Assassin’s Creed® Valhalla - InventoryEditor

[SunBeam]

with update v1.5.3..
+Inventory: EditQuantity is fucked. i cant fix it. someone with ALOT more knowledge is needed to for it .

AddItem is still there. The function itself has a lot of string references you can cling on to, if you wanna find it:



Same logic, nothing changed.

Here's GiveItem in CE format, so you can go to it manually:

Code: Select all

ACValhalla.exe+2EA64E0 - 48 89 5C 24 08        - mov [rsp+08],rbx
ACValhalla.exe+2EA64E5 - 48 89 6C 24 10        - mov [rsp+10],rbp
ACValhalla.exe+2EA64EA - 48 89 74 24 18        - mov [rsp+18],rsi
ACValhalla.exe+2EA64EF - 48 89 7C 24 20        - mov [rsp+20],rdi
ACValhalla.exe+2EA64F4 - 41 56                 - push r14
ACValhalla.exe+2EA64F6 - 48 81 EC E0000000     - sub rsp,000000E0 { 224 }
ACValhalla.exe+2EA64FD - 48 8B D9              - mov rbx,rcx
ACValhalla.exe+2EA6500 - 8B EA                 - mov ebp,edx
ACValhalla.exe+2EA6502 - 48 8B 0D 1F445203     - mov rcx,[ACValhalla.exe+63CA928] { ("pGm@{") }
ACValhalla.exe+2EA6509 - 33 D2                 - xor edx,edx
ACValhalla.exe+2EA650B - 48 81 C1 80040000     - add rcx,00000480 { 1152 }
ACValhalla.exe+2EA6512 - 41 8B F1              - mov esi,r9d
ACValhalla.exe+2EA6515 - 41 0FB6 F8            - movzx edi,r8l
ACValhalla.exe+2EA6519 - E8 1236B0FF           - call ACValhalla.exe+29A9B30
ACValhalla.exe+2EA651E - 4C 8B F0              - mov r14,rax
ACValhalla.exe+2EA6521 - 4C 8B 18              - mov r11,[rax]
ACValhalla.exe+2EA6524 - 4D 8B 53 08           - mov r10,[r11+08]
ACValhalla.exe+2EA6528 - 49 C1 E2 20           - shl r10,20 { 32 }
ACValhalla.exe+2EA652C - 49 C1 FA 3F           - sar r10,3F { 63 }
ACValhalla.exe+2EA6530 - 4D 85 13              - test [r11],r10
ACValhalla.exe+2EA6533 - 75 2B                 - jne ACValhalla.exe+2EA6560
ACValhalla.exe+2EA6535 - 4C 8D 0D C492A001     - lea r9,[ACValhalla.exe+48AF800] { ("OnlineItemOwnershipInventoryUtil::AddItem(0x%08llx) - progressi") }
ACValhalla.exe+2EA653C - 48 89 5C 24 20        - mov [rsp+20],rbx
ACValhalla.exe+2EA6541 - 4C 8D 05 2093A001     - lea r8,[ACValhalla.exe+48AF868] { ("AddItem") }
ACValhalla.exe+2EA6548 - B9 01000000           - mov ecx,00000001 { 1 }
ACValhalla.exe+2EA654D - 48 8D 15 D440A001     - lea rdx,[ACValhalla.exe+48AA628] { ("SecondaryStore") }

You'll have to update the aob in that Inventory Editor table of yours. And my Helix anti-removal DLL is still working.

Cheers,
Sun

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[machine4578]

yeah give item etc still works and even the bulk give item. (patch .exe works too)
however the +Inventory: EditQuantity seems to have changed. and i honestly dont know how to fix it at this point
i think i found the new aob1 the CE table needs(using x64_dbg). but they changed the code.
org is

Spoiler

00007FF7C9583620 | E8 DB3719FF | call acvalhalla.7FF7C8716E00 |
00007FF7C9583625 | 41:B1 01 | mov r9b,1 |
00007FF7C9583628 | 48:8D5424 20 | lea rdx,qword ptr ss:[rsp+20] | rdx:EntryPoint
00007FF7C958362D | 45:0FB6C1 | movzx r8d,r9b |
00007FF7C9583631 | 48:8BC8 | mov rcx,rax | rax:EntryPoint
00007FF7C9583634 | E8 C73627FE | call acvalhalla.7FF7C77F6D00 |
00007FF7C9583639 | 48:8D5424 20 | lea rdx,qword ptr ss:[rsp+20] | rdx:EntryPoint

is now

Spoiler

00007FF6B37CA383 | FF90 B8000000 | call qword ptr ds:[rax+B8] |
00007FF6B37CA389 | 41:B1 01 | mov r9b,1 |
00007FF6B37CA38C | 48:8D5424 20 | lea rdx,qword ptr ss:[rsp+20] | rdx:EntryPoint
00007FF6B37CA391 | 45:0FB6C1 | movzx r8d,r9b |
00007FF6B37CA395 | 48:8BC8 | mov rcx,rax | rax:EntryPoint
00007FF6B37CA398 | E8 032925FE | call acvalhalla.7FF6B1A1CCA0 |
00007FF6B37CA39D | 48:8D5424 20 | lea rdx,qword ptr ss:[rsp+20] | rdx:EntryPoint

the
call acvalhalla.7FF7C8716E00
is now
call qword ptr ds:[rax+B8]
and idk how to handle that

the other 3 options that no longer work are
Horse Speed
Quick Win Orlog
Open Shop

[SunBeam]

^ If that part of code is executed by the Engine on some action you do in-game, why don't you debug it? The dynamic call will lead you to a function which you can then aob

[machine4578]

^ If that part of code is executed by the Engine on some action you do in-game, why don't you debug it? The dynamic call will lead you to a function which you can then aob

its why i asked for help. i cant do it.

[SunBeam]

^ If that part of code is executed by the Engine on some action you do in-game, why don't you debug it? The dynamic call will lead you to a function which you can then aob

its why i asked for help. i cant do it.

I suggest using module+offset convention, as, due to ASLR, the addresses you listed don't match on my PC. The ones in the Spoiler snippets. For example:

00007FF6B37CA383 | FF90 B8000000 | call qword ptr ds:[rax+B8] | << doesn't work
ACValhalla.exe+33FA383 - FF 90 B8000000 - call qword ptr [rax+000000B8] << works

If I do Ctrl+G > 00007FF6B37CA383 I land on a wrong spot. If I do Ctrl+G > ACValhalla.exe+33FA383 I get to the right spot.

I had to find them by the aob bytes in there.

EDIT: Yeah, the function isn't breaking, so I dunno how to trigger it. What's this "Edit Quantity"? I never used it.

[machine4578]

EDIT: Yeah, the function isn't breaking, so I dunno how to trigger it. What's this "Edit Quantity"? I never used it.

it used to list ALL items you have in your inventory(armor, tattoo, weapons etc etc etc). and it allowed you to edit how much. for example if you had 2 of the same item and you wanted to delelte it, you set the quanity to 0, save game and reload save for the item to disappear.

[WT3WD]

New Items

dq 000001F01E9ADC8B
dq 000001F01E9ADC3A
dq 000001F01E9ADCDD
dq 000001F01E9ADBE9
dq 000001F142C44E9B
dq 000001F142C452EA
dq 000001F19A42DE52
dq 000001F19A42DF7E
dq 000001F19A42D98A
dq 000001F19A42DA04
dq 000001F19A42DA7E
dq 000001F19A42DAF8
dq 000001F19A42DB72
dq 000001F19A42D9C7
dq 000001F19A42DA41
dq 000001F19A42DABB
dq 000001F19A42DB35
dq 000001F19A42DBB0
dq 000001EDF6947A20
dq 000001EDF6947A2A
dq 000001EDF6947A34
dq 000001EDF6947A3E
dq 000001EDF6947A48
dq 000001EDF6947A52
dq 000001EDF6947A5C
dq 000001F20D670D5D
dq 000001F20D670D92
dq 000001F17E7D1AE5

[SunBeam]

EDIT: Yeah, the function isn't breaking, so I dunno how to trigger it. What's this "Edit Quantity"? I never used it.

it used to list ALL items you have in your inventory(armor, tattoo, weapons etc etc etc). and it allowed you to edit how much. for example if you had 2 of the same item and you wanted to delelte it, you set the quanity to 0, save game and reload save for the item to disappear.

Can you give me an example of an item that is considered ULC? (Unlockable Content)



So I can use GiveItem and test if it's removed or not with my d3d9.dll patch.

Thanks,
Sun

[BrSemPai]

Is there any table that I can change the XP multiplier ?? that I can change the amount of XP I earn

fli ngtrainer.com

I can't use it because it's paid '-'

[machine4578]

Can you give me an example of an item that is considered ULC? (Unlockable Content)

Spoiler

So I can use GiveItem and test if it's removed or not with my d3d9.dll patch.

Thanks,
Sun

here is Helix item
000001C7915AD3A2 //Werewolf Helmet

here is UbiConnect reward
000001CDB835A4FC //Ezio's Outfit

Twilight items maybe are handled different too(must own Ragnarok dlc)
000001EA12E26C6D //Twilight Bracers

Berserker pre-order items are handled different too i think
000001B91B7D4120 //Berserker Bracers

[SunBeam]

^ Should be enough to test Thanks. Wanna see if I have to kill the function doing the removal -OR- the JE->JMP is sufficient. I found that the removal function is called from 4 spots.

[devinparker19891954]

Ok so we still using the 1.5.2 table an I don't even have the d3d9.dll installed any more will someone be a sport an remind me what page that's on I had a new GPU put in my pc an the person who does my work didn't listen an back up anything so I'm starting almost from zero I would have done the GPU install my self its pretty much plug an play but the watercooler I had installed wasn't something I wanted to get wrong lol

[SunBeam]

Got it:




Aside from the arrays of bytes, I've also adjusted the first CALL in the ASM doing the rip + readIntereger( rip + offset, true ) + size_of_command part. AOB1 isn't a CALL anymore, found the direct function (to avoid that dynamic call). As such I needed to change the code so it doesn't read the CALL destination (from the aob). Apart from that, Entity is now at 0x15F8 (not 15F0 anymore).

AC Valhalla Inventory Editor - 1.5.3, Table v1.0.CT

(498.18 KiB) Downloaded 1920 times

BR,
Sun

P.S.: Note that I haven't fixed everything in the table; just that Edit Quantity script that was reported broken. You'll have to manage from here. Cheers.

[machine4578]

Got it:

Spoiler

Aside from the arrays of bytes, I've also adjusted the first CALL in the ASM doing the rip + readIntereger( rip + offset, true ) + size_of_command part. AOB1 isn't a CALL anymore, found the direct function (to avoid that dynamic call). As such I needed to change the code so it doesn't read the CALL destination (from the aob). Apart from that, Entity is now at 0x15F8 (not 15F0 anymore).


AC Valhalla Inventory Editor - 1.5.3, Table v1.0.CT


BR,
Sun

P.S.: Note that I haven't fixed everything in the table; just that Edit Quantity script that was reported broken. You'll have to manage from here. Cheers.

much appreciated, thank for helping fix the EditQuanity!

i have the rest already fixed. will post very soon.

-edit

ok here is the updated table SunBeam posted above with the rest of the options fixed as well.. thank you again to budabum for the org table and SunBeam for taking time to fix the EditQuanity option! have fun!

[eyecrave]

New Items

dq 000001F01E9ADC8B
dq 000001F01E9ADC3A
dq 000001F01E9ADCDD
dq 000001F01E9ADBE9
dq 000001F142C44E9B
dq 000001F142C452EA
dq 000001F19A42DE52
dq 000001F19A42DF7E
dq 000001F19A42D98A
dq 000001F19A42DA04
dq 000001F19A42DA7E
dq 000001F19A42DAF8
dq 000001F19A42DB72
dq 000001F19A42D9C7
dq 000001F19A42DA41
dq 000001F19A42DABB
dq 000001F19A42DB35
dq 000001F19A42DBB0
dq 000001EDF6947A20
dq 000001EDF6947A2A
dq 000001EDF6947A34
dq 000001EDF6947A3E
dq 000001EDF6947A48
dq 000001EDF6947A52
dq 000001EDF6947A5C
dq 000001F20D670D5D
dq 000001F20D670D92
dq 000001F17E7D1AE5

Thanks for posting. 2 of the codes don't give anything but the rest are working.

dq 000001F01E9ADC8B oxi eimyrju / dane axe
dq 000001F01E9ADC3A hugr reaper / scythe
dq 000001F01E9ADCDD heleister / spear
dq 000001F01E9ADBE9 blade of the damned / short sword
dq 000001F142C44E9B bloduppskeru / scythe
dq 000001F142C452EA alfheimr's arm / spear
dq 000001F19A42DE52 logafulgr / raven skin
dq 000001F19A42DF7E ?
dq 000001F19A42D98A blood elf bracers (solar)
dq 000001F19A42DA04 blood elf hood (solar)
dq 000001F19A42DA7E blood elf eye-wrap (solar)
dq 000001F19A42DAF8 blood elf greaves (solar)
dq 000001F19A42DB72 blood elf armor (solar)
dq 000001F19A42D9C7 blood elf bracers (oracle)
dq 000001F19A42DA41 blood elf hood (oracle)
dq 000001F19A42DABB blood elf eye-wrap (oracle)
dq 000001F19A42DB35 blood elf greaves (oracle)
dq 000001F19A42DBB0 blood elf armor (oracle)
dq 000001EDF6947A20 indian brotherhood (back) tattoo
dq 000001EDF6947A2A louisiana brotherhood (back) tattoo
dq 000001EDF6947A34 mongolian brotherhood (back) tattoo
dq 000001EDF6947A3E parisian brotherhood (back) tattoo
dq 000001EDF6947A48 persian brotherhood (back) tattoo
dq 000001EDF6947A52 spanish bortherhood (back) tattoo
dq 000001EDF6947A5C west indies brotherhood (back) tattoo
dq 000001F20D670D5D iridiscent axe / bearded axe
dq 000001F20D670D92 shimmering shield / light shield
dq 000001F17E7D1AE5 ?