Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Chuy505 · Post by **Chuy505** » Wed Sep 18, 2019 3:51 am

GHFear wrote:nvm

did you figure it out ?

GHFear · Post by **GHFear** » Wed Sep 18, 2019 5:31 am

Chuy505 wrote:
GHFear wrote:nvm

did you figure it out ?

Yes. I was just a crackhead.

I had the wrong PAK file for that key.

ssh · Post by **ssh** » Wed Sep 18, 2019 5:12 pm

Updated the script for pak version 8, extra 0x80 bytes at the end of the file.
Slight change in the TOC structure
added WORKAROUND = 4

Code: Select all

get ZSIZE longlong TOC_FILE
get SIZE longlong TOC_FILE
get ZIP byte TOC_FILE

unreal_tournament_4_0.4.23.1.bms

skyline9394 · Post by **skyline9394** » Wed Sep 18, 2019 6:56 pm

skyline9394 wrote:hi all im new here i try get the key via ida pro and i fail can some one help me to get the key
APK download is here http://202.171.253.69/tkzmcdn.gamedream ... kzm_gd.apk
game libUE4.so form APK https://mega.nz/#!TrAGnAxT!SGzGypIqnB8Z ... D4i4G3Okz8
pack file form filecutter https://mega.nz/#!viJEAaZb!xm_sz48ushxn ... JpBBVhIou4

can some one give me some idea how can i get the aes key?
i have make a dump file form windows taks searching with hex editor and ida pro where i can looking at ?
plz help me
sorry for my bad english

GHFear · Post by **GHFear** » Thu Sep 19, 2019 2:33 am

ssh wrote:Updated the script for pak version 8, extra 0x80 bytes at the end of the file.
Slight change in the TOC structure
added WORKAROUND = 4
Code: Select all
get ZSIZE longlong TOC_FILE
get SIZE longlong TOC_FILE
get ZIP byte TOC_FILE
unreal_tournament_4_0.4.23.1.bms

Thank you for the update, ssh.

linamza · Post by **linamza** » Thu Sep 19, 2019 9:46 am

@GHFear

Can you please try to found the AES KEY of the MotoGP 19 (PC).

I upload for you the Shipping exe.

https://drive.google.com/file/d/1QOLbzr ... sp=sharing

Thank you buddy.

skyline9394 · Post by **skyline9394** » Fri Sep 20, 2019 11:27 am

@GHFear can u help me get the aes key plz i will donate to u

JoakimGrDay · Post by **JoakimGrDay** » Fri Sep 20, 2019 6:48 pm

So I noticed the game wouldn't work without the .pak files, so I have options I assume. Either I will have to pack them back in the right order, or I am doing something wrong while unpacking them.
The game is "Spyro Reignited Trilogy", and there are 3 .pak files in "G:\steamlibrary\steamapps\common\Spyro Reignited Trilogy\Falcon\Content\Paks\" they are called:

pakchunk0-WindowsNoEditor.pak
pakchunk1-WindowsNoEditor.pak
pakchunk1-WindowsNoEditor.pak

So the method I tried was to open the QuickBMS (4GB files) and run each .pak archive one by one, till I ended up with folders called Content, Plugins, Engine & Falcon. What do I do next?
What did I do wrong?

Is it a solution to make 3 folders after the name of the .pak file so in my scenario:

pakchunk0-WindowsNoEditor
pakchunk1-WindowsNoEditor
pakchunk1-WindowsNoEditor

And first off unpack the "pakchunk0-WindowsNoEditor.pak" and put them inside of the "pakchunk0-WindowsNoEditor" folder.
Secondly unpack the "pakchunk1-WindowsNoEditor.pak" and put all of it inside of "pakchunk0-WindowsNoEditor" folder.
And the last unpack inside of the "pakchunk0-WindowsNoEditor" folder?
Why I think this is a solution is because the game is about 3 games. So there might be 3 parts! First game, second game & the third game. And it won't work if they aren't separated!?

Reponse to my crazy theory would be appreciated! Correct me if I am wrong :)

Aurelion · Post by **Aurelion** » Wed Sep 25, 2019 7:10 pm

Can someone please share the AES key for Gears 5 (steam) ?

exe: https://cloud.mail.ru/public/314F/46B7WpAM7

Code: Select all

- open input file D:\Games\Gears 5\Pack\hires\GearGame\Content\B2\Bootcamp_HiRes_G1.b2container
- open script C:\Users\xxxx\Desktop\quickbms\unreal_tournament_4_0.4.23.1.bms
- set output folder F:\out

  offset   filesize   filename
--------------------------------------
  fe020ac4 3980078081 00000000.dat

Error: incomplete input file 0: D:\Games\Gears 5\Pack\hires\GearGame\Content\B2\Bootcamp_HiRes_G1.b2container
       Can't read 64 bytes from offset fe020ac4.
       Anyway don't worry, it's possible that the BMS script has been written
       to exit in this way if it's reached the end of the archive so check it
       or contact its author or verify that all the files have been extracted.
       Please check the following coverage information to know if it's ok.

  coverage file 0     0%   112        59449344   . offset fe020ac4

Last script line before the error or that produced the error:
  245 clog NAME OFFSET ZSIZE SIZE 0 XSIZE

kamtesel · Post by **kamtesel** » Thu Sep 26, 2019 1:36 pm

hi
any update for gears 5?
it gave you the offset error

jakmrk88 · Post by **jakmrk88** » Thu Sep 26, 2019 10:10 pm

Is there any way to extract B2Container files with localization to translate them into another language. thanks

lionheartuk · Post by **lionheartuk** » Fri Sep 27, 2019 1:59 am

Has anyone tried to extract Dragon Quest XI S on the switch.
Its a bit unusual, here is some mentioned information from elsewhere.
The Game uses Unreal Engine 4.18.3 "SDK MW+EpicGames+UnrealEngine-4_18_3", pak is Version 4.

The compression method in this game is 0x3 -> Oodle, but since it's version 4, UnrealPak.exe detects it as Zlib (because "(0x3 & 0x1) == 0x1").
The used Oodle compression is a little bit tricky, they reversed the compression tables and switched the big endian values to little endian.

Oodle is closed source (RAD Game Tools).

BIDLOV · Post by **BIDLOV** » Fri Sep 27, 2019 8:02 am

Please guys unpack key!
https://drive.google.com/open?id=1SUA4c ... HRtigtuWLA

zeaofsuos · Post by **zeaofsuos** » Fri Sep 27, 2019 11:18 am

ADMIN, DELETE.

Pokeytax · Post by **Pokeytax** » Fri Sep 27, 2019 4:56 pm

lionheartuk wrote:Has anyone tried to extract Dragon Quest XI S on the switch.

Yeah, I'm looking at it. The PC version had a custom version of the UE4 script, but neither that or the base script is working so it'll take a tweak or two, right? None of the default Oodle implementations in QuickBMS seem to work for it.

zeaofsuos · Post by **zeaofsuos** » Fri Sep 27, 2019 8:07 pm

ADMIN, DELETE.

lionheartuk · Post by **lionheartuk** » Sat Sep 28, 2019 12:29 pm

Pokeytax wrote:
lionheartuk wrote:Has anyone tried to extract Dragon Quest XI S on the switch.

Yeah, I'm looking at it. The PC version had a custom version of the UE4 script, but neither that or the base script is working so it'll take a tweak or two, right? None of the default Oodle implementations in QuickBMS seem to work for it.

Yeah, the oodle implementation here is a little different.
I wrote in the previous post everything I knew about it, all the current Oodle scripts in quickbms are Big Endian wheras this is little endian, which i think is one of the issues (I can't say I know much more than this however)

yham · Post by **yham** » Sun Sep 29, 2019 5:23 am

Is there a way to extract a game script from a pak file?
Perhaps it has been assembled?
I think this is a stupid question. But I want some hints.
I would like to know about exp calc and damage calc.

GHFear · Post by **GHFear** » Mon Sep 30, 2019 3:30 am

zeaofsuos wrote:Hi.

Does anyone know how to decrypt, encrypted Unreal Engine 4 games? Shenmue III just released and it's not possible to unpack the individual .pak files as they are encrypted.

pak files are stored in this location, cut down using filecutter:

https://files.fm/u/t8tsw4js

One of the Pak files without filecutter:

https://files.fm/u/7p2ukvrb

Check your DMs.

ZenHAX