This project was initially undertaken as a way to learn how to reverse engineer software. I thought that learning on something that I cared about would make it a more interesting and engaging process, so I decided to reverse engineer the game "League of Legends."

Originally I just wanted to poke around in the League of Legends program and find out how things worked, however having a goal to show my progress and make for more focused dissection of the league client was important. Thus I came up with the idea to make a simple "flash timer" application because timing enemy flash cooldowns would often be neglected in my games. This was kind of inspired by the Curse Voice jungle and ultimate timers, and my desire to see how this worked. Eventually this idea evolved into a fully fledged ability timer.

Note that I never intended to use this program to gain an in-game advantage but was creating this purely out of self-interest in technology and reverse engineering.

The project contains a DLL and a DLL injector. The DLL is injected into "League of Legends.exe" and provides a way for the player to view the current cooldowns of all abilities (summoner and regular) for every player in the game (both teams). Note that the player must have seen the enemy cast the spell (i.e. the enemy cannot be in fog of war if you want to know that they cast a spell).

Once the DLL is injected, it hooks into some DirectX calls in order to draw text to the screen. Showing the scoreboard in game will also show each champions current cooldowns (although the interface isn't very good looking).

Build the solution (three projects). Use the command line to run the OffsetFinder.exe tool with one command line argument pointing to the latest "League of Legends.exe" file (the one launched by the game when you enter a game). After doing this, run LoLHook.exe after League of Legends has entered the loading screen (or at any time from here on out during the game). Once in game you should then be able to hold tab (or whatever other keybind is used for your scoreboard) and see the ability timers for every champion in the game. To remove this functionality you must restart the program, there are no inbuilt unhook / exit methods.

• Learn to reverse engineer
  • Learn x86 ASM
  • Learn common ASM structures
  • Learn how to use debuggers and disassembly tools
  • Extract useful information from a target program
• Learn about hooking and injection
  • How to hook a function (related to x86 ASM)
  • How to use DLL injection to run code in a remote process
• Learn / refresh Windows API knowledge
• Refresh / expand C++ knowledge

When creating this program, IDA was used for disassembly. An IDA database was created and commented as the program was made, but as it is ~1GB it is not hosted here. A document full of the findings made while creating the program has also not been listed here, although if anybody is interested in that information then feel free to email me.

The DirectX9 files are also required ([download the DirectX SDK] (http://www.microsoft.com/en-au/download/details.aspx?id=6812)) and must be linked to the project file.

I have tried to make this somewhat patch proof, but it will likely still need updating at least once for every major update to League of Legends. Thus, if the program doesn't work it likely hasn't been updated since the last major patch. The program is structured to allow easy and convenient changing of offsets within the code but it still takes some time to locate and update the offsets.

Use of this program is done entirely at the user's discretion. I take no responsibility for anyone using this program who gets punished in any way by Riot Games, or for any other problems resulting from the use of this software.