Phantom Chronicle (Page 2)

RE: Phantom Chronicle

Posted Jan 20, 2014 3:02 am

Game added to database. Submit those hacks!

New to Kong Hack and want to learn the basics? Check out the [Kong Hack 101] and the [Hacking 101].

Wanna learn how we make the hacks? Start with getting [the tools], then check these out: [AoB tutorial] | [.sol guide] | [Unity3d tutorial] | kadat's [video tutorials]

And if you don't already have it, check out the [Kong Hack Ultra Trainer]. You'll be glad you did!

RE: Phantom Chronicle

Posted Jan 20, 2014 3:55 am

saintstreet Posted on: 01/13/2014 8:03pm

Still cant find 2nd AoB for DropItem :

Aobscan(_wp2,20 48 60 ?? ?? 24 00 25 90 4e 46 )
_wp2 + 08:
db 81 00
Aobscan(_wp3,00 00 60 ?? ?? 24 00 25 90 4e 46 )
_wp3 + 08:
db 81 00

And for ExpWork I try but its not work for me.

25 90 4e is command to load a int 10000 into stack, the whole line is calling an random number function between 0 and 10000.
The modification change it to give a random between 0 and 0, so the result must be zero, and then the following test will sure success. These 2 test is about dropping chance of the card killed during battle.

No +karma or thanks post please,
we shall exchange appreciation via telepathy ;)

RE: Phantom Chronicle

Posted Jan 22, 2014 1:27 pm

woah awesome work heanawolf, but basicly that 4byte*1 makes all job done anyway.

still lovly critical saves a lot of time when roaming for some special items!

RE: Phantom Chronicle

Posted Jan 30, 2014 11:12 am

Now Critical not work anymore becouse the code has been protected like this :
Does anyone can change this code..

kill 2
; d6
setlocal_2
; 11 67 00 00
ofs0052:iftrue ofs00bd
; 60 8f 22
getlex Qname(ProtectedNamespace("_-0Mi"),"package")
; 76
convert_b
; 12 26 00 00
ofs005a:iffalse ofs0084
; 60 af 0e
getlex Qname(ProtectedNamespace("_-0Mi"),"_-5C")
; 60 af 0e
getlex Qname(ProtectedNamespace("_-0Mi"),"_-5C")
; 66 e2 02
getproperty Qname(PackageNamespace(""),"attack")
; 60 c6 01
getlex Qname(PackageNamespace("_-md"),"_-Cc")
; 66 ac 4e
getproperty Qname(PackageNamespace(""),"HIT_CRITICAL_POWER")
; a2

RE: Phantom Chronicle

Posted Jan 30, 2014 12:01 pm

This is at _-GM/PlayerBase, I guess yours is at Enemy (bytecode is difference)? (I set to rename obfu variable name)

; 12 26 00 00
ofs0067:iffalse ofs0091
; 60 c0 0e
ofs006b:getlex Qname(ProtectedNamespace("_-04x"),"var_177")
; 60 c0 0e
ofs006e:getlex Qname(ProtectedNamespace("_-04x"),"var_177")
; 66 e1 02
ofs0071:getproperty Qname(PackageNamespace(""),"attack")
; 60 c6 01
ofs0074:getlex Qname(PackageNamespace("package_128"),"class_93")
; 66 d5 51
ofs0077:getproperty Qname(PackageNamespace(""),"HIT_CRITICAL_POWER")

'ProtectedNamespace' is just a naming of as3 for some kind related to scope or whatever, it has nothing to do with in-game cheat proctection.

The critical aob,
12 26 00 00 60 ?? ?? 60 ?? ?? 66 ?? ?? 60 ?? ?? 66 ?? ?? a2
12 00 00 00 60 ?? ?? 60 ?? ?? 66 ?? ?? 60 ?? ?? 29 24 78 a2

No +karma or thanks post please,
we shall exchange appreciation via telepathy ;)

RE: Phantom Chronicle

Posted Mar 6, 2014 12:23 pm

haenawolf Posted on: 01/11/2014 5:25pm

I can't upload file atm.

update:

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 29 2a 2b 0c 0d 0e 0f
Aobscan(_wp1,0C 3B 00 00 62 04 2A 11 03 00 00 29 D3 76 12 9D 00 00 60 A9 0E 60 A9 0E 66 8E 04 10 08 00 00 C2 02 B1 C7 A9 C3 02 97 60 C8 01 66 E4 4E A2 ) // player critical
_wp1 + 01:
db 00
_wp1 + 2a:
db 29 24 78 // crtical damage mutiplier
// @ PlayerBase

[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,12 0a 00 00 d0 66 ?? ?? 62 06 4f ?? 01 47 )
_wp1 + 01:
db 00
_wp1 + 0d:
db 02
// @ DropItem

Aobscan(_wp2,20 48 60 ?? ?? 24 00 25 90 4e 46 )
_wp2 + 08:
db 81 00
Aobscan(_wp3,00 00 60 ?? ?? 24 00 25 90 4e 46 )
_wp3 + 08:
db 81 00

[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 04 10 0b 00 00 94 04 c3 03 1c 92 04 63 04 c3 02 63 05)
_wp1 + 04:
db                       d1 25 80 7d a2 d5 02 02 02 02 02 02 02 02 02
//@CardWork
[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 04 10 08 00 00 d1 d3 a6 aa 08 02 08 04 63)
_wp1 + 04:
db                       d1 24 02 a2 d5 02 02 02 02 02 02 02
//                             -- mul, don't be to high or miss some level up bonus, eg, +card cost limit or +stamina max
//                                     keep it high enough to only level up at most once per rank exp gaining
//@ExpWork
[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 63 06 10 09 00 00 63 06 64 62 05 d3 94 04 1f 63 07)
_wp1 + 04:
db                       d1 24 00 0c 03 00 00 24 00 d5 02 02 02
//@StaminaWork
[DISABLE]

[ENABLE]
//           00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f 20 21 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
Aobscan(_wp1,27 26 2b 10 08 00 00 27 d6 d3 c3 03 94 02 d2 d7)
_wp1 + 03:
db                    d1 24 00 0c 03 00 00 24 01 d5 02 02
//@ECrystalWork
[DISABLE]

~~They may be combined to one cheat entry by removing extra [Enable]/[Disable].~~
Oops, sorry, no, they use same label name. To combine, it need to change the label name while still match within same functional aob.

-------
btw, here a reply to a pm about finding aob for this game, sorry it is not detailed, or may cause more confuse, but anyway~

------
Try use Jpex Decompiler.
Use its global search. The search is time comsuming, be patient please.

I've post an updated script, read it inside for a hint where they are.
To search directly to the module, try search, for example for PlayerBase, 'n PlayerBase'.
The initial 'n' if for functio[n], so the search will only find the definition module.

For 'critical', search inside the module 'crit', try to understand the code.
For exp/staimna..etc, try read the 1st one or two function, eg. init @ ExpWork, it should have some hint on which variable is the actual value holder we concern, eg SetExp(0) is a good hint, follow it to definition of SetExp, from there follow the param1, it show that the actual [EXP] value holder is _-05Y from following lines

               if(_loc3_[1] <= param1)
               {
                  this._-05Y = _loc4_ > param1?param1:_loc4_;
                  this._-hu = _loc4_;

then, find where _-05Y, or get use with this SetExp function.
You may find this then

      public function _-0K-(param1:int) : Boolean {
         var _loc4_:* = true;
         var _loc5_:* = false;
         var _loc2_:int = this.rank;
         var _loc3_:int = this.exp + param1;
         this.SetExp(_loc3_);
         return _loc2_ < this.rank;
      }

What my aob do is multiple the param1 before it get add to exp.

To make aob, click the middle 'tab' in right planel (view hex), it will locate (with some random offset, not exactl) the aob relate to the text source.

bye

Is doesn't work? Update please..

RE: Phantom Chronicle

Posted Apr 1, 2014 11:23 am

someone can hack this game, please!!!

RE: Phantom Chronicle

Posted May 29, 2014 1:55 am

Very good hack.
But sorry, two successive updates nothing works.
Sometimes the damage is high randomly.
The silver core are not spent but that is all (outstanding).

RE: Phantom Chronicle

Posted Aug 2, 2014 9:33 pm

I tried to use the ecrystal hack, but it didn't seems to works, i tried every thing that uses then or even in the game.
They already have patched it or i just doing something wrong?
I would appreciate any help, thanks.

"May our love live on like a child's dream..."