[REQUEST] Bloons Tower Defense 5

Hey guys, can someone give me some AoBs, bytes or SOL with Monkey Money and other things of BTD5?

Here is the link:

http://ninjakiwi.com/Games/Tower-Defens ... nse-5.html

If anyone want, the SOL is placed in folder #SharedObjects, Random Numbers and Letters, ninjakiwi.com, [[IMPORT]], www.ninjakiwifiles.com, Games, gameswfs, btd5.swf.

Post Scriptum: Sorry if my english sucks, but I'm italian and well... not a good speaker.

Don't worry, unlike most people who "claim" to speak a foreign tongue, whatever translater you used worked fine, although I've never seen it written "scriptum" before.

Nothing with 4b*1 4b*8 4b*8+6 works for me. It is going to take someone who can AoB hack to get this done.

^O RLY?
Checking. I know Ninjakiwi's style.
HAI YAH!
*4b*6*
*Double*
*Double*8*
I will not give up! NEVER!
*Double*8+6*
Erm... bytehackers??

Increase money earned at the end of each wave
(Round 1 = 126 cash
Round 2 = 254 cash
R3 = 382 cash
R4 = 510 cash, etc.)
24 64 d0 66 9e 02 66 79 a0 93 4f 9b 17 01 ?
24 7f d0 66 9e 02 66 79 a2 93 4f 9b 17 01
Unfortunately, I can't really increase the money earned per pop because of the way it was coded.

Updateproof version! Updateproof version!
(Please?)

Updateproof version! Updateproof version!
(Please?)

You can't always find an updateproof version for every game as some developers change the coding completey sometimes.

Great, now I can't even open the updated version without it crashing.  :roll:

OK. Well, back to the drawing board.

There has to be a vulnerability in the code somewhere...

Something that might be easy to hack is the monkey banks. Change 1000 to 20000 a round?

More money at end of wave
24 64 D0 66 9A 02 66 79 A0 93 4F B4 19 01
24 7F D0 66 9A 02 66 79 A2 93 4F B4 19 01


Probably updateproof version
24 64 ?? 66 ?? ?? 66 ?? a0 93 ?? ?? ?? ??
24 7f ?? 66 ?? ?? 66 ?? a2 93 ?? ?? ?? ??

More money at end of wave
24 64 D0 66 9A 02 66 79 A0 93 4F B4 19 01
24 7F D0 66 9A 02 66 79 A2 93 4F B4 19 01


Probably updateproof version
24 64 ?? 66 ?? ?? 66 ?? a0 93 ?? ?? ?? ??
24 7f ?? 66 ?? ?? 66 ?? a2 93 ?? ?? ?? ??

Thanks, I appreciate this and I hope others do too! Thanks!

Could someone find an AoB to automatically unlock all towers + all upgrades for them?

Could someone find an AoB to automatically unlock all towers + all upgrades for them?

Well, if you can get the swf so we can open it.

package ninjakiwi.security
{
    import flash.display.*;
    import flash.events.*;

    public class CryptScore extends Object
    {
        private var scoreA:int;
        private var bullshit1:int;
        private var bullshit2:int;
        private var bullshit3:int;
        private var bullshit4:int;
        private var scoreB:int;
        private static var randamaroo:MovieClip;

        public function CryptScore() : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//d0
_as3_getlocal <0>
//49 00
_as3_constructsuper (param count:0)
//60 a5 05
_as3_getlex randamaroo
//20
_as3_pushnull
//14 0b 00 00
_as3_ifne offset: 11
//5e a5 05
_as3_findproperty randamaroo
//5d 0e
_as3_findpropstrict flash.display::MovieClip
//4a 0e 00
_as3_constructprop flash.display::MovieClip(param count:0)
//61 a5 05
_as3_setproperty randamaroo
//d0
_as3_getlocal <0>
//60 82 06
_as3_getlex Math
//60 82 06
_as3_getlex Math
//46 83 06 00
_as3_callproperty random(param count:0)
//2d 0f
_as3_pushint 13371337
//a2
_as3_multiply
//24 0a
_as3_pushbyte 10
//a3
_as3_divide
//46 84 06 01
_as3_callproperty round(param count:1)
//68 2a
_as3_initproperty scoreA
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//68 2b
_as3_initproperty bullshit1
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2b
_as3_getproperty bullshit1
//90
_as3_negate
//68 2c
_as3_initproperty bullshit2
//d0
_as3_getlocal <0>
//24 02
_as3_pushbyte 2
//d0
_as3_getlocal <0>
//66 2c
_as3_getproperty bullshit2
//a2
_as3_multiply
//68 2d
_as3_initproperty bullshit3
//d0
_as3_getlocal <0>
//24 02
_as3_pushbyte 2
//d0
_as3_getlocal <0>
//66 2d
_as3_getproperty bullshit3
//a2
_as3_multiply
//68 2e
_as3_initproperty bullshit4
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//90
_as3_negate
//68 2f
_as3_initproperty scoreB
//60 a5 05
_as3_getlex randamaroo
//60 08
_as3_getlex flash.events::Event
//66 85 06
_as3_getproperty ENTER_FRAME
//d0
_as3_getlocal <0>
//66 31
_as3_getproperty randomise
//27
_as3_pushfalse
//24 00
_as3_pushbyte 0
//26
_as3_pushtrue
//4f de 05 05
_as3_callpropvoid addEventListener(param count:5)
//47
_as3_returnvoid
        }// end function

        public function stopHo() : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//60 a5 05
_as3_getlex randamaroo
//60 08
_as3_getlex flash.events::Event
//66 85 06
_as3_getproperty ENTER_FRAME
//d0
_as3_getlocal <0>
//66 31
_as3_getproperty randomise
//4f cc 05 02
_as3_callpropvoid removeEventListener(param count:2)
//47
_as3_returnvoid
        }// end function

        private function randomise(event:Event) : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//60 82 06
_as3_getlex Math
//60 82 06
_as3_getlex Math
//46 83 06 00
_as3_callproperty random(param count:0)
//2d 0f
_as3_pushint 13371337
//a2
_as3_multiply
//24 0a
_as3_pushbyte 10
//a3
_as3_divide
//46 84 06 01
_as3_callproperty round(param count:1)
//24 02
_as3_pushbyte 2
//60 82 06
_as3_getlex Math
//60 82 06
_as3_getlex Math
//46 83 06 00
_as3_callproperty random(param count:0)
//46 84 06 01
_as3_callproperty round(param count:1)
//a2
_as3_multiply
//93
_as3_decrement
//a2
_as3_multiply
//73
_as3_convert_i
//d6
_as3_setlocal <2>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//60 01
_as3_getlex int
//66 86 06
_as3_getproperty MAX_VALUE
//2f 03
_as3_pushdouble 0.9
//a2
_as3_multiply
//af
_as3_greaterthan
//2a
_as3_dup
//11 0d 00 00
_as3_iftrue offset: 13
//29
_as3_pop
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//60 01
_as3_getlex int
//66 86 06
_as3_getproperty MAX_VALUE
//2f 03
_as3_pushdouble 0.9
//a2
_as3_multiply
//af
_as3_greaterthan
//12 13 00 00
_as3_iffalse offset: 19
//d2
_as3_getlocal <2>
//60 82 06
_as3_getlex Math
//60 01
_as3_getlex int
//66 86 06
_as3_getproperty MAX_VALUE
//2f 04
_as3_pushdouble 0.5
//a2
_as3_multiply
//46 84 06 01
_as3_callproperty round(param count:1)
//a1
_as3_subtract
//73
_as3_convert_i
//d6
_as3_setlocal <2>
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//d2
_as3_getlocal <2>
//a0
_as3_add
//68 2a
_as3_initproperty scoreA
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//d2
_as3_getlocal <2>
//a1
_as3_subtract
//68 2f
_as3_initproperty scoreB
//47
_as3_returnvoid
        }// end function

        public function get value() : int
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//a0
_as3_add
//24 02
_as3_pushbyte 2
//a3
_as3_divide
//48
_as3_returnvalue
        }// end function

        public function set value(param1:int) : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//90
_as3_negate
//24 02
_as3_pushbyte 2
//d1
_as3_getlocal <1>
//a2
_as3_multiply
//a0
_as3_add
//68 2f
_as3_initproperty scoreB
//47
_as3_returnvoid
        }// end function

        public function add(param1:int) : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//60 82 06
_as3_getlex Math
//46 83 06 00
_as3_callproperty random(param count:0)
//2f 04
_as3_pushdouble 0.5
//0c 0f 00 00
_as3_ifnlt offset: 15
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//24 02
_as3_pushbyte 2
//d1
_as3_getlocal <1>
//a2
_as3_multiply
//a0
_as3_add
//68 2a
_as3_initproperty scoreA
//10 0b 00 00
_as3_jump offset: 11
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//24 02
_as3_pushbyte 2
//d1
_as3_getlocal <1>
//a2
_as3_multiply
//a0
_as3_add
//68 2f
_as3_initproperty scoreB
//47
_as3_returnvoid
        }// end function

        public function multiply(param1:int) : void
        {
//d0
_as3_getlocal <0>
//30
_as3_pushscope
//d0
_as3_getlocal <0>
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//d1
_as3_getlocal <1>
//93
_as3_decrement
//d0
_as3_getlocal <0>
//66 2a
_as3_getproperty scoreA
//d0
_as3_getlocal <0>
//66 2f
_as3_getproperty scoreB
//a0
_as3_add
//a2
_as3_multiply
//a0
_as3_add
//68 2f
_as3_initproperty scoreB
//47
_as3_returnvoid
        }// end function

    }
}

i found this? im not sure what to do with it

http://www.ninjakiwifiles.com/Games/gameswfs/btd5.swf