Advertisement
Guest User

dell

a guest
Oct 23rd, 2014
946
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
C 9.35 KB | None | 0 0
  1. /*
  2.  
  3. DELL service tag: DELLSUX-1F66 password: qHXaL0ntli6Gu4c0 (md5 60e11d9c76f323979b7512d4c4b3b0b9)
  4. DELL service tag: ABCDEFG-1D3B password: xvn0qEeftqyrkG52 (md5 fca82504b3b1be2584c5c1850fbb7f09)
  5. DELL service tag: NOSOUP4-3A5B password: zvd97y9h         (md5 de97a8c9794cbac3e5ede9e5bf284553)
  6.  
  7. HD Code: #**6248F05NS-1D3B password: ID3JQTF7Ja0w92Wq     (md5 cdeb8939ffb1d1230e1f6d0bf89982a7)
  8.  
  9. */
  10.  
  11. #include <stdio.h>
  12. #include <string.h>
  13. #include <time.h>
  14.  
  15. #define mystr "My own utility. Copyright (C) 2007-2010 hpgl, Russia"
  16.  
  17. #define allow595B
  18. #define allowA95B
  19. #define allow2A7B
  20.  
  21. #define fSVCTAG 0
  22. #define fHDDSN 1
  23. #define fHDDold 2
  24. #define t595B 0
  25. #define tD35B 1
  26. #define tA95B 2
  27. #define t2A7B 3
  28.  
  29. #ifdef allow595B
  30. #define f595B
  31. #endif
  32. #ifdef allowA95B
  33. #define f595B
  34. #endif
  35. #ifdef allow2A7B
  36. #define f595B
  37. #endif
  38.  
  39. char bSuffix[]="595BD35BA95B2A7B";
  40.  
  41. char scancods[]="\00\0331234567890-=\010\011qwertyuiop[]\015\377asdfghjkl;'`\377\\zxcvbnm,./";
  42. char encscans[]={0x05,0x10,0x13,0x09,0x32,0x03,0x25,0x11,0x1F,0x17,0x06,0x15, \
  43.                  0x30,0x19,0x26,0x22,0x0A,0x02,0x2C,0x2F,0x16,0x14,0x07,0x18, \
  44.                  0x24,0x23,0x31,0x20,0x1E,0x08,0x2D,0x21,0x04,0x0B,0x12,0x2E};
  45.  
  46. #ifdef allow2A7B
  47. char chartabl2A7B[72]="012345679abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ0";
  48. #endif
  49.  
  50. unsigned int MD5magic[64]={
  51. 0xd76aa478, 0xe8c7b756, 0x242070db, 0xc1bdceee,
  52. 0xf57c0faf, 0x4787c62a, 0xa8304613, 0xfd469501,
  53. 0x698098d8, 0x8b44f7af, 0xffff5bb1, 0x895cd7be,
  54. 0x6b901122, 0xfd987193, 0xa679438e, 0x49b40821,
  55. 0xf61e2562, 0xc040b340, 0x265e5a51, 0xe9b6c7aa,
  56. 0xd62f105d, 0x02441453, 0xd8a1e681, 0xe7d3fbc8,
  57. 0x21e1cde6, 0xc33707d6, 0xf4d50d87, 0x455a14ed,
  58. 0xa9e3e905, 0xfcefa3f8, 0x676f02d9, 0x8d2a4c8a,
  59. 0xfffa3942, 0x8771f681, 0x6d9d6122, 0xfde5380c,
  60. 0xa4beea44, 0x4bdecfa9, 0xf6bb4b60, 0xbebfbc70,
  61. 0x289b7ec6, 0xeaa127fa, 0xd4ef3085, 0x4881d05,
  62. 0xd9d4d039, 0xe6db99e5, 0x1fa27cf8, 0xc4ac5665,
  63. 0xf4292244, 0x432aff97, 0xab9423a7, 0xfc93a039,
  64. 0x655b59c3, 0x8f0ccc92, 0xffeff47d, 0x85845dd1,
  65. 0x6fa87e4f, 0xfe2ce6e0, 0xa3014314, 0x4e0811a1,
  66. 0xf7537e82, 0xbd3af235, 0x2ad7d2bb, 0xeb86d391};
  67.  
  68. unsigned char inData[23],outData[16];
  69. char buf1output[32], buf1input[20];
  70. char bug4;
  71.  
  72. void calcsuffix(char bfunc, char btype, char *outbuf);
  73.  
  74. void initData(void) {
  75.     *(int *)(&outData[0]) =0x67452301;
  76.     *(int *)(&outData[4]) =0xEFCDAB89;
  77.     *(int *)(&outData[8]) =0x98BADCFE;
  78.     *(int *)(&outData[12])=0x10325476;
  79. }
  80.  
  81. typedef int (encfuncT1) (int num1, int num2, int num3);
  82.  
  83. #ifdef f595B
  84. int enc0F2(int num1, int num2, int num3) {return (((~num3 ^ num2) & num1) ^ ~num3);}
  85. int enc0F4(int num1, int num2, int num3) {return (( ~num2 ^ num1) ^ num3); }
  86. int enc0F5(int num1, int num2, int num3) {return (( ~num1 | ~num3) ^ num2); }
  87. #endif
  88. int enc1F2(int num1, int num2, int num3) {return ((( num3 ^ num2) & num1) ^ num3);}
  89. int enc1F4(int num1, int num2, int num3) {return (( num2 ^ num1) ^ num3); }
  90. int enc1F5(int num1, int num2, int num3) {return (( num1 | ~num3) ^ num2); }
  91. int encF3 (int num1, int num2, int num3) {return ((( num1 ^ num2) & num3) ^ num2);}
  92.  
  93. typedef int (encfuncT2)(encfuncT1 func, int num1, int num2, int num3, int key);
  94.  
  95. int enc1F1 (encfuncT1 func, int num1, int num2, int num3, int key)
  96. {
  97.     return func(num1,num2,num3)+key;
  98. }
  99.  
  100. #ifdef f595B
  101. int enc0F1 (encfuncT1 func, int num1, int num2, int num3, int key)
  102. {
  103.     return func(num1,num2,num3)-key;
  104. }
  105. #endif
  106.  
  107. unsigned int rol(unsigned int t, int bitsrot)
  108. {
  109.     return (t >> (32-bitsrot)) | (t << bitsrot);
  110. }
  111.  
  112. void blockEncodeF(int *outdata, int *encblock, encfuncT2 func1,
  113.                   encfuncT1 func2, encfuncT1 func3, encfuncT1 func4, encfuncT1 func5 )
  114. {
  115.     char S[4][4] = {{ 7, 12, 17, 22 },{ 5, 9, 14, 20 },{ 4, 11, 16, 23 },{ 6, 10, 15, 21 }};
  116.     int A,B,C,D,t,i;
  117.  
  118.     A=outdata[0];
  119.     B=outdata[1];
  120.     C=outdata[2];
  121.     D=outdata[3];
  122.  
  123.     for (i=0;i<64;i++) {        t=MD5magic[i];      switch (i>>4) {
  124.             case 0: t=A+func1(func2,B,C,D, t+encblock[(i) & 15]); break;
  125.             case 1: t=A+func1(func3,B,C,D, t+encblock[(i*5+1) & 15]); break;
  126.             case 2: t=A+func1(func4,B,C,D, t+encblock[(i*3+5) & 15]); break;
  127.             case 3: t=A+func1(func5,B,C,D, t+encblock[(i*7) & 15]); break;
  128.         }
  129.         A=D; D=C; C=B; B+=rol(t,S[i>>4][i&3]);
  130.     };
  131.  
  132.     outdata[0]+=A;
  133.     outdata[1]+=B;
  134.     outdata[2]+=C;
  135.     outdata[3]+=D;
  136. }
  137.  
  138. void blockEncode(char *outdata, int *encblock, char btype) {
  139.     if (btype==tD35B)
  140.         blockEncodeF((int *)outdata,encblock,enc1F1,enc1F2,encF3,enc1F4,enc1F5);
  141. #ifdef f595B
  142.     else
  143.         blockEncodeF((int *)outdata,encblock,enc0F1,enc0F2,encF3,enc0F4,enc0F5);
  144. #endif
  145. }
  146.  
  147. void encode(char *inbuf,int cnt,char btype) {
  148.     int encBlock[16];
  149.     char *ptr;
  150.     initData();
  151.     memcpy(encBlock,inbuf,cnt);
  152.     ptr=&((char *)encBlock)[cnt];
  153.     *ptr++=0x80;
  154.     memset(ptr,0,64-1-cnt);
  155.     encBlock[16-2]=((unsigned int)cnt << 3);
  156.     blockEncode(outData,encBlock,btype);
  157. }
  158.  
  159. void psw(char bfunc, char btype, char *outbuf) {
  160.     int cnt,i,lenpsw,r;
  161.     if (bfunc==fHDDold) {
  162.         memcpy(inData,buf1input,11);
  163. //      calcsuffix(bfunc,btype,outbuf);
  164.         for (cnt=0;cnt<8;cnt++)             outbuf[cnt]= scancods[ outbuf[cnt] ];   } else {        memset(inData,0,sizeof(inData));        if (bfunc==fSVCTAG) cnt=7;      else cnt=11;        if ((bfunc==fHDDSN) && (btype==tA95B))          memcpy(inData,&buf1input[3],cnt-3);         else            memcpy(inData,buf1input,cnt);       if (btype==t595B) memcpy(&inData[cnt],&bSuffix[0],4); else      if (btype==tD35B) memcpy(&inData[cnt],&bSuffix[4],4); else      if (btype==tA95B) memcpy(&inData[cnt],&bSuffix[0],4); else      if (btype==t2A7B) memcpy(&inData[cnt],&bSuffix[12],4);      cnt += 4;       inData[cnt] = inData[4] & 0x1F;         inData[cnt+1] = ((inData[4] >> 5) | (((inData[3] >> 5) | (inData[3] << 3)) & 0xF1) & 0x1F);         inData[cnt+2] = ((inData[3] >> 2) & 0x1F);
  165.         inData[cnt+3] = (inData[3] >> 7) | ((inData[2] << 1) & 0x1F);       inData[cnt+4] = (inData[2] >> 4) | ((inData[1] << 4) & 0x1F);       inData[cnt+5] = (inData[1] >> 1) & 0x1F;
  166.         inData[cnt+6] = (inData[1] >> 6) | ((inData[0] << 2) & 0x1F);       inData[cnt+7] = (inData[0] >> 3) & 0x1F;
  167.         for (i=cnt;i<8+cnt;i++) {
  168.             r = 0xAA;
  169.             if (inData[i] & 1)
  170.                 r ^= inData[4];
  171.             if (inData[i] & 2)
  172.                 r ^= inData[3];
  173.             if (inData[i] & 4)
  174.                 r ^= inData[2];
  175.             if (inData[i] & 8)
  176.                 r ^= inData[1];
  177.             if (inData[i] & 16)
  178.                 r ^= inData[0];
  179.             inData[i] = encscans[r % sizeof(encscans)];
  180.         }
  181.         cnt = 23;
  182.         encode(inData,cnt,btype);
  183.         r = outData[0] % 9;
  184.         lenpsw = 0;
  185.         for (cnt=0;cnt<16;cnt++) {
  186.             if ((r <= cnt) && (lenpsw<8)) {                 buf1output[lenpsw++] = scancods[encscans[outData[cnt] % sizeof(encscans)]];             }       }   } } int main(int argc, char *argv[]) {  unsigned char len,len1,bfunc,eol=1,echo=0, *minus,s2[20];   signed char btype; int argn=0;  if (argc>1)
  187.         echo=1;
  188.  
  189.     if (!echo)
  190.         fputs("" mystr "\n" \
  191.           "Short service tag should be right padded with '*' up to length 7 chars\n" \
  192.           "HDD serial number is right 11 chars from real HDDSerNum left padded with '*'\n" \
  193.           "Some BIOSes has left pad HDD serial number with spaces instead '*'\n",stdout);
  194.  
  195.     while (!feof(stdin)) {
  196.         if ((argc<=1) && argn) break;       fputs("Input: #",stdout);       if (argc>1) {
  197.             strncpy(buf1input,argv[++argn],sizeof(buf1input));argc--;
  198.         }
  199.         else {
  200.             if (!eol) while (!feof(stdin) && (fgetc(stdin)!='\n')); eol=0;
  201.             if (fgets(buf1input,16+1+1,stdin)==NULL) {
  202.                 if (echo) fputs("\n",stdout);
  203.                 break;
  204.             }
  205.         }
  206.         len=strlen(buf1input);
  207.         if (len && (buf1input[len-1]=='\n')) {len--;eol=1;buf1input[len]=0;}
  208.         if (echo) {fputs(buf1input,stdout);fputs("\n",stdout);}
  209.         minus=strchr(buf1input,'-');
  210.         if (len==11) {
  211.             if (minus!=NULL) {
  212.                 fputs("- Incorrect input\n",stdout);
  213.                 continue;
  214.             }
  215.             bfunc=fHDDold;
  216.             fputs("By HDD serial number for older BIOS: ",stdout);
  217.         } else {
  218.             if (len==0) break;
  219.             if (minus==NULL) {
  220.                 fputs("- No BIOS type found in input string, must be followed by -595B and other registered\n",stdout);
  221.                 continue;
  222.             }
  223.             len1=minus-(unsigned char*)buf1input;
  224.  
  225.             btype=-1;
  226. #ifdef allow595B
  227.             if (strncmp(&buf1input[len1+1],&bSuffix[0],4)==0) btype=t595B;
  228.             else
  229. #endif
  230.             if (strncmp(&buf1input[len1+1],&bSuffix[4],4)==0) btype=tD35B;
  231.             else
  232. #ifdef allowA95B
  233.             if (strncmp(&buf1input[len1+1],&bSuffix[8],4)==0) btype=tA95B;
  234.             else
  235. #endif
  236. #ifdef allow2A7B
  237.             if (strncmp(&buf1input[len1+1],&bSuffix[12],4)==0) btype=t2A7B;
  238. #endif
  239.             if (btype<0) {
  240.                 fputs("- Invalid service tag in input string, allowed only -D35B and other registered\n",stdout);
  241.                 continue;
  242.             }
  243.             struct tm *time1; time_t timer1=time(NULL);
  244.             time1=gmtime(&timer1);
  245.             strftime(s2,sizeof(s2),"%d.%m.%Y %H:%M",time1);
  246.             fputs(s2,stdout);
  247.             fputs(" DELL ",stdout);
  248.  
  249.             if (len1==7) {
  250.                 bfunc=fSVCTAG;
  251.                 fputs("service tag: ",stdout);
  252.                 fputs(buf1input,stdout);
  253.             } else
  254.             if (len1==11) {
  255.                 bfunc=fHDDSN;
  256.                 fputs("HDD serial number: ",stdout);
  257.                 fputs(buf1input,stdout);
  258.             }
  259.             else {
  260.                 fputs("- Incorrect input, must be 7 chars service tag or 11 chars HDD serial number\n",stdout);
  261.                 continue;
  262.             }
  263.         }
  264.         psw(bfunc,btype,buf1output);
  265.         fputs(" password: ",stdout);
  266.         fputs(buf1output,stdout);
  267.         if (bug4) fputs(" !bug4 warning - password may not work!",stdout);
  268.  
  269.         if (btype==t595B) if (bfunc==fSVCTAG) { //to check if A95B bug
  270.             char mpw1[20];
  271.             strcpy(mpw1,buf1output);
  272.             psw(bfunc,tA95B,buf1output);
  273.             if (strcmp(mpw1,buf1output)!=0) {
  274.                 fputs(" passwordA95B: ",stdout);
  275.                 fputs(buf1output,stdout);
  276.             }
  277.         }
  278.         fputs("\n",stdout);
  279.     }
  280.     return 0;
  281. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement