[MaxOff]

Since the gms dont want any help from me anymore
i will just publish the sollution here:

The Message we are talking about has the Id 0x2001.
It build like that:

struct ChatMessage
{
char count;
char message[];
}

The hacker did most likley send a message where the count value is lower then the actual size of the message. I dont knew where the bug exactly is, but i know that the client will crash if the count is to low.


And no that not the message that will actually crash the client, its the message the hacker sends.

Everyone who wants can take it to the gms, he may give me the credit but there is no need :-)

Edit: Just to make it clear: i did not found the hack in the first place, nor do i create such hacks. I also NEVER sell my hacks.

Edit2: i just did 1 test. It was with a string filled with 1024 a's, and a length of 0. Of course the server response crashed my client.