Cheat Engine

[Bristow]

Hi there! I'm an aspiring self-taught CE user, and I'm stumped trying to do something fairly specific. This is also my first post (whoo!) so I'll try to explain what I'm trying to do, and what I've gotten so far.


Into the story: I'm using CE on Bloons Tower Defense 5 on Steam to find a number of things. In this post, tower information specifically.

What I have found is:
-Tokens
-Monkey Money
-Money (to spend on towers)
-Lives

And tower specific stuff:
-HP of Spikes, to make spikes last forever
-Number of kills
-Horizontal and vertical positions, which when changed moves the tower anywhere on screen
-Tower rotation (not much use yet)
-Upgrade paths for both paths, and can change their specialty.
But to use these, I must manually search for number of kills, then rescan a few times to get a dynamic address, then using that I can then find the rest. It gets tedious doing this for several towers on several maps.

I have also found a pointer to the number of kills of any tower you have highlighted, but this doesn't point to the same dynamic address I found before so I can't use them together. I'd like to find out how I can get it to where I highlight the tower to get the real address for the number of kills, so I can find the rest much quicker.

This is what the dynamic part looks like:

T1 [kills], 120A71AC, 4 Bytes, 204486
Horizontal Position [kills-5C], 120A7150, Float, 277
Vertical Position [kills-58] , 120A7154 , Float , 256
Rotation [kills-50] , 120A715C , Float , 0
Left Upgrade Path [kills+4c] , 120A71F8 , 4 Bytes , 4
Right Upgrade Path [kills+50] , 120A71FC , 4 Bytes , 2

Highlighted Tower Kills pointer:
1C77710C+1C4 = 1C7772D0
[1C777100+C4] > 1C77710C
[0B31CB28+4] > 1C777100
[061D9988+4C] > 0B31CB28
[OAD24A64+28] > 061D9988
"BTD5-Win.exe" +007D15DC > 0AD24A64


I've stumbled around trying to find more pointers, finding what accesses or writes to pretty much everything, and looking through opcodes and registers trying to get it to work. It might not even be possible, but I'd like to learn so I can apply some of it to other games.

Sorry if there's too much info, I don't want to seem like a new guy yelling for help without even trying.

[ParkourPenguin]

If you absolutely need a pointer, using the pointerscanner requires the least knowledge on the user's part.

I'd recommend creating a code injection on some instruction that accesses the address of the selected tower. In the code injection, move the address of the selected tower into some registered symbol and use the registered symbol in the table.

This topic covers both and should be helpful despite being a bit dated.

[Bristow]

I'll check it out, thanks a lot!