Monster Hunter Freedom Unite [USA]

[LunaMoo]

Maybe it depends on who takes the quest or leaves first, which would mean other players are all managed by one game, or the address isn't static and changes in multiplayer in which case such codes would have to be changed to use pointers or to work by assembly instead of freezing values. I'll see how it is in my EU version.

[deama]

(08-13-2014 03:02 PM)LunaMoo Wrote:  Maybe it depends on who takes the quest or leaves first, which would mean other players are all managed by one game, or the address isn't static and changes in multiplayer in which case such codes would have to be changed to use pointers or to work by assembly instead of freezing values. I'll see how it is in my EU version.

What about a cheat that increases the health skill instead? Would it allow hp over 150?

[LunaMoo]

Depends how it works, from what I checked it sorts and does recognize players, so it would mean pointers to do it that way.

But I don't understand why you care about max hp, when you freeze the value, meaning you can't get killed anyway;p, would be better to just use a god mode or refresh hp by assembly without even setting it, like:

Code:

_C0 refresh hp on hit
_L 0x200D6644 0x8622041E
_C0 refresh hp on hit[disable]
_L 0x200D6644 0x862202E4

Which results also in not being able to die, but max hp is not touched, and also since it uses assembly, doesn't have to use pointer codes and doesn't have problems with other players;p.

Edit:
or even

Code:

_C0 invincibility
_L 0x200D6694 0x8622041E
_C0 invincibility[disable]
_L 0x200D6694 0x005010211

which is pretty much same, but your hp bar doesn't even move.

[deama]

(08-13-2014 04:00 PM)LunaMoo Wrote:  Depends how it works, from what I checked it sorts and does recognize players, so it would mean pointers to do it that way.

But I don't understand why you care about max hp, when you freeze the value, meaning you can't get killed anyway;p, would be better to just use a god mode or refresh hp by assembly without even setting it, like:

Code:

_C0 refresh hp on hit
_L 0x200D6644 0x8622041E
_C0 refresh hp on hit[disable]
_L 0x200D6644 0x862202E4

Which results also in not being able to die, but max hp is not touched, and also since it uses assembly, doesn't have to use pointer codes and doesn't have problems with other players;p.

Ah, no, I don't wanna use Gode Mode as me and my buddy are using a conditioning level up type agreement. So, every 5k guild points we increase your attack multiplier by 0.1 and every 10k guild points we increase our hp by 16. This is mostly cause I keep on complaining that I didn't like the power levels of the game.

[LunaMoo]

O.o, well if you do it manually anyway and disable the cheat afterwards, you can just add "A0F0" to the address for second player(at least that was for EU, not sure about US, might differ, only assembly cheats which are in lower memory range are same for the two games, and I don't really have US version)
Edit: cutting stuff to not confuse people;3
Whole thing with guild points could be probably automatized, but that's a lot of work which, don't have time for this, and it could be impossible for me anyway, since as I said EU and US versions are only same on lower part of memory;p.

[deama]

(08-13-2014 04:23 PM)LunaMoo Wrote:  O.o, well if you do it manually anyway and disable the cheat afterwards, you can just add "A0F0" to the address for second player(at least that was for EU, not sure about US, might differ, only assembly cheats which are in lower memory range are same for the two games, and I don't really have US version)

Code:

_C0 Max HP
//p1
_L 0x108B3864 0x00000096
_L 0x108B399E 0x00000096
//p2
_L 0x108BD954 0x00000096
_L 0x108BDA8E 0x00000096

Whole thing with guild points could be probably automatized, but that's a lot of work which, don't have time for this, and it could be impossible for me anyway, since as I said EU and US versions are only same on lower part of memory;p.

Oh, player slots, that would make sense why it didn't work. Thanks. But, if I disabled it after enabling it, wouldn't it reset once me and him enter a mission? Or is it a permanent increase?

[LunaMoo]

Well don't thank before testing, it might differ in US version, or even be dynamic, in which case it would need a proper pointer code and I cannot really do those since it would differ in my game version:|.

[deama]

(08-13-2014 05:09 PM)LunaMoo Wrote:  Well don't thank before testing, it might differ in US version, or even be dynamic, in which case it would need a proper pointer code and I cannot really do those since it would differ in my game version:|.

Right, so how do you find these values using ppsspp? I found some hazzy tutorial how to make cwcheats but it was vague, and for a PSP. All I could gather was that you had to dump the memory and use a tool like cheat engine to search for values like you would normally do, right? Well, I tried it, but it didn't work.

[LunaMoo]

Many ways to do that, but since we already know how it works etc. to find those addresses it's enough if you set a breakpoint on 088D65A0 and read what's stored in s1 register(which is set a line before the breakpoint) and add an offset for those two cheats (+0x2E4 for hp, +0x41E for max hp).

Basically open debug->disassembly or ctrl+D on windows paste this "088D65A0" address into top left corner and press enter, then double click this address/code line on the right which will make it red, doing so, you set up a breakpoint. Now go in-game as second player ~ not the one which takes the quest and use a restoration item during quest, your game will pause on that breakpoint, and then you can read s1 value which will be address for second player.

If you would want to make a pointer code in case it's dynamic, then you would have to also find where the s1 is read from which we already know as it's set a line above the breakpoint we set and it's sw s1,0x8(sp) so basically the pointer is stored in SP(also have to read it on the list during that break) +0x8, then you can make a pointer cw cheat having this knowledge and google for cw cheat syntax.

Just a note cw cheat starts from 8800000 so for example if address would be would be 0x090B385E the actual address for cw cheat would be 0x8B385E. Also first number(after 0x which is just prefix for hex values) in cw cheat usually is a code type and is not part of the address.

Edit: syntax for pointer code for 16-bit values in cw cheat in case it's hard to find;p

Code:

16-bit write
0x6aaaaaaa 0x0000vvvv
0x0001nnnn 0xiiiiiiii
aaaaaaa = address to load 32-bit base from (25 bit)
vvvv = value to store at base + offset (8/16/32 bit)
qqq = offset to add to load the base(*4)
nnnn = number of times to point (16 bit) (must be 1 for normal pointer codes)
iiiiiiii = 32-bit offset to add to base (n = 1)

Also on windows I recommend using default windows calculator in programmer mode for all hex fun, works good enough for me that I never searched for an alternative. Cheat engine is only usefull for ppsspp cheating when you have to search some values for the first time, everything else is much easier to do in ppsspp dissassembler because cheat engine is written for x86 which is useless since psp uses mips. ~ I tend to use it mostly for editing stuff, like my stats cheat table for MHp3rdHD which allows edit all kinds of things and records.

[deama]

(08-13-2014 06:06 PM)LunaMoo Wrote:  Many ways to do that, but since we already know how it works etc. to find those addresses it's enough if you set a breakpoint on 088D65A0 and read what's stored in s1 register(which is set a line before the breakpoint) and add an offset for those two cheats (+0x2E4 for hp, +0x41E for max hp).

Basically open debug->disassembly or ctrl+D on windows paste this "088D65A0" address into top left corner and press enter, then double click this address/code line on the right which will make it red, doing so, you set up a breakpoint. Now go in-game as second player ~ not the one which takes the quest and use a restoration item during quest, your game will pause on that breakpoint, and then you can read s1 value which will be address for second player.

If you would want to make a pointer code in case it's dynamic, then you would have to also find where the s1 is read from which we already know as it's set a line above the breakpoint we set and it's sw s1,0x8(sp) so basically the pointer is stored in SP(also have to read it on the list during that break) +0x8, then you can make a pointer cw cheat having this knowledge and google for cw cheat syntax.

Just a note cw cheat starts from 8800000 so for example if address would be would be 0x090B385E the actual address for cw cheat would be 0x8B385E. Also first number(after 0x which is just prefix for hex values) in cw cheat usually is a code type and is not part of the address.

Edit: syntax for pointer code for 16-bit values in cw cheat in case it's hard to find;p

Code:

16-bit write
0x6aaaaaaa 0x0000vvvv
0x0001nnnn 0xiiiiiiii
aaaaaaa = address to load 32-bit base from (25 bit)
vvvv = value to store at base + offset (8/16/32 bit)
qqq = offset to add to load the base(*4)
nnnn = number of times to point (16 bit) (must be 1 for normal pointer codes)
iiiiiiii = 32-bit offset to add to base (n = 1)

Also on windows I recommend using default windows calculator in programmer mode for all hex fun, works good enough for me that I never searched for an alternative. Cheat engine is only usefull for ppsspp cheating when you have to search some values for the first time, everything else is much easier to do in ppsspp dissassembler because cheat engine is written for x86 which is useless since psp uses mips. ~ I tend to use it mostly for editing stuff, like my stats cheat table for MHp3rdHD which allows edit all kinds of things and records.

Oh so that's why cheat engine didn't work.

[LunaMoo]

Well cheat engine does work for finding/changing values if those you were searching, you just have to select "MEM_MAPPED" in CE scan settings before it would see any values and then you have to limit the range of search to not look through whole ppsspp memory as well(searching through memory dump is slow and sad;p).

What I ment is that it's advanced functions like debugger with all of it's neat stuff which people use for pc games or even pointer scan etc. are useless. I really do like CE for those functions, so without them it's kind of silly.

[deama]

(08-13-2014 06:06 PM)LunaMoo Wrote:  Basically open debug->disassembly or ctrl+D on windows paste this "088D65A0" address into top left corner and press enter, then double click this address/code line on the right which will make it red, doing so, you set up a breakpoint. Now go in-game as second player ~ not the one which takes the quest and use a restoration item during quest, your game will pause on that breakpoint, and then you can read s1 value which will be address for second player.

Where do I check to see the s1 value? Oh and it says "s0, 0x4(sp)".
Nvm, I'll edit as I go along

Right, I got this value from s1 "090BD4A0" now, converting it to cw cheat would make it... "0x108BD4A0" this?
Also, I have closed PPSSPP and reopend it and did the disassembly thing again, I got the same value; does that mean it's a static value or is it just chance?

Oh and what do you mean by "the pointer is stored in SP(also have to read it on the list during that break) +0x8"? Do I just copy the value off the address above the breakpoint one or do I have to go into SP and copy that value and add in 0x8?

PS: When I try and use "0x108BD4A0 0x00000096" it crashes; is it even how I'm supposed to use the player id value?

[LunaMoo]

Address for character is most likely ok, but you also have to add 0x2E4 for hp and 0x41E for max hp to get those two cheats you want, so basically

Edit: cutting stuff to not confuse people;3

This register there always shows that address for your character, but if your character will be second, third or fourth this will have different value.

Pointer is basically an address which stores another address pointing into something we want when game changes memory alot. If it's always same for player slot you don't have to make a pointer code and can just use this as it is above.:3 Edit: nvm.

[deama]

(08-13-2014 08:58 PM)LunaMoo Wrote:  Address for character is most likely ok, but you also have to add 0x2E4 for hp and 0x41E for max hp to get those two cheats you want, so basically

Code:

_C0 hp for player 2
_L 0x108BD784 0x00000096
_L 0x108BD8BE 0x00000096

This register there always shows that address for your character, but if your character will be second, third or fourth this will have different value.

Pointer is basically an address which stores another address pointing into something we want when game changes memory alot. If it's always same for player slot you don't have to make a pointer code and can just use this as it is above.:3 Edit: if you want me to show an example of pointer code as well(it'll universally work for "current player" instead of player 1, 2, 3 etc.) post value you see for SP register when it breaks on it.

Yeah it, doesn't work. Am I supposed to activate it myself or do I give it to player 2 to activate himself?
Would it be easier to hack the health skill instead?
Uhh, am I supposed to dump the memory then use cheate engine or can I use cheat engine on just PPSSPP and expect the same results? When I use cheat engine on the emulator and change a value it either crashes the game or turns into "???". I think I just realized that I'm not supposed to change the values in CE (cheat engine) but use them to then make cw cheats with or browse the disassembly with, right?

[LunaMoo]

Dunno really I don't have the US version so can't really help further, I checked eu version and the pointer would have to be done differently as well, since it's apparenly a multi-level;p. Can only give some more tips for using CE before I go.

Basically with cheat engine attached to ppsspp you can't use freeze, otherwise ppsspp(or ce not sure) bugs out completely;p. Also you should never change a mirror copies of psp memory inside ppsspp, that can also bugs out the stuff, so if you don't know how to limit your search only to psp memory at least set scan start to 08804000 and scan end to 11FFFFFF it should never go below/above those even in hd remastered games that use twice as memory.
And as I mentioned you have to go to Edit>settings>scan settings and check "MEM_MAPPED" for CE to even see real psp memory inside ppsspp. If you don't do this, you will NEVER even look at psp memory, so that's like a very important step:].

If I'm too confusing, you can dump memory and open it in CE, but it's in compare to normal scan very slow and limited. You can find it in guides only because that's how people did it on real psp. If anyone uses such method for ppsspp, it's just sad.