Question about this Script

[Laughing Man]

This is suppose to be a login script for a game. (Rose Online). I think the creator of the script said it was made with AutoIt. So I figured I would come to these forums and see if it really is keylog/trojan/whatever free. The creator provided the source code along with the program. The program passed the scans but I decided I might as well check out the source code to make sure it's safe. It seems to do what it's suppose to do. Login (the coordinates are there since in 1024x768 resolution the server exceeded box will pop up in the same location as well as the server name and channels.

But is there anything in this script that would send entered usernames and password anywhere?

#Include <GUIConstants.au3>

HotKeySet("{ESC}", "Quit")

GetSettings()

Func Quit()

Exit 0

EndFunc

Func GetSettings()

GUICreate("ROSE Online Logon Bot", 400, 200)

GUICtrlCreateLabel("Channel:", 25, 103)

Global $Channelcombo = GUICtrlCreateCombo("1", 125, 100, 40, 30)

GUICtrlSetData($ChannelCombo, "2|3", "1")

Global $characternumbercombo = GUIctrlCreateCombo("1", 325, 100, 40, 30)

GUICtrlSetData($characternumbercombo, "2|3|4|5", "1")

GuiCtrlCreateLabel("Character #:", 225, 103)

Global $accntinput = GUICtrlCreateInput("Account Name", 100, 25, 200, 20)

Global $passinput = GUICtrlCreateInput("Password", 100, 50, 200, 20)

$startbutton = GUICtrlCreateButton("Start", 150, 175, 100, 20)

Global $pathinput = GUICtrlCreateInput("Path of ROSE", 50, 125, 200, 20)

$browse = GUICtrlCreateButton("Browse", 300, 125, 50, 20)

GUISetState()

While 1

$msg = GUIGetMsg()

If $msg = $startbutton Then

  Begin()

EndIf

If $msg = $browse Then

  Browse()

EndIf

If $msg = $GUI_EVENT_CLOSE Then

  Exit 0

EndIf

WEnd

EndFunc

Func Begin()

GetInfo()

Updater()

Login()

Finish()

EndFunc

Func Browse()

$directoryofrose = FileOpenDialog("ROSE Directory", "C:\Program Files\Triggersoft\ROSE Online", "All(*)")

GUICtrlSetData($pathinput, $directoryofrose)

EndFunc

Func GetInfo()

Global $accountname = GUICtrlRead($accntinput)

Global $password = GUICtrlRead($passinput)

Global $path = GUICtrlRead($pathinput)

Global $channel = GUICtrlRead($channelcombo)

Global $character = GUICtrlRead($characternumbercombo)

EndFunc

Func Updater()

Run($path)

WinWaitActive("www.roseonline.com")

$flag = 0

While $flag = 0

$coords = PixelSearch(264, 567, 588, 599, 0xFEFFB9)

If $coords = @error Then

$flag = 0

Else

$flag = 1

EndIf

WEnd

Sleep(200)

MouseClick("left", $coords[0], $coords[1], 2)

EndFunc

Func Login()

WinWaitActive("clientWND")

$flag2 = 0

While $flag2 = 0

$yay = PixelSearch(700, 300, 800, 400, 0x332211)

If $yay = @error Then

$flag2 = 0

Else

$flag2 = 1

EndIf

WEnd

Send($accountname)

Sleep(500)

Send("{TAB}")

Sleep(500)

Send($password)

SLeep(500)

Send("{ENTER}")

Sleep(10000)

$errorcheck1 = PixelSearch(500, 320, 540, 340, 0x52848C)

If $errorcheck1 = @error Then

Return 1

Else

MsgBox(0, "Error 101", "You Entered Wrong Password or Username")

Exit 0

EndIf

EndFunc

Func Finish()

If $channel = 1 Then

MouseClick("left",812, 345)

ElseIf $channel = 2 Then

MouseClick("left", 775, 358)

ElseIf $channel = 3 Then

MouseClick("left", 785, 374)

EndIf

$flag3 = 0

WHile $flag3 = 0

MouseClick("left", 976, 327, 2, 1)

Sleep(2000)

$checkifexceeded = PixelSearch(550, 360, 570, 370, 0x94D6E7)

If $checkifexceeded = @error Then

  If $character = 1 Then

  ElseIf $character = 2 Then

  ElseIf $character = 3 Then

  ElseIf $character = 4 Then

  ElseIf $character = 5 Then

  EndIf

Else

  MouseClick("left", 510, 371, 1, 1)

EndIf

WEnd

EndFunc

[megahyperion]

Oh no hes got all your info now

Haha just kidding I dont see anything wrong with it.

[megahyperion]

This could be changed though

$directoryofrose = FileOpenDialog("ROSE Directory", "C:\Program Files\Triggersoft\ROSE Online", "All(*)")

To this

$directoryofrose = FileOpenDialog("ROSE Directory", "@ProgramFilesDir &"\Triggersoft\ROSE Online", "All(*)")

Now it will pickup the game file even if its in D: or whatever other drive.

But it would still need to be in programfiles. I dont know how to find files that arent in a macro'd directory on a different hard drive, maybe I will ask someday

[CyberSlug]

Source code looks fine to me.

The remaining issue of trust is whether this code *really* is the code to the program.... If you are paranoid, you could compile this code with AutoIt yourself and run it.

[Laughing Man]

That's what I was wondering. That's why I asked you guys to take a look at it first . So I compiled it and ran it. It did what it was suppose to do..that is until an error popped up. Something about my video card drivers.. *Shrugs*. The program froze up at that point.