Go Back  
Reply
 
Thread Tools
Old 11-27-2012   #1
0x00
Member
 
Join Date: Nov 2012
Posts: 111
Likes: 13
Liked 68 Times in 30 Posts
Mentioned: 48 Post(s)
Tagged: 0 Thread(s)
Decrypt Blackops t6mp_ps3f.self?

The attached file is a modded blackops 2 self, was trying to decrypt it to compare with the original, however with unself and scetool I kept getting the following: "Error: Could not decrypt header."

So any suggestions / did I miss something?

p.s. The mod does get you banned after a few seconds into the round however can be used to elevate another players score allegedly. [1.03]

Modded File Link: http://www.sendspace.com/file/2jo6xg

~0x00
0x00 is offline   Reply With Quote
Old 11-28-2012   #2
ray0
Member
null
 
Join Date: Nov 2011
Posts: 46
Likes: 6
Liked 23 Times in 15 Posts
Mentioned: 9 Post(s)
Tagged: 0 Thread(s)
Originally Posted by 0x00 View Post
The attached file is a modded blackops 2 self, was trying to decrypt it to compare with the original, however with unself and scetool I kept getting the following: "Error: Could not decrypt header."

So any suggestions / did I miss something?

p.s. The mod does get you banned after a few seconds into the round however can be used to elevate another players score allegedly. [1.03]

Modded File Link: http://www.sendspace.com/file/2jo6xg

~0x00

header is where the main bulk of the encryption is useually for cod titles, how i got around it was skip the header you can do this my ruffley guessing the offset at which the header stops.

afew more weeks and this header will prob be solved as well as the new format for the ff files i know people almost there as it is but wont release to the public until most have had full use out of the game
ray0 is offline   Reply With Quote
Likes: (1)
Old 11-28-2012   #3
haz367
Senior Member
 
Join Date: Dec 2010
Posts: 2,033
Likes: 1,030
Liked 580 Times in 471 Posts
Mentioned: 237 Post(s)
Tagged: 0 Thread(s)
klicensee?..the fixer just repacked the 355fix with same key

here's decrypted modded elf of that file
t6mp_ps3f(BLES01717).elf
http://rghost.net/41866748
haz367 is online now   Reply With Quote
Old 11-28-2012   #4
BuC-ShoTz
 
Join Date: Oct 2011
Posts: 21
Likes: 22
Liked 8 Times in 5 Posts
Mentioned: 2 Post(s)
Tagged: 0 Thread(s)
decrypt:
Code:
scetool.exe -v -l 8C10AC1473DF38ADD7A4F2EE8C838DAB -d t6mp_ps3f.self t6mp_ps3f.elf
encrypt:
Code:
scetool.exe -v --sce-type=SELF --compress-data=TRUE --skip-sections=FALSE --key-revision=01 --self-auth-id=1010000001000003 --self-app-version=0001000000000000 --self-add-shdrs=TRUE --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004000000000 --np-license-type=FREE --np-content-id=UP0002-BLUS31011_00-CODBLOPS2PATCH02 --np-klicensee=8C10AC1473DF38ADD7A4F2EE8C838DAB --np-app-type=SPRX --np-real-fname=t6mp_ps3f.self --encrypt t6mp_ps3f.elf t6mp_ps3f.self
BuC-ShoTz is offline   Reply With Quote
Old 12-04-2012   #5
Str0ke
Apprentice
 
Join Date: Mar 2012
Posts: 4
Likes: 2
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by BuC-ShoTz View Post
decrypt:
Code:
scetool.exe -v -l 8C10AC1473DF38ADD7A4F2EE8C838DAB -d t6mp_ps3f.self t6mp_ps3f.elf
encrypt:
Code:
scetool.exe -v --sce-type=SELF --compress-data=TRUE --skip-sections=FALSE --key-revision=01 --self-auth-id=1010000001000003 --self-app-version=0001000000000000 --self-add-shdrs=TRUE --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004000000000 --np-license-type=FREE --np-content-id=UP0002-BLUS31011_00-CODBLOPS2PATCH02 --np-klicensee=8C10AC1473DF38ADD7A4F2EE8C838DAB --np-app-type=SPRX --np-real-fname=t6mp_ps3f.self --encrypt t6mp_ps3f.elf t6mp_ps3f.self
dont work... any 1 know how to decrypt Black Ops 2 Self please??? i tryed all programs but i get error all time...
(i dont want use already decrypted self i want decrypt my self)
Str0ke is offline   Reply With Quote
Old 12-04-2012   #6
JonahUK
Senior Member
 
Join Date: Jul 2011
Location: Salford, UK
Posts: 1,257
Likes: 574
Liked 769 Times in 489 Posts
Mentioned: 165 Post(s)
Tagged: 0 Thread(s)
You can decrypt the .self once you have the klicensee from the eboot.
Decrypt the eboot so it becomes a .elf

In the .elf, you will need to find the klicensee key. Once you have that, use SCETool to decrypt the self:

Code:
scetool.exe -v -l WHATEVERTHEKLICENSEWASINHEX -d t6mp_ps3f.self t6mp_ps3f.elf
In my eboot.elf, the klicensee was at offset 00AFC3C0 and matches the one posted earlier:

8C 10 AC 14 73 DF 38 AD D7 A4 F2 EE 8C 83 8D AB

So, the SCETool command would be:

Code:
scetool.exe -v -l 8C10AC1473DF38ADD7A4F2EE8C838DAB -d t6mp_ps3f.self t6mp_ps3f.elf
JonahUK is online now   Reply With Quote
Old 12-04-2012   #7
Str0ke
Apprentice
 
Join Date: Mar 2012
Posts: 4
Likes: 2
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by JonahUK View Post
You can decrypt the .self once you have the klicensee from the eboot.
Decrypt the eboot so it becomes a .elf

In the .elf, you will need to find the klicensee key. Once you have that, use SCETool to decrypt the self:

Code:
scetool.exe -v -l WHATEVERTHEKLICENSEWASINHEX -d t6mp_ps3f.self t6mp_ps3f.elf
In my eboot.elf, the klicensee was at offset 00AFC3C0 and matches the one posted earlier:

8C 10 AC 14 73 DF 38 AD D7 A4 F2 EE 8C 83 8D AB

So, the SCETool command would be:

Code:
scetool.exe -v -l 8C10AC1473DF38ADD7A4F2EE8C838DAB -d t6mp_ps3f.self t6mp_ps3f.elf
thanks for your reply it help me alot!!! but i have another problem how i can find klicense im my eboot.elf i try with your offset and i have 28819103388189823B82C13920006A84 but dont work!!
this is my EBOOT if you want help me to find klicense thanks!!
http://www.mediafire.com/?2cyyrgrdg3pcxj7 please help me
Str0ke is offline   Reply With Quote
Old 12-04-2012   #8
JonahUK
Senior Member
 
Join Date: Jul 2011
Location: Salford, UK
Posts: 1,257
Likes: 574
Liked 769 Times in 489 Posts
Mentioned: 165 Post(s)
Tagged: 0 Thread(s)
You could try Aldostools bruteforcer app to see if that can find the klicense for you or try Dark Eboot Fixer v5

What's the ID of your Black Ops 2?

The klicense above should work for the following ID's:
BLUS31011
BLUS31140
BLES01717
BLUS31141

The same klicensee is in that eboot.elf you posted at offset 00B2C670

Last edited by JonahUK; 12-04-2012 at 06:02 AM.
JonahUK is online now   Reply With Quote
Likes: (1)
Old 12-04-2012   #9
Str0ke
Apprentice
 
Join Date: Mar 2012
Posts: 4
Likes: 2
Liked 0 Times in 0 Posts
Mentioned: 0 Post(s)
Tagged: 0 Thread(s)
Originally Posted by JonahUK View Post
You need to try Aldostools bruteforcer app to see if that can find the klicense for you.

What's the ID of your Black Ops 2?

The klicense above should work for the following ID's:
BLUS31011
BLUS31140
BLES01717
BLUS31141
my BO2 is BLES01718 (ITALIAN VERSION)

Now work thanks for your help

Last edited by Str0ke; 12-04-2012 at 06:26 AM.
Str0ke is offline   Reply With Quote
Old 12-04-2012   #10
JonahUK
Senior Member
 
Join Date: Jul 2011
Location: Salford, UK
Posts: 1,257
Likes: 574
Liked 769 Times in 489 Posts
Mentioned: 165 Post(s)
Tagged: 0 Thread(s)
Update your tools.

Grab "True Ancestor Resigner" or "Dark Eboot Fixer" as they contain newer versions of scetool and the keys etc.

That should solve it.
JonahUK is online now   Reply With Quote
Reply

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



PS3Hax.net is Copyright © 2010-2013.
Use of this site is governed by our Terms of Use and Privacy Policy. All Trademarks and images are owned by their respected owners.
Posts and links are subject to each author on this forum and are no way affiliated with the operations and/or opinions of ps3hax.net
All times are GMT -5. The time now is 02:25 AM.