1337095168
"Compact mode"
Auto Assembler Script
[ENABLE]
--https://forum.cheatengine.org/viewtopic.php?t=570055
LuaCall(function cycleFullCompact(sender,force) local state = not(compactmenuitem.Caption == 'Compact View Mode'); if force~=nil then state = not force end; compactmenuitem.Caption = state and 'Compact View Mode' or 'Full View Mode'; getMainForm().Splitter1.Visible = state; getMainForm().Panel4.Visible = state; getMainForm().Panel5.Visible = state; end; function addCompactMenu() if compactmenualreadyexists then return end; local parent = getMainForm().Menu.Items; compactmenuitem = createMenuItem(parent); parent.add(compactmenuitem); compactmenuitem.Caption = 'Compact View Mode'; compactmenuitem.OnClick = cycleFullCompact; compactmenualreadyexists = 'yes'; end; addCompactMenu(); cycleFullCompact(nil,true))
[DISABLE]
LuaCall(cycleFullCompact(nil,false))
1337096379
"+Scripts"
1
87685
"Set min. Zeny / 設定Zeny最少數；取得已獲得Zeny總額"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
Revise:
2022/08/13: Bug fix; added total zenny earned record
}
[ENABLE]
aobscanmodule(INJECT_MONEY_SELL_DEC,MonsterHunterRise.exe,8B 00 89 42 18 EB) // should be unique
alloc(newmem,$1000,INJECT_MONEY_SELL_DEC)
label(code)
label(return)
label(i_base_zenny_addr)
label(i_min_zenny)
newmem:
mov [i_base_zenny_addr], rdx
code:
mov eax,[rax]
cmp eax, [i_min_zenny]
jg @F
mov eax, [i_min_zenny]
@@:
mov [rdx+18],eax
jmp return
align 10 cc
i_base_zenny_addr:
dq 0
i_min_zenny:
dd #500000
INJECT_MONEY_SELL_DEC:
jmp newmem
return:
registersymbol(INJECT_MONEY_SELL_DEC)
registersymbol(i_base_zenny_addr)
registersymbol(i_min_zenny)
[DISABLE]
INJECT_MONEY_SELL_DEC:
db 8B 00 89 42 18 EB
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1602620
MonsterHunterRise.exe+16025F7: 48 8B F9 - mov rdi,rcx
MonsterHunterRise.exe+16025FA: 45 85 C0 - test r8d,r8d
MonsterHunterRise.exe+16025FD: 7F 28 - jg MonsterHunterRise.exe+1602627
MonsterHunterRise.exe+16025FF: 44 03 42 18 - add r8d,[rdx+18]
MonsterHunterRise.exe+1602603: 48 8D 4C 24 38 - lea rcx,[rsp+38]
MonsterHunterRise.exe+1602608: 44 8B 0D 75 48 B1 0D - mov r9d,[MonsterHunterRise.exe+F116E84]
MonsterHunterRise.exe+160260F: 45 3B C1 - cmp r8d,r9d
MonsterHunterRise.exe+1602612: 44 89 4C 24 40 - mov [rsp+40],r9d
MonsterHunterRise.exe+1602617: 48 0F 4D C1 - cmovge rax,rcx
MonsterHunterRise.exe+160261B: 44 89 44 24 38 - mov [rsp+38],r8d
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1602620: 8B 00 - mov eax,[rax]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1602622: 89 42 18 - mov [rdx+18],eax
MonsterHunterRise.exe+1602625: EB 28 - jmp MonsterHunterRise.exe+160264F
MonsterHunterRise.exe+1602627: 8B 15 53 48 B1 0D - mov edx,[MonsterHunterRise.exe+F116E80]
MonsterHunterRise.exe+160262D: 4C 8D 4C 24 38 - lea r9,[rsp+38]
MonsterHunterRise.exe+1602632: 8B 4B 18 - mov ecx,[rbx+18]
MonsterHunterRise.exe+1602635: 41 03 C8 - add ecx,r8d
MonsterHunterRise.exe+1602638: 89 54 24 38 - mov [rsp+38],edx
MonsterHunterRise.exe+160263C: 3B CA - cmp ecx,edx
MonsterHunterRise.exe+160263E: 89 4C 24 40 - mov [rsp+40],ecx
MonsterHunterRise.exe+1602642: 49 0F 4D C1 - cmovge rax,r9
}
1337097311
"Usage: buy from vender / 啟用：商店中買東西"
8000FF
1
1337097276
"Min. Zenny / Zenny最少數"
0
C08000
4 Bytes
i_min_zenny
1337096603
"Zeny"
0
FF8080
4 Bytes
i_base_zenny_addr
18
1337096604
"Zeny total earned / 已獲得Zeny總額"
0
FF8080
4 Bytes
i_base_zenny_addr
1C
1337097272
"Get Kamura Points (Usage: open menu) / 取得神火點數"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-10-06
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_POINTS,MonsterHunterRise.exe,8B 40 10 C3 33 C0 C3 40 53 48) // should be unique
alloc(newmem,$1000,INJECT_GET_POINTS)
label(code)
label(return)
label(i_base_points_addr)
newmem:
{$try}
mov [i_base_points_addr], rax
{$except}
code:
mov eax,[rax+10]
ret
xor eax,eax
jmp return
align 10 cc
i_base_points_addr:
dq 0
INJECT_GET_POINTS:
jmp newmem
nop
return:
registersymbol(INJECT_GET_POINTS)
registersymbol(i_base_points_addr)
[DISABLE]
INJECT_GET_POINTS:
db 8B 40 10 C3 33 C0
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+198F5E9
MonsterHunterRise.exe+198F5D1: 74 04 - je MonsterHunterRise.exe+198F5D7
MonsterHunterRise.exe+198F5D3: 32 C0 - xor al,al
MonsterHunterRise.exe+198F5D5: EB 02 - jmp MonsterHunterRise.exe+198F5D9
MonsterHunterRise.exe+198F5D7: B0 01 - mov al,01
MonsterHunterRise.exe+198F5D9: 0F B6 C0 - movzx eax,al
MonsterHunterRise.exe+198F5DC: 85 C0 - test eax,eax
MonsterHunterRise.exe+198F5DE: 75 0D - jne MonsterHunterRise.exe+198F5ED
MonsterHunterRise.exe+198F5E0: 48 8B 41 60 - mov rax,[rcx+60]
MonsterHunterRise.exe+198F5E4: 48 85 C0 - test rax,rax
MonsterHunterRise.exe+198F5E7: 74 04 - je MonsterHunterRise.exe+198F5ED
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+198F5E9: 8B 40 10 - mov eax,[rax+10]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+198F5EC: C3 - ret
MonsterHunterRise.exe+198F5ED: 33 C0 - xor eax,eax
MonsterHunterRise.exe+198F5EF: C3 - ret
MonsterHunterRise.exe+198F5F0: 40 53 - push rbx
MonsterHunterRise.exe+198F5F2: 48 83 EC 20 - sub rsp,20
MonsterHunterRise.exe+198F5F6: 48 83 7A 30 00 - cmp qword ptr [rdx+30],00
MonsterHunterRise.exe+198F5FB: 48 8D 5A 30 - lea rbx,[rdx+30]
MonsterHunterRise.exe+198F5FF: 75 2C - jne MonsterHunterRise.exe+198F62D
MonsterHunterRise.exe+198F601: 44 8B 4A 08 - mov r9d,[rdx+08]
MonsterHunterRise.exe+198F605: 4C 8B C3 - mov r8,rbx
}
1337097273
"Points / 點數"
0
FF8080
4 Bytes
i_base_points_addr
10
1337097274
"??"
0
4 Bytes
i_base_points_addr
14
1337096380
"Get Damage / defense limit cap...etc / 取得攻擊力和防禦力上限等等"
0080FF
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
function AOBScanModule(moduleName, signature, aobSignaturePrivileges, alignmentType, alignmentParam)
--checkArgType(moduleName, 1, 'string')
if not signature or not moduleName then return end
index = index or 1
local modStartAddr = getAddress(moduleName)
local modEndAddr = modStartAddr + getModuleSize(moduleName)
local ms = createMemScan()
if type(signature) == 'table' then
local sig = ''
for i, byte in ipairs(signature) do
sig = sig..string.format('%02X', byte)
end
signature = sig
end
ms.firstScan(soExactValue, vtByteArray, nil, signature, nil, modStartAddr, modEndAddr,
aobSignaturePrivileges, alignmentType, alignmentParam, true, true, false, false)
ms.waitTillDone()
local results = createFoundList(ms)
results.initialize()
ms.destroy()
return results
end
registerLuaFunctionHighlight('AOBScanModule')
local _dbg = true
if (_dbg) then
AOBs = {
{["name"]="damage", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? F3 48 0F 2C C9", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="damage_base"},
{["name"]="defense", ["aob"]="F3 0F 5D 0D ?? ?? ?? ?? 48 8B 83", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="defense_base"},
{["name"]="wirebug3dur", ["aob"]="F2 44 0F 10 3D ?? ?? ?? ?? 48 89 B4 24 ?? ?? ?? ?? 48 89", ["pos"]= 5, ["aoblen"]= 9 , ["symbol"]="wirebug3dur_base"},
{["name"]="itembuff", ["aob"]="F2 0F 5C 05 ?? ?? ?? ?? F2 0F 5A C0 F3 0F 11 46 ??", ["pos"]= 4, ["aoblen"]= 8 , ["symbol"]="itembuff_base"},
}
local a1 = 'n/a'
local a2 = 'n/a'
local a3 = 0
local a4 = 0
local a5 = 'n/a'
for k,v in pairs(AOBs) do
-- k = array seq.
for k1,v1 in pairs(v) do
if (k1 == 'name') then
a1 = v1
end
if (k1 == 'aob') then
a2 = v1
end
if (k1 == 'pos') then
a3 = v1
end
if (k1 == 'aoblen') then
a4 = v1
end
if (k1 == 'symbol') then
a5 = v1
end
--print(k1,v1)
end
local aob_addr_str = AOBScanModule('MonsterHunterRise.exe', a2, '+X-C-W')
local name_addr_str = getAddressSafe(aob_addr_str[0])+a3
local name_addr_val = readInteger(name_addr_str)
local aob_addr_val = tonumber(aob_addr_str[0], 16)
local final_addr_val = name_addr_val + aob_addr_val + a4
--print(a1 .. " addr: " .. string.format("%08X", final_addr_val))
registerSymbol(a5, final_addr_val)
--print('-------')
end
--local ttt = readDouble('wirebug3dur_base')
--print(getAddress('wirebug3dur_base'))
--writeDouble(getAddress('wirebug3dur_base'), 450)
--writeInteger('defense_base', 3120)
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if syntaxcheck then return end
if memrec then print(memrec.Description) end
local disable_array = {"damage_base", "defense_base", "wirebug3dur_base", "itembuff_base"}
local a_len = #(disable_array)
local i = 0
for i = 1, a_len do
--print(disable_array[i])
unregisterSymbol(disable_array[i])
end
getLuaEngine().Close()
1337096381
"Damage / 傷害上限"
2600:Default
0
FF8080
Float
damage_base
1337096382
"Defense / 防禦力上限"
4500:Default
0
FF8080
Float
defense_base
1337096383
"Wirebug+ duration (90, 450, 1180, 3690...) / 第三翔蟲持續時間 (改此值log顯示會異常)"
0
FF8080
Double
wirebug3dur_base
1337096384
"Item buff duration / 道具Buff時間"
0
FF8080
Double
itembuff_base
1337096455
"Get base guild card data part 1 / 取得基本公會名片資料 #1"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-12-09
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ANORES_PT,MonsterHunterRise.exe,8B 41 18 89 46 1C) // should be unique
alloc(newmem,$1000,INJECT_GET_ANORES_PT)
label(code)
label(return)
label(i_base_anores_addr)
//--------------------------------------------
newmem:
mov [i_base_anores_addr], rcx
code:
mov eax,[rcx+18]
mov [rsi+1C],eax
jmp return
align 10 cc
i_base_anores_addr:
dq 0
INJECT_GET_ANORES_PT:
jmp newmem
nop
return:
registersymbol(INJECT_GET_ANORES_PT)
registersymbol(i_base_anores_addr)
[DISABLE]
INJECT_GET_ANORES_PT:
db 8B 41 18 89 46 1C
unregistersymbol(*)
dealloc(newmem)
{
v13
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3DCFDC8
MonsterHunterRise.exe+3DCFDA0: 48 8B 4E 10 - mov rcx,[rsi+10]
MonsterHunterRise.exe+3DCFDA4: 48 8B C1 - mov rax,rcx
MonsterHunterRise.exe+3DCFDA7: F0 48 0F B1 5E 10 - lock cmpxchg [rsi+10],rbx
MonsterHunterRise.exe+3DCFDAD: 75 F1 - jne MonsterHunterRise.exe+3DCFDA0
MonsterHunterRise.exe+3DCFDAF: 48 85 C9 - test rcx,rcx
MonsterHunterRise.exe+3DCFDB2: 74 05 - je MonsterHunterRise.exe+3DCFDB9
MonsterHunterRise.exe+3DCFDB4: E8 67 25 0E 00 - call MonsterHunterRise.exe+3EB2320
MonsterHunterRise.exe+3DCFDB9: 44 89 7E 18 - mov [rsi+18],r15d
MonsterHunterRise.exe+3DCFDBD: 48 8B 05 AC 0D 6E 0B - mov rax,[MonsterHunterRise.exe+F4B0B70]
MonsterHunterRise.exe+3DCFDC4: 48 8B 48 68 - mov rcx,[rax+68]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3DCFDC8: 8B 41 18 - mov eax,[rcx+18]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3DCFDCB: 89 46 1C - mov [rsi+1C],eax
MonsterHunterRise.exe+3DCFDCE: 48 8B 05 9B 0D 6E 0B - mov rax,[MonsterHunterRise.exe+F4B0B70]
MonsterHunterRise.exe+3DCFDD5: 48 8B 48 68 - mov rcx,[rax+68]
MonsterHunterRise.exe+3DCFDD9: 8B 41 1C - mov eax,[rcx+1C]
MonsterHunterRise.exe+3DCFDDC: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3DCFDDF: 89 46 20 - mov [rsi+20],eax
MonsterHunterRise.exe+3DCFDE2: 48 8B 15 87 0D 6E 0B - mov rdx,[MonsterHunterRise.exe+F4B0B70]
MonsterHunterRise.exe+3DCFDE9: E8 A2 CD DE FE - call MonsterHunterRise.exe+2BBCB90
MonsterHunterRise.exe+3DCFDEE: 84 C0 - test al,al
MonsterHunterRise.exe+3DCFDF0: 0F 95 C0 - setne al
}
1337096457
"HR"
0
FF8080
4 Bytes
i_base_anores_addr
18
1337096458
"HR Exp"
0
FF8080
4 Bytes
i_base_anores_addr
1C
1337096459
"MR"
0
FF8080
4 Bytes
i_base_anores_addr
20
1337096460
"MR EXP"
0
FF8080
4 Bytes
i_base_anores_addr
24
1337096461
"Anomaly research LV / 傀異研究等級"
0
FF8080
4 Bytes
i_base_anores_addr
28
1337096462
"Anomaly research EXP / 傀異研究經驗值"
0
FF8080
4 Bytes
i_base_anores_addr
2C
1337097254
"??"
0
FF8080
4 Bytes
i_base_anores_addr
38
1337097451
"Get base guild card data part 2 / 取得基本公會名片資料#2"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-12-09
}
[ENABLE]
aobscanmodule(INJECT_GET_GUILD_CARD_REC1,MonsterHunterRise.exe,43 33 04 01 01 C2) // should be unique
alloc(newmem,$1000,INJECT_GET_GUILD_CARD_REC1)
label(code)
label(return)
label(i_base_quest_and_kill_cnt_data)
newmem:
inc dword ptr [i_cnt]
cmp dword ptr [i_cnt], 2
jne code
push rax
lea rax, [r9+r8]
mov [i_base_quest_and_kill_cnt_data], rax
pop rax
code:
xor eax,[r9+r8]
add edx,eax
jmp return
align 10 cc
i_base_quest_and_kill_cnt_data:
dq 0
i_cnt:
dd 0
INJECT_GET_GUILD_CARD_REC1:
jmp newmem
nop
return:
registersymbol(INJECT_GET_GUILD_CARD_REC1)
registersymbol(i_base_quest_and_kill_cnt_data)
[DISABLE]
INJECT_GET_GUILD_CARD_REC1:
db 43 33 04 01 01 C2
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1B8F0B39
MonsterHunterRise.exe+1B8F0B1D: 49 89 D2 - mov r10,rdx
MonsterHunterRise.exe+1B8F0B20: 48 09 C2 - or rdx,rax
MonsterHunterRise.exe+1B8F0B23: 48 F7 D2 - not rdx
MonsterHunterRise.exe+1B8F0B26: 49 21 C2 - and r10,rax
MonsterHunterRise.exe+1B8F0B29: 4C 29 D2 - sub rdx,r10
MonsterHunterRise.exe+1B8F0B2C: 41 5A - pop r10
MonsterHunterRise.exe+1B8F0B2E: 48 92 - xchg rax,rdx
MonsterHunterRise.exe+1B8F0B30: BA 00 00 00 00 - mov edx,00000000
MonsterHunterRise.exe+1B8F0B35: 21 04 24 - and [rsp],eax
MonsterHunterRise.exe+1B8F0B38: 58 - pop rax
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1B8F0B39: 43 33 04 01 - xor eax,[r9+r8]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1B8F0B3D: 01 C2 - add edx,eax
MonsterHunterRise.exe+1B8F0B3F: 81 E2 00 00 FF FF - and edx,FFFF0000
MonsterHunterRise.exe+1B8F0B45: 48 8D 64 24 F8 - lea rsp,[rsp-08]
MonsterHunterRise.exe+1B8F0B4A: C1 CA 10 - ror edx,10
MonsterHunterRise.exe+1B8F0B4D: 4C 89 34 24 - mov [rsp],r14
MonsterHunterRise.exe+1B8F0B51: 48 8D 64 24 F8 - lea rsp,[rsp-08]
MonsterHunterRise.exe+1B8F0B56: 41 56 - push r14
MonsterHunterRise.exe+1B8F0B58: 49 F7 D6 - not r14
MonsterHunterRise.exe+1B8F0B5B: 44 21 34 24 - and [rsp],r14d
MonsterHunterRise.exe+1B8F0B5F: 41 5E - pop r14
}
1337097452
"Part 2 data"
1
1337096599
"Play Time / 總遊戲時間"
0
FF8080
Double
i_base_quest_and_kill_cnt_data
-68
1337096598
"Times Liked / 收到的讚數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-60
1337096773
"Wiredash count / 疾翔次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-5C
1337096597
"Well-Done Steaks Cooked / 完美烤肉次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-58
1337096596
"Golden Spiribug Collected / 金靈瓢蟲取得數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-50
1337096595
"Hunting Helpers Collected / 獵具撿取數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-4C
1337096594
"Shabby canyne saddle time / 加爾克騎乘總時間"
0
FF8080
Double
i_base_quest_and_kill_cnt_data
-40
1337096606
"Shabby canyne saddle time % / 加爾克騎乘總時間百分比"
0
FF8080
Float
i_base_quest_and_kill_cnt_data
-3C
1337096605
"Online quest count / 線上任務次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-38
1337096607
"Meowcenaries / 隨從隱密隊"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-34
1337096608
"Gifts count from Pingarh the Sailor / 從水手皮卡爾取得禮物次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-30
1337096609
"Dango / 用餐次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-2C
1337096610
"The Argosy / 交易船次數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-28
1337096584
"Village Quests / 村莊任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-8
1337096582
"Low Rank Hub Quests / 集會所初階任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
-4
1337096581
"High Rank Hub Quests / 集會所進階任務.."
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
0
1337096583
"Rampage Quests / 百龍夜行"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
4
1337096585
"Arena Quests / 鬥技大會任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
8
1337096586
"Hub MR Quests / 集會所MR任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
C
1337096587
"Follower Collab Quests -> Support Surveys / 盟友任務->重要調查任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
10
1337096588
"Follower Collab Quests -> Follower Quests / 盟友任務->盟友同行任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
14
1337096589
"Anomaly Quests / 傀異任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
18
1337096590
"Anomaly Investigations / 傀異探究任務"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
1C
1337097251
"??"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
20
1337096591
"? Monster captured (non-MR) / 初低階捕獲數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
30
1337096592
"Monsters total / 魔物總數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
34
1337096593
"Monsters captured / 總計捕獲數"
0
FF8080
4 Bytes
i_base_quest_and_kill_cnt_data
38
1337096637
"Get weapon usage / May not fully working / 取得武器使用次數資料"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-12-09
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_WEAPON_USAGE_DATA,MonsterHunterRise.exe,41 BA F7 07 7E FF) // should be unique
alloc(newmem,$1000,INJECT_GET_WEAPON_USAGE_DATA)
label(code)
label(return)
label(i_base_weapon_usage_addr)
label(i_base_weapon_usage_addr_m15)
label(i_base_weapon_usage_addr_m30)
label(i_base_weapon_usage_addr_m45)
label(i_base_weapon_usage_addr_m60)
label(i_base_weapon_usage_addr_m75)
label(i_base_weapon_usage_addr_m90)
label(i_base_weapon_usage_addr_m105)
label(i_base_weapon_usage_addr_m120)
newmem:
inc [i_cnt]
cmp dword ptr [i_cnt], 9
ja chk_final
push r13
push r14
mov r14, i_base_weapon_usage_addr
mov r13d, [i_cnt]
//dec r15d
// stored
lea r14, [r14+r13d*8-8]
// in game memory
// v12 in game memory
// v12 lea r13, [r15-2F21CF95]
// v12 mov [r14], r13
lea r13, [rdx+r9]
mov [r14], r13
pop r14
pop r13
chk_final:
code:
mov r10d,FF7E07F7
//add eax,[rdx+r9] <==
jmp return
align 10 cc
i_cnt:
dd 0
i_base_weapon_usage_addr:
dq 0
i_base_weapon_usage_addr_m15:
dq 0
i_base_weapon_usage_addr_m30:
dq 0
i_base_weapon_usage_addr_m45:
dq 0
i_base_weapon_usage_addr_m60:
dq 0
i_base_weapon_usage_addr_m75:
dq 0
i_base_weapon_usage_addr_m90:
dq 0
i_base_weapon_usage_addr_m105:
dq 0
i_base_weapon_usage_addr_m120:
dq 0
INJECT_GET_WEAPON_USAGE_DATA:
jmp newmem
nop
return:
registersymbol(INJECT_GET_WEAPON_USAGE_DATA)
registersymbol(i_base_weapon_usage_addr)
registersymbol(i_base_weapon_usage_addr_m15)
registersymbol(i_base_weapon_usage_addr_m30)
registersymbol(i_base_weapon_usage_addr_m60)
registersymbol(i_base_weapon_usage_addr_m75)
registersymbol(i_base_weapon_usage_addr_m90)
registersymbol(i_base_weapon_usage_addr_m105)
registersymbol(i_base_weapon_usage_addr_m120)
registersymbol(i_base_weapon_usage_addr_m45)
[DISABLE]
INJECT_GET_WEAPON_USAGE_DATA:
db 41 BA F7 07 7E FF
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1B58C52A
MonsterHunterRise.exe+1B58C4FD: 66 44 89 91 E2 00 00 00 - mov [rcx+000000E2],r10w
MonsterHunterRise.exe+1B58C505: 66 44 89 99 0A 01 00 00 - mov [rcx+0000010A],r11w
MonsterHunterRise.exe+1B58C50D: 48 8D 64 24 F8 - lea rsp,[rsp-08]
MonsterHunterRise.exe+1B58C512: 48 89 04 24 - mov [rsp],rax
MonsterHunterRise.exe+1B58C516: 48 F7 14 24 - not [rsp]
MonsterHunterRise.exe+1B58C51A: 48 F7 D0 - not rax
MonsterHunterRise.exe+1B58C51D: 48 F7 D0 - not rax
MonsterHunterRise.exe+1B58C520: 48 09 04 24 - or [rsp],rax
MonsterHunterRise.exe+1B58C524: 48 83 34 24 FF - xor qword ptr [rsp],-01
MonsterHunterRise.exe+1B58C529: 58 - pop rax
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1B58C52A: 41 BA F7 07 7E FF - mov r10d,FF7E07F7
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1B58C530: 42 03 04 0A - add eax,[rdx+r9]
MonsterHunterRise.exe+1B58C534: 52 - push rdx
MonsterHunterRise.exe+1B58C535: BA 25 1C EF 63 - mov edx,63EF1C25
MonsterHunterRise.exe+1B58C53A: 44 21 D2 - and edx,r10d
MonsterHunterRise.exe+1B58C53D: 41 81 DA DD EA 82 E2 - sbb r10d,E282EADD
MonsterHunterRise.exe+1B58C544: 0F 89 43 4F EC 02 - jns MonsterHunterRise.exe+1E45148D
MonsterHunterRise.exe+1B58C54A: 44 19 D2 - sbb edx,r10d
MonsterHunterRise.exe+1B58C54D: 41 09 D2 - or r10d,edx
MonsterHunterRise.exe+1B58C550: 52 - push rdx
MonsterHunterRise.exe+1B58C551: 48 C7 C2 00 00 00 00 - mov rdx,00000000
}
1337097314
"Usage: Guild card-View / 公會名片->確認"
8000FF
1
1337096652
"All / 綜合"
1
1337096638
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
0
1337096639
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
4
1337096640
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
8
1337096641
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
C
1337096642
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
10
1337096643
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
14
1337096644
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
18
1337096645
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1C
1337096646
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
20
1337096647
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
24
1337096648
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
28
1337096649
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2C
1337096650
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
30
1337096651
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
34
1337097320
"Others - may be incorrect"
1
1337097325
"Village Quests / 村莊任務"
1
1337097326
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
60
1337097327
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
64
1337097328
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
68
1337097329
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
6C
1337097330
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
70
1337097331
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
74
1337097332
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
78
1337097333
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
7C
1337097334
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
80
1337097335
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
84
1337097336
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
88
1337097337
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
8C
1337097338
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
90
1337097339
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
94
1337097340
"Hub Quests / 集會所任務"
1
1337097341
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
C0
1337097342
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
C4
1337097343
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
C8
1337097344
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
CC
1337097345
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
D0
1337097346
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
D4
1337097347
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
D8
1337097348
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
DC
1337097349
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
E0
1337097350
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
E4
1337097351
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
E8
1337097352
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
EC
1337097353
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
F0
1337097354
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
F4
1337097355
"Rampage / 百龍夜行"
1
1337097356
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
120
1337097357
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
124
1337097358
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
128
1337097359
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
12C
1337097360
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
130
1337097361
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
134
1337097362
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
138
1337097363
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
13C
1337097364
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
140
1337097365
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
144
1337097366
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
148
1337097367
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
14C
1337097368
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
150
1337097369
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
154
1337097370
"Support Surveys / 盟友調查任務"
1
1337097371
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
180
1337097372
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
184
1337097373
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
188
1337097374
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
18C
1337097375
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
190
1337097376
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
194
1337097377
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
198
1337097378
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
19C
1337097379
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1A0
1337097380
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1A4
1337097381
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1A8
1337097382
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1AC
1337097383
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1B0
1337097384
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1B4
1337097385
"Follower Quests / 盟友同行任務"
1
1337097386
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1E0
1337097387
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1E4
1337097388
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1E8
1337097389
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1EC
1337097390
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1F0
1337097391
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1F4
1337097392
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1F8
1337097393
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
1FC
1337097394
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
200
1337097395
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
204
1337097396
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
208
1337097397
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
20C
1337097398
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
210
1337097399
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
214
1337097400
"Hub MR Quests / 集會所MR任務"
1
1337097401
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
240
1337097402
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
244
1337097403
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
248
1337097404
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
24C
1337097405
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
250
1337097406
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
254
1337097407
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
258
1337097408
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
25C
1337097409
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
260
1337097410
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
264
1337097411
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
268
1337097412
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
26C
1337097413
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
270
1337097414
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
274
1337097415
"Anomaly Quests / 傀異任務"
1
1337097416
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2A0
1337097417
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2A4
1337097418
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2A8
1337097419
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2AC
1337097420
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2B0
1337097421
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2B4
1337097422
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2B8
1337097423
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2BC
1337097424
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2C0
1337097425
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2C4
1337097426
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2C8
1337097427
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2CC
1337097428
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2D0
1337097429
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
2D4
1337097430
"Anomaly Investigations / 傀異探究任務"
1
1337097431
"Great Sword / 大劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
300
1337097432
"Switch Axe / 斬擊斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
304
1337097433
"Long Sword / 太刀"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
308
1337097434
"Light Bowgun / 輕弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
30C
1337097435
"Heavy Bowgun / 重弩"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
310
1337097436
"Hammer / 大錘"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
314
1337097437
"Gunlance / 銃槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
318
1337097438
"Lance / 長槍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
31C
1337097439
"Sword & Shield / 單手劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
320
1337097440
"Dual Blades / 雙劍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
324
1337097441
"Hunting Horn / 狩獵笛"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
328
1337097442
"Charge Blade / 充能斧"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
32C
1337097443
"Insect Glaive / 操蟲棍"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
330
1337097444
"Bow / 弓"
0
FF8080
4 Bytes
i_base_weapon_usage_addr
334
1337097301
"Get hunting record / 取得狩獵資料"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-13
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_HUNTING_DATA,MonsterHunterRise.exe,42 8B 54 80 20 48 8B 81) // should be unique
alloc(newmem,$1000,INJECT_GET_HUNTING_DATA)
label(code)
label(return)
label(i_base_hunting_data_addr)
label(i_monster_idx)
newmem:
push rbx
lea rbx, [rax+r8*4]
mov [i_base_hunting_data_addr], rbx
mov [i_monster_idx], r8
pop rbx
code:
mov edx,[rax+r8*4+20]
jmp return
align 10 cc
i_base_hunting_data_addr:
dq 0
i_monster_idx:
dq 0
INJECT_GET_HUNTING_DATA:
jmp newmem
return:
registersymbol(INJECT_GET_HUNTING_DATA)
registersymbol(i_base_hunting_data_addr)
registersymbol(i_monster_idx)
[DISABLE]
INJECT_GET_HUNTING_DATA:
db 42 8B 54 80 20
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1559E19
MonsterHunterRise.exe+1559DEA: 89 4D F8 - mov [rbp-08],ecx
MonsterHunterRise.exe+1559DED: 66 44 89 45 FE - mov [rbp-02],r8w
MonsterHunterRise.exe+1559DF2: 4C 89 4D 00 - mov [rbp+00],r9
MonsterHunterRise.exe+1559DF6: 48 8B C8 - mov rcx,rax
MonsterHunterRise.exe+1559DF9: E8 62 53 BC 02 - call MonsterHunterRise.AK::WriteBytesCount::SetCount+8AC0
MonsterHunterRise.exe+1559DFE: 4C 8B 44 24 40 - mov r8,[rsp+40]
MonsterHunterRise.exe+1559E03: 48 8B 05 8E E0 BC 0D - mov rax,[MonsterHunterRise.exe+F127E98]
MonsterHunterRise.exe+1559E0A: 49 8B 75 50 - mov rsi,[r13+50]
MonsterHunterRise.exe+1559E0E: 48 8B 48 70 - mov rcx,[rax+70]
MonsterHunterRise.exe+1559E12: 48 8B 81 30 01 00 00 - mov rax,[rcx+00000130]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1559E19: 42 8B 54 80 20 - mov edx,[rax+r8*4+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1559E1E: 48 8B 81 48 01 00 00 - mov rax,[rcx+00000148]
MonsterHunterRise.exe+1559E25: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+1559E28: 89 55 98 - mov [rbp-68],edx
MonsterHunterRise.exe+1559E2B: 48 8B 15 0E 58 97 0D - mov rdx,[MonsterHunterRise.exe+EECF640]
MonsterHunterRise.exe+1559E32: 42 8B 44 80 20 - mov eax,[rax+r8*4+20]
MonsterHunterRise.exe+1559E37: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+1559E3A: 89 44 24 3C - mov [rsp+3C],eax
MonsterHunterRise.exe+1559E3E: 48 8B 05 8B F1 BF 0D - mov rax,[MonsterHunterRise.exe+F158FD0]
MonsterHunterRise.exe+1559E45: 48 8B B8 90 83 05 00 - mov rdi,[rax+00058390]
MonsterHunterRise.exe+1559E4C: E8 4F 41 8F 02 - call MonsterHunterRise.exe+3E4DFA0
}
1337097313
"Usage: Hunter's Notes->Large Monster / 獵人筆記 -> 大型魔物清單"
8000FF
1
1337097302
"-Monster index-"
0:Rathian/雌火龍/リオレイア
1:Apex Rathian/首領雌火龍/ヌシ・リオレイア
2:Rathalos/火龍/リオレウス
3:Apex Rathalos/首領火龍/ヌシ・リオレウス
4:Khezu/奇怪龍/フルフル
5:Basarios/岩龍/バサルモス
6:Diablos/角龍/ディアブロス
7:Apex Diablos/首領角龍/ヌシ・ディアブロス
8:Rajang/金獅子/ラージャン
9:Kushala Daora/鋼龍/クシャルダオラ
10:Chameleos/霞龍/オオナズチ
11:Teostra/炎王龍/テオ・テスカトル
12:Tigrex/轟龍/ティガレックス
13:Nargacuga/迅龍/ナルガクルガ
14:Barioth/冰牙龍/ベリオロス
15:Barroth/土砂龍/ボルボロス
16:Royal Ludroth/水獸/ロアルドロス
17:Great Baggi/眠狗龍王/ドスバギィ
18:Zinogre/雷狼龍/ジンオウガ
19:Apex Zinogre/首領雷狼龍/ヌシ・ジンオウガ
20:Great Wroggi/毒狗龍王/ドスフロギィ
21:Arzuros/青熊獸/アオアシラ
22:Apex Arzuros/首領青熊獸/ヌシ・アオアシラ
23:Lagombi/白兔獸/ウルクスス
24:Volvidon/赤甲獸/ラングロトラ
25:Mizutsune/泡狐龍/タマミツネ
26:Apex Mizutsune/首領泡狐龍/ヌシ・タマミツネ
27:Crimson Glow Valstrax/祕紅赫耀的天慧龍/奇しき赫耀のバルファルク
28:Magnamalo/怨虎龍/マガイマガド
29:Bishaten/天狗獸/ビシュテンゴ
30:Aknosom/傘鳥/アケノシルム
31:Tetranadon/河童蛙/ヨツミワドウ
32:Somnacanth/人魚龍/イソネミクニ
33:Rakna-Kadaki/妃蜘蛛/ヤツカダキ
34:Almudron/泥翁龍/オロミドロ
35:Wind Serpent Ibushi/風神龍/イブシマキヒコ
36:Goss Harag/雪鬼獸/ゴシャハギ
37:Great Izuchi/鐮鼬龍王/オサイズチ
38:Thunder Serpent Narwa/雷神龍/ナルハタタヒメ
39:Narwa the Allmother/百龍之源雷神龍/百竜ノ淵源ナルハタタヒメ
40:Anjanath/蠻顎龍/アンジャナフ
41:Pukei-Pukei/毒妖鳥/プケプケ
42:Kulu-Ya-Ku/搔鳥/クルルヤック
43:Jyuratodus/泥魚龍/ジュラトドス
44:Tobi-Kadachi/飛雷龍/トビカガチ
45:Bazelgeuse/爆鱗龍/バゼルギウス
76:Gold Rathian/金火龍/リオレイア希少種
77:Silver Rathalos/銀火龍/リオレウス希少種
78:Daimyo Hermitaur/大名蟹/ダイミョウザザミ
79:Shogun Ceanataur/將軍蟹/ショウグンギザミ
80:Furious Rajang/激昂金獅子/激昂したラージャン
81:Lucent Nargacuga/月迅龍/ナルガクルガ希少種
82:Gore Magala/黑蝕龍/ゴア・マガラ
83:Shagaru Magala/天迴龍/シャガルマガラ
84:Seregios/千刃龍/セルレギオス
85:Astalos/電龍/ライゼクス
86:/焰狐龍/タマミツネ希少種
87:Scorned Magnamalo/嗟怨轟天怨虎龍/怨嗟響めくマガイマガド
88:Blood Orange Bishaten/緋天狗獸/ビシュテンゴ亜種
89:Aurora Somnacanth/冰人魚龍/イソネミクニ亜種
90:Pyre Rakna-Kadaki/熾妃蜘蛛/ヤツカダキ亜種
91:Magma Almudron/熔翁龍/オロミドロ亜種
92:Seething Bazelgeuse/紅蓮爆鱗龍/紅蓮滾るバゼルギウス
93:Malzeno/爵銀龍/メル・ゼナ
94:Lunagaron/冰狼龍/ルナガロン
95:Garangolm/剛纏獸/ガランゴルム
96:Gaismagorm/冥淵龍/ガイアデルム
97:Espinas/棘龍/エスピナス
98:Flaming Espinas/棘茶龍/エスピナス亜種(棘茶竜)
107:Risen Kushala Daora/鋼龍(傀異克服)/傀異克服クシャルダオラ
108:Risen Chameleos/霞龍(傀異克服)/傀異克服オオナズチ
109:Risen Teostra/炎王龍(傀異克服)/傀異克服テオ・テスカトル
113:Chaotic Gore Magala/混沌黑蝕龍/渾沌に呻くゴア・マガラ
0
808080
4 Bytes
i_monster_idx
1337097446
"Enable monster size record"
0080FF
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-11-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_MONSTER_SIZE_RECORD,MonsterHunterRise.exe,F3 0F 10 74 81 20) // should be unique
alloc(newmem,$1000,INJECT_GET_MONSTER_SIZE_RECORD)
label(code)
label(return)
label(i_monster_size_idx)
label(i_monster_size_large_addr)
label(i_monster_size_small_addr)
newmem:
push r15
push rcx
mov [i_monster_size_idx], rax
lea r15, [rcx+rax*4+20]
mov [i_monster_size_large_addr], r15
mov rcx, [rdx+00000150]
lea r15, [rcx+rax*4+20]
mov [i_monster_size_small_addr], r15
pop rcx
pop r15
code:
movss xmm6,[rcx+rax*4+20]
jmp return
align 10 cc
i_monster_size_idx:
dq 0
i_monster_size_large_addr:
dq 0
i_monster_size_small_addr:
dq 0
INJECT_GET_MONSTER_SIZE_RECORD:
jmp newmem
nop
return:
registersymbol(INJECT_GET_MONSTER_SIZE_RECORD)
registersymbol(i_monster_size_idx)
registersymbol(i_monster_size_large_addr)
registersymbol(i_monster_size_small_addr)
[DISABLE]
INJECT_GET_MONSTER_SIZE_RECORD:
db F3 0F 10 74 81 20
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+16F3A2D
MonsterHunterRise.exe+16F39FB: 44 8B 44 24 60 - mov r8d,[rsp+60]
MonsterHunterRise.exe+16F3A00: 48 8B 91 B8 02 00 00 - mov rdx,[rcx+000002B8]
MonsterHunterRise.exe+16F3A07: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+16F3A0A: E8 01 63 D9 01 - call MonsterHunterRise.exe+3489D10
MonsterHunterRise.exe+16F3A0F: 48 8B 0D 62 5D DC 0D - mov rcx,[MonsterHunterRise.exe+F4B9778]
MonsterHunterRise.exe+16F3A16: 48 8B F0 - mov rsi,rax
MonsterHunterRise.exe+16F3A19: 48 89 45 00 - mov [rbp+00],rax
MonsterHunterRise.exe+16F3A1D: 48 8B 44 24 70 - mov rax,[rsp+70]
MonsterHunterRise.exe+16F3A22: 48 8B 51 70 - mov rdx,[rcx+70]
MonsterHunterRise.exe+16F3A26: 48 8B 8A 58 01 00 00 - mov rcx,[rdx+00000158]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+16F3A2D: F3 0F 10 74 81 20 - movss xmm6,[rcx+rax*4+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+16F3A33: 48 8B 8A 50 01 00 00 - mov rcx,[rdx+00000150]
MonsterHunterRise.exe+16F3A3A: F3 44 0F 10 4C 81 20 - movss xmm9,[rcx+rax*4+20]
MonsterHunterRise.exe+16F3A41: 48 85 F6 - test rsi,rsi
MonsterHunterRise.exe+16F3A44: 0F 84 C1 05 00 00 - je MonsterHunterRise.exe+16F400B
MonsterHunterRise.exe+16F3A4A: 44 38 7E 24 - cmp [rsi+24],r15l
MonsterHunterRise.exe+16F3A4E: 0F 85 B7 05 00 00 - jne MonsterHunterRise.exe+16F400B
MonsterHunterRise.exe+16F3A54: 44 38 BD 90 00 00 00 - cmp [rbp+00000090],r15l
MonsterHunterRise.exe+16F3A5B: 0F 84 5C 05 00 00 - je MonsterHunterRise.exe+16F3FBD
MonsterHunterRise.exe+16F3A61: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+16F3A64: 0F 2E F0 - ucomiss xmm6,xmm0
}
1337097447
"Monster index (for verify)"
-Monster index-
0
808080
8 Bytes
i_monster_size_idx
1337097448
"Small size factor"
0:N/A (do not edit)
0
FF8080
Float
i_monster_size_small_addr
0
1337097449
"Large size factor"
0:N/A (do not edit)
0
FF8080
Float
i_monster_size_large_addr
0
1337097303
"Total hunted / 狩獵數"
0
FF8080
4 Bytes
i_base_hunting_data_addr
20
1337097304
"Total captured / 捕獲數"
0
FF8080
4 Bytes
i_base_hunting_data_addr
440
1337097305
"Anomaly / 傀異化個體討伐數"
0
FF8080
4 Bytes
i_base_hunting_data_addr
230
1337096790
"Get arena time record / 取得鬥技場時間記錄"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-15
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_ARENA_RECORD_2,MonsterHunterRise.exe,F3 0F 10 71 10 48 85) // should be unique
alloc(newmem,$1000,INJECT_GET_ARENA_RECORD_2)
label(code)
label(return)
label(i_base_arena_record_addr)
newmem:
mov [i_base_arena_record_addr], rcx
code:
movss xmm6,[rcx+10]
jmp return
align 10 cc
i_base_arena_record_addr:
dq 0
INJECT_GET_ARENA_RECORD_2:
jmp newmem
return:
registersymbol(INJECT_GET_ARENA_RECORD_2)
registersymbol(i_base_arena_record_addr)
[DISABLE]
INJECT_GET_ARENA_RECORD_2:
db F3 0F 10 71 10
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1E9ABD8
MonsterHunterRise.exe+1E9ABAE: 48 8B 15 0B 19 FF 0C - mov rdx,[MonsterHunterRise.exe+EE8C4C0]
MonsterHunterRise.exe+1E9ABB5: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+1E9ABB8: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+1E9ABBB: E8 E0 33 FB 01 - call MonsterHunterRise.exe+3E4DFA0
MonsterHunterRise.exe+1E9ABC0: 48 8B D0 - mov rdx,rax
MonsterHunterRise.exe+1E9ABC3: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+1E9ABC6: E8 55 54 FB 01 - call MonsterHunterRise.exe+3E50020
MonsterHunterRise.exe+1E9ABCB: 48 8B CB - mov rcx,rbx
MonsterHunterRise.exe+1E9ABCE: 49 8B BE B8 02 00 00 - mov rdi,[r14+000002B8]
MonsterHunterRise.exe+1E9ABD5: 0F 57 FF - xorps xmm7,xmm7
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1E9ABD8: F3 0F 10 71 10 - movss xmm6,[rcx+10]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1E9ABDD: 48 85 FF - test rdi,rdi
MonsterHunterRise.exe+1E9ABE0: 0F 84 84 00 00 00 - je MonsterHunterRise.exe+1E9AC6A
MonsterHunterRise.exe+1E9ABE6: 49 8B 44 24 10 - mov rax,[r12+10]
MonsterHunterRise.exe+1E9ABEB: 39 58 18 - cmp [rax+18],ebx
MonsterHunterRise.exe+1E9ABEE: 7E 0A - jle MonsterHunterRise.exe+1E9ABFA
MonsterHunterRise.exe+1E9ABF0: 48 8B 40 10 - mov rax,[rax+10]
MonsterHunterRise.exe+1E9ABF4: 48 8B 48 20 - mov rcx,[rax+20]
MonsterHunterRise.exe+1E9ABF8: EB 20 - jmp MonsterHunterRise.exe+1E9AC1A
MonsterHunterRise.exe+1E9ABFA: 48 8B 15 BF 18 FF 0C - mov rdx,[MonsterHunterRise.exe+EE8C4C0]
MonsterHunterRise.exe+1E9AC01: 45 33 C0 - xor r8d,r8d
}
1337097315
"Usage: Talk to arena NPC->list quest / 於亞爾羅教官中點選相關任務"
8000FF
1
1337096791
"Record 1"
0
Float
i_base_arena_record_addr
10
1337096792
"Record 2"
0
Float
i_base_arena_record_addr
40
1337096793
"Record 3"
0
Float
i_base_arena_record_addr
70
1337096794
"Record 4"
0
Float
i_base_arena_record_addr
A0
1337096795
"Record 5"
0
Float
i_base_arena_record_addr
D0
1337096385
"Swap item in itembox / 管理道具->確認、出售道具中。交換道具可充填數量 (不用時馬上停用)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-07-02
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SWAP_ITEM_IN_ITEMBOX,MonsterHunterRise.exe,48 8B 46 20 01 68 14) // should be unique
alloc(newmem,$1000,INJECT_SWAP_ITEM_IN_ITEMBOX)
label(code)
label(return)
label(i_min_count)
newmem:
cmp ebp, [i_min_count]
jg @F
mov ebp, [i_min_count]
code:
mov rax,[rsi+20]
add [rax+14],ebp
jmp return
align 10 cc
i_min_count:
dd #3000
INJECT_SWAP_ITEM_IN_ITEMBOX:
jmp newmem
nop 2
return:
registersymbol(INJECT_SWAP_ITEM_IN_ITEMBOX)
registersymbol(i_min_count)
[DISABLE]
INJECT_SWAP_ITEM_IN_ITEMBOX:
db 48 8B 46 20 01 68 14
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+2F3A1A9
MonsterHunterRise.exe+2F3A18F: 48 8B 41 30 - mov rax,[rcx+30]
MonsterHunterRise.exe+2F3A193: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+2F3A196: FF D0 - call rax
MonsterHunterRise.exe+2F3A198: 3B C7 - cmp eax,edi
MonsterHunterRise.exe+2F3A19A: 73 04 - jae MonsterHunterRise.exe+2F3A1A0
MonsterHunterRise.exe+2F3A19C: 8B DF - mov ebx,edi
MonsterHunterRise.exe+2F3A19E: 2B D8 - sub ebx,eax
MonsterHunterRise.exe+2F3A1A0: 48 8B 7C 24 30 - mov rdi,[rsp+30]
MonsterHunterRise.exe+2F3A1A5: 3B EB - cmp ebp,ebx
MonsterHunterRise.exe+2F3A1A7: 73 09 - jae MonsterHunterRise.exe+2F3A1B2
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+2F3A1A9: 48 8B 46 20 - mov rax,[rsi+20]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+2F3A1AD: 01 68 14 - add [rax+14],ebp
MonsterHunterRise.exe+2F3A1B0: EB 07 - jmp MonsterHunterRise.exe+2F3A1B9
MonsterHunterRise.exe+2F3A1B2: 48 8B 46 20 - mov rax,[rsi+20]
MonsterHunterRise.exe+2F3A1B6: 01 58 14 - add [rax+14],ebx
MonsterHunterRise.exe+2F3A1B9: 48 8B 5C 24 38 - mov rbx,[rsp+38]
MonsterHunterRise.exe+2F3A1BE: 48 8B 6C 24 40 - mov rbp,[rsp+40]
MonsterHunterRise.exe+2F3A1C3: 48 8B 74 24 48 - mov rsi,[rsp+48]
MonsterHunterRise.exe+2F3A1C8: 48 83 C4 20 - add rsp,20
MonsterHunterRise.exe+2F3A1CC: 41 5E - pop r14
MonsterHunterRise.exe+2F3A1CE: C3 - ret
}
1337096386
"***Turn off when not in use***"
400080
1
1337097316
"Manage Items -> Sell Items -> swap items (turn off when not in use) / 管理道具->確認、出售道具中。交換道具可充填數量 (不用時馬上停用)"
8000FF
1
1337096387
"Min. count"
0
FF0080
4 Bytes
i_min_count
1337096388
"Turn following scripts on / off (Disable scripts to avoid crash during zoning if not using REFramework)"
4080FF
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
Revised:
2022/08/13: Fixed ID
2022/10/04: Added fast wiredash CD
}
[ENABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
battle_array = {87687, 1337095181, 1337095309, 1337095479, 1337096393, 1337095187, 1337095185, 1337095183, 1337095320, 1337096395, 1337097261, 1337095168}
local a_len = #(battle_array)
local i = 0
for i = 1, a_len do
getAddressList().getMemoryRecordByID(battle_array[i]).Active = true
end
getLuaEngine().Close()
[DISABLE]
{$lua}
if (syntaxcheck) then return end
if memrec then print(memrec.Description) end
getLuaEngine().menuItem5.doClick()
local a_len_d = #(battle_array)
local i1 = 0
for i1 = 1, a_len_d do
if (getAddressList().getMemoryRecordByID(battle_array[i1]).Active)
then
getAddressList().getMemoryRecordByID(battle_array[i1]).Active = false
end
end
getLuaEngine().Close()
1337097261
"Fast wiredash cooldown / 快速翔蟲計時"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-10-04
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FAST_WIREDASH_CD,MonsterHunterRise.exe,F3 0F 11 49 14 F3 0F 11 49 10 C6 83 ?? ?? ?? ?? ?? 85 D2 7E ?? 48 8B 83 ?? ?? ?? ?? 0F 57 C9 66 0F 6E C2 0F 5B C0 4A ?? ?? ?? F3 0F 5A CE 0F 5A D0 F2 0F 59 D1 66 0F 5A C2 F3 0F 11 ?? ?? FF CA 49 83 E9 08) // should be unique
alloc(newmem,$1000,INJECT_FAST_WIREDASH_CD)
label(code)
label(return)
label(vf_wiredash_cd)
newmem:
vmovss xmm15, [vf_wiredash_cd]
vmovaps xmm1, xmm15
code:
movss [rcx+14],xmm1
jmp return
align 10 cc
vf_wiredash_cd:
dd (float)20
INJECT_FAST_WIREDASH_CD:
jmp newmem
return:
registersymbol(INJECT_FAST_WIREDASH_CD)
registersymbol(vf_wiredash_cd)
[DISABLE]
INJECT_FAST_WIREDASH_CD:
db F3 0F 11 49 14
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+222B469
MonsterHunterRise.exe+222B445: 85 D2 - test edx,edx
MonsterHunterRise.exe+222B447: 78 6A - js MonsterHunterRise.exe+222B4B3
MonsterHunterRise.exe+222B449: 48 8B 83 00 04 00 00 - mov rax,[rbx+00000400]
MonsterHunterRise.exe+222B450: 49 8B 0C 01 - mov rcx,[r9+rax]
MonsterHunterRise.exe+222B454: F3 0F 10 41 10 - movss xmm0,[rcx+10]
MonsterHunterRise.exe+222B459: 0F 2F C3 - comiss xmm0,xmm3
MonsterHunterRise.exe+222B45C: 77 4B - ja MonsterHunterRise.exe+222B4A9
MonsterHunterRise.exe+222B45E: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+222B461: F3 0F 5A C6 - cvtss2sd xmm0,xmm6
MonsterHunterRise.exe+222B465: 66 0F 5A C8 - cvtpd2ps xmm1,xmm0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+222B469: F3 0F 11 49 14 - movss [rcx+14],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+222B46E: F3 0F 11 49 10 - movss [rcx+10],xmm1
MonsterHunterRise.exe+222B473: C6 83 C0 04 00 00 01 - mov byte ptr [rbx+000004C0],01
MonsterHunterRise.exe+222B47A: 85 D2 - test edx,edx
MonsterHunterRise.exe+222B47C: 7E 29 - jle MonsterHunterRise.exe+222B4A7
MonsterHunterRise.exe+222B47E: 48 8B 83 00 04 00 00 - mov rax,[rbx+00000400]
MonsterHunterRise.exe+222B485: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+222B488: 66 0F 6E C2 - movd xmm0,edx
MonsterHunterRise.exe+222B48C: 0F 5B C0 - cvtdq2ps xmm0,xmm0
MonsterHunterRise.exe+222B48F: 4A 8B 0C 08 - mov rcx,[rax+r9]
MonsterHunterRise.exe+222B493: F3 0F 5A CE - cvtss2sd xmm1,xmm6
MonsterHunterRise.exe+222B497 - 0F5A D0 - cvtps2pd xmm2,xmm0
MonsterHunterRise.exe+222B49A - F2 0F59 D1 - mulsd xmm2,xmm1
MonsterHunterRise.exe+222B49E - 66 0F5A C2 - cvtpd2ps xmm0,xmm2
MonsterHunterRise.exe+222B4A2 - F3 0F11 41 18 - movss [rcx+18],xmm0
MonsterHunterRise.exe+222B4A7 - FF CA - dec edx
MonsterHunterRise.exe+222B4A9 - 49 83 E9 08 - sub r9,08
MonsterHunterRise.exe+222B4AD - 49 83 E8 01 - sub r8,01
MonsterHunterRise.exe+222B4B1 - 79 92 - jns MonsterHunterRise.exe+222B445
MonsterHunterRise.exe+222B4B3 - 48 8B 5C 24 40 - mov rbx,[rsp+40]
MonsterHunterRise.exe+222B4B8 - 48 8B 74 24 48 - mov rsi,[rsp+48]
MonsterHunterRise.exe+222B4BD - 0F28 74 24 20 - movaps xmm6,[rsp+20]
MonsterHunterRise.exe+222B4C2 - 48 83 C4 30 - add rsp,30
MonsterHunterRise.exe+222B4C6 - 5F - pop rdi
MonsterHunterRise.exe+222B4C7 - C3 - ret
}
1337097262
"Cooldown time / 倒數計時數"
20:Very fast
240:Twice
480:Default
0
FF0080
Float
vf_wiredash_cd
87687
"Items do not decrease (not working for all items) (道具數不減<有小bug，有的依然會減>)"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_ITEM_SELL_DEC,MonsterHunterRise.exe,29 72 14 EB 03) // should be unique
alloc(newmem,$1000,INJECT_ITEM_SELL_DEC)
label(code)
label(return)
label(is_inc_when_dec)
label(i_last_item_count_addr)
label(i_last_item_id)
label(is_limit_item)
label(is_bag_only)
label(is_ammo_only)
label(item_container_id)
label(item_container_id2)
label(is_env_item_only)
newmem:
code:
push rax
lea rax, [rdx+14]
mov [i_last_item_count_addr], rax
xor eax, eax
mov ax, [rdx+10]
mov [i_last_item_id], ax
mov ax, [rdx+14+2C]
mov [item_container_id], ax
mov ax, [rdx+14+2E]
mov [item_container_id2], ax
pop rax
sub [rdx+14],esi
db EB 3B 54 68 69 73 20 74 61 62 6C 65 20 63 6F 6D 65 73 20 66 72 6F 6D 20 68 74 74 70 73 3A 2F
db 2F 6F 70 65 6E 63 68 65 61 74 74 61 62 6C 65 73 2E 63 6F 6D 20 2F 20 43 45 20 37 2E 34 2B
// ignore list
cmp [i_last_item_id], #122 //raw meat
je last_chk
cmp [is_limit_item], 1
jne no_limit_chk
// General
// 1-9
cmp [i_last_item_id], #9
jle no_limit_chk
// 13 - 15
cmp [i_last_item_id], #12
jle last_chk
cmp [i_last_item_id], #21
jle no_limit_chk
// ammo
// 30-58
cmp [i_last_item_id], #30
jl last_chk
cmp [i_last_item_id], #58
jle no_limit_chk
// ammo
// 60-65
cmp [i_last_item_id], #60
jl last_chk
cmp [i_last_item_id], #65
jle no_limit_chk
// General
// 123, 129, 137
cmp [i_last_item_id], #123
je no_limit_chk
cmp [i_last_item_id], #129
je no_limit_chk
cmp [i_last_item_id], #137
je no_limit_chk
// Ammo
// 138-140
cmp [i_last_item_id], #138
jl last_chk
cmp [i_last_item_id], #140
jle no_limit_chk
// Ammo
//152-162
cmp [i_last_item_id], #152
jl last_chk
cmp [i_last_item_id], #162
jle no_limit_chk
// General
// 163, 467-468, 471, 473, 475-480, 482-484, 487, 491, 493-494
cmp [i_last_item_id], #163
je no_limit_chk
cmp [i_last_item_id], #467
je no_limit_chk
cmp [i_last_item_id], #468
je no_limit_chk
cmp [i_last_item_id], #471
je no_limit_chk
cmp [i_last_item_id], #473
je no_limit_chk
cmp [i_last_item_id], #475
jl last_chk
cmp [i_last_item_id], #480
jle no_limit_chk
cmp [i_last_item_id], #482
jl last_chk
cmp [i_last_item_id], #484
jle no_limit_chk
cmp [i_last_item_id], #487
je no_limit_chk
cmp [i_last_item_id], #491
je no_limit_chk
cmp [i_last_item_id], #493
je no_limit_chk
cmp [i_last_item_id], #494
je no_limit_chk
jmp last_chk
no_limit_chk:
cmp [is_bag_only], 1
jne chk_ammo_only
cmp [item_container_id], 1
je go_add_back
//jmp chk_ammo_only
chk_ammo_only:
cmp [is_ammo_only], 1
jne chk_env_item_only
cmp [item_container_id], 3
je go_add_back
//cmp [item_container_id], 4
//je go_add_back
//jmp chk_env_item_only
chk_env_item_only:
cmp [is_env_item_only], 1
jne any_only_flag_chk
cmp [item_container_id2], 3
je go_add_back
any_only_flag_chk: //check if any "only" switch on
push rax
xor eax, eax
add eax, [is_bag_only]
add eax, [is_ammo_only]
add eax, [is_env_item_only]
cmp eax, 0
pop rax
jne last_chk
go_add_back:
add [rdx+14],esi
cmp [is_inc_when_dec], 1
jne @F
add [rdx+14],esi
last_chk:
//jmp MonsterHunterRise.exe+32A7E92
reassemble(INJECT_ITEM_SELL_DEC+3)
jmp return
align 10 cc
is_inc_when_dec:
dd 0
i_last_item_count_addr:
dq 0
i_last_item_id:
dd 0
is_limit_item:
dd 0
is_bag_only:
dd 1 // Off. 2C; 1
is_ammo_only:
dd 1 // Off. 2C; 3
is_env_item_only:
dd 1 // Off. 2E; 3
item_container_id:
dd a
item_container_id2:
dd a
INJECT_ITEM_SELL_DEC:
jmp newmem
return:
registersymbol(is_env_item_only)
registersymbol(is_ammo_only)
registersymbol(is_bag_only)
registersymbol(is_limit_item)
registersymbol(i_last_item_count_addr)
registersymbol(i_last_item_id)
registersymbol(is_inc_when_dec)
registersymbol(INJECT_ITEM_SELL_DEC)
[DISABLE]
INJECT_ITEM_SELL_DEC:
db 29 72 14 EB 03
unregistersymbol(is_env_item_only)
unregistersymbol(is_ammo_only)
unregistersymbol(is_bag_only)
unregistersymbol(is_limit_item)
unregistersymbol(i_last_item_count_addr)
unregistersymbol(i_last_item_id)
unregistersymbol(is_inc_when_dec)
unregistersymbol(INJECT_ITEM_SELL_DEC)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+305912A
MonsterHunterRise.exe+3059109: 49 8B 42 28 - mov rax,[r10+28]
MonsterHunterRise.exe+305910D: FF D0 - call rax
MonsterHunterRise.exe+305910F: 3D 00 00 00 04 - cmp eax,04000000
MonsterHunterRise.exe+3059114: 74 75 - je MonsterHunterRise.exe+305918B
MonsterHunterRise.exe+3059116: 48 89 7C 24 30 - mov [rsp+30],rdi
MonsterHunterRise.exe+305911B: 48 8B 53 20 - mov rdx,[rbx+20]
MonsterHunterRise.exe+305911F: 33 FF - xor edi,edi
MonsterHunterRise.exe+3059121: 48 63 42 14 - movsxd rax,dword ptr [rdx+14]
MonsterHunterRise.exe+3059125: 48 3B C6 - cmp rax,rsi
MonsterHunterRise.exe+3059128: 7C 05 - jl MonsterHunterRise.exe+305912F
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+305912A: 29 72 14 - sub [rdx+14],esi
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+305912D: EB 03 - jmp MonsterHunterRise.exe+3059132
MonsterHunterRise.exe+305912F: 89 7A 14 - mov [rdx+14],edi
MonsterHunterRise.exe+3059132: 48 8B 05 97 89 0D 0C - mov rax,[MonsterHunterRise.exe+F131AD0]
MonsterHunterRise.exe+3059139: 83 B8 D0 00 00 00 01 - cmp dword ptr [rax+000000D0],01
MonsterHunterRise.exe+3059140: 74 1B - je MonsterHunterRise.exe+305915D
MonsterHunterRise.exe+3059142: 48 8B 43 20 - mov rax,[rbx+20]
MonsterHunterRise.exe+3059146: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+3059149: 48 8B 15 D8 D2 0C 0C - mov rdx,[MonsterHunterRise.exe+F126428]
MonsterHunterRise.exe+3059150: 44 8B 48 14 - mov r9d,[rax+14]
MonsterHunterRise.exe+3059154: 44 8B 40 10 - mov r8d,[rax+10]
}
Toggle Activation
18
65
0
1337095182
"***Notice: Disable when quest completed (if hang) & crafting***"
800080
1
87688
"increase#, when decreased (On/Off)"
0:Off
1:On
0
C08000
4 Bytes
is_inc_when_dec
1337096389
"Limit items"
1
1337095180
"Limit items (Ammos & some general stuff) (On/Off)"
0:Off
1:On
0
C08000
4 Bytes
is_limit_item
1337096390
"Bag only (On/Off)"
0:Off
1:On
0
C08000
4 Bytes
is_bag_only
1337095316
"Ammo only (On/Off)"
0:Off
1:On
0
C08000
4 Bytes
is_ammo_only
1337095317
"Hunting Helpers only (On/Off)"
0:Off
1:On
0
C08000
4 Bytes
is_env_item_only
1337095181
"_debug"
1
1337095174
"Last dec. item address"
1
0
8 Bytes
i_last_item_id_addr
1337095176
"Last dec. item address count"
0
FF8080
4 Bytes
i_last_item_count_addr
0
1337095177
"Last dec. item ID"
0
FF8080
2 Bytes
i_last_item_count_addr
-4
1337095178
"(Unknown) Last dec. item ??"
0410:General?
0420:Env. item?
1
0
2 Bytes
i_last_item_count_addr
-2
1337095179
"Last dec. item ?? & ID (hex; use w/ caution)"
04200000:泥球甲蟲
04200001:麻痺斯蛙
04200002:魁儡蜘蛛
04200003:落雨蝸牛
04200004:塗泥陸龜
04200005:臭臭鼬鼠
04200006:子泣雉雞
04200007:火石甲蟲
04200008:雷毛甲蟲
04200009:雪石甲蟲
0420000A:撒菱蟲
0420000B:提燈妖蟲
0420000C:加釀兔
0420000D:轆轤蛇
0420000E:睡眠瓦斯蛙
04200010:炸彈瓦斯蛙
04200014:一目蟹
1
0
4 Bytes
i_last_item_count_addr
-4
1337096391
"Last dec. item Serial"
0
2 Bytes
i_last_item_count_addr
30
1337095312
"Last dec. item Serial -2"
0:Bag/Temp. bag/Ammo
1:Item box
3:Env. item
18426:18426
0
2 Bytes
i_last_item_count_addr
2E
1337095313
"Last dec. item Serial -4"
0:Item box/Env. item
1:Bag
2:Temp. bag
3:Ammo
0
2 Bytes
i_last_item_count_addr
2C
1337095311
"Last dec. item ????"
2:Item box/Env. item
3:Bag/Temp. Bag
4:Bag/Ammo
0
4 Bytes
i_last_item_count_addr
24
1337095309
"+Buff time+ / Stamina (turn on before use item)"
1
1337095479
"Stamina never below 3000 / 精力不低於3000"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIN_STEMIA,MonsterHunterRise.exe,F3 0F 11 48 28 48 8B 83) // should be unique
alloc(newmem,$1000,INJECT_MIN_STEMIA)
label(code)
label(return)
label(xmm_tmp10)
label(fl_stemia_watermark)
label(i_base_stam_addr)
label(is_set_max_hp)
newmem:
mov [i_base_stam_addr], rax
pushfq
push rbx
db EB 3B 54 68 69 73 20 74 61 62 6C 65 20 63 6F 6D 65
db 73 20 66 72 6F 6D 20 68 74 74 70 73 3A 2F 2F 6F 70 65 6E 63 68
db 65 61 74 74 61 62 6C 65 73 2E 63 6F 6D 20 2F 20 43 45 20
db 37 2E 34 2B
cmp dword ptr [is_set_max_hp], 1
jne endp1
{$try}
mov ebx, [rax+18]
cmp ebx, #230
jae endp
mov ebx, #230
mov [rax+18], ebx
mov [rax+1C], ebx
endp:
{$except}
endp1:
pop rbx
popf
code:
pushf
vmovss xmm15, [fl_stemia_watermark]
vucomiss, xmm1, xmm15
ja @F
vmovss xmm1, [fl_stemia_watermark]
@@:
popfq
movss [rax+28],xmm1
jmp return
align 10 cc
i_base_stam_addr:
dq 0
align 10 cc
fl_stemia_watermark:
dd (float)3000
xmm_tmp10:
dq 0
is_set_max_hp:
dd 1
INJECT_MIN_STEMIA:
jmp newmem
return:
registersymbol(INJECT_MIN_STEMIA)
registersymbol(i_base_stam_addr)
registersymbol(is_set_max_hp)
[DISABLE]
INJECT_MIN_STEMIA:
db F3 0F 11 48 28
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1AF510E
MonsterHunterRise.exe+1AF50E3: F2 0F 59 C8 - mulsd xmm1,xmm0
MonsterHunterRise.exe+1AF50E7: 66 44 0F 5A C1 - cvtpd2ps xmm8,xmm1
MonsterHunterRise.exe+1AF50EC: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+1AF50F3: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+1AF50F6: F3 41 0F 5A C0 - cvtss2sd xmm0,xmm8
MonsterHunterRise.exe+1AF50FB: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+1AF5100: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+1AF5103: F2 0F 58 C8 - addsd xmm1,xmm0
MonsterHunterRise.exe+1AF5107: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+1AF510B: 0F 2F CF - comiss xmm1,xmm7
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1AF510E: F3 0F 11 48 28 - movss [rax+28],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1AF5113: 77 07 - ja MonsterHunterRise.exe+1AF511C
MonsterHunterRise.exe+1AF5115: C7 40 28 00 00 00 00 - mov [rax+28],00000000
MonsterHunterRise.exe+1AF511C: F3 0F 10 50 2C - movss xmm2,[rax+2C]
MonsterHunterRise.exe+1AF5121: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+1AF5126: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+1AF5129: 0F 5A C2 - cvtps2pd xmm0,xmm2
MonsterHunterRise.exe+1AF512C: 66 0F 2F C1 - comisd xmm0,xmm1
MonsterHunterRise.exe+1AF5130: 77 05 - ja MonsterHunterRise.exe+1AF5137
MonsterHunterRise.exe+1AF5132: F3 0F 11 50 28 - movss [rax+28],xmm2
MonsterHunterRise.exe+1AF5137: 0F 28 7C 24 30 - movaps xmm7,[rsp+30]
}
{
v13
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+22C5B27
MonsterHunterRise.exe+22C5B00: EB 06 - jmp MonsterHunterRise.exe+22C5B08
MonsterHunterRise.exe+22C5B02: 44 0F 2F C7 - comiss xmm8,xmm7
MonsterHunterRise.exe+22C5B06: 72 5E - jb MonsterHunterRise.exe+22C5B66
MonsterHunterRise.exe+22C5B08: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+22C5B0F: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+22C5B12: F3 41 0F 5A C0 - cvtss2sd xmm0,xmm8
MonsterHunterRise.exe+22C5B17: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+22C5B1C: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+22C5B1F: F2 0F 58 C8 - addsd xmm1,xmm0
MonsterHunterRise.exe+22C5B23: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+22C5B27: F3 0F 11 48 28 - movss [rax+28],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+22C5B2C: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+22C5B33: F3 0F 10 40 28 - movss xmm0,[rax+28]
MonsterHunterRise.exe+22C5B38: 0F 2F C7 - comiss xmm0,xmm7
MonsterHunterRise.exe+22C5B3B: 77 07 - ja MonsterHunterRise.exe+22C5B44
MonsterHunterRise.exe+22C5B3D: C7 40 28 00 00 00 00 - mov [rax+28],00000000
MonsterHunterRise.exe+22C5B44: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+22C5B4B: F3 0F 10 50 2C - movss xmm2,[rax+2C]
MonsterHunterRise.exe+22C5B50: F3 0F 10 48 28 - movss xmm1,[rax+28]
MonsterHunterRise.exe+22C5B55: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+22C5B58: 0F 5A C2 - cvtps2pd xmm0,xmm2
}
1337097263
"Set max HP?"
0:No
1:Yes
0
C08000
4 Bytes
is_set_max_hp
1337096967
"Max HP"
0
FF8080
4 Bytes
i_base_stam_addr
18
1337096966
"??"
0
FF8080
4 Bytes
i_base_stam_addr
1C
1337096965
"Current HP, include recoverable"
0
FF8080
4 Bytes
i_base_stam_addr
24
1337096964
"Stamina"
0
FF8080
Float
i_base_stam_addr
28
1337096393
"Demon Powder up+ (Power) / long duration / 設定鬼人粉塵攻擊力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DEMON_POWDER_UP,MonsterHunterRise.exe,F3 0F 11 80 A8 00 00 00 E8) // should be unique
alloc(newmem,$1000,INJECT_DEMON_POWDER_UP)
label(code)
label(return)
label(i_atk_up)
label(i_base_demon_powder_addr)
newmem:
mov [i_base_demon_powder_addr], rax
push rbx
mov ebx, [i_atk_up]
mov [rax+A0],ebx
mov rbx, (float)324000
movq xmm0, rbx
pop rbx
code:
movss [rax+000000A8],xmm0
jmp return
align 10 cc
i_atk_up:
dd #250
i_base_demon_powder_addr:
dq 0
INJECT_DEMON_POWDER_UP:
jmp newmem
nop 3
return:
registersymbol(i_atk_up)
registersymbol(INJECT_DEMON_POWDER_UP)
registersymbol(i_base_demon_powder_addr)
[DISABLE]
INJECT_DEMON_POWDER_UP:
db F3 0F 11 80 A8 00 00 00
unregistersymbol(i_atk_up)
unregistersymbol(i_base_demon_powder_addr)
unregistersymbol(INJECT_DEMON_POWDER_UP)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3B136A9
MonsterHunterRise.exe+3B1367A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B13681: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3B13684: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3B13688: 41 B9 6E 00 00 00 - mov r9d,0000006E
MonsterHunterRise.exe+3B1368E: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B13691: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B13694: 89 98 A0 00 00 00 - mov [rax+000000A0],ebx
MonsterHunterRise.exe+3B1369A: 48 8B 86 20 01 00 00 - mov rax,[rsi+00000120]
MonsterHunterRise.exe+3B136A1: 45 8D 41 F6 - lea r8d,[r9-0A]
MonsterHunterRise.exe+3B136A5: 66 0F 5A C1 - cvtpd2ps xmm0,xmm1
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3B136A9: F3 0F 11 80 A8 00 00 00 - movss [rax+000000A8],xmm0
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3B136B1: E8 BA 54 DD FF - call MonsterHunterRise.exe+38E8B70
MonsterHunterRise.exe+3B136B6: 45 8B C7 - mov r8d,r15d
MonsterHunterRise.exe+3B136B9: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136BC: 49 8B CE - mov rcx,r14
MonsterHunterRise.exe+3B136BF: E8 EC 36 00 00 - call MonsterHunterRise.exe+3B16DB0
MonsterHunterRise.exe+3B136C4: E9 DF 1F 00 00 - jmp MonsterHunterRise.exe+3B156A8
MonsterHunterRise.exe+3B136C9: 48 8B 05 A0 8E E4 0A - mov rax,[skills_current]
MonsterHunterRise.exe+3B136D0: 48 8B D6 - mov rdx,rsi
MonsterHunterRise.exe+3B136D3: F3 0F 10 05 15 0C E5 0A - movss xmm0,[MonsterHunterRise.exe+E9642F0]
MonsterHunterRise.exe+3B136DB: 0F 5A C0 - cvtps2pd xmm0,xmm0
}
1337096394
"Atk+ value / 攻擊力"
10:10
25:25
45:45
100:100
500:500
500000:500000
0
C08000
4 Bytes
i_atk_up
1337096961
"Duration"
0
Float
i_base_demon_powder_addr
A8
1337095187
"Crit up buff long duration / 瞬間強化生物：網切蜻蜓長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_CRIT_TIME,MonsterHunterRise.exe,F3 0F 11 88 C4 00 00 00 E9) // should be unique
alloc(newmem,$1000,INJECT_CRIT_TIME) // triggered when get buff
aobscanmodule(INJECT_GET_AFFINITY_TIME,MonsterHunterRise.exe,0F 2F B1 C4 00 00 00) // should be unique
alloc(newmem1,$1000,INJECT_GET_AFFINITY_TIME) // triggered everytime
label(code)
label(return)
label(i_base_crit_addr)
newmem:
mov [i_base_crit_addr], rax
vmovss xmm1, [vf_324000]
code:
movss [rax+000000C4],xmm1
jmp return
align 10 cc
i_base_crit_addr:
dq 0
vf_324000:
dd (float)324000
INJECT_CRIT_TIME:
jmp newmem
nop 3
return:
registersymbol(INJECT_CRIT_TIME)
registersymbol(i_base_crit_addr)
label(code1)
label(return1)
newmem1:
cmp qword ptr [i_base_crit_addr], 0
jne code1
mov [i_base_crit_addr], rcx
code1:
comiss xmm6,[rcx+000000C4]
jmp return1
INJECT_GET_AFFINITY_TIME:
jmp newmem1
nop 2
return1:
registersymbol(INJECT_GET_AFFINITY_TIME)
[DISABLE]
INJECT_CRIT_TIME:
db F3 0F 11 88 C4 00 00 00
unregistersymbol(*)
dealloc(newmem)
INJECT_GET_AFFINITY_TIME:
db 0F 2F B1 C4 00 00 00
unregistersymbol(INJECT_GET_AFFINITY_TIME)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3871AC7
MonsterHunterRise.exe+3871A97: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
MonsterHunterRise.exe+3871A9E: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+3871AA1: F3 0F 5A C8 - cvtss2sd xmm1,xmm0
MonsterHunterRise.exe+3871AA5: F3 0F 10 05 23 AA 5D 0B - movss xmm0,[MonsterHunterRise.exe+EE4C4D0]
MonsterHunterRise.exe+3871AAD: F2 0F 59 0D CB FE 91 03 - mulsd xmm1,[MonsterHunterRise.exe+7191980]
MonsterHunterRise.exe+3871AB5: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+3871AB8: 66 0F 5A C9 - cvtpd2ps xmm1,xmm1
MonsterHunterRise.exe+3871ABC: 0F 5A D1 - cvtps2pd xmm2,xmm1
MonsterHunterRise.exe+3871ABF: F2 0F 59 D0 - mulsd xmm2,xmm0
MonsterHunterRise.exe+3871AC3: 66 0F 5A CA - cvtpd2ps xmm1,xmm2
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3871AC7: F3 0F 11 88 C4 00 00 00 - movss [rax+000000C4],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3871ACF: E9 D7 02 00 00 - jmp MonsterHunterRise.exe+3871DAB
MonsterHunterRise.exe+3871AD4: 48 8B 0D 4D 80 5E 0B - mov rcx,[MonsterHunterRise.exe+EE59B28]
MonsterHunterRise.exe+3871ADB: 48 85 C9 - test rcx,rcx
MonsterHunterRise.exe+3871ADE: 74 0B - je MonsterHunterRise.exe+3871AEB
MonsterHunterRise.exe+3871AE0: 48 83 79 10 00 - cmp qword ptr [rcx+10],00
MonsterHunterRise.exe+3871AE5: 74 04 - je MonsterHunterRise.exe+3871AEB
MonsterHunterRise.exe+3871AE7: 32 C0 - xor al,al
MonsterHunterRise.exe+3871AE9: EB 02 - jmp MonsterHunterRise.exe+3871AED
MonsterHunterRise.exe+3871AEB: B0 01 - mov al,01
MonsterHunterRise.exe+3871AED: 0F B6 C0 - movzx eax,al
}
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+357D5A9
MonsterHunterRise.exe+357D582: 8D 14 03 - lea edx,[rbx+rax]
MonsterHunterRise.exe+357D585: 89 55 18 - mov [rbp+18],edx
MonsterHunterRise.exe+357D588: EB 03 - jmp MonsterHunterRise.exe+357D58D
MonsterHunterRise.exe+357D58A: 8B 55 18 - mov edx,[rbp+18]
MonsterHunterRise.exe+357D58D: 48 8B 8F 20 01 00 00 - mov rcx,[rdi+00000120]
MonsterHunterRise.exe+357D594: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+357D597: 0F 2F B1 B4 00 00 00 - comiss xmm6,[rcx+000000B4]
MonsterHunterRise.exe+357D59E: 73 09 - jae MonsterHunterRise.exe+357D5A9
MonsterHunterRise.exe+357D5A0: 03 91 B8 00 00 00 - add edx,[rcx+000000B8]
MonsterHunterRise.exe+357D5A6: 89 55 18 - mov [rbp+18],edx
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+357D5A9: 0F 2F B1 C4 00 00 00 - comiss xmm6,[rcx+000000C4]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+357D5B0: 73 06 - jae MonsterHunterRise.exe+357D5B8
MonsterHunterRise.exe+357D5B2: 83 C2 32 - add edx,32
MonsterHunterRise.exe+357D5B5: 89 55 18 - mov [rbp+18],edx
MonsterHunterRise.exe+357D5B8: 4C 8B 87 08 02 00 00 - mov r8,[rdi+00000208]
MonsterHunterRise.exe+357D5BF: 49 8B 40 38 - mov rax,[r8+38]
MonsterHunterRise.exe+357D5C3: 0F 2F 70 10 - comiss xmm6,[rax+10]
MonsterHunterRise.exe+357D5C7: 72 0A - jb MonsterHunterRise.exe+357D5D3
MonsterHunterRise.exe+357D5C9: 49 8B 40 50 - mov rax,[r8+50]
MonsterHunterRise.exe+357D5CD: 0F 2F 70 10 - comiss xmm6,[rax+10]
MonsterHunterRise.exe+357D5D1: 73 06 - jae MonsterHunterRise.exe+357D5D9
}
1337096775
"Affinity"
0
Float
i_base_crit_addr
C4
1337095185
"Hardshell Powder+ (Power) / long duration / 設定硬化粉塵防禦力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_Hardshell_Powder,MonsterHunterRise.exe,F3 0F 11 98 AC 00 00 00) // should be unique
alloc(newmem,$1000,INJECT_Hardshell_Powder)
label(code)
label(return)
label(i_hardshell_atk)
label(i_base_hardshell_atk_addr)
newmem:
code:
mov [i_base_hardshell_atk_addr], rax
push rbx
mov ebx, [i_hardshell_atk]
mov [rax+000000A4],ebx
mov rbx, (Double)324000
movq xmm3, rbx
pop rbx
movss [rax+000000AC],xmm3
jmp return
align 10 cc
i_hardshell_atk:
dd #500
i_base_hardshell_atk_addr:
dq 0
INJECT_Hardshell_Powder:
jmp newmem
nop 3
return:
registersymbol(i_hardshell_atk)
registersymbol(INJECT_Hardshell_Powder)
registersymbol(i_base_hardshell_atk_addr)
[DISABLE]
INJECT_Hardshell_Powder:
db F3 0F 11 98 AC 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3AB6DC8
MonsterHunterRise.exe+3AB6D9D: 48 8B 15 54 6D EA 0A - mov rdx,[MonsterHunterRise.exe+E95DAF8]
MonsterHunterRise.exe+3AB6DA4: E8 F7 DF 07 FE - call MonsterHunterRise.exe+1B34DA0
MonsterHunterRise.exe+3AB6DA9: 48 83 C4 38 - add rsp,38
MonsterHunterRise.exe+3AB6DAD: C3 - ret
MonsterHunterRise.exe+3AB6DAE: CC - int 3
MonsterHunterRise.exe+3AB6DAF: CC - int 3
MonsterHunterRise.exe+3AB6DB0: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3AB6DB7: 44 89 80 A4 00 00 00 - mov [rax+000000A4],r8d
MonsterHunterRise.exe+3AB6DBE: 45 33 C0 - xor r8d,r8d
MonsterHunterRise.exe+3AB6DC1: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3AB6DC8: F3 0F 11 98 AC 00 00 00 - movss [rax+000000AC],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3AB6DD0: E9 AB FE FE FF - jmp MonsterHunterRise.exe+3AA6C80
MonsterHunterRise.exe+3AB6DD5: CC - int 3
MonsterHunterRise.exe+3AB6DD6: CC - int 3
MonsterHunterRise.exe+3AB6DD7: CC - int 3
MonsterHunterRise.exe+3AB6DD8: CC - int 3
MonsterHunterRise.exe+3AB6DD9: CC - int 3
MonsterHunterRise.exe+3AB6DDA: CC - int 3
MonsterHunterRise.exe+3AB6DDB: CC - int 3
MonsterHunterRise.exe+3AB6DDC: CC - int 3
MonsterHunterRise.exe+3AB6DDD: CC - int 3
}
1337095186
"Def+ value / 防禦力"
10:10
25:25
45:45
100:100
220:220
500:500
1500:1500
0
C08000
4 Bytes
i_hardshell_atk
1337097264
"Duration"
0
Float
i_base_hardshell_atk_addr
AC
1337095183
"Dash juice long duration / 強走藥長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DASH_JUICE_LONG,MonsterHunterRise.exe,F3 0F 11 90 9C 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_DASH_JUICE_LONG)
label(code)
label(return)
newmem:
code:
push rax
mov rax, (Float)324000
movq xmm2, rax
pop rax
movss [rax+0000009C],xmm2
jmp return
INJECT_DASH_JUICE_LONG:
jmp newmem
nop 3
return:
registersymbol(INJECT_DASH_JUICE_LONG)
[DISABLE]
INJECT_DASH_JUICE_LONG:
db F3 0F 11 90 9C 00 00 00
unregistersymbol(INJECT_DASH_JUICE_LONG)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+521B7F
MonsterHunterRise.exe+521B5D: CC - int 3
MonsterHunterRise.exe+521B5E: CC - int 3
MonsterHunterRise.exe+521B5F: CC - int 3
MonsterHunterRise.exe+521B60: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+521B67: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+521B6A: F3 0F 5A C2 - cvtss2sd xmm0,xmm2
MonsterHunterRise.exe+521B6E: F3 0F 10 88 9C 00 00 00 - movss xmm1,[rax+0000009C]
MonsterHunterRise.exe+521B76: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+521B79: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+521B7D: 73 08 - jae MonsterHunterRise.exe+521B87
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+521B7F: F3 0F 11 90 9C 00 00 00 - movss [rax+0000009C],xmm2
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+521B87: C3 - ret
MonsterHunterRise.exe+521B88: CC - int 3
MonsterHunterRise.exe+521B89: CC - int 3
MonsterHunterRise.exe+521B8A: CC - int 3
MonsterHunterRise.exe+521B8B: CC - int 3
MonsterHunterRise.exe+521B8C: CC - int 3
MonsterHunterRise.exe+521B8D: CC - int 3
MonsterHunterRise.exe+521B8E: CC - int 3
MonsterHunterRise.exe+521B8F: CC - int 3
MonsterHunterRise.exe+521B90: 44 8B 42 70 - mov r8d,[rdx+70]
}
1337095320
"Prevent debuff duration+ (snake) / 轆轤蛇超長持續時間"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_SNAKE_PREV_DEBUFF,MonsterHunterRise.exe,F3 0F 11 88 DC 00 00 00 F3) // should be unique
alloc(newmem,$1000,INJECT_SNAKE_PREV_DEBUFF)
label(code)
label(return)
label(i_base_snake_addr)
newmem:
mov [i_base_snake_addr], rax
vmovss xmm1, [vf_324000]
code:
movss [rax+000000DC],xmm1
jmp return
align 10 cc
i_base_snake_addr:
dq 0
vf_324000:
dd (float)324000
INJECT_SNAKE_PREV_DEBUFF:
jmp newmem
nop 3
return:
registersymbol(INJECT_SNAKE_PREV_DEBUFF)
registersymbol(i_base_snake_addr)
[DISABLE]
INJECT_SNAKE_PREV_DEBUFF:
db F3 0F 11 88 DC 00 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3888203
MonsterHunterRise.exe+38881D0: 0F 84 07 04 00 00 - je MonsterHunterRise.exe+38885DD
MonsterHunterRise.exe+38881D6: 4C 89 74 24 58 - mov [rsp+58],r14
MonsterHunterRise.exe+38881DB: 0F 29 74 24 30 - movaps [rsp+30],xmm6
MonsterHunterRise.exe+38881E0: 45 84 C0 - test r8l,r8l
MonsterHunterRise.exe+38881E3: 74 26 - je MonsterHunterRise.exe+388820B
MonsterHunterRise.exe+38881E5: F3 0F 10 05 E3 42 5C 0B - movss xmm0,[MonsterHunterRise.exe+EE4C4D0]
MonsterHunterRise.exe+38881ED: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+38881F4: 0F 5A C0 - cvtps2pd xmm0,xmm0
MonsterHunterRise.exe+38881F7: F2 0F 59 05 B9 9E 90 03 - mulsd xmm0,[itembuff_base]
MonsterHunterRise.exe+38881FF: 66 0F 5A C8 - cvtpd2ps xmm1,xmm0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3888203: F3 0F 11 88 DC 00 00 00 - movss [rax+000000DC],xmm1
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+388820B: F3 0F 10 82 1C 08 00 00 - movss xmm0,[rdx+0000081C]
MonsterHunterRise.exe+3888213: 45 33 F6 - xor r14d,r14d
MonsterHunterRise.exe+3888216: 41 8B C6 - mov eax,r14d
MonsterHunterRise.exe+3888219: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+388821C: 0F 2F C6 - comiss xmm0,xmm6
MonsterHunterRise.exe+388821F: 0F 97 C0 - seta al
MonsterHunterRise.exe+3888222: 85 C0 - test eax,eax
MonsterHunterRise.exe+3888224: 74 08 - je MonsterHunterRise.exe+388822E
MonsterHunterRise.exe+3888226: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+3888229: E8 22 93 E1 FC - call MonsterHunterRise.exe+6A1550
}
1337096776
"Immunity"
0
Float
i_base_snake_addr
DC
1337096395
"Might seed up+ (Power) / long duration / 設定怪力種子攻擊力 / 持續時間超長"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-10
Author : bbfox @ https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_MIGHT_SEED_BUFF,MonsterHunterRise.exe,F3 0F 11 98 90 00 00 00 C3) // should be unique
alloc(newmem,$1000,INJECT_MIGHT_SEED_BUFF)
aobscanmodule(INJECT_GET_MIGHT_SEED_TIME,MonsterHunterRise.exe,0F 2F B8 90 00 00 00) // should be unique
alloc(newmem1,$1000,INJECT_GET_MIGHT_SEED_TIME)
label(code)
label(return)
label(i_might_seed)
label(i_base_might_seed_addr)
newmem:
mov [i_base_might_seed_addr], rax
code:
push rbx
mov ebx, [i_might_seed]
mov [rax+84],ebx
mov rbx, (float)324000
movq xmm3, rbx
pop rbx
movss [rax+00000090],xmm3
jmp return
align 10 cc
i_base_might_seed_addr:
dq 0
i_might_seed:
dd #75
INJECT_MIGHT_SEED_BUFF:
jmp newmem
nop 3
return:
registersymbol(i_might_seed)
registersymbol(INJECT_MIGHT_SEED_BUFF)
registersymbol(i_base_might_seed_addr)
label(code1)
label(return1)
newmem1:
cmp qword ptr [i_base_might_seed_addr], 0
jne code1
mov [i_base_might_seed_addr], rax
code1:
comiss xmm7,[rax+00000090]
jmp return1
INJECT_GET_MIGHT_SEED_TIME:
jmp newmem1
nop 2
return1:
registersymbol(INJECT_GET_MIGHT_SEED_TIME)
[DISABLE]
INJECT_MIGHT_SEED_BUFF:
db F3 0F 11 98 90 00 00 00
unregistersymbol(i_might_seed)
unregistersymbol(i_base_might_seed_addr)
unregistersymbol(INJECT_MIGHT_SEED_BUFF)
dealloc(newmem)
INJECT_GET_MIGHT_SEED_TIME:
db 0F 2F B8 90 00 00 00
unregistersymbol(INJECT_GET_MIGHT_SEED_TIME)
dealloc(newmem1)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+38846BD
MonsterHunterRise.exe+388468F: CC - int 3
MonsterHunterRise.exe+3884690: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
MonsterHunterRise.exe+3884697: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+388469A: F3 0F 5A C3 - cvtss2sd xmm0,xmm3
MonsterHunterRise.exe+388469E: F3 0F 10 88 90 00 00 00 - movss xmm1,[rax+00000090]
MonsterHunterRise.exe+38846A6: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+38846A9: 66 0F 2F C8 - comisd xmm1,xmm0
MonsterHunterRise.exe+38846AD: 73 16 - jae MonsterHunterRise.exe+38846C5
MonsterHunterRise.exe+38846AF: 44 89 80 84 00 00 00 - mov [rax+00000084],r8d
MonsterHunterRise.exe+38846B6: 48 8B 82 20 01 00 00 - mov rax,[rdx+00000120]
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+38846BD: F3 0F 11 98 90 00 00 00 - movss [rax+00000090],xmm3
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+38846C5: C3 - ret
MonsterHunterRise.exe+38846C6: CC - int 3
MonsterHunterRise.exe+38846C7: CC - int 3
MonsterHunterRise.exe+38846C8: CC - int 3
MonsterHunterRise.exe+38846C9: CC - int 3
MonsterHunterRise.exe+38846CA: CC - int 3
MonsterHunterRise.exe+38846CB: CC - int 3
MonsterHunterRise.exe+38846CC: CC - int 3
MonsterHunterRise.exe+38846CD: CC - int 3
MonsterHunterRise.exe+38846CE: CC - int 3
}
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+357E0B5
MonsterHunterRise.exe+357E087: 41 FF 91 E8 02 00 00 - call qword ptr [r9+000002E8]
MonsterHunterRise.exe+357E08E: 48 8B 83 20 01 00 00 - mov rax,[rbx+00000120]
MonsterHunterRise.exe+357E095: F3 0F 10 4D 28 - movss xmm1,[rbp+28]
MonsterHunterRise.exe+357E09A: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+357E09D: 66 0F 6E 40 7C - movd xmm0,[rax+7C]
MonsterHunterRise.exe+357E0A2: 0F 5B C0 - cvtdq2ps xmm0,xmm0
MonsterHunterRise.exe+357E0A5: 0F 5A D0 - cvtps2pd xmm2,xmm0
MonsterHunterRise.exe+357E0A8: F2 0F 58 D1 - addsd xmm2,xmm1
MonsterHunterRise.exe+357E0AC: 66 0F 5A DA - cvtpd2ps xmm3,xmm2
MonsterHunterRise.exe+357E0B0: F3 0F 11 5D 28 - movss [rbp+28],xmm3
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+357E0B5: 0F 2F B8 90 00 00 00 - comiss xmm7,[rax+00000090]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+357E0BC: 73 1E - jae MonsterHunterRise.exe+357E0DC
MonsterHunterRise.exe+357E0BE: 66 0F 6E 80 84 00 00 00 - movd xmm0,[rax+00000084]
MonsterHunterRise.exe+357E0C6: 0F 5A CB - cvtps2pd xmm1,xmm3
MonsterHunterRise.exe+357E0C9: 0F 5B C0 - cvtdq2ps xmm0,xmm0
MonsterHunterRise.exe+357E0CC: 0F 5A D0 - cvtps2pd xmm2,xmm0
MonsterHunterRise.exe+357E0CF: F2 0F 58 D1 - addsd xmm2,xmm1
MonsterHunterRise.exe+357E0D3: 66 0F 5A DA - cvtpd2ps xmm3,xmm2
MonsterHunterRise.exe+357E0D7: F3 0F 11 5D 28 - movss [rbp+28],xmm3
MonsterHunterRise.exe+357E0DC: 0F 2F B8 A8 00 00 00 - comiss xmm7,[rax+000000A8]
MonsterHunterRise.exe+357E0E3: 73 1E - jae MonsterHunterRise.exe+357E103
}
1337095173
"Atk up+ / 攻擊力"
10:10
25:25
45:45
100:100
500:500
0
C08000
4 Bytes
i_might_seed
1337096963
"Duration"
0
Float
i_base_might_seed_addr
90
1337096779
"Damage -> recovery bar / 受到傷害會變紅條"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-14
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_DMG_RED2,MonsterHunterRise.exe,0F 5A CF 0F 28 7C 24 20 F3) // should be unique
alloc(newmem,$1000,INJECT_DMG_RED2)
label(code)
label(return)
newmem:
//xorps xmm7,xmm7
//vmovss xmm7, [vf_0]
code:
cvtps2pd xmm1,xmm7
movaps xmm7,[rsp+20]
//
xorps xmm7,xmm7
push rdx
mov edx, [rbx+18]
mov eax, edx
mov r14d, 0
cvtsi2ss xmm2, edx
cvtsi2ss xmm4, edx
//xorps xmm3,xmm3
//vmovss xmm15, [vf_2]
//mulss xmm1, xmm15
//mulss xmm1, xmm15
cvtps2pd xmm6, xmm2
pop rdx
//
jmp return
align 10 cc
vf_0:
dd 0
vf_2:
dd (float)2
INJECT_DMG_RED2:
jmp newmem
nop 3
return:
registersymbol(INJECT_DMG_RED2)
[DISABLE]
INJECT_DMG_RED2:
db 0F 5A CF 0F 28 7C 24 20
unregistersymbol(INJECT_DMG_RED2)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1AEF426
MonsterHunterRise.exe+1AEF3FD: E8 BE 6B 52 01 - call MonsterHunterRise.exe+3015FC0
MonsterHunterRise.exe+1AEF402: 48 8B 87 20 01 00 00 - mov rax,[rdi+00000120]
MonsterHunterRise.exe+1AEF409: 0F 57 F6 - xorps xmm6,xmm6
MonsterHunterRise.exe+1AEF40C: 48 8B CE - mov rcx,rsi
MonsterHunterRise.exe+1AEF40F: F3 0F 5A F0 - cvtss2sd xmm6,xmm0
MonsterHunterRise.exe+1AEF413: 48 8B 50 10 - mov rdx,[rax+10]
MonsterHunterRise.exe+1AEF417: E8 A4 6B 52 01 - call MonsterHunterRise.exe+3015FC0
MonsterHunterRise.exe+1AEF41C: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+1AEF420: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+1AEF423: 44 2B F0 - sub r14d,eax
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1AEF426: 0F 5A CF - cvtps2pd xmm1,xmm7
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1AEF429: 0F 28 7C 24 20 - movaps xmm7,[rsp+20]
MonsterHunterRise.exe+1AEF42E: F3 41 0F 2A C6 - cvtsi2ss xmm0,r14d
MonsterHunterRise.exe+1AEF433: 0F 5A D8 - cvtps2pd xmm3,xmm0
MonsterHunterRise.exe+1AEF436: 66 0F 5A C6 - cvtpd2ps xmm0,xmm6
MonsterHunterRise.exe+1AEF43A: F2 0F 59 D9 - mulsd xmm3,xmm1
MonsterHunterRise.exe+1AEF43E: 0F 57 C9 - xorps xmm1,xmm1
MonsterHunterRise.exe+1AEF441: F3 0F 2C C0 - cvttss2si eax,xmm0
MonsterHunterRise.exe+1AEF445: F2 0F 5E 1D CB 9B 79 05 - divsd xmm3,[MonsterHunterRise.exe+7289018]
MonsterHunterRise.exe+1AEF44D: F3 0F 2A C8 - cvtsi2ss xmm1,eax
MonsterHunterRise.exe+1AEF451: 0F 5A D1 - cvtps2pd xmm2,xmm1
}
1337096782
"Anomaly Investigations list viewer / 傀異探究任務檢視器"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-08-14
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_ANO_INVES_QUEST_LIST,MonsterHunterRise.exe,45 8B 46 18 48 8B CF 49) // should be unique
alloc(newmem,$1000,INJECT_ANO_INVES_QUEST_LIST)
label(code)
label(return)
label(i_ano_inves_quest_list_base_addr)
label(i_valid_quest_check)
label(is_valid_location)
label(is_valid_monsters_count)
newmem:
{$try}
mov [i_ano_inves_quest_list_base_addr], r14
{$except}
cmp dword ptr [i_valid_quest_check], 1
jne code
push rax
push r15
{$try}
// check # of playrs
mov eax, [r14+80]
cmp eax, 2
je chk_duration
cmp eax, 4
je chk_duration
mov eax, 4
mov [r14+80], eax
chk_duration:
// check duration
mov eax, [r14+78]
cmp eax, #50
je chk_retry
cmp eax, #35
je chk_retry
cmp eax, #30
je chk_retry
cmp eax, #25
je chk_retry
mov eax, #50
mov [r14+78], eax
chk_retry:
// check retry count
mov eax, [r14+7C]
cmp eax, 5
jbe chk_location
mov eax, 5
mov [r14+7C], eax
chk_location:
mov dword ptr [is_valid_location], 1
mov eax, [r14+24]
cmp eax, #13
je chk_number_of_monsters
cmp eax, #12
je chk_number_of_monsters
cmp eax, #5
jbe chk_number_of_monsters
mov dword ptr [is_valid_location], 0
chk_number_of_monsters:
mov dword ptr [is_valid_monsters_count], 1
mov eax, [r14+18]
mov r15d, [r14+38]
cmp r15d, 3
jne chk_mon_num_1
// 3 monsters -> time must be 50
mov r15d, #50
mov [r14+78], r15d
mov r15d, 3
chk_mon_num_1:
cmp eax, 14
ja chk_mon_num_2
cmp r15d, 1
je chk_mon_num_2
mov dword ptr [is_valid_monsters_count], 0
jmp endp
chk_mon_num_2:
cmp eax, 28
ja chk_mon_num_3
cmp r15d, 2
jbe chk_mon_num_3
mov dword ptr [is_valid_monsters_count], 0
jmp endp
chk_mon_num_3:
cmp r15d, 2
jne endp
mov eax, [r14+78]
cmp eax, #25
jne endp
mov dword ptr [is_valid_monsters_count], 0
jmp endp
endp:
db EB 3B 54 68 69 73 20 74 61 62 6C 65 20 63 6F 6D
db 65 73 20 66 72 6F 6D 20 68 74 74 70 73 3A 2F 2F
db 6F 70 65 6E 63 68 65 61 74 74 61 62 6C 65 73 2E
db 63 6F 6D 20 2F 20 43 45 20 37 2E 34 2B
{$except}
pop r15
pop rax
code:
mov r8d,[r14+18]
mov rcx,rdi
jmp return
align 10 cc
i_ano_inves_quest_list_base_addr:
dq 0
i_valid_quest_check:
dd 1
is_valid_location:
dd 1
is_valid_monsters_count:
dd 1
INJECT_ANO_INVES_QUEST_LIST:
jmp newmem
nop 2
return:
registersymbol(INJECT_ANO_INVES_QUEST_LIST)
registersymbol(i_ano_inves_quest_list_base_addr)
registersymbol(i_valid_quest_check)
registersymbol(is_valid_location)
registersymbol(is_valid_monsters_count)
[DISABLE]
INJECT_ANO_INVES_QUEST_LIST:
db 45 8B 46 18 48 8B CF
unregistersymbol(*)
dealloc(newmem)
{
v12
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+3A2B5B9
MonsterHunterRise.exe+3A2B58A: 44 0F 29 40 A8 - movaps [rax-58],xmm8
MonsterHunterRise.exe+3A2B58F: 33 DB - xor ebx,ebx
MonsterHunterRise.exe+3A2B591: 48 89 9A 04 07 00 00 - mov [rdx+00000704],rbx
MonsterHunterRise.exe+3A2B598: 48 8B E9 - mov rbp,rcx
MonsterHunterRise.exe+3A2B59B: 48 8B 92 B0 06 00 00 - mov rdx,[rdx+000006B0]
MonsterHunterRise.exe+3A2B5A2: 44 0F 29 48 98 - movaps [rax-68],xmm9
MonsterHunterRise.exe+3A2B5A7: 44 0F 29 50 88 - movaps [rax-78],xmm10
MonsterHunterRise.exe+3A2B5AC: 49 8B 40 40 - mov rax,[r8+40]
MonsterHunterRise.exe+3A2B5B0: 44 8B 40 20 - mov r8d,[rax+20]
MonsterHunterRise.exe+3A2B5B4: E8 87 CD B0 FF - call MonsterHunterRise.exe+3538340
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+3A2B5B9: 45 8B 46 18 - mov r8d,[r14+18]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+3A2B5BD: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+3A2B5C0: 49 8B 95 B8 06 00 00 - mov rdx,[r13+000006B8]
MonsterHunterRise.exe+3A2B5C7: 89 84 24 A8 00 00 00 - mov [rsp+000000A8],eax
MonsterHunterRise.exe+3A2B5CE: E8 5D 83 E6 FF - call MonsterHunterRise.exe+3893930
MonsterHunterRise.exe+3A2B5D3: 45 8B 86 80 00 00 00 - mov r8d,[r14+00000080]
MonsterHunterRise.exe+3A2B5DA: 48 8B CD - mov rcx,rbp
MonsterHunterRise.exe+3A2B5DD: 49 8B 95 D0 06 00 00 - mov rdx,[r13+000006D0]
MonsterHunterRise.exe+3A2B5E4: 44 0F 28 C8 - movaps xmm9,xmm0
MonsterHunterRise.exe+3A2B5E8: E8 43 5E 8C FD - call MonsterHunterRise.exe+12F1430
MonsterHunterRise.exe+3A2B5ED: 44 0F 28 D0 - movaps xmm10,xmm0
}
{
v13
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+E73B08
MonsterHunterRise.exe+E73ADA: 33 DB - xor ebx,ebx
MonsterHunterRise.exe+E73ADC: 44 0F 29 48 98 - movaps [rax-68],xmm9
MonsterHunterRise.exe+E73AE1: 48 8B F9 - mov rdi,rcx
MonsterHunterRise.exe+E73AE4: 48 89 9A 1C 07 00 00 - mov [rdx+0000071C],rbx
MonsterHunterRise.exe+E73AEB: 48 8B 92 C8 06 00 00 - mov rdx,[rdx+000006C8]
MonsterHunterRise.exe+E73AF2: 44 0F 29 50 88 - movaps [rax-78],xmm10
MonsterHunterRise.exe+E73AF7: 4C 89 60 08 - mov [rax+08],r12
MonsterHunterRise.exe+E73AFB: 49 8B 40 40 - mov rax,[r8+40]
MonsterHunterRise.exe+E73AFF: 44 8B 40 20 - mov r8d,[rax+20]
MonsterHunterRise.exe+E73B03: E8 D8 6D 2F 01 - call MonsterHunterRise.exe+216A8E0
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+E73B08: 45 8B 46 18 - mov r8d,[r14+18]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+E73B0C: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+E73B0F: 49 8B 95 D0 06 00 00 - mov rdx,[r13+000006D0]
MonsterHunterRise.exe+E73B16: 89 84 24 A8 00 00 00 - mov [rsp+000000A8],eax
MonsterHunterRise.exe+E73B1D: E8 3E 33 70 01 - call MonsterHunterRise.exe+2576E60
MonsterHunterRise.exe+E73B22: 45 8B 86 80 00 00 00 - mov r8d,[r14+00000080]
MonsterHunterRise.exe+E73B29: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+E73B2C: 49 8B 95 E8 06 00 00 - mov rdx,[r13+000006E8]
MonsterHunterRise.exe+E73B33: 44 0F 28 C8 - movaps xmm9,xmm0
MonsterHunterRise.exe+E73B37: E8 84 AA 4C 01 - call MonsterHunterRise.exe+233E5C0
MonsterHunterRise.exe+E73B3C: 44 0F 28 D0 - movaps xmm10,xmm0
}
1337097318
"Usage: Talk to NPC, Browse related quests / 和NPC交談"
8000FF
1
1337097256
"Check some quest validity rules & fix if possible?"
Set max HP?
0
C08000
4 Bytes
i_valid_quest_check
1337096783
"Quest ID / 任務ID"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
10
1337096784
"Quest LV / 任務等級"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
18
1337096787
"Type / 種類"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
20
1337097298
"# of monsters / 狩獵數"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
38
1337097299
"(read only) is # of monsters valid? / 狩獵數是否合理?"
0:No
1:Yes
0
808080
4 Bytes
is_valid_monsters_count
1337096788
"Location ID / 目的地ID"
1:Shrine Ruins/大社遺跡
2:Sandy Plains/沙原
3:Flooded Forest/水沒林
4:Frost Islands/寒冷群島
5:Lava Caverns/熔岩洞
12:Jungle/密林
13:Citadel/城塞高地
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
24
1337097257
"(read only) Valid location?"
0:No
1:Yes
0
808080
4 Bytes
is_valid_location
1337096785
"Quest Duration / 限制時間"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
78
1337096786
"Retry count / 力竭倒下次數"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
7C
1337097255
"Max players / 參加人數"
0
FF8080
4 Bytes
i_ano_inves_quest_list_base_addr
80
1337097319
"_not working"
1
1337097269
"xEasier to make monster stamina down"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-10-05
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_FAST_MONSTER_STAMINA_DOWN,MonsterHunterRise.exe,8B 00 89 42 20 C3 CC CC CC CC CC CC CC CC 4C) // should be unique
alloc(newmem,$1000,INJECT_FAST_MONSTER_STAMINA_DOWN)
label(code)
label(return)
newmem:
code:
mov eax,[rax]
pushf
cvtsi2ss xmm15, eax
vmovss xmm14, [vf_20]
vucomiss xmm15, xmm14
jb endp
cvtss2si eax, xmm14
endp:
popf
mov [rdx+20],eax
jmp return
align 10 cc
vf_20:
dd (float)20
INJECT_FAST_MONSTER_STAMINA_DOWN:
jmp newmem
return:
registersymbol(INJECT_FAST_MONSTER_STAMINA_DOWN)
[DISABLE]
INJECT_FAST_MONSTER_STAMINA_DOWN:
db 8B 00 89 42 20
unregistersymbol(INJECT_FAST_MONSTER_STAMINA_DOWN)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+171B582
MonsterHunterRise.exe+171B556: C7 44 24 20 00 00 00 00 - mov [rsp+20],00000000
MonsterHunterRise.exe+171B55E: F3 0F 5A C2 - cvtss2sd xmm0,xmm2
MonsterHunterRise.exe+171B562: 48 8D 4C 24 20 - lea rcx,[rsp+20]
MonsterHunterRise.exe+171B567: 0F 5A C9 - cvtps2pd xmm1,xmm1
MonsterHunterRise.exe+171B56A: F2 0F 5C C8 - subsd xmm1,xmm0
MonsterHunterRise.exe+171B56E: 0F 57 C0 - xorps xmm0,xmm0
MonsterHunterRise.exe+171B571: 66 0F 5A D1 - cvtpd2ps xmm2,xmm1
MonsterHunterRise.exe+171B575: 0F 2F D0 - comiss xmm2,xmm0
MonsterHunterRise.exe+171B578: F3 0F 11 54 24 18 - movss [rsp+18],xmm2
MonsterHunterRise.exe+171B57E: 48 0F 46 C1 - cmovbe rax,rcx
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+171B582: 8B 00 - mov eax,[rax]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+171B584: 89 42 20 - mov [rdx+20],eax
MonsterHunterRise.exe+171B587: C3 - ret
MonsterHunterRise.exe+171B588: CC - int 3
MonsterHunterRise.exe+171B589: CC - int 3
MonsterHunterRise.exe+171B58A: CC - int 3
MonsterHunterRise.exe+171B58B: CC - int 3
MonsterHunterRise.exe+171B58C: CC - int 3
MonsterHunterRise.exe+171B58D: CC - int 3
MonsterHunterRise.exe+171B58E: CC - int 3
MonsterHunterRise.exe+171B58F: CC - int 3
MonsterHunterRise.exe+171B590: 4C 8B CA - mov r9,rdx
MonsterHunterRise.exe+171B593: 48 8B 92 C0 00 00 00 - mov rdx,[rdx+000000C0]
MonsterHunterRise.exe+171B59A: 48 85 D2 - test rdx,rdx
MonsterHunterRise.exe+171B59D: 74 28 - je MonsterHunterRise.exe+171B5C7
MonsterHunterRise.exe+171B59F: 48 8B 42 28 - mov rax,[rdx+28]
MonsterHunterRise.exe+171B5A3: 48 85 C0 - test rax,rax
MonsterHunterRise.exe+171B5A6: 74 1F - je MonsterHunterRise.exe+171B5C7
MonsterHunterRise.exe+171B5A8: 44 0F B6 40 20 - movzx r8d,byte ptr [rax+20]
}
1337097270
"Some monsters are not affected (i.e. Crimson Glow Valstrax)"
400040
1
1337097279
"xCharm Viewer / 護石檢視器"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-10-06
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_CHARM,MonsterHunterRise.exe,8B 50 34 EB 02 8B D6 48 8B CF E8 F1) // should be unique
alloc(newmem,$1000,INJECT_GET_CHARM)
label(code)
label(return)
label(i_base_charm_addr)
newmem:
mov [i_base_charm_addr], rax
code:
mov edx,[rax+34]
reassemble(INJECT_GET_CHARM+3)
//jmp MonsterHunterRise.exe+24212F7
jmp return
align 10 cc
i_base_charm_addr:
dq 0
INJECT_GET_CHARM:
jmp newmem
return:
registersymbol(INJECT_GET_CHARM)
registersymbol(i_base_charm_addr)
[DISABLE]
INJECT_GET_CHARM:
db 8B 50 34 EB 02
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+24212F0
MonsterHunterRise.exe+24212CF: E8 2C BA EA FD - call MonsterHunterRise.exe+2CCD00
MonsterHunterRise.exe+24212D4: 48 8B D8 - mov rbx,rax
MonsterHunterRise.exe+24212D7: BE 00 00 00 10 - mov esi,10000000
MonsterHunterRise.exe+24212DC: 48 8B 40 10 - mov rax,[rax+10]
MonsterHunterRise.exe+24212E0: 48 85 C0 - test rax,rax
MonsterHunterRise.exe+24212E3: 75 05 - jne MonsterHunterRise.exe+24212EA
MonsterHunterRise.exe+24212E5: 8B 53 18 - mov edx,[rbx+18]
MonsterHunterRise.exe+24212E8: EB 0D - jmp MonsterHunterRise.exe+24212F7
MonsterHunterRise.exe+24212EA: 83 78 30 03 - cmp dword ptr [rax+30],03
MonsterHunterRise.exe+24212EE: 75 05 - jne MonsterHunterRise.exe+24212F5
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+24212F0: 8B 50 34 - mov edx,[rax+34]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+24212F3: EB 02 - jmp MonsterHunterRise.exe+24212F7
MonsterHunterRise.exe+24212F5: 8B D6 - mov edx,esi
MonsterHunterRise.exe+24212F7: 48 8B CF - mov rcx,rdi
MonsterHunterRise.exe+24212FA: E8 F1 EC D3 FF - call MonsterHunterRise.exe+215FFF0
MonsterHunterRise.exe+24212FF: 48 85 C0 - test rax,rax
MonsterHunterRise.exe+2421302: 75 15 - jne MonsterHunterRise.exe+2421319
MonsterHunterRise.exe+2421304: 48 8B 05 65 08 0A 0D - mov rax,[MonsterHunterRise.exe+F4C1B70]
MonsterHunterRise.exe+242130B: 48 8B 74 24 30 - mov rsi,[rsp+30]
MonsterHunterRise.exe+2421310: 48 8B 58 60 - mov rbx,[rax+60]
MonsterHunterRise.exe+2421314: E9 AD 00 00 00 - jmp MonsterHunterRise.exe+24213C6
}
1337097317
"(Usage: change charm in equips window / 變更護石"
8000FF
1
1337097280
"Base addr."
1
0
808080
8 Bytes
i_base_charm_addr
1337097281
"Rarity / 稀有度"
0
Byte
i_base_charm_addr
34
1337097287
"illegal flag (0=legal) / 是否合規 (0=合規)"
0:Valid
1:Invalid
2:Invalid
3:Invalid
4:Invalid
5:Invalid
6:Invalid
7:Invalid
8:Invalid
9:Invalid
10:Invalid
11:Invalid
12:Invalid
13:Invalid
14:Invalid
15:Invalid
0
Byte
i_base_charm_addr
B0
A0
1337097295
"??"
0:Valid
0
4 Bytes
i_base_charm_addr
8
1337097296
"??"
0:Valid
0
4 Bytes
i_base_charm_addr
14
1337097297
"??"
0:Valid
0
4 Bytes
i_base_charm_addr
30
1337097291
"****Total # of slots must <= 3 / 所有slots總和需小於或等於3****"
8000FF
1
1337097282
"Level 1 slots (0 or 1)"
0
Byte
i_base_charm_addr
184
1337097284
"Level 2 slots (0 or 1)"
0
Byte
i_base_charm_addr
188
1337097285
"Level 3 slots (0 or 1)"
0
Byte
i_base_charm_addr
18C
1337097286
"Level 4 slots (0 or 1)"
0
Byte
i_base_charm_addr
190
1337097288
"Skill #1"
0:None
1:Attack Boost/攻撃
2:Agitator/挑戦者
3:Peak Performance/フルチャージ
4:Resentment/逆恨み
5:Resuscitate/死中に活
6:Critical Eye/見切り
7:Critical Boost/超會心
8:Weakness Exploit/弱點特効
9:Latent Power/力の解放
10:Maximum Might/渾身
11:Critical Element/會心撃【屬性】
12:Master's Touch/達人芸
13:Fire Attack/火屬性攻撃強化
14:Water Attack/水屬性攻撃強化
15:Ice Attack/氷屬性攻撃強化
16:Thunder Attack/雷屬性攻撃強化
17:Dragon Attack/龍屬性攻撃強化
18:Poison Attack/毒屬性強化
19:Paralysis Attack/麻痺屬性強化
20:Sleep Attack/睡眠屬性強化
21:Blast Attack/爆破屬性強化
22:Handicraft/匠
23:Razor Sharp/業物
24:Spare Shot/弾丸節約
25:Protective Polish/剛刃研磨
26:Mind's Eye/心眼
27:Ballistics/弾導強化
28:Bludgeoner/鈍器使い
29:Bow Charge Plus/弓溜め段階解放
30:Focus/集中
31:Power Prolonger/強化持続
32:Marathon Runner/ランナー
33:Constitution/體術
34:Stamina Surge/スタミナ急速回復
35:Guard/ガード性能
36:Guard Up/ガード強化
37:Offensive Guard/攻めの守勢
38:Critical Draw/抜刀術【技】
39:Punishing Draw/抜刀術【力】
40:Quick Sheathe/納刀術
41:Slugger/KO術
42:Stamina Thief/スタミナ奪取
43:Affinity Sliding/滑走強化
44:Horn Maestro/笛吹き名人
45:Artillery/砲術
46:Load Shells/砲弾裝填
47:Special Ammo Boost/特殊射撃強化
48:Normal/Rapid Up/通常弾・連射矢強化
49:Pierce Up/貫通弾・貫通矢強化
50:Spread Up/散弾・拡散矢強化
51:Ammo Up/裝填拡張
52:Reload Speed/裝填速度
53:Recoil Down/反動軽減
54:Steadiness/ブレ抑制
55:Rapid Fire Up/速射強化
56:Defense Boost/防禦
57:Divine Blessing/精霊の加護
58:Recovery Up/體力回復量UP
59:Recovery Speed/回復速度
60:Speed Eating/早食い
61:Earplugs/耳栓
62:Windproof/風圧耐性
63:Tremor Resistance/耐震
64:Bubbly Dance/泡沫の舞
65:Evade Window/迴避性能
66:Evade Extender/迴避距離UP
67:Fire Resistance/火耐性
68:Water Resistance/水耐性
69:Ice Resistance/氷耐性
70:Thunder Resistance/雷耐性
71:Dragon Resistance/龍耐性
72:Blight Resistance/屬性やられ耐性
73:Poison Resistance/毒耐性
74:Paralysis Resistance/麻痺耐性
75:Sleep Resistance/睡眠耐性
76:Stun Resistance/気絶耐性
77:Muck Resistance/泥耐性
78:Blast Resistance/爆破やられ耐性
79:Botanist/植生學
80:Geologist/地質學
81:Partbreaker/破壊王
82:Capture Master/捕獲名人
83:Carving Master/剝ぎ取り名人
84:Good Luck/幸運
85:Speed Sharpening/砥石使用高速化
86:Bombardier/ボマー
87:Mushroomancer/キノコ大好き
88:Item Prolonger/アイテム使用強化
89:Wide-Range/広域化
90:Free Meal/満足感
91:Heroics/火事場力
92:Fortify/不屈
93:Flinch Free/ひるみ軽減
94:Jump Master/ジャンプ鉄人
95:Carving Pro/剝ぎ取り鉄人
96:Hunger Resistance/腹減り耐性
97:Leap of Faith/飛び込み
98:Diversion/陽動
99:Master Mounter/乗り名人
100:Chameleos Blessing/霞皮の恩恵
101:Kushala Blessing/鋼殻の恩恵
102:Teostra Blessing/炎鱗の恩恵
103:Dragonheart/龍気活性
104:Wirebug Whisperer/翔蟲使い
105:Wall Runner/壁面移動
106:Counterstrike/逆襲
107:Rapid Morph/高速変形
108:Hellfire Cloak/鬼火纏
109:Wind Alignment/風紋の一致
110:Thunder Alignment/雷紋の一致
111:Stormsoul/風雷合一
112:Blood Rite/血氣
113:Dereliction/伏魔響命
114:Furious/激昂
115:Mail of Hellfire/業鎧【修羅】
116:Coalescence/災禍転福
117:Bloodlust/狂竜症【蝕】
118:Defiance/顕如盤石
119:Snack Attack/闇討ち
120:Adrenaline Rush/巧撃
121:Embolden/煽衛
122:Redirection/合気
123:Spiribird's Call/供応
124:Charge Master/チャージマスター
125:Foray/攻勢
126:Tune-Up/チューンアップ
127:Grinder (S)/研磨術【鋭】
128:Bladescale Hone/刃鱗磨き
129:Wall Runner (Boost)/壁面移動【翔】
130:Element Exploit/弱點特効【屬性】
131:Burst/連撃
132:Guts/根性
133:Quick Breath/疾之息吹
134:Status Trigger/狀態異常確定蓄積
135:Intrepid Heart/剛心
136:Buildup Boost/蓄積時攻撃強化
0
Byte
i_base_charm_addr
1C0
1337097292
"Skill #1 Level"
0
4 Bytes
i_base_charm_addr
20
88
1337097289
"Skill #2"
Skill #1
0
Byte
i_base_charm_addr
1C1
1337097293
"Skill #2 Level"
0
4 Bytes
i_base_charm_addr
24
88
1337097290
"Skill #3"
Skill #1
0
Byte
i_base_charm_addr
1C2
1337097294
"Skill #3 Level"
0
4 Bytes
i_base_charm_addr
28
88
1337097324
"Village quest count AOB"
Auto Assembler Script
{ Game : MonsterHunterRise.exe
Version:
Date : 2022-11-26
Author : bbfox@https://opencheattables.com
}
[ENABLE]
aobscanmodule(INJECT_GET_VILLAGE_QUESTS,MonsterHunterRise.exe,44 0B 1A 48 81 ED 8D 51 B2 3C) // should be unique
alloc(newmem,$1000,INJECT_GET_VILLAGE_QUESTS)
label(code)
label(return)
newmem:
code:
or r11d,[rdx]
sub rbp,3CB2518D
jmp return
INJECT_GET_VILLAGE_QUESTS:
jmp newmem
nop 5
return:
registersymbol(INJECT_GET_VILLAGE_QUESTS)
[DISABLE]
INJECT_GET_VILLAGE_QUESTS:
db 44 0B 1A 48 81 ED 8D 51 B2 3C
unregistersymbol(INJECT_GET_VILLAGE_QUESTS)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: MonsterHunterRise.exe+1287300B
MonsterHunterRise.exe+12872FEB: C3 - ret
MonsterHunterRise.exe+12872FEC: 3D 52 48 F7 D2 - cmp eax,D2F74852
MonsterHunterRise.exe+12872FF1: 48 21 14 24 - and [rsp],rdx
MonsterHunterRise.exe+12872FF5: 5A - pop rdx
MonsterHunterRise.exe+12872FF6: 48 0B 91 C0 01 00 00 - or rdx,[rcx+000001C0]
MonsterHunterRise.exe+12872FFD: 41 53 - push r11
MonsterHunterRise.exe+12872FFF: 49 F7 D3 - not r11
MonsterHunterRise.exe+12873002: 44 21 1C 24 - and [rsp],r11d
MonsterHunterRise.exe+12873006: 48 8D 29 - lea rbp,[rcx]
MonsterHunterRise.exe+12873009: 41 5B - pop r11
// ---------- INJECTING HERE ----------
MonsterHunterRise.exe+1287300B: 44 0B 1A - or r11d,[rdx]
// ---------- DONE INJECTING ----------
MonsterHunterRise.exe+1287300E: 48 81 ED 8D 51 B2 3C - sub rbp,3CB2518D
MonsterHunterRise.exe+12873015: 4C 89 9D 4D 53 B2 3C - mov [rbp+3CB2534D],r11
MonsterHunterRise.exe+1287301C: 52 - push rdx
MonsterHunterRise.exe+1287301D: 48 8D 64 24 F8 - lea rsp,[rsp-08]
MonsterHunterRise.exe+12873022: 48 33 14 24 - xor rdx,[rsp]
MonsterHunterRise.exe+12873026: 48 83 34 24 FF - xor qword ptr [rsp],-01
MonsterHunterRise.exe+1287302B: 48 33 14 24 - xor rdx,[rsp]
MonsterHunterRise.exe+1287302F: 48 8D 64 24 08 - lea rsp,[rsp+08]
MonsterHunterRise.exe+12873034: 48 21 14 24 - and [rsp],rdx
MonsterHunterRise.exe+12873038: 5A - pop rdx
}
1337096378
"Allow VEH (only needed for making table)"
808080
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
local symbolName = "KERNELBASE.SetThreadContext"
[ENABLE]
local bt = {195, 144, 144, 144} --C3 90 90 90 (ret nop nop nop)
writeBytes(symbolName, bt)
[DISABLE]
local bt = {72, 131, 236, 40} --48 83 EC 28 (sub rsp, 28)
writeBytes(symbolName, bt)
1337096452
"(2022/12/09) Monster Hunter Rise: Sunbreak 13.0.0.1 / https://opencheattables.com / CE 7.4+"
400080
1
1337096451
"Memo - MR Arena 01 - 01 - 623.1203613"
0
Float
24051B40
v1.1
AOB Hardcore V1
FA 00 00 00 64 00 00 00 19 00 00 00 00 60 EA 45 00 80 3B 45 00 80 3B 44 00 80 BB 44 1E 00 00 00
TIMER
18 00 00 00 04 00 00 00 02 00 00 00 28 00 00 00 00 00 70 42 00 00 A0 41 00 00 00 00 00 00 00 00
Defense Cap
00 C0 41 45 00 00 E1 45 CD CC CC BE 00 00 00 00 00 00 00 C0 46 DF 91 BF CD CC CC BF 00 00 00 00
Damage Cap
00 00 A0 42 00 00 10 43 00 00 25 43 00 00 70 43 00 00 A0 43 00 00 F2 43 00 80 00 44 00 80 20 44 00 80 22 45
Wire Bug / Item Buff
00 00 00 00 00 80 56 40 00 00 00 00 00 A0 64 40 00 00 00 00 00 80 66 40 00 00 00 00 00 C0 72 40 00 00 00 00 00 90 75 40 00 00 00 00 00 20 AC 40
registerLuaFunctionHighlight('AOBScanModule')