CodeHunter bypass
CodeHunter bypass
Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).
This address is for CFPH.
Good Luck
Don't ask to me how to use it.
Code:
MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1); //Pattern Scan MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1); // Detect VTable MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1); //Detect Resource MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1); //Detect module MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1); //Detect Byte
surprised no one asks how to use it even after 24h lol
Originally Posted by 96neko
surprised no one asks how to use it even after 24h lol
DWORD dwCodeHunterBase = (DWORD)GetModuleHandleA(CShell);
I’m just kidding, @dreek1 how about the codehunter function inside crossfire.exe I just remembered, maybe 4 years ago when I’m exploring the crossfire.exe I notice the said function but I just ignore it. Anyway, with all due respect, would you mind providing pattern on the posted addresses, thank you.
Originally Posted by 96neko
surprised no one asks how to use it even after 24h lol
Originally Posted by 96neko
surprised no one asks how to use it even after 24h lol
Originally Posted by vaisefud3
I mean, he specifically said that he didn't want anyone to ask lmao
Originally Posted by 96neko
still egys here and no one dares to ask is smh funny
Originally Posted by [Snake]
There are a lot of ways to disable codehunter in crossfire.exe but it will leads to fake disconnected cuz .. heartbeat check
the best way is modifying on codehunter module like dreek1 did.
all this function are virtualization in cfwest it will be same in cfph soon.
the best way is modifying on codehunter module like dreek1 did.
all this function are virtualization in cfwest it will be same in cfph soon.
Originally Posted by mamo007
why being racism tho?
Originally Posted by raichfighter22
Perhaps because there are not many relatives of yours. philippines here?
is this thing can bypass heartbeat check?
Originally Posted by iknowitsfake26
is this thing can bypass heartbeat check?
Originally Posted by jayjay153
nope it's not
nice 
Originally Posted by [Snake]
Heartbeat check virtual function in ltclientshell
Originally Posted by dreek1
Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).
This address is for CFPH.
Good Luck
Don't ask to me how to use it.
Code:
MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1); //Pattern Scan MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1); // Detect VTable MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1); //Detect Resource MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1); //Detect module MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1); //Detect Byte
Hopefully you can give some tips. Thank you
Dumped CodeHunter module : (Please Approve
)https://www.virustotal.com/gui/file/...363d/detectionⓘ
