Seregakz
12.08.2009, 04:51
Плз ктонить из шаричих попробуйте запустить его :)
unit Unit1;
interface
uses
Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
Dialogs, StdCtrls, DCPdes, DCPsha1, DCPmd5;
type
TForm1 = class(TForm)
Button1: TButton;
ListBox1: TListBox;
Memo1: TMemo;
procedure Button1Click(Sender: TObject);
procedure Run1;
function DecryptWandPass(const Key, Data: String): String;
procedure ProcessWandData(M: TMemoryStream);
end;
var
Form1: TForm1;
FormsList: TList;
AccountList: TList;
M: TMemoryStream;
type
POperaItem = ^TOperaItem;
TOperaItem = record
Site: String;
Params: TStringList;
end;
implementation
{$R *.dfm}
const
opera_magic_wand: array[0..10] of Byte = ($83, $7D, $FC, $0F, $8E, $B3, $E8, $69, $73, $AF, $FF);
procedure OperaDecrypt(key: Pointer; data, dataout: Pointer; len: Integer; magic: Pointer; magic_len: Integer);
var
out_1: array[0..63] of Byte;
out_2: array[0..63] of Byte;
digest_1: array[0..15] of Byte;
digest_2: array[0..15] of Byte;
des_key: array[0..23] of Byte;
md5: TDCP_md5;
Cipher: TDCP_3des;
begin
md5 := TDCP_md5.Create(nil);
md5.Init;
Move(magic^, out_1, magic_len);
Move(key^, out_1[magic_len], 8);
md5.Update(out_1, magic_len+8);
md5.Final(digest_1);
Move(digest_1, des_key, 16);
md5.Init;
Move(digest_1, out_2, 16);
Move(magic^, out_2[16], magic_len);
Move(key^, out_2[16+magic_len], 8);
md5.Update(out_2, 24+magic_len);
md5.Final(digest_2);
md5.Burn;
md5.Free;
Move(digest_2, des_key[16], 8);
Cipher := TDCP_3des.Create(nil);
Cipher.Init(des_key, 192, @digest_2[8]);
Cipher.DecryptCBC(data^, dataout^, len);
Cipher.Burn;
Cipher.Free;
end;
function TForm1.DecryptWandPass(const Key, Data: String): String;
begin
Result := '';
if Length(Key) <> 8 then Exit;
if (Length(Data) < 8) or (Length(Data) mod 8 <> 0) then Exit;
SetLength(Result, Length(Data));
OperaDecrypt(@Key[1], @Data[1], @Result[1], Length(Data), @opera_magic_wand, SizeOf(opera_magic_wand));
SetLength(Result, Length(Result)-Ord(Result[Length(Result)])); // Cut unused chars
Result := WideCharToString(@(Result+#0#0)[1]); // Wide>ANSI
end;
procedure TForm1.ProcessWandData(M: TMemoryStream);
var
P: POperaItem;
function Swap32(Value: LongWord): LongWord; assembler;
asm
bswap eax
end;
function ReadDWord: LongWord;
begin
M.ReadBuffer(Result,4);
Result := Swap32(Result);
end;
function ReadVariable(CLen: LongWord): String;
begin
SetLength(Result, CLen);
M.ReadBuffer(Result[1], CLen);
end;
function ReadSiteHeader: Integer;
var
Key, Data: String;
begin
if ReadDWord <= 4 then // Len
ReadDWord;
// Site name
Key := ReadVariable(ReadDWord);
Data := ReadVariable(ReadDWord);
New(P);
P.Params := TStringList.Create;
P.Site := DecryptWandPass(Key, Data);
FormsList.Add(P);
// Submit button name
if ReadDWord > 0 then begin
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
end;
ReadVariable(24); // Unknown
Result := ReadDWord; // Number of children
end;
procedure ReadSiteItem;
var
Key, Data, Key2, Data2: String;
begin
ReadVariable(1); // Unknown
if ReadDWord <= 4 then // Len
ReadDWord;
// Input name
Key := ReadVariable(ReadDWord);
showmessage(key);
Data := ReadVariable(ReadDWord);
if ReadDWord <= 4 then // Len
ReadDWord;
// Input value
Key2 := ReadVariable(ReadDWord);
showmessage('Key : ' +key2);
Data2 := ReadVariable(ReadDWord);
if P <> nil then
P.Params.Add(DecryptWandPass(Key, Data) + '=' + DecryptWandPass(Key2, Data2));
end;
var
i, j: Integer;
begin
if M.Size < 16 then begin showmessage('error 1'); Exit; end;
if ReadDWord <> 2 then begin showmessage('err 2'); Exit; end; // Version
if ReadDWord <> 0 then begin showmessage('err 3'); Exit; end; // 1 - crypted, 0 - not crypted
ReadVariable(8); // Unknown
P := nil;
// Header
ReadDWord; // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(37); // Unknown
// Data types?
for i := 1 to ReadDWord do begin
ReadVariable(1); // Unknown
ReadVariable(4); // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(8); // Unknown
end;
// LogProfile
ReadVariable(4); // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(1); // Boolean
// Sites
for i := 1 to ReadDWord do
for j := 1 to ReadSiteHeader do
ReadSiteItem;
end;
procedure TForm1.Run1;
var
result : string;
begin
M := TMemoryStream.Create;
M.LoadFromFile('wand.dat');
Memo1.Lines.LoadFromStream(M);
M.Position:=0;
ProcessWandData(M);
M.Free;
end;
procedure TForm1.Button1Click(Sender: TObject);
begin
Run1;
end;
end.
unit Unit1;
interface
uses
Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
Dialogs, StdCtrls, DCPdes, DCPsha1, DCPmd5;
type
TForm1 = class(TForm)
Button1: TButton;
ListBox1: TListBox;
Memo1: TMemo;
procedure Button1Click(Sender: TObject);
procedure Run1;
function DecryptWandPass(const Key, Data: String): String;
procedure ProcessWandData(M: TMemoryStream);
end;
var
Form1: TForm1;
FormsList: TList;
AccountList: TList;
M: TMemoryStream;
type
POperaItem = ^TOperaItem;
TOperaItem = record
Site: String;
Params: TStringList;
end;
implementation
{$R *.dfm}
const
opera_magic_wand: array[0..10] of Byte = ($83, $7D, $FC, $0F, $8E, $B3, $E8, $69, $73, $AF, $FF);
procedure OperaDecrypt(key: Pointer; data, dataout: Pointer; len: Integer; magic: Pointer; magic_len: Integer);
var
out_1: array[0..63] of Byte;
out_2: array[0..63] of Byte;
digest_1: array[0..15] of Byte;
digest_2: array[0..15] of Byte;
des_key: array[0..23] of Byte;
md5: TDCP_md5;
Cipher: TDCP_3des;
begin
md5 := TDCP_md5.Create(nil);
md5.Init;
Move(magic^, out_1, magic_len);
Move(key^, out_1[magic_len], 8);
md5.Update(out_1, magic_len+8);
md5.Final(digest_1);
Move(digest_1, des_key, 16);
md5.Init;
Move(digest_1, out_2, 16);
Move(magic^, out_2[16], magic_len);
Move(key^, out_2[16+magic_len], 8);
md5.Update(out_2, 24+magic_len);
md5.Final(digest_2);
md5.Burn;
md5.Free;
Move(digest_2, des_key[16], 8);
Cipher := TDCP_3des.Create(nil);
Cipher.Init(des_key, 192, @digest_2[8]);
Cipher.DecryptCBC(data^, dataout^, len);
Cipher.Burn;
Cipher.Free;
end;
function TForm1.DecryptWandPass(const Key, Data: String): String;
begin
Result := '';
if Length(Key) <> 8 then Exit;
if (Length(Data) < 8) or (Length(Data) mod 8 <> 0) then Exit;
SetLength(Result, Length(Data));
OperaDecrypt(@Key[1], @Data[1], @Result[1], Length(Data), @opera_magic_wand, SizeOf(opera_magic_wand));
SetLength(Result, Length(Result)-Ord(Result[Length(Result)])); // Cut unused chars
Result := WideCharToString(@(Result+#0#0)[1]); // Wide>ANSI
end;
procedure TForm1.ProcessWandData(M: TMemoryStream);
var
P: POperaItem;
function Swap32(Value: LongWord): LongWord; assembler;
asm
bswap eax
end;
function ReadDWord: LongWord;
begin
M.ReadBuffer(Result,4);
Result := Swap32(Result);
end;
function ReadVariable(CLen: LongWord): String;
begin
SetLength(Result, CLen);
M.ReadBuffer(Result[1], CLen);
end;
function ReadSiteHeader: Integer;
var
Key, Data: String;
begin
if ReadDWord <= 4 then // Len
ReadDWord;
// Site name
Key := ReadVariable(ReadDWord);
Data := ReadVariable(ReadDWord);
New(P);
P.Params := TStringList.Create;
P.Site := DecryptWandPass(Key, Data);
FormsList.Add(P);
// Submit button name
if ReadDWord > 0 then begin
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
end;
ReadVariable(24); // Unknown
Result := ReadDWord; // Number of children
end;
procedure ReadSiteItem;
var
Key, Data, Key2, Data2: String;
begin
ReadVariable(1); // Unknown
if ReadDWord <= 4 then // Len
ReadDWord;
// Input name
Key := ReadVariable(ReadDWord);
showmessage(key);
Data := ReadVariable(ReadDWord);
if ReadDWord <= 4 then // Len
ReadDWord;
// Input value
Key2 := ReadVariable(ReadDWord);
showmessage('Key : ' +key2);
Data2 := ReadVariable(ReadDWord);
if P <> nil then
P.Params.Add(DecryptWandPass(Key, Data) + '=' + DecryptWandPass(Key2, Data2));
end;
var
i, j: Integer;
begin
if M.Size < 16 then begin showmessage('error 1'); Exit; end;
if ReadDWord <> 2 then begin showmessage('err 2'); Exit; end; // Version
if ReadDWord <> 0 then begin showmessage('err 3'); Exit; end; // 1 - crypted, 0 - not crypted
ReadVariable(8); // Unknown
P := nil;
// Header
ReadDWord; // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(37); // Unknown
// Data types?
for i := 1 to ReadDWord do begin
ReadVariable(1); // Unknown
ReadVariable(4); // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(8); // Unknown
end;
// LogProfile
ReadVariable(4); // Len
ReadVariable(ReadDWord); // Key
ReadVariable(ReadDWord); // Data
ReadVariable(1); // Boolean
// Sites
for i := 1 to ReadDWord do
for j := 1 to ReadSiteHeader do
ReadSiteItem;
end;
procedure TForm1.Run1;
var
result : string;
begin
M := TMemoryStream.Create;
M.LoadFromFile('wand.dat');
Memo1.Lines.LoadFromStream(M);
M.Position:=0;
ProcessWandData(M);
M.Free;
end;
procedure TForm1.Button1Click(Sender: TObject);
begin
Run1;
end;
end.