I THINK I FOUND IT !!!!!!!!!!! for the guys who cant load cshell

[kmanev073]

Hi,
this console app source made by me may help you:

#include "windows.h"
#include <iostream>
using namespace std;

int main()
{
	DWORD err;
	HINSTANCE hDLL = LoadLibraryA("CShell.dll");
	if(hDLL != NULL) 
	{
		cout<<"Library has been loaded: "<<hDLL<<endl;
    }
	else 	
	{
        err = GetLastError();
		cout<<"Can't load dll"<<endl;
	}
	system("pause");
	return 0;
}

Just compile and put in cf folder then start
i think that with the address shown you dont need to load the cshell in the hack test it and tell me I cant bcs my cf crashes
PRESS THAKS IF I HELPED

[[mi5]

========== Build: 1 succeeded, 0 failed, 0 up-to-date, 0 skipped ==========
D

[HyperShooter]

Hi,
this console app source made by me may help you:

#include "windows.h"
#include <iostream>
using namespace std;

int main()
{
	DWORD err;
	HINSTANCE hDLL = LoadLibraryA("CShell.dll");
	if(hDLL != NULL) 
	{
		cout<<"Library has been loaded: "<<hDLL<<endl;
    }
	else 	
	{
        err = GetLastError();
		cout<<"Can't load dll"<<endl;
	}
	system("pause");
	return 0;
}

Just compile and put in cf folder then start
i think that with the address shown you dont need to load the cshell in the hack test it and tell me I cant bcs my cf crashes
PRESS THAKS IF I HELPED

https://www.mpgh.net/forum/242-crossf...ml#post2493947

hmm okay ...

[Ryuesi]

Great idea and easy to do .

[kmanev073]

https://www.mpgh.net/forum/242-crossf...ml#post2493947

hmm okay ...

lol they look similar i remember when i firstly done that... but now i we do something different

---------- Post added at 06:43 PM ---------- Previous post was at 06:42 PM ----------

@Jutie
replace FWORD cshell = (DWORD)(GetModulehandleA(''CShell.dll'')) in your hack or what ever
with #define cshell = the addres that this app shown and pls tell is it working

[Ryuesi]

lol they look similar i remember when i firstly done that... but now i we do something different

---------- Post added at 06:43 PM ---------- Previous post was at 06:42 PM ----------

@Jutie
replace FWORD cshell = (DWORD)(GetModulehandleA(''CShell.dll'')) in your hack or what ever
with #define cshell = the addres that this app shown and pls tell is it working

The same

[derh.acker]

Good work
To make it UNICODE compatible :

TCHAR DLLDir[MAX_PATH];
ZeroMemory(DLLDir, MAX_PATH);
#ifdef UNICODE
wscanf_s(L"%s", DLLDir);
wprintf_s(L"Loading %s...\n", DLLDir);
#else
scanf_s("%s", DLLDir);
printf_s("Loading %s...\n", DLLDir);
#endif
hDLL = LoadLibrary(DLLDir);

Then you can set the default charset to UNICODE (Wide char (wchar_t)) or to Multibyte (ASCII (char)) in the project settings.
Normally UNICODE is turned on.

___

replace FWORD cshell = (DWORD)(GetModulehandleA(''CShell.dll'')) in your hack or what ever
with #define cshell = the addres that this app shown and pls tell is it working

Unlike in Combat Arms, the Base address of CShell is not constant in CrossFire (it changes every restart).
Maybe you can use the Handle of the loading of CShell.dll in crossfire.exe or you make a LoadLibrary hook

[giniyat101]

no, crossfire.exe uses a local variable to load cshell.dll and check SetMasterDatabase export.. bad luck
just try using ZwQueryInformationProcess

[kmanev073]

no, crossfire.exe uses a local variable to load cshell.dll and check SetMasterDatabase export.. bad luck
just try using ZwQueryInformationProcess

so... the first try not work but if you get it from ingame it will work ?

[giniyat101]

so... the first try not work but if you get it from ingame it will work ?

no i mean crossfire doesnt use something like CShell = LoadLibraryA("CShell.dll"); instead it just uses LoadLibraryA("CShell.dll"); so its not stored in viriable :P

[derh.acker]

Then hooking is another method.
I didn't test it, so I can't tell you if it's detected.

Remarks

The ZwQueryInformationProcess function and the structures that it returns are internal to the operating system and subject to change from one release of Windows to another. To maintain the compatibility of your application, it is better to use public functions mentioned in the description of the ProcessInformationClass parameter instead.

So if you want to make your hack compatible with future windows versions, I would prefer an alternate function.


I don't know what is the problem of GetModuleHandle, I inject it before Themida decrypts crossfire.

[Vincent Dominguez]

It would have been easier if u put a download IDK what to do with that scrip you put in your post.just kidding I know what to do it's very helpful thank you very much.

[giniyat101]

Then hooking is another method.
I didn't test it, so I can't tell you if it's detected.

So if you want to make your hack compatible with future windows versions, I would prefer an alternate function.


I don't know what is the problem of GetModuleHandle, I inject it before Themida decrypts crossfire.

lol.. even xtrap isnt compatible with windows 8 xD

[bandi12]

lol.. even xtrap isnt compatible with windows 8 xD

win 7 and win 8 in first place are noob "idiot" windows i ussed win 7 for 2 day's and after it i uninstal it bk is a big crap

and GetModuleHandle it's working fine you just need to know how to use it

[giniyat101]

win 7 and win 8 in first place are noob "idiot" windows i ussed win 7 for 2 day's and after it i uninstal it bk is a big crap

and GetModuleHandle it's working fine you just need to know how to use it

who said i dont know how to use it?