️ Decrypting/Safety Check CLEO/SF/ASI/DLL


Here you can send files and they will be decrypted(cleo/lua/ahk) !

CLEO / LUA / AHK files can have their encryption removed
In full / in part


The SF / ASI / DLL file will be mainly tested
It is not possible to extract code in an orderly manner from files programmed in C ++
Here you will find out if a file is safe and what it does.​
 
Last edited:
Click to expand...
D

Drifter

Member
Joined
Feb 11, 2023
Messages
8
Reaction score
0
Hi team, looking forward to some solid help here. Lua file is crypted :
 

Attachments

  • scriptsd.lua
    367.9 KB · Views: 5
F

frandwk

New member
Joined
Feb 24, 2023
Messages
3
Reaction score
0
please help me, not sure if these cleos are safe
 

Attachments

  • Fast-GPS.cs
    1.6 KB · Views: 3
  • RadarBlips_Distance_by_ollydbg.cs
    7.4 KB · Views: 5
A

Asozial176

New member
Joined
Feb 25, 2023
Messages
1
Reaction score
0
Can you please help me with this?
 

Attachments

  • main.lua
    7.7 KB · Views: 2
  • function.lua
    4.5 KB · Views: 1
  • maincl.lua
    10.7 KB · Views: 1
RayWood

RayWood

Active member
Joined
Mar 13, 2016
Messages
31
Reaction score
13
Location
ᴇᴜʀᴏᴩᴇ
Ey bro can you check if this is safe and potentially send source please:) ?
 

Attachments

  • moonloader.zip
    165.6 KB · Views: 10
M

mensy

New member
Joined
Feb 28, 2023
Messages
1
Reaction score
0
Decompile ahk please
 

Attachments

  • This is AHK.zip
    334.3 KB · Views: 2
H

hucthua

New member
Joined
Jun 17, 2022
Messages
3
Reaction score
1
Could you help me?..
 

Attachments

  • wallhackfor03dl.cs
    1.1 KB · Views: 2
  • 1.cs
    19.6 KB · Views: 1
  • 2.cs
    23 KB · Views: 1
  • 3.cs
    23.9 KB · Views: 1
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
hucthua said:
Could you help me?..
Click to expand...
1.CS:
JavaScript: 
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0000: NOP
wait 0

:NONAME_6
wait 0
if
   Player.Defined($PLAYER_CHAR)
jf @NONAME_116
if
   not Actor.Driving($PLAYER_ACTOR)
jf @NONAME_49
31@ = 1

:NONAME_49
if and
  31@ == 1
   Actor.Driving($PLAYER_ACTOR)
jf @NONAME_116
wait 1000
alloc 26@ 1024
format 26@ "/sb"
call @NONAME_123 1 26@
31@ = 0

:NONAME_116
goto @NONAME_6

:NONAME_123
call @NONAME_335 0 31@
if
0AA2: 2@ = load_library "samp.dll" // IF and SET
jf @NONAME_330
if
  31@ == 1
jf @NONAME_193
0A8E: 3@ = 2@ + 416864 // int

:NONAME_193
if
  31@ == 2
jf @NONAME_224
0A8E: 3@ = 2@ + 417072 // int

:NONAME_224
if
  31@ == 3
jf @NONAME_255
0A8E: 3@ = 2@ + 430912 // int

:NONAME_255
if
  31@ == 4
jf @NONAME_286
0A8E: 3@ = 2@ + 430480 // int

:NONAME_286
if
  31@ == 5
jf @NONAME_317
0A8E: 3@ = 2@ + 432320 // int

:NONAME_317
0AA5: call 3@ num_params 1 pop 0 0@

:NONAME_330
ret 0

:NONAME_335
30@ = 0
if
0AA2: 31@ = load_library "samp.dll" // IF and SET
jf @NONAME_547
31@ += 296
0A8D: 29@ = read_memory 31@ size 4 virtual_protect 1
if
  29@ == 1430451322
jf @NONAME_416
30@ = 1

:NONAME_416
if
  29@ == 1505954964
jf @NONAME_444
30@ = 2

:NONAME_444
if
  29@ == 1516908848
jf @NONAME_472
30@ = 3

:NONAME_472
31@ -= 8
0A8D: 29@ = read_memory 31@ size 4 virtual_protect 1
if
  29@ == 1544241731
jf @NONAME_519
30@ = 4

:NONAME_519
if
  29@ == 1574307533
jf @NONAME_547
30@ = 5

:NONAME_547
ret 1 30@
2.CS:
JavaScript: 
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
thread 'autoPaycheck'

:AUTOPAYCHECK_19
wait 1000
0A8D: 0@ = read_memory 10765472 size 4 virtual_protect 0
  0@ == 1
jf @AUTOPAYCHECK_19
alloc 0@ 260
format 0@ "Kiem tra payday"
TIMERA = 0
TIMERB = 0

:AUTOPAYCHECK_97
wait 0
if
0ADC:   test_cheat "PAY"
jf @AUTOPAYCHECK_240
if
  30@ == 0
jf @AUTOPAYCHECK_198
30@ = 1
printf "autoPaycheck ~g~Activated" 1337
TIMERA = 0
TIMERB = 0
goto @AUTOPAYCHECK_240

:AUTOPAYCHECK_198
30@ = 0
printf "autoPaycheck ~r~Deactivated" 1337

:AUTOPAYCHECK_240
if
  30@ == 1
jf @AUTOPAYCHECK_447
if
  TIMERB > 60000
jf @AUTOPAYCHECK_325
alloc $4 260
format $4 "/lanhluong"
call @AUTOPAYCHECK_454 1 $4
TIMERB = 0

:AUTOPAYCHECK_325
if
call @AUTOPAYCHECK_508 0 1@
jf @AUTOPAYCHECK_447
if
call @AUTOPAYCHECK_619 2 0@ 1@
jf @AUTOPAYCHECK_447
call @AUTOPAYCHECK_744 0 1@
alloc 2@ 1024
call @AUTOPAYCHECK_995 4 1@ 125 123 2@
call @AUTOPAYCHECK_1201 1 2@
call @AUTOPAYCHECK_1313 1 1
free 2@

:AUTOPAYCHECK_447
goto @AUTOPAYCHECK_97

:AUTOPAYCHECK_454
if
0AA2: 1@ = load_library "samp.dll" // IF and SET
jf @AUTOPAYCHECK_503
1@ += 430912
0AA5: call 1@ num_params 1 pop 0 0@

:AUTOPAYCHECK_503
ret 0

:AUTOPAYCHECK_508
0AA2: 1@ = load_library "samp.dll" // IF and SET
1@ += 2804192
0A8D: 1@ = read_memory 1@ size 4 virtual_protect 0
0A8E: 2@ = 1@ + 40 // int
0A8D: 2@ = read_memory 2@ size 4 virtual_protect 0
if
  2@ == 1
jf @AUTOPAYCHECK_612
0A8E: 3@ = 1@ + 64 // int
return_true
ret 1 3@
goto @AUTOPAYCHECK_614

:AUTOPAYCHECK_612
return_false

:AUTOPAYCHECK_614
ret 0

:AUTOPAYCHECK_619
7@ = 0

:AUTOPAYCHECK_626
0A8D: 2@ = read_memory 0@ size 1 virtual_protect 0
0A8D: 3@ = read_memory 1@ size 1 virtual_protect 0
0@ += 1
1@ += 1
if
003B:   2@ == 3@ // (int)
jf @AUTOPAYCHECK_737
if and
  2@ == 0
  3@ == 0
jf @AUTOPAYCHECK_715
return_true
ret 0

:AUTOPAYCHECK_715
7@ += 1
  7@ > 1024
jf @AUTOPAYCHECK_626

:AUTOPAYCHECK_737
return_false
ret 0

:AUTOPAYCHECK_744
0AA2: 1@ = load_library "samp.dll" // IF and SET
1@ += 2804192
0A8D: 1@ = read_memory 1@ size 4 virtual_protect 0
0A8E: 2@ = 1@ + 40 // int
0A8D: 2@ = read_memory 2@ size 4 virtual_protect 0
if
  2@ == 1
jf @AUTOPAYCHECK_916
0A8E: 3@ = 1@ + 44 // int
0A8D: 3@ = read_memory 3@ size 4 virtual_protect 0
if or
  3@ == 0
  3@ == 1
  3@ == 3
jf @AUTOPAYCHECK_914
0A8E: 4@ = 1@ + 52 // int
0A8D: 4@ = read_memory 4@ size 4 virtual_protect 0
return_true
ret 1 4@
goto @AUTOPAYCHECK_916

:AUTOPAYCHECK_914
return_false

:AUTOPAYCHECK_916
ret 0

:AUTOPAYCHECK_921
1@ = 0

:AUTOPAYCHECK_928
0A8D: 2@ = read_memory 0@ size 1 virtual_protect 0
if
   not 2@ == 0
jf @AUTOPAYCHECK_987
0@ += 1
1@ += 1
  1@ > 1024
jf @AUTOPAYCHECK_928

:AUTOPAYCHECK_987
ret 1 1@

:AUTOPAYCHECK_995
5@ = 0
6@ = 0
call @AUTOPAYCHECK_921 1 0@ 31@
30@ = 0

:AUTOPAYCHECK_1032
0085: 29@ = 0@ // (int)
005A: 29@ += 30@ // (int)
0A8D: 28@ = read_memory 29@ size 1 virtual_protect 1
if and
003B:   28@ == 2@ // (int)
  5@ == 1
jf @AUTOPAYCHECK_1093
6@ = 1

:AUTOPAYCHECK_1093
if and
  5@ == 1
  6@ == 0
jf @AUTOPAYCHECK_1137
0A8C: write_memory 3@ size 1 value 28@ virtual_protect 1
3@ += 1

:AUTOPAYCHECK_1137
if
003B:   28@ == 1@ // (int)
jf @AUTOPAYCHECK_1163
5@ = 1

:AUTOPAYCHECK_1163
30@ += 1
001D:   30@ > 31@ // (int)
jf @AUTOPAYCHECK_1032
0A8C: write_memory 3@ size 1 value 0 virtual_protect 1
ret 0

:AUTOPAYCHECK_1201
if
0AA2: 2@ = load_library "samp.dll" // IF and SET
jf @AUTOPAYCHECK_1308
0A8E: 3@ = 2@ + 2804192 // int
0A8D: 3@ = read_memory 3@ size 4 virtual_protect 0
0A8E: 4@ = 3@ + 36 // int
0A8D: 4@ = read_memory 4@ size 4 virtual_protect 0
0A8E: 5@ = 2@ + 544768 // int
0AA8: call_function_method 5@ struct 4@ num_params 2 pop 0 0 0@ 6@

:AUTOPAYCHECK_1308
ret 0

:AUTOPAYCHECK_1313
if
0AA2: 10@ = load_library "samp.dll" // IF and SET
jf @AUTOPAYCHECK_1396
0A8E: 11@ = 10@ + 2804192 // int
0A8D: 12@ = read_memory 11@ size 4 virtual_protect 0
0A8E: 11@ = 10@ + 458960 // int
0AA8: call_function_method 11@ struct 12@ num_params 1 pop 0 0@ $5

:AUTOPAYCHECK_1396
ret 0

3.CS:
JavaScript: 
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0000: NOP
wait 8500

:NONAME_7
wait 0
if
   Player.Defined($PLAYER_CHAR)
else_jump @NONAME_222
alloc 0@ 1024
alloc 1@ 1024
call @NONAME_229 1 99 0@ 1@ 2@ 3@
alloc 4@ 1024
call @NONAME_433 4 0@ 123 125 4@
alloc 5@ 1024
format 5@ "type /chapnhan refill to accept"
if
call @NONAME_618 2 4@ 5@ 6@
else_jump @NONAME_222
alloc 6@ 1024
format 6@ "/chapnhan refill"
call @NONAME_1189 1 6@
wait 1000

:NONAME_222
jump @NONAME_7

:NONAME_229
if
0AA2: 31@ = load_library "samp.dll" // IF and SET
else_jump @NONAME_416
31@ += 2804240
0A8D: 31@ = read_memory 31@ size 4 virtual_protect 0
31@ += 306
0@ *= 252
005A: 31@ += 0@ // (int)
0A8E: 30@ = 31@ + 32 // int
0A8E: 29@ = 31@ + 4 // int
0A8E: 28@ = 31@ + 244 // int
0A8D: 27@ = read_memory 28@ size 4 virtual_protect 0
0A8E: 26@ = 31@ + 248 // int
0A8D: 25@ = read_memory 26@ size 1 virtual_protect 0
if
   not 25@ > 0
else_jump @NONAME_399
24@ = 0
jump @NONAME_411

:NONAME_399
0A8D: 24@ = read_memory 26@ size 4 virtual_protect 0

:NONAME_411
0AA3: free_library 31@

:NONAME_416
ret 4 30@ 29@ 27@ 24@

:NONAME_433
5@ = 0
call @NONAME_895 1 0@ 31@
30@ = 0

:NONAME_463
0085: 29@ = 0@ // (int)
005A: 29@ += 30@ // (int)
0A8D: 28@ = read_memory 29@ size 1 virtual_protect 1
if
003B:   28@ == 1@ // (int)
else_jump @NONAME_517
5@ = 1

:NONAME_517
if
  5@ == 0
else_jump @NONAME_554
0A8C: write_memory 3@ size 1 value 28@ virtual_protect 1
3@ += 1

:NONAME_554
if
003B:   28@ == 2@ // (int)
else_jump @NONAME_580
5@ = 0

:NONAME_580
30@ += 1
001D:   30@ > 31@ // (int)
else_jump @NONAME_463
0A8C: write_memory 3@ size 1 value 0 virtual_protect 1
ret 0

:NONAME_618
call @NONAME_895 1 0@ 31@
call @NONAME_895 1 1@ 30@
if
001D:   30@ > 31@ // (int)
else_jump @NONAME_678
return_false
ret 1 0

:NONAME_678
31@ -= 1
26@ = 0
29@ = 0

:NONAME_699
0085: 24@ = 0@ // (int)
005A: 24@ += 29@ // (int)
0A8D: 28@ = read_memory 24@ size 1 virtual_protect 0
0085: 23@ = 1@ // (int)
005A: 23@ += 26@ // (int)
0A8D: 27@ = read_memory 23@ size 1 virtual_protect 0
if
003B:   28@ == 27@ // (int)
else_jump @NONAME_832
26@ += 1
if
002D:   26@ >= 30@ // (int)
else_jump @NONAME_825
return_true
0062: 24@ -= 30@ // (int)
24@ += 1
ret 1 24@

:NONAME_825
jump @NONAME_864

:NONAME_832
if
  26@ > 0
else_jump @NONAME_857
29@ -= 1

:NONAME_857
26@ = 0

:NONAME_864
29@ += 1
001D:   29@ > 31@ // (int)
else_jump @NONAME_699
return_false
ret 1 0

:NONAME_895
1@ = 0

:NONAME_902
0A8D: 2@ = read_memory 0@ size 1 virtual_protect 0
if
   not 2@ == 0
else_jump @NONAME_961
0@ += 1
1@ += 1
  1@ > 1024
else_jump @NONAME_902

:NONAME_961
ret 1 1@
30@ = 0
if
0AA2: 31@ = load_library "samp.dll" // IF and SET
else_jump @NONAME_1181
31@ += 296
0A8D: 29@ = read_memory 31@ size 4 virtual_protect 1
if
  29@ == 1430451322
else_jump @NONAME_1050
30@ = 1

:NONAME_1050
if
  29@ == 1505954964
else_jump @NONAME_1078
30@ = 2

:NONAME_1078
if
  29@ == 1516908848
else_jump @NONAME_1106
30@ = 3

:NONAME_1106
31@ -= 8
0A8D: 29@ = read_memory 31@ size 4 virtual_protect 1
if
  29@ == 1544241731
else_jump @NONAME_1153
30@ = 4

:NONAME_1153
if
  29@ == 1574307533
else_jump @NONAME_1181
30@ = 5

:NONAME_1181
ret 1 30@

:NONAME_1189
if
0AA2: 20@ = load_library "samp.dll" // IF and SET
else_jump @NONAME_1325
0A8E: 21@ = 20@ + 2804244 // int
0A8D: 22@ = read_memory 21@ size 4 virtual_protect 0
0A8E: 26@ = 22@ + 8 // int
0A8D: 27@ = read_memory 26@ size 4 virtual_protect 0
0A8E: 24@ = 20@ + 544768 // int
0AA8: call_function_method 24@ struct 27@ num_params 2 pop 0 0 0@ 6@
0A8E: 25@ = 20@ + 431120 // int
0AA8: call_function_method 25@ struct 22@ num_params 0 pop 0 7@

:NONAME_1325
ret 0
wallhack03dl.cs:
JavaScript: 
// This file was decompiled using SASCM.ini published on 2022-03-20
{$CLEO .cs}

wait 8500

:NONAME_5
wait 0
   load_dynamic_library 0@ = load_dynamic_library "SAMP.DLL"
jf @NONAME_5
cleo_call @NONAME_969 0

:NONAME_41
wait 0
if and
   is_key_pressed 114
   is_key_pressed 114
jf @NONAME_144
if
  2@ == 0
jf @NONAME_114
2@ = 1
print_formatted_now "~G~MY LOVE" time 1337
jump @NONAME_139

:NONAME_114
2@ = 0
print_formatted_now "~R~MY LOVE" time 1337

:NONAME_139
wait 500

:NONAME_144
if
  2@ == 1
jf @NONAME_203
cleo_call @NONAME_357 0
cleo_call @NONAME_607 5 0@ 3 310.0 1 1
jump @NONAME_255

:NONAME_203
if
  2@ == 0
jf @NONAME_255
cleo_call @NONAME_482 0
cleo_call @NONAME_607 5 0@ 3 310.0 1 0

:NONAME_255
if and
  2@ == 1
   is_key_pressed 119
jf @NONAME_350
cleo_call @NONAME_482 0
cleo_call @NONAME_607 5 0@ 3 310.0 1 0
wait 500
cleo_call @NONAME_357 0
cleo_call @NONAME_607 5 0@ 3 310.0 1 1

:NONAME_350
jump @NONAME_41

:NONAME_357
   load_dynamic_library 30@ = load_dynamic_library "SAMP.DLL"
0A8E: 1@ = 30@ + 478845 // int
write_memory 1@ size 2 value 10987 virtual_protect 1
0A8E: 2@ = 30@ + 479139 // int
write_memory 2@ size 2 value 5355 virtual_protect 1
0A8E: 3@ = 30@ + 474477 // int
write_memory 3@ size 2 value 10987 virtual_protect 1
0A8E: 4@ = 30@ + 474771 // int
write_memory 4@ size 2 value 7147 virtual_protect 1
free_dynamic_library 30@
cleo_return 0

:NONAME_482
   load_dynamic_library 30@ = load_dynamic_library "SAMP.DLL"
0A8E: 1@ = 30@ + 478845 // int
write_memory 1@ size 2 value 18059 virtual_protect 1
0A8E: 2@ = 30@ + 479139 // int
write_memory 2@ size 2 value 9377 virtual_protect 1
0A8E: 3@ = 30@ + 474477 // int
write_memory 3@ size 2 value 18059 virtual_protect 1
0A8E: 4@ = 30@ + 474771 // int
write_memory 4@ size 2 value 9377 virtual_protect 1
free_dynamic_library 30@
cleo_return 0

:NONAME_607
if
  1@ == 1
jf @NONAME_638
0A8E: 31@ = 0@ + 2203896 // int

:NONAME_638
if
  1@ == 2
jf @NONAME_669
0A8E: 31@ = 0@ + 2203904 // int

:NONAME_669
if
  1@ == 3
jf @NONAME_700
0A8E: 31@ = 0@ + 2804260 // int

:NONAME_700
if
  1@ == 4
jf @NONAME_731
0A8E: 31@ = 0@ + 2549980 // int

:NONAME_731
if
  1@ == 5
jf @NONAME_762
0A8E: 31@ = 0@ + 2550284 // int

:NONAME_762
read_memory 31@ = read_memory 31@ size 4 virtual_protect 0
31@ += 981
read_memory 31@ = read_memory 31@ size 4 virtual_protect 0
0A8E: 30@ = 31@ + 39 // int
0A8E: 29@ = 31@ + 47 // int
0A8E: 28@ = 31@ + 56 // int
write_memory 30@ size 4 value 2@ virtual_protect 0
write_memory 29@ size 1 value 3@ virtual_protect 0
write_memory 28@ size 1 value 4@ virtual_protect 0
cleo_return 0
if
   load_dynamic_library 2@ = load_dynamic_library "SAMP.DLL"
jf @NONAME_964
0085: 3@ = 2@ // (int)
3@ += 2804240
read_memory 3@ = read_memory 3@ size 4 virtual_protect 1
0085: 4@ = 2@ // (int)
4@ += 423504
call_method 4@ struct 3@ num_params 5 pop 0 0 0@ 0 1@ 8

:NONAME_964
cleo_return 0

:NONAME_969
   load_dynamic_library 0@ = load_dynamic_library "SAMP.DLL"
0085: 1@ = 0@ // (int)
1@ += 2804240
read_memory 3@ = read_memory 1@ size 4 virtual_protect 1
0085: 2@ = 0@ // (int)
2@ += 423504
call_method 2@ struct 3@ num_params 5 pop 0 0 -4129023 0 "NOTHING'S GONNA CHANGE MY LOVE FOR YOU" 8
cleo_return 0
 
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
hucthua said:
Are these files safe? Please help me..
Click to expand...
They look fine to me, in CLEO you can put a lot of crap into the files
If you want, sure, always take the code and create a new script
You're sure to come (because you're actually kind of creating it)
 
H

hucthua

New member
Joined
Jun 17, 2022
Messages
3
Reaction score
1
SobFoX said:
They look fine to me, in CLEO you can put a lot of crap into the files
If you want, sure, always take the code and create a new script
You're sure to come (because you're actually kind of creating it)
Click to expand...

I’m grateful for your help!
 
D

Drifter

Member
Joined
Feb 11, 2023
Messages
8
Reaction score
0
Could you help me decrypt please
 

Attachments

  • scriptsd.lua
    367.9 KB · Views: 5
A

areebrizwan@ugbase.com

New member
Joined
Feb 27, 2018
Messages
2
Reaction score
0
Can i get the time changed from 2000 to 1300
can you please make the same script but if works by sending /capture command instead of /capturf with a diff enabling command
 

Attachments

  • RepeatCapturf.cs
    18.1 KB · Views: 1
SobFoX

SobFoX

Expert
Joined
Jul 14, 2015
Messages
1,463
Solutions
5
Reaction score
916
Location
Israel
areebrizwan@ugbase.com said:
is this safe?
Click to expand...
yes
JavaScript: 
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0000: NOP

:NONAME_2
wait 1500
0A8D: 31@ = read_memory 13161664 size 4 virtual_protect 0
if
   not 31@ == 9
else_jump @NONAME_41
0A93: end_custom_thread

:NONAME_41
  31@ == 9
else_jump @NONAME_2

:NONAME_55
wait 0
0A8D: 30@ = read_memory 12216228 size 1 virtual_protect 0
0A8C: write_memory 5642992 size 1 value 195 virtual_protect 1
if
  30@ == 1
else_jump @NONAME_1251
0A8C: write_memory 5748684 size 1 value 144 virtual_protect 1
0A8C: write_memory 5748685 size 1 value 233 virtual_protect 1
0A8C: write_memory 5749194 size 1 value 235 virtual_protect 1
0A8C: write_memory 5749179 size 5 value 144 virtual_protect 1
0A8C: write_memory 5729812 size 1 value 0 virtual_protect 1
0A8C: write_memory 5729833 size 1 value 0 virtual_protect 1
0A8C: write_memory 5499315 size 1 value 117 virtual_protect 1
0A8C: write_memory 5499316 size 1 value 68 virtual_protect 1
0A8C: write_memory 5499317 size 1 value 144 virtual_protect 1
0A8C: write_memory 5499318 size 1 value 144 virtual_protect 1
0A8C: write_memory 5499319 size 1 value 144 virtual_protect 1
0A8C: write_memory 5499320 size 1 value 144 virtual_protect 1
0A8C: write_memory 5502028 size 1 value 49 virtual_protect 1
0A8C: write_memory 5502029 size 1 value 210 virtual_protect 1
0A8C: write_memory 5502030 size 1 value 144 virtual_protect 1
0A8C: write_memory 5502031 size 1 value 144 virtual_protect 1
0A8C: write_memory 5502035 size 1 value 49 virtual_protect 1
0A8C: write_memory 5502036 size 1 value 192 virtual_protect 1
0A8C: write_memory 5502037 size 1 value 144 virtual_protect 1
0A8C: write_memory 5502038 size 1 value 144 virtual_protect 1
0A8C: write_memory 5719357 size 4 value 300.0 virtual_protect 1
0A8D: 29@ = read_memory 12216485 size 1 virtual_protect 1
if
  29@ == 5
else_jump @NONAME_845
0A8C: write_memory 12216172 size 1 value 2 virtual_protect 1
0A8C: write_memory 5719357 size 4 value 300.0 virtual_protect 1
0A8C: write_memory 5725657 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725575 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725494 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725420 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725329 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725119 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725261 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725187 size 1 value 0 virtual_protect 1
0A8C: write_memory 5723198 size 1 value 0 virtual_protect 1
0A8C: write_memory 5724849 size 1 value 0 virtual_protect 1
0A8C: write_memory 5732745 size 1 value 144 virtual_protect 1
0A8C: write_memory 5732746 size 1 value 144 virtual_protect 1
0A8C: write_memory 5732747 size 1 value 144 virtual_protect 1
0A8C: write_memory 5731926 size 1 value 144 virtual_protect 1
0A8C: write_memory 5731927 size 1 value 144 virtual_protect 1
0A8C: write_memory 5731928 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735583 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735584 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735585 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735992 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735993 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735994 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735176 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735177 size 1 value 144 virtual_protect 1
0A8C: write_memory 5735178 size 1 value 144 virtual_protect 1
0A8C: write_memory 5733978 size 1 value 144 virtual_protect 1
0A8C: write_memory 5733979 size 1 value 144 virtual_protect 1
0A8C: write_memory 5733980 size 1 value 144 virtual_protect 1
jump @NONAME_1244

:NONAME_845
0A8C: write_memory 12216172 size 1 value 0 virtual_protect 1
0A8C: write_memory 5725657 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725575 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725494 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725420 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725329 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725119 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725261 size 1 value 255 virtual_protect 1
0A8C: write_memory 5725187 size 1 value 255 virtual_protect 1
0A8C: write_memory 5723198 size 1 value 255 virtual_protect 1
0A8C: write_memory 5724849 size 1 value 200 virtual_protect 1
0A8C: write_memory 5732745 size 1 value 131 virtual_protect 1
0A8C: write_memory 5732746 size 1 value 248 virtual_protect 1
0A8C: write_memory 5732747 size 1 value 20 virtual_protect 1
0A8C: write_memory 5731926 size 1 value 131 virtual_protect 1
0A8C: write_memory 5731927 size 1 value 248 virtual_protect 1
0A8C: write_memory 5731928 size 1 value 20 virtual_protect 1
0A8C: write_memory 5735583 size 1 value 131 virtual_protect 1
0A8C: write_memory 5735584 size 1 value 249 virtual_protect 1
0A8C: write_memory 5735585 size 1 value 20 virtual_protect 1
0A8C: write_memory 5735992 size 1 value 131 virtual_protect 1
0A8C: write_memory 5735993 size 1 value 249 virtual_protect 1
0A8C: write_memory 5735994 size 1 value 20 virtual_protect 1
0A8C: write_memory 5735176 size 1 value 131 virtual_protect 1
0A8C: write_memory 5735177 size 1 value 249 virtual_protect 1
0A8C: write_memory 5735178 size 1 value 20 virtual_protect 1
0A8C: write_memory 5733978 size 1 value 131 virtual_protect 1
0A8C: write_memory 5733979 size 1 value 248 virtual_protect 1
0A8C: write_memory 5733980 size 1 value 20 virtual_protect 1

:NONAME_1244
jump @NONAME_1572

:NONAME_1251
0A8C: write_memory 5748684 size 1 value 15 virtual_protect 1
0A8C: write_memory 5748685 size 1 value 132 virtual_protect 1
0A8C: write_memory 5749179 size 1 value 232 virtual_protect 1
0A8C: write_memory 5749180 size 1 value 160 virtual_protect 1
0A8C: write_memory 5749181 size 1 value 193 virtual_protect 1
0A8C: write_memory 5749214 size 1 value 26 virtual_protect 1
0A8C: write_memory 5749183 size 1 value 0 virtual_protect 1
0A8C: write_memory 5729812 size 1 value 255 virtual_protect 1
0A8C: write_memory 5729833 size 1 value 255 virtual_protect 1
0A8C: write_memory 5749194 size 1 value 116 virtual_protect 1
0A8C: write_memory 5499315 size 1 value 15 virtual_protect 1
0A8C: write_memory 5499316 size 1 value 133 virtual_protect 1
0A8C: write_memory 5499317 size 1 value 96 virtual_protect 1
0A8C: write_memory 5499318 size 1 value 1 virtual_protect 1
0A8C: write_memory 5499319 size 1 value 0 virtual_protect 1
0A8C: write_memory 5499320 size 1 value 0 virtual_protect 1
0A8C: write_memory 5502028 size 1 value 139 virtual_protect 1
0A8C: write_memory 5502029 size 1 value 84 virtual_protect 1
0A8C: write_memory 5502030 size 1 value 36 virtual_protect 1
0A8C: write_memory 5502031 size 1 value 8 virtual_protect 1
0A8C: write_memory 5502035 size 1 value 139 virtual_protect 1
0A8C: write_memory 5502036 size 1 value 68 virtual_protect 1
0A8C: write_memory 5502037 size 1 value 36 virtual_protect 1
0A8C: write_memory 5502038 size 1 value 12 virtual_protect 1

:NONAME_1572
jump @NONAME_55
 
You must log in or register to reply here.
Top