Durpin's LoL Skin Changer (with SOURCE)

[*durpin]

Hey everyone,

I made a League of Legends skin changer a while back and I want to release it to the community. I decided to include a copy of the source code for any inquiring minds/aspiring programmers. This was coded in C++. It requires AsmJit () in order to compile.

This works as of October 8, 2012. I don't plan on updating it in the future, but... you all have the source so it shouldn't be too hard to find the new offsets when the new patch comes out.

To use, simply open up a command line window and follow this syntax:
"PATH OF LSC.EXE (AKA WHERE YOU DOWNLOADED AND SAVED THE FILE)" "YOUR SUMMONER NAME IN QUOTES" SKINID

Example:
"C:\Users\root\Desktop\LSC.exe" "Dyrus" 2

The program will launch and wait for a copy of "League of Legends.exe" to be running. As soon as champion select is over and the game loads, LSC will patch in-game memory. This will allow you to play your selected champion with that skin ID. To find the desired skin ID you want to use, please refer to:

For example, if I wanted to play with the limited edition All-Star Akali skin, I would retrieve the skin ID from the following page:


One can see that this is skin "4" out of 7. You need to subtract 1 from this skin ID (since indices in game start from 0). Therefore, the skin ID is "3". I would then run LSC with the following command:

"C:\Users\root\Desktop\LSC.exe" "My Summoner Name" 3

Compiled release: (Password: durpin)
Source code:

Enjoy!

EDIT: New offsets for patch as of 10/14/2012:

#define PATCH_OFFSET 0x008EEC00
#define PATCH_RETURN_TO 0x008EEC07

[mamaorha]

wonder 3 thing:
1.riot ban for this? (modifying memory) - i know its only client side but still...
2. how did u find the pointers? (did u search champ with skin - byte 1 than wihout 0 etc..?)

how exactly u saw the skin is 4? by the order?

[*durpin]

Originally Posted by mamaorha

wonder 3 thing:
1.riot ban for this? (modifying memory) - i know its only client side but still...
2. how did u find the pointers? (did u search champ with skin - byte 1 than wihout 0 etc..?)

how exactly u saw the skin is 4? by the order?

1. As of right now, Riot doesn't look for consistency in this memory region. It's undetected and probably will remain so (it's nothing gamebreaking, why would they ban for it?).
2. Actually, I found this by reverse engineering the incoming data packets that the server sends to the client when the game loads. I traced it down to the "CreateHero" subroutine.
3. The skin is 4 because of the order. It lists it below the picture, e.g. 4 out of 7. Now, you need to subtract 1 from this ID since game indices start from 0. (so, in reality, it's 3!)

[mamaorha]

nice, thx for the info.
i wonder if i will be able to do it with just editing the memory or is it need asm patching?

[CorruptedTNC]

Excellent, how generous of you to include the source as well. Might shove this on a (likely poorly made) GUI for simplicity when I'm bored.

Just out of curiosity, say I'm playing Akali and there's an Akali on the enemy team, is this going to apply a skin to both or just mine?

[*durpin]

Originally Posted by mamaorha

nice, thx for the info.
i wonder if i will be able to do it with just editing the memory or is it need asm patching?

What do you mean by simple memory patching? You can't really avoid using ASM in order to get this to work...

Originally Posted by CorruptedTNC

Excellent, how generous of you to include the source as well. Might shove this on a (likely poorly made) GUI for simplicity when I'm bored.

Just out of curiosity, say I'm playing Akali and there's an Akali on the enemy team, is this going to apply a skin to both or just mine?

Nope. I call strcmp in my ASM to make sure that the skin is only applied to a specific "SUMMONER NAME" (this is controlled via command line argument).

[mamaorha]

i ment, finding the pointer & offsset and change it by memory editing.

instead of injecting a code of my own with asm

[tehspudgy]

You should read the local summoner name from the client. 0xAF02564

[*durpin]

Originally Posted by tehspudgy

You should read the local summoner name from the client. 0xAF02564

Yeah, I probably should get the summoner name from the LoLClient.

My implementation here is a little messy because I never intended it to be released to the public.

[IkRYPToNI]

Was bringt das jetzt an jemand der Deutsch ist .

[xCONSTANTINEx]

niceeeeeeee
thy 4 Source Code

[mamaorha]

is it possible to edit this source to work with c#?

[jigger_ex]

can other people see your skin or its just client side?

[*durpin]

Originally Posted by mamaorha

is it possible to edit this source to work with c#?

Yeah, why wouldn't it?

Good guy Shynd on GD has a way you can use just in time ASM with C# using his FASM managed library:

Originally Posted by jigger_ex

can other people see your skin or its just client side?

Unfortunately, it is only client side.

[mamaorha]

new patch, so the offset changed.
not sure how u found it yet