As some of you probably know, when you download Starcraft II game client from Battle.net, it comes with two encrypted MPQs. I found out that every language version has its own key. To be able to open the MPQs with StormLib (and thus with MPQ Editor), it needs the key.
So far, I got keys for these versions:
en-GB de-DE es-ES fr-FR it-IT pl-PL (coming soon) and ru-RU (coming soon)
I'd like to ask for help retrieving those keys. All you need to know is knowledge of assembler, have downloaded Starcraft II this way, and know how to use a debugger (any debugger will do, infact)
This is how to get the decryption key:
1) Run "Installer.exe"
2) Run a debugger of your choice and attach to the "Installer.exe" process
3) Break the process and set breakpoint to 0053A3D0. The code there must look like a function begin (push ebp; mov ebp, esp)
4) Resume the installer process and click "Install". If the installer warns you that the installation already exists, press "Install" again.
5) When the process breaks into the debugger, dump the information in ECX register as DWORDS.
6) At offset [ECX+0x5C], there is pointer to decryption key. It looks like this: expand 32-byte k[variable part]
7) Copy 0x40 bytes from the memory location and send it to me to zezula-at-volny-dot-cz. Please, also include which language version you have.
This is example of key I got for de-DE version:
00f20020 65 78 70 61 6e 64 20 33 32 2d 62 79 74 65 20 6b expand 32-byte k
Hmm, interesting. The decryption key is shuffled version of the authentication code, but yes, these basically correspond to decryption keys. Thanks!
Edit: Could someone having enUS version of the downloaded installer check if the MPQE can be open with the latest build of MPQ Editor (3.1.0.484) ?
I can't find 484, but I found 473...Is that perhaps a typo on your part?
Anyways, will try with 473 and see if it works.
EDIT: Doesn't work. Tried to open the enUS version of "Installer Tome 2.MPQE" or something like that (the file is around 40mb). The first Installer Tome was 7 or so gb and took too long to open, so I cancelled it. It took to long to cancel so I killed the MPQ editor process with task manager.
I'm guessing you really were talking about a new version, but I can't find it...
I can't find 484, but I found 473...Is that perhaps a typo on your part? Anyways, will try with 473 and see if it works.
Go to http://www.zezula.net/en/mpq/download.html and download the BETA build. The latest build should be able to open all European and US versions of the encrypted MPQs.
Also: Is there any chance to upload the 40 MB MPQE file somewhere, so I can add it to my MPQ collection for eventual later tests ?
This is from the Brazilian Portuguese (pt-BR) version. Don't know if this is the right piece of information, just tell me if it's not.
I downloaded the last version of you MPQEditor and tried to open "Installer UI 2.MPQE" file inside the original game DVD, but I got the folowing error dialog:
Cannot open "G:\Installer Tome 1.MPQE". Error code 0x00002711
As some of you probably know, when you download Starcraft II game client from Battle.net, it comes with two encrypted MPQs. I found out that every language version has its own key. To be able to open the MPQs with StormLib (and thus with MPQ Editor), it needs the key.
So far, I got keys for these versions: en-GB de-DE es-ES fr-FR it-IT pl-PL (coming soon) and ru-RU (coming soon)
I'd like to ask for help retrieving those keys. All you need to know is knowledge of assembler, have downloaded Starcraft II this way, and know how to use a debugger (any debugger will do, infact)
This is how to get the decryption key:
1) Run "Installer.exe"
2) Run a debugger of your choice and attach to the "Installer.exe" process
3) Break the process and set breakpoint to 0053A3D0. The code there must look like a function begin (push ebp; mov ebp, esp)
4) Resume the installer process and click "Install". If the installer warns you that the installation already exists, press "Install" again.
5) When the process breaks into the debugger, dump the information in ECX register as DWORDS.
6) At offset [ECX+0x5C], there is pointer to decryption key. It looks like this: expand 32-byte k[variable part]
7) Copy 0x40 bytes from the memory location and send it to me to zezula-at-volny-dot-cz. Please, also include which language version you have.
This is example of key I got for de-DE version:
00f20020 65 78 70 61 6e 64 20 33 32 2d 62 79 74 65 20 6b expand 32-byte k
00f20030 53 53 58 48 00 00 00 00 34 58 46 58 4b 34 4b 58 SSXH....4XFXK4KX
00f20040 00 00 00 00 38 45 4b 4a 44 33 43 41 30 30 30 30 ....8EKJD3CA0000
00f20050 59 36 34 5a 59 34 35 4d 30 30 30 30 59 44 39 56 Y64ZY45M0000YD9V
Thanks in advance.
W8, so you need this for each language or ?
Talking about that?
Yes, for each language version of SC2.
Hmm, interesting. The decryption key is shuffled version of the authentication code, but yes, these basically correspond to decryption keys. Thanks!
Edit: Could someone having enUS version of the downloaded installer check if the MPQE can be open with the latest build of MPQ Editor (3.1.0.484) ?
I can't find 484, but I found 473...Is that perhaps a typo on your part? Anyways, will try with 473 and see if it works.
EDIT: Doesn't work. Tried to open the enUS version of "Installer Tome 2.MPQE" or something like that (the file is around 40mb). The first Installer Tome was 7 or so gb and took too long to open, so I cancelled it. It took to long to cancel so I killed the MPQ editor process with task manager.
I'm guessing you really were talking about a new version, but I can't find it...
Go to http://www.zezula.net/en/mpq/download.html and download the BETA build. The latest build should be able to open all European and US versions of the encrypted MPQs.
Also: Is there any chance to upload the 40 MB MPQE file somewhere, so I can add it to my MPQ collection for eventual later tests ?
This is from the Brazilian Portuguese (pt-BR) version. Don't know if this is the right piece of information, just tell me if it's not. I downloaded the last version of you MPQEditor and tried to open "Installer UI 2.MPQE" file inside the original game DVD, but I got the folowing error dialog:
Cannot open "G:\Installer Tome 1.MPQE". Error code 0x00002711
Let the topic die in peace D:
It's 4 months old, that was made to decrypt the Sc2 Beta.
@s3rius: Go
No it was the key for retail sc2 installation. There can still be people install retail game at this point.
But yeah bumping it does not equal you letting it rest in peace