ALEFCLIENT.ExE ~ 9 Crypto signatures

10/22/2007 11:44 5hoursez#1
Now get crakin someone ^__^ j/k I only understand half of what I am doing :P If that ^^

I am going to bed as it is 2:41AM while I post this.....
HOPE this helps somehow ^__^

ALL FOUND IN :> alefclient.exe
entry point: 0034A796
Image base: 00400000

9 Crypto signatures:

**CRC32: FIRST SIGNATURE FOUND AT 00000011
~ 1ST SIGNATURE IS 0000000h ::CRC32 table ::

**Blowfish: First signature Found at 00478028
~ 1ST SIGNATURE IS 4B7A70E9h ::sBox::

**RIJNDAEL: FIRST SIGNATURE FOUND at 003F6870
~ 1st signature is 0a5h :: ? ::

**CRYPTON First Signature found at 00476DF0
~ 1st signature is 3fcff3fch ( ma_0 )

**MS Crypto API (Hash) First Signature found at 0046820A
~ CryptCreateHash Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Hash) First Signature found at 004681D4
~ CryptDestroyHash Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Hash) First Signature found at 004681FA
~ CryptHashData Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Cipher) First Signature found at 004681C4
~ CryptEncrypt Api Found ( U Can Guess RC2, RC4 )

**MS Crypto API (Cipher) First Signature found at 0046821C
~ CryptDecrypt Api Found ( U Can Guess RC2, RC4 )
__________________________________________________ _____________
> zlib1.dll
Entry Point = 00001000
Image Size = 61B80000

> gdiplus.dll
Entry Point = 00001FDF
Image Size = 70D00000

1 Crypto signature:

**CRC32: FIRST SIGNATURE FOUND AT 00000011
~ 1ST SIGNATURE IS 0000000h ::CRC32 table ::

__________________________________________________ _____________
> dbghelp.dll
Entry Point = 00068FB0
Image Size = 02800000

2 Crypto signatures:
**CRC32: FIRST SIGNATURE FOUND AT 00000011
~ 1ST SIGNATURE IS 0000000h ::CRC32 table ::

**BASE64 Table: First Signature found at : 00004170
~ 1st Signature is ABCDE.. :: Base 64 Table ::
__________________________________________________ _____________
> mfc80.dll -
Entry Point = 000C31E7
Image Size = 781D0000

4 Crypto signatures:
**MS Crypto API (Hash) First Signature found at 00006E58
~ CryptCreateHash Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Hash) First Signature found at 00006E44
~ CryptDestroyHash Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Hash) First Signature found at 00006E10
~ CryptGetHashParam Api Found ( U Can Guess MD2, MD5, SHA)

**MS Crypto API (Hash) First Signature found at 00006E00
~ CryptHashData Api Found ( U Can Guess MD2, MD5, SHA)
__________________________________________________ _____________
The following contain no Crypto sigs

>aukbhook.dll<
Entry Point = 0000157F
Image Size = 10000000
>freetype6.dll<
Entry Point = 00001000
Image Size = 66FC0000
>mss32.dll<
Entry Point = 0002FAB5
Image Size = 21100000
>msvcm80.dll<
Entry Point = 00025250
Image Size = 7C4C0000
>msvcp80.dll<
Entry Point = 0003077A
Image Size = 7C420000
>msvcr80.dll<
Entry Point = 0000231A
Image Size = 78130000
>stlport.5.0.dll<
Entry Point = 00055569
Image Size = 10000000
__________________________________________________ _____________
All these files are found in the main C:\Program Files\Codemasters\Archlord\ directory.
(Couldnt Sleep till I look at the dll's in the folder too :)
10/22/2007 12:36 samwise002#2
hmm i c so these are the keys that are encrypting the ini files then? so if they are broken then that means that we can change everything ey?
10/22/2007 12:52 5hoursez#3
this box needs deleted ^^ updated above
10/22/2007 13:37 Eliberate#4
Sooo, what now?? r u guys trying to do something??? i would love to pay a visit to my groupdroprate.txt.
10/22/2007 14:32 Psyborg#5
nice job
10/22/2007 14:40 5hoursez#6
bump... Updated Look up ^^

(Damn my avatar was way too big :P I kept putting off changing the size ^^)
10/22/2007 21:06 Matureman#7
lol, pcyborg thanked you, i guess he doesnt even understand
10/23/2007 04:34 5hoursez#8
:P guess I will be drowning some more time later this week, if this is all being changed with the update :P & whats wrong with thanking someone ^__^ everyone has to start somewhere says a fellow novice. (</~~~ Thats slang talk from a newb trying to sound intellectual :P)