Help-_- S2s Hooks

Posts 16–17 of 17 · Page 2 of 2
Quote Originally Posted by arun823 View Post
lel it didn't change, packet size is same, at least for NA.

Lol i think i shall ruin the fun

Sig broke a couple patches ago, so I don't have the current address for hooking or return address, although the length is 22 (0x16)
Code:
__declspec(naked) void SendToServerMidFunction()
{
    static ILTMessage_Read *pMsg;

    __asm
    {
        MOV ECX,DWORD PTR DS:[0x379468B4] //LTClient (Cshell)
        MOV EDX,DWORD PTR DS:[ECX]
        MOV pMsg, EAX
        PUSH 1
        PUSH EAX
        MOV EAX,DWORD PTR DS:[EDX+150]
        MOV BYTE PTR SS:[ESP+18],1 <----- Message Guaranteed/Integer returned

        PUSHAD
    }     

    SendToServerConfiguration(pMsg); //Message_Guaranteed is already moved to stack as shown up above

    __asm
    {
        POPAD
        JMP dwReturnSendToServer
    }
}
Thanks to Ch40zz-C0d3r for his epic help and Timboy for helping me update it.
This is the same SendToServerConfiguration oSendToServer and dwReturnSendToServer is set ... where?
Quote Originally Posted by kssiobr View Post

This is the same SendToServerConfiguration oSendToServer and dwReturnSendToServer is set ... where?
As I said before, I don't have the address anymore. I stopped coding for CA
Posts 16–17 of 17 · Page 2 of 2
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Talk with us