Cheat Engine

[Pingo]

try this with cheat engine. Its just to test if the code works before finding a static cave. If the script doesnt crash it, you'l need to look at 01F7E790 in the memory viewer to see the cave. Add 0x20 to it for the location of eax. Remember its only eax so you'l still need to add 0x98 to it cause [eax+00000098] is the address.

[enable]
alloc(TestCave,64)

TestCave:
mov edi,DWORD PTR DS:[eax+00000098]
mov [TestCave+20],eax
mov eax,[TestCave+20]
jmp 01F7E7A3

01F7E790:
jmp TestCave

[disable]
//no disable part

or try it like this. the cave offset is alittle bigger too. 0x2c
[enable]
alloc(TestCave,64)

TestCave:
mov edi,DWORD PTR DS:[eax+00000098]
mov [TestCave+2c],eax
mov eax,[TestCave+2c]
mov edi,DWORD PTR DS:[eax+00000098]
jmp 01F7E7A3

01F7E790:
jmp TestCave

[disable]
_________________