Dead By Daylight - 3.3.0 brings AES Encryption to QuickBMS

[NecroCrafts]

Welp sad day today. Looks like with the introduction to DbD 3.3.0 they decided to start using AES. uModel works fine strangely, but QuickBMS requires a key. Anyone want to be a clutch legend and find it? Would be greatly beneficial for leaks on the game and the community. You will be credited on my Youtube, cheers!

Here's a link to the win64-no-edit and a pakchunk for trial and error

http://www.mediafire.com/file/duo4mq5xo ... k.rar/file

[spiritovod]

uModel works fine strangely, but QuickBMS requires a key.

It's because they've encrypted only config files and probably archive index, while assets are still unencrypted and uModel can work with them directly.
Is that possible to share actually encrypted pak? I suppose it should be pakchunk0-WindowsNoEditor (you can test it with quickbms by unpacking it).

[NecroCrafts]

uModel works fine strangely, but QuickBMS requires a key.

It's because they've encrypted only config files and probably archive index, while assets are still unencrypted and uModel can work with them directly.
Is that possible to share actually encrypted pak? I suppose it should be pakchunk0-WindowsNoEditor (you can test it with quickbms by unpacking it).

I did leave a pakchunk in the mediafire link above if it helps any! I chose one that was small enough for easier file upload. I don't know much about how AES works, but any knowledge is welcomed.

[spiritovod]

if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.

[Dark_VladislaV]

if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.

pakchunk0

[Dark_VladislaV]

if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.

https://media.discordapp.net/attachment ... nknown.png
and https://media.discordapp.net/attachment ... nknown.png
i found way to decrypt, thx for hint =)

[spiritovod]

i found way to decrypt, thx for hint =)

That's good to hear. Thanks for the file, but it's not encrypted as well. I wonder, is it really something encrypted there, because I was able to extract both provided paks without any aes prompt with quickbms and the latest script.

Anyway, I'll post what I've found as a key, but since I can't confirm it, it could be wrong.

Code: Select all

0x8F856C5E220E60479AFEEA3317B671738527B3F1BA6FCF4F9D557B8E7F157091

[NecroCrafts]

i found way to decrypt, thx for hint =)

That's good to hear. Thanks for the file, but it's not encrypted as well. I wonder, is it really something encrypted there, because I was able to extract both provided paks without any aes prompt with quickbms and the latest script.

Anyway, I'll post what I've found as a key, but since I can't confirm it, it could be wrong.

Code: Select all

0x8F856C5E220E60479AFEEA3317B671738527B3F1BA6FCF4F9D557B8E7F157091

That's odd, Ill try this Key and report back if it worked in QuickBMS.

Edit: Negative, did not work.

[spiritovod]

Negative, did not work.

Well, I expected that. So, actually encrypted pak is required or maybe the whole game. You can find out which pak is encrypted by trying to extract chunks one by one (and quickbms should ask for aes key on encrypted one). At least pakchunk0 and pakchunk8 are not encrypted. Without that it will be just random guessing, sorry.

[frutto]

Hi, after opening quickbms.exe, I choose unreal_tournament_4.bms script (I use 0.4.23 version). Then I select pakchunk0-WindowsNoEditor.pak file to unpack and an output folder. Script asks me to enter encryption key. I dont enter any key and press enter. After that, this error appears. Any suggestions?

[spiritovod]

Try to use latest bms script (from my signature).