_chk:
cmp [is_bag_only], 1
jne chk_ammo_only
cmp [item_container_id], 1
je go_add_back
//jmp chk_ammo_only
chk_ammo_only:
cmp [is_ammo_only], 1
jne chk_env_item_only
cmp [item_container_id], 3
je go_add_back
//cmp [item_container_id], 4
//je go_add_back
//jmp chk_env_item_only
chk_env_item_only:
cmp [is_env_item_only], 1
jne any_only_flag_chk
cmp [item_container_id2], 3
je go_add_back
any_only_flag_chk: //check if any "only" switch on
push rax
xor eax, eax
add eax, [is_bag_only]
add eax, [is_ammo_only]
add eax, [is_env_item_only]
cmp eax, 0
pop rax
jne last_chk
go_add_back:
add [rdx+14],esi
cmp [is_inc_when_dec], 1
jne @F
add [rdx+14],esi
last_chk:
//jmp MonsterHunterRise.exe+32A7E92
reassemble(INJECT_ITEM_SELL_DEC+3)
jmp return
align 10 cc
is_inc_when_dec:
dd 0
i_last_item_count_addr:
dq 0
i_last_item_id:
dd 0
is_limit_item:
dd 0
is_bag_only:
dd 1 // Off. 2C; 1
is_ammo_only:
dd 1 // Off. 2C; 3
is_env_item_only:
dd 1 // Off. 2E; 3
item_container_id:
dd a
item_container_id2:
dd a
INJECT_ITEM_SELL_DEC:
jmp newmem
return:
registersymbol(is_env_item_only)
registersymbol(is_ammo_only)
registersymbol(is_bag_only)
registersymbol(is_limit_item)
registersymbol(i_last_item_count_addr)
registersymbol(i_last_item_id)
registersymbol(is_inc_when_dec)
registersymbol(INJECT_ITEM_SELL_DEC)
[DISABLE]
INJECT_ITEM_SELL_DEC:
db 29 72 14 EB 03
unregistersymbol(is_env_item_only)
unregistersymbol(is_ammo_only)
unregistersymbol(is_bag_only)
unregistersymbol(is_limit_item)
unregistersymbol(i_last_item_count_addr)
unregistersymbol(i_last_item_id)
unregistersymbol(is_inc_when_dec)
unregistersymbol(INJECT_ITEM_SELL_DEC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3167D8A
MonsterHunterRise.exe+3167D69: 49 8B 42 28 - mov rax,[r10+28]
MonsterHunterRise.exe+3167D6D: FF D0 - call rax
MonsterHunterRise.exe+3167D6F: 3D 00 00 00 04 - cmp eax,04000000
MonsterHunterRise.exe+3167D74: 74 75 - je MonsterHunterRise.exe+3167DEB
MonsterHunterRise.exe+3167D76: 48 89 7C 24 30 - mov [rsp+30],rdi
MonsterHunterRise.exe+3167D7B: 48 8B 53 20 - mov rdx,[rbx+20]
MonsterHunterRise.exe+3167D7F: 33 FF - xor edi,edi
MonsterHunterRise.exe+3167D81: 48 63 42 14 - movsxd rax,dword ptr [rdx+14]
MonsterHunterRise.exe+3167D85: 48 3B C6 - cmp rax,rsi
MonsterHunterRise.exe+3167D88: 7C 05 - jl MonsterHunterRise.exe+3167D8F
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3167D8A: 29 72 14 - sub [rdx+14],esi
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3167D8D: EB 03 - jmp MonsterHunterRise.exe+3167D92
MonsterHunterRise.exe+3167D8F: 89 7A 14 - mov [rdx+14],edi
MonsterHunterRise.exe+3167D92: 48 8B 05 CF 3B CF 0B - mov rax,[MonsterHunterRise.exe+EE5B968]
MonsterHunterRise.exe+3167D99: 83 B8 D0 00 00 00 01 - cmp dword ptr [rax+000000D0],01
MonsterHunterRise.exe+3167DA0: 74 1B - je MonsterHunterRise.exe+3167DBD
MonsterHunterRise.exe+3167DA2: 48 8B 43 20 - mov rax,[rbx+20]
MonsterHunterRise.exe+3167DA6: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+3167DA9: 48 8B 15 88 CB CE 0B - mov rdx,[MonsterHunterRise.exe+EE54938]
MonsterHunterRise.exe+3167DB0: 44 8B 48 14 - mov r9d,[rax+14]
MonsterHunterRise.exe+3167DB4: 44 8B 40 10 - mov r8d,[rax+10]
}
Toggle Activation
18
65
0
1337095182
"***Notice: Disable when quest completed (if hang) & crafting***"
800080
1
87688
"increase#, when decreased (On/Off)"
0:Off
1:On
0
4 Bytes
is_inc_when_dec
1337096389
"Limit items"
1
1337095180
"Limit items (Ammos & some general stuff) (On/Off)"
0:Off
1:On
0
4 Bytes
is_limit_item
1337096390
"Bag only (On/Off)"
0:Off
1:On
0
4 Bytes
is_bag_only
1337095316
"Ammo only (On/Off)"
0:Off
1:On
0
4 Bytes
is_ammo_only
1337095317
"Hunting Helpers only (On/Off)"
0:Off
1:On
0
4 Bytes
is_env_item_only
1337095181
"_debug"
1
1337095174
"Last dec. item address"
1
0
8 Bytes
i_last_item_id_addr
1337095176
"Last dec. item address count"
0
4 Bytes
i_last_item_count_addr
0
1337095177
"Last dec. item ID"
0
FF8080
2 Bytes
i_last_item_count_addr
-4
1337095178
"(Unknown) Last dec. item ??"
0410:General?
0420:Env. item?
1
0
2 Bytes
i_last_item_count_addr
-2
1337095179
"Last dec. item ?? & ID (hex; use w/ caution)"
04200000:泥球甲蟲
04200001:麻痺斯蛙
04200002:魁儡蜘蛛
04200003:落雨蝸牛
04200004:塗泥陸龜
04200005:臭臭鼬鼠
04200006:子泣雉雞
04200007:火石甲蟲
04200008:雷毛甲蟲
04200009:雪石甲蟲
0420000A:撒菱蟲
0420000B:提燈妖蟲
0420000C:加釀兔
0420000D:轆轤蛇
0420000E:睡眠瓦斯蛙
04200010:炸彈瓦斯蛙
04200014:一目蟹
1
0
4 Bytes
i_last_item_count_addr
-4
1337096391
"Last dec. item Serial"
0
2 Bytes
i_last_item_count_addr
30
1337095312
"Last dec. item Serial -2"
0:Bag/Temp. bag/Ammo
1:Item box
3:Env. item
18426:18426
0
2 Bytes
i_last_item_count_addr
2E
1337095313
"Last dec. item Serial -4"
0:Item box/Env. item
1:Bag
2:Temp. bag
3:Ammo
0
C08000
2 Bytes
i_last_item_count_addr
2C
1337095311
"Last dec. item ????"
2:Item box/Env. item
3:Bag/Temp. Bag
4:Bag/Ammo
0
4 Bytes
i_last_item_count_addr
24
1337095309
"+Buff time+ / Stamina (turn on before use item)"
1
1337095479
"Stamina never below 3000/ 精力不低於3000"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIN_STEMIA,MonsterHunterRise.exe,F3 0F 11 48 28 77) // should be unique
alloc(newmem,$1000,INJECT_MIN_STEMIA)
label(code)
label(return)
label(xmm_tmp10)
label(fl_stemia_watermark)
label(i_base_stam_addr)
newmem:
mov [i_base_stam_addr], rax
code:
movq [xmm_tmp10], xmm10
movq xmm10, [fl_stemia_watermark]
pushf
comiss, xmm1, xmm10
ja @F
movss xmm1, xmm10
@@:
popf
movss [rax+28],xmm1
movq xmm10, [xmm_tmp10]
jmp return
align 10 cc
i_base_stam_addr:
dq 0
align 10 cc
fl_stemia_watermark:
dq (float)3000
xmm_tmp10:
dq 0
INJECT_MIN_STEMIA:
jmp newmem
return:
registersymbol(INJECT_MIN_STEMIA)
registersymbol(i_base_stam_addr)
[DISABLE]
INJECT_MIN_STEMIA:
db F3 0F 11 48 28
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+37AE96E
MonsterHunterRise.exe+37AE943: F2 0F 59 C8 - mulsd xmm1,xmm0
MonsterHunterRise.exe+37AE947: 66 44 0F 5A C1 - cvtpd2ps xmm8,xmm1
MonsterHunterRise.exe+37AE94C: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+37AE953: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+37AE956: F3 41 0F 5A C0 - cvtss2sd xmm0,xmm8
MonsterHunterRise.exe+37AE95B: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+37AE960: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+37AE963: F2 0F 58 C8 - addsd xmm1,xmm0
MonsterHunterRise.exe+37AE967: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+37AE96B: 0F 2F CF - comiss xmm1,xmm7
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+37AE96E: F3 0F 11 48 28 - movss [rax+28],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+37AE973: 77 07 - ja MonsterHunterRise.exe+37AE97C
MonsterHunterRise.exe+37AE975: C7 40 28 00 00 00 00 - mov [rax+28],00000000
MonsterHunterRise.exe+37AE97C: F3 0F 10 50 2C - movss xmm2,[rax+2C]
MonsterHunterRise.exe+37AE981: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+37AE986: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+37AE989: 0F 5A C2 - cvtps2pd xmm0,xmm2
MonsterHunterRise.exe+37AE98C: 66 0F 2F C1 - comisd xmm0,xmm1
MonsterHunterRise.exe+37AE990: 77 05 - ja MonsterHunterRise.exe+37AE997
MonsterHunterRise.exe+37AE992: F3 0F 11 50 28 - movss [rax+28],xmm2
MonsterHunterRise.exe+37AE997: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
}
1337096967
"Max HP"
0
4 Bytes
i_base_stam_addr
18
1337096966
"??"
0
4 Bytes
i_base_stam_addr
1C
1337096965
"Current HP, include recoverable"
0
4 Bytes
i_base_stam_addr
24
1337096964
"Stamina"
0
Float
i_base_stam_addr
28
1337096393
"Demon Powder up+ (Power) / long duration / 設定鬼人粉塵攻擊力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DEMON_POWDER_UP,MonsterHunterRise.exe,F3 0F 11 80 A8 00 00 00 E8) // should be unique
alloc(newmem,$1000,INJECT_DEMON_POWDER_UP)
label(code)
label(return)
label(i_atk_up)
label(i_base_demon_powder_addr)
newmem:
mov [i_base_demon_powder_addr], rax
push rbx
mov ebx, [i_atk_up]
mov [rax+A0],ebx
mov rbx, (float)324000
movq xmm0, rbx
pop rbx
code:
movss [rax+000000A8],xmm0
jmp return
align 10 cc
i_atk_up:
dd #250
i_base_demon_powder_addr:
dq 0
INJECT_DEMON_POWDER_UP:
jmp newmem
nop 3
return:
registersymbol(i_atk_up)
registersymbol(INJECT_DEMON_POWDER_UP)
registersymbol(i_base_demon_powder_addr)
[DISABLE]
INJECT_DEMON_POWDER_UP:
db F3 0F 11 80 A8 00 00 00
unregistersymbol(i_atk_up)
unregistersymbol(i_base_demon_powder_addr)
unregistersymbol(INJECT_DEMON_POWDER_UP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3B136A9
MonsterHunterRise.exe+3B1367A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B13681: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3B13684: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3B13688: 41 B9 6E 00 00 00 - mov r9d,0000006E
MonsterHunterRise.exe+3B1368E: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B13691: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B13694: 89 98 A0 00 00 00 - mov [rax+000000A0],ebx
MonsterHunterRise.exe+3B1369A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B136A1: 45 8D 41 F6 - lea r8d,[r9-0A]
MonsterHunterRise.exe+3B136A5: 66 0F 5A C1 - cvtpd2ps xmm0,xmm1
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3B136A9: F3 0F 11 80 A8 00 00 00 - movss [rax+000000A8],xmm0
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3B136B1: E8 BA 54 DD FF - call MonsterHunterRise.exe+38E8B70
MonsterHunterRise.exe+3B136B6: 45 8B C7 - mov r8d,r15d
MonsterHunterRise.exe+3B136B9: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136BC: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B136BF: E8 EC 36 00 00 - call MonsterHunterRise.exe+3B16DB0
MonsterHunterRise.exe+3B136C4: E9 DF 1F 00 00 - jmp MonsterHunterRise.exe+3B156A8
MonsterHunterRise.exe+3B136C9: 48 8B 05 A0 8E E4 0A - mov rax,[skills_current]
MonsterHunterRise.exe+3B136D0: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136D3: F3 0F 10 05 15 0C E5 0A - movss xmm0,[MonsterHunterRise.exe+E9642F0]
MonsterHunterRise.exe+3B136DB: 0F 5A C0 - cvtps2pd xmm0,xmm0
}
1337096394
"Atk+ value / 攻擊力"
10:10
25:25
45:45
100:100
500:500
0
4 Bytes
i_atk_up
1337096961
"Duration"
0
Float
i_base_demon_powder_addr
A8
1337095187
"Crit up buff long duration / 瞬間強化生物：網切蜻蜓長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_CRIT_TIME,MonsterHunterRise.exe,F3 0F 11 88 C4 00 00 00 E9) // should be unique
alloc(newmem,$1000,INJECT_CRIT_TIME) // triggered when get buff
aobscanmodule(INJECT_GET_AFFINITY_TIME,MonsterHunterRise.exe,0F 2F B1 C4 00 00 00) // should be unique
alloc(newmem1,$1000,INJECT_GET_AFFINITY_TIME) // triggered everytime
label(code)
label(return)
label(i_base_crit_addr)
newmem:
mov [i_base_crit_addr], rax
vmovss xmm1, [vf_324000]
code:
movss [rax+000000C4],xmm1
jmp return
align 10 cc
i_base_crit_addr:
dq 0
vf_324000:
dd (float)324000
INJECT_CRIT_TIME:
jmp newmem
nop 3
return:
registersymbol(INJECT_CRIT_TIME)
registersymbol(i_base_crit_addr)
label(code1)
label(return1)
newmem1:
cmp qword ptr [i_base_crit_addr], 0
jne code1
mov [i_base_crit_addr], rcx
code1:
comiss xmm6,[rcx+000000C4]
jmp return1
INJECT_GET_AFFINITY_TIME:
jmp newmem1
nop 2
return1:
registersymbol(INJECT_GET_AFFINITY_TIME)
[DISABLE]
INJECT_CRIT_TIME:
db F3 0F 11 88 C4 00 00 00
unregistersymbol(*)
dealloc(newmem)
INJECT_GET_AFFINITY_TIME:
db 0F 2F B1 C4 00 00 00
unregistersymbol(INJECT_GET_AFFINITY_TIME)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3871AC7
MonsterHunterRise.exe+3871A97: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
MonsterHunterRise.exe+3871A9E: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3871AA1: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3871AA5: F3 0F 10 05 23 AA 5D 0B - movss xmm0,[MonsterHunterRise.exe+EE4C4D0]
MonsterHunterRise.exe+3871AAD: F2 0F 59 0D CB FE 91 03 - mulsd xmm1,[MonsterHunterRise.exe+7191980]
MonsterHunterRise.exe+3871AB5: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+3871AB8: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+3871ABC: 0F 5A D1 - cvtps2pd xmm2,xmm1
MonsterHunterRise.exe+3871ABF: F2 0F 59 D0 - mulsd xmm2,xmm0
MonsterHunterRise.exe+3871AC3: 66 0F 5A CA - cvtpd2ps xmm1,xmm2
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3871AC7: F3 0F 11 88 C4 00 00 00 - movss [rax+000000C4],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3871ACF: E9 D7 02 00 00 - jmp MonsterHunterRise.exe+3871DAB
MonsterHunterRise.exe+3871AD4: 48 8B 0D 4D 80 5E 0B - mov rcx,[MonsterHunterRise.exe+EE59B28]
MonsterHunterRise.exe+3871ADB: 48 85 C9 - test rcx,rcx
MonsterHunterRise.exe+3871ADE: 74 0B - je MonsterHunterRise.exe+3871AEB
MonsterHunterRise.exe+3871AE0: 48 83 79 10 00 - cmp qword ptr [rcx+10],00
MonsterHunterRise.exe+3871AE5: 74 04 - je MonsterHunterRise.exe+3871AEB
MonsterHunterRise.exe+3871AE7: 32 C0 - xor al,al
MonsterHunterRise.exe+3871AE9: EB 02 - jmp MonsterHunterRise.exe+3871AED
MonsterHunterRise.exe+3871AEB: B0 01 - mov al,01
MonsterHunterRise.exe+3871AED: 0F B6 C0 - movzx eax,al
}
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+357D5A9
MonsterHunterRise.exe+357D582: 8D 14 03 - lea edx,[rbx+rax]
MonsterHunterRise.exe+357D585: 89 55 18 - mov [rbp+18],edx
MonsterHunterRise.exe+357D588: EB 03 - jmp MonsterHunterRise.exe+357D58D
MonsterHunterRise.exe+357D58A: 8B 55 18 - mov edx,[rbp+18]
MonsterHunterRise.exe+357D58D: 48 8B 8F 20 01 00 00 - mov rcx,[rdi+00000120]
MonsterHunterRise.exe+357D594: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+357D597: 0F 2F B1 B4 00 00 00 - comiss xmm6,[rcx+000000B4]
MonsterHunterRise.exe+357D59E: 73 09 - jae MonsterHunterRise.exe+357D5A9
MonsterHunterRise.exe+357D5A0: 03 91 B8 00 00 00 - add edx,[rcx+000000B8]
MonsterHunterRise.exe+357D5A6: 89 55 18 - mov [rbp+18],edx
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+357D5A9: 0F 2F B1 C4 00 00 00 - comiss xmm6,[rcx+000000C4]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+357D5B0: 73 06 - jae MonsterHunterRise.exe+357D5B8
MonsterHunterRise.exe+357D5B2: 83 C2 32 - add edx,32
MonsterHunterRise.exe+357D5B5: 89 55 18 - mov [rbp+18],edx
MonsterHunterRise.exe+357D5B8: 4C 8B 87 08 02 00 00 - mov r8,[rdi+00000208]
MonsterHunterRise.exe+357D5BF: 49 8B 40 38 - mov rax,[r8+38]
MonsterHunterRise.exe+357D5C3: 0F 2F 70 10 - comiss xmm6,[rax+10]
MonsterHunterRise.exe+357D5C7: 72 0A - jb MonsterHunterRise.exe+357D5D3
MonsterHunterRise.exe+357D5C9: 49 8B 40 50 - mov rax,[r8+50]
MonsterHunterRise.exe+357D5CD: 0F 2F 70 10 - comiss xmm6,[rax+10]
MonsterHunterRise.exe+357D5D1: 73 06 - jae MonsterHunterRise.exe+357D5D9
}
1337096775
"Affinity"
0
Float
i_base_crit_addr
C4
1337095185
"Hardshell Powder+ (Power) / long duration / 設定硬化粉塵防禦力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_Hardshell_Powder,MonsterHunterRise.exe,F3 0F 11 98 AC 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_Hardshell_Powder)
label(code)
label(return)
label(i_hardshell_atk)
newmem:
code:
push rbx
mov ebx, [i_hardshell_atk]
mov [rax+000000A4],ebx
mov rbx, (Double)324000
movq xmm3, rbx
pop rbx
movss [rax+000000AC],xmm3
jmp return
align 10 cc
i_hardshell_atk:
dd #500
INJECT_Hardshell_Powder:
jmp newmem
nop 3
return:
registersymbol(i_hardshell_atk)
registersymbol(INJECT_Hardshell_Powder)
[DISABLE]
INJECT_Hardshell_Powder:
db F3 0F 11 98 AC 00 00 00
unregistersymbol(i_hardshell_atk)
unregistersymbol(INJECT_Hardshell_Powder)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3AB6DC8
MonsterHunterRise.exe+3AB6D9D: 48 8B 15 54 6D EA 0A - mov rdx,[MonsterHunterRise.exe+E95DAF8]
MonsterHunterRise.exe+3AB6DA4: E8 F7 DF 07 FE - call MonsterHunterRise.exe+1B34DA0
MonsterHunterRise.exe+3AB6DA9: 48 83 C4 38 - add rsp,38
MonsterHunterRise.exe+3AB6DAD: C3 - ret
MonsterHunterRise.exe+3AB6DAE: CC - int 3
MonsterHunterRise.exe+3AB6DAF: CC - int 3
MonsterHunterRise.exe+3AB6DB0: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3AB6DB7: 44 89 80 A4 00 00 00 - mov [rax+000000A4],r8d
MonsterHunterRise.exe+3AB6DBE: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+3AB6DC1: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3AB6DC8: F3 0F 11 98 AC 00 00 00 - movss [rax+000000AC],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3AB6DD0: E9 AB FE FE FF - jmp MonsterHunterRise.exe+3AA6C80
MonsterHunterRise.exe+3AB6DD5: CC - int 3
MonsterHunterRise.exe+3AB6DD6: CC - int 3
MonsterHunterRise.exe+3AB6DD7: CC - int 3
MonsterHunterRise.exe+3AB6DD8: CC - int 3
MonsterHunterRise.exe+3AB6DD9: CC - int 3
MonsterHunterRise.exe+3AB6DDA: CC - int 3
MonsterHunterRise.exe+3AB6DDB: CC - int 3
MonsterHunterRise.exe+3AB6DDC: CC - int 3
MonsterHunterRise.exe+3AB6DDD: CC - int 3
}
1337095186
"Def+ value / 防禦力"
10:10
25:25
45:45
100:100
220:220
500:500
1500:1500
0
4 Bytes
i_hardshell_atk
1337095183
"Dash juice long duration / 強走藥長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DASH_JUICE_LONG,MonsterHunterRise.exe,F3 0F 11 90 9C 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_DASH_JUICE_LONG)
label(code)
label(return)
newmem:
code:
push rax
mov rax, (Float)324000
movq xmm2, rax
pop rax
movss [rax+0000009C],xmm2
jmp return
INJECT_DASH_JUICE_LONG:
jmp newmem
nop 3
return:
registersymbol(INJECT_DASH_JUICE_LONG)
[DISABLE]
INJECT_DASH_JUICE_LONG:
db F3 0F 11 90 9C 00 00 00
unregistersymbol(INJECT_DASH_JUICE_LONG)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+521B7F
MonsterHunterRise.exe+521B5D: CC - int 3
MonsterHunterRise.exe+521B5E: CC - int 3
MonsterHunterRise.exe+521B5F: CC - int 3
MonsterHunterRise.exe+521B60: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+521B67: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+521B6A: F3 0F 5A C2 - cvtss2sd xmm0,xmm2
MonsterHunterRise.exe+521B6E: F3 0F 10 88 9C 00 00 00 - movss xmm1,[rax+0000009C]
MonsterHunterRise.exe+521B76: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+521B79: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+521B7D: 73 08 - jae MonsterHunterRise.exe+521B87
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+521B7F: F3 0F 11 90 9C 00 00 00 - movss [rax+0000009C],xmm2
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+521B87: C3 - ret
MonsterHunterRise.exe+521B88: CC - int 3
MonsterHunterRise.exe+521B89: CC - int 3
MonsterHunterRise.exe+521B8A: CC - int 3
MonsterHunterRise.exe+521B8B: CC - int 3
MonsterHunterRise.exe+521B8C: CC - int 3
MonsterHunterRise.exe+521B8D: CC - int 3
MonsterHunterRise.exe+521B8E: CC - int 3
MonsterHunterRise.exe+521B8F: CC - int 3
MonsterHunterRise.exe+521B90: 44 8B 42 70 - mov r8d,[rdx+70]
}
1337095320
"Prevent debuff duration+ (snake) / 轆轤蛇超長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SNAKE_PREV_DEBUFF,MonsterHunterRise.exe,F3 0F 11 88 DC 00 00 00 F3) // should be unique
alloc(newmem,$1000,INJECT_SNAKE_PREV_DEBUFF)
label(code)
label(return)
label(i_base_snake_addr)
newmem:
mov [i_base_snake_addr], rax
vmovss xmm1, [vf_324000]
code:
movss [rax+000000DC],xmm1
jmp return
align 10 cc
i_base_snake_addr:
dq 0
vf_324000:
dd (float)324000
INJECT_SNAKE_PREV_DEBUFF:
jmp newmem
nop 3
return:
registersymbol(INJECT_SNAKE_PREV_DEBUFF)
registersymbol(i_base_snake_addr)
[DISABLE]
INJECT_SNAKE_PREV_DEBUFF:
db F3 0F 11 88 DC 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3888203
MonsterHunterRise.exe+38881D0: 0F 84 07 04 00 00 - je MonsterHunterRise.exe+38885DD
MonsterHunterRise.exe+38881D6: 4C 89 74 24 58 - mov [rsp+58],r14
MonsterHunterRise.exe+38881DB: 0F 29 74 24 30 - movaps [rsp+30],xmm6
MonsterHunterRise.exe+38881E0: 45 84 C0 - test r8l,r8l
MonsterHunterRise.exe+38881E3: 74 26 - je MonsterHunterRise.exe+388820B
MonsterHunterRise.exe+38881E5: F3 0F 10 05 E3 42 5C 0B - movss xmm0,[MonsterHunterRise.exe+EE4C4D0]
MonsterHunterRise.exe+38881ED: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+38881F4: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+38881F7: F2 0F 59 05 B9 9E 90 03 - mulsd xmm0,[itembuff_base]
MonsterHunterRise.exe+38881FF: 66 0F 5A C8 - cvtpd2ps xmm1,xmm0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3888203: F3 0F 11 88 DC 00 00 00 - movss [rax+000000DC],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+388820B: F3 0F 10 82 1C 08 00 00 - movss xmm0,[rdx+0000081C]
MonsterHunterRise.exe+3888213: 45 33 F6 - xor r14d,r14d
MonsterHunterRise.exe+3888216: 41 8B C6 - mov eax,r14d
MonsterHunterRise.exe+3888219: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+388821C: 0F 2F C6 - comiss xmm0,xmm6
MonsterHunterRise.exe+388821F: 0F 97 C0 - seta al
MonsterHunterRise.exe+3888222: 85 C0 - test eax,eax
MonsterHunterRise.exe+3888224: 74 08 - je MonsterHunterRise.exe+388822E
MonsterHunterRise.exe+3888226: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+3888229: E8 22 93 E1 FC - call MonsterHunterRise.exe+6A1550
}
1337096776
"Immunity"
0
Float
i_base_snake_addr
DC
1337096395
"Might seed up+ (Power) / long duration / 設定怪力種子攻擊力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIGHT_SEED_BUFF,MonsterHunterRise.exe,F3 0F 11 98 90 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_MIGHT_SEED_BUFF)
aobscanmodule(INJECT_GET_MIGHT_SEED_TIME,MonsterHunterRise.exe,0F 2F B8 90 00 00 00) // should be unique
alloc(newmem1,$1000,INJECT_GET_MIGHT_SEED_TIME)
label(code)
label(return)
label(i_might_seed)
label(i_base_might_seed_addr)
newmem:
mov [i_base_might_seed_addr], rax
code:
push rbx
mov ebx, [i_might_seed]
mov [rax+84],ebx
mov rbx, (float)324000
movq xmm3, rbx
pop rbx
movss [rax+00000090],xmm3
jmp return
align 10 cc
i_base_might_seed_addr:
dq 0
i_might_seed:
dd #75
INJECT_MIGHT_SEED_BUFF:
jmp newmem
nop 3
return:
registersymbol(i_might_seed)
registersymbol(INJECT_MIGHT_SEED_BUFF)
registersymbol(i_base_might_seed_addr)
label(code1)
label(return1)
newmem1:
cmp qword ptr [i_base_might_seed_addr], 0
jne code1
mov [i_base_might_seed_addr], rax
code1:
comiss xmm7,[rax+00000090]
jmp return1
INJECT_GET_MIGHT_SEED_TIME:
jmp newmem1
nop 2
return1:
registersymbol(INJECT_GET_MIGHT_SEED_TIME)
[DISABLE]
INJECT_MIGHT_SEED_BUFF:
db F3 0F 11 98 90 00 00 00
unregistersymbol(i_might_seed)
unregistersymbol(i_base_might_seed_addr)
unregistersymbol(INJECT_MIGHT_SEED_BUFF)
dealloc(newmem)
INJECT_GET_MIGHT_SEED_TIME:
db 0F 2F B8 90 00 00 00
unregistersymbol(INJECT_GET_MIGHT_SEED_TIME)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+38846BD
MonsterHunterRise.exe+388468F: CC - int 3
MonsterHunterRise.exe+3884690: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3884697: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+388469A: F3 0F 5A C3 - cvtss2sd xmm0,xmm3
MonsterHunterRise.exe+388469E: F3 0F 10 88 90 00 00 00 - movss xmm1,[rax+00000090]
MonsterHunterRise.exe+38846A6: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+38846A9: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+38846AD: 73 16 - jae MonsterHunterRise.exe+38846C5
MonsterHunterRise.exe+38846AF: 44 89 80 84 00 00 00 - mov [rax+00000084],r8d
MonsterHunterRise.exe+38846B6: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+38846BD: F3 0F 11 98 90 00 00 00 - movss [rax+00000090],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+38846C5: C3 - ret
MonsterHunterRise.exe+38846C6: CC - int 3
MonsterHunterRise.exe+38846C7: CC - int 3
MonsterHunterRise.exe+38846C8: CC - int 3
MonsterHunterRise.exe+38846C9: CC - int 3
MonsterHunterRise.exe+38846CA: CC - int 3
MonsterHunterRise.exe+38846CB: CC - int 3
MonsterHunterRise.exe+38846CC: CC - int 3
MonsterHunterRise.exe+38846CD: CC - int 3
MonsterHunterRise.exe+38846CE: CC - int 3
}
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+357E0B5
MonsterHunterRise.exe+357E087: 41 FF 91 E8 02 00 00 - call qword ptr [r9+000002E8]
MonsterHunterRise.exe+357E08E: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+357E095: F3 0F 10 4D 28 - movss xmm1,[rbp+28]
MonsterHunterRise.exe+357E09A: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+357E09D: 66 0F 6E 40 7C - movd xmm0,[rax+7C]
MonsterHunterRise.exe+357E0A2: 0F 5B C0 - cvtdq2ps xmm0,xmm0
MonsterHunterRise.exe+357E0A5: 0F 5A D0 - cvtps2pd xmm2,xmm0
MonsterHunterRise.exe+357E0A8: F2 0F 58 D1 - addsd xmm2,xmm1
MonsterHunterRise.exe+357E0AC: 66 0F 5A DA - cvtpd2ps xmm3,xmm2
MonsterHunterRise.exe+357E0B0: F3 0F 11 5D 28 - movss [rbp+28],xmm3
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+357E0B5: 0F 2F B8 90 00 00 00 - comiss xmm7,[rax+00000090]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+357E0BC: 73 1E - jae MonsterHunterRise.exe+357E0DC
MonsterHunterRise.exe+357E0BE: 66 0F 6E 80 84 00 00 00 - movd xmm0,[rax+00000084]
MonsterHunterRise.exe+357E0C6: 0F 5A CB - cvtps2pd xmm1,xmm3
MonsterHunterRise.exe+357E0C9: 0F 5B C0 - cvtdq2ps xmm0,xmm0
MonsterHunterRise.exe+357E0CC: 0F 5A D0 - cvtps2pd xmm2,xmm0
MonsterHunterRise.exe+357E0CF: F2 0F 58 D1 - addsd xmm2,xmm1
MonsterHunterRise.exe+357E0D3: 66 0F 5A DA - cvtpd2ps xmm3,xmm2
MonsterHunterRise.exe+357E0D7: F3 0F 11 5D 28 - movss [rbp+28],xmm3
MonsterHunterRise.exe+357E0DC: 0F 2F B8 A8 00 00 00 - comiss xmm7,[rax+000000A8]
MonsterHunterRise.exe+357E0E3: 73 1E - jae MonsterHunterRise.exe+357E103
}
1337095173
"Atk up+ / 攻擊力"
10:10
25:25
45:45
100:100
500:500
0
4 Bytes
i_might_seed
1337096963
"Duration"
0
Float
i_base_might_seed_addr
90
1337096779
"Damage -> recovery bar / 受到傷害會變紅條"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-14
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DMG_RED2,MonsterHunterRise.exe,0F 5A CF 0F 28 7C 24 20 F3) // should be unique
alloc(newmem,$1000,INJECT_DMG_RED2)
label(code)
label(return)
newmem:
//xorps xmm7,xmm7
//vmovss xmm7, [vf_0]
code:
cvtps2pd xmm1,xmm7
movaps xmm7,[rsp+20]
//
xorps xmm7,xmm7
push rdx
mov edx, [rbx+18]
mov eax, edx
mov r14d, 0
cvtsi2ss xmm2, edx
cvtsi2ss xmm4, edx
//xorps xmm3,xmm3
//vmovss xmm15, [vf_2]
//mulss xmm1, xmm15
//mulss xmm1, xmm15
cvtps2pd xmm6, xmm2
pop rdx
//
jmp return
align 10 cc
vf_0:
dd 0
vf_2:
dd (float)2
INJECT_DMG_RED2:
jmp newmem
nop 3
return:
registersymbol(INJECT_DMG_RED2)
[DISABLE]
INJECT_DMG_RED2:
db 0F 5A CF 0F 28 7C 24 20
unregistersymbol(INJECT_DMG_RED2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+37A97B6
MonsterHunterRise.exe+37A978D: E8 DE DB CC FF - call MonsterHunterRise.exe+3477370
MonsterHunterRise.exe+37A9792: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
MonsterHunterRise.exe+37A9799: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+37A979C: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+37A979F: F3 0F 5A F0 - cvtss2sd xmm6,xmm0
MonsterHunterRise.exe+37A97A3: 48 8B 50 10 - mov rdx,[rax+10]
MonsterHunterRise.exe+37A97A7: E8 C4 DB CC FF - call MonsterHunterRise.exe+3477370
MonsterHunterRise.exe+37A97AC: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+37A97B0: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+37A97B3: 44 2B F0 - sub r14d,eax
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+37A97B6: 0F 5A CF - cvtps2pd xmm1,xmm7
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+37A97B9: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
MonsterHunterRise.exe+37A97BE: F3 41 0F 2A C6 - cvtsi2ss xmm0,r14d
MonsterHunterRise.exe+37A97C3: 0F 5A D8 - cvtps2pd xmm3,xmm0
MonsterHunterRise.exe+37A97C6: 66 0F 5A C6 - cvtpd2ps xmm0,xmm6
MonsterHunterRise.exe+37A97CA: F2 0F 59 D9 - mulsd xmm3,xmm1
MonsterHunterRise.exe+37A97CE: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+37A97D1: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+37A97D5: F2 0F 5E 1D D3 81 9E 03 - divsd xmm3,[MonsterHunterRise.exe+71919B0]
MonsterHunterRise.exe+37A97DD: F3 0F 2A C8 - cvtsi2ss xmm1,eax
MonsterHunterRise.exe+37A97E1: 0F 5A D1 - cvtps2pd xmm2,xmm1
}
1337096782
"Anomaly Investigations list viewer / 傀異探究任務檢視器"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-14
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_ANO_INVES_QUEST_LIST,MonsterHunterRise.exe,44 8B 45 18 48 8B CF 49) // should be unique
alloc(newmem,$1000,INJECT_ANO_INVES_QUEST_LIST)
label(code)
label(return)
label(i_ano_inves_quest_list_base_addr)
newmem:
mov [i_ano_inves_quest_list_base_addr], rbp
code:
mov r8d,[rbp+18]
mov rcx,rdi
jmp return
align 10 cc
i_ano_inves_quest_list_base_addr:
dq 0
INJECT_ANO_INVES_QUEST_LIST:
jmp newmem
nop 2
return:
registersymbol(INJECT_ANO_INVES_QUEST_LIST)
registersymbol(i_ano_inves_quest_list_base_addr)
[DISABLE]
INJECT_ANO_INVES_QUEST_LIST:
db 44 8B 45 18 48 8B CF
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+357C6B4
MonsterHunterRise.exe+357C683: 48 83 C0 20 - add rax,20
MonsterHunterRise.exe+357C687: 66 0F 1F 84 00 00 00 00 00 - nop word ptr [rax+rax+00000000]
MonsterHunterRise.exe+357C690: 48 8B 08 - mov rcx,[rax]
MonsterHunterRise.exe+357C693: 44 39 41 10 - cmp [rcx+10],r8d
MonsterHunterRise.exe+357C697: 0F 84 33 02 00 00 - je MonsterHunterRise.exe+357C8D0
MonsterHunterRise.exe+357C69D: 49 FF C1 - inc r9
MonsterHunterRise.exe+357C6A0: 48 83 C0 08 - add rax,08
MonsterHunterRise.exe+357C6A4: 4C 3B CA - cmp r9,rdx
MonsterHunterRise.exe+357C6A7: 7C E7 - jl MonsterHunterRise.exe+357C690
MonsterHunterRise.exe+357C6A9: C7 84 24 A8 00 00 00 01 00 00 00 - mov [rsp+000000A8],00000001
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+357C6B4: 44 8B 45 18 - mov r8d,[rbp+18]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+357C6B8: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+357C6BB: 49 8B 95 B8 06 00 00 - mov rdx,[r13+000006B8]
MonsterHunterRise.exe+357C6C2: E8 29 94 6F 00 - call MonsterHunterRise.exe+3C75AF0
MonsterHunterRise.exe+357C6C7: 44 8B 85 80 00 00 00 - mov r8d,[rbp+00000080]
MonsterHunterRise.exe+357C6CE: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+357C6D1: 49 8B 95 D0 06 00 00 - mov rdx,[r13+000006D0]
MonsterHunterRise.exe+357C6D8: 44 0F 28 C8 - movaps xmm9,xmm0
MonsterHunterRise.exe+357C6DC: E8 0F A3 92 FD - call MonsterHunterRise.exe+EA69F0
MonsterHunterRise.exe+357C6E1: 44 0F 28 D0 - movaps xmm10,xmm0
MonsterHunterRise.exe+357C6E5: 44 8B FB - mov r15d,ebx
}
1337096783
"Quest ID / 任務ID"
0
4 Bytes
i_ano_inves_quest_list_base_addr
10
1337096784
"Quest LV / 任務等級"
0
4 Bytes
i_ano_inves_quest_list_base_addr
18
1337096787
"Type / 種類"
0
4 Bytes
i_ano_inves_quest_list_base_addr
20
1337096788
"Location ID / 目的地ID"
1:Shrine Ruins/大社遺跡
2:Sandy Plains/沙原
3:Flooded Forest/水沒林
4:Frost Islands/寒冷群島
5:Lava Caverns/熔岩洞
12:Jungle/密林
13:Citadel/城塞高地
0
4 Bytes
i_ano_inves_quest_list_base_addr
24
1337096785
"Quest Duration / 限制時間"
0
4 Bytes
i_ano_inves_quest_list_base_addr
78
1337096786
"Retry count / 力竭倒下次數"
0
4 Bytes
i_ano_inves_quest_list_base_addr
7C
1337096975
"_Not Working"
1
1337096972
"Set min. HP (May dead still) / 設定最小HP (仍有可能被擊殺)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-20
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SET_HP_MIN,MonsterHunterRise.exe,F3 0F 10 45 20 F3 0F 11 45 20) // should be unique
alloc(newmem,$1000,INJECT_SET_HP_MIN)
label(code)
label(return)
label(vf_min_hp)
newmem:
code:
movss xmm0,[rbp+20]
// inject start
push rax
mov eax, [rbp+1C]
cmp eax, 1
jne endp
mov eax, [rbp+24]
cmp eax, 0
jne endp
mov eax, [rbp+28]
cmp eax, 0
jne endp
mov eax, [rbp+2C]
cmp eax, 0
jne endp
mov eax, [rbp+40]
cmp eax, 0
jne endp
mov eax, [rbp+44]
cmp eax, 0
jne endp
mov eax, [rbp+48]
cmp eax, 0
jne endp
mov eax, [rbp+4C]
cmp eax, 0
jne endp
vmovss xmm15, [vf_min_hp]
vcomiss xmm0, xmm15
jae endp
vmovss xmm0, [vf_min_hp]
// inject end
endp:
pop rax
jmp return
align 10 cc
vf_50:
dd (float)50
vf_min_hp:
dd (float)75
INJECT_SET_HP_MIN:
jmp newmem
return:
registersymbol(INJECT_SET_HP_MIN)
registersymbol(vf_min_hp)
[DISABLE]
INJECT_SET_HP_MIN:
db F3 0F 10 45 20
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3D84588
MonsterHunterRise.exe+3D8456B: 0F B6 45 33 - movzx eax,byte ptr [rbp+33]
MonsterHunterRise.exe+3D8456F: 32 D1 - xor dl,cl
MonsterHunterRise.exe+3D84571: 6B C8 3F - imul ecx,eax,3F
MonsterHunterRise.exe+3D84574: 88 55 22 - mov [rbp+22],dl
MonsterHunterRise.exe+3D84577: 0F B6 55 23 - movzx edx,byte ptr [rbp+23]
MonsterHunterRise.exe+3D8457B: 02 D0 - add dl,al
MonsterHunterRise.exe+3D8457D: 32 D1 - xor dl,cl
MonsterHunterRise.exe+3D8457F: 48 8B CB - mov rcx,rbx
MonsterHunterRise.exe+3D84582: 88 55 23 - mov [rbp+23],dl
MonsterHunterRise.exe+3D84585: 48 8B D7 - mov rdx,rdi
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3D84588: F3 0F 10 45 20 - movss xmm0,[rbp+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3D8458D: F3 0F 11 45 20 - movss [rbp+20],xmm0
MonsterHunterRise.exe+3D84592: E8 F9 0E FE FF - call MonsterHunterRise.exe+3D65490
MonsterHunterRise.exe+3D84597: 48 8B 4F 08 - mov rcx,[rdi+08]
MonsterHunterRise.exe+3D8459B: 48 8B F0 - mov rsi,rax
MonsterHunterRise.exe+3D8459E: 48 C1 E9 26 - shr rcx,26
MonsterHunterRise.exe+3D845A2: 81 E1 FF FF 03 00 - and ecx,0003FFFF
MonsterHunterRise.exe+3D845A8: 48 8D 14 49 - lea rdx,[rcx+rcx*2]
MonsterHunterRise.exe+3D845AC: 48 8B 0D 95 BD 1A 0B - mov rcx,[MonsterHunterRise.exe+EF30348]
MonsterHunterRise.exe+3D845B3: 48 03 D2 - add rdx,rdx
MonsterHunterRise.exe+3D845B6: 44 8B 44 D1 08 - mov r8d,[rcx+rdx*8+08]
}
1337096974
"If monster attack power > current HP, you will dead / 如果魔物造成旳傷害大於目前HP，還是會死亡"
400080
1
1337096973
"Min. HP / 最小值"
0
Float
vf_min_hp
1337096962
"Max some active skills (not sure if working)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-15
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ACTIVE_SKILL_MODIFY,MonsterHunterRise.exe,90 48 8B 11 44 38 4A 10) // should be unique
alloc(newmem,$1000,INJECT_GET_ACTIVE_SKILL_MODIFY)
label(code)
label(return)
newmem:
mov rdx,[rcx]
push rax
mov al, [rdx+10]
cmp al, #57 //57 : Divine Blessing
jne chk_next
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next:
//61 : Earplugs
cmp al, #61
jne chk_next1
mov al, 5
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next1:
//62 : Windproof
cmp al, #62
jne chk_next2
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next2:
//8 : Weakness Exploit
cmp al, #8
jne chk_next3
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next3:
//65 : Evade Window
cmp al, #65
jne chk_next4
mov al, 5
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next4:
//22 : Handicraft
cmp al, #22
jne chk_next5
mov al, 5
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next5:
//2 : Agitator
cmp al, #2
jne chk_next6
mov al, 5
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next6:
cmp al, #131
jne chk_next7
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next7:
cmp al, #120
jne chk_next8
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next8:
cmp al, #119
jne chk_next9
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next9:
cmp al, #118
jne chk_nexta
mov al, 5
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nexta:
//7 : Critical Boost
cmp al, #7
jne chk_nextb
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nextb:
//66 : Evade Extender
cmp al, #66
jne chk_nextc
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nextc:
//51 : Ammo Up
cmp al, #51
jne chk_nextd
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nextd:
//93 : Flinch Free
cmp al, #93
jne chk_nexte
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nexte:
//55:Rapid Fire Up
cmp al, #55
jne chk_nextf
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_nextf:
//84:Good Luck
cmp al, #83
jne chk_next10
mov al, 3
cmp [rdx+14], al
je endp
mov [rdx+14], al
jmp endp
chk_next10:
endp:
pop rax
code:
mov rdx,[rcx]
cmp [rdx+10],r9l
jmp return
INJECT_GET_ACTIVE_SKILL_MODIFY+01:
jmp newmem
nop 2
return:
registersymbol(INJECT_GET_ACTIVE_SKILL_MODIFY)
[DISABLE]
INJECT_GET_ACTIVE_SKILL_MODIFY+01:
db 48 8B 11 44 38 4A 10
unregistersymbol(INJECT_GET_ACTIVE_SKILL_MODIFY)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+2BB0BC0
MonsterHunterRise.exe+2BB0BA4: 74 2F - je MonsterHunterRise.exe+2BB0BD5
MonsterHunterRise.exe+2BB0BA6: 48 8B 49 10 - mov rcx,[rcx+10]
MonsterHunterRise.exe+2BB0BAA: 48 85 C9 - test rcx,rcx
MonsterHunterRise.exe+2BB0BAD: 74 26 - je MonsterHunterRise.exe+2BB0BD5
MonsterHunterRise.exe+2BB0BAF: 4C 63 41 1C - movsxd r8,dword ptr [rcx+1C]
MonsterHunterRise.exe+2BB0BB3: 33 C0 - xor eax,eax
MonsterHunterRise.exe+2BB0BB5: 4D 85 C0 - test r8,r8
MonsterHunterRise.exe+2BB0BB8: 7E 1B - jle MonsterHunterRise.exe+2BB0BD5
MonsterHunterRise.exe+2BB0BBA: 48 83 C1 20 - add rcx,20
MonsterHunterRise.exe+2BB0BBE: 66 90 - nop 2
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+2BB0BC0: 48 8B 11 - mov rdx,[rcx]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+2BB0BC3: 44 38 4A 10 - cmp [rdx+10],r9l
MonsterHunterRise.exe+2BB0BC7: 74 0F - je MonsterHunterRise.exe+2BB0BD8
MonsterHunterRise.exe+2BB0BC9: 48 FF C0 - inc rax
MonsterHunterRise.exe+2BB0BCC: 48 83 C1 08 - add rcx,08
MonsterHunterRise.exe+2BB0BD0: 49 3B C0 - cmp rax,r8
MonsterHunterRise.exe+2BB0BD3: 7C EB - jl MonsterHunterRise.exe+2BB0BC0
MonsterHunterRise.exe+2BB0BD5: 33 C0 - xor eax,eax
MonsterHunterRise.exe+2BB0BD7: C3 - ret
MonsterHunterRise.exe+2BB0BD8: 8B 42 14 - mov eax,[rdx+14]
MonsterHunterRise.exe+2BB0BDB: C3 - ret
}
1337096452
"Monster Hunter Rise: Sunbreak 11.0.2.0 / https://opencheattables.com / CE 7.4+"
400080
1
1337096451
"Memo - MR Arena 01 - 01 - 623.1203613"
0
Float
24051B40
function AOBScanModule(moduleName, signature, aobSignaturePrivileges, alignmentType, alignmentParam)
--checkArgType(moduleName, 1, 'string')
if not signature or not moduleName then return end
index = index or 1
local modStartAddr = getAddress(moduleName)
local modEndAddr = modStartAddr + getModuleSize(moduleName)
local ms = createMemScan()
if type(signature) == 'table' then
local sig = ''
for i, byte in ipairs(signature) do
sig = sig..string.format('%02X', byte)
end
signature = sig
end
ms.firstScan(soExactValue, vtByteArray, nil, signature, nil, modStartAddr, modEndAddr,
aobSignaturePrivileges, alignmentType, alignmentParam, true, true, false, false)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
ms.destroy()
return results
end
registerLuaFunctionHighlight('AOBScanModule')