We'll make use only of the first two, as most Debug Menu functions take 2 parameters (there is one I recall that takes 3, but since I don't have the right pointer, it won't work). Using IDA to easily get the list of strings returns the following:Ĭalling convention is a bit changed from x32, since 圆4 uses _fastcall (instead of _stdcall) and the role of the EBP+X arguments is now taken by (in order of usage) rcx, rdx, r8 and r9 registers. RCX is the pointer that is used for most of its functions - unfortunately, not for Teleport, Nuke and probably some others that would be nice to have Smile This is the prologue of the Debug Menu, the function that builds it up.
#Ac unity nomad point code#
Running the game and dumping it, then studying the unpacked code (to also be read as uncompressed, since VMProtect packed data here) returns the following: Fun fact about this one is the excessive (yet irrelevant) use of VMProtect to envelope game code. They're using same AnvilNEXT Engine ported to 圆4. It should work eventually after 1-2 presses.īegan looking at this title as well, along with Rogue. If pressing Numpad 0 or 1 doesn't do anything, wait a bit or move around and try pressing again. To refresh pContect, you can fast travel (just to make sure address is acquired).ĥ. So, see to it that "pContext" address in the table (under HookWithHWBreakpoint, once enabled) contains a valid pointer (not "?" or "00000000").Ĥ. any other time when a cutscene plays (not everytime) when you teleport from one viewpoint to another when you load game for the first time, entering game world Note the pContext pointer is acquired/updated in these situations: If game crashes when enabling the Cheat Handler, you'll probably have to restart the game (did happen to me a few times).ģ. If any of the scripts don't get enabled, let me know.Ģ. Will be adding more next week, upon my return from Amalfi Smile Also, a teleporter with two more hardware breakpoints Winkġ. Second function will just refill your inventory, so you don't have to parkour all the way to a medic. RefillAllEquipment (use Numpad 1 hotkey)įirst one above is toggleable (on/off) with same hotkey. LUA helps setting a condition when breakpoint is hit, such as retrieving RCX pointer I need to then call up on game's debug menu functions Wink The "HookWithHWBreakpoint" script then gets the addresses of the storage pointer and the hook address, and places a hardware breakpoint at that location (pContext). "" script finds certain locations in memory and then registers the symbols of these addresses. There is a function that contains the entire debug menu the engine (this game) works with. Now either activate last script, Cheat Handler or load game, then activate it.
If it doesn't activate, let me know - the same for above mentioned script.ĥ. If it activates, then enable HookWithHWBreakpoint script.Ĥ.b. Load ACU.ct table, select ACU.exe process and enable (click the check box in front of it) script.Ĥ.a. Launch the game and get to main menu screen.ģ. In the fashion of Assassin's Creed 4: Black Flag Cheat Handler, presenting to you the 圆4 version for Assassin's Creed: Unity.ġ. See hotkeys below (they can be changed, if you want): Added GodMode, RefillPlayerHealth and TriggerMissionFailure.
0 kommentar(er)
