Something 'Fishy' about Strelka

[Dann Corbit]

Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.

Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.

I guess that Uri was right.

[Tony Thomas]

I was right as well.

[Terry McCracken]

I was right as well.

I remained silent an read, but now I can openly say, yep, another hoax!

[Nid Hogge]

I was right as well.

I remained silent an read, but now I can openly say, yep, another hoax!

I agree 100%. very sad. now the rating lists should stop wasting time testing them I guess..

[Terry McCracken]

I was right as well.

I remained silent an read, but now I can openly say, yep, another hoax!

I agree 100%. very sad. now the rating lists should stop wasting time testing them I guess..

Well at least it was discovered fairly quickly, and I'm sure testing has stopped or will stop soon on this very badly put together clone of sorts.

But there always will be people out there ready to make another one just like there are people who like to write malware/spyware, trojans, worms, and viruses

[mhull]

Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.

Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.

I guess that Uri was right.

Perhaps there's a way to copy its decrypted address space from RAM to disk.

[Daniel Mehrmann]

Using IdaPro to examine the binary, it's not a chess engine.
It's a decryption engine sitting over a giant block of data.

Seems pretty strange for a chess engine of 1.4 MB to consist of 95% data, a decryption engine, and a small set of Winboard commands.

I guess that Uri was right.

Perhaps there's a way to copy its decrypted address space from RAM to disk.

That isn't so easy. I debugged Strelka a bit and a lot of strings are still cyrpted or compressed. A lot of decompress calls will be done in runtime...
I also extract the string table from a running Stelka, or at least what was readble (Don't wonder about the PV in the stringtable )

http://www.homer-chess.com/temp/strings.txt

It seems this guy added also some protection against debugger like F3 interrupt shows to halt command of the cpu or the debugger himself


Best,
Daniel

[M ANSARI]

I am always amazed at the technical talent available on these forums. Very impressive indeed.

[WinPooh]

Igor Korshunov (author of WildCat) wrote on KasparovChess guestbook (my translation):

"...try to find the following sequence of bytes in Strelka:
AD 8E 57 4E 87 11 E7
You can find it ONLY in Strelka and in all versions of Rybka"

In Russian: http://kasparovchess.crestbook.com/view ... d=1629&p=5