Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

[LearningGuy]

how to find encryption key on pubg ?
i have limited knowledge

[r41d3r]

hello Aluigi!
trying for like 4hours already to decrypt files from Battle Rush game.
used UT4.bms

all what i got is

Code: Select all

QuickBMS generic files extractor and reimporter 0.8.3
by Luigi Auriemma
e-mail: me@aluigi.org
web:    aluigi.org
        (Jan 21 2018 - 15:18:31)

                   quickbms.aluigi.org  Homepage
                            zenhax.com  ZenHAX Forum
                               @zenhax  Twitter & Scripts

- GUI mode activated, remember that the tool works also from command-line
  where are available various options like folder scanning, filters and so on

- select the BMS script to use
- select the input archives/files to extract, type * or "" for whole folder and subfolders
- select the output folder where extracting the files
- open input file C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
- open script C:\Users\Dafuq\Downloads\quickbms\unreal_tournament_4.bms
- set output folder C:\Users\Dafuq\Downloads\quickbms\hd

  offset   filesize   filename
--------------------------------------
The archive is encrypted, select the number of the key to use or type yours:
0: KIWIKIWIKIWIKIWIKIWIKIWIKIWIKIWI
1: _aS4mfZK8M5s5KWC2Lz2VsFnGKI7azgl
2: bR!@nbR0wnc@rychR!$d@nd@v3d3R3kj!mj0$hk3v!nm!ch@3lm!k3s3@nst3v3t!m
3: casd#55@#$%323!$^#b%05sa5W|hhaf4365s52ss51|55m!|{55s^@@36f233|-|0w@%3g8hssDk35/!Nm|_|%ds23%a32d5&23as3%12p|-|y$t3ds562d23fav3c@dyw38#49
4: C8C4847F3B4FA52D4AAD57A52358CDBC
5: k14z0ZLR8a7jNm49uyBzxXYY9LpTHcehLSNiC3jAkzBsffPuy8YsTa72RLD9KWIn
6: E7@[dZfoYCW;+YWR;0JK^{9tt:yU0_T&
7: E1A1F2E4AA066C54BD5090F463EDDF58D01684243672B3CE809FF47FF473B04A
8: I0vV6wr0TFbg3m23QuSIwnYC1sI0AIDq
9: VWSUATAUAVAW
10: y298qjSb115NqQ3Agad30DWn2QYrTI8CT6aP05l2PBV9Qe92S94PdoVCCy06A38L
11: b9uW0RKNY91be8HN3Lemi68j6Xsi2l7fQJYsp5oR4al4C4c9kY5E0l90411l9P3L
12: press RETURN for no encryption (Lineage 2 Revolution)

- please insert the content for the variable KEY:

KEY: no key, encryption disabled
  ed9aa0f9 2683053906 00000000.dat

Error: incomplete input file 0: C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
       Can't read 64 bytes from offset ed9aa0f9.
       Anyway don't worry, it's possible that the BMS script has been written
       to exit in this way if it's reached the end of the archive so check it
       or contact its author or verify that all the files have been extracted.
       Please check the following coverage information to know if it's ok.

  coverage file 0     0%   236461     40809808   . offset ed9aa0f9

Last script line before the error or that produced the error:
  174 clog NAME OFFSET ZSIZE SIZE

Press ENTER or close the window to quit

this is a part from .PAK https://drive.google.com/open?id=1YQo_5LJFCzCV2W_v4IQ3nqt38YfWC5xn
i suppose this is a .Exe file https://drive.google.com/open?id=14dI8t5rfbJ3H-cR2u1t2I4e7e1_WMa00

can you help me ? ^^

[r41d3r]

tried to trace exe and just find aec key via notepad++ still nothing, is anybody know any way of retrieving the aes key from exe ?

[bizzfarts]

w^yR*H3Ew_b@5@dpjB*RvRE^=$VBB6xY

[r41d3r]

omg, thank you. can i ask you a question ? how you found that ?

[mq1r2]

If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

What do you mean by that? The key changes every time the game launches or something? (and yes it's zlib)

[aluigi]

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

[huchi001]

new android UE4 game 'BLADE2'

PAK is encrypted.
Is there a way to get an aes key?

sample pak download link : https://drive.google.com/file/d/1M3XjiN ... sp=sharing

[mq1r2]

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))

[aluigi]

In some previous posts some users reported that games are starting to no longer store the keys in clear-text, that's the reason why you can't find it.
If you are not into reverse engineering you have to wait that other users post the keys (if they care/want).

[blenux]

Anyone know the aes key for Fractured Space game? Thanks in advance.

[MrMe]

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))

I can help you, but you have to upload to dumped executable.

[makc_ar]

Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet



SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur

[MrMe]

Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet



SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur

Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump

[makc_ar]

Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump

Mmmm... What do you mean?

.rar 108 mb

[Phalasius]

Hi everyone.

I try to unpak file and i have this error when i pressed RETURN.

Code: Select all

12: press RETURN for no encryption (Lineage 2 Revolution)

- please insert the content for the variable KEY:

KEY: no key, encryption disabled
Info:  algorithm   250
       offset      0000000000000049
       input size  0x0000000000000970 2416
       output size 0x000000000000223b 8763
       result      0xffffffffffffffff -1

Error: the uncompressed data (-1) is bigger than the allocated buffer (8763)

Last script line before the error or that produced the error:
  157 clog MEMORY_FILE CHUNK_OFFSET CHUNK_ZSIZE CHUNK_SIZE

Press ENTER or close the window to quit

How can i fix the allocated buffer error ?
Someone can help me to find the AES key ?

Big exe https://we.tl/kC7Iq9lUax

Or the way to find it ?

Thank.

[MrMe]

Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump

Mmmm... What do you mean?

.rar 108 mb

1. Run the game till you're in some main menu or whatever, make sure it is loaded.
2. Run "pd64 -p SAOFB-Win64-Shipping.exe" (or pd32 if 32bit process)

[makc_ar]

1. Run the game till you're in some main menu or whatever, make sure it is loaded.
2. Run "pd64 -p SAOFB-Win64-Shipping.exe" (or pd32 if 32bit process)

Loading clean hash database from 'С:\Steam\steamapps\common\SWORD ART ONLINE FATAL BULLET\SAOFB\Binaries\Win64\clean.hashes'.
Did not find an existing clean hash database, using an empty one.
dump_process CreateToolhelp32Snapshot failed with error 5: dumping process unknown with pid 0x240f0...
... building import reconstruction table ...
Finished running.

DENUVO in SAOFB-Win64-Shipping.exe *sob*

[Phalasius]

Hi everyone

. I try to find the Sea of thieves AES key in big exe with hexa editor, but nothing, do you think there can be find in associate .dll ?

About this external script https://github.com/mmozeiko/aes-finder, you think that can be help ?

You said

If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

but if is 250, what does it mean ?

Thank for all.

[mq1r2]

but if is 250, what does it mean ?

Thank for all.

250 is snappy compression