H-Coding Presents Our First Hack V1.0

Opt("TrayMenuMode", 1)
TraySetIcon("I.ico")
$STATUS = TrayCreateItem("Status")
TrayCreateItem("")
$EXIT = TrayCreateItem("Exit")
ToolTip("Start S4League.", 5, 5)
Global $STATUST = "Waiting for S4Client.exe"
While 1
	If ProcessExists("S4Client.exe") Then
		BYPASS()
	EndIf
	$MSG = TrayGetMsg()
	Switch $MSG
		Case $EXIT
			Exit
		Case $STATUS
			ToolTip("Created by H-Coding", $STATUST, 5)
	EndSwitch
WEnd
Func BYPASS()
	$STATUST = "Found"
	ToolTip("Created by H-Coding", 5, 5)
	Global $MEMORYHANDLE, $ENUMPROCESSES
	$BYTELEN = 19
	$NOP = "0x" & _StringRepeat("90", $BYTELEN)
	$PROCESSID = ProcessWait("S4Client.exe")
	$MEMORYHANDLE = _MEMORYOPEN($PROCESSID)
	Do
		Sleep(10)
	Until _CHECK() = 1
	_MEMORYWRITE($ENUMPROCESSES, $MEMORYHANDLE, $NOP, "byte[" & $BYTELEN & "]")
	_MEMORYCLOSE($MEMORYHANDLE)
	$STATUST = "OK"
	ToolTip("Now you can use our hacks.", 5, 5)
	Sleep(5000)
	Exit
EndFunc
Func _CHECK()
	$ENUMPROCESSES = _GETPROCESSADDRESS(_WinAPI_GetModuleHandle("psapi.dll"), "EnumProcesses")
	If _MEMORYREAD($ENUMPROCESSES, $MEMORYHANDLE, "byte[2]") = "0x8BFF" Then
		Return 1
	Else
		Return 0
	EndIf
EndFunc
Func _GETPROCESSADDRESS($HMODULE, $FUNCTION)
	$CALL = DllCall("Kernel32.dll", "ptr", "GetProcAddress", "ptr", $HMODULE, "str", $FUNCTION)
	Return $CALL[0]
EndFunc

#include <NomadMemory.au3>
#include <WinAPI.au3>
#include <String.au3>

Global $Memoryhandle, $EnumProcesses
$ByteLen = 19
$Nop = "0x" & _StringRepeat("90", $ByteLen)

$ProcessID = ProcessWait("S4Client.exe")
$Memoryhandle = _MemoryOpen($ProcessID)

Do
	Sleep(10)
Until _Check() = 1

_MemoryWrite($EnumProcesses, $Memoryhandle, $Nop, "byte[" & $ByteLen & "]")

_MemoryClose($Memoryhandle)

Func _Check()
	$EnumProcesses = _GetProcessAddress(_WinAPI_GetModuleHandle("psapi.dll"), "EnumProcesses")
	If _memoryread($EnumProcesses, $Memoryhandle, "byte[2]") = "0x8BFF" Then
		Return 1
	Else
		Return 0
	EndIf
EndFunc

Func _GetProcessAddress($hModule, $Function)
	$call = DllCall("Kernel32.dll", "ptr", "GetProcAddress", "ptr", $hmodule, "str", $Function)
	Return $call[0]
EndFunc