[Open Source] HP Changer

10/28/2014 23:07 -SoulCr4ck-#1
Yo whatz up,

just a small release / open source / tutorial because i have found time in my break [ @someone ]

so we can start now

- Newbie's are wrong here <- Important

- It's really ugly coded and i give a fuck on people who have problems with it

Code:
Dim $byte[5];declare array $byte

If Not $cmdline[0] = 2 Then ; if not $cmdline[0] ( size of called Parameter ) = 2
	MsgBox(0, "Error", "Wrong Parameter") ; calling MessageBox Function ( User32.dll )
	Exit ; Close the Programm
EndIf ; end of If
So if you don't understand this ^ STOP READ

Code:
SetPrivilege(0x0020, 0x0002); the name say all ( set privilege )
$process = _MemoryOpen(ProcessExists("S4Client.exe")) ; OpenProcessMemory from S4Client.exe
$page = _AllocMem(ProcessExists("S4Client.exe"), 2048) ; create a Writeable Page in S4Client.exe and return the address from the start of the page.
$MyHP = _AllocMem(ProcessExists("S4Client.exe"), 2048); create a Writeable Page in S4Client.exe and return the address from the start of the page.
The Next Code is only for Reverse the Bytes ^-^

Code:
$hex = Hex($MyHP, 8)
$byte[0] = 4
$step = 1
For $i = 1 To 8
	$byte[$step] = StringRight($hex, 2)
	$i += 1
	$hex = StringLeft($hex, 8 - $i)
	$step += 1
Next
Now come an Important Part of the source

before u write it ..it looks like this

fld dword ptr [ebp-04]
mov esp,ebp

<- this are 5 bytes << D9 45 FC 8B E5

Code:
_MemoryWrite(0x00535F64, $process, "0xE9" & Byte_Reverse(Calc($page + 1, 0x00535F65)), "byte[5]") ; Write an Jmp from the orginal to the new page and calc the bytes for the page

after this code it looks like this

jmp ???????? <- ???????? because it change at every start ( the reason why we calc )

E9 ?? ?? ?? ?? <- the Bytes now

Code:
_MemoryWrite($page, $process, "0xA1" & $byte[1] & $byte[2] & $byte[3] & $byte[4], "byte[5]") ; Write in our own Page "mov eax,[$MyHP]"
"mov eax,[$MyHP]" Copy in the register eax the value of our own page ( the second ( $MyHP ))

Code:
_MemoryWrite($page + 0x5, $process, "0x8945FCD945FC8BE5E9" & Byte_Reverse(Calc($page + 0xD, 0x00535F69, 1)), "byte[13]")
89 45 FC - mov [ebp-04],eax
now we copy eax into [ebp-04] because we load it later

D9 45 FC - fld dword ptr [ebp-04]
8B E5 - mov esp,ebp
^the orginal code that we overwrite with our own jmp

E9 ???????? - jmp Back
^here we jmp back

Code:
_MemoryWrite($MyHP, $process, $cmdline[2], "float")
We write the second parameter into our own page ( $MyHP )

This Part you must understand now without help

Code:
If $cmdline[1] = "1" Then
	_MemoryWrite(0x00535F04, $process, "0xE9" & Byte_Reverse(Calc($page + 1, 0x00535F65)), "byte[5]")
Else
	_MemoryWrite(0x00535F04, $process, "0xD945FC8BE5", "Byte[5]")
EndIf
Functions


NomadMemory.au3

To Running the *.exe File

Code:
#RequireAdmin
ShellExecute(@ScriptDir & "\[S4L] HP Changer.exe","0 200");200 HP
or

Code:
#RequireAdmin
ShellExecute(@ScriptDir & "\[S4L] HP Changer.exe","1 1337");1337 HP and Godmode
10/28/2014 23:07 TheMokko#2
Thank You :p

€dit:
Yo guys, cauze i Think not everyone of you get this source, i wrote a little Tool to use this HP Changer very easy.

[Screen]

[Only registered and activated users can see links. Click Here To Register...]

VT: [Only registered and activated users can see links. Click Here To Register...]
ka why x)

Written in Autoit, source also in Attachment.
10/28/2014 23:12 chamile#3
Hard... But Good *-*
10/28/2014 23:15 -SoulCr4ck-#4
Quote:
Originally Posted by chamile View Post
Hard... But Good *-*
Yep it's a Code Cave. :3
10/28/2014 23:27 Nociif#5
Thanks for sharing
10/28/2014 23:31 bidjus#6
Thanks, you made my day.
10/29/2014 00:18 mvenus2#7
üff it took long time to understand this ^.^ but thanks men :P
10/29/2014 00:42 Requi#8
I'm not interested in game hacking nor s4 league, but you should work on your code even if its "ugly written" and not for further purposes.

I'm not familiar with s4 league, but shouldn't be hp server side?
10/29/2014 00:57 Ammy'#9
Quote:
Originally Posted by Requi View Post
I'm not familiar with s4 league, but shouldn't be hp server side?
Sadly, like in most shooters you can change dmg, life etc clientsided ^^
10/29/2014 07:30 -SoulCr4ck-#10
Quote:
Originally Posted by Requi View Post
I'm not interested in game hacking nor s4 league, but you should work on your code even if its "ugly written" and not for further purposes.

I'm not familiar with s4 league, but shouldn't be hp server side?
1. No don't need.
2.Answer over me ^
10/29/2014 17:14 TheMokko#11
Yo guys, cauze i Think not everyone of you get this source, i wrote a little Tool to use this HP Changer very easy.

[Screen]

[Only registered and activated users can see links. Click Here To Register...]

VT: [Only registered and activated users can see links. Click Here To Register...]
ka why x)

Written in Autoit, source also in Attachment.
10/29/2014 19:42 -Bloody.Teaser*#12
Thanks Deviner , Thanks Soulcrack :)
10/29/2014 19:55 art111#13
need bypass ?
10/29/2014 20:08 TheMokko#14
Quote:
Originally Posted by art111 View Post
need bypass ?
yes
10/29/2014 20:14 -SoulCr4ck-#15
Quote:
Originally Posted by -Bloody.Teaser* View Post
Thanks Deviner , Thanks Soulcrack :)
Don't write it ..press the Button <