Cheat Engine

[Snooman]

Is there a feature in CE scanning for function results?
Maybe similar to Ultimap...

Lets say I know that a function returns EAX=14
So I'd like to scan for all executed addresses of RET/RET xx for the case that EAX is 14.

Next time I re-scan/filter the found addresses when I know EAx=18.

About so..


Next thing that comes into my mind is to have a similar scan for CALL's when I know a given parameter (EAX, ECX, ExX or [ESP+(00..20)]) must have a certain known value.. but thats another story.

[Dark Byte]

rightclick on a RET instruction and choose "Find out what addresses this code access" (it's a special case)

[Snooman]

I am searching for the function - so I dont know the address of the RET.

[Dark Byte]

No, but I can try to add something in combination with ultimap1/2

when using ultimap tell it that the function you're interested in has been executed, then tell it to hook all functioncalls that are still valid.

then get the value you want and do a scan for functionresults that returned the specific value

i'll add it to my todo list

[Snooman]

Thanks again! Sent you a litte donation for your great work