Skip to content

Instantly share code, notes, and snippets.

@eur0pa
Last active January 9, 2017 14:58
Show Gist options
  • Save eur0pa/71c955443fbd1b6e08a220be45582155 to your computer and use it in GitHub Desktop.
Save eur0pa/71c955443fbd1b6e08a220be45582155 to your computer and use it in GitHub Desktop.
Eden 'R' restart
{ Game : isaac-ng.exe
Version:
Date : 2016-03-24
Author : europa
}
[ENABLE]
aobscanmodule(AOB_EdenRestart,isaac-ng.exe,83 b8 xx xx xx xx 09 74)
label(return)
AOB_EdenRestart+6:
db 10
return:
registersymbol(AOB_EdenRestart)
[DISABLE]
AOB_EdenRestart+6:
db 09
unregistersymbol(AOB_EdenRestart)
{
// ORIGINAL CODE - INJECTION POINT: "isaac-ng.exe"+D775F
"isaac-ng.exe"+D7737: 75 0F - jne isaac-ng.exe+D7748
"isaac-ng.exe"+D7739: 68 84 6A 47 00 - push isaac-ng.exe+276A84
"isaac-ng.exe"+D773E: 6A 00 - push 00
"isaac-ng.exe"+D7740: E8 3B 9E 10 00 - call isaac-ng.exe+1E1580
"isaac-ng.exe"+D7745: 83 C4 08 - add esp,08
"isaac-ng.exe"+D7748: 8B 97 DC B7 00 00 - mov edx,[edi+0000B7DC]
"isaac-ng.exe"+D774E: 2B 97 D8 B7 00 00 - sub edx,[edi+0000B7D8]
"isaac-ng.exe"+D7754: 8B 87 D8 B7 00 00 - mov eax,[edi+0000B7D8]
"isaac-ng.exe"+D775A: 8B 00 - mov eax,[eax]
"isaac-ng.exe"+D775C: C1 FA 02 - sar edx,02
// ---------- INJECTING HERE ----------
"isaac-ng.exe"+D775F: 83 B8 9C 1B 00 00 09 - cmp dword ptr [eax+00001B9C],09
// ---------- DONE INJECTING ----------
"isaac-ng.exe"+D7766: 74 5B - je isaac-ng.exe+D77C3
"isaac-ng.exe"+D7768: 83 BF 18 4F 1B 00 00 - cmp dword ptr [edi+001B4F18],00
"isaac-ng.exe"+D776F: 77 52 - ja isaac-ng.exe+D77C3
"isaac-ng.exe"+D7771: FF 87 40 4E 1B 00 - inc [edi+001B4E40]
"isaac-ng.exe"+D7777: 83 BF 40 4E 1B 00 3C - cmp dword ptr [edi+001B4E40],3C
"isaac-ng.exe"+D777E: 76 4D - jna isaac-ng.exe+D77CD
"isaac-ng.exe"+D7780: A1 9C E0 4E 00 - mov eax,[isaac-ng.exe+2EE09C]
"isaac-ng.exe"+D7785: C7 87 40 4E 1B 00 00 00 00 00 - mov [edi+001B4E40],00000000
"isaac-ng.exe"+D778F: 8B 90 B8 01 00 00 - mov edx,[eax+000001B8]
"isaac-ng.exe"+D7795: F7 DA - neg edx
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment