Cheat Engine

[lambdabandit]

The AOB scan I'm running is as follows:

[ParkourPenguin]

In a 64-bit process, addresses are 8 bytes (64 bits), not 6. (Windows, as with most OSes, only uses a subset of this, but you should still use 8)

There's no guarantee the globalalloc will be allocated anywhere near newmem, so you may not be able to directly address lastbullet like that (Intel's software developer manuals, volume 2, "rip-relative addressing"). You can usually just use a regular alloc (or a label, but align it yourself) and registersymbol/unregistersymbol instead.

The third parameter to alloc should be the symbol used for the aobscan (i.e. INJECT).

I'm not sure any of those problems would cause the behaviour you're experiencing. What's the value of rax/rdx before the movbe is executed? Perhaps you should be storing rax+rdx instead.

[lambdabandit]

I was able to figure it out using the below code. Thank you for your input.