Yeah the login is now in some xml in one of the uop (at least it seems so).
The uop looks like compressed.
The login crypt is always the same (finding the new keys is trivial).
The game crypt has changed, and the login to game server too (it seems that client send 0xffffffff server reply with e4 packet containing something that ibelieve to be some sort of key and client reply with e3 containing a key too and then the 65 byte crypted game server login is sent).
Somewhere in the exe there are reference to SHA1 so maybe it's used somewhere
Btw it think that the expansion is so ugly that no one will take the effort to reverse it