80
"F1: Do not spend skill points at levelup"
Auto Assembler Script
define(address,"icewind.exe"+2BDE07)
define(bytes,89 87 74 07 00 00)
[ENABLE]
assert(address,bytes)
address:
nop 6
[DISABLE]
address:
db bytes
// mov [rdi+00000774],eax
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+2BDE07
icewind.exe+2BDDDF: 48 8B 4D EF - mov rcx,[rbp-11]
icewind.exe+2BDDE3: 41 FF C8 - dec r8d
icewind.exe+2BDDE6: 83 BF 68 07 00 00 19 - cmp dword ptr [rdi+00000768],19
icewind.exe+2BDDED: 41 B9 01 00 00 00 - mov r9d,00000001
icewind.exe+2BDDF3: 8B D6 - mov edx,esi
icewind.exe+2BDDF5: 75 07 - jne icewind.exe+2BDDFE
icewind.exe+2BDDF7: E8 54 5A 0F 00 - call icewind.exe+3B3850
icewind.exe+2BDDFC: EB 05 - jmp icewind.exe+2BDE03
icewind.exe+2BDDFE: E8 AD 51 0F 00 - call icewind.exe+3B2FB0
icewind.exe+2BDE03: 41 8D 46 01 - lea eax,[r14+01]
// ---------- INJECTING HERE ----------
icewind.exe+2BDE07: 89 87 74 07 00 00 - mov [rdi+00000774],eax
// ---------- DONE INJECTING ----------
icewind.exe+2BDE0D: 48 8B 55 EF - mov rdx,[rbp-11]
icewind.exe+2BDE11: 45 33 C0 - xor r8d,r8d
icewind.exe+2BDE14: 48 8B CF - mov rcx,rdi
icewind.exe+2BDE17: E8 F4 93 00 00 - call icewind.exe+2C7210
icewind.exe+2BDE1C: 48 8D 4D FF - lea rcx,[rbp-01]
icewind.exe+2BDE20: E8 3B F0 13 00 - call icewind.exe+3FCE60
icewind.exe+2BDE25: 4C 8B B4 24 88 00 00 00 - mov r14,[rsp+00000088]
icewind.exe+2BDE2D: 48 8B 9C 24 D0 00 00 00 - mov rbx,[rsp+000000D0]
icewind.exe+2BDE35: 48 8B 4D 17 - mov rcx,[rbp+17]
icewind.exe+2BDE39: 48 33 CC - xor rcx,rsp
}
Toggle Activation
112
0
Activate
Deactivate
82
"F2: Do not spend attribute points at levelup"
Auto Assembler Script
define(address,"icewind.exe"+2BE39C)
define(bytes,FF 8B 80 07 00 00)
[ENABLE]
assert(address,bytes)
address:
nop 6
[DISABLE]
address:
db bytes
// dec [rbx+00000780]
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+2BE39C
icewind.exe+2BE374: 40 84 ED - test bpl,bpl
icewind.exe+2BE377: 74 2B - je icewind.exe+2BE3A4
icewind.exe+2BE379: 83 BB 80 07 00 00 00 - cmp dword ptr [rbx+00000780],00
icewind.exe+2BE380: 7E 47 - jle icewind.exe+2BE3C9
icewind.exe+2BE382: 3B 35 F4 56 2E 00 - cmp esi,[icewind.exe+5A3A7C]
icewind.exe+2BE388: 7D 3F - jnl icewind.exe+2BE3C9
icewind.exe+2BE38A: 48 8B 4C 24 30 - mov rcx,[rsp+30]
icewind.exe+2BE38F: 44 8D 40 01 - lea r8d,[rax+01]
icewind.exe+2BE393: 40 0F B6 D7 - movzx edx,dil
icewind.exe+2BE397: E8 64 72 0B 00 - call icewind.exe+375600
// ---------- INJECTING HERE ----------
icewind.exe+2BE39C: FF 8B 80 07 00 00 - dec [rbx+00000780]
// ---------- DONE INJECTING ----------
icewind.exe+2BE3A2: EB 25 - jmp icewind.exe+2BE3C9
icewind.exe+2BE3A4: 83 FA FF - cmp edx,-01
icewind.exe+2BE3A7: 74 04 - je icewind.exe+2BE3AD
icewind.exe+2BE3A9: 3B F2 - cmp esi,edx
icewind.exe+2BE3AB: 7E 1C - jle icewind.exe+2BE3C9
icewind.exe+2BE3AD: 85 C0 - test eax,eax
icewind.exe+2BE3AF: 7E 18 - jle icewind.exe+2BE3C9
icewind.exe+2BE3B1: 48 8B 4C 24 30 - mov rcx,[rsp+30]
icewind.exe+2BE3B6: 44 8D 40 FF - lea r8d,[rax-01]
icewind.exe+2BE3BA: 40 0F B6 D7 - movzx edx,dil
}
Toggle Activation
113
0
Activate
Deactivate
71
"F3: Gain 100.000xp for each kill"
Auto Assembler Script
[ENABLE]
aobscanmodule(experience,icewind.exe,01 82 70 05 00 00)
alloc(newmem,$1000,experience)
label(code)
label(return)
newmem:
mov eax,#100000
code:
add [rdx+00000570],eax
jmp return
experience:
jmp newmem
nop
return:
registersymbol(experience)
[DISABLE]
experience:
db 01 82 70 05 00 00
unregistersymbol(experience)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+1CB293
icewind.exe+1CB26B: 89 82 70 05 00 00 - mov [rdx+00000570],eax
icewind.exe+1CB271: EB BF - jmp icewind.exe+1CB232
icewind.exe+1CB273: 89 82 80 11 00 00 - mov [rdx+00001180],eax
icewind.exe+1CB279: 33 C0 - xor eax,eax
icewind.exe+1CB27B: 41 89 80 14 01 00 00 - mov [r8+00000114],eax
icewind.exe+1CB282: B8 01 00 00 00 - mov eax,00000001
icewind.exe+1CB287: C3 - ret
icewind.exe+1CB288: 41 83 78 24 01 - cmp dword ptr [r8+24],01
icewind.exe+1CB28D: 41 8B 40 1C - mov eax,[r8+1C]
icewind.exe+1CB291: 75 22 - jne icewind.exe+1CB2B5
// ---------- INJECTING HERE ----------
icewind.exe+1CB293: 01 82 70 05 00 00 - add [rdx+00000570],eax
// ---------- DONE INJECTING ----------
icewind.exe+1CB299: B8 01 00 00 00 - mov eax,00000001
icewind.exe+1CB29E: 41 C7 80 18 01 00 00 01 00 00 00 - mov [r8+00000118],00000001
icewind.exe+1CB2A9: 41 C7 80 14 01 00 00 01 00 00 00 - mov [r8+00000114],00000001
icewind.exe+1CB2B4: C3 - ret
icewind.exe+1CB2B5: 01 82 D0 2A 00 00 - add [rdx+00002AD0],eax
icewind.exe+1CB2BB: 33 C0 - xor eax,eax
icewind.exe+1CB2BD: 41 89 80 14 01 00 00 - mov [r8+00000114],eax
icewind.exe+1CB2C4: B8 01 00 00 00 - mov eax,00000001
icewind.exe+1CB2C9: C3 - ret
icewind.exe+1CB2CA: CC - int 3
}
Toggle Activation
114
0
Activate
Deactivate
73
"F4: Get 1000g if you buy something instead of paying something"
Auto Assembler Script
[ENABLE]
aobscanmodule(money,icewind.exe,01 99 88 79 00 00) // should be unique
alloc(newmem,$100,money)
label(code)
label(return)
newmem:
mov ebx, #1000
code:
add [rcx+00007988],ebx
jmp return
money:
jmp newmem
nop
return:
registersymbol(money)
[DISABLE]
money:
db 01 99 88 79 00 00
unregistersymbol(money)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+26D975
icewind.exe+26D959: 79 1A - jns icewind.exe+26D975
icewind.exe+26D95B: 8B C3 - mov eax,ebx
icewind.exe+26D95D: F7 D8 - neg eax
icewind.exe+26D95F: 3B 81 88 79 00 00 - cmp eax,[rcx+00007988]
icewind.exe+26D965: 76 0E - jna icewind.exe+26D975
icewind.exe+26D967: 33 C0 - xor eax,eax
icewind.exe+26D969: 89 81 88 79 00 00 - mov [rcx+00007988],eax
icewind.exe+26D96F: 48 83 C4 20 - add rsp,20
icewind.exe+26D973: 5B - pop rbx
icewind.exe+26D974: C3 - ret
// ---------- INJECTING HERE ----------
icewind.exe+26D975: 01 99 88 79 00 00 - add [rcx+00007988],ebx
// ---------- DONE INJECTING ----------
icewind.exe+26D97B: 48 83 C4 20 - add rsp,20
icewind.exe+26D97F: 5B - pop rbx
icewind.exe+26D980: C3 - ret
icewind.exe+26D981: CC - int 3
icewind.exe+26D982: CC - int 3
icewind.exe+26D983: CC - int 3
icewind.exe+26D984: CC - int 3
icewind.exe+26D985: CC - int 3
icewind.exe+26D986: CC - int 3
icewind.exe+26D987: CC - int 3
}
Toggle Activation
115
0
Activate
Deactivate
289
"F5: GodMode and One-Hit-Kill"
Auto Assembler Script
{ Game : icewind.exe
Version:
Date : 2021-08-14
Author : Ich
This script does blah blah blah
RBX + 28 : 0 = we, 1 = they
RBX + 12c : 1 = we, 0 = they
}
[ENABLE]
aobscanmodule(ohk_godmode,icewind.exe,66 29 83 7C 05 00 00) // should be unique
alloc(newmem,$1000,ohk_godmode)
label(code)
label(return)
label(godmode)
label(onehit)
label(godmode_on)
label(onehit_on)
newmem:
mov eax,[rbx+12c] // get our magic flag
cmp eax,1 // check if party member
jne onehit // if not, jump to onehit
godmode:
cmp byte ptr [godmode_on],1 // check if godmode is on
jne code // if not, continue with normal code
mov ax,0 // reduce current damage to 0
jmp code // continue with original code
onehit:
cmp byte ptr [onehit_on],1 // check if OneHitKill is on
jne code // if not, continue with normal code
mov ax,7000 // else make damage which should be sufficient
code:
sub [rbx+0000057C],ax
jmp return
godmode_on:
db 0
onehit_on:
db 0
ohk_godmode:
jmp newmem
nop 2
return:
registersymbol(ohk_godmode)
registersymbol(godmode_on)
registersymbol(onehit_on)
[DISABLE]
ohk_godmode:
db 66 29 83 7C 05 00 00
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+1AD8A3
icewind.exe+1AD874: 48 81 C1 68 17 00 00 - add rcx,00001768
icewind.exe+1AD87B: 48 8B D0 - mov rdx,rax
icewind.exe+1AD87E: E8 6D 74 05 00 - call icewind.exe+204CF0
icewind.exe+1AD883: 48 8D 4D 0F - lea rcx,[rbp+0F]
icewind.exe+1AD887: E8 D4 F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD88C: 48 8D 4D 07 - lea rcx,[rbp+07]
icewind.exe+1AD890: E8 CB F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD895: 48 8D 4D DF - lea rcx,[rbp-21]
icewind.exe+1AD899: E8 C2 F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD89E: 41 0F B7 46 1C - movzx eax,word ptr [r14+1C]
// ---------- INJECTING HERE ----------
icewind.exe+1AD8A3: 66 29 83 7C 05 00 00 - sub [rbx+0000057C],ax
// ---------- DONE INJECTING ----------
icewind.exe+1AD8AA: 41 8B 46 48 - mov eax,[r14+48]
icewind.exe+1AD8AE: BE 00 01 00 00 - mov esi,00000100
icewind.exe+1AD8B3: A8 09 - test al,09
icewind.exe+1AD8B5: 0F 85 FB 02 00 00 - jne icewind.exe+1ADBB6
icewind.exe+1AD8BB: A8 12 - test al,12
icewind.exe+1AD8BD: 0F 84 B0 05 00 00 - je icewind.exe+1ADE73
icewind.exe+1AD8C3: 0F BF 83 7C 05 00 00 - movsx eax,word ptr [rbx+0000057C]
icewind.exe+1AD8CA: 4C 8D 2D 57 31 3E 00 - lea r13,[icewind.exe+590A28]
icewind.exe+1AD8D1: 8B 4D 9F - mov ecx,[rbp-61]
icewind.exe+1AD8D4: 2B C8 - sub ecx,eax
}
Toggle Activation
116
0
290
"GodMode"
Auto Assembler Script
[ENABLE]
godmode_on:
db 1
[DISABLE]
godmode_on:
db 0
291
"One-Hit-Kill"
Auto Assembler Script
[ENABLE]
onehit_on:
db 1
[DISABLE]
onehit_on:
db 0
268
"F6: Set Current HP of Character to 99 when selecting it"
Auto Assembler Script
{ Game : icewind.exe
Version:
Date : 2021-08-13
Author : Marc
Finds the code which reads out health when unit is selected
in Disassembler - right click, find out what this code accesses => bam, all
adresses of the characters hitpoints are in your list
}
[ENABLE]
aobscanmodule(healthreader_onclick,icewind.exe,45 0F BF 8C 24 7C 05 00 00) // should be unique
alloc(newmem,$1000,healthreader_onclick)
label(code)
label(return)
newmem:
push eax // save eax
mov al,#99
mov [r12+0000057C],al
pop eax // restore eax
code:
movsx r9d,word ptr [r12+0000057C]
jmp return
healthreader_onclick:
jmp newmem
nop 4
return:
registersymbol(healthreader_onclick)
[DISABLE]
healthreader_onclick:
db 45 0F BF 8C 24 7C 05 00 00
unregistersymbol(healthreader_onclick)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+35A4C8
icewind.exe+35A497: 75 6B - jne icewind.exe+35A504
icewind.exe+35A499: BA E7 04 F0 00 - mov edx,00F004E7
icewind.exe+35A49E: 48 8D 4D 40 - lea rcx,[rbp+40]
icewind.exe+35A4A2: E8 99 80 DD FF - call icewind.exe+132540
icewind.exe+35A4A7: BA E3 04 F0 00 - mov edx,00F004E3
icewind.exe+35A4AC: 48 8D 4D 98 - lea rcx,[rbp-68]
icewind.exe+35A4B0: 48 8B 18 - mov rbx,[rax]
icewind.exe+35A4B3: E8 88 80 DD FF - call icewind.exe+132540
icewind.exe+35A4B8: 41 0F BF 8C 24 24 11 00 00 - movsx ecx,word ptr [r12+00001124]
icewind.exe+35A4C1: 48 8D 15 20 43 25 00 - lea rdx,[icewind.exe+5AE7E8]
// ---------- INJECTING HERE ----------
icewind.exe+35A4C8: 45 0F BF 8C 24 7C 05 00 00 - movsx r9d,word ptr [r12+0000057C]
// ---------- DONE INJECTING ----------
icewind.exe+35A4D1: 89 4C 24 28 - mov [rsp+28],ecx
icewind.exe+35A4D5: 48 8D 4D E0 - lea rcx,[rbp-20]
icewind.exe+35A4D9: 4C 8B 00 - mov r8,[rax]
icewind.exe+35A4DC: 48 89 5C 24 20 - mov [rsp+20],rbx
icewind.exe+35A4E1: E8 8A 3C 0A 00 - call icewind.exe+3FE170
icewind.exe+35A4E6: 48 8D 4D 98 - lea rcx,[rbp-68]
icewind.exe+35A4EA: E8 71 29 0A 00 - call icewind.exe+3FCE60
icewind.exe+35A4EF: 48 8D 4D 40 - lea rcx,[rbp+40]
icewind.exe+35A4F3: E8 68 29 0A 00 - call icewind.exe+3FCE60
icewind.exe+35A4F8: 48 8D 55 E0 - lea rdx,[rbp-20]
}
Toggle Activation
117
0
285
"Pointers to Character Data"
1
275
"Char 1"
0
1
"icewind.exe"+0069B7A8
0
274
"Experience"
0
4 Bytes
+570
303
"Current Health"
0
0000FF
2 Bytes
+57c
309
"Current Strength"
0
FF0000
2 Bytes
+116e
310
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
311
"Current Intelligence"
0
FF0000
2 Bytes
+1172
312
"Current Wisdom"
0
FF0000
2 Bytes
+1174
313
"Current Dexterity"
0
FF0000
2 Bytes
+1176
314
"Current Constitution"
0
FF0000
2 Bytes
+1178
315
"Current Charisma"
0
FF0000
2 Bytes
+117a
317
"Regular Health"
0
0000FF
2 Bytes
+1124
283
"Char 2"
0
1
"icewind.exe"+0069B7B8
0
318
"Experience"
0
4 Bytes
+570
319
"Current Health"
0
0000FF
2 Bytes
+57c
320
"Current Strength"
0
FF0000
2 Bytes
+116e
321
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
322
"Current Intelligence"
0
FF0000
2 Bytes
+1172
323
"Current Wisdom"
0
FF0000
2 Bytes
+1174
324
"Current Dexterity"
0
FF0000
2 Bytes
+1176
325
"Current Constitution"
0
FF0000
2 Bytes
+1178
326
"Current Charisma"
0
FF0000
2 Bytes
+117a
327
"Regular Health"
0
0000FF
2 Bytes
+1124
296
"Char 3"
0
1
"icewind.exe"+0069B7C8
0
328
"Experience"
0
4 Bytes
+570
329
"Current Health"
0
0000FF
2 Bytes
+57c
330
"Current Strength"
0
FF0000
2 Bytes
+116e
331
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
332
"Current Intelligence"
0
FF0000
2 Bytes
+1172
333
"Current Wisdom"
0
FF0000
2 Bytes
+1174
334
"Current Dexterity"
0
FF0000
2 Bytes
+1176
335
"Current Constitution"
0
FF0000
2 Bytes
+1178
336
"Current Charisma"
0
FF0000
2 Bytes
+117a
337
"Regular Health"
0
0000FF
2 Bytes
+1124
298
"Char 4"
0
1
"icewind.exe"+0069B7D8
0
338
"Experience"
0
4 Bytes
+570
339
"Current Health"
0
0000FF
2 Bytes
+57c
340
"Current Strength"
0
FF0000
2 Bytes
+116e
341
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
342
"Current Intelligence"
0
FF0000
2 Bytes
+1172
343
"Current Wisdom"
0
FF0000
2 Bytes
+1174
344
"Current Dexterity"
0
FF0000
2 Bytes
+1176
345
"Current Constitution"
0
FF0000
2 Bytes
+1178
346
"Current Charisma"
0
FF0000
2 Bytes
+117a
347
"Regular Health"
0
0000FF
2 Bytes
+1124
300
"Char 5"
0
1
"icewind.exe"+0069B7E8
0
348
"Experience"
0
4 Bytes
+570
349
"Current Health"
0
0000FF
2 Bytes
+57c
350
"Current Strength"
0
FF0000
2 Bytes
+116e
351
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
352
"Current Intelligence"
0
FF0000
2 Bytes
+1172
353
"Current Wisdom"
0
FF0000
2 Bytes
+1174
354
"Current Dexterity"
0
FF0000
2 Bytes
+1176
355
"Current Constitution"
0
FF0000
2 Bytes
+1178
356
"Current Charisma"
0
FF0000
2 Bytes
+117a
357
"Regular Health"
0
0000FF
2 Bytes
+1124
293
"Char 6"
0
1
"icewind.exe"+0069B7F8
0
358
"Experience"
0
4 Bytes
+570
359
"Current Health"
0
0000FF
2 Bytes
+57c
360
"Current Strength"
0
FF0000
2 Bytes
+116e
361
"Current Strength Bonus (%)"
0
FF0000
2 Bytes
+1170
362
"Current Intelligence"
0
FF0000
2 Bytes
+1172
363
"Current Wisdom"
0
FF0000
2 Bytes
+1174
364
"Current Dexterity"
0
FF0000
2 Bytes
+1176
365
"Current Constitution"
0
FF0000
2 Bytes
+1178
366
"Current Charisma"
0
FF0000
2 Bytes
+117a
367
"Regular Health"
0
0000FF
2 Bytes
+1124
248
"Gold"
4 Bytes
"icewind.exe"+0072E508
7988
E80
295
"Debug"
C0C0C0
1
287
"Longer Pathes from the same base address"
1
276
"Char 1"
1
"icewind.exe"+0069B7A8
0
C30
18
4F0
277
"Current Health"
0
0000FF
2 Bytes
+57c
284
"Char 2"
0
1
"icewind.exe"+0069B7B8
0
C30
18
4F0
288
"Current Health"
0
0000FF
2 Bytes
+57c
281
"GodMode and One-Hit-Kill"
Auto Assembler Script
{ Game : icewind.exe
Version:
Date : 2021-08-14
Author : Ich
This script does blah blah blah
RBX + 28 : 0 = we, 1 = they
RBX + 12c : 1 = we, 0 = they
}
[ENABLE]
aobscanmodule(ohk_godmode,icewind.exe,66 29 83 7C 05 00 00) // should be unique
alloc(newmem,$1000,ohk_godmode)
label(code)
label(return)
newmem:
mov eax,[rbx+12c] // get our magic flag
cmp eax,1 // check if party member
jne @f // if not, jump to @@
mov ax,#99 // load 99 and
mov [rbx+0000057C],ax // write to current health
mov ax,0 // reduce current damage to 0
jmp code // continue with original code
@@: // enemy code
mov ax,7000 // dmg should be sufficient
code:
sub [rbx+0000057C],ax
jmp return
ohk_godmode:
jmp newmem
nop 2
return:
registersymbol(ohk_godmode)
[DISABLE]
ohk_godmode:
db 66 29 83 7C 05 00 00
unregistersymbol(ohk_godmode)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: icewind.exe+1AD8A3
icewind.exe+1AD874: 48 81 C1 68 17 00 00 - add rcx,00001768
icewind.exe+1AD87B: 48 8B D0 - mov rdx,rax
icewind.exe+1AD87E: E8 6D 74 05 00 - call icewind.exe+204CF0
icewind.exe+1AD883: 48 8D 4D 0F - lea rcx,[rbp+0F]
icewind.exe+1AD887: E8 D4 F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD88C: 48 8D 4D 07 - lea rcx,[rbp+07]
icewind.exe+1AD890: E8 CB F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD895: 48 8D 4D DF - lea rcx,[rbp-21]
icewind.exe+1AD899: E8 C2 F5 24 00 - call icewind.exe+3FCE60
icewind.exe+1AD89E: 41 0F B7 46 1C - movzx eax,word ptr [r14+1C]
// ---------- INJECTING HERE ----------
icewind.exe+1AD8A3: 66 29 83 7C 05 00 00 - sub [rbx+0000057C],ax
// ---------- DONE INJECTING ----------
icewind.exe+1AD8AA: 41 8B 46 48 - mov eax,[r14+48]
icewind.exe+1AD8AE: BE 00 01 00 00 - mov esi,00000100
icewind.exe+1AD8B3: A8 09 - test al,09
icewind.exe+1AD8B5: 0F 85 FB 02 00 00 - jne icewind.exe+1ADBB6
icewind.exe+1AD8BB: A8 12 - test al,12
icewind.exe+1AD8BD: 0F 84 B0 05 00 00 - je icewind.exe+1ADE73
icewind.exe+1AD8C3: 0F BF 83 7C 05 00 00 - movsx eax,word ptr [rbx+0000057C]
icewind.exe+1AD8CA: 4C 8D 2D 57 31 3E 00 - lea r13,[icewind.exe+590A28]
icewind.exe+1AD8D1: 8B 4D 9F - mov ecx,[rbp-61]
icewind.exe+1AD8D4: 2B C8 - sub ecx,eax
}
368
"Static address which points to...?"
1
4 Bytes
icewind.exe+71B690
"Icewind.exe"+1A82A2
crash