ItsMods

For all those wondering, this is the Salsa20 key for Black Ops II fast files on PC.


If you know what to do with it then get cracking. I've tested the key and it works (to a certain extent). I haven't been able to decrypt and uncompress all the data in the fast files, it normally fails with a "Bad state (invalid stored block lengths)" or "Bad state (oversubscribed dynamic bit lengths tree)" error but I am at least able to get some data (mainly .hlsl files). It's probably the code that I'm using.

Credits to whoever made this to decompress/decrypt fast files, I only based my code off this, not copy paste: http://pastebin.com/QEkwa0Re (and no, PC does not use BigEndian, it uses LittleEndian). Basically what it does is first decrypts each section in the fast file using the key and IV according to the section index and uses zlib's deflate algorithm to uncompress the data.

It was quite easy to find the key, all you had to do was look for: "expand 32-byte k" in the game executable and you've found the function where the key is passed into the function known as ECRYPT_keysetup. The functions used in Black Ops 2 for Salsa20 can be found here (or at least a similar variant): http://cr.yp.to/snuffle/salsa20/merged/salsa20.c

I like how everyone's thanking you but nobody says something because they've got no idea what you're talking about.
Nevertheless, Well done, May we be able to decode all ipaks, ffs and sabs one day (even though we can already read sabs but metaphorically speaking)

(12-06-2012, 01:01)JariZ Wrote: [ -> ]I like how everyone's thanking you but nobody says something because they've got no idea what you're talking about.
Nevertheless, Well done, May we be able to decode all ipaks, ffs and sabs one day (even though we can already read sabs but metaphorically speaking)

that's so true that gave me cancer...

Thanks Barata...

(12-06-2012, 01:03)barata Wrote: [ -> ] that's so true that gave me cancer...

Thanks Barata...

That's sad
Also master keep haxing.

(12-06-2012, 01:03)barata Wrote: [ -> ]

(12-06-2012, 01:01)JariZ Wrote: [ -> ]I like how everyone's thanking you but nobody says something because they've got no idea what you're talking about.
Nevertheless, Well done, May we be able to decode all ipaks, ffs and sabs one day (even though we can already read sabs but metaphorically speaking)

that's so true that gave me cancer...

Thanks Barata...

Why would you get cancer from that? Now you're giving ME cancer!

I think people don't respond because they're hoping for someone to say "Modloader confirmed".

(12-06-2012, 01:01)JariZ Wrote: [ -> ]I like how everyone's thanking you but nobody says something because they've got no idea what you're talking about.
Nevertheless, Well done, May we be able to decode all ipaks, ffs and sabs one day (even though we can already read sabs but metaphorically speaking)

Well that's what I kinda assumed because there were still 0 replies after 8 hours.

Also, just realised that I missed 2 of the bytes from the end of the key, I've fixed it now.

can you tell me how to compile that cs code, are CoreExtensions, Crypto, Ionic and Org C# default class or user defined class

GSC files havent been decrypted yet?

(12-06-2012, 12:12)Yamato Wrote: [ -> ]GSC files havent been decrypted yet?

No, but I managed to dump a shit load of stuffs in the zombies menu (not from fastfiles).
EDIT - Also added dump from SP in Karma mission. It seems that GSCs are not present (using the method I used to dump).

Here's the dump, contains LUA (note that they are precompiled; diassembling or decompiling with luadec fails), cfgs and other neat stuff. Thanks to @TwoPumpChump for giving me an idea to check the game assets.

I would like to make it clear that these were dumped from memory and not extracted from fast files.