Special Force Thai Weapon Unlocker

[aS1an1Sm]

Code:

void Unlock()
{
	__try
	{
		WriteMemory((LPVOID)((DWORD)SFModule + 0x3D3A0C), (LPVOID)"\x73\x89", 2); // 
	}
	__except (EXCEPTION_EXECUTE_HANDLER) {}
}

Assembly:

005139E3     68 60278600                    PUSH SpecialF.00862760                                      ; ASCII "Item id is 0 or below 0"
005139E8     6A 00                          PUSH 0x0
005139EA     E8 E1CD2D05                    CALL 057F07D0
005139EF     90                             NOP
005139F0     8B4E 58                        MOV ECX,DWORD PTR DS:[ESI+0x58]                             ; SpecialF.00310037
005139F3     8B46 60                        MOV EAX,DWORD PTR DS:[ESI+0x60]                             ; SpecialF.00350035
005139F6     8B56 5C                        MOV EDX,DWORD PTR DS:[ESI+0x5C]                             ; SpecialF.00350032
005139F9     898C24 8C010000                MOV DWORD PTR SS:[ESP+0x18C],ECX
00513A00     8B0E                           MOV ECX,DWORD PTR DS:[ESI]
00513A02     898424 AC010000                MOV DWORD PTR SS:[ESP+0x1AC],EAX
00513A09     0FBE46 74                      MOVSX EAX,BYTE PTR DS:[ESI+0x74]
00513A0D     898C24 94010000                MOV DWORD PTR SS:[ESP+0x194],ECX
00513A14     0FB64E 54                      MOVZX ECX,BYTE PTR DS:[ESI+0x54]
00513A18     899424 90010000                MOV DWORD PTR SS:[ESP+0x190],EDX
00513A1F     8B56 30                        MOV EDX,DWORD PTR DS:[ESI+0x30]                             ; SpecialF.0036002D
00513A22     898424 9C010000                MOV DWORD PTR SS:[ESP+0x19C],EAX
00513A29     899424 98010000                MOV DWORD PTR SS:[ESP+0x198],EDX
00513A30     8B56 64                        MOV EDX,DWORD PTR DS:[ESI+0x64]                             ; SpecialF.00440032
00513A33     8D8424 8C010000                LEA EAX,DWORD PTR SS:[ESP+0x18C]
00513A3A     898C24 A0010000                MOV DWORD PTR SS:[ESP+0x1A0],ECX
00513A41     50                             PUSH EAX
00513A42     8D8C24 70010000                LEA ECX,DWORD PTR SS:[ESP+0x170]
00513A49     899424 A8010000                MOV DWORD PTR SS:[ESP+0x1A8],EDX
00513A50     C78424 AC010000 00000000       MOV DWORD PTR SS:[ESP+0x1AC],0x0
00513A5B     E8 D0AEF5FF                    CALL SpecialF.0046E930

SFModule ?

Global: DWORD SFModule;

then:

do
{
	SFModule = (DWORD)GetModuleHandle("SpecialForce.exe");
	Sleep(50);
} while (!SFModule);

Have fun unlocking ^^ greets aSia

[jamzask]

i will try it

[kasamsak1150]

i Create D3D not working // i want bypass Xingcode SFTH T^T