dns3

dns3.ahk

asciiHex := ""
loop, Read, allDnsQuery.txt
{
	IfInString, A_loopreadline, 34.205.75.67
		continue ;there is an entry for the query and response, elminate one to remove duplicates
	query := StrSplit(A_LoopReadLine, "	")[2] ;get the query (remove the IP address)
	query := RegExReplace(query, "\.") ;remove the dot's as they aren't part of the ascii hex
	query := RegExReplace(query, "torrabotenterprises") ;not part of the ascii hex
	StringTrimLeft, query, query, 18 ; the first 18 characters appear to be nonsense
	if(query) ;if there is any data left
		asciiHex .= query
}
f := fileopen("asciiHex.txt", "w") 
f.write(asciiHex)
f.close()
f := fileopen("decoded.txt", "w")
f.write(asciiHexToStr(asciiHex))
f.close()
asciiHexToStr(str) 
{
	decoded := "", start := -1
	while(start <= StrLen(str)) {
		decoded .= chr("0x" SubStr(str, (start := start + 2), 2))
	}
	return decoded
}