️ Decrypting/Safety Check CLEO/SF/ASI/DLL


Here you can send files and they will be decrypted(cleo/lua/ahk) !

CLEO / LUA / AHK files can have their encryption removed
In full / in part


The SF / ASI / DLL file will be mainly tested
It is not possible to extract code in an orderly manner from files programmed in C ++
Here you will find out if a file is safe and what it does.​
 
Last edited:
Click to expand...
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
Saam said:
PHP: 
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}
{$USE bitwise}
{$USE CLEO+}
{$USE file}
{$USE ini}
{$USE newOpcodes}

0662: printstring "FLAPJACK92"
03A4: name_thread 'FLAPJACK92'
0001: wait 0 ms
0007: 0@ = 1.0
0007: 11@ = 1.0
0A8D: 2@ = read_memory 13157434 size 2 virtual_protect 0
0A8D: 3@ = read_memory 13157770 size 2 virtual_protect 0
0A8D: 4@ = read_memory 13157882 size 2 virtual_protect 0
0A8D: 5@ = read_memory 13157994 size 2 virtual_protect 0
0A8D: 6@ = read_memory 13158106 size 2 virtual_protect 0
0A8D: 7@ = read_memory 13158218 size 2 virtual_protect 0
0A8D: 8@ = read_memory 13158554 size 2 virtual_protect 0
0A8D: 9@ = read_memory 13158330 size 2 virtual_protect 0
0A8D: 10@ = read_memory 13158442 size 2 virtual_protect 0
0A8C: write_memory 13157600 size 4 value 0 virtual_protect 0
0A8C: write_memory 13157712 size 4 value 0 virtual_protect 0
0A8C: write_memory 13157824 size 4 value 0 virtual_protect 0
0A8C: write_memory 13158048 size 4 value 0 virtual_protect 0
0A8C: write_memory 13158272 size 4 value 0 virtual_protect 0
0A8C: write_memory 13158384 size 4 value 0 virtual_protect 0
0A8C: write_memory 13158496 size 4 value 0 virtual_protect 0
0A8C: write_memory 13158720 size 4 value 0 virtual_protect 0
0A8C: write_memory 13154800 size 4 value 0 virtual_protect 0
0A8C: write_memory 13154912 size 4 value 0 virtual_protect 0
0A8C: write_memory 13155024 size 4 value 0 virtual_protect 0
0A8C: write_memory 13155136 size 4 value 0 virtual_protect 0
0A8C: write_memory 13155248 size 4 value 0 virtual_protect 0

:FLAPJACK92_352
0001: wait 0 ms
00D6: if
0256:   player $0[2] defined
004D: jump_if_false @FLAPJACK92_352
0001: wait 0 ms
0393: actor $0[3] perform_animation "COLT45_FIRE" at 0@ times_normal_rate
0393: actor $0[3] perform_animation "COLT45_CROUCHRELOAD" at 0@ times_normal_rate
0393: actor $0[3] perform_animation "COLT45_RELOAD" at 0@ times_normal_rate
0393: actor $0[3] perform_animation "SAWNOFF_RELOAD" at 0@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYLHS_BWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYLHS" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYLHS_FWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYRHS" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYRHS_BWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYRHS_FWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYTOP_LHS" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "GANG_DRIVEBYTOP_RHS" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "COLT45_CROUCHFIRE" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "PASS_DRIVEBY_BWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "PASS_DRIVEBY_FWD" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "PASS_DRIVEBY_LHS" at 11@ times_normal_rate
0393: actor $0[3] perform_animation "PASS_DRIVEBY_RHS" at 11@ times_normal_rate
00D6: if and
0AB0:   key_pressed 66
0AB0:   key_pressed 49
004D: jump_if_false @FLAPJACK92_1093
0ACD: show_text_highpriority "DRIVEBYRAPIDFIRE[1] BY FLAPJACK92 HAS BEEN ACTIVATED! (LOOK SIDEWAYS)" time 5000
0007: 0@ = 1.0
0007: 11@ = 1.0
0A8C: write_memory 13157434 size 2 value 2@ virtual_protect 0
0A8C: write_memory 13157770 size 2 value 3@ virtual_protect 0
0A8C: write_memory 13157882 size 2 value 4@ virtual_protect 0
0A8C: write_memory 13157994 size 2 value 5@ virtual_protect 0
0A8C: write_memory 13158106 size 2 value 6@ virtual_protect 0
0A8C: write_memory 13158218 size 2 value 7@ virtual_protect 0
0A8C: write_memory 13158554 size 2 value 8@ virtual_protect 0
0A8C: write_memory 13158330 size 2 value 9@ virtual_protect 0
0A8C: write_memory 13158442 size 2 value 10@ virtual_protect 0
018C: play_sound 1056 at 0.0 0.0 0.0
0001: wait 5 ms

:FLAPJACK92_1093
00D6: if and
0AB0:   key_pressed 66
0AB0:   key_pressed 50
004D: jump_if_false @FLAPJACK92_1349
0ACD: show_text_highpriority "DRIVEBYRAPIDFIRE[2] BY FLAPJACK92 HAS BEEN ACTIVATED! (LOOK SIDEWAYS)" time 5000
0007: 0@ = 9.0
0007: 11@ = 3.4
0A8C: write_memory 13157434 size 2 value 12 virtual_protect 0
0A8C: write_memory 13157770 size 2 value 4 virtual_protect 0
0A8C: write_memory 13157882 size 2 value 3 virtual_protect 0
0A8C: write_memory 13157994 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158106 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158218 size 2 value 8 virtual_protect 0
0A8C: write_memory 13158554 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158330 size 2 value 14 virtual_protect 0
0A8C: write_memory 13158442 size 2 value 14 virtual_protect 0
018C: play_sound 1056 at 0.0 0.0 0.0
0001: wait 5 ms

:FLAPJACK92_1349
00D6: if and
0AB0:   key_pressed 66
0AB0:   key_pressed 51
004D: jump_if_false @FLAPJACK92_1605
0ACD: show_text_highpriority "DRIVEBYRAPIDFIRE[3] BY FLAPJACK92 HAS BEEN ACTIVATED! (LOOK SIDEWAYS)" time 5000
0007: 0@ = 9.0
0007: 11@ = 12.8
0A8C: write_memory 13157434 size 2 value 12 virtual_protect 0
0A8C: write_memory 13157770 size 2 value 4 virtual_protect 0
0A8C: write_memory 13157882 size 2 value 3 virtual_protect 0
0A8C: write_memory 13157994 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158106 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158218 size 2 value 8 virtual_protect 0
0A8C: write_memory 13158554 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158330 size 2 value 14 virtual_protect 0
0A8C: write_memory 13158442 size 2 value 14 virtual_protect 0
018C: play_sound 1056 at 0.0 0.0 0.0
0001: wait 5 ms

:FLAPJACK92_1605
00D6: if and
0AB0:   key_pressed 66
0AB0:   key_pressed 52
004D: jump_if_false @FLAPJACK92_1861
0ACD: show_text_highpriority "DRIVEBYRAPIDFIRE[4] BY FLAPJACK92 HAS BEEN ACTIVATED! (LOOK SIDEWAYS)" time 5000
0007: 0@ = 9.0
0007: 11@ = 7.4
0A8C: write_memory 13157434 size 2 value 12 virtual_protect 0
0A8C: write_memory 13157770 size 2 value 4 virtual_protect 0
0A8C: write_memory 13157882 size 2 value 3 virtual_protect 0
0A8C: write_memory 13157994 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158106 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158218 size 2 value 8 virtual_protect 0
0A8C: write_memory 13158554 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158330 size 2 value 14 virtual_protect 0
0A8C: write_memory 13158442 size 2 value 14 virtual_protect 0
018C: play_sound 1056 at 0.0 0.0 0.0
0001: wait 5 ms

:FLAPJACK92_1861
00D6: if and
0AB0:   key_pressed 66
0AB0:   key_pressed 53
004D: jump_if_false @FLAPJACK92_2117
0ACD: show_text_highpriority "DRIVEBYRAPIDFIRE[5] BY FLAPJACK92 HAS BEEN ACTIVATED! (LOOK SIDEWAYS)" time 5000
0007: 0@ = 9.0
0007: 11@ = 3.4
0A8C: write_memory 13157434 size 2 value 12 virtual_protect 0
0A8C: write_memory 13157770 size 2 value 4 virtual_protect 0
0A8C: write_memory 13157882 size 2 value 3 virtual_protect 0
0A8C: write_memory 13157994 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158106 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158218 size 2 value 8 virtual_protect 0
0A8C: write_memory 13158554 size 2 value 7 virtual_protect 0
0A8C: write_memory 13158330 size 2 value 14 virtual_protect 0
0A8C: write_memory 13158442 size 2 value 14 virtual_protect 0
018C: play_sound 1056 at 0.0 0.0 0.0
0001: wait 5 ms

:FLAPJACK92_2117
0002: jump @FLAPJACK92_352
Click to expand...
Thanks bro, I don't have time, I moved residence
 
G

Gaminex

Member
Joined
Jul 28, 2022
Messages
11
Reaction score
0
decrypt/open this files please
 

Attachments

  • aka.cs
    207.2 KB · Views: 4
  • aka(2).cs
    26.3 KB · Views: 3
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
Juli4n said:
Could you show the evidence that it is a keylogger? I am the creator, and it only has weight control TO AVOID being contaminated with keyloggers
Click to expand...
The truth is that I did not do such an in-depth examination, but whoever pushes so many "obfuscations" shows that he has something to hide.

There are more original ways to make your code not copied, try to be original and not use any ready-made bullshit.
 
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
That's why you use all this shit, write and see that there is a loader so it's the behavior of a virus/keylogger. And I believe that this cleo file was not published here in an orderly manner because it would not have passed one of the managers here in this way
 
Juli4n

Juli4n

Active member
Joined
Mar 31, 2021
Messages
43
Solutions
1
Reaction score
19
Location
Argentina
SobFoX said:
The truth is that I did not do such an in-depth examination, but whoever pushes so many "obfuscations" shows that he has something to hide.

There are more original ways to make your code not copied, try to be original and not use any ready-made bullshit.
Click to expand...
It has very little protection actually, and it has it so they don't edit the weight check, if you're not going to fully analyze then don't talk shit.
 
Juli4n

Juli4n

Active member
Joined
Mar 31, 2021
Messages
43
Solutions
1
Reaction score
19
Location
Argentina
I don't doubt that you want to fake something in my script to blame me, you became known in my community thanks to a group of fools who put keyloggers (TRILL, HaxSamp, etc.) You hated those who didn't put keyloggers...
 
J

Jimmy Ciculs

Active member
Joined
Mar 3, 2020
Messages
33
Reaction score
4
Location
?
can u decrypt it for me ? thanks
 

Attachments

  • platformdetect.lua
    198.7 KB · Views: 5
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
Juli4n said:
It has very little protection actually, and it has it so they don't edit the weight check, if you're not going to fully analyze then don't talk shit.
Click to expand...
Juli4n said:
I don't doubt that you want to fake something in my script to blame me, you became known in my community thanks to a group of fools who put keyloggers (TRILL, HaxSamp, etc.) You hated those who didn't put keyloggers...
Click to expand...
It's okay that you lie, but are you also lying to yourself?
In any case, we don't really care here what you did, but yes there are a number of obfuscations..
But tell yourself as many stories as you want. :p
In the meantime, there's probably a reason you're not posting here, because you probably have good reasons :p
 
Juli4n

Juli4n

Active member
Joined
Mar 31, 2021
Messages
43
Solutions
1
Reaction score
19
Location
Argentina
SobFoX said:
It's okay that you lie, but are you also lying to yourself?
In any case, we don't really care here what you did, but yes there are a number of obfuscations..
But tell yourself as many stories as you want. :p
In the meantime, there's probably a reason you're not posting here, because you probably have good reasons :p
Click to expand...
I haven't made public mods for a long time, that's why I don't post.
While I will wait for the test of "my keyloggers".
 
L

L7xTREM

New member
Joined
Sep 25, 2022
Messages
3
Reaction score
0
SobFox, can you edit the cleo for me?, remove activation in delete, and instead of minigun put ak in f1, sniper f12, shotgun f5?
 

Attachments

  • HMOBullet.cs
    20.5 KB · Views: 1
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
L7xTREM said:
Pls? i love you
Click to expand...
No, this is not the right place on the website, there is a place in Cleo for requests, go there, don't be brainless, it's a place for completely different things
 
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
Gaminex said:
.
Click to expand...
All the code is exhausted in one of your DUMPs, next time I don't help with such things, here they help SAMP
No nonsense from the anime SKINS of emo children

Hint:
JavaScript: 
if
   Player.Defined($PLAYER_CHAR)
jf -13347
if
044B:   actor $PLAYER_ACTOR on_foot
jf -13347
if
0ADC:   test_cheat "KANA"
jf -13347
04ED: load_animation "007RIPPERFK"

:KARNA_13417
wait 0
if
04EE:   animation "007RIPPERFK" loaded
jf @KARNA_13417
15@ = Audiostream.Load("CLEO\AUDIO_KARNA\BRAHMA1.MP3")
16@ = Audiostream.Load("CLEO\AUDIO_KARNA\BRAHMA2.MP3")
17@ = Audiostream.Load("CLEO\AUDIO_KARNA\BRAHMA3.MP3")
18@ = Audiostream.Load("CLEO\AUDIO_KARNA\BASIC.MP3")
01B9: set_actor $PLAYER_ACTOR armed_weapon_to 0
0812: AS_actor $PLAYER_ACTOR perform_animation "007RIPPER24" IFP "007RIPPERFK" framedelta 30.0 loopA 0 lockX 1 lockY 1 lockF 1 time -1 // versionB
wait 500
04C4: store_coords_to 29@ 30@ 31@ from_actor $PLAYER_ACTOR with_offset 0.0 4.0 0.0
Camera.SetPosition(29@, 30@, 31@, 0.0, 0.0, 0.0)
04C4: store_coords_to 29@ 30@ 31@ from_actor $PLAYER_ACTOR with_offset 0.0 0.0 0.5
Camera.PointAt(29@, 30@, 31@, 2)
wait 500
gosub -27061
gosub -100022
gosub -110672
gosub -111394
0812: AS_actor $PLAYER_ACTOR perform_animation "007RIPPER24" IFP "007RIPPERFK" framedelta 30.0 loopA 0 lockX 1 lockY 1 lockF 1 time -1 // versionB
wait 2000
0812: AS_actor $PLAYER_ACTOR perform_animation "007RIPPER23" IFP "007RIPPERFK" framedelta 30.0 loopA 0 lockX 1 lockY 1 lockF 1 time -1 // versionB
wait 1500
Camera.Restore
 
You must log in or register to reply here.
Top