Cheat Engine

[Adrien]

I need help figuring out what to do for assembling a script for godmode in Far Cry 3. So far, I've found the instruction, the instruction address, the opcodes for health, and the disassembler.

Here's what I've found.

All Health is written to with this piece of code

[UnIoN]

you have to find an adress and value that indicates whitch health is curently decreasing.

you have to figure this out by yourself, trying to guess for what a given value could stand for.

basically this can be done when you do the following:
find one or better more enemys and find the health for each of them before they die. with that addresses you can use in the disassembler the tool dissect structure to find values that are always the same and could be used to describe = this is an enemy

for example at offset 2F there could be a byte value with 1 when its the enemy health and 0 when its your health that is decreasing.

with that information you write your injection by comparing this value
for example:

[Adrien]

It would be very much useful if I had a controlled environment in-game where I could go about doing this. It took me 15 minutes to understand what you wrote but I think I can make it work utilizing the method you described and the code you wrote; I'm relatively new to playing around with code (I was never able to look at code for more than 20 seconds without getting a headache from trying to comprehend it) however I'm determined to get this right. When all is said and done, I'll present to you the final code, for verification that it's right in terms of syntax and stuff. Thank you!

Edit:
Okay, my first problem is that the enemies die too fast. I don't know the max health for an enemy and they die way before I can get an accurate address. However, I DO know that enemy health is PROBABLY between 0 and 500. it wouldn't make sense for an enemy to have greater health than the player... I've taken the least damaging weapon in the game and shot enemies to find their health, but they die. Way. Too. Fast.
The process I'm using for the scanning is (Float)>(Unknown Initial Value)>FIRST SCAN>Decreasing Value (every time I hit them with a round of ammo)>NEXT SCAN>Decreasing Value>NEXT SCAN>*they die*>Exact Value (0)
At that point I have more than 10,000 addresses left in the address box. Did you try doing this yourself?

Edit 2:
Okay, I've found another way to find an enemy's health address. Find the health disassembler, which is FC3_d3d11.RunGame+3EE061, and right click and find "Find out what addresses this instruction accesses" and you get a debugger window. You shoot your enemy and make them lose a bit of health, and that'll show up in the debugger window with the amount of health they have (as a float - health is always a float here) and how many times it was accessed - this is the number of times you've shot your enemy. Every enemy/animal has their own address for health, but they all access the same exact code. I know I'm beating around the bush here; I need to know what differentiates the player, an enemy, and an animal. Now, I need help... Again... I did the Dissect Data/structure but I don't know how to use it.

[UnIoN]

hi,

i will give you guidience,



not only the information from dissect data from your or from enemys health can be used for comparison,

sometimes you can also use the information given from "find out what writes to this address"



in this example from far cry 3 (v. 1.5) its the value from the register "edi" that gets my most attention.





the next part what you need to do is, find an place to inject your hack,


most the time you can use the address given from "find out what writes to this address".


try it out, you will find out that your code works, and you are immortal, but still so are your enemys, with a funny side effect (they are undead, they will still attack you even if they lost their head ^^)



now you need to read the code further and try to find the part, where the game sets your health when you lost some.


so you need to go up in the code and find that part that stores your health to "xmm0".


near some other comparison commands like ucomiss and comiss and other commands like movaps, you will find this:

[Adrien]

Sorry for the month-wait response, but where do I find the xmm0 storage part? Only place I could find anything about xmm0 - xmm7 is when I do the debug window and click for more information about the instruction. As is seen here in the FPU, I see all the xmm# Registers and my values for health in the xmm0 and xmm1 registers.

I apologise for my incompetence. This is my first time without training wheels.

EDIT1: I suppose a better question would be "How do I access the xmm# registers so that I may edit them?"

EDIT2: I finally grew a brain and read into your post deeply. I created an auto assemble script, but I'm stuck as far as making my health value as much as I want it to be (double, to make sure the health bar never visibly goes down). I was thinking maybe a script like