Page 1 of 1

curious expedition please help

Posted: Sat Jan 29, 2022 10:23 pm
by subu
hello I am trying to make a trainer for the curious expedition. the issue is address changes COMPLETELY not a single similarity and I am unable to make pointer scans for this reason. Also Single pointer scans lists give me 0 results also I have only found success in finding pointers manually, though some only lead me so far then I have to find another route the furthest Ive got is 4 offsets now im stuck mov eax,[esi+edi-01] normally what Im doing is I would scan the first value in the brackets [esi (then calculate edi-01 and use that as offset)] but esi is smaller than edi I and if I do scan EDI I dont want to go through 540 results by hand..already went through atleast 100.. when I try to write an injection (I try to copy a template from a video usin my own values and registers my game crashes.) i'm feeling really braindead I've been stalemate for 2 weeks :cry:
thank you in advance

dont know if this will help
address with 4 offsets
0CE6A6D0+03+f3+a3+03
-> what accesses
mov eax,[esi+edi-01]
EAX=0CE00000
ESI=000001C4
EDI=0CE6A511
8B 44 3E FF
6205A7A0

Re: curious expedition please help

Posted: Sat Jan 29, 2022 10:29 pm
by subu
Sorry Administrator I think I posted this in the wrong area

Re: curious expedition please help

Posted: Sat Jan 29, 2022 10:46 pm
by STN
subu wrote:
Sat Jan 29, 2022 10:29 pm
Sorry Administrator I think I posted this in the wrong area
Moving it to an appropriate section.

Re: curious expedition please help

Posted: Sat Jan 29, 2022 10:50 pm
by Speedwagonz
subu wrote:
Sat Jan 29, 2022 10:23 pm
hello I am trying to make a trainer for the curious expedition. the issue is address changes COMPLETELY not a single similarity and I am unable to make pointer scans for this reason. Also Single pointer scans lists give me 0 results also I have only found success in finding pointers manually, though some only lead me so far then I have to find another route the furthest Ive got is 4 offsets now im stuck mov eax,[esi+edi-01] normally what Im doing is I would scan the first value in the brackets [esi (then calculate edi-01 and use that as offset)] but esi is smaller than edi I and if I do scan EDI I dont want to go through 540 results by hand..already went through atleast 100.. when I try to write an injection (I try to copy a template from a video usin my own values and registers my game crashes.) i'm feeling really braindead I've been stalemate for 2 weeks :cry:
thank you in advance

dont know if this will help
address with 4 offsets
0CE6A6D0+03+f3+a3+03
-> what accesses
mov eax,[esi+edi-01]
EAX=0CE00000
ESI=000001C4
EDI=0CE6A511
8B 44 3E FF
6205A7A0
You can use the CE templates, it will generate a basic script for you.
I'd say your address is EDI-1 and the offset is ESI.

Re: curious expedition please help

Posted: Sat Jan 29, 2022 11:05 pm
by subu
only 0's i need a new address thank you for responding

Re: curious expedition please help

Posted: Sun Jan 30, 2022 3:16 am
by subu
lost 7 pointers i cant believe the addresses map even got reset too T_T(i died)

Re: curious expedition please help

Posted: Sun Jan 30, 2022 2:38 pm
by LeFiXER
The game uses CodeStage anti-cheat.

Re: curious expedition please help

Posted: Sun Jan 30, 2022 4:40 pm
by subu
Very interesting information thank you Lefixer

Re: curious expedition please help

Posted: Sun Jan 30, 2022 4:53 pm
by LeFiXER
subu wrote:
Sun Jan 30, 2022 4:40 pm
Very interesting information thank you Lefixer
You can use Mono > .NET info to see what classes and stuff are available. It also uses il2cpp. Although, it's not really my kind of game.