Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
tyrannojones
Posts: 30
Joined: Wed Aug 03, 2016 10:01 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by tyrannojones »

It did! Huh! Weirdly that key stopped working on the last iteration of it! Thanks for that man! I may have one more to ask you about later, but I'll work through this stuff first! Thanks so much! :D
tyrannojones
Posts: 30
Joined: Wed Aug 03, 2016 10:01 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by tyrannojones »

Okay, here're the ones I'm definitely unable to crack:

Blackout Club: https://mega.nz/#!VKxmUQJI!8_3t0oBvjPOm ... 292p3eqBeo
The Isle: https://mega.nz/#!EXgQWSoL!MozSPgMIbgj0 ... TA1tERaoVY

I know a few people after both a while back, but if you can work your magic here, I'd appreciate it TREMENDOUSLY!
GHFear
Posts: 290
Joined: Fri Mar 30, 2018 2:48 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by GHFear »

tyrannojones wrote:Okay, here're the ones I'm definitely unable to crack:

Blackout Club: https://mega.nz/#!VKxmUQJI!8_3t0oBvjPOm ... 292p3eqBeo
The Isle: https://mega.nz/#!EXgQWSoL!MozSPgMIbgj0 ... TA1tERaoVY

I know a few people after both a while back, but if you can work your magic here, I'd appreciate it TREMENDOUSLY!


Someone posted a "The Isle" key just the other day, did you try that? I can double check it tho.
Will post the keys I find in this reply when and if I find them

Possible keys (TheBlackoutClub):
Key: 0x488ABADE5D498BBD70F6619F0D4F694AAFA1E8C0F6E9F2BC6F054650614619AE

Key: 488ABADE5D498BBD70F6619F0D4F694AAFA1E8C0F6E9F2BC6F054650614619AE


Possible Keys (The Isle):

Key: 0xA9F5BF918A059B41BBED653BB240F65CFBB4ECDCABF4784FE24DEFE7DF560464
Last edited by GHFear on Sun Mar 24, 2019 8:58 pm, edited 1 time in total.
tyrannojones
Posts: 30
Joined: Wed Aug 03, 2016 10:01 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by tyrannojones »

Yeah, tried the Isle one posted and it definitely didn't. I'll give this one a go now! Cheers again dude!
Mysticus
Posts: 182
Joined: Sat Mar 02, 2019 3:24 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by Mysticus »

I need some help. I'm trying to extract sounds from the .uasset file from some games like Street Fighter V AE, Soul Calibur 6, One Justice and Dragon Quest 11, but nothing happens.
Is there another way to extract?
lolwatt
Posts: 36
Joined: Sat May 14, 2016 8:03 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by lolwatt »

GHFear wrote:Key: 0x488ABADE5D498BBD70F6619F0D4F694AAFA1E8C0F6E9F2BC6F054650614619AE


This one (aka the first one) works on my version of The Blackout Club. :)
Thank you very much!

Edit: It was requested before, but can you retrieve the key to Bright Memory, please?

Exe is here: https://drive.google.com/open?id=12B_y7 ... 1t1zXfFK97
GHFear
Posts: 290
Joined: Fri Mar 30, 2018 2:48 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by GHFear »

lolwatt wrote:
GHFear wrote:Key: 0x488ABADE5D498BBD70F6619F0D4F694AAFA1E8C0F6E9F2BC6F054650614619AE


This one (aka the first one) works on my version of The Blackout Club. :)
Thank you very much!

Edit: It was requested before, but can you retrieve the key to Bright Memory, please?

Exe is here: https://drive.google.com/open?id=12B_y7 ... 1t1zXfFK97


Bright Memory:

Possible Key(s):
Key: 0x54E729497C19BD6CF3F22C4906E45E64841621C9EC071C38FC46DF73E1AED7B1

Only got one possible key from the results. So it's either this or I can't find it yet.
lolwatt
Posts: 36
Joined: Sat May 14, 2016 8:03 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by lolwatt »

GHFear wrote:Key: 0x54E729497C19BD6CF3F22C4906E45E64841621C9EC071C38FC46DF73E1AED7B1


This works great, thanks one more time! :P
confetti91
Posts: 1
Joined: Mon Mar 25, 2019 9:01 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by confetti91 »

Everytime I try to use the quickbms & unreal_tournament_4 for Gears of War 4, it says access denied, since the paks are encrypted.

So then I tried using UWPDumper but the game crashes when it gets to the larger pak files.

Has anyone else been able to get GoW4 working?

Edit: Nevermind got it working. Manually changed Line 19: math WORKAROUND = 2
Last edited by confetti91 on Mon Mar 25, 2019 11:53 pm, edited 4 times in total.
r5gamer
Posts: 1
Joined: Mon Mar 25, 2019 9:35 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by r5gamer »

infogram wrote:
sade1212 wrote:
infogram wrote:Well I've made some great progress!

Amazing, you're single-handedly making this mod more realistic every day. Any chance of a detailed run down of the steps you've figured out so far (fixing up the .uasset and so on) or, if it's what you used to fix all the files, the updated version of NOTter?


Well it's actually not that difficult now I know how it works, might a bit difficult to explain all the steps in detail though, but basically all you really need to do is hex edit the .uasset of the sound you're replacing it with, and change the paths inside to match the path of the BGM you're replacing... well I wish it was that easy, but just a few bytes after the path is a hash the engine uses to ID the path, you also need to change that hash to the same hash that's inside the .uasset you're replacing.
I wasted literally hours because I didn't figure that out sooner >.>, without the updated hash the game won't be able to find the sound and you'll just get stuck with a black screen.

Maybe tomorrow I'll write a more detailed guide about it since I'm a little tired atm... but there might not actually be much point now, since I just figured out how the BGM is actually encoded too :)

It uses a codec called HCA, which is a Criware custom thing, completely different to the Ogg codec the other sounds use, that HCA is wrapped in a "SQEXSEAD" container, which gives all the info about the sample rate/channel count/etc.
Luckily for us there's a tool that can decode these into .wav: https://github.com/bnnm/vgmstream-build ... test-u.zip

To decode with that you need to extract it from the .uexp first, then run vgmstream like "test.exe -o output.wav input.sab", and you should get a .wav file with the BGM all decrypted :)
(attached a quick app which will extract the SQEXSEAD stuff from a .uexp, just drag+drop a non-Ogg .uexp into it)

There's a HCA encoder at https://github.com/OpenCGSS/DereTore/wiki/HCA-Encoder too, which I'm hoping will work to put new sounds back in, since I think this HCA stuff is the only way to get looped music working... I'll have a play around with that tomorrow.

Also did make an update for Notter to detect NOT'd files too, but it's really really slow, took around 2 hours to go through an unpacked data.pak and fix everything :/
It did do a pretty decent job though, found ~17,000 NOT'd files and fixed them, there's probably some it missed though, but that doesn't really matter much since we don't have to run it unpacked now :P
I'll post that up tomorrow though since I still need to clean it up a little.



I have "Failed to find SQEXSEAD header" to all file contain 4-1 kb & i read with HXD and on this i have found SQEXSEAD i don't no why is doesn't work can you help please !
nevir
Posts: 2
Joined: Wed Mar 27, 2019 1:23 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by nevir »

edit: ignore me; key already posted (satisfactory)
Last edited by nevir on Wed Mar 27, 2019 2:09 am, edited 1 time in total.
lorp
Posts: 4
Joined: Wed Mar 13, 2019 8:06 pm

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by lorp »

nevir wrote:I'm looking for the AES key to Satisfactory. Here's the main exe:

https://mega.nz/#!owJSwaDT!WZTuVcJ6CI1g ... yTb1VXyN_c


does the one already posted not work? (0xFC338743E664E39BC6B90152A41737E649C9C508A4A75170B22B04D3C44DC48E)
nevir
Posts: 2
Joined: Wed Mar 27, 2019 1:23 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by nevir »

Shit, sorry! Totally missed that post :(

That key works
Thomas886
Posts: 3
Joined: Tue Mar 26, 2019 6:52 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by Thomas886 »

Anyone can find the AES key of Injustice 2 mobile 3.0 Android?
Kamikaze_88
Posts: 2
Joined: Fri Mar 29, 2019 11:51 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by Kamikaze_88 »

Hi,

Firstly many thanks for this enormous effort you guys put into these kind of things, really admire what you guys are doing and wish I had the skill to do it.

With that said, could you perhaps help me get the key for VR Paradise? :oops: :lol:
https://www5.zippyshare.com/v/M1SWs3KD/file.html

many thanks!
GHFear
Posts: 290
Joined: Fri Mar 30, 2018 2:48 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by GHFear »

Kamikaze_88 wrote:Hi,

Firstly many thanks for this enormous effort you guys put into these kind of things, really admire what you guys are doing and wish I had the skill to do it.

With that said, could you perhaps help me get the key for VR Paradise? :oops: :lol:
https://www5.zippyshare.com/v/M1SWs3KD/file.html

many thanks!


Try this: 0xAACEA003AC51562122C15035C566DEB1E41B0D23ED8C8FEA86E84334A98F2723
Last edited by GHFear on Fri Mar 29, 2019 2:09 pm, edited 1 time in total.
Kamikaze_88
Posts: 2
Joined: Fri Mar 29, 2019 11:51 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by Kamikaze_88 »

VR Paradise / VRParadise
Key: 0xAACEA003AC51562122C15035C566DEB1E41B0D23ED8C8FEA86E84334A98F2723

GHFear, Thanks! you are a legend!

I tried using aes-finder and it gave me 3 sets of keys but none of them worked.
911dc947290000006c2600006c260000
5715ece2446a3bb2de84a5583602a544
0e83a272cf782e560e380b6221145b89
GHFear
Posts: 290
Joined: Fri Mar 30, 2018 2:48 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by GHFear »

Kamikaze_88 wrote:VR Paradise / VRParadise
Key: 0xAACEA003AC51562122C15035C566DEB1E41B0D23ED8C8FEA86E84334A98F2723

GHFear, Thanks! you are a legend!

I tried using aes-finder and it gave me 3 sets of keys but none of them worked.
911dc947290000006c2600006c260000
5715ece2446a3bb2de84a5583602a544
0e83a272cf782e560e380b6221145b89


Yeah that only works for very old AES keys. So not something you can find Unreal Engine keys with.
:P But yeah, I am glad to help out. It's good to have the keys backed up on this page, so just keep posting exe's.
TerryXX
Posts: 15
Joined: Sat Apr 30, 2016 9:01 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by TerryXX »

@GHFear have you already tried to find the key to Ace Combat 7???
GHFear
Posts: 290
Joined: Fri Mar 30, 2018 2:48 am

Re: Unreal Engine 4 pak-file Unpacker / unreal_tournament_4.bms [UE4 global topic]

Post by GHFear »

TerryXX wrote:@GHFear have you already tried to find the key to Ace Combat 7???


Yes, it's already been posted 1 or 2 pages back.