I was trying to recover a password from a kopeterc file.
Open the kopeterc file in a hex editor
In the password location you will find three-byte chunks: [EF][BE][XX]. The first two bytes stay most of the time same.
Just subtract each third byte from 0x1001F then you will get the character value from ASCII table.
everything was working fine as mentioned in Raphman’s blog
But I had a little problem with numeric value. My combination was “EF BE XX” but before the numeric value it was “EF BF XX”.
For the numeric value I have to subtract 0x40 again to get the original value.
It worked for me at last…