Finding them? Common sense.
I gave a short explanation of it in this thread. Most of what we (or just me, dunno about other people) do is think "how does the game behave, and how do I want to change it." Let's say that in the 10th level of a theoretical game, a giant invincible monster appears and eats you. That's totally not cool; let's make the monster never appear.
How would you go about to do this? Well, the monster's appearance is directly tied to the level you're currently in. So we're gonna search for what handles levels and see where the monster is created. But how are we going to find the level handler? Search all files for things like "level" (speaking about the case when the game's code is vanilla; no encryption or obfuscation.)
Let's assume you've found the level handler, and in it you see this horrid line:
if (level == 10) {
spawnEvilMonster()
}So not cool. Enraged, we go to the Raw Data, and do a search there for spawnEvilMonster. We might find something like this:
//66 04 0a
_as3_getproperty level
//24 a0
_as3_pushbyte 10
//14 01 00 00
_as3_ifne offset: 1
//4f 6d 00
_as3_callpropvoid spawnEvilMonster(param count:0)
There are several ways to fix such a monster. One is to compare the current level to a level that doesn't exist (like -7), another way is to make the if statement jump over the code instead of ever checking a condition, and yet another way is to change the function call to a NOP (No Operation.) There are probably other ways that I forgot.
Remember, we only want to match a specific part of the code, so we're going to include all its element (both the if statement and the function call.) So so far, what we've got is the initial array:
66 04 0a 24 a0 14 01 00 00 46 6d 00
Now, every options we have from now on is properly explained in the tutorials, so I'm only gonna show you the resulting arrays.
Option 1: Change level requirement
66 04 0a 24 a0 14 01 00 00 46 6d 00 =>
66 04 0a 24 f9 14 01 00 00 46 6d 00
(trust me, f9 is -7)
Option 2: Skip if statement
66 04 0a 24 a0 14 01 00 00 46 6d 00 =>
66 04 0a 24 a0 10 01 00 00 46 6d 00
Option 3: No function
66 04 0a 24 a0 14 01 00 00 46 6d 00 =>
66 04 0a 24 a0 14 01 00 00 02 02 02
Hope this helped, and feel free to ask any further questions.