Uncovering 0x5E - Warden

[devcode]

vL still has noobs in it...reason its so stained, Invert still sucking dick for your spare change, I bin hustlin thats why I get paid, you bin writing code from the start but you just gettin played. First piece of code sold for a hundred back in the day, and that was a shitty old cs hack that I had just made. Moved into malware cause shit was gettin boring fast, who ever thought you could sell code for thousands in cash. More money mo problems the fbi getting serius, seeing more than 200 thousand zombie hosts on a server almost got you delirious but times have changed, i aint on the same shit, but people still bring me money so i stay spliff HOLLR


off to the trash can here we gooooooooo, its a cold world lets hope it snows

[Barabajagal]

And the recent takedown of 5E...? You think they're just going to change the 16 bytes? Did you do any reversing of the previous one?

[devcode]

Generated in battle.snp. I'll post my results later.

[Don Cullen]

Thank you for standing by your word, devcode. And thank you for contributing your work. It most certainly is appreciated.

[Tazo]

He's not posted anything new.... This is all known information so far.

This is new information to me and I'm sure I speak for others, too.

Thanks for sharing your findings, devcode.

[devcode]

Updated to include stage 1 key generation

[MyndFyre]

I split off the shit.  Stay on topic or we'll stop talking about it altogether.

[Mystical]

Soo, Just curious if anyones got anything done on warden since i guess it's bypassed now, because im looking at a starcraft broodwar load on battle.net. =|

[Michael]

was the load during a time of which warden was disabled?

[brew]

The rate of connection was high enough so that it would offset the loss of connections from warden. People dedicated to loading have been using this principle ever since warden was activated.

[Chriso]

Yeah if you turn on join/leaves you will realise that bots are leaving and others are entering.

[Mystical]

No... they idled for much more then 2 mins,

as well devcode's  idled 5 bots in my channel on starcraft.

[Ringo]

off to the trash can here we gooooooooo, its a cold world lets hope it snows

Is this uncovering 0x51, 0x5E or somthing else all together?

You think they're just going to change the 16 bytes?

*they*?
Those 16bytes will change, when one changes cdkey. (2 tokens + decoded cdkey block)
The 1st dword of the cdkey hash then relates to 0x5E encryption. I thought this was common knowledge.

[Barabajagal]

I meant that they'll do more than change how those bytes are gathered if they need to. And "They" are Blizzard.

[UserLoser]

Here we go again