[Backyard Monsters] - Lab + Academy - instant train

07/14/2011 19:29 bordignon#1
Guys, this is not a simple code, so if you are patient I will explain how I did it step by step, so here it comes, it is done in two phases, 1st phase is to set up the trick, the other phase is to execute various times with your academy and lab.

Warning, you may be attacked by monsters during this trick, but just once, if you get attacked maybe you will do something wrong and get a "something broke message", try again, this trick is for hard workers, if you are lazy please drop it now!!!!

Phase 1 - Set-up

First of all, do the trick to not going afk:

1 - scan for this array on read only memory
8B 99 20 01 00 00 89 5D B4 8B C8 83 E1 07

2- right click disassemble

3 - change
mov ebx,[ecx+00000120]
for
mov ebx,[ecx+00000058]

4 - click yes at the message

Now lets set up the trick

1 - Scan for 01 00 00 00 2c 01 00 00 01 00 00 00 array
2 - at the same line (or at the 13th byte to be precise) should be a number changing every second
3 - right click at that number changing ->add this address to the list - Lets call it GAME_TIMESTAMP just to be clear. Put 4 bytes at the type and hit OK
4 - Close the memory viewer, should be a number at you list starting with 1310....... if there is not, something is wrong, start over.
5 - right click at that -> Set/change hotkeys
6- click create hotkey
6-a) press ctrl+e to set the hotkey for that
6-b) change from toggle freeze to increase value with...
6-c) put 800 000 at the value
6-d) put "UP" at the description(optional for the hack too)
7- click create hotkey again
7-a) press ctrl+d to set the hotkey for that
7-b) change from toggle freeze to decrease value with...
7-c) put 800 000 at the value
7-d) put "down" at the description(optional for the hack too)

Phase 2 - execution

Here is the fun!

1- go to your lab or academy
2- select the monster/feature you want to upgrade
3- now be prepared to do the following very fast, read it before doing
4- hit fast-> ctrl+d -> click upgrade at academy/lab -> ctrl+e

you should get the message that your monster/feature was upgraded
repeat phase 2 freely, but do it quickly, do not let the game save with the values modified, every ctrl+d hit, needs a ctrl+e hit to get the value to the original/right value

don't get upset if you can't do this, try again if you get a reload message, you can set different shortcuts other than ctrl+e and ctrl+d, if you already have something at that shortcut

please guys, that is the maximum detailed description that I can do, if you don't understand, read it at least 3 times before complaining, if you didn't managed to do the trick, I'm sorry, just do the shiny trick and update things with shiny!
07/14/2011 19:35 WildheartX#2
Nice tutorial! Since it is complicated, I'll make a tutorial for beginners :)
07/14/2011 20:28 cocoyo15#3
timing is the hard part
07/14/2011 20:38 cocoyo15#4
maybe an auto mouse clicker and auto keypress software can help
07/14/2011 22:47 nizmo#5
nice ;)
07/14/2011 22:52 Aragorn69king#6
thank you very much. worked like a charm ^^
07/15/2011 01:53 rickz122#7
nice 1
07/15/2011 02:32 elitestarworld#8
nice work...havent try this yet coz of power cut :(
07/15/2011 02:39 ƒɾοƨʈ#9
Yup...I GOT it Right...
Thanks bordignon
07/15/2011 02:42 ƒɾοƨʈ#10
LOL i got an error message after kozu attacked me...
07/15/2011 03:02 darksoulvii#11
The scan comes up with nothing on my end :-\
07/15/2011 03:14 kilik2126#12
where can i find the (2 - at the same line (or at the 13th byte to be precise) should be a number changing every second) i cant se the number that is changing
07/15/2011 07:27 jamezz24#13
always an error message pop ups :(
07/15/2011 08:39 Aragorn69king#14
Quote:
Originally Posted by kilik2126 View Post
where can i find the (2 - at the same line (or at the 13th byte to be precise) should be a number changing every second) i cant se the number that is changing
after you scan for the code (01 00 00 00 2c 01 00 00 01 00 00 00) right click it in the address you found and click browse this memory region

now look in the bottom of the new window appeared. the line you are looking is the third (first line is Protect/Read/Write..., second line is something like adress FC FD FE FF 00 01 02...08...)

now right click below the 08 (the number you see changing every second) and add it to the address list.

the rest is explained by bordignon. also attached a picture.

[Only registered and activated users can see links. Click Here To Register...]
07/15/2011 08:57 jamezz24#15
Quote:
Originally Posted by Aragorn69king View Post
after you scan for the code (01 00 00 00 2c 01 00 00 01 00 00 00) right click it in the address you found and click browse this memory region

now look in the bottom of the new window appeared. the line you are looking is the third (first line is Protect/Read/Write..., second line is something like adress FC FD FE FF 00 01 02...08...)

now right click below the 08 (the number you see changing every second) and add it to the address list.

the rest is explained by bordignon. also attached a picture.
Did you do it right?