vt)dkaL!09(ecn.Nab=2igEXMS8z_vO*ZWA3($WN)-L!vQAq#
42
"Dont Activate Both"
1
8
"Get Player (ASM version)"
Auto Assembler Script
[ENABLE]
aobscanfunction(PlayerCheat,Chasm.Player::CalcMaxHP,48 8B F9 8B F2 48 8B 8F D0 00 00 00 48 8B 01) // should be unique in this function
alloc(newmem,$1000,PlayerCheat)
label(code)
label(return)
alloc(player, 8)
registersymbol(player)
newmem:
mov [player], rcx // Pointer to Player struct
code:
mov rdi,rcx
mov esi,edx
jmp return
PlayerCheat:
jmp newmem
return:
registersymbol(PlayerCheat)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
PlayerCheat:
db 48 8B F9 8B F2
unregistersymbol(PlayerCheat)
unregistersymbol(player)
dealloc(newmem)
dealloc(player)
{
// ORIGINAL CODE - INJECTION POINT: Chasm.Player::CalcMaxHP+6
7FFD5DA16E15: 00 00 - add [rax],al
7FFD5DA16E17: 00 D8 - add al,bl
7FFD5DA16E19: 75 9F - jne 7FFD5DA16DBA
7FFD5DA16E1B: 5D - pop rbp
7FFD5DA16E1C: FD - std
7FFD5DA16E1D: 7F 00 - jg 7FFD5DA16E1F
7FFD5DA16E1F: 00 57 56 - add [rdi+56],dl
Chasm.Player::CalcMaxHP+2: 48 83 EC 28 - sub rsp,28
Chasm.Player::CalcMaxHP+6: 48 8B F9 - mov rdi,rcx
Chasm.Player::CalcMaxHP+9: 8B F2 - mov esi,edx
// ---------- INJECTING HERE ----------
Chasm.Player::CalcMaxHP+B: 48 8B 8F D0 00 00 00 - mov rcx,[rdi+System.AppContextDefaultValues.SwitchDoNotMarshalOutByrefSafeArrayOnInvoke]
// ---------- DONE INJECTING ----------
Chasm.Player::CalcMaxHP+12: 48 8B 01 - mov rax,[rcx]
Chasm.Player::CalcMaxHP+15: 48 8B 40 48 - mov rax,[rax+48]
Chasm.Player::CalcMaxHP+19: FF 50 08 - call qword ptr [rax+08]
Chasm.Player::CalcMaxHP+1C: 03 F0 - add esi,eax
Chasm.Player::CalcMaxHP+1E: 48 8B 87 D8 00 00 00 - mov rax,[rdi+System.AppContextDefaultValues.SwitchUseNetCoreTimer]
Chasm.Player::CalcMaxHP+25: 03 70 50 - add esi,[rax+50]
Chasm.Player::CalcMaxHP+28: 48 8B 87 C8 00 00 00 - mov rax,[rdi+System.AppContextDefaultValues.SwitchCryptographyUseLegacyFipsThrow]
Chasm.Player::CalcMaxHP+2F: 03 70 50 - add esi,[rax+50]
Chasm.Player::CalcMaxHP+32: 48 8B 87 C0 00 00 00 - mov rax,[rdi+System.AppContextDefaultValues.SwitchUseLegacyExecutionContextBehaviorUponUndoFailure]
Chasm.Player::CalcMaxHP+39: 03 70 50 - add esi,[rax+50]
}
39
"Get Player (Breakpoint version)"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
openProcess('Chasm.exe')
debugProcess()
reinitializeSymbolhandler(true)
calcMaxHP_instruction = 'Chasm.Player::CalcMaxHP'
if not calcMaxHP_instruction then
print('Failed to get "Chasm.Player::CalcMaxHP"')
return
end
player = allocateMemory(8)
registerSymbol('player', player)
local function on_debug()
writeQword(player, RCX)
debug_continueFromBreakpoint()
end
debug_setBreakpoint(calcMaxHP_instruction, on_debug)
[DISABLE]
if player then
deAlloc(player)
player = nil
unregisterSymbol('player')
end
if calcMaxHP_instruction then
debug_removeBreakpoint(calcMaxHP_instruction)
calcMaxHP_instruction = nil
end
40
"Cheats (use Get Player first)"
1
38
"Dissect Player"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local structWindow = createStructureForm('[player]', 'Dissected Player', 'Chasm.Player')
createThread(function()
synchronize(function()
sleep(50)
memrec.Active = false
end)
end)
[DISABLE]
37
"Item Drop Rate"
Auto Assembler Script
[ENABLE]
aobscanfunction(ItemDropCheat,Chasm.Gameplay.Enemy::TryDrop,0F B6 52 2C E8 ** ** ** ** 33 D2 85 C0 7E **) // should be unique in this function
alloc(newmem,$1000,ItemDropCheat)
label(code)
label(return)
newmem:
code:
// movzx edx,byte ptr [rdx+2C]
mov edx, FFFF
call Chasm.Player::CalcLCK
jmp return
ItemDropCheat:
jmp newmem
nop 4
return:
registersymbol(ItemDropCheat)
[DISABLE]
//code from here till the end of the code will be used to disable the cheat
ItemDropCheat:
db 0F B6 52 2C E8 A2 A4 FF FF
unregistersymbol(ItemDropCheat)
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Chasm.Gameplay.Enemy::TryDrop+55
Chasm.Gameplay.Enemy::TryDrop+22: C4 61 78 29 44 24 50 - vmovaps [rsp+50],xmm8
Chasm.Gameplay.Enemy::TryDrop+29: 48 8B D9 - mov rbx,rcx
Chasm.Gameplay.Enemy::TryDrop+2C: 48 8B F2 - mov rsi,rdx
Chasm.Gameplay.Enemy::TryDrop+2F: 49 8B F8 - mov rdi,r8
Chasm.Gameplay.Enemy::TryDrop+32: 41 8B E9 - mov ebp,r9d
Chasm.Gameplay.Enemy::TryDrop+35: 45 33 F6 - xor r14d,r14d
Chasm.Gameplay.Enemy::TryDrop+38: C4 E1 7A 10 35 47 04 00 00 - vmovss xmm6,[7FFD5DB917B8]
Chasm.Gameplay.Enemy::TryDrop+41: C4 E1 40 57 FF - vxorps xmm7,xmm7,xmm7
Chasm.Gameplay.Enemy::TryDrop+46: 48 8B 0C 25 B8 72 1A 14 - mov rcx,[Chasm.GlobalShare.LocalPlayer]
Chasm.Gameplay.Enemy::TryDrop+4E: 48 8B 91 98 00 00 00 - mov rdx,[rcx+System.AppContextDefaultValues.SwitchDoNotAddrOfCspParentWindowHandle]
// ---------- INJECTING HERE ----------
Chasm.Gameplay.Enemy::TryDrop+55: 0F B6 52 2C - movzx edx,byte ptr [rdx+2C]
// ---------- DONE INJECTING ----------
Chasm.Gameplay.Enemy::TryDrop+59: E8 A2 A4 FF FF - call Chasm.Player::CalcLCK
Chasm.Gameplay.Enemy::TryDrop+5E: 33 D2 - xor edx,edx
Chasm.Gameplay.Enemy::TryDrop+60: 85 C0 - test eax,eax
Chasm.Gameplay.Enemy::TryDrop+62: 7E 1F - jle Chasm.Gameplay.Enemy::TryDrop+83
Chasm.Gameplay.Enemy::TryDrop+64: C4 E1 42 58 FE - vaddss xmm7,xmm7,xmm6
Chasm.Gameplay.Enemy::TryDrop+69: C4 E1 78 2E 35 1A 04 00 00 - vucomiss xmm6,[7FFD5DB917BC]
Chasm.Gameplay.Enemy::TryDrop+72: 76 09 - jna Chasm.Gameplay.Enemy::TryDrop+7D
Chasm.Gameplay.Enemy::TryDrop+74: C4 E1 4A 5C 35 13 04 00 00 - vsubss xmm6,xmm6,[7FFD5DB917C0]
Chasm.Gameplay.Enemy::TryDrop+7D: FF C2 - inc edx
Chasm.Gameplay.Enemy::TryDrop+7F: 3B D0 - cmp edx,eax
}
14
"Gold"
0
4 Bytes
player
01C
098
7
"Health"
1
9
"God Mode"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local player = getAddressSafe('player')
if not player then return end
player = readPointer(player)
current_hp = player + 0x450
local max_hp = readPointer(player + 0x98) + 0x0C
function on_health_changed()
writeInteger(current_hp, readInteger(max_hp))
debug_continueFromBreakpoint()
end
debug_setBreakpoint(current_hp, 4, bptWrite, on_health_changed)
[DISABLE]
if current_hp then
debug_removeBreakpoint(current_hp)
current_hp = nil
end
11
"Invincible Time"
0
Float
player
048c
6
"Max HP"
0
4 Bytes
player
0C
098
5
"Current HP"
0
4 Bytes
player
0450
13
"Mana"
1
10
"Max MP"
0
4 Bytes
player
010
098
12
"Current MP"
0
4 Bytes
player
04E4
19
"Attributes"
1
15
"STR"
0
Byte
player
029
098
16
"INT"
0
Byte
player
2A
098
17
"CON"
0
Byte
player
2B
098
18
"LCK"
0
Byte
player
2C
098
28
"Jump"
1
34
"Infinite Jump (Direct Version)"
Auto Assembler Script
[ENABLE]
{$LUA}
if syntaxcheck then return end
local player = getAddressSafe('player')
if player then
writeByte(readPointer(player) + 0x507, 1)
end
{$ASM}
Chasm.Player::Update+5DD:
mov byte ptr [rsi+System.IO.TextWriter._FlushDelegate+7],01
[DISABLE]
Chasm.Player::Update+5DD:
mov byte ptr [rsi+System.IO.TextWriter._FlushDelegate+7],00
41
"Infinite Jump (Breakpoint Version)"
Auto Assembler Script
{$LUA}
if syntaxcheck then return end
[ENABLE]
local player = getAddressSafe('player')
if not player then
print('Player pointer is not initialized')
return
end
player = readPointer(player)
jump = player + 0x507
writeByte(jump, 1)
local function on_changed()
writeByte(jump, 1)
debug_continueFromBreakpoint()
end
debug_setBreakpoint(jump, 1, bptWrite, on_changed)
[DISABLE]
if jump then
debug_removeBreakpoint(jump)
jump = nil
end
20
"fallVelocityModifier"
Float
[player]+4B4
21
"fallIncrementalChange"
Float
[player]+4B8
22
"fallJumpTime"
Float
[player]+4BC
23
"JumpDecrementY"
Float
[player]+4C0
24
"JumpVelocityY"
Float
[player]+4C4
25
"jumpTime"
Float
[player]+4C8
26
"fallStartY"
Float
[player]+4D0
27
"jumpVelocityX"
Float
[player]+4D4
29
"CanDoubleJump"
Byte
[player]+505
30
"CanParachute"
Byte
[player]+506
31
"allowFallJump"
Byte
[player]+507
32
"horzJump"
Byte
[player]+508
33
"IgnoreJumpInput"
Byte
[player]+50F
Chasm.Gameplay.Enemy::TryDrop+55
7FFD5DB7A195
91
98
00
00
00
0F
B6
52
2C
E8
82
58
FF
FF
Chasm.Gameplay.Enemy::TryGemDrop+48
7FFD5DB6F6D8
91
98
00
00
00
0F
B6
52
2C
E8
3F
49
D1
FF
Chasm.Player::CalcLCK
7FFD5DB8B830
5D
FD
7F
00
00
57
56
48
83
EC
28