Cheat Engine

[tariqoo]

Hello,

im trying to decrypt some memory address(player team)
its not a normal encryption the value changes every time
like :
encrypt(1) = 3424234234
encrypt(1) = 4324327432

im trying to get the function that decrypt and encrypt

i searched what access the address
i found 2 functions they are called by 2 another functions
the first function i found do : read memory value
the second function i found do : write memory value
and i think the first is called by decrypt function or some function uses decrypt function
and the second is called by encrypt function or some function uses encrypt function
the question is:
how to find the functions that called this 2 functions
in the same time(
i mean when i change the team cause many function will call
read/write function and i wont be able to see what is the function that call encrypt/decrypt
)
Thanks



also im sorry if i said some thing not easy to understand
english is not my main language

[Dark Byte]

In the more info click on the "S" button, and in the stackview window rightclick and choose a manual stacktrace.
That should show a list of functions that called it (latest one at the top)

If it fails(e.g no proper stackframe or ebp messed up), use the raw stackview to figure it out (look for modules)

[tariqoo]

Thanks,that worked
i will look for encrypt/decrypt functions now