Prev: icanhaz.cnt 1-2-1 baby!
Next: How to tell if a program compiled as 32-bit or 64-bit? (Windows Vista 64)
From: swinfo on 23 Oct 2009 17:10
The problem is a file text crypted.
Every row of the file is composed of a name and a number.
I need a function to decode and recode.

The first ten rows of the file are :

op|p��q+�0DAA@C?
ppsntv~�u0D@;<=?@;
pp~l~veUY`0B@;<=?
PPb_M0D@;<=?
pwqm{�}3@<=?@;
Pcemq{�qwqo2DC<=?@
qptz�0D@;<=?
qptz�?2E;<=?@
QPTZa(a)2E;<=?@
QT0WaPPB.>B?@;<=

Here is the dump (hex)

00000000: 6F 70 7C 70 7F 81 81 71 2B 83 30 44 41 41 40 43 op|p��q+�0DAA@C
00000010: 3F 0D 0A 70 70 73 6E 74 76 7E 84 7F 75 30 44 40 ?..ppsntv~�u0D@
00000020: 3B 3C 3D 3F 40 3B 0D 0A 70 70 7E 6C 7E 76 65 55 ;<=?@;..pp~l~veU
00000030: 59 60 30 42 40 3B 3C 3D 3F 0D 0A 50 50 62 5F 4D Y`0B@;<=?..PPb_M
00000040: 30 44 40 3B 3C 3D 3F 0D 0A 70 77 71 6D 7B 82 7D 0D@;<=?..pwqm{�}
00000050: 33 40 3C 3D 3F 40 3B 0D 0A 50 63 65 6D 71 7B 83 3@<=?@;..Pcemq{�
00000060: 71 77 71 6F 32 44 43 3C 3D 3F 40 0D 0A 71 70 74 qwqo2DC<=?@..qpt
00000070: 7A 81 30 44 40 3B 3C 3D 3F 0D 0A 71 70 74 7A 81 z�0D@;<=?..qptz�
00000080: 3F 32 45 3B 3C 3D 3F 40 0D 0A 51 50 54 5A 61 40 ?2E;<=?@..QPTZa@
00000090: 32 45 3B 3C 3D 3F 40 0D 0A 51 54 30 57 61 50 50 2E;<=?@..QT0WaPP

I've a screen capture of the decoded lines :

1 �balestra w � 516,460
2 �cacchiotti � 50,000,000
3 �canariVENT � 300,000
4 �CARTA � 500,000
5 �chaboun � 500,000
6 �CTUbentaleb � 480,000
7 �dadou � 500,000
8 �dadou2 � 500,000
9 �DADOU3 � 500,000
10 �DE LUCA2 � 2,500,000

The numbers 1 2 3 ... character '�' ',' and spaces are added by the
program when formatting the output

The program was written for old dos machine in 1994

The problem is that who makes the program is dead in an accident.
We don't find the sources and we can make only screen dump from an old
machine . With some trial and error a found that the last 7 char are about
the number and the lenght-7 char are the name coded.
the name is code by a function like (ASCCI_code_char+position+1) but i
don't find the relationship with thr number

example line 3

crypted (HEX)
70 70 7E 6C 7E 76 65 55 59 60 30 42 40 3B 3C 3D 3F
p p ~ l ~ v e U Y ` 0 B @ ; < = ?

decrypted (HEX)
63 61 6E 61 72 69 56 45 4E 54 ? ? ? ? ? ? ?
c a n a r i V E N T 300000

Any help will be appreciated.

Thanks


--

questo articolo e` stato inviato via web dal servizio gratuito
http://www.newsland.it/news segnala gli abusi ad abuse(a)newsland.it


From: Donkey Hottie on 23 Oct 2009 17:21
24.10.2009 0:10, swinfo kirjoitti:
> The problem is a file text crypted.
> Every row of the file is composed of a name and a number.
> I need a function to decode and recode.
>
> The first ten rows of the file are :
>
> op|p��q+�0DAA@C?
> ppsntv~�u0D@;<=?@;
> pp~l~veUY`0B@;<=?
> PPb_M0D@;<=?
> pwqm{�}3@<=?@;
> Pcemq{�qwqo2DC<=?@
> qptz�0D@;<=?
> qptz�?2E;<=?@
> QPTZa(a)2E;<=?@
> QT0WaPPB.>B?@;<=
>
> Here is the dump (hex)
>
> 00000000: 6F 70 7C 70 7F 81 81 71 2B 83 30 44 41 41 40 43 op|p��q+�0DAA@C
> 00000010: 3F 0D 0A 70 70 73 6E 74 76 7E 84 7F 75 30 44 40 ?..ppsntv~�u0D@
> 00000020: 3B 3C 3D 3F 40 3B 0D 0A 70 70 7E 6C 7E 76 65 55 ;<=?@;..pp~l~veU
> 00000030: 59 60 30 42 40 3B 3C 3D 3F 0D 0A 50 50 62 5F 4D Y`0B@;<=?..PPb_M
> 00000040: 30 44 40 3B 3C 3D 3F 0D 0A 70 77 71 6D 7B 82 7D 0D@;<=?..pwqm{�}
> 00000050: 33 40 3C 3D 3F 40 3B 0D 0A 50 63 65 6D 71 7B 83 3@<=?@;..Pcemq{�
> 00000060: 71 77 71 6F 32 44 43 3C 3D 3F 40 0D 0A 71 70 74 qwqo2DC<=?@..qpt
> 00000070: 7A 81 30 44 40 3B 3C 3D 3F 0D 0A 71 70 74 7A 81 z�0D@;<=?..qptz�
> 00000080: 3F 32 45 3B 3C 3D 3F 40 0D 0A 51 50 54 5A 61 40 ?2E;<=?@..QPTZa@
> 00000090: 32 45 3B 3C 3D 3F 40 0D 0A 51 54 30 57 61 50 50 2E;<=?@..QT0WaPP
>
> I've a screen capture of the decoded lines :
>
> 1 �balestra w � 516,460
> 2 �cacchiotti � 50,000,000
> 3 �canariVENT � 300,000
> 4 �CARTA � 500,000
> 5 �chaboun � 500,000
> 6 �CTUbentaleb � 480,000
> 7 �dadou � 500,000
> 8 �dadou2 � 500,000
> 9 �DADOU3 � 500,000
> 10 �DE LUCA2 � 2,500,000
>
> The numbers 1 2 3 ... character '�' ',' and spaces are added by the
> program when formatting the output
>
> The program was written for old dos machine in 1994
>
> The problem is that who makes the program is dead in an accident.
> We don't find the sources and we can make only screen dump from an old
> machine . With some trial and error a found that the last 7 char are about
> the number and the lenght-7 char are the name coded.
> the name is code by a function like (ASCCI_code_char+position+1) but i
> don't find the relationship with thr number
>
> example line 3
>
> crypted (HEX)
> 70 70 7E 6C 7E 76 65 55 59 60 30 42 40 3B 3C 3D 3F
> p p ~ l ~ v e U Y ` 0 B @ ; < = ?
>
> decrypted (HEX)
> 63 61 6E 61 72 69 56 45 4E 54 ? ? ? ? ? ? ?
> c a n a r i V E N T 300000
>
> Any help will be appreciated.
>
> Thanks
>
>

Is this social engineering?

Why would I break that crypt just for fun? Offer me something better.


--
Are you making all this up as you go along?
From: swinfo on 23 Oct 2009 17:47
Donkey Hottie writes

> Is this social engineering?

No it's a real problem.

The prgram give an error "input wrong in module CONT address 0F51:CF31"
and this bug can't be correct because we don't have the souce formula.

This file is the input file for another program, and is over 20.000 rows

The idea is to make a program that makes the correct output.

Meanwhile i'm writing a new program but i need to convert the old data.

> Why would I break that crypt just for fun? Offer me something better.

What yuou mean?


Swinfo

--

questo articolo e` stato inviato via web dal servizio gratuito
http://www.newsland.it/news segnala gli abusi ad abuse(a)newsland.it


From: Pascal J. Bourguignon on 23 Oct 2009 17:52
swinfo(a)interfree.it (swinfo) writes:

> Donkey Hottie writes
>
>> Is this social engineering?
>
> No it's a real problem.
>
> The prgram give an error "input wrong in module CONT address 0F51:CF31"
> and this bug can't be correct because we don't have the souce formula.
>
> This file is the input file for another program, and is over 20.000 rows
>
> The idea is to make a program that makes the correct output.
>
> Meanwhile i'm writing a new program but i need to convert the old data.
>
>> Why would I break that crypt just for fun? Offer me something better.
>
> What yuou mean?

The usual solution is to make you pay for a full rewrite of the
application, and teach you a lesson in using GPL software instead of
proprietary.

Less ethical programmers would just make you pay for a full rewrite,
without the GPL lesson.

--
__Pascal Bourguignon__
From: rossum on 23 Oct 2009 18:12
On Fri, 23 Oct 2009 23:10:45 +0200, swinfo(a)interfree.it (swinfo)
wrote:

>The problem is a file text crypted.
>Every row of the file is composed of a name and a number.
>I need a function to decode and recode.
>
>The first ten rows of the file are :
>
>op|p??q+ƒ0DAA@C?
>ppsntv~„u0D@;<=?@;
>pp~l~veUY`0B@;<=?
>PPb_M0D@;<=?
>pwqm{‚}3@<=?@;
>Pcemq{ƒqwqo2DC<=?@
>qptz?0D@;<=?
>qptz??2E;<=?@
>QPTZa(a)2E;<=?@
>QT0WaPPB.>B?@;<=
>
>Here is the dump (hex)
>
>00000000: 6F 70 7C 70 7F 81 81 71 2B 83 30 44 41 41 40 43 op|p??q+ƒ0DAA@C
>00000010: 3F 0D 0A 70 70 73 6E 74 76 7E 84 7F 75 30 44 40 ?..ppsntv~„u0D@
>00000020: 3B 3C 3D 3F 40 3B 0D 0A 70 70 7E 6C 7E 76 65 55 ;<=?@;..pp~l~veU
>00000030: 59 60 30 42 40 3B 3C 3D 3F 0D 0A 50 50 62 5F 4D Y`0B@;<=?..PPb_M
>00000040: 30 44 40 3B 3C 3D 3F 0D 0A 70 77 71 6D 7B 82 7D 0D@;<=?..pwqm{‚}
>00000050: 33 40 3C 3D 3F 40 3B 0D 0A 50 63 65 6D 71 7B 83 3@<=?@;..Pcemq{ƒ
>00000060: 71 77 71 6F 32 44 43 3C 3D 3F 40 0D 0A 71 70 74 qwqo2DC<=?@..qpt
>00000070: 7A 81 30 44 40 3B 3C 3D 3F 0D 0A 71 70 74 7A 81 z?0D@;<=?..qptz?
>00000080: 3F 32 45 3B 3C 3D 3F 40 0D 0A 51 50 54 5A 61 40 ?2E;<=?@..QPTZa@
>00000090: 32 45 3B 3C 3D 3F 40 0D 0A 51 54 30 57 61 50 50 2E;<=?@..QT0WaPP
>
>I've a screen capture of the decoded lines :
>
>1 ¦balestra w ¦ 516,460
>2 ¦cacchiotti ¦ 50,000,000
>3 ¦canariVENT ¦ 300,000
>4 ¦CARTA ¦ 500,000
>5 ¦chaboun ¦ 500,000
>6 ¦CTUbentaleb ¦ 480,000
>7 ¦dadou ¦ 500,000
>8 ¦dadou2 ¦ 500,000
>9 ¦DADOU3 ¦ 500,000
>10 ¦DE LUCA2 ¦ 2,500,000
>
>The numbers 1 2 3 ... character '¦' ',' and spaces are added by the
>program when formatting the output
>
>The program was written for old dos machine in 1994
>
>The problem is that who makes the program is dead in an accident.
>We don't find the sources and we can make only screen dump from an old
>machine . With some trial and error a found that the last 7 char are about
>the number and the lenght-7 char are the name coded.
>the name is code by a function like (ASCCI_code_char+position+1) but i
>don't find the relationship with thr number
>
>example line 3
>
>crypted (HEX)
>70 70 7E 6C 7E 76 65 55 59 60 30 42 40 3B 3C 3D 3F
> p p ~ l ~ v e U Y ` 0 B @ ; < = ?
>
>decrypted (HEX)
>63 61 6E 61 72 69 56 45 4E 54 ? ? ? ? ? ? ?
> c a n a r i V E N T 300000
>
>Any help will be appreciated.
>
>Thanks
Do you know what language the original source was written in? Find a
decompiler and decompile the executable file. That will help you
understand the code. At the very least you could use an assembler to
read the executable and work out what the program is doing.

Have you tried the numbers in both big-endian and little endian?

I would strongly suggest a rewrite into a secure cypher. AES is the
obvious choice.

Have you tried redirecting screen output on the old machine to disk
and extracting the data that way?

rossum

 |  Next  |  Last
Pages: 1 2
Prev: icanhaz.cnt 1-2-1 baby!
Next: How to tell if a program compiled as 32-bit or 64-bit? (Windows Vista 64)