I'm done
Since I'm not coding here is everything I made and didn't lose or delete (out of date) and might have random bits of code used to test random things because I'm unorganized 
I lost the weapon hack. I think I sent a copy to ahmed if I can get it from him I'll post that too (it's the most efficient peice of code I have, my function makes it take line one line
)
Edit: Regarding the server hack I think this is the first version so I forgot to free the allocate memory....SO if you replicate it and forget to add the delete keyword somewhere in process detach.....well your pc will get slower every time and possible crash.
I hope someone makes use out of this
Server Hack (early version, buggy):
Telemarkers /infi double jump:
I lost the weapon hack. I think I sent a copy to ahmed if I can get it from him I'll post that too (it's the most efficient peice of code I have, my function makes it take line one line
)Edit: Regarding the server hack I think this is the first version so I forgot to free the allocate memory....SO if you replicate it and forget to add the delete keyword somewhere in process detach.....well your pc will get slower every time and possible crash.
I hope someone makes use out of this
Server Hack (early version, buggy):
Code:
// Project : G-Force V3
//includes
#include <Windows.h>
//--{creating threads}--
//DLLmain Input:
//--{Title & fps}--
//Draw credits Msg
void __cdecl DrawMsg(char* overtext )
{
DWORD dwCShell = (DWORD)GetModuleHandleA("CShell.dll");
if( dwCShell != NULL )
{
_asm
{
push overtext;
push 0;
push 0x70;
push 0x1c;
mov ESI,dwCShell;
add ESI, 0x076020
call ESI;
add ESP, 0x10;
}
}
}
void accInf(BYTE * pRookie, BYTE * pDelta)
{
BYTE newb[436] = { 0x5B, 0xE2, 0xC4, 0x00, 0x6F, 0x6D, 0x61, 0x6B, 0x6F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x6D, 0x6F, 0x6D, 0x6F, 0x31, 0x32, 0x33, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xAA, 0xA9, 0xBC, 0x44, 0x07, 0x00, 0x5F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x39, 0x33, 0x37, 0x61, 0x61, 0x33, 0x35, 0x30, 0x61, 0x65, 0x30, 0x34, 0x61, 0x62, 0x38, 0x37, 0x36, 0x33, 0x65, 0x61, 0x32, 0x33, 0x66, 0x31, 0x63, 0x63, 0x32, 0x66, 0x62, 0x39, 0x39, 0x63, 0x00, 0x31, 0x37, 0x36, 0x30, 0x31, 0x39, 0x30, 0x30, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xF0, 0x3F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x48, 0x00, 0x00, 0x7F, 0xD5, 0x11, 0x11, 0xFB, 0x03, 0xEE, 0xE4, 0xC0, 0x88, 0x88, 0x88, 0x62, 0x9A, 0x77, 0x7D, 0x59, 0x11, 0x7E, 0x13, 0x42, 0x31, 0x43, 0x44, 0x45, 0x33, 0x33, 0x37, 0x45, 0x41, 0x32, 0x31, 0x31, 0x38, 0x37, 0x38, 0x42, 0x44, 0x34, 0x33, 0x31, 0x36, 0x35, 0x39, 0x45, 0x31, 0x38, 0x37, 0x46, 0x46, 0x32, 0x31, 0x41, 0x39, 0x35, 0x35, 0x43, 0x42, 0x31, 0x41, 0x46, 0x33, 0x35, 0x41, 0x37, 0x30, 0x30, 0x46, 0x38, 0x31, 0x35, 0x41, 0x43, 0x36, 0x43, 0x42, 0x38, 0x39, 0x44, 0x43, 0x37, 0x38, 0x32, 0x42, 0x33, 0x34, 0x35, 0x38, 0x38, 0x35, 0x44, 0x32, 0x36, 0x33, 0x45, 0x37, 0x41, 0x44, 0x46, 0x33, 0x35, 0x46, 0x38, 0x36, 0x33, 0x30, 0x31, 0x34, 0x37, 0x41, 0x44, 0x30, 0x43, 0x32, 0x41, 0x34, 0x43, 0x30, 0x37, 0x31, 0x39, 0x39, 0x32, 0x35, 0x38, 0x43, 0x36, 0x36, 0x33, 0x34, 0x33, 0x32, 0x33, 0x30, 0x31, 0x32, 0x38, 0x31, 0x39, 0x34, 0x38, 0x42, 0x30, 0x45, 0x34, 0x32, 0x31, 0x34, 0x41, 0x45, 0x39, 0x46, 0x42, 0x36, 0x36, 0x30, 0x33, 0x37, 0x42, 0x34, 0x42, 0x30, 0x37, 0x32, 0x43, 0x33, 0x44, 0x32, 0x31, 0x34, 0x34, 0x39, 0x44, 0x46, 0x33, 0x45, 0x42, 0x33, 0x37, 0x34, 0x46, 0x34, 0x41, 0x44, 0x30, 0x30, 0x36, 0x35, 0x34, 0x37, 0x31, 0x32, 0x30, 0x44, 0x34, 0x38, 0x36, 0x46, 0x44, 0x42, 0x34, 0x30, 0x39, 0x46, 0x33, 0x31, 0x39, 0x30, 0x42, 0x34, 0x45, 0x37, 0x46, 0x35, 0x44, 0x31, 0x32, 0x46, 0x39, 0x36, 0x33, 0x32, 0x38, 0x44, 0x43, 0x31, 0x32, 0x42, 0x43, 0x31, 0x33, 0x31, 0x33, 0x38, 0x45, 0x37, 0x39, 0x45, 0x30, 0x32, 0x44, 0x31, 0x31, 0x46, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
memcpy(pRookie, newb, 436);
BYTE pro[436] = { 0x9B, 0xE0, 0x92, 0x00, 0x61, 0x66, 0x72, 0x6F, 0x68, 0x65, 0x6E, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x6D, 0x6F, 0x68, 0x61, 0x6D, 0x65, 0x64, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xAA, 0xA9, 0xBC, 0x44, 0x07, 0x00, 0x5F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x39, 0x33, 0x37, 0x61, 0x61, 0x33, 0x35, 0x30, 0x61, 0x65, 0x30, 0x34, 0x61, 0x62, 0x38, 0x37, 0x36, 0x33, 0x65, 0x61, 0x32, 0x33, 0x66, 0x31, 0x63, 0x63, 0x32, 0x66, 0x62, 0x39, 0x39, 0x63, 0x00, 0x31, 0x37, 0x36, 0x30, 0x31, 0x39, 0x30, 0x30, 0x00, 0x00, 0x01, 0x00, 0x0A, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x07, 0xB2, 0x61, 0xCF, 0x21, 0x54, 0xD4, 0x3F, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x24, 0x48, 0x00, 0x00, 0xBF, 0x17, 0x85, 0x85, 0xF5, 0x06, 0x88, 0x80, 0xA4, 0xEC, 0xEC, 0xEC, 0x9C, 0x6F, 0xE1, 0xE9, 0xCD, 0x85, 0x5C, 0x36, 0x42, 0x31, 0x43, 0x44, 0x45, 0x33, 0x33, 0x37, 0x45, 0x41, 0x32, 0x31, 0x31, 0x38, 0x37, 0x38, 0x42, 0x44, 0x34, 0x33, 0x31, 0x36, 0x35, 0x39, 0x45, 0x31, 0x38, 0x37, 0x46, 0x46, 0x32, 0x31, 0x41, 0x39, 0x35, 0x35, 0x43, 0x42, 0x31, 0x41, 0x46, 0x33, 0x35, 0x41, 0x37, 0x30, 0x30, 0x46, 0x38, 0x31, 0x35, 0x41, 0x43, 0x36, 0x43, 0x42, 0x38, 0x39, 0x44, 0x43, 0x37, 0x38, 0x32, 0x42, 0x33, 0x34, 0x35, 0x38, 0x38, 0x35, 0x44, 0x32, 0x36, 0x33, 0x45, 0x37, 0x41, 0x44, 0x46, 0x33, 0x35, 0x46, 0x38, 0x36, 0x33, 0x30, 0x31, 0x34, 0x37, 0x41, 0x44, 0x30, 0x43, 0x32, 0x41, 0x34, 0x43, 0x30, 0x37, 0x31, 0x39, 0x39, 0x32, 0x35, 0x38, 0x43, 0x36, 0x36, 0x33, 0x34, 0x33, 0x32, 0x33, 0x30, 0x31, 0x32, 0x38, 0x31, 0x39, 0x34, 0x38, 0x42, 0x30, 0x45, 0x34, 0x32, 0x31, 0x34, 0x41, 0x45, 0x39, 0x46, 0x42, 0x36, 0x36, 0x30, 0x33, 0x37, 0x42, 0x34, 0x42, 0x30, 0x37, 0x32, 0x43, 0x33, 0x44, 0x32, 0x31, 0x34, 0x34, 0x39, 0x44, 0x46, 0x33, 0x45, 0x42, 0x33, 0x37, 0x34, 0x46, 0x34, 0x41, 0x44, 0x30, 0x30, 0x36, 0x35, 0x34, 0x37, 0x31, 0x32, 0x30, 0x44, 0x34, 0x38, 0x36, 0x46, 0x44, 0x42, 0x34, 0x30, 0x39, 0x46, 0x33, 0x31, 0x39, 0x30, 0x42, 0x34, 0x45, 0x37, 0x46, 0x35, 0x44, 0x31, 0x32, 0x46, 0x39, 0x36, 0x33, 0x32, 0x38, 0x44, 0x43, 0x31, 0x32, 0x42, 0x43, 0x31, 0x33, 0x31, 0x33, 0x38, 0x45, 0x37, 0x39, 0x45, 0x30, 0x32, 0x44, 0x31, 0x31, 0x46, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
memcpy(pDelta, pro, 436);
}
void accInf(BYTE * pRookie, BYTE * pDelta);
//--{MeMeRoY}--
DWORD WINAPI HACKthread( LPVOID param ){
Sleep(5000);
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
HWND crossfireWnd = GetForegroundWindow();
BYTE * main = new BYTE[436];
BYTE * rookie = new BYTE[436];
BYTE * delta = new BYTE[436];
accInf(rookie, delta);
//DrawMsg("Check point two");
DWORD * account = (DWORD*)(CShell + (DWORD)0x34F8D8);
BYTE escKey = MapVirtualKey(VK_ESCAPE, 0);
memcpy(main, account, 436);
AttachThreadInput( (GetThreadId(&HACKthread)), (GetWindowThreadProcessId(crossfireWnd, NULL)), true);
SetFocus(crossfireWnd);
while(true)
{
if(GetAsyncKeyState(0x77))
{
DrawMsg("Now sending you back to server select, please follow instructions");
Sleep(5000);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
DrawMsg("Now press 1 for rookie, and 2 for delta");
while(true)
{
if(GetAsyncKeyState(0x61))
{
memcpy(account, rookie, 436);
DrawMsg("Please join a server, and don't click exit");
Sleep(10000);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
memcpy(account, main, 436);
DrawMsg("Rookie server enabled coutesy of the GForce team, enjoy");
continue;
}
if(GetAsyncKeyState(0x62))
{
memcpy(account, delta, 436);
DrawMsg("Please join a server, and don't click exit");
Sleep(10000);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
keybd_event(VK_ESCAPE, escKey, NULL, NULL);
keybd_event(VK_ESCAPE, escKey, KEYEVENTF_KEYUP, 0);
memcpy(account, main, 436);
DrawMsg("Delta server enabled coutesy of the GForce team, enjoy");
continue;
}
}
}
if(GetAsyncKeyState(0x72)) break;
}
AttachThreadInput( (GetThreadId(&HACKthread)), (GetWindowThreadProcessId(crossfireWnd, NULL)), false);
delete main, rookie, delta;
CloseHandle(&HACKthread);
return 0;
}
void WINAPI wait()
{
DWORD crossfire = (DWORD)GetModuleHandleA("crossfire.exe");
DWORD * isLoaded = (DWORD*)(crossfire + (DWORD)0x299058);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)HACKthread, NULL, NULL, NULL);
}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH)
{
MessageBoxA(0, "GForce forever", "V3", 0);
MessageBeep(MB_ICONINFORMATION);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)wait, NULL, NULL, NULL);
}
if(dwReason == DLL_PROCESS_DETACH)
{
CloseHandle(&wait);
CloseHandle(&HACKthread);
return TRUE;
}
Code:
//{Includes}
#include <Windows.h>
//{Non-function deffintions}
#define coordinateOffset 0x32B0E8
#define inGameOffset 0x2A4245
//{Functions}
float * getCoordinates(DWORD axis)
{
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
DWORD coordinatePtr = *(DWORD*)(CShell+coordinateOffset);
coordinatePtr = *(DWORD*)(coordinatePtr+0x100);
coordinatePtr += axis;
return(float*)coordinatePtr;
}
// --Memory Editing / Main
DWORD WINAPI features( LPVOID param )
{
//bool for is in game
bool * inGame = (bool*)( (DWORD)GetModuleHandleA("crossfire.exe")+0x2A4245);
DWORD CShell = (DWORD)GetModuleHandleA("CShell.dll");
//player coordinate offsts
enum coordinteOffsets { X=(DWORD)0xDC, Y=(DWORD)0xE4, Z=(DWORD)0xE0 };
Sleep(10000); //Sleep 30 seconds so cshell will have memory in it
bool exit = false;
bool infDubJmp = false; //infinite double jump
float x, y, z;
while(exit == false)
{
//prevents errors caused by reading free space
if(*inGame != true)
{
Sleep(5000);
continue;
}
//Tele markers
if(GetAsyncKeyState(0x77))
{
x = *getCoordinates(X);
y = *getCoordinates(Y);
z = *getCoordinates(Z);
}
if(GetAsyncKeyState(0x78))
{
*getCoordinates(X) = x;
*getCoordinates(Y) = y;
*getCoordinates(Z) = z;
}
if(GetAsyncKeyState(0x72))
{
if(infDubJmp == true)
{
infDubJmp = false;
}
else infDubJmp = true;
}
//infinite double jump
Sleep(100);
if(GetAsyncKeyState(0x75)) *getCoordinates(Z) += 175;
}
return 0;
}
//{Base}
BOOL WINAPI DllMain ( HMODULE hDll, DWORD dwReason, LPVOID lpReserved )
{
DisableThreadLibraryCalls(hDll);
if(dwReason == DLL_PROCESS_ATTACH)
{
MessageBeep(MB_ICONINFORMATION);
CreateThread(NULL, NULL, (LPTHREAD_START_ROUTINE)features, NULL, NULL, NULL);
}
return TRUE;
}
Originally Posted by xKickAss
ok and how i relase the source code? i can now found the addys and i know the string names but dont all 
if one G Force can me awnser? and what is a G Force?
