-_- S2s Hooks

[kssiobr]

lel it didn't change, packet size is same, at least for NA.

Lol i think i shall ruin the fun

Sig broke a couple patches ago, so I don't have the current address for hooking or return address, although the length is 22 (0x16)

__declspec(naked) void SendToServerMidFunction()
{
    static ILTMessage_Read *pMsg;

    __asm
    {
        MOV ECX,DWORD PTR DS:[0x379468B4] //LTClient (Cshell)
        MOV EDX,DWORD PTR DS:[ECX]
        MOV pMsg, EAX
        PUSH 1
        PUSH EAX
        MOV EAX,DWORD PTR DS:[EDX+150]
        MOV BYTE PTR SS:[ESP+18],1 <----- Message Guaranteed/Integer returned

        PUSHAD
    }     

    SendToServerConfiguration(pMsg); //Message_Guaranteed is already moved to stack as shown up above

    __asm
    {
        POPAD
        JMP dwReturnSendToServer
    }
}

Thanks to Ch40zz-C0d3r for his epic help and Timboy for helping me update it.

This is the same SendToServerConfiguration oSendToServer and dwReturnSendToServer is set ... where?

[arun823]

This is the same SendToServerConfiguration oSendToServer and dwReturnSendToServer is set ... where?

As I said before, I don't have the address anymore. I stopped coding for CA