Hello I was curious if anyone has found these certificates and know what they're used for. Because I'm trying to find the RSA key but having no luck if anybody has it please share it would be much appreciated
Code:
-----BEGIN CERTIFICATE-----
MIIEIDCCAwigAwIBAgIQNE7VVyDV7exJ9C/ON9srbTANBgkqhkiG9w0BAQUFADCB
qTELMAkGA1UEBhM***MxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjEoMCYGA1UECxMf
Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjE4MDYGA1UECxMvKGMpIDIw
MDYgdGhhd3RlLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNV
BAMTFnRoYXd0ZSBQcmltYXJ5IFJvb3QgQ0EwHhcNMDYxMTE3MDAwMDAwWhcNMzYw
NzE2MjM1OTU5WjCBqTELMAkGA1UEBhM***MxFTATBgNVBAoTDHRoYXd0ZSwgSW5j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-----END CERTIFICATE-----
Code:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
here are points in memory for encryption algorithms are stored
Code:
- open file "swtor.exe"
- 17727840 bytes allocated
- load signatures
- open file F:\Origin Games\STAR WARS The Old Republic\swtor\retailclient\signsrch.sig
- 1774060 bytes allocated for the signatures
- 2278 signatures in the database
- WARNING:
the file loaded in memory is very big so the scanning could take many time
- start signatures scanning:
offset num description [bits.endian.size]
--------------------------------------------
010607d0 31 Adler CRC32 (0x191b3141) [32.le.1024]
010617d0 32 Adler CRC32 (0x191b3141) [32.be.1024]
01060bd0 33 Adler CRC32 (0x01c26a37) [32.le.1024]
01061bd0 34 Adler CRC32 (0x01c26a37) [32.be.1024]
01060fd0 35 Adler CRC32 (0xb8bc6765) [32.le.1024]
01061fd0 36 Adler CRC32 (0xb8bc6765) [32.be.1024]
010e3170 117 ima_adpcm step table [16.le.178]
010ccda0 135 libavutil ff_log2_tab [..256]
01051ed8 142 ACSS reverse sbox [..256]
010595f0 145 SHA256 Hash constant words K (0x428a2f98) [32.le.256]
00a9ce04 147 SHA256 Initial hash value H (0x6a09e667UL) [32.le.32&]
010596f0 149 Hash constant words K for SHA-384 and SHA-512 [64.le.640]
01059a50 165 AES Rijndael S / ARIA S1 [..256]
01059b50 166 AES Rijndael Si / ARIA X1 [..256]
01081de8 167 Rijndael Te0 (0xc66363a5U) [32.le.1024]
010821e8 169 Rijndael Te1 (0xa5c66363U) [32.le.1024]
010825e8 171 Rijndael Te2 (0x63a5c663U) [32.le.1024]
010829e8 173 Rijndael Te3 (0x6363a5c6U) [32.le.1024]
01082de8 176 Rijndael Td0 (0x51f4a750U) [32.le.1024]
010831e8 178 Rijndael Td1 (0x5051f4a7U) [32.le.1024]
010835e8 180 Rijndael Td2 (0xa75051f4U) [32.le.1024]
010839e8 182 Rijndael Td3 (0xf4a75051U) [32.le.1024]
01059c50 185 Rijndael rcon [32.le.40]
010599e8 188 SSH RSA id-sha1 OBJ.ID. oiw(14) secsig(3) algorithms(2) 26 [..15]
01093bb0 208 camellia [32.le.48&]
01092bb0 210 camellia_sp1110 [32.le.1024]
010933b0 212 camellia_sp0222 [32.le.1024]
010937b0 214 camellia_sp3033 [32.le.1024]
01092fb0 216 camellia_sp4404 [32.le.1024]
00aab146 219 DES [32.le.20&]
0108e5c0 221 DES odd_parity [..256]
0108e6e0 222 DES semi weak keys [..96]
0108e740 223 DES skb [32.le.2048]
0108ddc0 225 DES SPR SPtrans [32.le.2048]
01068f30 242 EC curve _EC_NIST_PRIME_192_SEED [..20]
01068fe8 243 EC curve _EC_NIST_PRIME_224_SEED [..20]
010690b8 244 EC curve _EC_NIST_PRIME_384_SEED [..20]
01069200 245 EC curve _EC_NIST_PRIME_521_SEED [..20]
010693b0 246 EC curve _EC_X9_62_PRIME_192V2_SEED [..20]
01069468 247 EC curve _EC_X9_62_PRIME_192V3_SEED [..20]
01069520 248 EC curve _EC_X9_62_PRIME_239V1_SEED [..20]
010695f8 249 EC curve _EC_X9_62_PRIME_239V2_SEED [..20]
010696d0 250 EC curve _EC_X9_62_PRIME_239V3_SEED [..20]
010697a8 251 EC curve _EC_X9_62_PRIME_256V1_SEED [..20]
01069890 252 EC curve _EC_SECG_PRIME_112R1_SEED [..20]
01069908 253 EC curve _EC_SECG_PRIME_112R2_SEED [..20]
01069980 254 EC curve _EC_SECG_PRIME_128R1_SEED [..20]
01069a08 255 EC curve _EC_SECG_PRIME_128R2_SEED [..20]
01069b20 256 EC curve _EC_SECG_PRIME_160R1_SEED [..20]
01069bc8 257 EC curve _EC_SECG_PRIME_160R2_SEED [..20]
0106a058 258 EC curve _EC_SECG_CHAR2_113R1_SEED [..20]
0106a0d8 259 EC curve _EC_SECG_CHAR2_113R2_SEED [..20]
0106a158 260 EC curve _EC_SECG_CHAR2_131R1_SEED [..20]
0106a1e8 261 EC curve _EC_SECG_CHAR2_131R2_SEED [..20]
0106a428 264 EC curve _EC_SECG_CHAR2_193R1_SEED [..20]
0106a4e8 265 EC curve _EC_SECG_CHAR2_193R2_SEED [..20]
0106a670 266 EC curve _EC_NIST_CHAR2_233B_SEED [..20]
0106a8f8 267 EC curve _EC_NIST_CHAR2_283B_SEED [..20]
0106ab40 268 EC curve _EC_NIST_CHAR2_409B_SEED [..20]
0106ae60 269 EC curve _EC_NIST_CHAR2_571B_SEED [..20]
0106b038 270 EC curve _EC_X9_62_CHAR2_163V1_SEED [..20]
0106b0e0 271 EC curve _EC_X9_62_CHAR2_163V2_SEED [..20]
0106b188 272 EC curve _EC_X9_62_CHAR2_163V3_SEED [..20]
0106b2d0 273 EC curve _EC_X9_62_CHAR2_191V1_SEED [..20]
0106b388 274 EC curve _EC_X9_62_CHAR2_191V2_SEED [..20]
0106b440 275 EC curve _EC_X9_62_CHAR2_191V3_SEED [..20]
0106b5b0 276 EC curve _EC_X9_62_CHAR2_239V1_SEED [..20]
0106b688 277 EC curve _EC_X9_62_CHAR2_239V2_SEED [..20]
0106b760 278 EC curve _EC_X9_62_CHAR2_239V3_SEED [..20]
0106ba20 279 EC curve _EC_X9_62_CHAR2_359V1_SEED [..20]
0108f848 280 ASCII to BIN table [..128]
00aa5364 289 MD5 digest [32.le.272&]
0108dc70 292 RC2 skey key_table [..256]
009bb346 307 SHA1 / SHA0 / RIPEMD-160 initialization [32.le.20&]
012c4990 309 padding used in hashing algorithms (0x80 0 ... 0) [..64]
012a5674 310 SSL3 pad 1 and 2 [..96]
01062ca8 357 Zlib dist_code [..512]
01062ea8 358 Zlib length_code [..256]
01062fa8 360 Zlib base_length [32.le.116]
01063020 362 Zlib base_dist [32.le.120]
010d7a30 384 Jpeg dct 14 bit aanscales [16.le.128]
010d7bc0 388 Jpeg dct AA&N scale factor [double.le.64]
0128cc58 550 Windows CryptAcquireContext [..21]
007796b8 568 classical random incrementer 0x343FD 0x269EC3 [32.le.8&]
010b2908 696 base64 decoding table [..128]
010cd0a0 855 Generic bitmask table [32.le.128]
01090392 1188 small prime numbers used in libgcrypt [16.le.1336]
01051ed8 1198 FFT and FHT routines rv_tbl [..128]
01056508 1228 rfc3548 Base 64 Encoding with URL and Filename Safe Alphabet [..62]
01056508 1237 B64EncodeTable [..64]
01094940 1312 Generic squared map [32.le.64]
0108cc18 1386 seed_SS0 [32.le.1024]
0108d018 1388 seed_SS1 [32.le.1024]
0108d418 1390 seed_SS2 [32.le.1024]
0108d818 1392 seed_SS3 [32.le.1024]
0108e7c0 1463 DES2_DS [32.le.128]
005c1714 1483 TEA1_DS [32.le.4]
010d13f8 1523 zinflate_lengthStarts [32.le.116]
01062660 1525 zinflate_lengthExtraBits [32.le.116]
010d1380 1527 zinflate_distanceStarts [32.le.120]
010626e8 1529 zinflate_distanceExtraBits [32.le.120]
010d24e5 1530 zinflate_distanceExtraBits [32.be.120]
010d1470 1531 zdeflate_lengthCodes [32.le.1024]
01059974 1588 Crypton kp [32.le.16]
0128ca4e 1767 anti-debug: IsDebuggerPresent [..17]
010cd020 1810 bitmask [32.le.128]
0105b150 1830 RNG (original numbers) [32.le.8&]
010d7718 2094 libavcodec ff_mjpeg_val_ac_luminance [..162]
010d7640 2095 libavcodec ff_mjpeg_val_ac_chrominance [..162]
014fed58 2253 PADDINGXXPADDING [..16]
010cd0a0 2259 unlzx table_three [32.le.64]
012ae8a4 2269 DMC compression [32.le.16&]
010cd093 2271 compression algorithm seen in the game DreamKiller [32.le.12&]
0105c18f 2272 compression algorithm seen in the game DreamKiller [32.be.12&]
- 114 signatures found in the file