ForumsH4x0ringKongregateEverybody edits (Page 1)
Everybody edits
-migrated-
Everybody edits Posted on: 07/13/2011 11:52am
Quote Post
Hi guys,

I played the game "Everybody Edits" yesterday and now I am wondering if it would be possible to gain admin access without knowing the secret key for the level. Using SWF Decompiler I found this code:
Code: [Select]
Bl.data.isLockedRoom = param11;
Bl.data.owner = param11;
state = new PlayState(connection, param1, param6, param9, param7, param8, param12, param13, param14);
Bl.data.canEdit = param10;I can manipulate the memory with HxD, but I dont know how to set the variables Bl.data.isLockedRoom and Bl.data.canEdit to true.

A link to the version of the game I used (Armorgames.com version) can be found HERE.

I hope you can help me.
Re: Everybody edits Posted on: 07/13/2011 12:43pm
Quote Post
Never let a computer tell me shit.
im just winging it here so if its a bit off, dont cry

original opcodes
Code: [Select]
66 ?? ??
//get property bl
66 ?? ??
//get poperty data
62 0b
//get local 11
68 ?? ??
//set property islockedroom
.
.
.
66 ?? ??
//get property bl
66 ?? ??
//get poperty data
62 0b
//get local 10
68 ?? ??
//set property canedit

you will need to change it to
Code: [Select]
66 ?? ??
//get property bl
66 ?? ??
//get poperty data
26
//push true
68 ?? ??
//set property islockedroom
02
//NOP
.
.
.
66 ?? ??
//get property bl
66 ?? ??
//get poperty data
26
//push true
68 ?? ??
//set property canedit
02
//NOP


I use this AoB tool to make all the AoBs I post. Try the online version if you dont feel like downloading it.
"Obviously, windows are central to Windows. They are so important that they named the operating system after them. But what is a window?"
Re: Everybody edits Posted on: 07/13/2011 3:24pm
Quote Post
The SWF Decompiler shows this as RAW Data:
Code: [Select]
//5d 11
_as3_findpropstrict blitter::Bl
//66 11
_as3_getproperty blitter::Bl
//66 12
_as3_getproperty data
//5d ec 02
_as3_findpropstrict isLockedRoom
//66 ec 02
_as3_getproperty isLockedRoom
//82
_as3_coerce_a
//2a
_as3_dup
//76
_as3_convert_b
//11 05 00 00
_as3_iftrue offset: 5
//29
_as3_pop
//62 0a
_as3_getlocal <10>
//96
_as3_not
//82
_as3_coerce_a
//2a
_as3_dup
//76
_as3_convert_b
//11 04 00 00
_as3_iftrue offset: 4
//29
_as3_pop
//62 0b
_as3_getlocal <11>
//82
_as3_coerce_a
//61 ed 02
_as3_setproperty isLockedRoom
.
.
.
//5d 11
_as3_findpropstrict blitter::Bl
//66 11
_as3_getproperty blitter::Bl
//66 12
_as3_getproperty data
//62 0a
_as3_getlocal <10>
//61 65
_as3_setproperty canEdit

I edited the part with the canEdit and changed it to
Code: [Select]
//5d 11
_as3_findpropstrict blitter::Bl
//66 11
_as3_getproperty blitter::Bl
//66 12
_as3_getproperty data
//26  <-- edited
push true
//61 65
_as3_setproperty canEdit
//02  <-- edited
NOP
But it didn't work! You can check this also out by yourself, just download HxD Hexeditor and replace the HEX Values (if you don't know how to use HxD watch this tutorial.). Maybe I did something wrong, but in my game nothing changed.
Re: Everybody edits Posted on: 07/13/2011 5:07pm
Quote Post
Never let a computer tell me shit.
well what does sothink say the code looks like after changes?


I use this AoB tool to make all the AoBs I post. Try the online version if you dont feel like downloading it.
"Obviously, windows are central to Windows. They are so important that they named the operating system after them. But what is a window?"
Re: Everybody edits Posted on: 07/17/2011 5:36pm
Quote Post
I don't know, I made the changes manually in the HEX-Editor. Currently I can't change the values in my downloaded file to see the results, cause I cannot acces my PC (I'm making holidays in England). Could you try?