[FINDINGS] Lv0
 

http://pastebin.com/wpWzC53Z

Pointless? I, myself, do not know. You can query some other/miscellaneous results that come from this "Zadow" entry. Though; some do look awfully alike.

Looks like a bin file opened in hex editor

i have put the lv0 throug different debuggers.
This pastie was only copy/paste for myself.
but getting closer.

this is an copy/paste of the hex section in ida pro

getting closer to what may I ask?

to nothing he still has no keys to decrypt

this is nothing to do with keys.
since we dont have them, i try an different way.

reserving this

Hi,

I saw some description of the lv0 structure, can you send me this via Private Message? Or would you like to reserve this only for you? :)

http://pastebin.com/4NL1ZbsP

Cryptographic hash function(s) (Both SHA-1 and MD5 are used). Hopefully this would not; or WOULD have any reverse engineering done (If you know what I mean).

*Cough*
*Cough*

Looks like a bin file opened in hex editor
__________________
http://www.slowliving.info/zhao3.jpghttp://www.slowliving.info/zhao2.jpghttp://www.slowliving.info/zhao4.jpg