News Forums IRC Wiki Riivolution Reggie! NSMBW Depot

RVLution

A RVLution is on the horizon.

Skip to content

SMG First Star in NSMBW and some BTD5 hacks

SMG First Star in NSMBW and some BTD5 hacks

Postby Kamek64 on Sun Aug 11, 2013 4:43 pm

The SMG remake needs some fixes, you can download the current version here: https://www.dropbox.com/s/x6dnz2npg2eehue/SMGRemake.zip
In my signature you can download a BTD5 hacker and a BTD3 round editor. Do not use the Monkey Money cheat when you're connected to a Ninjakiwi account, log off first.
I'm working on a new tower for BTD5 but I'm having some troubles with Fixed Point Bit Values, if someone knows how they work, please tell me.
Last edited by Kamek64 on Wed Sep 04, 2013 10:48 am, edited 7 times in total.
A very easy to use program to hack Bloons Tower Defense 5
Monkey Money cheat only works when you're not connected to a Ninjakiwi account.
Bloons TD 3 Round Editor
PM me if you want to have a Candy Crush level editor (only works on ios and requires the app Pythonista to be installed)
User avatar
Kamek64
 
Posts: 597
Joined: Fri Jan 04, 2013 4:02 pm
Location: Netherlands / Germany

Re: Poll: What shall I do first?

Postby Mario64 on Sun Aug 11, 2013 5:46 pm

I would like a bloon editor, and I don't know what to open for your Bloons TD5 hack thing.
I'm Mario64. Join my hack You Super Mario Bros. Me!
Image
My mini-hack:
Image

http://www.youtube.com/user/mrpraprith
YSMBM Forum
User avatar
Mario64
 
Posts: 880
Joined: Sat Apr 21, 2012 5:19 pm
Location: My House!
  • Website

Re: Poll: What shall I do first?

Postby Kamek64 on Sun Aug 11, 2013 6:19 pm

Open btd5.swf, it's included in the zip file.
There are more votes for the SMG remake, sorry. :|
btw, when you're going to play it, you have to open btd5.swf with Internet Explorer / Firefox / Flash Player.
If you're logged on on a Ninjakiwi account, it does connect to it.
If you are using the Monkey Money cheat, make sure you are logged off!
It doesn't work when you're logged on.

edit:
I tried the bloon editor, but I'm a little bit stuck at the vectors. The speed, health and other things are stored in generics (vectors), they are in the multiname constant pool with kind 0x1d. The problem is that that type isn't documented. I googled it and managed to get some info like the type of it, but I don't know where the content of it is stored (any help on this?). Now I can change the type (ex. int to uint), but that wouldn't change anything, maybe it would even crash the game. A round editor would be easier to do, because the rounds are defined in the method body info and that is documented in the avm2 overview. And I already have a template (my btd3 round editor) which I only have to change a little bit to make it work with btd5. :)
Anyway, I made some progress on the SMG remake. It has lots of events, some smg music and a custom tileset I made for it from a SMG model, I tried to swap a model in Brawlbox but I couldn't convert it to mdl0 files and Brawlbox crashes when I try to import a dae model (any help on this too?). My avatar is a smg model too. :P
Ganjagrinda, the smg remake is the level I sent to you for help some days ago. ;)

edit2:
Doing some progress on my level, I changed an animation of the arrow signboard so the actor spawner can make it spawn with the arrow pointing to the left.

edit3: The model crashes, I won't use it.

edit4: Almost finished, only 3 or 4 zones to go. I'll continue tomorrow.

edit5: Lots of edits here :lol:. Is it possible to view who voted on the poll? I know it's possible on mariokartwii.com.

edit6: The Cam, Tom, Troy CTGP pack update with Heart of China is out, 5 hours ago! :D

edit7: It didn't crash because I changed the animation, it was the actor spawner. I forgot that the model has to be loaded externally.

edit8: Why do sprites spawned with the actor spawner disappear when they get out of the screen and don't reappear when you go back?

edit9: Crashes when I die, I think that's because I put Kamek into it.

edit10:
I think I found the place where the content of the vector is stored. The class bloons\Bloon (here are the bloons defined) has got a method that gets run when the class is first created (class_info.cinit), I didn't find that function first because Sothink SWF Decompiler doesn't show it. I think the vectors are created in the method_body_info of this method. Hacking swf files is much easier than hacking NSMBW, because there are still names of most variables and classes and functions in the swf file and it's opcodes are much easier and there's a great decompiler. Now I can make a bloon editor when the level is finished. :ugeek:

edit11: The SMG level is almost finished, I fixed some bugs/glitches and I only have to make the part with the star.

edit12: This is what happened when I tried to export the grand star model from Super Mario Galaxy 2. There are no textures, the left side is very dark, and the right side is very light. I guess I'll have to get an image somewhere else.

edit13: Found one: http://www.mariowiki.com/images/9/92/GrandStar.png
A very easy to use program to hack Bloons Tower Defense 5
Monkey Money cheat only works when you're not connected to a Ninjakiwi account.
Bloons TD 3 Round Editor
PM me if you want to have a Candy Crush level editor (only works on ios and requires the app Pythonista to be installed)
User avatar
Kamek64
 
Posts: 597
Joined: Fri Jan 04, 2013 4:02 pm
Location: Netherlands / Germany

Re: Poll: What shall I do first?

Postby Kamek64 on Wed Aug 14, 2013 1:24 pm

It's finished! I had to hurry a little bit because I'm not at home for 10 days and I wanted to finish it before. That's the reason it has no custom backgrounds.
Credits to brawlcustommusic.com for music
Credits to joietyfull64 for a lot of tilesets
Credits to guest for the peach castle tileset
Credits to me for the level and the tileset with Rosalina, the Grand Star and Luma and other stuff like the arrow board.
Warning: it crashes when you die after the part with Kamek, I really don't know why.
I didn't put in a checkpoint because it crashes when you die.
Please tell me if you find bugs (Music not looping/no background/other glitches)
Download: https://www.dropbox.com/s/x6dnz2npg2eehue/SMGRemake.zip

When I'm back home I'll fix bugs if someone found one and then I'll make the Bloon editor.
I still have my iPod so I'll still post on rvlution sometimes.

@Mario64, I messed up the download for the BTD5 hacker a little bit, sorry. The btd5.swf is in the dist.zip file inside the Bloons Hack.zip file. I'll fix it when I'm back home.

edit: I managed to fix it here on my iPod with the Dropbox app and the Cydia app iFile. Download it here: https://www.dropbox.com/s/e84rmhnfets6kjw/Bloons%20Hack-2.zip
A very easy to use program to hack Bloons Tower Defense 5
Monkey Money cheat only works when you're not connected to a Ninjakiwi account.
Bloons TD 3 Round Editor
PM me if you want to have a Candy Crush level editor (only works on ios and requires the app Pythonista to be installed)
User avatar
Kamek64
 
Posts: 597
Joined: Fri Jan 04, 2013 4:02 pm
Location: Netherlands / Germany

Re: Poll: What shall I do first?

Postby Mario64 on Wed Aug 14, 2013 9:30 pm

Thanks.
I'm Mario64. Join my hack You Super Mario Bros. Me!
Image
My mini-hack:
Image

http://www.youtube.com/user/mrpraprith
YSMBM Forum
User avatar
Mario64
 
Posts: 880
Joined: Sat Apr 21, 2012 5:19 pm
Location: My House!
  • Website

Re: Poll: What shall I do first?

Postby Kamek64 on Mon Sep 02, 2013 7:04 am

Grrr, Safari crashed, now I have to type everything again. :twisted:
Anyway, I think I can even continue the bloon editor on my iPod, with the SWF File Format Specification and the AVM2 Overview as pdf files in iBooks, with the Dropbox app to download the source code and the Python for ios app to edit it and iFile for the btd5 swf file, a hex editor and to put the source code into the python directory. I'll try that tomorrow.

edit: doesn't work, Python 2.7 for ios doesn't support Tkinter.

edit2:
It could take a while for the Bloon editor to be finished. I'm back home Friday and then I first want to fix some bugs in the SMG remake and improve the zone with the flag pole. And Saturday or Sunday we're going to Portugal for one week. Sorry.

edit3:
I'm going to try if I can make a new tower in Bloons TD 5 when tge Bloon editor is finished.

edit4:
I already got an idea for a new tower: a fireball shooter.
I'm pretty sure I can make everything I want for that tower (except for the ability, I'm not sure if I can make new abilities). The hardest thing will probably be making new images because I'm not good at image editing. If I can't add the tower, I'll replace one.

edit5:
Is there a way to close the poll?
I can edit Candy Crush IOS levels, they're in txt format so it's pretty easy.
I want some files of BTD5 IOS but most of them are stored in a password protected zip file in Bloons TD 5.app/Assets/BTD5.jet
The only way to get the password is guessing it (won't happen), asking Ninjakiwi (they probably won't gibe the pass), doing a brute force attack (can take months) or decompiling the binary, it's mach-o format (too hard).
Does someone know the password?

edit6:
I'm making a Candy Crush level editor on my iPod using the app Pythonista, I'll return home Sunday, then school starts, there isn't much school the first week though. When I'm at home I can do the SMG remake and Bloons hack things and at school I can do the Candy Crush level editor, I probably won't upload it, but if someone wants it I can pm it to them. I don't know if it works on your devices because the coordinates of the images may be different on other devices (I have a iPod Touch 4th generation with ios 5.1.1, no retina display), you need the app Pythonista ($6.39, my iPod is jailbroken so I got it for free), I don't know if Pythonista has access to the app files if your device isn't jailbroken and the app is inside a folder with lots of numbers and letters (/var/mobile/Applications/lots-of-numbers-and-letters/candycrush.app). I don't know if these numbers and letters are the same on different device or if they are generated randomly when you download the app from the App Store.

edit7:
I can add towers to the menu! Now I don't have to replace one.

edit8:
I tried to do something and now I corrupted the file, luckily I didn't change much yet. :x

edit9:
Fixed length bytes, now I don't get a white screen when running the SWF file but a black screen with an error message: "VerifyError: Error #1032: Cpool index 93 is out of range 68."
Why doesn't it say where in the SWF file the error occurred? :roll:

edit10:
I didn't know there's a bump button, I've never seen it before, now I know what it does. :)

edit11:
I think the error is in the DoABC tag of towers\TowerMenuSet since I only changed the ExportAssets tag and the DoABC tag of towers\TowerMenuSet and the constant pools are inside DoABC tags.
The multiname array is the only constant pool entry inside towers\TowerMenuSet with 68 indexes. Something is trying to get index 93 out of the multiname constant pool, but that doesn't exist.

edit12:
Fixed the length bytes of the Method Body Info of the method in towers\TowerMenuSet.
Now it gives me the error:
Code: Select all
TypeError: Error #1009: Cannot access a property or method of a null object reference.
   at gui.ingame::TowerGroup/initialise()
   at gui.ingame::InGameMenu()
   at levels::Level/initialise()
   at Main/initialise()

Then it plays the intro!
Then it starts playing the music.
Then I get another error:
Code: Select all
TypeError: Error #1009: Cannot access a property or method of a null object reference.
   at Main/showIntro()
   at Main/splashComplete()
   at flash.events::EventDispatcher/dispatchEventFunction()
   at flash.events::EventDispatcher/dispatchEvent()
   at ninjakiwi.utils::StandardStuff$/splashed()
   at flash.events::EventDispatcher/dispatchEventFunction()
   at flash.events::EventDispatcher/dispatchEvent()
   at MethodInfo-212()

Then the screen turns white with only the bar with my Ninjakiwi account, the achievements button, my awesome points (1515), my Ninjakiwi coins (5) and the buy coins button on top.
At least it shows where the error is this time.

edit13:
I accidentally entered 62 15 (getlocal 21) instead of 62 12 (getlocal 18).
Now I get another error, but that's just because I haven't made an image for the button yet. Is there someone on rvlution who is good at image making? If not, I'll just get a picture somewhere on Google.

edit14:
I can't get the images to work, I think I'll just use existing Images until I find a way to insert them into the SWF file.

edit15:
I got an idea. I made a simple SWF file with Flash CS 6 only with the image inside it, let's see what happens when I simply copy the tag with the image into the Bloons SWF file.

edit16:
It worked! Now I have to make a new sprite that's using that image and then link the button to the new sprite instead of the monkey village sprite.
Last edited by Kamek64 on Thu Sep 05, 2013 1:11 pm, edited 1 time in total.
A very easy to use program to hack Bloons Tower Defense 5
Monkey Money cheat only works when you're not connected to a Ninjakiwi account.
Bloons TD 3 Round Editor
PM me if you want to have a Candy Crush level editor (only works on ios and requires the app Pythonista to be installed)
User avatar
Kamek64
 
Posts: 597
Joined: Fri Jan 04, 2013 4:02 pm
Location: Netherlands / Germany

Re: Poll: What shall I do first?

Postby Mario64 on Tue Sep 03, 2013 8:32 pm

Just go to the poll when you edit and leave everything blank.
I'm Mario64. Join my hack You Super Mario Bros. Me!
Image
My mini-hack:
Image

http://www.youtube.com/user/mrpraprith
YSMBM Forum
User avatar
Mario64
 
Posts: 880
Joined: Sat Apr 21, 2012 5:19 pm
Location: My House!
  • Website

Re: SMG First Star in NSMBW

Postby Kamek64 on Tue Sep 03, 2013 8:55 pm

Thanks it worked.

@Everybody, what would you rate the SMG remake if it would have been a File Depot submission?

PS:
I have some problems with the sprite. I succesfully placed an image into it using the PlaceObject tag, but now I want add another image on top of it, that image is too large and has to be scaled down. In the PlaceObject tag the scaling is inside a MATRIX RECORD. The scaling in the MATRIX RECORD is stored as FB (Fixed Point Bit Value). The documentation says this is a 16.16 bit value but there is a 5 bit value that defines how many bits it uses and in an example it uses only 19 bits (3.16). How can it be a 16.16 and a 3.16 bit value at the same time and how does flash now wheter it's a 3.16, 6.13, 10.9 or x.x value?

edit:
Asked on StackOverflow: http://stackoverflow.com/q/18613348/2746752

edit2:
Fixed, I added another image tag (DefineBitsLossless2) with the image scaled down, now I don't need the FB anymore.

edit3:
The button image doesn't work so now I made it so it's plain button without anything, that's better than having a monkey village button that emits a tack shooter (going to change the tack shooter to my own tower soon, I'll probably using the apprentice images for the fireball shooter)

edit4:
Huge progress, the button is still empty, but now you get my tower when you press it, still same cost as the Tack Shooter, the description is also the same because I forgot to change the value to the correct string constant pool entry. The label is changed and the hotkey is still the W. If you press W you get a Tack Shooter. The tower has 110 range (a not upgraded Dart Monkey has 100), I think I'm going to increase that to 120. The image is the Dragon's Breath image (3rd upgrade on the right side of Monkey Apprentice). It's weapon is still exactly the same as the Dart Monkey (darts). It has no upgrades.
Screenshot: https://www.dropbox.com/s/1oflqs2axhi1di2/Bloons%20Progress.png
The Road Spikes button is now next to the Spike Factory button.
The next thing I'm going to do is changing the cost and the description, then I'm going to edit the weapon, then the projectile and then the upgrades.

edit5:
Changed cost to $450 and hotkey to J.

edit6:
Edited description and changed the range to 120.

edit7:
The weapons are defined as local variables and are then assigned to a tower, first my tower used the dart monkey's weapon, now I copied a random weapon (the 4th left upgrade of the spike factory) and assigned it to another local variable, so now I have a weapon I can edit, if I would edit the other weapon before I copied it it wouldn't only change it for my tower but for the Dart Monkey too.
A very easy to use program to hack Bloons Tower Defense 5
Monkey Money cheat only works when you're not connected to a Ninjakiwi account.
Bloons TD 3 Round Editor
PM me if you want to have a Candy Crush level editor (only works on ios and requires the app Pythonista to be installed)
User avatar
Kamek64
 
Posts: 597
Joined: Fri Jan 04, 2013 4:02 pm
Location: Netherlands / Germany


Return to Off-Topic Chat

Who is online

Users browsing this forum: No registered users and 1 guest