Any help with S2S?

[somewhatpro]

I have sucessfuly hooked the ' SendToServer ' function, but it seems that it is too complicated...
i wanna try to block certain packets but the game won't let me , it just crashes out of nowhere. , any suggestions that might help, guys ?

btw, i can log the packets , and flags without any problem i just can't change it, first i thought that if i change it to another packet it might send out my Packet so the server will just cancel it. but it is not like that :/.

[zl950402]

im just wondering how did you hook S2S

[OpKilts]

typedef unsigned int (WINAPI *tS2S)(ILTMessage_Read *pMsg, UINT Flags);
tS2S oS2S;

unsigned int hkS2S(ILTMessage_Read *pMsg, UINT Flags)
{

return oS2S;
}

oS2S = (tS2S)DetourCreate((BYTE*)ADDR_S2S, (BYTE*)hkS2S, 7);

[bandi12]

Well i never **** with S2S but from what i know if you block a packet from sending the server will notice it bk every packet has an ID number if you block packet 4 then the server will get packet 1-2-3-5 =>> missing 4 =>> dc / crash / etc .....

[giniyat101]

I have sucessfuly hooked the ' SendToServer ' function, but it seems that it is too complicated...
i wanna try to block certain packets but the game won't let me , it just crashes out of nowhere. , any suggestions that might help, guys ?

btw, i can log the packets , and flags without any problem i just can't change it, first i thought that if i change it to another packet it might send out my Packet so the server will just cancel it. but it is not like that :/.

the game includes counts the packets sent to the server and includes that count in the packet checksum,
so when you block a packet, it is still counted and the next packet sent will have wrong check sum
you should try to find the variable holding that count and decrease it by 1 if you want to block a packet

try searching this pattern in cshell.dll :

A0 ?? ?? ?? ?? 88 44 24 ?? 04 01 A2

alternatively, send one animation (or other harmless) packet to the server for every packet you block (with correct checksum of course ).

[I2espect]

@giniyat101 any pattern for the sendtoserver ??
or if u can upload dumped crossfire.exe cuz i can't dump/debug it ..... !!

[somewhatpro]

I asked about this like 2 months, i already know everything i wanted to know...

please @[MPGH]Symmetrical / @[MPGH]Hannibal / @[MPGH][MPGH]iSmexy Close this thread.

[giniyat101]

@giniyat101 any pattern for the sendtoserver ??
or if u can upload dumped crossfire.exe cuz i can't dump/debug it ..... !!

try writing a dll which shows a message box, this will pause crossfire.exe giving you a chance to attach to it

edit: check this out
https://www.mpgh.net/forum/showthread.php?t=848749

I asked about this like 2 months, i already know everything i wanted to know...

please @[MPGH]Symmetrical / @[MPGH]Hannibal / @[MPGH][MPGH]iSmexy Close this thread.

i should have guessed that myself, but i didnt check your videos back then

[somewhatpro]

i should have guessed that myself, but i didnt check your videos back then

it's okay.. i'm pretty sure you understand what's going on.