Phantom Chronicle

Can someone please try to hack this game?
https://www.facebook.com/appcenter/phantom_chronicle

Aobscan(_wp1,0c 3a 00 00 60 ?? ?? 60 ?? ?? 66 ?? ?? 60 ?? ?? 66 ?? ?? a2) // player critical
_wp1 + 01:
db 00
_wp1 + 10:
db 29 24 04 // crtical damage mutiplier
Aobscan(_cxp,27 26 2b 10 0a 00 00 d7 d3 63 04 94 04 94 03 c3 04 63 04 63 05) // card xp multiplier, 64x
_cxp + 03:
db                    d1 2a a0 2a a0 2a a0 2a a0 2a a0 2a a0 d5
Aobscan(_sta,27 26 2b 10 09 00 00 63 05 23 90 a8 94 05 94 06 63 06 63 07) // stamina non decreasing
_sta + 03:
db                    d1 24 00 0c 03 00 00 24 00 d5 02 02 02
Aobscan(_cry,27 26 d7 10 0b 00 00 94 02 08 02 a7 c2 03 92 03 92 03 63 04) // +1 crystal when spend
_cry + 03:
db                    d1 24 00 0c 03 00 00 24 01 d5 02 02 02 02 02

Assembler Script

It seems this game 90% is client side without cheat detection... anyway, use in your own risk.

Crashed me flash when I tried to use the Assembler Script.

Crit chance and multiplier seems to work but the stam/gem thing doesn't. Good stuff still.

stamina is energy not the skill points, and the crystal one is working. You just don't have any to try. I'll leave it for you to figure out

You can just use CE on it,
Energy, Core, Fuse Exp (don't change tab), e-crystal is 4byte*1
for e-crystal you might need 3-4 e-crystal to get the address
for fuse exp you need to lock it after you change the value to make it work

No result after scanning the AOB, I think it's patched!

cool

CT Script


= player critical + dmg x120
= card exp x100
= Stamina/Energy
= Crystal
+ Item drop?, known effect: drop every item from chest (hint: enlarge your inventory size)

Thank you :)

working.. thanks

thank you.. its still works

just a note,
the +item drop makes you get 5-6 items / box and you can get 2 cards from battle (1st & 2nd enemy die)
and if you enable the +item drop table before draw any cards from e-crystal, you will only get 3s fire ogre from e-crystal draw

Can you teach me how i get the aob? i search on main.swf the game but cant find your AoB

1/11/2014 CT File not works anymore
 

I can't upload file atm.

update:


[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 0c 0d 0e 0f
Aobscan(_wp1,0C 3B 00 00 62 04 2A 11 03 00 00 29 D3 76 12 9D 00 00 60 A9 0E 60 A9 0E 66 8E 04 10 08 00 00 C2 02 B1 C7 A9 C3 02 97 60 C8 01 66 E4 4E A2 ) // player critical
_wp1 + 01:
db 00
_wp1 + 2a:
db 29 24 78 // crtical damage mutiplier
// @ PlayerBase

[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,12 0a 00 00 d0 66 ?? ?? 62 06 4f ?? 01 47  )
_wp1 + 01:
db 00
_wp1 + 0d:
db 02
// @ DropItem

Aobscan(_wp2,20 48 60 ?? ?? 24 00 25 90 4e 46 )
_wp2 + 08:
db 81 00
Aobscan(_wp3,00 00 60 ?? ?? 24 00 25 90 4e 46 )
_wp3 + 08:
db 81 00


[DISABLE]


[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 04 10 0b 00 00 94 04 c3 03 1c 92 04 63 04 c3 02 63 05)
_wp1 + 04:
db                       d1 25 80 7d a2 d5 02 02 02 02 02 02 02 02 02
//@CardWork
[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 04 10 08 00 00 d1 d3 a6 aa 08 02 08 04 63)
_wp1 + 04:
db                       d1 24 02 a2 d5 02 02 02 02 02 02 02
//                             -- mul, don't be to high or miss some level up bonus, eg, +card cost limit or +stamina max
//                                     keep it high enough to only level up at most once per rank exp gaining
//@ExpWork
[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 06 10 09 00 00 63 06 64 62 05 d3 94 04 1f 63 07)
_wp1 + 04:
db                       d1 24 00 0c 03 00 00 24 00 d5 02 02 02
//@StaminaWork
[DISABLE]


[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 2b 10 08 00 00 27 d6 d3 c3 03 94 02 d2 d7)
_wp1 + 03:
db                    d1 24 00 0c 03 00 00 24 01 d5 02 02
//@ECrystalWork
[DISABLE]

They may be combined to one cheat entry by removing extra [Enable]/[Disable].
Oops, sorry, no, they use same label name. To combine, it need to change the label name while still match within same functional aob.


-------
btw, here a reply to a pm about finding aob for this game, sorry it is not detailed, or may cause more confuse, but anyway~

------
Try use Jpex Decompiler.
Use its global search. The search is time comsuming, be patient please.

I've post an updated script, read it inside for a hint where they are.
To search directly to the module, try search, for example for PlayerBase, 'n PlayerBase'.
The initial 'n' if for functio[n], so the search will only find the definition module.

For 'critical', search inside the module 'crit', try to understand the code.
For exp/staimna..etc, try read the 1st one or two function, eg. init @ ExpWork, it should have some hint on which variable is the actual value holder we concern, eg SetExp(0) is a good hint, follow it to definition of SetExp, from there follow the param1, it show that the actual [EXP] value holder is _-05Y from following lines


               if(_loc3_[1] <= param1)
               {
                  this._-05Y = _loc4_ > param1?param1:_loc4_;
                  this._-hu = _loc4_;

then, find where _-05Y, or get use with this SetExp function.
You may find this then

      public function _-0K-(param1:int) : Boolean {
         var _loc4_:* = true;
         var _loc5_:* = false;
         var _loc2_:int = this.rank;
         var _loc3_:int = this.exp + param1;
         this.SetExp(_loc3_);
         return _loc2_ < this.rank;
      }

What my aob do is multiple the param1 before it get add to exp.

To make aob, click the middle 'tab' in right planel (view hex), it will locate (with some random offset, not exactl) the aob relate to the text source.

bye
 

Still cant find 2nd AoB for DropItem :

Aobscan(_wp2,20 48 60 ?? ?? 24 00 25 90 4e 46 )
_wp2 + 08:
db 81 00
Aobscan(_wp3,00 00 60 ?? ?? 24 00 25 90 4e 46 )
_wp3 + 08:
db 81 00

And for ExpWork I try but its not work for me.