Wednesday, August 25, 2010

How to cheat in Realm of the Mad God

I have been playing Realm of the Mad God off and on since its debut but never have come across anyone who actually could successfully cheat in the game until a few days ago. I couldn't pass on some hacking Realm of the Mad God fun so I searched the AS3 code with Sothink for anything that would be helpful in doing so. I found a couple locations in the AS3 code or raw data which would handle cheaters in game("handleCheater") with one being the actual function and other calling the function. If you try changing any values in game without first stopping the function the game deletes your character and kicks you.

I chose both the function and function call shown below to NOP(02) using the free hex editor called HxD. You could use Cheat Engine or Memory Hacking Software but I believe this program makes the process simple and quick. I tried the hex editor tool in MHS but it didn't work for me. You do not have to just rely on hex editing/replacing AoB's you find but can change any values you find using CE or MHS as long as you NOP the handleCheater function first. I found that for Google Chrome browser the first process listed is the one you would need and for FireFox browser you need to locate the plugin-container.exe process when using HxD.

com>company>assembleegameclient>game>GameSprite :
//66 18
_as3_getproperty _-82
//66 42
_as3_getproperty player_
//46 26 00
_as3_callproperty toString(param count:0)
//4f d9 0a 02
_as3_callpropvoid failure(param count:2)
//47

and

com>company>assembleegameclient>object>Player :

//4f d3 18 00
_as3_callpropvoid handleCheater(param count:0)
//26
_as3_pushtrue
//48

I was fooling around with this function I found which obviously involves damage amount and shooting. I replaced the get damage_ property with a different one in the code. I wasn't sure what to expect but I ended up with completely disabling all enemies shooting projectiles.

com>company>assembleegameclient>net>_-Gs :

private function _-GL(param1:Shoot) : void
{
......
//66 94 05
_as3_getproperty damage_
//4f d4 0d 05
_as3_callpropvoid _-q(param count:5)
//d0
_as3_getlocal <0>
//66 1d

and chose the getproperty //66940c from GameObject to replace it.

I was using MHS/CE for searching my STR in game using long/4byte and changing the value for doing absurd damage. You would have to find the correct address every time you entered/exited a dungeon using this method so why not find a way to permanently set your attack with a value already used in the game by replacing some AoB's in memory. I did just that and it didn't take very long to do. I found that the game loads all your char attributes through a function after you selected a server and if you search through the code you'll find "HitPoints", "MaxHitPoints" or through the decrypted SWF you'll find "Attack", etc. You will find that "Attack" is associated with "_-Ka" throughout the whole code. I found a beneficial variable used in the same object that we can use instead of the "_-Ka". You'll notice it is used twice from the object below but we'll just replace both.

com>company>assembleegameclient>object>Player :

override public function toString() : String
{
........
var _loc_1:* = ...+ "" + _-Ka + "" +...

//11 72 00 00
_as3_iftrue offset: 114
//60 99 08
_as3_getlex _-Ka
//a0
_as3_add
//2c ab 05

and we'll replace with :
//60 86 0c
_as3_getlex _-6E (10000)
public static const _-6E:int = 10000;

The AoB's needed for cheating Realm of the Mad God are found below which I'll try and update once the game has been updated or you could find them yourself.

//Disable anti-cheat in game - Must replace at title screen - Need to Update
Search for: 661866424626004fd90a0247
Replace with: 020202020202000202020202
Datatype: hex-values

//Disable anti-cheat in game - Must replace when in game - Need to Update
Search for: 4fd318002648
Replace with: 020218000202
Datatype: hex-values

//Disable enemy shooting/damage - Must replace at title screen - Build #106 NEW - 10/22/10
Search for: 66d2034fcd0b05d06628
Replace with: 66f9014fcd0b05d06628
Datatype: hex-values

//Change Attack Damage - Must replace at title screen - Need to Update
Search for: 123b0000609908244ba3
Replace with: 123b000060860c244ba3
Datatype: hex-values

//Change Attack Damage - Must replace at title screen - Need to Update
Search for: 11720000609908a02cab05
Replace with: 1172000060860ca02cab05
Datatype: hex-values


Labels: , , , , , ,

Friday, August 21, 2009

Ashen Empires Anti-Macro Breaker Released

I decided about a week ago that making potions in Ashen Empires is to cumbersome and missed the days of not having any sort of macro protection in game. It is also a bummer that they do not allow a character with a maxed trade skill such as alchemy to produce more than five at once. It did not take long for me to commit myself to breaking this anti-macro system of theirs. The system uses a random set of two or three in game items which have to be matched out of six items. I could have made my detection pixel based but instead chose to find differences in copied bitmaps sent to picture boxes in the program. I will have to attempt a simple x/y coordinate pixel color match some other time.

The program needs a desktop resolution of 1440 by 900 and the game out of maxed state by using alt+enter to work correctly. I also recommend setting the max particle setting in game to zero for better accuracy. There should not be an empty black space while doing the trade skill because it would trigger a non-stop false 100% anti-macro screen match. I would also make sure that the craft window does not show up right where the anti-macro screen does by setting it to the side before turning it on and close all macro bars. I tested it with two different computers(slow PC/old CRT monitor, fast PC/wide flat LCD) and it worked fine.

When it finds a match of the anti-macro screen it sends the keyboard F10 function key and when finished with clicking correct pictures it sends the F9 key. These are what you should use in your macro program for stopping/pausing(F10) and playing/continuing(F9). I included a very good macro program I found from PlanetSourceCode.com but changed a few things in it to work much better and work with the anti-macro breaker program. It only records mouse movements and clicks but does so very well unlike some others because I can pause the macro at any point and continue easily where it left off.

So all you old AE macroers or new have fun macroing once again!

I added a video of it automatically clicking the correct pictures quickly along with the download link below.



IF YOU ARE HAVING TROUBLE WITH THE TABCTL32.OCX NOT BEING INSTALLED PLEASE VISIT THIS LINK http://www.ascentive.com/support/new/support_dll.phtml?dllname=TABCTL32.OCX
AND FOLLOW THE DIRECTIONS.



DOWNLOAD HERE - AEamb.zip

Ashen Empires anti-macro breaker

Labels: , , , , ,

Sunday, May 24, 2009

AutoFish v1b fixed and more to come..



EDIT: I added auto game updater and a way to log in to GaiaOnline through the bot so it should work with every game update.
EDIT: I just fixed the normal method of botting so it doesn't save too quickly and not save, so download new version below.

I have made some minor fixes to the AutoFish v1b fishing bot which is for the multiplayer online fishing game from GaiaOnline.com. I fixed the correct game file version and the base url/variables. I fixed the silent fishing method so that it will actually catch the correct rare fish if one is available of course and also made it catch random available fish instead of the same every time. I forgot to change each fish ID in the old ActionScript code so if one did catch a rare fish it could have caused problems thus not saving. I also had to change the Rare fish check SWF file as well so it would catch one if possible. I cleaned up some ActionScript code in a few. I took out the hot keys for the manual method. There might be some other fixes that were done awhile back that I missed since it has been quite awhile. I was going to add a fake fish catch/fish escape alert loop inside the Silent method ActionScript code but wasn't sure if it would be another efficient security. If anyone wants this added then maybe I'll post a download link for a new Silent.swf in the main AutoFish v1b post later.

I have been working on a Stick Arena: Ballistick trainer off and on since the game came out but never got around to making an actual release. I was actually the first one to have a working reload cheat and others as well that some witnessed in the game..hehe. They have fixed the reload cheat unfortunately but other cheats I did have work fine still. All but a few of the cheats will be coded in ActionScript 2 because I plan on making it easier for people to update the trainer by simply downloading updated SWF files and placing them into the folder. There will definitely be a few new and never before seen cheats or features in this trainer. Picture preview below and video to follow soon..


Look for this SAB trainer in the next few days along with a new FFR trainer/bot.

DOWNLOAD HERE - AutoFishv1b.zip
AutoFish v1b - GaiaOnline.com fishing bot *Updated December 26th, 2010*

Labels: , , , , , , , , , ,

Sunday, November 02, 2008

BaseBods - Multiplayer Flash Baseball Game



I have been waiting for an online real time multiplayer Flash Baseball game for quite awhile now but tomorrow the wait is over. I decided to do a quick Google search Friday and ended up at BaseBods and noticed it was just about to launch which was awesome. The game is developed by a company called State of Play which created the first ever 'game as a single' in September.

What is BaseBods?

From the main website..

"Basebods is a real time multiplayer Baseball game. It’s big, it’s free to play, and you can become a part of it soon with just a couple of clicks.
Play against your friends, or anyone else in the world, or take on our own specialist teams in the exciting Single Player Challenge.

The best bit is still to come, and it’ll be available soon after the initial launch. You’ll be able to build your own awe-inspiring team of Bods, and customise the way each one looks. Want a Ninja, in shiny white sneakers, using a magic wand as a bat? You got it! You can also buy new parts for your stadium, or a new location (and yes, you can play on the moon if you like) – and then show your friends you’ve got the best looking ballpark in the world! Or the moon.

So, it’s free and it’s nearly here. All together now… Baseball for All!"


Expect to see me there playing the game and winning.

Labels: , , , , ,

Sunday, June 01, 2008

AutoFish v1b Gaia Online Fishing Bot

UPDATED (December 26th, 2010):
- fixed version finder and should choose not to load lake automatically

UPDATED (March 8th, 2010):
- fixed updated login method

UPDATED(October 25,2009):
- added auto game updater so it should work every update
- added all fishing rods in game
- added a way to log in to GaiaOnline through the bot because required

UPDATED(May 24,2009):
- fixed Silent method rare fish chance
- added random fish caught to Silent method instead of always same fish
- fixed rare fish chance on RareFish? check
- cleaned up some ActionScript 2 code

UPDATED(October 25,2008):
- updated game SWF location
- fixed problems with entering captcha
- added hot keys to manual fishing method for easy fish selection
- fixed possible rare fish catching problems
- added a countdown timer notifier for Silent method
- Silent method and possible Rare fish catching will now show caught fish in inventory
- Silent method will now start after finishing a regular or manual saved bucket


UPDATED(June 27,2008):
- added captcha alert system due to new bot prevention security
- replaced Status feature with rod select loader
- added automatic rare fish catch to all three methods if rare chance is available




I'm back after a small break. I'll be updating the blog with much more frequent updates due to a few major projects I'm going to be working on. One of these projects has to due with a free online radio. The second project is the universal Flash Trainer Kit I've mentioned quite awhile back. I'm adding another feature to this FKT which is a Flash variable scanner that will able to scan and gather/save variables for any Flash game/app you come across while browsing the internet using the FKT. I'm most likely going to make a domain dedicated to this project sometime. I've updated the AQ Trainer a few days ago just to get it working again and will release it sometime next week along with the manual GunBound aimbot.



AutoFish v1a is a fishing bot for the fishing game located at www.gaiaonline.com. It has features that no other fishing bot has such as a stat tracker, instantly catch last/current fish, three types of fishing bot methods and best of all free. Note that it will auto select highest available bait first and go down. If you press Stop while using any of the fishing bot methods it will clear the Total fish caught stats so if you plan on still fishing using any of the method then just use the Pause/Continue option. Make sure you keep all files in same directory or the bot will not work. The bot when minimized hides in the Quick Launch task bar and to load it again then just double click it. I have tried my best to make this bot is error free and work 100% so anyone could use it without trouble.

The silent fishing method is the best method to use for catching fish since it hides your identity temporarily and catches nothing but max available fish for selected bait/fish level without anyone even seeing any kind of bubble alert showing up at all. If you try talking during this method you'll see that you are talking with the name "Administrator" in the chat. I wouldn't even worry about joining any room using this method. Use this method at Durem lake with F bait and will be raking in the gold.

The second fishing method will not hide your identity and will show bubble alerts while catching nothing but fish very fast. Sometimes you'll see a can or two being pulled using this method named.

The third and final fishing method is a manual type of fishing which allows you to cast at full power automatically, catch hooked fish instantly and catch last caught/hooked fish instantly. There is a time limit on how fast a bucket is filled while catching fish so be aware of that while using this method or you'll end up getting error/losing the fish/bait. I don't believe there is one for catching nothing but junk. This method is good for those wanting to only catch a certain type of fish very quickly. It will also tell you which was last caught/hooked so no need to remember. If you plan on using the no pull cheat with this method then just start the normal method and stop it which will activate it.

The stat tracker will work only when using the silent/normal methods and is pretty self explanatory, GPM(gold per minute).

I plan on adding another fishing method which will fish like normal/speed and catch some junk as well. I'm also thinking about adding a custom AI chat that will work at any time during fishing.

DOWNLOAD HERE - AutoFishv1b.zip
AutoFish v1b - GaiaOnline.com fishing bot *Updated December 26th, 2010*

Labels: , , , , , , , , , , , ,

Sunday, December 23, 2007

Paladin RPG Flash Game

Paladin is one kick ass Flash RPG game which was developed with inspiration from a series of Flash episodes by the author JAZZA. The game could not have been completed though of course without the help of a brilliant Action script/Flash coder who goes by Moonkey. If you want to see the game in action before trying it out then take a look at this Paladin teaser trailer they posted awhile back.

The game has cheats that can be unlocked by cracking the game every time and more so on a higher difficulty setting. It currently has 6 bosses, 9 Acts, spells, attack combos, leveling system, awesome game play music with cut scenes/animations! I hope they continue to work on this game in the future because it is easily one of the best Flash games I have seen. Still reading this?... Start playing below NOW!











Labels: , , , , , , ,

Sunday, October 21, 2007

Adventure Quest Trainer v2.5 Soon!

We recently had a wind storm hit here in Washington which knocked out the power for 1 1/2 days. I have been working on an updated version AQ Trainer which will fix that problem with auto battle options and instakill. It was a simple one line of code I forgot to add to the on/off switches which was to unload the SWF from the game. That was the cause of the game completely going gray and being shut down/unloaded. I am actually changing that Gigamesh auto battle to a user defined monster ID auto battle which will allow any ID/monster you want to auto battle. I'm not 100% sure if this going to work but I'm going to add an anti cheat detection option. I also found a way to completely hide a custom built SWF file from being seen by anyone..anyone mainly being the game developers because I know they can easily fix the code going through them. Just thought I'd let everyone know that they can expect an updated and 100% working AQ Trainer tomorrow!

Labels: , , , , , ,

Thursday, October 11, 2007

FFR Trainer v2 Released and fixed!

I just updated the FFR Trainer to v2 with working score cheat. The purchase/credits cheat and name cheat is not working though. That does not matter too much as long it is possible to get perfect/AAA on any song you want whether playing single player or multiplayer.

Remember that the pause shortcut is Number Pad key 0 and to resume Number Pad key 1 which makes it easier to do Score cheating of course.

I'm going to post the download link here and update the original FFR Trainer post as well.

DOWNLOAD HERE - FFRtrainerv2.zip
FlashFlash Revolution Trainer v2 - Fixed

Labels: , , , , , ,

Friday, July 13, 2007

Ashen Empires - Color Text Tutorial

I am posting this for all the Ashen Empire players who are curious to how the text color changing/name is done using Cheat Engine. I'm going to make this very brief because I am posting a video in Flash format as well to show how it is done(right-click the Flash SWF file below and click Play to watch).

EDIT: It does save when you log out of the game normally..

1.) You need Cheat Engine which you should have by now..if not DL it and install/setup CE.
2.) Open CE and set the Value Type: to "Text" and make sure the "Case sensitive" checkbox is checked.
3.) Log into AE.
4.) Go back to CE and select "Client.exe" as the process.
5.) Go back to AE and choose a Hotkey to use for our color change and add something to it such as "%t ..." without the quotes of course..
6.) Go back into CE and below the "Text:" in the textbox you will search exactly what you entered into the hotbar Line1 text in AE..so I would search for "%t ..." and hit the "First Scan" button to start the search.
7.) Once it is done seraching it will put all the found addresses/text into the list to the left of CE.
8.) There should be about 5 results in the list and the one we need should be at the very bottom so double-click it to add it to the list below where we'll be doing all the editing of the text located in the hotkey bar instead of within AE.
9.) Once you have located the correct address/text and added it to the list below we can now dbl-click below where it says "Value" or where you see the text for the hotkey which should bring up a small window title "Value" where we'll enter "@1: %t ..." without quotes and hit the OK button..DO NOT EDIT THE HOTKEY BAR within AE or it will mess up what were trying to do and will not work/will have to maybe just paste it back the "@1: %t ..." back into the value for the text.
10.) So now finally go back into the game and press the function key(F1-F12) you assigned the color text to and the text should now be a blue text in chat.
11.) If it didn't work then might need to re-log and start the process over or take a look at the video.



or DL the SWF here: http://www.source-sector.com/upload/files/colortext2.swf

color chart:

@1: = blue
@2: = green
@3: = light blue
@4: = red
@5: = purple
@6: = brown/orange?
@7: = regular chat color/name
@8: = gray
@9: = bright blue
@0: = black
@a: = bright green
@b: = bright light blue
@c: = dark pink?
@d: = bright purple
@e: = bright yellow
@f: = bright white



Have fun! =]

Labels: , , , ,

Saturday, July 07, 2007

PlatForm Racing Trainer

EDIT(Dec. 18th): Do not use Rank Hack, you'll be instant banned. Platform Racing Tutorial updated with races added to quick finish cheats and can also race any track regardless of points requirement.

I haven't posted for awhile now but I haven't forgot about the Adventure Quest and v3 Club Penguin Trainers. I also have to finish that GunBound Manual AIMBOT and the Flash Trainer Kit program.

I made a simple trainer for a multi player racing Flash game that was recently released by Jiggmin. The game is called PlatForm Racing and is fun for a few minutes but thats what a trainer is for. >=]

I have about 700 comments still to read through but considering just posting them all so I can start at 0 again. I have been answering some e-mails every now and then but the same questions get to me and especially considering some I've answered through posts. I'll go through the e-mails and answer what I can tonight.

EDIT: I updated the trainer so it works now and beware when using the GoTo Finish cheats and Points Cheat because if you finish race too quickly it will ban you temporarily on that server. It also seems like they fixed it so you can't probably go over the points allowed and if you do now while in game or not it bans you temporarily as well on that server.


DOWNLOAD - PRtrainer.zip

Flash game trainer for multi-player Platform Racing by Jiggmin

Labels: , , , , ,

Thursday, October 05, 2006

Flash Flash Revolution Trainer v2 *Fixed*

EDIT(12-18-07): FFR Trainer v2 is just released and now working again! Added a variable list which will allow quick modification to variables or functions. Video added below showing how to score cheat as well.

I finally finished a FFR Trainer v2 of the trainer/cheat for Flash Flash Revolution. I believe it wasn't the admins/mods of FFR that changed my total FFR score but was due to the score hacking I was doing. I ended up getting "01111" boo's or misses sometimes due to score hacking attempts sometimes which changed the total score to a long negative number thus changing the total FFR overall score. The Score hacking does work though but must follow the instructions so it works correctly. I was also banned a few days ago for impersonating a MOD/ADMIN(Synthlight) in the multiplayer chat or maybe was due to spamming but it was so hilarious. I had no idea a MOD was even in the room at the time and I can barely even see the text in the chat room which is a problem atm for the trainer.

YOU HAVE TO LOG INTO FFR WEBSITE USING INTERNET EXPLORER AND CHECKING THE REMEMBER: OPTION Within Internet Explorer.

Remember to allow the trainer to fully load the game so the trainer screen might be white for a few seconds and then will continue to load the game.

First you must remember to use the PAUSE shortcut which will be useful through the whole use of hacking with the trainer. Must have NumPad turned ON for all hotkeys to work correctly.

FFR Trainer Hack Options:

PAUSE Shortcut key = NumPad 0
UNPAUSE Shortcut key = NumPad 1

Score Hacks - This will open up the Score Hack window which you will be using for score hacking and I will discuss this further down..

Credits Hack(Currently not working but working on solution) - This will temporarily put your credits at 20k which in turn can be used for playing Secret Songs.

Purchase Hack(Currently not working but working on solution) - This will change the Purchase code/string in game temporarily thus allowing you to play all Purchased Songs

MP Rank Hack - This will allow you to enter any number or text for your Multiplayer Ranking identifier which can also be used for MOD impersonation. i.e. "MOD" next to your name in brackets..

Submit Hack - This will allow you to have your final game score to be posted into the multiplayer database or just simply into database?

Level Hack - This will change the song level number of the current song selected or after you select to play. You can also check to see the current song level number on the Score Hacks window by pressing "Get Current Scores" button. http://www.flashflashrevolution.com/levels/level_1.swf use that for testing songs for now..

Step Delay Hack - This is a pretty useful option which will either slow down the arrows speed delay or speed up and for whatever reasons go in reverse if in negative numbers.. The Default speed is 10 for all songs I believe? I found it works best with a value of 2 or 5..

Name Hack - This will change your name to anything you want but the chat room will block out the restricted characters, etc. and also can't be blank I noticed. You must be out of Multiplayer mode in FFR when Name Hacking which after you name hack you can enter Multiplayer mode in FFR with your new hacked name. This is what you can use to say.. change your name to a MODs name, i.e. "Synthlight" with a MP Rank Hack of "MOD" would be make for some fun times..

Restrict Hack - doesnt work..still working on this and others.

Now for the Score Hacks. I'll put a quick scenario one would do to successfully hack a score, etc. To load the Score Hacks options you must press the "Score Hacks" button on the main trainer window. DO NOT USE THE NUMPAD FOR ENTERING NUMBERS TO HACK! but instead use the top number bar on the keyboard otherwise you will trigger the unpause hotkey eventually. Check out the video which will show exactly how to go about score cheating.



1. First you must finish the song you will be score hacking on get to the Score results window in game *not necessary*.

2. Load the Score Hacks options window and press "Get Current Scores" button which will display the max number of beats for the current song which is very important. The max number of beats will help you determine how many Perfects, Goods, Averages, Misses and Max Combos is allowed to hack the song with(all must add up to the max # of beats for current song). Once you have setup those you can press the "Calculate" button which will figure out the Score and temporarily Total Score for the song based on the current score hack setup. Notice it also displays Your Best Score and FFR Best Score for the song which is also very important(only if you have finished the song before hand). The song level number is also displayed which you can hack next time you start the song change it to whichever song number you choose, but remember there is only so many available.

3. Add 5 to the TEMP SCORE score which is needed because you'll be getting 10(1 boo = -5points) boo's while the game is paused thus taking away 50(10x5) points of the score you wish to hack. This is needed because you have to get to the songs Score results window in game somehow or if you allow the game to continue while you get points the score will exceed the amount you have previously setup and the games total allowed score thus making things look bad on your part. Now don't press the Calculate buttons anymore or will mess up the current score hack text.

4. You can now press the Hack Score button or go back to the main trainer window and use the hotkey which is SPACEBAR. Remember to close the Score Hacks options when you are not playing the game or want to talk in multiplayer section.

EDIT(12-18-07): New Mirror Download Link
DOWNLOAD HERE - FFRtrainerv2A.rar
FlashFlash Revolution Trainer v2 - Fixed

Labels: , , , , , , , , ,