Monster Hunter World (Steam)

Upload your cheat tables here (No requests)
PapricaJim
Cheater
Cheater
Posts: 26
Joined: Fri Oct 05, 2018 6:39 am
Reputation: 4

Re: Monster Hunter World (Steam)

Post by PapricaJim »

Shirokaido wrote:
Fri Oct 05, 2018 5:21 am
Y'all might wanna make sure everything is properly updated. I'm running both mods and CE and I'm having absolutely no issue playing the events. I don't try to do multiplayer, so it might just have to do with that. Solo, tho, I'm super fine.
Not the issue, all updated but also getting disconnects on select functions. (EDIT: Same thing happens solo and coop)
The ones that I found causing it so far are:
Inf Health - Disconnect
Wound & Kill all Large Monsters - Disconnect

However super buffed, teleport and most other things still work fine, so do damage modifiers, e.g doing 1 million damage in 1 hit kind of things.

How to use this cheat table?
  1. Install Cheat Engine
  2. Double-click the .CT file in order to open it.
  3. Click the PC icon in Cheat Engine in order to select the game process.
  4. Keep the list.
  5. Activate the trainer options by checking boxes or setting values from 0 to 1

rock2rythm
What is cheating?
What is cheating?
Posts: 1
Joined: Fri Oct 05, 2018 6:51 am
Reputation: 0

Re: Monster Hunter World (Steam)

Post by rock2rythm »

I am loving this script although I don't use it much. It helped me remove the grind so that I can actually enjoy this game.

I wanted to know if there is an issue with the materials increase script because it skips deviljho scales Everytime(not really an issue but still)
And also with the autumn festival the event materials and items are not being changed specifically autumn harvest ticket and the autumn harvest fireworks.
As far as I can tell the others get updated with ce.

Thank you for awesome work guys

bliseer
Cheater
Cheater
Posts: 34
Joined: Fri Sep 21, 2018 2:30 pm
Reputation: 16

Re: Monster Hunter World (Steam)

Post by bliseer »

please~!!! inf free character edit voucher!!

User avatar
Memiomy
Expert Cheater
Expert Cheater
Posts: 229
Joined: Sat Apr 29, 2017 7:59 am
Reputation: 13

Re: Monster Hunter World (Steam)

Post by Memiomy »

inf item use doesn't work.

Ensioc
Cheater
Cheater
Posts: 31
Joined: Sun Feb 25, 2018 8:01 pm
Reputation: 3

Re: Monster Hunter World (Steam)

Post by Ensioc »

bliseer wrote:
Fri Oct 05, 2018 10:14 am
please~!!! inf free character edit voucher!!
I agree.

IcyPurpose99
Expert Cheater
Expert Cheater
Posts: 470
Joined: Fri Mar 03, 2017 6:04 pm
Reputation: 16

Re: Monster Hunter World (Steam)

Post by IcyPurpose99 »

Looks like they added an anti-cheat disconnect setup, you will be disconnected by using most functions that are transferred over peer to peer.

My Scripts / Pointers Updated:
View Code
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>4340</ID>
<Description>"[Marcus101RR's Scripts]"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<Color>FF0000</Color>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>4227</ID>
<Description>"Charm Editor"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR

This script allows editing for active charm.
}

[ENABLE]

aobscanmodule(charmeditor,MonsterHunterWorld.exe,4C 8B 8C C1 18 5E 00 00) // should be unique
alloc(newmem,$1000,charmeditor)

label(code)
label(return)
label(charmIdi)

registersymbol(charmeditor)
registersymbol(charmIdi)

newmem:

code:
mov r9,[rcx+rax*8+00005E18]
mov [charmIdi],r9
jmp return

charmIdi:
dq 0

charmeditor:
jmp newmem
nop
nop
nop
return:

[DISABLE]

charmeditor:
db 4C 8B 8C C1 18 5E 00 00

unregistersymbol(charmeditor)
dealloc(newmem)
unregistersymbol(charmIdi)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+1A6CC7

"MonsterHunterWorld.exe"+1A6CA2: C3 - ret
"MonsterHunterWorld.exe"+1A6CA3: 41 81 F8 2D 01 00 00 - cmp r8d,0000012D
"MonsterHunterWorld.exe"+1A6CAA: 73 23 - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CAC: 49 63 C0 - movsxd rax,r8d
"MonsterHunterWorld.exe"+1A6CAF: 4C 8B 8C C1 48 4B 00 00 - mov r9,[rcx+rax*8+00004B48]
"MonsterHunterWorld.exe"+1A6CB7: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CBA: C3 - ret
"MonsterHunterWorld.exe"+1A6CBB: 41 81 F8 2C 01 00 00 - cmp r8d,0000012C
"MonsterHunterWorld.exe"+1A6CC2: 73 0B - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CC4: 49 63 C0 - movsxd rax,r8d
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+1A6CC7: 4C 8B 8C C1 18 5E 00 00 - mov r9,[rcx+rax*8+00005E18]
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+1A6CCF: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CD2: C3 - ret
"MonsterHunterWorld.exe"+1A6CD3: 90 - nop
"MonsterHunterWorld.exe"+1A6CD4: 42 6C - insb
"MonsterHunterWorld.exe"+1A6CD6: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CD8: 5B - pop rbx
"MonsterHunterWorld.exe"+1A6CD9: 6C - insb
"MonsterHunterWorld.exe"+1A6CDA: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CDC: 73 6C - jae MonsterHunterWorld.exe+1A6D4A
"MonsterHunterWorld.exe"+1A6CDE: 1A 00 - sbb al,byte ptr [rax]
}
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4234</ID>
<Description>"Code"</Description>
<VariableType>Array of byte</VariableType>
<ByteLength>16</ByteLength>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
<Hotkeys>
<Hotkey>
<Action>Set Value</Action>
<Keys>
<Key>17</Key>
<Key>97</Key>
</Keys>
<Value>3 3 3 0 0 0 0 21 0 22 0 23 0 0 0 0</Value>
<ID>0</ID>
</Hotkey>
</Hotkeys>
</CheatEntry>
<CheatEntry>
<ID>5950</ID>
<Description>"No description"</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>40</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4228</ID>
<Description>"Skill 1"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3A</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4229</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4232</ID>
<Description>"Skill 2"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3C</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4233</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>34</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4230</ID>
<Description>"Skill 3"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3E</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4231</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>35</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>2</ID>
<Description>"Set Item Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-11
Author : Marcus101RR

This script does blah blah blah
}

define(address,"MonsterHunterWorld.exe"+144BF4C)
define(bytes,8B 48 0C 89 0A)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"MonsterHunterWorld.exe"+144BF4C)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#50
jge @f
mov [rax+0C],#50
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

address:
jmp newmem
return:

[DISABLE]

address:
db bytes
// mov ecx,[rax+0C]
// mov [rdx],ecx

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AC1C

"MonsterHunterWorld.exe"+144ABFF: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+144AC02: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC04: E8 17 11 80 FF - call MonsterHunterWorld.exe+C4BD20
"MonsterHunterWorld.exe"+144AC09: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AC0C: 74 13 - je MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC0E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AC11: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AC13: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+144AC16: 75 09 - jne MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC18: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AC1C: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+144AC1F: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AC21: 48 8B 0D 90 CC 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B278B8]
"MonsterHunterWorld.exe"+144AC28: FF C3 - inc ebx
"MonsterHunterWorld.exe"+144AC2A: E8 F1 A5 30 00 - call MonsterHunterWorld.exe+1755220
"MonsterHunterWorld.exe"+144AC2F: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+144AC32: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC34: E8 C7 0F 80 FF - call MonsterHunterWorld.exe+C4BC00
"MonsterHunterWorld.exe"+144AC39: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+144AC3B: 72 B3 - jb MonsterHunterWorld.exe+144ABF0
"MonsterHunterWorld.exe"+144AC3D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+144AC42: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>5963</ID>
<Description>"Set Item Box Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-10-05
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(boxCarry,MonsterHunterWorld.exe,8B 48 0C 89 0A) // should be unique
alloc(newmem,$1000,boxCarry)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#300
jge @f
mov [rax+0C],#300
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

boxCarry:
jmp newmem
return:
registersymbol(boxCarry)

[DISABLE]

boxCarry:
db 8B 48 0C 89 0A

unregistersymbol(boxCarry)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+14773BC

"MonsterHunterWorld.exe"+147739F: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+14773A2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773A4: E8 97 D9 7F FF - call MonsterHunterWorld.exe+C74D40
"MonsterHunterWorld.exe"+14773A9: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+14773AC: 74 13 - je MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773AE: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+14773B1: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+14773B3: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+14773B6: 75 09 - jne MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773B8: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+14773BC: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+14773BF: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+14773C1: 48 8B 0D 80 28 70 02 - mov rcx,[MonsterHunterWorld.exe+3B79C48]
"MonsterHunterWorld.exe"+14773C8: FF C3 - inc ebx
"MonsterHunterWorld.exe"+14773CA: E8 71 E5 30 00 - call MonsterHunterWorld.exe+1785940
"MonsterHunterWorld.exe"+14773CF: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+14773D2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773D4: E8 47 D8 7F FF - call MonsterHunterWorld.exe+C74C20
"MonsterHunterWorld.exe"+14773D9: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+14773DB: 72 B3 - jb MonsterHunterWorld.exe+1477390
"MonsterHunterWorld.exe"+14773DD: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+14773E2: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4448</ID>
<Description>"Change Max Carry"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-24
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(maxCap,MonsterHunterWorld.exe,0F BE 48 12 EB 03) // should be unique
alloc(newmem,$1000,maxCap)

label(code)
label(return)

label(curCap)
registersymbol(curCap)
registersymbol(maxCap)

newmem:
mov ecx,[curCap]
mov [rax+12],ecx
code:
movsx ecx,byte ptr [rax+12]
jmp MonsterHunterWorld.exe+1477502
jmp return

curCap:
dq 0A

maxCap:
jmp newmem
nop
return:


[DISABLE]

maxCap:
db 0F BE 48 12 EB 03

unregistersymbol(maxCap)
dealloc(newmem)
unregistersymbol(curCap)
{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AD79

"MonsterHunterWorld.exe"+144AD57: 48 8B 4F 08 - mov rcx,[rdi+08]
"MonsterHunterWorld.exe"+144AD5B: C6 01 01 - mov byte ptr [rcx],01
"MonsterHunterWorld.exe"+144AD5E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AD61: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AD63: 48 8B 0D 46 4A 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B1F7B0]
"MonsterHunterWorld.exe"+144AD6A: 48 85 C9 - test rcx,rcx
"MonsterHunterWorld.exe"+144AD6D: 74 10 - je MonsterHunterWorld.exe+144AD7F
"MonsterHunterWorld.exe"+144AD6F: E8 8C 6B 16 00 - call MonsterHunterWorld.exe+15B1900
"MonsterHunterWorld.exe"+144AD74: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AD77: 74 06 - je MonsterHunterWorld.exe+144AD7F
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AD79: 0F BE 48 12 - movsx ecx,byte ptr [rax+12]
"MonsterHunterWorld.exe"+144AD7D: EB 03 - jmp MonsterHunterWorld.exe+144AD82
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AD7F: 41 8B CE - mov ecx,r14d
"MonsterHunterWorld.exe"+144AD82: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD86: 2B 4B 0C - sub ecx,[rbx+0C]
"MonsterHunterWorld.exe"+144AD89: 89 08 - mov [rax],ecx
"MonsterHunterWorld.exe"+144AD8B: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD8F: 44 39 30 - cmp [rax],r14d
"MonsterHunterWorld.exe"+144AD92: 7D 10 - jnl MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD94: 44 89 30 - mov [rax],r14d
"MonsterHunterWorld.exe"+144AD97: EB 0B - jmp MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD99: 85 C0 - test eax,eax
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4328</ID>
<Description>"Static Data (AOB)"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR
}

[ENABLE]

aobscanmodule(conitemparam,MonsterHunterWorld.exe,F3 0F 10 80 A8 00 00 00 48)
alloc(newmem,$1000,conitemparam)

label(code)
label(return)
label(itemparamp)

registersymbol(conitemparam)
registersymbol(itemparamp)

newmem:
mov [itemparamp],rax

code:
movss xmm0,[rax+000000A8]
jmp return

itemparamp:
dq 0

conitemparam:
jmp newmem
nop
nop
nop
return:

[DISABLE]

conitemparam:
db F3 0F 10 80 A8 00 00 00

unregistersymbol(conitemparam)
unregistersymbol(itemparamp)
dealloc(newmem)
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4329</ID>
<Description>"Might Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>10E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4330</ID>
<Description>"Might Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>110</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4331</ID>
<Description>"Might Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>112</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4332</ID>
<Description>"Might Pill Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>114</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4333</ID>
<Description>"Adamant Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>116</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4334</ID>
<Description>"Adamant Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>118</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4335</ID>
<Description>"Adamant Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>11A</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4336</ID>
<Description>"Hardshell Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12C</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4337</ID>
<Description>"Hardshell Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4338</ID>
<Description>"Demon Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>130</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4339</ID>
<Description>"Demon Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>132</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5488</ID>
<Description>"Pointers"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5492</ID>
<Description>"Data"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5491</ID>
<Description>"Max Health"</Description>
<LastState Value="200" RealAddress="06999C3C"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>2EC</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5493</ID>
<Description>"Max Stamina"</Description>
<LastState Value="200" RealAddress="06999C54"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>304</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5498</ID>
<Description>"Health"</Description>
<LastState Value="250" RealAddress="BBB2FB34"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>64</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5497</ID>
<Description>"Max"</Description>
<LastState Value="250" RealAddress="BBB2FB30"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>60</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5499</ID>
<Description>"Base"</Description>
<LastState Value="200" RealAddress="C9B072A4"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>7204</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5500</ID>
<Description>"Stamina"</Description>
<LastState Value="200" RealAddress="BBB2FC1C"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>14C</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5501</ID>
<Description>"Max"</Description>
<LastState Value="200" RealAddress="BBB2FC24"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>154</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatTable>

User avatar
kyoski
Expert Cheater
Expert Cheater
Posts: 95
Joined: Tue Jun 05, 2018 9:19 am
Reputation: 15

Re: Monster Hunter World (Steam)

Post by kyoski »

fun note, was browsing through the items lists and some unavailable items show up on pc now when swapped out (specifically behemoth crafting items)

along with some sets having proper models, like the diver set, arch tempered vaal set, arch tempered kirin set, etc. (meaning you can equip/craft or transmog them now)
Marcus101RR wrote:
Fri Oct 05, 2018 6:26 pm
Looks like they added an anti-cheat disconnect setup, you will be disconnected by using most functions that are transferred over peer to peer.
are you sure there's an anti-cheat disconnect?
anything specific that would dc in the table?
I don't condone cheating online, but for testing purposes me and a friend were trying table functions and have yet to dc.

Eternallydissolved
Expert Cheater
Expert Cheater
Posts: 158
Joined: Fri Nov 10, 2017 11:19 pm
Reputation: 53

Re: Monster Hunter World (Steam)

Post by Eternallydissolved »

Marcus101RR wrote:
Fri Oct 05, 2018 6:26 pm
Looks like they added an anti-cheat disconnect setup, you will be disconnected by using most functions that are transferred over peer to peer.

My Scripts / Pointers Updated:
View Code
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>4340</ID>
<Description>"[Marcus101RR's Scripts]"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<Color>FF0000</Color>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>4227</ID>
<Description>"Charm Editor"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR

This script allows editing for active charm.
}

[ENABLE]

aobscanmodule(charmeditor,MonsterHunterWorld.exe,4C 8B 8C C1 18 5E 00 00) // should be unique
alloc(newmem,$1000,charmeditor)

label(code)
label(return)
label(charmIdi)

registersymbol(charmeditor)
registersymbol(charmIdi)

newmem:

code:
mov r9,[rcx+rax*8+00005E18]
mov [charmIdi],r9
jmp return

charmIdi:
dq 0

charmeditor:
jmp newmem
nop
nop
nop
return:

[DISABLE]

charmeditor:
db 4C 8B 8C C1 18 5E 00 00

unregistersymbol(charmeditor)
dealloc(newmem)
unregistersymbol(charmIdi)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+1A6CC7

"MonsterHunterWorld.exe"+1A6CA2: C3 - ret
"MonsterHunterWorld.exe"+1A6CA3: 41 81 F8 2D 01 00 00 - cmp r8d,0000012D
"MonsterHunterWorld.exe"+1A6CAA: 73 23 - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CAC: 49 63 C0 - movsxd rax,r8d
"MonsterHunterWorld.exe"+1A6CAF: 4C 8B 8C C1 48 4B 00 00 - mov r9,[rcx+rax*8+00004B48]
"MonsterHunterWorld.exe"+1A6CB7: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CBA: C3 - ret
"MonsterHunterWorld.exe"+1A6CBB: 41 81 F8 2C 01 00 00 - cmp r8d,0000012C
"MonsterHunterWorld.exe"+1A6CC2: 73 0B - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CC4: 49 63 C0 - movsxd rax,r8d
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+1A6CC7: 4C 8B 8C C1 18 5E 00 00 - mov r9,[rcx+rax*8+00005E18]
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+1A6CCF: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CD2: C3 - ret
"MonsterHunterWorld.exe"+1A6CD3: 90 - nop
"MonsterHunterWorld.exe"+1A6CD4: 42 6C - insb
"MonsterHunterWorld.exe"+1A6CD6: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CD8: 5B - pop rbx
"MonsterHunterWorld.exe"+1A6CD9: 6C - insb
"MonsterHunterWorld.exe"+1A6CDA: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CDC: 73 6C - jae MonsterHunterWorld.exe+1A6D4A
"MonsterHunterWorld.exe"+1A6CDE: 1A 00 - sbb al,byte ptr [rax]
}
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4234</ID>
<Description>"Code"</Description>
<VariableType>Array of byte</VariableType>
<ByteLength>16</ByteLength>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
<Hotkeys>
<Hotkey>
<Action>Set Value</Action>
<Keys>
<Key>17</Key>
<Key>97</Key>
</Keys>
<Value>3 3 3 0 0 0 0 21 0 22 0 23 0 0 0 0</Value>
<ID>0</ID>
</Hotkey>
</Hotkeys>
</CheatEntry>
<CheatEntry>
<ID>5950</ID>
<Description>"No description"</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>40</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4228</ID>
<Description>"Skill 1"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3A</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4229</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4232</ID>
<Description>"Skill 2"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3C</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4233</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>34</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4230</ID>
<Description>"Skill 3"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3E</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4231</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>35</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>2</ID>
<Description>"Set Item Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-11
Author : Marcus101RR

This script does blah blah blah
}

define(address,"MonsterHunterWorld.exe"+144BF4C)
define(bytes,8B 48 0C 89 0A)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"MonsterHunterWorld.exe"+144BF4C)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#50
jge @f
mov [rax+0C],#50
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

address:
jmp newmem
return:

[DISABLE]

address:
db bytes
// mov ecx,[rax+0C]
// mov [rdx],ecx

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AC1C

"MonsterHunterWorld.exe"+144ABFF: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+144AC02: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC04: E8 17 11 80 FF - call MonsterHunterWorld.exe+C4BD20
"MonsterHunterWorld.exe"+144AC09: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AC0C: 74 13 - je MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC0E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AC11: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AC13: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+144AC16: 75 09 - jne MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC18: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AC1C: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+144AC1F: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AC21: 48 8B 0D 90 CC 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B278B8]
"MonsterHunterWorld.exe"+144AC28: FF C3 - inc ebx
"MonsterHunterWorld.exe"+144AC2A: E8 F1 A5 30 00 - call MonsterHunterWorld.exe+1755220
"MonsterHunterWorld.exe"+144AC2F: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+144AC32: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC34: E8 C7 0F 80 FF - call MonsterHunterWorld.exe+C4BC00
"MonsterHunterWorld.exe"+144AC39: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+144AC3B: 72 B3 - jb MonsterHunterWorld.exe+144ABF0
"MonsterHunterWorld.exe"+144AC3D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+144AC42: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>5963</ID>
<Description>"Set Item Box Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-10-05
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(boxCarry,MonsterHunterWorld.exe,8B 48 0C 89 0A) // should be unique
alloc(newmem,$1000,boxCarry)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#300
jge @f
mov [rax+0C],#300
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

boxCarry:
jmp newmem
return:
registersymbol(boxCarry)

[DISABLE]

boxCarry:
db 8B 48 0C 89 0A

unregistersymbol(boxCarry)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+14773BC

"MonsterHunterWorld.exe"+147739F: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+14773A2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773A4: E8 97 D9 7F FF - call MonsterHunterWorld.exe+C74D40
"MonsterHunterWorld.exe"+14773A9: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+14773AC: 74 13 - je MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773AE: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+14773B1: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+14773B3: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+14773B6: 75 09 - jne MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773B8: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+14773BC: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+14773BF: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+14773C1: 48 8B 0D 80 28 70 02 - mov rcx,[MonsterHunterWorld.exe+3B79C48]
"MonsterHunterWorld.exe"+14773C8: FF C3 - inc ebx
"MonsterHunterWorld.exe"+14773CA: E8 71 E5 30 00 - call MonsterHunterWorld.exe+1785940
"MonsterHunterWorld.exe"+14773CF: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+14773D2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773D4: E8 47 D8 7F FF - call MonsterHunterWorld.exe+C74C20
"MonsterHunterWorld.exe"+14773D9: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+14773DB: 72 B3 - jb MonsterHunterWorld.exe+1477390
"MonsterHunterWorld.exe"+14773DD: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+14773E2: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4448</ID>
<Description>"Change Max Carry"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-24
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(maxCap,MonsterHunterWorld.exe,0F BE 48 12 EB 03) // should be unique
alloc(newmem,$1000,maxCap)

label(code)
label(return)

label(curCap)
registersymbol(curCap)
registersymbol(maxCap)

newmem:
mov ecx,[curCap]
mov [rax+12],ecx
code:
movsx ecx,byte ptr [rax+12]
jmp MonsterHunterWorld.exe+1477502
jmp return

curCap:
dq 0A

maxCap:
jmp newmem
nop
return:


[DISABLE]

maxCap:
db 0F BE 48 12 EB 03

unregistersymbol(maxCap)
dealloc(newmem)
unregistersymbol(curCap)
{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AD79

"MonsterHunterWorld.exe"+144AD57: 48 8B 4F 08 - mov rcx,[rdi+08]
"MonsterHunterWorld.exe"+144AD5B: C6 01 01 - mov byte ptr [rcx],01
"MonsterHunterWorld.exe"+144AD5E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AD61: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AD63: 48 8B 0D 46 4A 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B1F7B0]
"MonsterHunterWorld.exe"+144AD6A: 48 85 C9 - test rcx,rcx
"MonsterHunterWorld.exe"+144AD6D: 74 10 - je MonsterHunterWorld.exe+144AD7F
"MonsterHunterWorld.exe"+144AD6F: E8 8C 6B 16 00 - call MonsterHunterWorld.exe+15B1900
"MonsterHunterWorld.exe"+144AD74: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AD77: 74 06 - je MonsterHunterWorld.exe+144AD7F
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AD79: 0F BE 48 12 - movsx ecx,byte ptr [rax+12]
"MonsterHunterWorld.exe"+144AD7D: EB 03 - jmp MonsterHunterWorld.exe+144AD82
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AD7F: 41 8B CE - mov ecx,r14d
"MonsterHunterWorld.exe"+144AD82: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD86: 2B 4B 0C - sub ecx,[rbx+0C]
"MonsterHunterWorld.exe"+144AD89: 89 08 - mov [rax],ecx
"MonsterHunterWorld.exe"+144AD8B: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD8F: 44 39 30 - cmp [rax],r14d
"MonsterHunterWorld.exe"+144AD92: 7D 10 - jnl MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD94: 44 89 30 - mov [rax],r14d
"MonsterHunterWorld.exe"+144AD97: EB 0B - jmp MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD99: 85 C0 - test eax,eax
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4328</ID>
<Description>"Static Data (AOB)"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR
}

[ENABLE]

aobscanmodule(conitemparam,MonsterHunterWorld.exe,F3 0F 10 80 A8 00 00 00 48)
alloc(newmem,$1000,conitemparam)

label(code)
label(return)
label(itemparamp)

registersymbol(conitemparam)
registersymbol(itemparamp)

newmem:
mov [itemparamp],rax

code:
movss xmm0,[rax+000000A8]
jmp return

itemparamp:
dq 0

conitemparam:
jmp newmem
nop
nop
nop
return:

[DISABLE]

conitemparam:
db F3 0F 10 80 A8 00 00 00

unregistersymbol(conitemparam)
unregistersymbol(itemparamp)
dealloc(newmem)
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4329</ID>
<Description>"Might Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>10E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4330</ID>
<Description>"Might Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>110</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4331</ID>
<Description>"Might Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>112</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4332</ID>
<Description>"Might Pill Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>114</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4333</ID>
<Description>"Adamant Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>116</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4334</ID>
<Description>"Adamant Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>118</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4335</ID>
<Description>"Adamant Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>11A</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4336</ID>
<Description>"Hardshell Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12C</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4337</ID>
<Description>"Hardshell Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4338</ID>
<Description>"Demon Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>130</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4339</ID>
<Description>"Demon Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>132</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5488</ID>
<Description>"Pointers"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5492</ID>
<Description>"Data"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5491</ID>
<Description>"Max Health"</Description>
<LastState Value="200" RealAddress="06999C3C"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>2EC</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5493</ID>
<Description>"Max Stamina"</Description>
<LastState Value="200" RealAddress="06999C54"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>304</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5498</ID>
<Description>"Health"</Description>
<LastState Value="250" RealAddress="BBB2FB34"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>64</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5497</ID>
<Description>"Max"</Description>
<LastState Value="250" RealAddress="BBB2FB30"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>60</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5499</ID>
<Description>"Base"</Description>
<LastState Value="200" RealAddress="C9B072A4"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>7204</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5500</ID>
<Description>"Stamina"</Description>
<LastState Value="200" RealAddress="BBB2FC1C"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>14C</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5501</ID>
<Description>"Max"</Description>
<LastState Value="200" RealAddress="BBB2FC24"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>154</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatTable>
The mod files however are not affected by the anti-cheat you have found. It seems like if values are altered in memory, that disconnects do occur as i have experienced those myself even before this update, but it seems more values may have been included this time in what triggers it. either that, or the alteration to the memory may be causing the network protocol to glitch out causing a disconnect.

EFHT
Noobzor
Noobzor
Posts: 8
Joined: Thu Sep 20, 2018 12:32 pm
Reputation: 0

Re: Monster Hunter World (Steam)

Post by EFHT »

Marcus101RR wrote:
Fri Oct 05, 2018 6:26 pm
Looks like they added an anti-cheat disconnect setup, you will be disconnected by using most functions that are transferred over peer to peer.

My Scripts / Pointers Updated:
View Code
<?xml version="1.0" encoding="utf-8"?>
<CheatTable>
<CheatEntries>
<CheatEntry>
<ID>4340</ID>
<Description>"[Marcus101RR's Scripts]"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<Color>FF0000</Color>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>4227</ID>
<Description>"Charm Editor"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR

This script allows editing for active charm.
}

[ENABLE]

aobscanmodule(charmeditor,MonsterHunterWorld.exe,4C 8B 8C C1 18 5E 00 00) // should be unique
alloc(newmem,$1000,charmeditor)

label(code)
label(return)
label(charmIdi)

registersymbol(charmeditor)
registersymbol(charmIdi)

newmem:

code:
mov r9,[rcx+rax*8+00005E18]
mov [charmIdi],r9
jmp return

charmIdi:
dq 0

charmeditor:
jmp newmem
nop
nop
nop
return:

[DISABLE]

charmeditor:
db 4C 8B 8C C1 18 5E 00 00

unregistersymbol(charmeditor)
dealloc(newmem)
unregistersymbol(charmIdi)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+1A6CC7

"MonsterHunterWorld.exe"+1A6CA2: C3 - ret
"MonsterHunterWorld.exe"+1A6CA3: 41 81 F8 2D 01 00 00 - cmp r8d,0000012D
"MonsterHunterWorld.exe"+1A6CAA: 73 23 - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CAC: 49 63 C0 - movsxd rax,r8d
"MonsterHunterWorld.exe"+1A6CAF: 4C 8B 8C C1 48 4B 00 00 - mov r9,[rcx+rax*8+00004B48]
"MonsterHunterWorld.exe"+1A6CB7: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CBA: C3 - ret
"MonsterHunterWorld.exe"+1A6CBB: 41 81 F8 2C 01 00 00 - cmp r8d,0000012C
"MonsterHunterWorld.exe"+1A6CC2: 73 0B - jae MonsterHunterWorld.exe+1A6CCF
"MonsterHunterWorld.exe"+1A6CC4: 49 63 C0 - movsxd rax,r8d
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+1A6CC7: 4C 8B 8C C1 18 5E 00 00 - mov r9,[rcx+rax*8+00005E18]
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+1A6CCF: 49 8B C1 - mov rax,r9
"MonsterHunterWorld.exe"+1A6CD2: C3 - ret
"MonsterHunterWorld.exe"+1A6CD3: 90 - nop
"MonsterHunterWorld.exe"+1A6CD4: 42 6C - insb
"MonsterHunterWorld.exe"+1A6CD6: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CD8: 5B - pop rbx
"MonsterHunterWorld.exe"+1A6CD9: 6C - insb
"MonsterHunterWorld.exe"+1A6CDA: 1A 00 - sbb al,byte ptr [rax]
"MonsterHunterWorld.exe"+1A6CDC: 73 6C - jae MonsterHunterWorld.exe+1A6D4A
"MonsterHunterWorld.exe"+1A6CDE: 1A 00 - sbb al,byte ptr [rax]
}
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4234</ID>
<Description>"Code"</Description>
<VariableType>Array of byte</VariableType>
<ByteLength>16</ByteLength>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
<Hotkeys>
<Hotkey>
<Action>Set Value</Action>
<Keys>
<Key>17</Key>
<Key>97</Key>
</Keys>
<Value>3 3 3 0 0 0 0 21 0 22 0 23 0 0 0 0</Value>
<ID>0</ID>
</Hotkey>
</Hotkeys>
</CheatEntry>
<CheatEntry>
<ID>5950</ID>
<Description>"No description"</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>40</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4228</ID>
<Description>"Skill 1"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3A</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4229</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>33</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4232</ID>
<Description>"Skill 2"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3C</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4233</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>34</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>4230</ID>
<Description>"Skill 3"</Description>
<DropDownList DisplayValueAsItem="1">00:None
01:Poison Resistance
02:Paralysis Resistance
03:Sleep Resistance
04:Stun Resistance
05:Muck Resistance
06:Blast Resistance
07:Bleeding Resistance
08:Iron Skin
09:Res Down Protection
0B:Earplugs
0C:Windproof
0D:Tremor Resistance
0E:Dungmaster
10:Effluvial Expert
11:Heat Guard
13:Attack Boost
14:Defense Boost
15:Health Boost
16:Recovery Up
17:Recovery Speed
18:Fire Resistance
19:Water Resistance
1A:Ice Resistance
1B:Thunder Resistance
1C:Dragon Resistance
1D:Blight Resistance
1E:Fire Attack
1F:Water Attack
20:Ice Attack
21:Thunder Attack
22:Dragon Attack
23:Poison Attack
24:Paralysis Attack
25:Sleep Attack
26:Blast Attack
27:Normal Attack
28:Piercing Shots
29:Spread/Power Shots
2A:Poison Functionality
2B:Para Functionality
2C:Sleep Functionality
2D:Power Functionality
2E:Blast Functionality
2F:Free Elem/Ammo Up
30:Critical Eye
31:Critical Boost
32:Weakness Exploit
33:Repeat Offender
34:Focus
35:Powert Prolonger
36:Handicraft
37:Critical Draw
38:Partbreaker
39:Slugger
3A:Stamina Thief
3B:Master Mounter
3C:Airborne
3D:Latent Power
3E:Agitator
3F:Peak Performance
40:Heroics
41:Fortify
42:Resentment
43:Resuscitate
44:Horn Maestro
45:Capacity Boost
46:Special Ammo Boost
47:Artillery
48:Heavy Artillery
49:Marathon Runner
4A:Constitution
4B:Leap of Faith
4C:Stamina Surge
4D:Hunger Resistance
4E:Evade Window
4F:Evade Extender
50:Guard
51:Quick Sheath
52:Wide-Range
53:Item Prolonger
54:Free Meal
55:Speed Eating
56:Speed Sharpening
58:Bombardier
5A:Mushroomancer
5B:Master Fisher
5C:BBQ Master
5D:Pro Transporter
5E:Master Gatherer
5F:Honey Hunter
60:Carving Pro
61:Divine Blessing
62:Palico Rally
63:Botanist
64:Geologist
65:Maximum Might
66:Slinger Capacity
67:Stealth
68:Flinch Free
69:Scoutfly Range Up
6A:Speed Crawler
6B:Jump Master
6C:Sporepuff Expert
6D:Aquatic Expert
6E:Afishionado
6F:Cliffhanger
70:Blindsider
72:Scholar
73:Entomologist
74:Effluvia Resistance
75:Scenthound
76:Forager's Luck
77:Detector
78:Tool Specialist
7A:Affinity Sliding
7B:Elderseal Boost
7C:Intimidator
7D:Anjanath Power
7E:Nergigante Hunger
7F:Vaal Hazak Vitality
80:Rathalos Power
81:Diablos Power
82:Kirin Blessing
83:Pink Rathian Mastery
84:Anjanath Will
87:Rathalos Mastery
88:Diablos Mastery
89:Kirin Favor
8A:Urgaan Protection
8E:Bazelgeuse Protection
8F:Teostra Technique
90:Kushala Daora Flight
91:Xeno'jiiva Divinity
93:Zorah Magdaros Mastery
94:Hero's Protection
95:Guild Guidance
96:Commission Guidance
97:Legiana Blessing
98:Legiana Favor
99:Odogaron Power
9A:Odogaron Mastery
9B:Bow Charge Plus
9C:Mind's Eye/Ballistics
9D:Guard Up
9E:Protective Polish
9F:Non-elemental Boost
A0:Guts
A1:Hasten Recovery
A2:Razor Sharp/Spare Shot
A3:Lunastra Favor
</DropDownList>
<ShowAsHex>1</ShowAsHex>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>3E</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>4231</ID>
<Description>"Lv."</Description>
<VariableType>Byte</VariableType>
<Address>charmIdi</Address>
<Offsets>
<Offset>35</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>2</ID>
<Description>"Set Item Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-11
Author : Marcus101RR

This script does blah blah blah
}

define(address,"MonsterHunterWorld.exe"+144BF4C)
define(bytes,8B 48 0C 89 0A)

[ENABLE]

assert(address,bytes)
alloc(newmem,$1000,"MonsterHunterWorld.exe"+144BF4C)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#50
jge @f
mov [rax+0C],#50
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

address:
jmp newmem
return:

[DISABLE]

address:
db bytes
// mov ecx,[rax+0C]
// mov [rdx],ecx

dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AC1C

"MonsterHunterWorld.exe"+144ABFF: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+144AC02: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC04: E8 17 11 80 FF - call MonsterHunterWorld.exe+C4BD20
"MonsterHunterWorld.exe"+144AC09: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AC0C: 74 13 - je MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC0E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AC11: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AC13: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+144AC16: 75 09 - jne MonsterHunterWorld.exe+144AC21
"MonsterHunterWorld.exe"+144AC18: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AC1C: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+144AC1F: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AC21: 48 8B 0D 90 CC 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B278B8]
"MonsterHunterWorld.exe"+144AC28: FF C3 - inc ebx
"MonsterHunterWorld.exe"+144AC2A: E8 F1 A5 30 00 - call MonsterHunterWorld.exe+1755220
"MonsterHunterWorld.exe"+144AC2F: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+144AC32: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+144AC34: E8 C7 0F 80 FF - call MonsterHunterWorld.exe+C4BC00
"MonsterHunterWorld.exe"+144AC39: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+144AC3B: 72 B3 - jb MonsterHunterWorld.exe+144ABF0
"MonsterHunterWorld.exe"+144AC3D: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+144AC42: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>5963</ID>
<Description>"Set Item Box Quantity"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-10-05
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(boxCarry,MonsterHunterWorld.exe,8B 48 0C 89 0A) // should be unique
alloc(newmem,$1000,boxCarry)

label(code)
label(return)

newmem:

code:
cmp [rax+0C],#300
jge @f
mov [rax+0C],#300
@@:
mov ecx,[rax+0C]
mov [rdx],ecx
jmp return

boxCarry:
jmp newmem
return:
registersymbol(boxCarry)

[DISABLE]

boxCarry:
db 8B 48 0C 89 0A

unregistersymbol(boxCarry)
dealloc(newmem)

{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+14773BC

"MonsterHunterWorld.exe"+147739F: 44 8B C3 - mov r8d,ebx
"MonsterHunterWorld.exe"+14773A2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773A4: E8 97 D9 7F FF - call MonsterHunterWorld.exe+C74D40
"MonsterHunterWorld.exe"+14773A9: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+14773AC: 74 13 - je MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773AE: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+14773B1: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+14773B3: 39 50 08 - cmp [rax+08],edx
"MonsterHunterWorld.exe"+14773B6: 75 09 - jne MonsterHunterWorld.exe+14773C1
"MonsterHunterWorld.exe"+14773B8: 48 8B 57 08 - mov rdx,[rdi+08]
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+14773BC: 8B 48 0C - mov ecx,[rax+0C]
"MonsterHunterWorld.exe"+14773BF: 89 0A - mov [rdx],ecx
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+14773C1: 48 8B 0D 80 28 70 02 - mov rcx,[MonsterHunterWorld.exe+3B79C48]
"MonsterHunterWorld.exe"+14773C8: FF C3 - inc ebx
"MonsterHunterWorld.exe"+14773CA: E8 71 E5 30 00 - call MonsterHunterWorld.exe+1785940
"MonsterHunterWorld.exe"+14773CF: 48 8B C8 - mov rcx,rax
"MonsterHunterWorld.exe"+14773D2: 8B D6 - mov edx,esi
"MonsterHunterWorld.exe"+14773D4: E8 47 D8 7F FF - call MonsterHunterWorld.exe+C74C20
"MonsterHunterWorld.exe"+14773D9: 3B D8 - cmp ebx,eax
"MonsterHunterWorld.exe"+14773DB: 72 B3 - jb MonsterHunterWorld.exe+1477390
"MonsterHunterWorld.exe"+14773DD: 48 8B 5C 24 30 - mov rbx,[rsp+30]
"MonsterHunterWorld.exe"+14773E2: 48 8B 74 24 38 - mov rsi,[rsp+38]
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4448</ID>
<Description>"Change Max Carry"</Description>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-24
Author : Marcus101RR

This script does blah blah blah
}

[ENABLE]

aobscanmodule(maxCap,MonsterHunterWorld.exe,0F BE 48 12 EB 03) // should be unique
alloc(newmem,$1000,maxCap)

label(code)
label(return)

label(curCap)
registersymbol(curCap)
registersymbol(maxCap)

newmem:
mov ecx,[curCap]
mov [rax+12],ecx
code:
movsx ecx,byte ptr [rax+12]
jmp MonsterHunterWorld.exe+1477502
jmp return

curCap:
dq 0A

maxCap:
jmp newmem
nop
return:


[DISABLE]

maxCap:
db 0F BE 48 12 EB 03

unregistersymbol(maxCap)
dealloc(newmem)
unregistersymbol(curCap)
{
// ORIGINAL CODE - INJECTION POINT: "MonsterHunterWorld.exe"+144AD79

"MonsterHunterWorld.exe"+144AD57: 48 8B 4F 08 - mov rcx,[rdi+08]
"MonsterHunterWorld.exe"+144AD5B: C6 01 01 - mov byte ptr [rcx],01
"MonsterHunterWorld.exe"+144AD5E: 48 8B 0F - mov rcx,[rdi]
"MonsterHunterWorld.exe"+144AD61: 8B 11 - mov edx,[rcx]
"MonsterHunterWorld.exe"+144AD63: 48 8B 0D 46 4A 6D 02 - mov rcx,[MonsterHunterWorld.exe+3B1F7B0]
"MonsterHunterWorld.exe"+144AD6A: 48 85 C9 - test rcx,rcx
"MonsterHunterWorld.exe"+144AD6D: 74 10 - je MonsterHunterWorld.exe+144AD7F
"MonsterHunterWorld.exe"+144AD6F: E8 8C 6B 16 00 - call MonsterHunterWorld.exe+15B1900
"MonsterHunterWorld.exe"+144AD74: 48 85 C0 - test rax,rax
"MonsterHunterWorld.exe"+144AD77: 74 06 - je MonsterHunterWorld.exe+144AD7F
// ---------- INJECTING HERE ----------
"MonsterHunterWorld.exe"+144AD79: 0F BE 48 12 - movsx ecx,byte ptr [rax+12]
"MonsterHunterWorld.exe"+144AD7D: EB 03 - jmp MonsterHunterWorld.exe+144AD82
// ---------- DONE INJECTING ----------
"MonsterHunterWorld.exe"+144AD7F: 41 8B CE - mov ecx,r14d
"MonsterHunterWorld.exe"+144AD82: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD86: 2B 4B 0C - sub ecx,[rbx+0C]
"MonsterHunterWorld.exe"+144AD89: 89 08 - mov [rax],ecx
"MonsterHunterWorld.exe"+144AD8B: 48 8B 47 10 - mov rax,[rdi+10]
"MonsterHunterWorld.exe"+144AD8F: 44 39 30 - cmp [rax],r14d
"MonsterHunterWorld.exe"+144AD92: 7D 10 - jnl MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD94: 44 89 30 - mov [rax],r14d
"MonsterHunterWorld.exe"+144AD97: EB 0B - jmp MonsterHunterWorld.exe+144ADA4
"MonsterHunterWorld.exe"+144AD99: 85 C0 - test eax,eax
}
</AssemblerScript>
</CheatEntry>
<CheatEntry>
<ID>4328</ID>
<Description>"Static Data (AOB)"</Description>
<Options moHideChildren="1"/>
<LastState/>
<VariableType>Auto Assembler Script</VariableType>
<AssemblerScript>{ Game : MonsterHunterWorld.exe
Version:
Date : 2018-08-21
Author : Marcus101RR
}

[ENABLE]

aobscanmodule(conitemparam,MonsterHunterWorld.exe,F3 0F 10 80 A8 00 00 00 48)
alloc(newmem,$1000,conitemparam)

label(code)
label(return)
label(itemparamp)

registersymbol(conitemparam)
registersymbol(itemparamp)

newmem:
mov [itemparamp],rax

code:
movss xmm0,[rax+000000A8]
jmp return

itemparamp:
dq 0

conitemparam:
jmp newmem
nop
nop
nop
return:

[DISABLE]

conitemparam:
db F3 0F 10 80 A8 00 00 00

unregistersymbol(conitemparam)
unregistersymbol(itemparamp)
dealloc(newmem)
</AssemblerScript>
<CheatEntries>
<CheatEntry>
<ID>4329</ID>
<Description>"Might Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>10E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4330</ID>
<Description>"Might Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>110</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4331</ID>
<Description>"Might Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>112</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4332</ID>
<Description>"Might Pill Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>114</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4333</ID>
<Description>"Adamant Seed Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>116</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4334</ID>
<Description>"Adamant Seed Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>118</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4335</ID>
<Description>"Adamant Pill Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>11A</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4336</ID>
<Description>"Hardshell Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12C</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4337</ID>
<Description>"Hardshell Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>12E</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4338</ID>
<Description>"Demon Powder Duration"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>130</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>4339</ID>
<Description>"Demon Powder Power"</Description>
<VariableType>2 Bytes</VariableType>
<Address>itemparamp</Address>
<Offsets>
<Offset>132</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5488</ID>
<Description>"Pointers"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5492</ID>
<Description>"Data"</Description>
<Options moHideChildren="1"/>
<LastState Value="" RealAddress="00000000"/>
<GroupHeader>1</GroupHeader>
<CheatEntries>
<CheatEntry>
<ID>5491</ID>
<Description>"Max Health"</Description>
<LastState Value="200" RealAddress="06999C3C"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>2EC</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5493</ID>
<Description>"Max Stamina"</Description>
<LastState Value="200" RealAddress="06999C54"/>
<VariableType>Float</VariableType>
<Address>MonsterHunterWorld.exe+3B78AD8</Address>
<Offsets>
<Offset>304</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5498</ID>
<Description>"Health"</Description>
<LastState Value="250" RealAddress="BBB2FB34"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>64</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5497</ID>
<Description>"Max"</Description>
<LastState Value="250" RealAddress="BBB2FB30"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>60</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
<CheatEntry>
<ID>5499</ID>
<Description>"Base"</Description>
<LastState Value="200" RealAddress="C9B072A4"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>7204</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
<CheatEntry>
<ID>5500</ID>
<Description>"Stamina"</Description>
<LastState Value="200" RealAddress="BBB2FC1C"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>14C</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
<CheatEntries>
<CheatEntry>
<ID>5501</ID>
<Description>"Max"</Description>
<LastState Value="200" RealAddress="BBB2FC24"/>
<VariableType>Float</VariableType>
<Address>"MonsterHunterWorld.exe"+03B79C88</Address>
<Offsets>
<Offset>154</Offset>
<Offset>7208</Offset>
<Offset>70</Offset>
</Offsets>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatEntry>
</CheatEntries>
</CheatTable>
I dont think so.if I change some value what i should not change in RAM ,then i play in my self quest game will broken either.
And the game broken sound is very scare even i listened that many time.

User avatar
LCHLH
Expert Cheater
Expert Cheater
Posts: 166
Joined: Thu May 25, 2017 12:00 am
Reputation: 52

Re: Monster Hunter World (Steam)

Post by LCHLH »

Yeah, the "Kill/Wound Large Monsters" scripts cause an instant DC from the "session". That's all fine and well with me, since I don't play with other people on my modified character; but it does beg the question: how long till you get DCd for just having CE opened, thus preventing you from even Seeing the event quests?

And to the people going "I don't condone online cheating": we HAVE to be online for ALL new events and monsters; it's non-negotiable. Guess when new stuff shows up I'll just have to start it without CE, enter a mission, then back to the usual.

I wonder if seikur0 can find the checks and bypass them like the rest of that denuvo shit.

IcyPurpose99
Expert Cheater
Expert Cheater
Posts: 470
Joined: Fri Mar 03, 2017 6:04 pm
Reputation: 16

Re: Monster Hunter World (Steam)

Post by IcyPurpose99 »

If you modify your live HP you will DC because that is being sent consistently, but if you modify the MAX HP and Stamina pointer data, not the max cap, but the max data value which is allowed by the game you will be able to have endless HP/Stamina of your choice by eating the ancient potion.

glitch_431
What is cheating?
What is cheating?
Posts: 1
Joined: Sat Oct 06, 2018 9:54 am
Reputation: 0

Re: Monster Hunter World (Steam)

Post by glitch_431 »

Ensioc wrote:
Fri Oct 05, 2018 3:09 pm
bliseer wrote:
Fri Oct 05, 2018 10:14 am
please~!!! inf free character edit voucher!!
I agree.
I'd like to see this! :D

BlackStarDark
Noobzor
Noobzor
Posts: 7
Joined: Sat Oct 06, 2018 3:00 pm
Reputation: 0

Re: Monster Hunter World (Steam)

Post by BlackStarDark »

I can use most of the functions without getting DC, I just use a few of em anyways, nothing that changes my character in battles or such, just got items and ignore crafting req. Haven't really tried infinite stuff as I don't use it at all, but for the most part, stuff I've used (Items, ignore crafting req, zenny edit) are working just fine.

jumiknight
Novice Cheater
Novice Cheater
Posts: 16
Joined: Tue Sep 19, 2017 10:27 am
Reputation: 0

Re: Monster Hunter World (Steam)

Post by jumiknight »

Is there any way to have a complete duplicate of Save 1 to Save 2 so I can have a male file and a female file without redoing everything, if anyone's found out a method?

Thank you.

Monskiller
Noobzor
Noobzor
Posts: 12
Joined: Mon Aug 13, 2018 12:03 pm
Reputation: 0

Re: Monster Hunter World (Steam)

Post by Monskiller »

Is anyone getting this wierd issue where Armor pieces have their names and descriptions shuffled about?
[Link]

Post Reply

Who is online

Users browsing this forum: AhrefsBot, bigkorban, coccocbot-web, Cyberse91, DotBot, Drugga, Google Adsense [Bot], LoneStrider, YandexBot