[Request] [STEAM] Crown and Adventure [DEMO]

[yuumura]

Game Name: Crown and Adventure
Game Engine: ?
Game Version: STEAM - DEMO
Options Required: Inf. Resources, Exp.
Steam Website:
Other Info:
fun game, similar to total war.
can find exp, but can't find the ducats (i'm dumb)

[azmma]

I would like that too
I traid to find ducats wasnt able to find it iam not that good at CE

[OneMoreMFlogin]

Ducats, Family Reputation and the Current Level XP for the characters level are 4 bytes
I am almost sure that everything else is encrypted.

I have always found success by only changing the value ONCE and then combing through the results
Eventually you will get it through perseverence.... I recommend building up ducats until it reaches a larger Prime Number.
Personally I will go out of my way to try something like searching 7703, buying 15 of a resource, then searching 4703
BUT! I will never change that value twice, because of the XOR stuff going on. Once you find it once? Change it to something stupid high.... because finding them gives you the general location for everything else.

Once the value is stupid high, finding it for each time you open the game allows you to quickly narrow down where the new heroes XP you get are.

Finding the current XP for a character "might" be easiest if you are high enough in level for the numbers to get serious. You can not search for a value near the end of a level - then level up - and search for the new value. Each level is ITS OWN value. BUT! When you find that XP value? Setting it to something that is absurd (like 99million)... all of that 'extra' XP beyond the current level gets moved on to the new value, which means if you set it higher than the total sum of all the levels... then you insta become the max lvl 60.

Family Reputation is also something that you can find once you find something else, and I have found it possible to do multiple value change searches for this one. Finding the value for the units is sorta pointless, as they have hard gaps between evolutions


Now that I seriously think about this again... it might be easier to find XP first... then use the location for several of the characters to search for your Ducats ONLY ONCE, and never change the value in game while you test out various addresses.

I have been told that finding item count or attributes is possible if the values are low (probably single digits) but have never been successful... all the rest is encrypted.

I am sure that doing a stack trace would get you all the numbers easily.... but I am not skilled enough to do that.... finding the initial encrypted value is hard enough for me.... but I do not have the skills to actually change it

Good Luck!

[azmma]

Ducats, Family Reputation and the Current Level XP for the characters level are 4 bytes
I am almost sure that everything else is encrypted.

I have always found success by only changing the value ONCE and then combing through the results
Eventually you will get it through perseverence.... I recommend building up ducats until it reaches a larger Prime Number.
Personally I will go out of my way to try something like searching 7703, buying 15 of a resource, then searching 4703
BUT! I will never change that value twice, because of the XOR stuff going on. Once you find it once? Change it to something stupid high.... because finding them gives you the general location for everything else.

Once the value is stupid high, finding it for each time you open the game allows you to quickly narrow down where the new heroes XP you get are.

Finding the current XP for a character "might" be easiest if you are high enough in level for the numbers to get serious. You can not search for a value near the end of a level - then level up - and search for the new value. Each level is ITS OWN value. BUT! When you find that XP value? Setting it to something that is absurd (like 99million)... all of that 'extra' XP beyond the current level gets moved on to the new value, which means if you set it higher than the total sum of all the levels... then you insta become the max lvl 60.

Family Reputation is also something that you can find once you find something else, and I have found it possible to do multiple value change searches for this one. Finding the value for the units is sorta pointless, as they have hard gaps between evolutions


Now that I seriously think about this again... it might be easier to find XP first... then use the location for several of the characters to search for your Ducats ONLY ONCE, and never change the value in game while you test out various addresses.

I have been told that finding item count or attributes is possible if the values are low (probably single digits) but have never been successful... all the rest is encrypted.

I am sure that doing a stack trace would get you all the numbers easily.... but I am not skilled enough to do that.... finding the initial encrypted value is hard enough for me.... but I do not have the skills to actually change it

Good Luck!

Ok i did what you said i had 9006 ducat i searched for 9006 on 4 bytes and found 61 values then i bought 10 mats for -2000 then did ( changed value ) next search and i got only 2 vlaues for 10 and 1769287539 and both didnt change what i have so thos 2 werent the ducats values
Anymore adivce or what did i do wrong ?
Thanks for teaching btw i appreciate it

[OneMoreMFlogin]

Okay.... writing this in the middle of the day, when my thoughts are clearer

So I went back in and started a few new games. I ALWAYS search for the XP of the hero first... this number seems to be free from encryption, as the value holds from one battle to the next SO LONG AS YOU DONT LEVEL UP. As I said before, this game carries over the unused XP from one level to the next, so finding it one time, and changing the number to 99 million gets you all 50 levels instantly.... or as soon as you gain xp from the next battle.

This provides you with the general area for ALL the other addresses, and their temporary storage when they get pulled off of the stack or before they are put on the stack.

Once you have your hero at lvl 50, the XP value will be 245,000 as 4Bytes, it will always be easily found, and the number of addresses that show up when you find it will only increase as you gain more and more heroes.

From here, I shut down the game & cheat engine and start it all back up again. I PAUSE THE GAME QUICKLY! I only do this because I know the game must display the value of ducats, but that value has not changed yet - meaning there is no reason I can see to put it on the stack (XOR encryption).

Search for the current value of Hero XP (245000)[4bytes] and move ALL of the addresses to the bottom. There should be a good many all within one single range (representing the total number of lvl 50 chars in the game?) and a few other individual locations.

Now search for your ducats value as 4 bytes. DO NOT CHANGE THE VALUE. Do not unpause the game. There shouldn't be too many in the list, a few hundred. From that list I like to individually pick out the addresses that most closely match the addresses from the Hero XP search. I change ALL of those to 99 million (a huge number, but it will still display it in full in the merchant shop, making it easier to find other heroes by searching for the ONLY number in the game that is so huge and also close to your other stuffs)

Before I unpause, I use my quicksave just incase. Now is the worst part.... trial and error. The game MUST put that 99 million on the stack for it to stick permanently. But if you spend money? The number on the stack already, gets used. I have even failed to get this to stick when I earn money by killing bandits. Every time I have succeeded in getting the value to stick..... I have done nothing. Nothing but wait for the game to somehow write that number I have changed.... not crash when it does so... and display the new value in time before I go crazy from waiting.

I will jump in again soon and try a handful more times to see if i can deduce the exact action that causes the game to take this temp ducat value that initially loads, and toss it on the stack as though it were normal.

Family Rep, like XP, is not encrypted, but the address does not carry over from one level to the next. So long as you can earn rep, but not level up, you will be able to find it like any normal value.

[yuumura]

this game use XOR (ex. 1821417244) to fake the value
the easiest way to cheat ducats is by manipulating items and sell in bulk

this is how : ex. recruit badge

1. search for 4 byte unknown value
2. sell 1 recruit badge
3. search for decrease value by 32
4. sell 1 recruit badge / buy from the store
5. search for decrease value by 32 / increase value by 32 (you know the drill)
6. repeat until you got 2 values with XOR (ex. 1821417244)

max item 99 (to prevent crash) so you add (32x99) 3168 to that value

profit

[OneMoreMFlogin]

this game use XOR (ex. 1821417244) to fake the value
the easiest way to cheat ducats is by manipulating items and sell in bulk

this is how : ex. recruit badge

1. search for 4 byte unknown value
2. sell 1 recruit badge
3. search for decrease value by 32
4. sell 1 recruit badge / buy from the store
5. search for decrease value by 32 / increase value by 32 (you know the drill)
6. repeat until you got 2 values with XOR (ex. 1821417244)

max item 99 (to prevent crash) so you add (32x99) 3168 to that value

profit

WHEW! someone who knows exactly what they are doing

Would the same process work for resources? So long as you are not wholesale changing the number, but simply adding 32*X to the two addresses...
where X is the desired amount of resources?
(i can only narrow them down to 5 addresses with the same value... manipulating them caused CTD)

this is my first time hunting XOR values... I tried to teach myself how to backtrace.... but, yea... that idea died a lonely death

Why 32? Is it simply the most common XOR manipulator? or is it found specific to each game?

[yuumura]

......

it's simple and not that hard just add (32*X) to the XOR

I'm not experiencing any CTD

(keep in mind max item are 99)

ex. when you search an address with value of (1) = XOR - (1*32) + 3168

all resources and items are XOR (some quest related item maybe have 3-4 address)