So I'm not too experienced in mucking about with making hacks etc, but I've dropped in and out of it for a decent period of time (a few years?), so my terminology will probably be wrong in places (or everywhere). This is mainly regarding BTD5

Recently came back and was wondering about whether the var declarations and assignments can have their values changed. I know that in Sothink and JPEXS ffdec, no bytecodes are shown for such areas as (when clicking outside of the array in ffdec)

public class Bloon extends Entity
    {
          private static const maxHealthByType:Vector. = Bloon.Vector.([1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 10, 200, 700, 4000]);

Firstly, for such sections (but without bytecodes visible), how would one go about modifying these sections of code?

Seconds, with the above example, if I edit the array in ffdec and save it then load, the health values in-game change as expected, however, when I try to change it via CE in the browser, I can find and modify the AoB but there is otherwise no effect. I often read about having to freeze the game during (?) or just after the loader to start using AoB hacks, but I don't think I have ever gotten such hacks to work... 

Anyway, the original code for the array was (with extra either end):
; 64
getglobalscope
; 24 01
pushbyte 1
; 2a
dup
; 2a
dup
; 24 01
pushbyte 1
; 2a
dup
; 2a
dup
; 24 01
pushbyte 1
; 2a
dup
; 2a
dup
; 24 01
pushbyte 1
; 24 0a
pushbyte 10
; 25 c8 01
pushshort 200
; 25 bc 05
pushshort 700
; 25 a0 1f
pushshort 4000
; 56 0e
newarray 14
; 41 01
call 1
; 68 ed 17

What I mainly was interested in doing was changing the larger values back to 1, so what I did was replace pushbyte 10 (24 0a) with pushbyte 1 (24 01) and then replace the pushshorts with pushbyte 1 followed by nop: 25 c8 01 -> 24 01 02
Would that be a correct? I'm not sure whether this part is wrong, whether it can be changed (assuming it can since I can do it locally) or whether I am jut failing at applying the hack.
The codes I ended up with were:
64 24 01 2a 2a 24 01 2a 2a 24 01 2a 2a 24 01 24 0a 25 c8 01 25 bc 05 25 a0 1f 56 0e 41 01 68 ed 17
->
64 24 01 2a 2a 24 01 2a 2a 24 01 2a 2a 24 01 24 01 24 01 02 24 01 02 24 01 02 56 0e 41 01 68 ed 17

If someone could give me some pointers (or perhaps see if it works?), it would be much appreciated :)

Alright, thanks for that :) On the topic of playing locally, are there tools which allow you to skip those? I know of bmanatee's sitelock tool, but I never got it working due to port errors (and assuming they are probably too hard to edit out for someone such as myself).

I've spent some extensive time in the past trying to get the sitelocks off of BTD5 (http://ninjakiwifiles.com/Games/gameswfs/btd5.swf?v=160512-2, requires you to load the loader in this page to run http://ninjakiwi.com/Games/Tower-Defense/Play/Bloons-Tower-Defense-5.html), and had initially come to the conclusion that in the ninjakiwi -> utils -> StandardStuff, there is another swf that has been converted to base 64 (?) or otherwise encoded, that is then decoded on running the game that manages the site-locking. I assumed this because I afterwards dumped additional swf files from the flash instance, and one contained the visual assets for the splash screen and lock/redirect. It's likely I got the wrong interpretation of it though and that isn't very related.

I'm aware of the settings script file with domain locking and arrays of site names listed clearly, but these are again part of the static constant declarations and don't have bytecodes shown. I've tried changing some of them in ffdec in the past but it just ended up with crashing, but I'll try and take another look at the thing on the whole later when I have some more spare time.

One thing I was wondering was what should you use for your local 'url'? For example, the game allows armorgames.com; if you were to replace that to run locally, what should it be? I'm led to believe it should be localhost, but want some 'confirmation' on that.

Regarding online resources, I've previously found things regarding sitelocking quite sparse, with the majority being vague about locking or jut reviews of securing tools - not much to run off. Removing sitelocks gets even more rare with just that one Youtube video about it.

Otherwise, once I get knee-deep in it and need some help, I'll be back with some actual details about what I need help with :)


 

I'm aware that that does work, but it isn't as practical as removing the sitelock would be in the long-run. Thanks though :)

I just feel that it'd be more practical to load up the swf locally in order to test out things more efficiently, rather than loading up the game in the browser. I haven't used charles and am not sure completely how it works compared to other similar software, but I've got another debugger (fiddler) and using that auto-responder I would rather not have to use it all the time for this purpose (mainly because I need to clear cache and reload to get the page to fetch again). If the sitelock can be cracked then it shouldn't be too hard to do it again in the future assuming it won't change much.

Changing it to 'localhost' or '*' should get it to work, but like KH said, just changing the if statement should work. I've seen a lot of games that will have something similar to KH's example...

if(url == "localhost"){
    gotoAndPlay(sitelockScreen);
}

The same method applies, just change the == to !=, no need to overcomplicate things and get yourself confused. There are many different ways to go about it, sometimes the easiest solution is the best.