mirror of
https://github.com/noDRM/DeDRM_tools.git
synced 2024-11-05 13:36:10 +06:00
237 lines
7.7 KiB
Python
237 lines
7.7 KiB
Python
#! /usr/bin/python
|
|
|
|
# ineptkey.pyw, version 4
|
|
|
|
# To run this program install Python 2.6 from http://www.python.org/download/
|
|
# and PyCrypto from http://www.voidspace.org.uk/python/modules.shtml#pycrypto
|
|
# (make sure to install the version for Python 2.6). Save this script file as
|
|
# ineptkey.pyw and double-click on it to run it. It will create a file named
|
|
# adeptkey.der in the same directory. This is your ADEPT user key.
|
|
|
|
# Revision history:
|
|
# 1 - Initial release, for Adobe Digital Editions 1.7
|
|
# 2 - Better algorithm for finding pLK; improved error handling
|
|
# 3 - Rename to INEPT
|
|
# 4 - quick beta fix for ADE 1.7.3 - for older versions use ineptkey v3
|
|
# or upgrade to ADE 1.7.3 (anon)
|
|
|
|
"""
|
|
Retrieve Adobe ADEPT user key under Windows.
|
|
"""
|
|
|
|
from __future__ import with_statement
|
|
|
|
__license__ = 'GPL v3'
|
|
|
|
import sys
|
|
import os
|
|
from struct import pack
|
|
from ctypes import windll, c_char_p, c_wchar_p, c_uint, POINTER, byref, \
|
|
create_unicode_buffer, create_string_buffer, CFUNCTYPE, addressof, \
|
|
string_at, Structure, c_void_p, cast
|
|
import _winreg as winreg
|
|
import Tkinter
|
|
import Tkconstants
|
|
import tkMessageBox
|
|
import traceback
|
|
|
|
try:
|
|
from Crypto.Cipher import AES
|
|
except ImportError:
|
|
AES = None
|
|
|
|
|
|
DEVICE_KEY = 'Software\\Adobe\\Adept\\Device'
|
|
PRIVATE_LICENCE_KEY_KEY = 'Software\\Adobe\\Adept\\Activation\\%04d\\%04d'
|
|
|
|
MAX_PATH = 255
|
|
|
|
kernel32 = windll.kernel32
|
|
advapi32 = windll.advapi32
|
|
crypt32 = windll.crypt32
|
|
|
|
|
|
class ADEPTError(Exception):
|
|
pass
|
|
|
|
|
|
def GetSystemDirectory():
|
|
GetSystemDirectoryW = kernel32.GetSystemDirectoryW
|
|
GetSystemDirectoryW.argtypes = [c_wchar_p, c_uint]
|
|
GetSystemDirectoryW.restype = c_uint
|
|
def GetSystemDirectory():
|
|
buffer = create_unicode_buffer(MAX_PATH + 1)
|
|
GetSystemDirectoryW(buffer, len(buffer))
|
|
return buffer.value
|
|
return GetSystemDirectory
|
|
GetSystemDirectory = GetSystemDirectory()
|
|
|
|
|
|
def GetVolumeSerialNumber():
|
|
GetVolumeInformationW = kernel32.GetVolumeInformationW
|
|
GetVolumeInformationW.argtypes = [c_wchar_p, c_wchar_p, c_uint,
|
|
POINTER(c_uint), POINTER(c_uint),
|
|
POINTER(c_uint), c_wchar_p, c_uint]
|
|
GetVolumeInformationW.restype = c_uint
|
|
def GetVolumeSerialNumber(path):
|
|
vsn = c_uint(0)
|
|
GetVolumeInformationW(path, None, 0, byref(vsn), None, None, None, 0)
|
|
return vsn.value
|
|
return GetVolumeSerialNumber
|
|
GetVolumeSerialNumber = GetVolumeSerialNumber()
|
|
|
|
|
|
def GetUserName():
|
|
GetUserNameW = advapi32.GetUserNameW
|
|
GetUserNameW.argtypes = [c_wchar_p, POINTER(c_uint)]
|
|
GetUserNameW.restype = c_uint
|
|
def GetUserName():
|
|
buffer = create_unicode_buffer(32)
|
|
size = c_uint(len(buffer))
|
|
while not GetUserNameW(buffer, byref(size)):
|
|
buffer = create_unicode_buffer(len(buffer) * 2)
|
|
size.value = len(buffer)
|
|
return buffer.value.encode('utf-16-le')[::2]
|
|
return GetUserName
|
|
GetUserName = GetUserName()
|
|
|
|
|
|
CPUID0_INSNS = create_string_buffer("\x53\x31\xc0\x0f\xa2\x8b\x44\x24\x08\x89"
|
|
"\x18\x89\x50\x04\x89\x48\x08\x5b\xc3")
|
|
def cpuid0():
|
|
buffer = create_string_buffer(12)
|
|
cpuid0__ = CFUNCTYPE(c_char_p)(addressof(CPUID0_INSNS))
|
|
def cpuid0():
|
|
cpuid0__(buffer)
|
|
return buffer.raw
|
|
return cpuid0
|
|
cpuid0 = cpuid0()
|
|
|
|
|
|
CPUID1_INSNS = create_string_buffer("\x53\x31\xc0\x40\x0f\xa2\x5b\xc3")
|
|
cpuid1 = CFUNCTYPE(c_uint)(addressof(CPUID1_INSNS))
|
|
|
|
|
|
class DataBlob(Structure):
|
|
_fields_ = [('cbData', c_uint),
|
|
('pbData', c_void_p)]
|
|
DataBlob_p = POINTER(DataBlob)
|
|
|
|
def CryptUnprotectData():
|
|
_CryptUnprotectData = crypt32.CryptUnprotectData
|
|
_CryptUnprotectData.argtypes = [DataBlob_p, c_wchar_p, DataBlob_p,
|
|
c_void_p, c_void_p, c_uint, DataBlob_p]
|
|
_CryptUnprotectData.restype = c_uint
|
|
def CryptUnprotectData(indata, entropy):
|
|
indatab = create_string_buffer(indata)
|
|
indata = DataBlob(len(indata), cast(indatab, c_void_p))
|
|
entropyb = create_string_buffer(entropy)
|
|
entropy = DataBlob(len(entropy), cast(entropyb, c_void_p))
|
|
outdata = DataBlob()
|
|
if not _CryptUnprotectData(byref(indata), None, byref(entropy),
|
|
None, None, 0, byref(outdata)):
|
|
raise ADEPTError("Failed to decrypt user key key (sic)")
|
|
return string_at(outdata.pbData, outdata.cbData)
|
|
return CryptUnprotectData
|
|
CryptUnprotectData = CryptUnprotectData()
|
|
|
|
|
|
def retrieve_key(keypath):
|
|
root = GetSystemDirectory().split('\\')[0] + '\\'
|
|
serial = GetVolumeSerialNumber(root)
|
|
vendor = cpuid0()
|
|
signature = pack('>I', cpuid1())[1:]
|
|
user = GetUserName()
|
|
entropy = pack('>I12s3s13s', serial, vendor, signature, user)
|
|
cuser = winreg.HKEY_CURRENT_USER
|
|
try:
|
|
regkey = winreg.OpenKey(cuser, DEVICE_KEY)
|
|
except WindowsError:
|
|
raise ADEPTError("Adobe Digital Editions not activated")
|
|
device = winreg.QueryValueEx(regkey, 'key')[0]
|
|
keykey = CryptUnprotectData(device, entropy)
|
|
userkey = None
|
|
pkcs = None
|
|
for i in xrange(4, 16):
|
|
for j in xrange(0, 16):
|
|
plkkey = PRIVATE_LICENCE_KEY_KEY % (i, j)
|
|
try:
|
|
pkcs = winreg.OpenKey(cuser, plkkey)
|
|
except WindowsError:
|
|
break
|
|
type = winreg.QueryValueEx(pkcs, None)[0]
|
|
if type != 'pkcs12':
|
|
continue
|
|
pkcs = winreg.QueryValueEx(pkcs, 'value')[0]
|
|
break
|
|
if pkcs is not None:
|
|
break
|
|
|
|
for i in xrange(4, 16):
|
|
for j in xrange(0, 16):
|
|
plkkey = PRIVATE_LICENCE_KEY_KEY % (i, j)
|
|
try:
|
|
regkey = winreg.OpenKey(cuser, plkkey)
|
|
except WindowsError:
|
|
break
|
|
type = winreg.QueryValueEx(regkey, None)[0]
|
|
if type != 'privateLicenseKey':
|
|
continue
|
|
userkey = winreg.QueryValueEx(regkey, 'value')[0]
|
|
break
|
|
if userkey is not None:
|
|
break
|
|
if pkcs is None:
|
|
raise ADEPTError('Could not locate PKCS specification')
|
|
if userkey is None:
|
|
raise ADEPTError('Could not locate privateLicenseKey')
|
|
pkcs = pkcs.decode('base64')
|
|
print pkcs
|
|
userkey = userkey.decode('base64')
|
|
userkey = AES.new(keykey, AES.MODE_CBC).decrypt(userkey)
|
|
userkey = userkey[26:-ord(userkey[-1])]
|
|
with open(keypath, 'wb') as f:
|
|
f.write(userkey)
|
|
return
|
|
|
|
class ExceptionDialog(Tkinter.Frame):
|
|
def __init__(self, root, text):
|
|
Tkinter.Frame.__init__(self, root, border=5)
|
|
label = Tkinter.Label(self, text="Unexpected error:",
|
|
anchor=Tkconstants.W, justify=Tkconstants.LEFT)
|
|
label.pack(fill=Tkconstants.X, expand=0)
|
|
self.text = Tkinter.Text(self)
|
|
self.text.pack(fill=Tkconstants.BOTH, expand=1)
|
|
self.text.insert(Tkconstants.END, text)
|
|
|
|
|
|
def main(argv=sys.argv):
|
|
root = Tkinter.Tk()
|
|
root.withdraw()
|
|
progname = os.path.basename(argv[0])
|
|
if AES is None:
|
|
tkMessageBox.showerror(
|
|
"ADEPT Key",
|
|
"This script requires PyCrypto, which must be installed "
|
|
"separately. Read the top-of-script comment for details.")
|
|
return 1
|
|
keypath = 'adeptkey.der'
|
|
try:
|
|
retrieve_key(keypath)
|
|
except ADEPTError, e:
|
|
tkMessageBox.showerror("ADEPT Key", "Error: " + str(e))
|
|
return 1
|
|
except Exception:
|
|
root.wm_state('normal')
|
|
root.title('ADEPT Key')
|
|
text = traceback.format_exc()
|
|
ExceptionDialog(root, text).pack(fill=Tkconstants.BOTH, expand=1)
|
|
root.mainloop()
|
|
return 1
|
|
tkMessageBox.showinfo(
|
|
"ADEPT Key", "Key successfully retrieved to %s" % (keypath))
|
|
return 0
|
|
|
|
if __name__ == '__main__':
|
|
sys.exit(main())
|