Sieger: Level Pack

http://www.kongregate.com/games/gmentat ... level-pack

Shots taken is 4bytes x1, but since almost every level (maybe all of them, haven't finished yet) has a 3 shot maximum at most, the game may say that you failed the level before you manage to find the address.  And the value does not appear to remain the same between attempts.

Now, again pestering you AOB pros

I found this in the code, under public function sendBullet:

           }
            var _loc_2:* = this.levelInfo;
            var _loc_3:* = this.levelInfo.nshots + 1;
            _loc_2.nshots = _loc_3;
which lead me to this:

//d6
_as3_setlocal <2>
//66 f5 1d
_as3_getproperty nshots
//c0
_as3_increment_i
So I thought the AOB to search for would be 66 f5 1d c0.  Unfortunately, when I search for that in the freshly-loaded game, I get zero results.  That confuses me, because even if I'm looking at the wrong section of code, shouldn't I at least FIND the wrong section of code?

Thoughts?  Am I missing something glaringly obvious?

Nope, no results from 66 f5 1d c0

This post was imported from an account that no longer exists!
Previous Name: Simple_AOB

Did I shoot?
D6 66 D1 06 C0
D6 66 D1 06 02

D6 66 D4 01 C0
D6 66 D4 01 02

You will always have 0 shots...
I tried to set it to 24 01 02 02 02 so it pushes 1 on the stack but the game won't continue on that...
Maybe someone else with more experience can get it to work

here is a completed .sol, all levels are gold so that should cover that badge that it will more than likely get.

Did I shoot?
D6 66 D1 06 C0
D6 66 D1 06 02

D6 66 D4 01 C0
D6 66 D4 01 02

This AoBs are either outdated or made wrong, first AoB shows one result, if you change it, you will block the "Continue" button which means you cannot play the game. As for the second AoB, there are no results shown.

[badges=http://www.kongregate.com/games/gmentat/sieger-level-pack:3jac5n60]39582734659[/badges:3jac5n60]
Badges. The sol should work... Didn't try it personally since I already had gold ratings on all levels.

Edit: I realized "use the sol" totally ain't my style.

Shots Don't Count
66 ?? ?? 2a d6 66 ?? ?? c0
66 ?? ?? 2a d6 66 ?? ?? 02

So I thought the AOB to search for would be 66 f5 1d c0.  Unfortunately, when I search for that in the freshly-loaded game, I get zero results.

Did you use SWF Decrypt before opening the swf? Since the original crashes on me when viewing the AS, I will assume you did. Decrypting changes variable references. The f5 1d is such a reference. The only way I know how to find the proper reference is to put in wild cards like in the above AoB and locate the proper result. You have to be sure to only include the opcode bytes. Doing that, you find 66 cc 01 c0 is what you should have searched for. However, that will need updated if the game gets an update. The above AoB changes what you attempted, but should only need updating if the author tosses in debugging code or changes that one line.

@RaulJ:
You are right, the second one changed, I get the same result as Usaio (66 cc 01 c0) as the new values, but Usaios is already updateproof so just use his.
Although I don't understand why the game crashes on my AoB, it works perfectly for me.

The AOB said it is not a valid notation :?
Shots Don't Count
66 ?? ?? 2a d6 66 ?? ?? c0
66 ?? ?? 2a d6 66 ?? ?? 02 <<< not a valid notation

@XxHellScreamsxX:

You're only supposed to change the one that different. In this case, the last byte c0 should be changed to 02.