[ENABLE]

aobscanmodule(GrabMoney,RDR2.exe,48 8B 58 28 4C 3B E3)
alloc(newmem,$1000,"RDR2.exe"+729252)
alloc(Pmoney,8)

label(code)
label(return)

registersymbol(Pmoney)

newmem:
mov [Pmoney],rax

code:
  mov rbx,[rax+28]
  cmp r12,rbx
  jmp return

GrabMoney:
  jmp newmem
  nop
  nop
return:
registersymbol(GrabMoney)

Pmoney:
dq 0

[DISABLE]

GrabMoney:
  db 48 8B 58 28 4C 3B E3

unregistersymbol(GrabMoney)
unregistersymbol(Pmoney)
dealloc(newmem)
dealloc(Pmoney)