CodeHunter bypass

[dreek1]

Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).

This address is for CFPH.

Good Luck




Don't ask to me how to use it.

		MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1);	//Pattern Scan
		MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1);	// Detect VTable
		MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1);	 //Detect Resource
		MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1);	//Detect module
		MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1);	//Detect Byte

[96neko]

surprised no one asks how to use it even after 24h lol

[vaisefud3]

surprised no one asks how to use it even after 24h lol

I mean, he specifically said that he didn't want anyone to ask lmao

[96neko]

I mean, he specifically said that he didn't want anyone to ask lmao

still egys here and no one dares to ask is smh funny

[mamo007]

still egys here and no one dares to ask is smh funny

why being racism tho?

[emiedumalasa]

surprised no one asks how to use it even after 24h lol

Then, I will be the first who’s asking on how to use it?

DWORD dwCodeHunterBase = (DWORD)GetModuleHandleA(CShell);

I’m just kidding, @dreek1 how about the codehunter function inside crossfire.exe I just remembered, maybe 4 years ago when I’m exploring the crossfire.exe I notice the said function but I just ignore it. Anyway, with all due respect, would you mind providing pattern on the posted addresses, thank you.

[emiedumalasa]

There are a lot of ways to disable codehunter in crossfire.exe but it will leads to fake disconnected cuz .. heartbeat check
the best way is modifying on codehunter module like dreek1 did.
all this function are virtualization in cfwest it will be same in cfph soon.

what do you mean by "all this function are virtualization in cfwest"?. These functions are not working or patch in cf west?

[raichfighter22]

surprised no one asks how to use it even after 24h lol

Perhaps because there are not many relatives of yours. philippines here?

[96neko]

why being racism tho?

racist*

Perhaps because there are not many relatives of yours. philippines here?

not ph and i don't get offended easily my boy

[iknowitsfake26]

is this thing can bypass heartbeat check?

[Anger5K]

nice

[jayjay153]

is this thing can bypass heartbeat check?

nope it's not

[iknowitsfake26]

nope it's not

so this thing what can it do? is it fully bypass too by bypass inside of internal ac? or still need to bypass inside the cf.exe

[iknowitsfake26]

Heartbeat check virtual function in ltclientshell

so what does it do? this thing can't bypass all ban right, still need to bypass ban another in cf.exe?

[oMega_Pie]

Hello MPGH, today I'll share how to disable CodeHunter (Internal AntiCheat).

This address is for CFPH.

Good Luck




Don't ask to me how to use it.

		MemCpy((void*)(dwCodeHunterBase + 0x19070), (void*)"\xC3", 1);	//Pattern Scan
		MemCpy((void*)(dwCodeHunterBase + 0x9D70), (void*)"\xC3", 1);	// Detect VTable
		MemCpy((void*)(dwCodeHunterBase + 0x8C10), (void*)"\xC3", 1);	 //Detect Resource
		MemCpy((void*)(dwCodeHunterBase + 0x1480), (void*)"\xC3", 1);	//Detect module
		MemCpy((void*)(dwCodeHunterBase + 0x42E0), (void*)"\xC3", 1);	//Detect Byte

How about updating those offset ? I manage to get the dwCodeHunterBase but i got confused how I would be able to update those offsets .

Hopefully you can give some tips. Thank you

Dumped CodeHunter module : (Please Approve )
https://www.virustotal.com/gui/file/...363d/detection