Question How to Dump Crossfire x64?

gicogico223 · 2023-12-19T17:39:03.000Z

Question How to Dump Crossfire x64? TYIA

Originally Posted by MemoryThePast

just made your own loadlibrary that was built on x64 then dump it with scylla or any kind dumpers you know as long its x64 built in or just run the crossfire with the driver disabled so you can dump it.

how do you disable driver?

Originally Posted by manolo_xd

how do you disable driver?

just run the crossfire directly. How? just open process hacker and get the command how patchercf2.exe run the crossfire.exe and copy that command and paste it on new notepad then save it as whatever.bat file, then your done and good to go

- - - Updated - - -

Just build it on x64.

Code:

#include <Windows.h>
#include <iostream>
#include <tchar.h>

int main()
{
    auto IsFileExist = [](const char* szFileExist) -> bool {
        return (GetFileAttributes(szFileExist) != INVALID_FILE_ATTRIBUTES);
    };

    const char* szCurFileNames[] = {
      _T("CShell_x64.dll"),
      _T("Object_x64.dll")
    };

    int is_selected = 0;

    std::cout << _T("Select a DLL to load:") << std::endl;

    for (int i = 0; i < sizeof(szCurFileNames) / sizeof(szCurFileNames[0]); ++i) {
        std::cout << i + 1 << ". " << szCurFileNames[i] << std::endl;
    }

    std::cout << sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1 << _T(". Load a custom DLL") << std::endl;
    std::cout << _T("Select the the right number you want to load ^_^: ");
    std::cin >> is_selected;

    if (is_selected >= 1 && is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1)
    {
        if (is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]))
        {
            const char* szFileName = szCurFileNames[is_selected - 1];

            if (IsFileExist(szFileName))
            {
                auto hModule = LoadLibrary(szFileName);
                if (hModule != NULL) {
                    std::cout << _T("Module ") << szFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the module ") << szFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
        else {
            std::string szCustomFileName;
            std::cout << _T("Enter the name of the custom DLL: ");
            std::cin >> szCustomFileName;

            if (IsFileExist(szCustomFileName.c_str()))
            {
                auto hModule = LoadLibrary(szCustomFileName.c_str());
                if (hModule != NULL) {
                    std::cout << _T("Custom DLL ") << szCustomFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the custom DLL ") << szCustomFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szCustomFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
    }
    else {
        std::cout << _T("Failed! Please select the following the right number between 1 - 3.") << std::endl;
    }

    system("pause");

    return 0;
}

Originally Posted by MemoryThePast

just run the crossfire directly. How? just open process hacker and get the command how patchercf2.exe run the crossfire.exe and copy that command and paste it on new notepad then save it as whatever.bat file, then your done and good to go

- - - Updated - - -

Just build it on x64.

Code:

#include <Windows.h>
#include <iostream>
#include <tchar.h>

int main()
{
    auto IsFileExist = [](const char* szFileExist) -> bool {
        return (GetFileAttributes(szFileExist) != INVALID_FILE_ATTRIBUTES);
    };

    const char* szCurFileNames[] = {
      _T("CShell_x64.dll"),
      _T("Object_x64.dll")
    };

    int is_selected = 0;

    std::cout << _T("Select a DLL to load:") << std::endl;

    for (int i = 0; i < sizeof(szCurFileNames) / sizeof(szCurFileNames[0]); ++i) {
        std::cout << i + 1 << ". " << szCurFileNames[i] << std::endl;
    }

    std::cout << sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1 << _T(". Load a custom DLL") << std::endl;
    std::cout << _T("Select the the right number you want to load ^_^: ");
    std::cin >> is_selected;

    if (is_selected >= 1 && is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1)
    {
        if (is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]))
        {
            const char* szFileName = szCurFileNames[is_selected - 1];

            if (IsFileExist(szFileName))
            {
                auto hModule = LoadLibrary(szFileName);
                if (hModule != NULL) {
                    std::cout << _T("Module ") << szFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the module ") << szFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
        else {
            std::string szCustomFileName;
            std::cout << _T("Enter the name of the custom DLL: ");
            std::cin >> szCustomFileName;

            if (IsFileExist(szCustomFileName.c_str()))
            {
                auto hModule = LoadLibrary(szCustomFileName.c_str());
                if (hModule != NULL) {
                    std::cout << _T("Custom DLL ") << szCustomFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the custom DLL ") << szCustomFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szCustomFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
    }
    else {
        std::cout << _T("Failed! Please select the following the right number between 1 - 3.") << std::endl;
    }

    system("pause");

    return 0;
}

can u send your compiled LoadModule pls?

Originally Posted by MemoryThePast

just made your own loadlibrary that was built on x64 then dump it with scylla or any kind dumpers you know as long its x64 built in or just run the crossfire with the driver disabled so you can dump it.

after i got into the cheat engine, still can't find the address like i used to before, it's been long time since i dump chsell and i forgot

- - - Updated - - -

Originally Posted by MemoryThePast

just run the crossfire directly. How? just open process hacker and get the command how patchercf2.exe run the crossfire.exe and copy that command and paste it on new notepad then save it as whatever.bat file, then your done and good to go

- - - Updated - - -

Just build it on x64.

Code:

#include <Windows.h>
#include <iostream>
#include <tchar.h>

int main()
{
    auto IsFileExist = [](const char* szFileExist) -> bool {
        return (GetFileAttributes(szFileExist) != INVALID_FILE_ATTRIBUTES);
    };

    const char* szCurFileNames[] = {
      _T("CShell_x64.dll"),
      _T("Object_x64.dll")
    };

    int is_selected = 0;

    std::cout << _T("Select a DLL to load:") << std::endl;

    for (int i = 0; i < sizeof(szCurFileNames) / sizeof(szCurFileNames[0]); ++i) {
        std::cout << i + 1 << ". " << szCurFileNames[i] << std::endl;
    }

    std::cout << sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1 << _T(". Load a custom DLL") << std::endl;
    std::cout << _T("Select the the right number you want to load ^_^: ");
    std::cin >> is_selected;

    if (is_selected >= 1 && is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]) + 1)
    {
        if (is_selected <= sizeof(szCurFileNames) / sizeof(szCurFileNames[0]))
        {
            const char* szFileName = szCurFileNames[is_selected - 1];

            if (IsFileExist(szFileName))
            {
                auto hModule = LoadLibrary(szFileName);
                if (hModule != NULL) {
                    std::cout << _T("Module ") << szFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the module ") << szFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
        else {
            std::string szCustomFileName;
            std::cout << _T("Enter the name of the custom DLL: ");
            std::cin >> szCustomFileName;

            if (IsFileExist(szCustomFileName.c_str()))
            {
                auto hModule = LoadLibrary(szCustomFileName.c_str());
                if (hModule != NULL) {
                    std::cout << _T("Custom DLL ") << szCustomFileName << _T(" has been loaded!") << std::endl;
                }
                else {
                    std::cout << _T("Failed to load the custom DLL ") << szCustomFileName << _T(", Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
                }
            }
            else {
                std::cout << _T("Failed! File ") << szCustomFileName << _T(" does not exist, Error: 0x") << std::hex << GetLastError() << std::dec << "." << std::endl;
            }
        }
    }
    else {
        std::cout << _T("Failed! Please select the following the right number between 1 - 3.") << std::endl;
    }

    system("pause");

    return 0;
}

another question, how do you get the command how patchercf2.exe run the crossfire.exe?

Originally Posted by manolo_xd

after i got into the cheat engine, still can't find the address like i used to before, it's been long time since i dump chsell and i forgot

- - - Updated - - -

another question, how do you get the command how patchercf2.exe run the crossfire.exe?

try that
make a bat file and put him in folder \CrossFire\x64
crossfire.exe 64bit@1 -PreferredIDCServer=1 86272303EF5DC10DDFEE1684536654FD2D66A86A26E7F8C2CD 11B97B6BA6999B

Originally Posted by duckden

try that
make a bat file and put him in folder \CrossFire\x64
crossfire.exe 64bit@1 -PreferredIDCServer=1 86272303EF5DC10DDFEE1684536654FD2D66A86A26E7F8C2CD 11B97B6BA6999B

how do you get that command? it worked btw thanks

- - - Updated - - -

Originally Posted by duckden

try that
make a bat file and put him in folder \CrossFire\x64
crossfire.exe 64bit@1 -PreferredIDCServer=1 86272303EF5DC10DDFEE1684536654FD2D66A86A26E7F8C2CD 11B97B6BA6999B

if i run crossfire with disabled driver, it disconnects from server

Originally Posted by manolo_xd

how do you get that command? it worked btw thanks

- - - Updated - - -

if i run crossfire with disabled driver, it disconnects from server

of course it disconnects you since the driver isn't running and it wasn't communicating on codehunter. like I said up here you can get the command using process hacker while crossfire is running and copy the command how the patcher_cf2.exe runs it.

Question How to Dump Crossfire x64?

Post a Reply

Similar Threads

Tags for this Thread