Hi everybody,

I'm trying to reverse-engineer a data-format from an audio library software.

I got some files with Text encoded in the File and i am trying to decode it, so i can read the
data into my own app.

Attached you will find a pdf-file with 2 Strings in cleartext and encoded. As you can see
the same letter is encoded differently depending on the position in the text. It seems this is not
an encryption because i can increase or decrease a value and only the according letter changes.

Disassembling the App is not an option for me, because it is protected with hasp-envelope
and i am not able to unpack it (I suck at unpacking, but i have a working dongle-emulator though).

So i am hoping for someone of you, who knows this text-encoding or can help me to decode it.


Many thanks in advance

Windoze

4e1f_30.01.2008_CRACKLAB.rU.tgz - NMEN Chunk.pdf

| Сообщение посчитали полезным:

Hi.

At brief look this seems to be some block cipher (16 or 32 bit, ECB mode).
Try to encode some regular data like 'AAAAAAAAA' 'xxxxxxxx' and post it here, not as an unusable PDF table but:

plaintext_: 3C00 4400
ciphertext: CB96 59DD


And please give exact info about the dongle, as it may provide own cryptoAPI.

P.S. An option to disassembly is to dump the process first.

| Сообщение посчитали полезным:

Hi,

Unfortunately I can't encode any data because the app i have, which creates audio files for the app, is using another file-format where all infos are plain-text (i need to read this encrypted format though, because i have about 40000 files with this encoding). I can only decode this data with the app (it must be between <something></something> tags or the app will ignore it). But i wrote the two strings i have into a text file with the format you suggested...

The Dongle is a NetHASP, but the Program is written in RealBasic and amongst others uses the Encryption Plugin by Monkeybread Soft ( www.monkeybreadsoftware.de/realbasic/plugins.shtml ). You can find the documentation for the plugin here: www.monkeybreadsoftware.de/realbasic/plugin/PDF/MBS%20Main%20Plugin.pdf (Starting at Page 205). Maybe it uses some of this...


Windoze

8cfa_31.01.2008_CRACKLAB.rU.tgz - NMEN Ascii & Cipher.txt

| Сообщение посчитали полезным: