CodeHunter bypass

Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).

This address is for CFPH.

Good Luck

Don't ask to me how to use it.

Code:

		MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1);	//Pattern Scan
		MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1);	// Detect VTable
		MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1);	 //Detect Resource
		MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1);	//Detect module
		MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1);	//Detect Byte

surprised no one asks how to use it even after 24h lol

Originally Posted by 96neko

surprised no one asks how to use it even after 24h lol

Then, I will be the first who’s asking on how to use it?

DWORD dwCodeHunterBase = (DWORD)GetModuleHandleA(CShell);

I’m just kidding, @dreek1 how about the codehunter function inside crossfire.exe I just remembered, maybe 4 years ago when I’m exploring the crossfire.exe I notice the said function but I just ignore it. Anyway, with all due respect, would you mind providing pattern on the posted addresses, thank you.

Originally Posted by 96neko

surprised no one asks how to use it even after 24h lol

Perhaps because there are not many relatives of yours. philippines here?

Originally Posted by 96neko

surprised no one asks how to use it even after 24h lol

I mean, he specifically said that he didn't want anyone to ask lmao

Originally Posted by vaisefud3

I mean, he specifically said that he didn't want anyone to ask lmao

still egys here and no one dares to ask is smh funny

Originally Posted by 96neko

still egys here and no one dares to ask is smh funny

why being racism tho?

Originally Posted by [Snake]

There are a lot of ways to disable codehunter in crossfire.exe but it will leads to fake disconnected cuz .. heartbeat check
the best way is modifying on codehunter module like dreek1 did.
all this function are virtualization in cfwest it will be same in cfph soon.

what do you mean by "all this function are virtualization in cfwest"?. These functions are not working or patch in cf west?

Originally Posted by mamo007

why being racism tho?

racist*

Originally Posted by raichfighter22

Perhaps because there are not many relatives of yours. philippines here?

not ph and i don't get offended easily my boy

is this thing can bypass heartbeat check?

Originally Posted by iknowitsfake26

is this thing can bypass heartbeat check?

nope it's not

Originally Posted by jayjay153

nope it's not

so this thing what can it do? is it fully bypass too by bypass inside of internal ac? or still need to bypass inside the cf.exe

nice

Originally Posted by [Snake]

Heartbeat check virtual function in ltclientshell

so what does it do? this thing can't bypass all ban right, still need to bypass ban another in cf.exe?

Originally Posted by dreek1

Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).

This address is for CFPH.

Good Luck

Don't ask to me how to use it.

Code:

		MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1);	//Pattern Scan
		MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1);	// Detect VTable
		MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1);	 //Detect Resource
		MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1);	//Detect module
		MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1);	//Detect Byte

How about updating those offset ? I manage to get the dwCodeHunterBase but i got confused how I would be able to update those offsets .

Hopefully you can give some tips. Thank you

Dumped CodeHunter module : (Please Approve

)
https://www.virustotal.com/gui/file/...363d/detectionⓘ

CodeHunter_dump_mpgh.net.zip62 KB · 67 downloads 3/67 malicious

Download & Thanks

CodeHunter bypass

Post a Reply

Similar Threads

Tags for this Thread