Monster Hunter World (Steam)

Upload your cheat tables here (No requests)
cheukyi6
Noobzor
Noobzor
Posts: 11
Joined: Mon Sep 24, 2018 10:03 am
Reputation: 0

Re: Monster Hunter World (Steam)

Post by cheukyi6 »

Depleted wrote:
Thu Nov 01, 2018 6:34 pm
Oh this is gonna be great, apparently capcom have a check scan in place for players with KT gear before the event goes live and if you're found to be guillty of cheating they will perm ban not only your cd-key but also your mac address and hwid, it's all over reddit.

How many impatient fools are gonna lose out on £50 lmao!
definitely not true

How to use this cheat table?
  1. Install Cheat Engine
  2. Double-click the .CT file in order to open it.
  3. Click the PC icon in Cheat Engine in order to select the game process.
  4. Keep the list.
  5. Activate the trainer options by checking boxes or setting values from 0 to 1

brokenhopes
Expert Cheater
Expert Cheater
Posts: 87
Joined: Sat Sep 22, 2018 11:52 am
Reputation: 8

Re: Monster Hunter World (Steam)

Post by brokenhopes »

cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
This code is to replace the current enable code? Sorry still new to cheat engine. Also which options does it work with?

IcyPurpose99
Expert Cheater
Expert Cheater
Posts: 475
Joined: Fri Mar 03, 2017 6:04 pm
Reputation: 16

Re: Monster Hunter World (Steam)

Post by IcyPurpose99 »

cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
Glad someone is skilled to hunt this, cause I am not skilled enough to debug such a thing.

User avatar
TemptingIcarus
Expert Cheater
Expert Cheater
Posts: 405
Joined: Thu Aug 16, 2018 11:32 pm
Reputation: 54

Re: Monster Hunter World (Steam)

Post by TemptingIcarus »

Depleted wrote:
Thu Nov 01, 2018 6:34 pm
Oh this is gonna be great, apparently capcom have a check scan in place for players with KT gear before the event goes live and if you're found to be guillty of cheating they will perm ban not only your cd-key but also your mac address and hwid, it's all over reddit.

How many impatient fools are gonna lose out on £50 lmao!

You can kindly fuck off with your fear mongering bullshit. People have been cheating weapons and armor into the game, long before shit has come out. We need to start banning shit heads like this on sight. No need for it. Doesn't contribute anything to the discussion other than trying to be assholic.

Anyways. Is anyone else's models missing when they go to craft armor? Mine won't load. I'm thinking I need a new Armor File or a Chunk file. Cleaned up. I used the mods and I am guessing they weren't erased during the update and something got broken. Now I can't see armor models in the crafting menu.

Dallagen
Novice Cheater
Novice Cheater
Posts: 18
Joined: Mon Oct 15, 2018 6:26 am
Reputation: 10

Re: Monster Hunter World (Steam)

Post by Dallagen »

Which models? Depends on the set.

Eternallydissolved
Expert Cheater
Expert Cheater
Posts: 158
Joined: Fri Nov 10, 2017 11:19 pm
Reputation: 53

Re: Monster Hunter World (Steam)

Post by Eternallydissolved »

TemptingIcarus wrote:
Thu Nov 01, 2018 8:37 pm
Depleted wrote:
Thu Nov 01, 2018 6:34 pm
Oh this is gonna be great, apparently capcom have a check scan in place for players with KT gear before the event goes live and if you're found to be guillty of cheating they will perm ban not only your cd-key but also your mac address and hwid, it's all over reddit.

How many impatient fools are gonna lose out on £50 lmao!

You can kindly fuck off with your fear mongering bullshit. People have been cheating weapons and armor into the game, long before shit has come out. We need to start banning shit heads like this on sight. No need for it. Doesn't contribute anything to the discussion other than trying to be assholic.

Anyways. Is anyone else's models missing when they go to craft armor? Mine won't load. I'm thinking I need a new Armor File or a Chunk file. Cleaned up. I used the mods and I am guessing they weren't erased during the update and something got broken. Now I can't see armor models in the crafting menu.
I have opened an issue on the armor editor suite github page regarding this issue as i too get the insta crash when i try to craft armor with the mods. a work around for now, is to rename your nativepc folder, effectively removing your mods, creating said armor pieces and then naming your native pc folder back to the original name and reloading the game after saving. It is tied specifically to the modified armor file and the way that the last armor editor versions have rewritten the armor file i think.

User avatar
TemptingIcarus
Expert Cheater
Expert Cheater
Posts: 405
Joined: Thu Aug 16, 2018 11:32 pm
Reputation: 54

Re: Monster Hunter World (Steam)

Post by TemptingIcarus »

Dallagen wrote:
Thu Nov 01, 2018 8:45 pm
Which models? Depends on the set.
All of them. I go to craft them at the smithy and none of them load. I even took off my Layered Armor mod thinking that was the issue. Which wasn't the case. I then uninstalled/reinstalled and still, none of my models for armor LR or HR will load. The only armor that loads is the armor in my box.

User avatar
DamSF
Expert Cheater
Expert Cheater
Posts: 79
Joined: Mon Oct 30, 2017 7:37 pm
Reputation: 17

Re: Monster Hunter World (Steam)

Post by DamSF »

brokenhopes wrote:
Thu Nov 01, 2018 8:11 pm
cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
This code is to replace the current enable code? Sorry still new to cheat engine. Also which options does it work with?
I'm with you on that. Could someone explain how to implement this script on the table?

Dallagen
Novice Cheater
Novice Cheater
Posts: 18
Joined: Mon Oct 15, 2018 6:26 am
Reputation: 10

Re: Monster Hunter World (Steam)

Post by Dallagen »

Create a new script, throw this in, then check it.

Berserk Knight
Expert Cheater
Expert Cheater
Posts: 52
Joined: Wed Aug 22, 2018 9:49 pm
Reputation: 82

Re: Monster Hunter World (Steam)

Post by Berserk Knight »

cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
Hmm, that AOB doesn't exist in mine.


Also, update : added the missing KT weapons.


*Edit: Newest version here.
Attachments
MHW Character Editor.CT
(1.48 MiB) Downloaded 50 times
Last edited by Berserk Knight on Sun Nov 04, 2018 1:11 am, edited 1 time in total.

flawless
Noobzor
Noobzor
Posts: 9
Joined: Thu Nov 01, 2018 11:59 pm
Reputation: 0

Re: Monster Hunter World (Steam)

Post by flawless »

So any table for infinite use items? like ancient potions or so?

User avatar
DamSF
Expert Cheater
Expert Cheater
Posts: 79
Joined: Mon Oct 30, 2017 7:37 pm
Reputation: 17

Re: Monster Hunter World (Steam)

Post by DamSF »

Berserk Knight wrote:
Thu Nov 01, 2018 11:12 pm
cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
Hmm, that AOB doesn't exist in mine.


Also, update : added the missing KT weapons.
Yeah, that happened to me too. I did a little search and found an almost identical AOB in the address 14685086B (only the last byte was different).

User avatar
Absunine
What is cheating?
What is cheating?
Posts: 1
Joined: Fri Nov 02, 2018 12:10 am
Reputation: 0

Re: Monster Hunter World (Steam)

Post by Absunine »

So does this temp-bypass work enough to play? I've been watching for a little while now.

Didn't know I hadn't created an account here either.

User avatar
DamSF
Expert Cheater
Expert Cheater
Posts: 79
Joined: Mon Oct 30, 2017 7:37 pm
Reputation: 17

Re: Monster Hunter World (Steam)

Post by DamSF »

Absunine wrote:
Fri Nov 02, 2018 12:14 am
So does this temp-bypass work enough to play? I've been watching for a little while now.

Didn't know I hadn't created an account here either.
I've tested with Maxed Slots, 1 Jewel Max Skill, Inf Lucky Voucher and Max Bow Charge Weapon Buff active at the same time and it still crashes. I'll test them individually later.

brokenhopes
Expert Cheater
Expert Cheater
Posts: 87
Joined: Sat Sep 22, 2018 11:52 am
Reputation: 8

Re: Monster Hunter World (Steam)

Post by brokenhopes »

cedricvdg wrote:
Thu Nov 01, 2018 7:17 pm
After the update MHW implemented a new Denuvo method of checksumming it's own memory. I've spent some time debugging the new version and I think I've figured out a way to bypass Denuvo again.

I'm not sure if this will cover all the checks in one go, please let me know if using this script resolves any crashes.

EDIT: Ok after further testing, this prevents some crashes, not all. The system still works differently from previous versions. Will investigate further.

Code: Select all

{ Game   : MonsterHunterWorld.exe
  Version: 
  Date   : 2018-11-01
  Author : Cedric

  Denuvo Bypass
}

[ENABLE]

aobscanmodule(denuvobypass,MonsterHunterWorld.exe,41 5A 0F 94 C0) // should be unique

denuvobypass+2:
  mov al, 1
  nop
registersymbol(denuvobypass)

[DISABLE]

denuvobypass+2:
  db 0F 94 C0

unregistersymbol(denuvobypass)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+108890A7

"MonsterHunterWorld.exe"+10889084: 4C 89 D0                 -  mov rax,r10
"MonsterHunterWorld.exe"+10889087: 49 21 F2                 -  and r10,rsi
"MonsterHunterWorld.exe"+1088908A: 49 D1 E2                 -  shl r10,1
"MonsterHunterWorld.exe"+1088908D: 48 31 F0                 -  xor rax,rsi
"MonsterHunterWorld.exe"+10889090: 49 01 C2                 -  add r10,rax
"MonsterHunterWorld.exe"+10889093: 58                       -  pop rax
"MonsterHunterWorld.exe"+10889094: 48 83 34 24 FF           -  xor qword ptr [rsp],-01
"MonsterHunterWorld.exe"+10889099: 48 83 2C 24 FF           -  sub qword ptr [rsp],-01
"MonsterHunterWorld.exe"+1088909E: 4C 03 14 24              -  add r10,[rsp]
"MonsterHunterWorld.exe"+108890A2: 48 8D 64 24 08           -  lea rsp,[rsp+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+108890A7: 41 5A                    -  pop r10
"MonsterHunterWorld.exe"+108890A9: 0F 94 C0                 -  sete al
// ---------- DONE INJECTING  ----------
"MonsterHunterWorld.exe"+108890AC: E9 10 B5 CB 02           -  jmp MonsterHunterWorld.exe+135445C1
"MonsterHunterWorld.exe"+108890B1: 4D 29 C0                 -  sub r8,r8
"MonsterHunterWorld.exe"+108890B4: 45 8A 83 70 09 00 00     -  mov r8l,[r11+00000970]
"MonsterHunterWorld.exe"+108890BB: 49 C7 C7 00 00 00 00     -  mov r15,00000000
"MonsterHunterWorld.exe"+108890C2: BF 00 00 00 00           -  mov edi,00000000
"MonsterHunterWorld.exe"+108890C7: 49 C1 E7 20              -  shl r15,20
"MonsterHunterWorld.exe"+108890CB: 4C 31 FF                 -  xor rdi,r15
"MonsterHunterWorld.exe"+108890CE: 57                       -  push rdi
"MonsterHunterWorld.exe"+108890CF: 49 C7 C4 AD AC 47 AF     -  mov r12,AF47ACAD
"MonsterHunterWorld.exe"+108890D6: 4F 8D 24 23              -  lea r12,[r11+r12]
}
hmmm not sure if I am doing it correctly but its not even enabling for me aka the red cross in the box when you turn something on.
what I did was go into game, enable the first one as per normal and tried to enable the code above.

Image

Post Reply