114982
"<=== Attach to process (Game v1.0.3)"
0000FF
Auto Assembler Script
[ENABLE]
{$lua}
if syntaxcheck then return end
if(getCEVersion() < 7.4) then
ShowMessage('Warning! CE version should be 7.4 or above')
end
OpenProcess("underkeep.exe")
if(process == nil) then
ShowMessage('The process is NOT found!')
end
{$asm}
[DISABLE]
115064
"Gold"
0
4 Bytes
underkeep.exe+43F0E0
115085
"Boost multiplier for Health etc."
Auto Assembler Script
[ENABLE]
aobscanmodule(stat_boost, underkeep.exe, 44 8B 93 98 00 00 00 44 8B 83 1C 01 00 00)
alloc(newmem, $100, stat_boost)
label(code)
label(return)
newmem:
code:
// Originaler Befehl: Lädt den Wert aus [rbx+98] nach r10d
mov r10d, [rbx+00000098]
// Hier den Multiplikator anpassen (z. B. 10-fach):
imul r10d, r10d, #50
jmp return
stat_boost:
jmp newmem
nop 2
return:
registersymbol(stat_boost)
[DISABLE]
stat_boost:
db 44 8B 93 98 00 00 00
unregistersymbol(stat_boost)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+178E3F
underkeep.exe+178E10: 44 8B A3 F0 00 00 00 - mov r12d,[rbx+000000F0]
underkeep.exe+178E17: 45 85 E4 - test r12d,r12d
underkeep.exe+178E1A: 0F 28 B4 24 40 03 00 00 - movaps xmm6,[rsp+00000340]
underkeep.exe+178E22: 44 0F 48 E6 - cmovs r12d,esi
underkeep.exe+178E26: 41 83 FE 01 - cmp r14d,01
underkeep.exe+178E2A: 74 0A - je underkeep.exe+178E36
underkeep.exe+178E2C: 8B 83 F8 00 00 00 - mov eax,[rbx+000000F8]
underkeep.exe+178E32: 89 44 24 24 - mov [rsp+24],eax
underkeep.exe+178E36: 41 8B 0F - mov ecx,[r15]
underkeep.exe+178E39: 8B 83 14 01 00 00 - mov eax,[rbx+00000114]
// ---------- INJECTING HERE ----------
underkeep.exe+178E3F: 44 8B 93 98 00 00 00 - mov r10d,[rbx+00000098]
// ---------- DONE INJECTING ----------
underkeep.exe+178E46: 44 8B 83 1C 01 00 00 - mov r8d,[rbx+0000011C]
underkeep.exe+178E4D: 41 FF CA - dec r10d
underkeep.exe+178E50: 45 03 C5 - add r8d,r13d
underkeep.exe+178E53: 4C 8B AC 24 60 03 00 00 - mov r13,[rsp+00000360]
underkeep.exe+178E5B: 44 8D 0C 85 00 00 00 00 - lea r9d,[rax*4+00000000]
underkeep.exe+178E63: B8 1F 85 EB 51 - mov eax,51EB851F
underkeep.exe+178E68: 41 03 C9 - add ecx,r9d
underkeep.exe+178E6B: 6B D1 0E - imul edx,ecx,0E
underkeep.exe+178E6E: 8B 8B 10 01 00 00 - mov ecx,[rbx+00000110]
underkeep.exe+178E74: 83 C1 F6 - add ecx,-0A
}
114989
"Set amout of all items in inventory to 10"
Auto Assembler Script
[ENABLE]
aobscanmodule(itemamount,underkeep.exe,8B BE D0 00 00 00 89 7D B8 83 BD 50 05 00 00 03) // should be unique
alloc(newmem,$1000,itemamount)
label(code)
label(return)
newmem:
mov edi,#10
mov [rsi+000000D0], edi
code:
mov edi,[rsi+000000D0]
jmp return
itemamount:
jmp newmem
nop
return:
registersymbol(itemamount)
[DISABLE]
itemamount:
db 8B BE D0 00 00 00
unregistersymbol(itemamount)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe.text+197CC5
underkeep.exe.text+197C9E: 8B 96 00 01 00 00 - mov edx,[rsi+00000100]
underkeep.exe.text+197CA4: E8 47 16 FE FF - call underkeep.exe.text+1792F0
underkeep.exe.text+197CA9: 41 0F B6 CA - movzx ecx,r10b
underkeep.exe.text+197CAD: 84 C0 - test al,al
underkeep.exe.text+197CAF: 41 0F 44 CF - cmove ecx,r15d
underkeep.exe.text+197CB3: 88 4D D0 - mov [rbp-30],cl
underkeep.exe.text+197CB6: 48 8B CE - mov rcx,rsi
underkeep.exe.text+197CB9: E8 92 12 04 00 - call underkeep.exe.text+1D8F50
underkeep.exe.text+197CBE: 88 45 D1 - mov [rbp-2F],al
underkeep.exe.text+197CC1: 44 88 55 D2 - mov [rbp-2E],r10b
// ---------- INJECTING HERE ----------
underkeep.exe.text+197CC5: 8B BE D0 00 00 00 - mov edi,[rsi+000000D0]
// ---------- DONE INJECTING ----------
underkeep.exe.text+197CCB: 89 7D B8 - mov [rbp-48],edi
underkeep.exe.text+197CCE: 83 BD 50 05 00 00 03 - cmp dword ptr [rbp+00000550],03
underkeep.exe.text+197CD5: 75 22 - jne underkeep.exe.text+197CF9
underkeep.exe.text+197CD7: 48 8B D6 - mov rdx,rsi
underkeep.exe.text+197CDA: 48 8D 0D 8F 74 2A 00 - lea rcx,[underkeep.exe.data+D2170]
underkeep.exe.text+197CE1: E8 BA 7E 08 00 - call underkeep.exe.text+21FBA0
underkeep.exe.text+197CE6: 8B CF - mov ecx,edi
underkeep.exe.text+197CE8: 2B C8 - sub ecx,eax
underkeep.exe.text+197CEA: 89 4D B8 - mov [rbp-48],ecx
underkeep.exe.text+197CED: 0F B6 C3 - movzx eax,bl
}
114990
"amount of items does not decrease when used"
Auto Assembler Script
[ENABLE]
aobscanmodule(itemdecrease,underkeep.exe,44 29 81 D0 00 00 00 48 8B F1 83 B9 D0 00 00 00 00) // should be unique
alloc(newmem,$100,itemdecrease)
label(code)
label(return)
newmem:
mov r8d,0
code:
sub [rcx+000000D0],r8d
jmp return
itemdecrease:
jmp newmem
nop 2
return:
registersymbol(itemdecrease)
[DISABLE]
itemdecrease:
db 44 29 81 D0 00 00 00
unregistersymbol(itemdecrease)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+1404EF
underkeep.exe+1404DA: CC - int 3
underkeep.exe+1404DB: CC - int 3
underkeep.exe+1404DC: CC - int 3
underkeep.exe+1404DD: CC - int 3
underkeep.exe+1404DE: CC - int 3
underkeep.exe+1404DF: CC - int 3
underkeep.exe+1404E0: 48 89 5C 24 10 - mov [rsp+10],rbx
underkeep.exe+1404E5: 48 89 74 24 18 - mov [rsp+18],rsi
underkeep.exe+1404EA: 57 - push rdi
underkeep.exe+1404EB: 48 83 EC 20 - sub rsp,20
// ---------- INJECTING HERE ----------
underkeep.exe+1404EF: 44 29 81 D0 00 00 00 - sub [rcx+000000D0],r8d
// ---------- DONE INJECTING ----------
underkeep.exe+1404F6: 48 8B F1 - mov rsi,rcx
underkeep.exe+1404F9: 83 B9 D0 00 00 00 00 - cmp dword ptr [rcx+000000D0],00
underkeep.exe+140500: 7E 47 - jle underkeep.exe+140549
underkeep.exe+140502: 84 D2 - test dl,dl
underkeep.exe+140504: 75 43 - jne underkeep.exe+140549
underkeep.exe+140506: 83 B9 F0 00 00 00 00 - cmp dword ptr [rcx+000000F0],00
underkeep.exe+14050D: 74 28 - je underkeep.exe+140537
underkeep.exe+14050F: 48 8D 1D C2 8D 2F 00 - lea rbx,[underkeep.exe+4392D8]
underkeep.exe+140516: BF 04 00 00 00 - mov edi,00000004
underkeep.exe+14051B: 0F 1F 44 00 00 - nop dword ptr [rax+rax+00]
}
114991
"Godmode"
Auto Assembler Script
[ENABLE]
aobscanmodule(godmode,underkeep.exe,2B C6 89 83 FC 00 00 00 79 ** 89 BB FC 00 00 00) // should be unique
alloc(newmem,$1000,godmode)
label(code)
label(return)
newmem:
mov eax, [rbx+ec] // get full health value ;)
test eax,eax // and set the flag for the following jns
code:
sub eax,esi
mov [rbx+000000FC],eax
jmp return
godmode:
jmp newmem
nop 3
return:
registersymbol(godmode)
[DISABLE]
godmode:
db 2B C6 89 83 FC 00 00 00
unregistersymbol(godmode)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+179A46
underkeep.exe+179A27: 81 3A 97 00 00 00 - cmp [rdx],00000097
underkeep.exe+179A2D: 74 12 - je underkeep.exe+179A41
underkeep.exe+179A2F: 48 81 C2 C8 02 00 00 - add rdx,000002C8
underkeep.exe+179A36: 49 3B D1 - cmp rdx,r9
underkeep.exe+179A39: 75 EC - jne underkeep.exe+179A27
underkeep.exe+179A3B: EB 06 - jmp underkeep.exe+179A43
underkeep.exe+179A3D: 03 F6 - add esi,esi
underkeep.exe+179A3F: EB E6 - jmp underkeep.exe+179A27
underkeep.exe+179A41: 03 F6 - add esi,esi
underkeep.exe+179A43: 41 8B C2 - mov eax,r10d
// ---------- INJECTING HERE ----------
underkeep.exe+179A46: 2B C6 - sub eax,esi
// ---------- DONE INJECTING ----------
underkeep.exe+179A48: 89 83 FC 00 00 00 - mov [rbx+000000FC],eax
underkeep.exe+179A4E: 79 08 - jns underkeep.exe+179A58
underkeep.exe+179A50: 89 BB FC 00 00 00 - mov [rbx+000000FC],edi
underkeep.exe+179A56: EB 07 - jmp underkeep.exe+179A5F
underkeep.exe+179A58: 45 32 F6 - xor r14b,r14b
underkeep.exe+179A5B: 85 C0 - test eax,eax
underkeep.exe+179A5D: 75 39 - jne underkeep.exe+179A98
underkeep.exe+179A5F: 48 8B 8B A0 02 00 00 - mov rcx,[rbx+000002A0]
underkeep.exe+179A66: 48 63 83 98 02 00 00 - movsxd rax,dword ptr [rbx+00000298]
underkeep.exe+179A6D: 48 69 D0 C8 02 00 00 - imul rdx,rax,000002C8
}
114993
"One-Hit-Kill"
Auto Assembler Script
[ENABLE]
aobscanmodule(onehit,underkeep.exe,44 2B CE 44 89 8F D0 00 00 00 79 ** 44 89 AF D0 00 00 00) // should be unique
alloc(newmem,$100,onehit)
label(code)
label(return)
newmem:
mov r9d,0
code:
// sub r9d,esi
mov [rdi+000000D0],r9d
jmp return
onehit:
jmp newmem
nop 5
return:
registersymbol(onehit)
[DISABLE]
onehit:
db 44 2B CE 44 89 8F D0 00 00 00
unregistersymbol(onehit)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+1E136B
underkeep.exe+1E1348: 8B 87 00 01 00 00 - mov eax,[rdi+00000100]
underkeep.exe+1E134E: 85 C0 - test eax,eax
underkeep.exe+1E1350: 7E 16 - jle underkeep.exe+1E1368
underkeep.exe+1E1352: 85 F6 - test esi,esi
underkeep.exe+1E1354: 7E 12 - jle underkeep.exe+1E1368
underkeep.exe+1E1356: FF C8 - dec eax
underkeep.exe+1E1358: 89 87 00 01 00 00 - mov [rdi+00000100],eax
underkeep.exe+1E135E: 41 8B F5 - mov esi,r13d
underkeep.exe+1E1361: 48 89 B5 90 00 00 00 - mov [rbp+00000090],rsi
underkeep.exe+1E1368: 45 8B CA - mov r9d,r10d
// ---------- INJECTING HERE ----------
underkeep.exe+1E136B: 44 2B CE - sub r9d,esi
// ---------- DONE INJECTING ----------
underkeep.exe+1E136E: 44 89 8F D0 00 00 00 - mov [rdi+000000D0],r9d
underkeep.exe+1E1375: 79 0A - jns underkeep.exe+1E1381
underkeep.exe+1E1377: 44 89 AF D0 00 00 00 - mov [rdi+000000D0],r13d
underkeep.exe+1E137E: 45 8B CD - mov r9d,r13d
underkeep.exe+1E1381: 48 63 8F EC 02 00 00 - movsxd rcx,dword ptr [rdi+000002EC]
underkeep.exe+1E1388: 85 C9 - test ecx,ecx
underkeep.exe+1E138A: 7E 37 - jle underkeep.exe+1E13C3
underkeep.exe+1E138C: 4C 63 87 20 01 00 00 - movsxd r8,dword ptr [rdi+00000120]
underkeep.exe+1E1393: 4C 0F AF C1 - imul r8,rcx
underkeep.exe+1E1397: 49 83 C0 32 - add r8,32
}
114994
"spending Stamina sets it back to max"
Auto Assembler Script
{ Game : underkeep.exe
Version:
Date : 2026-10-24
Author : Ich
Description :
<Optional info>
}
[ENABLE]
aobscanmodule(stamina,underkeep.exe,44 29 81 00 01 00 00 BB 00 00 00 00 8B 81 00 01 00 00) // should be unique
alloc(newmem,$1000,stamina)
label(code)
label(return)
newmem:
mov r8d, [rcx+f0] // load max stamina
mov [rcx+100], r8d // and store it as current
test eax,eax
code:
// sub [rcx+00000100],r8d
jmp return
stamina:
jmp newmem
nop 2
return:
registersymbol(stamina)
[DISABLE]
stamina:
db 44 29 81 00 01 00 00
unregistersymbol(stamina)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+1824F5
underkeep.exe+1824CE: B9 01 00 00 00 - mov ecx,00000001
underkeep.exe+1824D3: BA 1B 00 00 04 - mov edx,0400001B
underkeep.exe+1824D8: 89 4C 24 20 - mov [rsp+20],ecx
underkeep.exe+1824DC: 48 8B CF - mov rcx,rdi
underkeep.exe+1824DF: E8 0C A5 FF FF - call underkeep.exe+17C9F0
underkeep.exe+1824E4: E9 1F 01 00 00 - jmp underkeep.exe+182608
underkeep.exe+1824E9: A9 FC FF FF FF - test eax,FFFFFFFC
underkeep.exe+1824EE: 75 25 - jne underkeep.exe+182515
underkeep.exe+1824F0: 83 F8 01 - cmp eax,01
underkeep.exe+1824F3: 74 20 - je underkeep.exe+182515
// ---------- INJECTING HERE ----------
underkeep.exe+1824F5: 44 29 81 00 01 00 00 - sub [rcx+00000100],r8d
// ---------- DONE INJECTING ----------
underkeep.exe+1824FC: BB 00 00 00 00 - mov ebx,00000000
underkeep.exe+182501: 8B 81 00 01 00 00 - mov eax,[rcx+00000100]
underkeep.exe+182507: 0F 48 C3 - cmovs eax,ebx
underkeep.exe+18250A: 89 81 00 01 00 00 - mov [rcx+00000100],eax
underkeep.exe+182510: E9 F3 00 00 00 - jmp underkeep.exe+182608
underkeep.exe+182515: 83 C0 FC - add eax,-04
underkeep.exe+182518: 83 F8 01 - cmp eax,01
underkeep.exe+18251B: 0F 87 E7 00 00 00 - ja underkeep.exe+182608
underkeep.exe+182521: 48 8B 89 A0 02 00 00 - mov rcx,[rcx+000002A0]
underkeep.exe+182528: 48 63 87 98 02 00 00 - movsxd rax,dword ptr [rdi+00000298]
}
114995
"spending Mana sets it back to max"
Auto Assembler Script
[ENABLE]
aobscanmodule(mana,underkeep.exe,29 B7 04 01 00 00 79 ** 89 9F 04 01 00 00) // should be unique
alloc(newmem,$100,mana)
label(code)
label(return)
newmem:
mov esi, [rdi+f4] // load max mana
mov [rdi+104], esi // and store it as current
test eax,eax
code:
// sub [rdi+00000104],esi
jmp return
mana:
jmp newmem
nop
return:
registersymbol(mana)
[DISABLE]
mana:
db 29 B7 04 01 00 00
unregistersymbol(mana)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+1825FA
underkeep.exe+1825D4: 41 83 BA 54 04 00 00 09 - cmp dword ptr [r10+00000454],09
underkeep.exe+1825DC: 75 07 - jne underkeep.exe+1825E5
underkeep.exe+1825DE: 41 03 82 5C 04 00 00 - add eax,[r10+0000045C]
underkeep.exe+1825E5: 2B F0 - sub esi,eax
underkeep.exe+1825E7: 49 FF C3 - inc r11
underkeep.exe+1825EA: 49 83 FB 0B - cmp r11,0B
underkeep.exe+1825EE: 7C 80 - jl underkeep.exe+182570
underkeep.exe+1825F0: 85 F6 - test esi,esi
underkeep.exe+1825F2: B9 01 00 00 00 - mov ecx,00000001
underkeep.exe+1825F7: 0F 48 F1 - cmovs esi,ecx
// ---------- INJECTING HERE ----------
underkeep.exe+1825FA: 29 B7 04 01 00 00 - sub [rdi+00000104],esi
// ---------- DONE INJECTING ----------
underkeep.exe+182600: 79 06 - jns underkeep.exe+182608
underkeep.exe+182602: 89 9F 04 01 00 00 - mov [rdi+00000104],ebx
underkeep.exe+182608: 48 8B 5C 24 50 - mov rbx,[rsp+50]
underkeep.exe+18260D: 48 8B 6C 24 58 - mov rbp,[rsp+58]
underkeep.exe+182612: 48 8B 74 24 60 - mov rsi,[rsp+60]
underkeep.exe+182617: 48 8B 7C 24 68 - mov rdi,[rsp+68]
underkeep.exe+18261C: 48 83 C4 40 - add rsp,40
underkeep.exe+182620: 41 5E - pop r14
underkeep.exe+182622: C3 - ret
underkeep.exe+182623: B0 01 - mov al,01
}
115217
"No Cooldown for your skills"
Auto Assembler Script
[ENABLE]
aobscanmodule(cooldown,underkeep.exe,41 89 46 10 41 BD 01 00 00 00 45 8D 45 03) // should be unique
alloc(newmem,$1000,cooldown)
label(code)
label(return)
newmem:
mov eax,0
code:
mov [r14+10],eax
mov r13d,00000001
jmp return
cooldown:
jmp newmem
nop 5
return:
registersymbol(cooldown)
[DISABLE]
cooldown:
db 41 89 46 10 41 BD 01 00 00 00
unregistersymbol(cooldown)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe.text+180EEB
underkeep.exe.text+180ECE: 48 8B CF - mov rcx,rdi
underkeep.exe.text+180ED1: E8 FA 0B 00 00 - call underkeep.exe.text+181AD0
underkeep.exe.text+180ED6: 4D 8D 7E 0C - lea r15,[r14+0C]
underkeep.exe.text+180EDA: 41 8B 1F - mov ebx,[r15]
underkeep.exe.text+180EDD: 85 DB - test ebx,ebx
underkeep.exe.text+180EDF: 7F 04 - jg underkeep.exe.text+180EE5
underkeep.exe.text+180EE1: 33 C0 - xor eax,eax
underkeep.exe.text+180EE3: EB 06 - jmp underkeep.exe.text+180EEB
underkeep.exe.text+180EE5: 49 8B 06 - mov rax,[r14]
underkeep.exe.text+180EE8: 8B 40 4C - mov eax,[rax+4C]
// ---------- INJECTING HERE ----------
underkeep.exe.text+180EEB: 41 89 46 10 - mov [r14+10],eax
// ---------- DONE INJECTING ----------
underkeep.exe.text+180EEF: 41 BD 01 00 00 00 - mov r13d,00000001
underkeep.exe.text+180EF5: 45 8D 45 03 - lea r8d,[r13+03]
underkeep.exe.text+180EF9: 4C 8D 1D 40 A5 2B 00 - lea r11,[underkeep.exe.data+D0440]
underkeep.exe.text+180F00: 83 BD F0 00 00 00 02 - cmp dword ptr [rbp+000000F0],02
underkeep.exe.text+180F07: 0F 84 47 04 00 00 - je underkeep.exe.text+181354
underkeep.exe.text+180F0D: 4C 8D AE 88 00 00 00 - lea r13,[rsi+00000088]
underkeep.exe.text+180F14: 41 83 7D 00 00 - cmp dword ptr [r13+00],00
underkeep.exe.text+180F19: 0F 84 9D 03 00 00 - je underkeep.exe.text+1812BC
underkeep.exe.text+180F1F: 8B 4E 2C - mov ecx,[rsi+2C]
underkeep.exe.text+180F22: 83 E9 01 - sub ecx,01
}
115214
"Get Address of the currently selected skill in Charsheet"
Auto Assembler Script
[ENABLE]
aobscanmodule(selected_skill,underkeep.exe,8B 4A 0C 41 03 C9 44 8D 41 FF 44 8B EE) // should be unique
alloc(newmem,$1000,selected_skill)
label(code)
label(return)
label(skill)
newmem:
mov [skill], rdx
code:
mov ecx,[rdx+0C]
add ecx,r9d
jmp return
skill:
dq 0
selected_skill:
jmp newmem
nop
return:
registersymbol(selected_skill skill)
[DISABLE]
selected_skill:
db 8B 4A 0C 41 03 C9
unregistersymbol(*)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe.text+2419B3
underkeep.exe.text+24198C: 48 8B 05 7D 96 12 00 - mov rax,[underkeep.exe.data+10]
underkeep.exe.text+241993: 48 33 C4 - xor rax,rsp
underkeep.exe.text+241996: 48 89 85 00 03 00 00 - mov [rbp+00000300],rax
underkeep.exe.text+24199D: 41 8B F9 - mov edi,r9d
underkeep.exe.text+2419A0: 4D 8B F8 - mov r15,r8
underkeep.exe.text+2419A3: 48 8B DA - mov rbx,rdx
underkeep.exe.text+2419A6: 4C 8B F1 - mov r14,rcx
underkeep.exe.text+2419A9: 48 89 4D F8 - mov [rbp-08],rcx
underkeep.exe.text+2419AD: 33 F6 - xor esi,esi
underkeep.exe.text+2419AF: 89 74 24 50 - mov [rsp+50],esi
// ---------- INJECTING HERE ----------
underkeep.exe.text+2419B3: 8B 4A 0C - mov ecx,[rdx+0C]
// ---------- DONE INJECTING ----------
underkeep.exe.text+2419B6: 41 03 C9 - add ecx,r9d
underkeep.exe.text+2419B9: 44 8D 41 FF - lea r8d,[rcx-01]
underkeep.exe.text+2419BD: 44 8B EE - mov r13d,esi
underkeep.exe.text+2419C0: 85 C9 - test ecx,ecx
underkeep.exe.text+2419C2: 7E 67 - jle underkeep.exe.text+241A2B
underkeep.exe.text+2419C4: 8B D6 - mov edx,esi
underkeep.exe.text+2419C6: 45 85 C0 - test r8d,r8d
underkeep.exe.text+2419C9: 41 0F 4F D0 - cmovg edx,r8d
underkeep.exe.text+2419CD: 48 8B 03 - mov rax,[rbx]
underkeep.exe.text+2419D0: 0F AF 50 7C - imul edx,[rax+7C]
}
115215
"No description"
0
4 Bytes
skill
c
115212
"Coordinates"
1
1337163798
"X (East = +1)"
1
4 Bytes
underkeep.exe+43E5f0
115211
"Y (South = +1)"
1
4 Bytes
underkeep.exe+43E5F4
115147
"Char-Stats"
1
1337163797
"Freeze all interesting "current" Values below at the Characters Entries"
0000FF
Auto Assembler Script
{$lua}
if syntaxcheck then return end
[ENABLE]
function freezeCurrentEntries()
local addressList = getAddressList()
-- Geht sicher alle Haupt-Einträge der Tabelle durch
for i = 0, addressList.Count - 1 do
local record = addressList[i]
-- Sicherstellen, dass der Eintrag existiert und eine Beschreibung hat
if record and record.Description then
-- Prüft, ob die Beschreibung mit "Current" beginnt
if record.Description:sub(1, 7) == "Current" then
record.Active = true
-- 2. Grünen Pfeil aktivieren (Wert darf nur steigen)
record.AllowIncrease = true
record.AllowDecrease = false
end
end
end
end
-- Script direkt ausführen:
freezeCurrentEntries()
{$asm}
[DISABLE]
115065
"Character 1"
0
1
underkeep.exe+43e600
115066
"Name"
0
String
7
0
0
1
+10
8
115067
"XP"
0
4 Bytes
+9C
1337163800
"XP needed for next level (so you know what to set)"
0
1
+a8
0
1337163801
"to get Level 2"
0
4 Bytes
+4
1337163802
"to get Level 3"
0
4 Bytes
+8
1337163803
"to get Level 4"
0
4 Bytes
+c
1337163804
"to get Level 5"
0
4 Bytes
+10
1337163805
"to get Level 6"
0
4 Bytes
+14
1337163806
"to get Level 7"
0
4 Bytes
+18
1337163807
"to get Level 8"
0
4 Bytes
+1c
1337163808
"to get Level 9"
0
4 Bytes
+20
1337163809
"to get Level 10"
0
4 Bytes
+24
1337163810
"to get Level 11"
0
4 Bytes
+28
1337163811
"to get Level 12"
0
4 Bytes
+2c
1337163812
"to get Level 13"
0
4 Bytes
+30
1337163813
"to get Level 14"
0
4 Bytes
+34
1337163814
"to get Level 15"
0
4 Bytes
+38
1337163815
"to get Level 16"
0
4 Bytes
+3c
1337163816
"to get Level 17"
0
4 Bytes
+40
1337163817
"to get Level 18"
0
4 Bytes
+44
115068
"Full Health (Base-Value * Level-Factor + Bonus-Value)"
0
C0C0C0
4 Bytes
+EC
115069
"Full Stamina"
0
C0C0C0
4 Bytes
+F0
115070
"Full Mana"
0
C0C0C0
4 Bytes
+F4
115071
"Current Health"
0
0000FF
4 Bytes
+FC
115072
"Current Stamina"
0
FF0080
4 Bytes
+100
115073
"Current Mana"
0
FF8000
4 Bytes
+104
115074
"Strength"
0
4 Bytes
+10C
115075
"Dexterity"
0
4 Bytes
+110
115076
"Endurance"
0
4 Bytes
+114
115077
"Wisdom"
0
4 Bytes
+118
115078
"Evasion"
0
4 Bytes
+128
115079
"Fire Resistance"
0
4 Bytes
+184
115080
"Ice Resistance"
0
4 Bytes
+188
115081
"Lightning Resistance"
0
4 Bytes
+18C
115082
"Blood Magic Resistance"
0
4 Bytes
+190
115083
"Poison Resistance"
0
4 Bytes
+194
115084
"Skill Points"
0
4 Bytes
+280
115150
"Character 2"
0
1
underkeep.exe+43e600+2b8
115151
"Name"
0
String
7
0
0
1
+10
8
115152
"XP"
0
4 Bytes
+9C
115153
"Full Health (Base-Value * Level-Factor + Bonus-Value)"
0
C0C0C0
4 Bytes
+EC
115154
"Full Stamina"
0
C0C0C0
4 Bytes
+F0
115155
"Full Mana"
0
C0C0C0
4 Bytes
+F4
115156
"Current Health"
0
0000FF
4 Bytes
+FC
115157
"Current Stamina"
0
FF0080
4 Bytes
+100
115158
"Current Mana"
0
FF8000
4 Bytes
+104
115159
"Strength"
0
4 Bytes
+10C
115160
"Dexterity"
0
4 Bytes
+110
115161
"Endurance"
0
4 Bytes
+114
115162
"Wisdom"
0
4 Bytes
+118
115163
"Evasion"
0
4 Bytes
+128
115164
"Fire Resistance"
0
4 Bytes
+184
115165
"Ice Resistance"
0
4 Bytes
+188
115166
"Lightning Resistance"
0
4 Bytes
+18C
115167
"Blood Magic Resistance"
0
4 Bytes
+190
115168
"Poison Resistance"
0
4 Bytes
+194
115169
"Skill Points"
0
4 Bytes
+280
115170
"Character 3"
0
1
underkeep.exe+43e600+2b8+2b8
115171
"Name"
0
String
7
0
0
1
+10
8
115172
"XP"
0
4 Bytes
+9C
115173
"Full Health (Base-Value * Level-Factor + Bonus-Value)"
0
C0C0C0
4 Bytes
+EC
115174
"Full Stamina"
0
C0C0C0
4 Bytes
+F0
115175
"Full Mana"
0
C0C0C0
4 Bytes
+F4
115176
"Current Health"
0
0000FF
4 Bytes
+FC
115177
"Current Stamina"
0
FF0080
4 Bytes
+100
115178
"Current Mana"
0
FF8000
4 Bytes
+104
115179
"Strength"
0
4 Bytes
+10C
115180
"Dexterity"
0
4 Bytes
+110
115181
"Endurance"
0
4 Bytes
+114
115182
"Wisdom"
0
4 Bytes
+118
115183
"Evasion"
0
4 Bytes
+128
115184
"Fire Resistance"
0
4 Bytes
+184
115185
"Ice Resistance"
0
4 Bytes
+188
115186
"Lightning Resistance"
0
4 Bytes
+18C
115187
"Blood Magic Resistance"
0
4 Bytes
+190
115188
"Poison Resistance"
0
4 Bytes
+194
115189
"Skill Points"
0
4 Bytes
+280
115190
"Character 4"
0
1
underkeep.exe+43e600+2b8+2b8+2b8
115191
"Name"
0
String
7
0
0
1
+10
8
115192
"XP"
0
4 Bytes
+9C
115193
"Full Health (Base-Value * Level-Factor + Bonus-Value)"
0
C0C0C0
4 Bytes
+EC
115194
"Full Stamina"
0
C0C0C0
4 Bytes
+F0
115195
"Full Mana"
0
C0C0C0
4 Bytes
+F4
115196
"Current Health"
0
0000FF
4 Bytes
+FC
115197
"Current Stamina"
0
FF0080
4 Bytes
+100
115198
"Current Mana"
0
FF8000
4 Bytes
+104
115199
"Strength"
0
4 Bytes
+10C
115200
"Dexterity"
0
4 Bytes
+110
115201
"Endurance"
0
4 Bytes
+114
115202
"Wisdom"
0
4 Bytes
+118
115203
"Evasion"
0
4 Bytes
+128
115204
"Fire Resistance"
0
4 Bytes
+184
115205
"Ice Resistance"
0
4 Bytes
+188
115206
"Lightning Resistance"
0
4 Bytes
+18C
115207
"Blood Magic Resistance"
0
4 Bytes
+190
115208
"Poison Resistance"
0
4 Bytes
+194
115209
"Skill Points"
0
4 Bytes
+280
114983
"Debug"
C0C0C0
1
115086
"Resist-Booster (crashes game)"
Auto Assembler Script
[ENABLE]
aobscanmodule(resists,underkeep.exe,42 40 01 41 40 8B 42 44 01 41 44 8B 42 48) // should be unique
alloc(newmem,$100,resists)
label(code)
label(return)
newmem:
add eax,#90
code:
inc eax
add [rcx+40],eax
jmp return
resists:
jmp newmem
return:
registersymbol(resists)
[DISABLE]
resists:
db 42 40 01 41 40
unregistersymbol(resists)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: underkeep.exe+CECAF
underkeep.exe+CEC88: 41 30 8B 42 34 01 41 - xor [r11+41013442],cl
underkeep.exe+CEC8F: 34 8B - xor al,-75
underkeep.exe+CEC91: 42 38 01 - cmp [rcx],al
underkeep.exe+CEC94: 41 38 8B 42 1C 01 41 - cmp [r11+41011C42],cl
underkeep.exe+CEC9B: 1C 8B - sbb al,-75
underkeep.exe+CEC9D: 42 20 01 - and [rcx],al
underkeep.exe+CECA0: 41 20 8B 42 24 01 41 - and [r11+41012442],cl
underkeep.exe+CECA7: 24 8B - and al,-75
underkeep.exe+CECA9: 42 3C 01 - cmp al,01
underkeep.exe+CECAC: 41 3C 8B - cmp al,-75
// ---------- INJECTING HERE ----------
underkeep.exe+CECAF: 42 40 - inc eax
// ---------- DONE INJECTING ----------
underkeep.exe+CECB1: 01 41 40 - add [rcx+40],eax
underkeep.exe+CECB4: 8B 42 44 - mov eax,[rdx+44]
underkeep.exe+CECB7: 01 41 44 - add [rcx+44],eax
underkeep.exe+CECBA: 8B 42 48 - mov eax,[rdx+48]
underkeep.exe+CECBD: 01 41 48 - add [rcx+48],eax
underkeep.exe+CECC0: 8B 42 4C - mov eax,[rdx+4C]
underkeep.exe+CECC3: 01 41 4C - add [rcx+4C],eax
underkeep.exe+CECC6: 8B 42 50 - mov eax,[rdx+50]
underkeep.exe+CECC9: 01 41 50 - add [rcx+50],eax
underkeep.exe+CECCC: 8B 42 5C - mov eax,[rdx+5C]
}