️ Decrypting/Safety Check CLEO/SF/ASI/DLL


Here you can send files and they will be decrypted(cleo/lua/ahk) !

CLEO / LUA / AHK files can have their encryption removed
In full / in part



The SF / ASI / DLL file will be mainly tested
It is not possible to extract code in an orderly manner from files programmed in C ++
Here you will find out if a file is safe and what it does.
 
Last edited:

Tissue

Member
Joined
Jun 23, 2017
Messages
6
Reaction score
0
Nothing to show here:

PHP:
{$CLEO .cs}

0662: printstring "_decrypted_"
010C: NOP
hex
 A9 2D 52 00 04 00 04 04 93 0A
end
Hmmmm I wonder what that hex code does, me and my friend also got that but still have no idea what it was tho.

I saw lev mentioning about decrypting it using the github repo but dunno if it will uncover that hex code tbh.

Anyways thanks!
 

Lev

Active member
Joined
Jan 12, 2014
Messages
45
Reaction score
13
Hmmmm I wonder what that hex code does, me and my friend also got that but still have no idea what it was tho.

I saw lev mentioning about decrypting it using the github repo but dunno if it will uncover that hex code tbh.

Anyways thanks!
0x010C is not a valid opcode. Moreover, 0xA9 is not a valid operand type. CLEO script you have provided cannot be interpreted without additional data and will crash your game
 

Tissue

Member
Joined
Jun 23, 2017
Messages
6
Reaction score
0
0x010C is not a valid opcode. Moreover, 0xA9 is not a valid operand type. CLEO script you have provided cannot be interpreted without additional data and will crash your game
So what additional data that you mentioned? Like some decryptor.cleo file or some other things that I need in order to unravel the hex code.
 

Lev

Active member
Joined
Jan 12, 2014
Messages
45
Reaction score
13
So what additional data that you mentioned? Like some decryptor.cleo file or some other things that I need in order to unravel the hex code.
Yes, but more likely than not it's simply an invalid script. FYP encryptor requires an extra space of 15 bytes at the beginning of script. I believe it was not done here, because remaining bytes resemble half-cut code
 

0x73616D

Active member
Joined
Apr 18, 2021
Messages
135
Solutions
1
Reaction score
68
Location
0x73616D
StayBike:
PHP:
:7FFF__33
03A4: name_thread '7FFF:'
03A4: name_thread 'STB_HIDDEN'

:STB_HIDDEN_19
0001: wait 500 ms
00D6: if
047A:   actor $0[3] driving_bike
004D: jump_if_false @STB_HIDDEN_19
08C6: set_actor $0[3] stay_on_bike 1
0001: wait 1000 ms
0002: jump @STB_HIDDEN_19
SkyJump:
PHP:
:7FFF__33
03A4: name_thread '7FFF:'

:7FFF__44
0001: wait 20 ms
0AB4: 2@ = cleo_shared_var 5
00D6: if and
8039:   not 2@ == 1
0AB0:   is_key_pressed 17
00DF:   actor $0[3] driving
004D: jump_if_false @7FFF__44
03C0: 1@ = actor $0[3] car
07D5: set_car 1@ velocity_in_direction_XYZ 0.0 0.0 0.2 rotation_velocitiesXY 0.0 0.0 unk 0.0
0001: wait 300 ms
0002: jump @7FFF__44
 

0x73616D

Active member
Joined
Apr 18, 2021
Messages
135
Solutions
1
Reaction score
68
Location
0x73616D
plz decrypt
PHP:
{$CLEO .cs}
{$USE CLEO+}
{$USE file}
{$USE newOpcodes}

0002: jump @7FFF__33

:7FFF__33
03A4: name_thread '7FFF:'

:7FFF__44
0001: wait 0 ms
00D6: if
0AB0:   is_key_pressed 114
004D: jump_if_false @7FFF__70
0002: jump @7FFF__114

:7FFF__70
00D6: if
0AB0:   is_key_pressed 17
004D: jump_if_false @7FFF__92
0002: jump @7FFF__114

:7FFF__92
00D6: if
0AB0:   is_key_pressed 1
004D: jump_if_false @7FFF__44
0002: jump @7FFF__114

:7FFF__114
00D6: if
0256:   player $0[2] defined
004D: jump_if_false @7FFF__265
03C0: 10@ = actor $0[3] car
00D6: if
0019: 10@ > 0
004D: jump_if_false @7FFF__258
00D6: if
00DF:   actor $0[3] driving
004D: jump_if_false @7FFF__244

:7FFF__172
06E9: load_car_component #NTO_B_TW

:7FFF__177
0001: wait 0 ms
00D6: if
06EA:   car_component #NTO_B_TW available
004D: jump_if_false @7FFF__177
06E7: 20@ = add_car_component #NTO_B_TW to_car 10@
0ACD: show_text_highpriority "" time 2000
0001: wait 250 ms
06EB: release_car_component #NTO_B_TW
0001: wait 20000 ms
0002: jump @7FFF__172
0002: jump @7FFF__251

:7FFF__244
0ACD: show_text_highpriority "" time 2000

:7FFF__251
0002: jump @7FFF__265

:7FFF__258
0ACD: show_text_highpriority "" time 2000

:7FFF__265
0002: jump @7FFF__44
 

srmdvk

New member
Joined
Aug 25, 2020
Messages
1
Reaction score
0
decrypt pls
 

Attachments

  • Localizador.cs
    20.8 KB · Views: 3
  • PlayerFinder.cs
    20.8 KB · Views: 3

0x73616D

Active member
Joined
Apr 18, 2021
Messages
135
Solutions
1
Reaction score
68
Location
0x73616D
decrypt pls
Both files have the same code
PHP:
{$CLEO}

hex
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
end

wait 5000
0AF8: samp add_message_to_chat "[UGBASE.EU] {FFFFFF}Player Finder made by {00DE21}TH3RM4L-" color 0x0095FF
0B34: samp register_client_command "cfind" to_label @start
0B34: samp register_client_command "myfind" to_label @my_find
0B34: samp register_client_command "stopfind" to_label @stop
31@ = false
30@ = false

:cfind
wait 0 
if
31@ == true
jf @cfind
if
SAMP.IsPlayerConnected(2@)
jf @disconnected   
3@ = SAMP.GetActorHandleByPlayerID(2@)
if
856D:  actor 3@ defined
jf @find       
0B2F: samp get_streamed_out_player_pos 2@ to 9@ 10@ 11@
12@ = Marker.CreateIconAndSphere(41, 9@, 10@, 11@)
wait 750
Marker.Disable(12@)
wait 100     

:find
wait 0
if
056D:  actor 3@ defined
jf @cfind
Actor.StorePos(3@, 5@, 6@, 7@)
8@ = Marker.CreateIconAndSphere(41, 5@, 6@, 7@)
wait 750
Marker.Disable(8@)
wait 100
goto @cfind

:start
if
30@ == false
jf @finding_more_players
SAMP.IsCommandTyped(0@)
if
0AD4: 1@ = scan_string 0@ format "%d" 2@
jf @usage
if
SAMP.IsPlayerConnected(2@)
jf @invalid_id
30@ = true
31@ = true
0B36: samp 4@ = get_player_nickname 2@
0AF8: samp add_message_to_chat "Marker set on the player %s, ID %d. Use [/stopfind] to stop finding." color 0x6098D1 4@ 2@
SAMP.CmdRet
goto @cfind

:stop
if                                                     
31@ == true
jf @not_finding
30@ = false
31@ = false
Marker.Disable(8@)
0AF8: samp add_message_to_chat "The finding has been stopped succefully." color 0x6098D1
SAMP.CmdRet
goto @cfind

:my_find
if
31@ == true
jf @not_finding
0AF8: samp add_message_to_chat "You are finding %s, ID %d." color 0x6098D1 4@ 2@
SAMP.CmdRet
goto @cfind

:disconnected
0AF8: samp add_message_to_chat "The player which you were finding has disconnected." color 0xBF0000
30@ = false
31@ = false
goto @cfind

:finding_more_players
0AF8: samp add_message_to_chat "You can't find more players at the same time. Use [/stopfind] to stop finding." color 0xFBE29C
SAMP.CmdRet
goto @cfind

:usage
0AF8: samp add_message_to_chat "USAGE: /cfind <playerID>" color 0xBFBFBF
SAMP.CmdRet
goto @cfind

:invalid_id
0AF8: samp add_message_to_chat "Invalid ID." color 0xBF0000
SAMP.CmdRet
goto @cfind

:not_finding
0AF8: samp add_message_to_chat "You are not finding anyone." color 0xFBE29C
SAMP.CmdRet
goto @cfind
 

0x73616D

Active member
Joined
Apr 18, 2021
Messages
135
Solutions
1
Reaction score
68
Location
0x73616D
is it safe?
Yep

PHP:
{$CLEO .cs}
{$USE CLEO+}

0BE2: raknet setup_outcoming_packet_hook -1883
0000: NOP
0001: wait 0 ms
0AFA:  is_samp_available
004D: jump_if_false -24
0004: $4 = 0
0004: $5 = 49
0004: $6 = 49
0002: jump -65
0001: wait 0 ms
00D6: if
8AB0:   not is_key_pressed 101
004D: jump_if_false -98
0002: jump -65
0002: jump @Noname_170
0C6A: 0@  = create_custom_thread_at_label -387
0C6A: 25@  = create_custom_thread_at_label -1728
0004: $4 = 1
0AD1: show_formatted_text_highpriority "Silent Aim by ~l~ Izd4T ~g~ ON" time 1000
0001: wait 500 ms
0001: wait 0 ms
00D6: if and
8038:   not $5 == 0

:Noname_170
0AB0:   is_key_pressed 102
004D: jump_if_false @Noname_203
000C: $5 -= 1
00D6: if and
8038:   not $5 == 49
0AB0:   is_key_pressed 100

:Noname_203
004D: jump_if_false @Noname_232
0008: $5 += 1
00D6: if and
8038:   not $6 == 0
0AB0:   is_key_pressed 104

:Noname_232
004D: jump_if_false @Noname_261
000C: $6 -= 1
00D6: if and
8038:   not $6 == 49
0AB0:   is_key_pressed 98

:Noname_261
004D: jump_if_false @Noname_290
0008: $6 += 1
00D6: if
8AB0:   not is_key_pressed 101
004D: jump_if_false -319

:Noname_290
0002: jump @Noname_170
0002: jump -380
0C6E: destroy_custom_thread 0@
0C6E: destroy_custom_thread 25@
0004: $4 = 0
0AD1: show_formatted_text_highpriority "Silent Aim by ~l~ Izd4T ~r~ OFF" time 1000
0001: wait 500 ms
0002: jump -65
0001: wait 0 ms
0006: 0@ = -1
000A: 0@ += 1
8039:   not 0@ == 1001

:Noname_398
004D: jump_if_false -387
00D6: if and
0B23:  samp is_player_connected 0@
8B5C:   not samp is_player 0@ paused
8B64:   not samp is_player 0@ npc
004D: jump_if_false @Noname_398
0B20: read_clipboard_data 0@ size 1@
00D6: if and
056D:   actor $PLAYER_ACTOR defined
056D:   actor 1@ defined
004D: jump_if_false @Noname_398
00A0: store_actor 1@ position_to 2@ 3@ 4@
0B55: convert_3D_coords 2@ 3@ 4@ to_screen 5@ 6@
0AB1: cleo_call -778 2 5@ 6@ 7@
0039: 7@ == 1
004D: jump_if_false @Noname_398
0470: 12@ = actor $PLAYER_ACTOR current_weapon
0AB1: cleo_call -920 0 11@
0AB1: cleo_call -1637 2 $PLAYER_ACTOR 25 5@ 6@ 7@
0AB1: cleo_call -1637 2 1@ 11@ 8@ 9@ 10@
06BD:   no_obstacles_between 5@ 6@ 7@ and 8@ 9@ 10@ solid 1 car 1 actor 0 object 1 particle 0
004D: jump_if_false @Noname_398
0AB1: cleo_call -1690 6 8@ 9@ 10@ 2@ 3@ 4@ 8@ 9@ 10@
0004: $7 = 0@
0005: $8 = 5@
0005: $9 = 6@
0005: $10 = 7@
0005: $12 = 2@
0005: $13 = 3@
0005: $23 = 4@
0005: $28 = 8@
0005: $30 = 9@
0005: $36 = 10@
0004: $37 = 12@
0002: jump @Noname_398
0B5A: get_screen_resolution 2@ 3@
0006: 10@ = 2@
0006: 20@ = 3@
0016: 2@ /= 100
0016: 3@ /= 100
006E: 2@ *= $5  // (int)
006E: 3@ *= $6  // (int)
0062: 10@ -= 2@  // (int)
0062: 20@ -= 3@  // (int)
00D6: if and
001D:   0@ > 2@  // (int)
001D:   1@ > 3@  // (int)
001D:   10@ > 0@  // (int)
001D:   20@ > 1@  // (int)
004D: jump_if_false @Noname_905
0006: 2@ = 1
0002: jump -912
0006: 2@ = 0
0AB2: cleo_return 1 2@

:Noname_905
0209: 15@ = random_int_in_ranges 0 27
00D6: if
0039: 15@ == 0
004D: jump_if_false -954
0006: 0@ = 6
00D6: if
0039: 15@ == 1
004D: jump_if_false -979
0006: 0@ = 7
00D6: if
0039: 15@ == 2
004D: jump_if_false -1004
0006: 0@ = 8
00D6: if
0039: 15@ == 3
004D: jump_if_false -1029
0006: 0@ = 5
00D6: if
0039: 15@ == 4
004D: jump_if_false -1054
0006: 0@ = 4
00D6: if
0039: 15@ == 5
004D: jump_if_false -1079
0006: 0@ = 21
00D6: if
0039: 15@ == 6
004D: jump_if_false -1104
0006: 0@ = 31
00D6: if
0039: 15@ == 7
004D: jump_if_false -1129
0006: 0@ = 22
00D6: if
0039: 15@ == 8
004D: jump_if_false -1154
0006: 0@ = 32
00D6: if
0039: 15@ == 9
004D: jump_if_false -1179
0006: 0@ = 3
00D6: if
0039: 15@ == 10
004D: jump_if_false -1204
0006: 0@ = 23
00D6: if
0039: 15@ == 11
004D: jump_if_false -1229
0006: 0@ = 33
00D6: if
0039: 15@ == 12
004D: jump_if_false -1254
0006: 0@ = 1
00D6: if
0039: 15@ == 13
004D: jump_if_false -1279
0006: 0@ = 51
00D6: if
0039: 15@ == 14
004D: jump_if_false -1304
0006: 0@ = 41
00D6: if
0039: 15@ == 15
004D: jump_if_false -1329
0006: 0@ = 24
00D6: if
0039: 15@ == 16
004D: jump_if_false -1354
0006: 0@ = 34
00D6: if
0039: 15@ == 17
004D: jump_if_false -1379
0006: 0@ = 25
00D6: if
0039: 15@ == 18
004D: jump_if_false -1404
0006: 0@ = 35
00D6: if
0039: 15@ == 19
004D: jump_if_false -1429
0006: 0@ = 26
00D6: if
0039: 15@ == 20
004D: jump_if_false -1454
0006: 0@ = 36
00D6: if
0039: 15@ == 21
004D: jump_if_false -1479
0006: 0@ = 52
00D6: if
0039: 15@ == 22
004D: jump_if_false -1504
0006: 0@ = 42
00D6: if
0039: 15@ == 23
004D: jump_if_false -1529
0006: 0@ = 53
00D6: if
0039: 15@ == 24
004D: jump_if_false -1554
0006: 0@ = 43
00D6: if
0039: 15@ == 25
004D: jump_if_false -1579
0006: 0@ = 54
00D6: if
0039: 15@ == 26
004D: jump_if_false -1604
0006: 0@ = 44
00D6: if
0039: 15@ == 27
004D: jump_if_false -1629
0006: 0@ = 2
0AB2: cleo_return 1 0@
0A96: 25@ = ped 0@ struct
0AC7: 26@ = var 26@ pointer
0AA6: call_method 6177408 struct 25@ num_params 3 pop 0 1 1@ 26@
0AB2: cleo_return 3 26@ 27@ 28@
0063: 3@ -= 0@  // (float)
0063: 4@ -= 1@  // (float)
0063: 5@ -= 2@  // (float)
0AB2: cleo_return 3 3@ 4@ 5@
0001: wait 0 ms
0B5A: get_screen_resolution 1@ 2@
0006: 10@ = 1@
0006: 20@ = 2@
0016: 1@ /= 100
0016: 2@ /= 100
0006: 0@ = $5
006A: 1@ *= 0@  // (int)
0006: 0@ = $6
006A: 2@ *= 0@  // (int)
0062: 10@ -= 1@  // (int)
0062: 20@ -= 2@  // (int)
0006: 3@ = 10@
0006: 4@ = 20@
0062: 3@ -= 1@  // (int)
0062: 4@ -= 2@  // (int)
0B6A: render draw_box_with_border_pos 1@ 2@ size 3@ 4@ color 1677743564 border_size 1 border_color -939524096
0002: jump -1728
0BE5: raknet 0@ = get_hook_param 1
00D6: if and
0039: 0@ == 206
0038: $4 == 1
004D: jump_if_false -2105
0BE5: raknet 0@ = get_hook_param 0
0BF2: raknet 1@ = bit_stream 0@ get_read_offset
0BF1: raknet 2@ = bit_stream 0@ get_write_offset
0BEC: raknet bit_stream 0@ set_write_offset 8
0B40: raknet bit_stream 0@ write 1 type 0 size 1
0B40: raknet bit_stream 0@ write $7 type 2 size 2
0B40: raknet bit_stream 0@ write $8 type 4 size 4
0B40: raknet bit_stream 0@ write $9 type 4 size 4
0B40: raknet bit_stream 0@ write $10 type 4 size 4
0B40: raknet bit_stream 0@ write $12 type 4 size 4
0B40: raknet bit_stream 0@ write $13 type 4 size 4
0B40: raknet bit_stream 0@ write $23 type 4 size 4
0B40: raknet bit_stream 0@ write $28 type 4 size 4
0B40: raknet bit_stream 0@ write $30 type 4 size 4
0B40: raknet bit_stream 0@ write $36 type 4 size 4
0B40: raknet bit_stream 0@ write $37 type 0 size 1
0BEC: raknet bit_stream 0@ set_write_offset 2@
0BED: raknet bit_stream 0@ set_read_offset 1@
0BE0: raknet hook_ret 0
 

Parazitas

God
Staff member
Joined
Jan 2, 2017
Messages
3,315
Solutions
7
Reaction score
935
Location
Lithuania
I'm to lazy, please open.
I'm looking for SAMP memory
 

Attachments

  • .setcolor.cs
    19.1 KB · Views: 6

0x73616D

Active member
Joined
Apr 18, 2021
Messages
135
Solutions
1
Reaction score
68
Location
0x73616D
I'm to lazy, please open.
I'm looking for SAMP memory
PHP:
// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0B34: samp register_client_command ".SETCOLOR" to_label @NONAME_209
wait 3000
0AF8: samp add_message_to_chat "[SetCarColor]: {FFFFFF}Author {FF4444}[M3DGod]king{FFFFFF}." 0x4444FF
0@ = 0

:NONAME_25
wait 0
if
  0@ == 1
else_jump @NONAME_25
if
   Actor.Driving($PLAYER_ACTOR)
else_jump @NONAME_320
0@ = Actor.CurrentCar($PLAYER_ACTOR)
3@ = SAMP.GetSAMPVehicleIDByCarHandle(0@)
SAMP.SendSCMEvent(3@, COLOR, 5@, 8@)
0229: set_car 0@ primary_color_to 5@ secondary_color_to 8@
0@ = 0
SAMP.CmdRet
jump @NONAME_25

:NONAME_209
   SAMP.IsCommandTyped(1@)
if
0AD4: 6@ = scan_string 1@ format "%D %D" 5@ 8@ 
else_jump @NONAME_263
0@ = 1
SAMP.CmdRet
jump @NONAME_25

:NONAME_263
0AF8: samp add_message_to_chat "[M3DGOD]KING : {44FF44}/.SETCOLOR {FF4444}<ID> <ID>" color 0x4444FF
0@ = 0
SAMP.CmdRet
jump @NONAME_25

:NONAME_320
0AF8: samp add_message_to_chat "[M3DGOD]KING : {FF4444}YOU MUST BE DRIVING!" color 0x4444FF
0@ = 0
SAMP.CmdRet
jump @NONAME_25
 

mark09

New member
Joined
Aug 31, 2024
Messages
1
Reaction score
0
can a ifp file (can't upload) be a malware/ have keylogger? (ped.ifp)
 
Top