Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

[aluigi]

I had no interest in downloading 2Gb of file so I just got the first megabytes and the compression is oodle which may be the error you got since ZIP 4 was snappy or lz4 in other pak archives.
So make a screenshot of quickbms when it gives you the error.
Then what's the name of the game?

[bxaimc]

Oh whoops. I gave you the wrong link. Here's a piece from the main PAK.

https://drive.google.com/open?id=1OzNmZTB9mM6YH8YMkdjmtNYdapicKjEp



This is the error I'm getting.

[Software Bug]

Removed

[Tosyk]

tried to extract Farpoint ps4 PAK files.

script works fine, but loses 14% of the files:

Code: Select all

- 10265 files found in 446 seconds
  coverage file 0    86%   22052930264 25457853478 . offset 00000005ed6803fa

and umodel says:

Code: Select all

Pak F:\farpoint_vr_ps4\A0100\Image0\refuge\content\paks/pakchunk0-ps4.pak: 10265 files
Found 17412 game files (0 skipped)

is that okay? 86% is okay? will I lose some files?

[aluigi]

Over 3Gb of unparsed data in a 22Gb archive is a lot indeed but probably it depends by the game and the archive (aligned files with a big alignment maybe).
Maybe the archive has been "updated" and these 3Gb are the old unreferenced files, I doubt but who knows.
Both umodel and the script agree on the number of files so that's ok.

In case you are paranoid quickbms has a feature for debugging all the unparsed data, that pak file is really huge but if you want to try it anyway the option is -B and it will create a file called QUICKBMS_DEBUG_FILE that you can analyze with a hex editor.
You don't need to re-extract everything, just use:

Code: Select all

quickbms.exe -B -0 unreal_tournament_4.bms F:\farpoint_vr_ps4\A0100\Image0\refuge\content\paks\pakchunk0-ps4.pak

If you do it, keep us update

[Tosyk]

thanks Luigi!

I manage to deal with the debug process and got 3.3Gb QUICKBMS_DEBUG_FILE

Code: Select all

- 10265 files found in 266 seconds
  coverage file 0    86%   22052930264 25457853478 . offset 00000005ed6803fa

what should I search for in this file with HEX?

[aluigi]

Great
The first thing to do is checking if there are lot of zeroes used for padding/alignment.
A simple way to do the test is using the "replace" feature of the hex editor and replacing all the bytes 0x00 with nothing, save the edited file with a new name and tell me its size.

[PitterFisher]

F13 AES key is probably not in the game files, as i found this:

Code: Select all

https://steam.f13-services.illfonic.com:9111/v0/aes256/create
https://steam.f13-services.illfonic.com:9111/v0/aes256/retrieve

[Tosyk]

Great
The first thing to do is checking if there are lot of zeroes used for padding/alignment.
A simple way to do the test is using the "replace" feature of the hex editor and replacing all the bytes 0x00 with nothing, save the edited file with a new name and tell me its size.

I tried for 2 times do the replace an both process waste for 5-7 hours before I turned them off. I think it needs few days of constant work to do the job. Is there a faster way?

[aluigi]

@Tosyk
Impossible, that's something done relatively quick.
I have a tool on my website called rmchar, try it:
rmchar.exe input.dat output.dat 0
http://aluigi.org/mytoolz.htm (at the bottom of the category)

[Tosyk]

@Tosyk
Impossible, that's something done relatively quick.
I have a tool on my website called rmchar, try it:
rmchar.exe input.dat output.dat 0
http://aluigi.org/mytoolz.htm (at the bottom of the category)

thanks I got the file. attached

[aluigi]

Perfect it was just padding data so it's all correct
3Gb -> 250Kb

[Tosyk]

Perfect it was just padding data so it's all correct
3Gb -> 250Kb

great! thanks a lot Luigi. now I can trash all redundants

p.s.: Farpoint do not ask for AES key btw and works with unreal_tournament_4.bms v0.4.19

[aluigi]

Does that mean it doesn't work with script 0.4.20?

[Tosyk]

Does that mean it doesn't work with script 0.4.20?

I downloaded version 19 yesterday — you update script faster than I able to download it

[aluigi]

Ah yeah, I updated it because there was a small customization adopted by a game in which the offsets of the chunks were relatives instead of the default absolute ones.

For Mac users:
quickbms 0.9.0 is out and it includes openssl necessary for the encrypted UE4 archives.
Another difference in this macosx binary is that it's compiled for 64bit CPU because openssl wasn't available for 32bit in brew... well that's a problem only if you are using a very very old OS, the alternative was using the dynamically linked jurassik openssl 0.9.8 of the system but I preferred to have a 100% statically linked executable (99% because System needs to be dynamic).
Give me your feedback.

[GHFear]

If there is anyone here willing to teach a fella how to retrieve AES keys from Unreal games I would be eternally grateful. I have learned to mod most everything in Unreal Engine games over the years and could share some well kept secrets to whoever could show me how to get the AES key. I have spent a couple hundred hours going through the game with IDA Pro, breakpoints at launch all the way until after the AESENC: and AESDEC: and find nothing of interest.
I know how to launch custom maps and gamemodes in any Unreal 3-4 game, add new blueprints and C++ to menus in game and mod blueprints for unbannable mods and even how to mod variables, text, meshes, music and textures still inside the PAK file.

PM me if you know how to retrieve the AES keys. Thanks!

[Game Ripper]

Hi guys, is anyone able to find the key required for decryption of archives from MX vs ATV All Out v1.07? Apparently the old one doesn't work anymore.
Here's the newer EXE file. Thanks in advance!
Later!

[Wheatley126]

Just a little update, I found out that F13's .pak file is encrypted with libVorbis, if that helps at all

[jonno]

Just a little update, I found out that F13's .pak file is encrypted with libVorbis, if that helps at all

Vorbis is an audio codec