Not sure how to "steal" by editing wallet.dat.
if i'd have access to your wallet.dat, i'd dump the key pairs (1)
then hashed the pub keys to get addresses (2)
check which address shows a balance that could be send away (3)
... not know how yet, but added that keypair to my wallet.dat (4)
and spend from the new address. since i have the keys (5)
if i'd want to make sure that the wallet.dat i'm treating will not spend before me
i'd remove the keypair from there (the one with the balance)