League of Legends Zoomhack

[DarknzNet]

Have you always wanted a own zoomhack, but writing to one memory address was too hard? Now you can copy paste this garbage source into Visual Studio and simply compile it yourself ( C# console application ). Make sure you have League of Legends ( in-match ) running when you open this. Wait for console to close itself and your zoom should be modified. I do not take any credits for this code.

using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Runtime.InteropServices;

namespace Zoom
{
    internal class Mem
    {
        private static IntPtr pHandle;
        private static string WindowName = "League of Legends";

        public static IntPtr FindProcess()
        {
            try
            {
                pHandle = Process.GetProcessesByName(WindowName)[0].Handle;
                return pHandle;
            }
            catch
            {
                return IntPtr.Zero;
            }
        }

        public static int GetBaseAddress() =>
            Process.GetProcessesByName(WindowName)[0].MainModule.BaseAddress.ToInt32();

        [DllImport("kernel32.dll")]
        private static extern int ReadProcessMemory(IntPtr Handle, int Address, byte[] buffer, int Size, int BytesRead = 0);
        public static void WriteByteArray(int Address, int BytesWritten, int Array)
        {
            WriteProcessMemory(FindProcess(), Address, BitConverter.GetBytes(Array), BytesWritten, 0);
        }

        public static void WriteFloat(int Address, float Value)
        {
            WriteProcessMemory(FindProcess(), Address, BitConverter.GetBytes(Value), 4, 0);
        }

        [DllImport("kernel32.dll")]
        private static extern int WriteProcessMemory(IntPtr Handle, int Address, byte[] buffer, int Size, int BytesWritten = 0);
    }

    class Program
    {
        static void Main(string[] args)
        {
            int sig;
            PatternScan scan = new PatternScan();

            sig = scan.FindPattern(new byte[] { 0, 0, 0x16, 0x44, 0, 0, 0x7a, 0x44, 0, 160, 12, 0x45, 0xcd, 0xcc, 0x4c, 0x3e }, "xxxxxxxxxxxxxxxx").ToInt32();

            if (sig != 0)
            {
                sig -= 0x10;
            }

            Mem.WriteFloat(sig, /* -> */ 1000); //<- inc for higher zoom
        }
    }

    public class PatternScan
    {
        private byte[] buffer;
        private int EXEBaseAddress;

        public IntPtr FindPattern(byte[] Pattern, string Mask)
        {
            if (Mask.Length != Pattern.Length)
            {
                return IntPtr.Zero;
            }
            try
            {
                this.MemoryRegion = new List<MEMORY_BASIC_INFORMATION>();
                this.MemInfo(Mem.FindProcess());
                for (int i = 0; i < this.MemoryRegion.Count; i++)
                {
                    if (((int)this.MemoryRegion[i].BaseAddress) > Mem.GetBaseAddress())
                    {
                        this.EXEBaseAddress = i;
                        break;
                    }
                }
                for (int j = this.EXEBaseAddress; j < this.MemoryRegion.Count; j++)
                {
                    this.buffer = new byte[this.MemoryRegion[j].RegionSize];
                    ReadProcessMemory(Mem.FindProcess(), this.MemoryRegion[j].BaseAddress, this.buffer, this.MemoryRegion[j].RegionSize, 0);
                    for (int k = 0; k < (this.buffer.Length - Mask.Length); k++)
                    {
                        if (this.MaskCheck(k, Pattern, Mask))
                        {
                            return new IntPtr(((int)this.MemoryRegion[j].BaseAddress) + (k + Mask.Length));
                        }
                    }
                }
                return IntPtr.Zero;
            }
            catch (Exception)
            {
                return IntPtr.Zero;
            }
        }

        private bool MaskCheck(int SigSize, byte[] Pattern, string Mask)
        {
            for (int i = 0; i < Pattern.Length; i++)
            {
                if (((Mask[i] != '?') && (Mask[i] == 'x')) && (Pattern[i] != this.buffer[SigSize + i]))
                {
                    return false;
                }
            }
            return true;
        }

        protected void MemInfo(IntPtr pHandle)
        {
            IntPtr lpAddress = new IntPtr();
            while (true)
            {
                MEMORY_BASIC_INFORMATION lpBuffer = new MEMORY_BASIC_INFORMATION();
                if (VirtualQueryEx(pHandle, lpAddress, out lpBuffer, Marshal.SizeOf(lpBuffer)) == 0)
                {
                    return;
                }
                if (((lpBuffer.State & 0x1000) != 0) && ((lpBuffer.Protect & 0x100) == 0))
                {
                    this.MemoryRegion.Add(lpBuffer);
                }
                lpAddress = new IntPtr(lpBuffer.BaseAddress.ToInt32() + ((int)lpBuffer.RegionSize));
            }
        }

        [DllImport("kernel32.dll")]
        protected static extern bool ReadProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, byte[] buffer, uint size, int lpNumberOfBytesRead);
        [DllImport("kernel32.dll")]
        protected static extern int VirtualQueryEx(IntPtr hProcess, IntPtr lpAddress, out MEMORY_BASIC_INFORMATION lpBuffer, int dwLength);

        protected List<MEMORY_BASIC_INFORMATION> MemoryRegion { get; set; }

        [StructLayout(LayoutKind.Sequential)]
        protected struct MEMORY_BASIC_INFORMATION
        {
            public IntPtr BaseAddress;
            public IntPtr AllocationBase;
            public uint AllocationProtect;
            public uint RegionSize;
            public uint State;
            public uint Protect;
            public uint Type;
        }
    }
}

[Janitor]

@nizdi There you go.

[NotRealy]

Looks nice, but you don't need any bypass to use this ?
You can't be banned using this ?

[Weskk]

It's a cool idea and I'm sure it's a lot of fun, but make sure you don't use it on your main account, my friend who shall remain unnamed was permanently banned because of a similar zoomhack

[Janitor]

It's a cool idea and I'm sure it's a lot of fun, but make sure you don't use it on your main account, my friend who shall remain unnamed was permanently banned because of a similar zoomhack

Well, this is a source code and not an actual release of the hack. But yea always be careful when using such programs.

[amateraZZZ]

Riot is now more careful about these programs. Use the program knowing this.

[nizdi]

Holy fuck, this is golden!!

Thanks guys. Ninja, officer and DarkznNet!!

I dont get it why this is "crappy source code" but i inted to use and might to find a way to make it undetectable, if thats possible.

Thanks for all guys.

[Janitor]

Holy fuck, this is golden!!

Thanks guys. Ninja, officer and DarkznNet!!

I dont get it why this is "crappy source code" but i inted to use and might to find a way to make it undetectable, if thats possible.

Thanks for all guys.

Didn't do anything except for mentioning you, since I remembered that you were struggling with this part; if you have any success using it, I'd like to see you releasing your undetectable zoom hack on MPGH!

[Not Officer]

Keep in mind that calling Process.Handle might be detected. Use openprocess using pinvoke instead.

[DarknzNet]

Keep in mind that calling Process.Handle might be detected. Use openprocess using pinvoke instead.

Have you made some testing or is this just suspicion?

[Chelseafc777]

I got a ban, checked this hack on a new account.


залить скриншот

[W4L33D]

This code is great. It works! I'm just running it in debugging mode in Visual Studio. Using a new account in LoL to test it.

It's straightforward to wrap it behind a graphical interface and make it user friendly. However, it's hard to stop it from being detected.

The zoom hack (1.2) recently detected didn't generate random window titles to try to hide itself. The one before (2.3) did and it lasted a very long time until it got caught. It sounds primitive but maybe it was that simple. I hope the devs show up

Does riot simply look at your process list and take a screen shot to confirm? Or is it smarter than that?

[Junkersdorf]

Hey guys,
I have never worked with visual studio and therefore have no idea what I have to do in order for the zoom to work.
Is anyone friendly enough to make a tutorial for dummy boys like me?

[Janitor]

Hey guys,
I have never worked with visual studio and therefore have no idea what I have to do in order for the zoom to work.
Is anyone friendly enough to make a tutorial for dummy boys like me?

Then this is probably not for you. You can use the final released projects ".exe" software.

[nizdi]

This code is great. It works! I'm just running it in debugging mode in Visual Studio. Using a new account in LoL to test it.

It's straightforward to wrap it behind a graphical interface and make it user friendly. However, it's hard to stop it from being detected.

The zoom hack (1.2) recently detected didn't generate random window titles to try to hide itself. The one before (2.3) did and it lasted a very long time until it got caught. It sounds primitive but maybe it was that simple. I hope the devs show up

Does riot simply look at your process list and take a screen shot to confirm? Or is it smarter than that?

If I can make it work, you also can. Open visual studio, new C# Console Application (YOU ARE NOT MAKING A DLL), and build it.