Cheat Engine

creo · Newbie cheater Reputation: 0 Joined: 21 Dec 2008 Posts: 13

I have a value I am looking for. When I search for it, I get many results. I have a way to cause the results I would have been interested in (which is only 3 or 4 of the total) to change and then be excluded from the search results and create an exclusion set of memory addresses.

So, I need a way to search for my value. Then take action which will cause my values of interest to change. Then search again for the reduced set that contains those locations still containing my initial search value, but are not of interest and are now known to be false positives.

Now, I would like to search for my value again in a new search that would ignore any previously identified "false" positives from my exclusion set.

Is there a way to accomplish this short of writing a script, or is scripting the only solution for this requirement?

Thanks,

Creo

Zanzer · Posted: Thu Oct 22, 2015 6:53 pm Post subject:

I'm not certain how the first set becomes an exclusion set.
If you search for your value, change the value and then search for the new value...
That first set still contains the value you want. Why would you exclude it?
If the value for which you want does not change, then why would you rescan for a changed value?

Either way, sounds like you're in need of a script.

creo · Newbie cheater Reputation: 0 Joined: 21 Dec 2008 Posts: 13

The issue is that the first set contains matches that existed at the time of that search. Subsequent searches will only work against that set of initial matches. However, I have no easy way to narrow my search to only what is my actual target, but I can narrow my results to all things that are "not" my target.

So, if I can use those results against a new search to exclude them from future matches, then the net will be only the 2 or 3 that are what I want.

I cannot get to what I want directly from the first set because anything I do to actually identify them will destroy them since the process will force a change of state and the values I am trying to find will no longer exist. I have to find them while they exist and to do that I need a way to have an exclusion list (which I can identify through the process described earlier) to use when starting a net new search.

Rydian · Posted: Fri Oct 23, 2015 4:39 am Post subject:

... then won't the second search "destroy" the results as well?

Zanzer · Posted: Fri Oct 23, 2015 10:00 am Post subject:

Maybe the following will be helpful to get you started.
Still having a hard time identifying your exact requirement.

So lets say the value you want does not yet exist, but when it's created, you will know its starting value.
Do an initial scan for that value and then run the following script:

creo · Newbie cheater Reputation: 0 Joined: 21 Dec 2008 Posts: 13

Thanks for the example scripts.

Logically, the two scripts look to capture what I need from what I can tell. Assuming that the object addr from the first script is persistent and will be available when the second script runs.

Not being that familiar with Lua scripting though, I am not entirely sure what this will net me since it does not output any results nor alter the scan results that I have.

What pieces would need to be added to have the second script alter the list of found addresses in the main scan results display to only show those that are net new for this scan?

EDIT:

Ok, I added this to the second scrip you provided:

print(list.Address[i])

And the results I get are as expected, so the second script is finding what I would expect it to find. Now, to add code to have it reduce the displayed "foundlist" to only these values...

Thanks again for the assistance.

Cheers,

Creo

EDIT2:

Ok, I am just now realizing that the results found are being added to the AddressList and tagged with description of "Plugin Address". So this is a suitable solution for my current needs.

For future reference though, I wold still be interested to know if the current Foundlist for the active memscan can be altered via such a script...

Cheers,

Creo

Zanzer · Posted: Sat Oct 24, 2015 5:20 pm Post subject:

To my knowledge, you cannot manipulate the FoundList displayed within CE manually.
Best you could do is run the First Scan and Next Scan actions.

creo · Newbie cheater Reputation: 0 Joined: 21 Dec 2008 Posts: 13

I was thinking there might be a way to interact with the "next scan" to filter the results at that point which would work for my needs, but I have yet to find it.

I will keep digging, seems that would be something that would be exposed to Lua.

Thanks,

Creo

Dark Byte · Posted: Sun Oct 25, 2015 3:43 pm Post subject:

the "Foundlist" object is just a readonly view of a file on disk

you can find the path to it using getCurrentMemscan().ScanresultFolder

to manipulate this list, first release the file lock (foundlist.deinitialize)
and then you can edit the file.
when done, use foundlist.initialize

the tricky parts is editing the files (previous memory, etc...)

creo · Newbie cheater Reputation: 0 Joined: 21 Dec 2008 Posts: 13

Thanks for the information. I will have to look into that a bit. I am guessing the file is XML?

Creo

Dark Byte · Posted: Fri Oct 30, 2015 6:02 pm Post subject:

worse, raw binary data.
addresslist is an array of pointers
memory is an array of the type that was used to scan with