Cheat Engine

[navarone]

mov edi,[eax+00000098] (6 bytes)

Replaced with

Jmp 00400298 (5 bytes, last byte replaced with NOP)


00400298 mov edi,DWORD PTR DS:[eax+00000098]
0040029E MOV DWORD PTR DS:[400ED2],EAX
004002A3 jmp 01F7E7A3 (To the OP code after 01F7E79D)


Codecave is 30 bytes, and I am sure I amn't writing EAX over my/other OP codes. All if this was done with OllyDbg as a test.

It refuses to write the value of EAX to 00400ED2 and jumps me to a specific address to terminate game.
Even assembling that address to jump back to my code cave cause an infinite loop. lol