aluigi, posted Sat Feb 03, 2018 9:56 am (32141)

---

If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

blenux, posted Sun Feb 04, 2018 2:04 am (32181)

---

Someone over at gildors forums believes the aes key is encoded or is a binary one know, not a text type.

Quote:

AES key is no longer in plain text in the game executable. I extracted all viable AES Key Strings from it. So they probably encoded the key or switched to a binary key.
Those are the new Strings from the 2.4.0 executable: https://puu.sh/zfPpH/79e39fc38a.txt
Old Strings (which contained the key): https://puu.sh/zfPqe/77574c8f6d.txt

Post by haubna..

Both Fortnite and Paragon are using 4.19 engines also...

mq1r2, posted Mon Feb 05, 2018 6:53 pm (32224)

---

aluigi wrote:

If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

Well I wasn't really able to confirm it being zlib with the comptype scanner, could they be using custom compression?

aluigi, posted Mon Feb 05, 2018 8:56 pm (32225)

---

It's written by quickbms as visible in the example I provided, the "?" placeholder at right of "algorithm"

mq1r2, posted Tue Feb 06, 2018 5:08 pm (32245)

---

aluigi wrote:

It's written by quickbms as visible in the example I provided, the "?" placeholder at right of "algorithm"

Well it does try to unpack it using zlib(1), but does the

Code:

the compressed zlib/deflate input is wrong or incomplete (-3)

- error mean the selected compression is invalid or that the encryption key was incorrect?

ifthatsthecase, posted Wed Feb 07, 2018 3:11 pm (32257)

---

So PUBG Test Server has now encrypted their paks, I tried using the AES keys with my limited knowledge but I didn't have any success unpacking them. How do I get the correct key or how can I extract the files nonetheless?

bizzfarts, posted Wed Feb 07, 2018 3:13 pm (32258)

---

PUBG current test server build uses encryption, key: 45DD15D6DD2DA50AEB71CE7A5284CF8EA498B2EC3D52B7E336F3EA0071CE44B3

edit: Moved to live server, same key.

ifthatsthecase, posted Wed Feb 07, 2018 4:01 pm (32260)

---

bizzfarts wrote:

PUBG current test server build uses encryption, key: 45DD15D6DD2DA50AEB71CE7A5284CF8EA498B2EC3D52B7E336F3EA0071CE44B3

I can't thank you enough! For the future, how would I go and find this key?

Edit: I'm dumb, thank you nevertheless

peupuppy, posted Fri Feb 09, 2018 4:01 pm (32304)

---

How to use encryption key in command line? (quickbms.exe [Option with key?] file.bms file.pak Output]

aluigi, posted Fri Feb 09, 2018 8:59 pm (32310)

---

There is no way from command-line.
You can add it directly to the script if you don't want to type it everytime, there is a section of the script at the beginning with various "putarray" commands, use the same putarray command at the beginning of the script (first line is ok) with your key.
The script accepts also binary keys like "\x01\x02\x03".
Example:
putarray 10 -1 "45DD15D6DD2DA50AEB71CE7A5284CF8EA498B2EC3D52B7E336F3EA0071CE44B3"

LearningGuy, posted Sat Feb 10, 2018 8:53 pm (32343)

---

. i need help , i manage to decrypt the file and get the content inside , when i done modify the files , i repacked the file. but i cant get to encrypt again because i cant find right script / software

LearningGuy, posted Mon Feb 12, 2018 2:16 pm (32416)

---

how to find encryption key on pubg ?
i have limited knowledge

r41d3r, posted Tue Feb 13, 2018 11:05 pm (32451)

---

hello Aluigi!
trying for like 4hours already to decrypt files from Battle Rush game.
used UT4.bms

all what i got is

Code:

QuickBMS generic files extractor and reimporter 0.8.3
by Luigi Auriemma
e-mail: [email protected]
web:    aluigi.org
        (Jan 21 2018 - 15:18:31)

                   quickbms.aluigi.org  Homepage
                            zenhax.com  ZenHAX Forum
                               @zenhax  Twitter & Scripts

- GUI mode activated, remember that the tool works also from command-line
  where are available various options like folder scanning, filters and so on

- select the BMS script to use
- select the input archives/files to extract, type * or "" for whole folder and subfolders
- select the output folder where extracting the files
- open input file C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
- open script C:\Users\Dafuq\Downloads\quickbms\unreal_tournament_4.bms
- set output folder C:\Users\Dafuq\Downloads\quickbms\hd

  offset   filesize   filename
--------------------------------------
The archive is encrypted, select the number of the key to use or type yours:
0: KIWIKIWIKIWIKIWIKIWIKIWIKIWIKIWI
1: _aS4mfZK8M5s5KWC2Lz2VsFnGKI7azgl
2: bR!@nbR0wnc@rychR!$d@nd@v3d3R3kj!mj0$hk3v!nm!ch@3lm!k3s3@nst3v3t!m
3: casd#55@#$%323!$^#b%05sa5W|hhaf4365s52ss51|55m!|{55s^@@36f233|-|0w@%3g8hssDk35/!Nm|_|%ds23%a32d5&23as3%12p|-|y$t3ds562d23fav3c@dyw38#49
4: C8C4847F3B4FA52D4AAD57A52358CDBC
5: k14z0ZLR8a7jNm49uyBzxXYY9LpTHcehLSNiC3jAkzBsffPuy8YsTa72RLD9KWIn
6: E7@[dZfoYCW; YWR;0JK^{9tt:yU0_T&
7: E1A1F2E4AA066C54BD5090F463EDDF58D01684243672B3CE809FF47FF473B04A
8: I0vV6wr0TFbg3m23QuSIwnYC1sI0AIDq
9: VWSUATAUAVAW
10: y298qjSb115NqQ3Agad30DWn2QYrTI8CT6aP05l2PBV9Qe92S94PdoVCCy06A38L
11: b9uW0RKNY91be8HN3Lemi68j6Xsi2l7fQJYsp5oR4al4C4c9kY5E0l90411l9P3L
12: press RETURN for no encryption (Lineage 2 Revolution)

- please insert the content for the variable KEY:

KEY: no key, encryption disabled
  ed9aa0f9 2683053906 00000000.dat

Error: incomplete input file 0: C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
       Can't read 64 bytes from offset ed9aa0f9.
       Anyway don't worry, it's possible that the BMS script has been written
       to exit in this way if it's reached the end of the archive so check it
       or contact its author or verify that all the files have been extracted.
       Please check the following coverage information to know if it's ok.

  coverage file 0     0%   236461     40809808   . offset ed9aa0f9

Last script line before the error or that produced the error:
  174 clog NAME OFFSET ZSIZE SIZE

Press ENTER or close the window to quit

this is a part from .PAK https://drive.google.com/open?id=1YQo_5LJFCzCV2W_v4IQ3nqt38YfWC5xn
i suppose this is a .Exe file https://drive.google.com/open?id=14dI8t5rfbJ3H-cR2u1t2I4e7e1_WMa00

can you help me ? ^^

r41d3r, posted Thu Feb 15, 2018 7:00 pm (32478)

---

tried to trace exe and just find aec key via notepad still nothing, is anybody know any way of retrieving the aes key from exe ?

bizzfarts, posted Sat Feb 17, 2018 9:18 pm (32557)

---

w^yR*H3Ew_b@5@dpjB*RvRE^=$VBB6xY

r41d3r, posted Sun Feb 18, 2018 9:19 am (32570)

---

omg, thank you. can i ask you a question ? how you found that ?

mq1r2, posted Mon Feb 19, 2018 2:59 pm (32606)

---

aluigi wrote:

If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

What do you mean by that? The key changes every time the game launches or something? (and yes it's zlib)

aluigi, posted Mon Feb 19, 2018 7:47 pm (32614)

---

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

huchi001, posted Tue Feb 20, 2018 3:49 am (32628)

---

new android UE4 game 'BLADE2'

PAK is encrypted.
Is there a way to get an aes key?

sample pak download link : https://drive.google.com/file/d/1M3XjiN ... sp=sharing

mq1r2, posted Tue Feb 20, 2018 4:37 pm (32641)

---

aluigi wrote:

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))

aluigi, posted Tue Feb 20, 2018 11:13 pm (32649)

---

In some previous posts some users reported that games are starting to no longer store the keys in clear-text, that's the reason why you can't find it.
If you are not into reverse engineering you have to wait that other users post the keys (if they care/want).

blenux, posted Thu Feb 22, 2018 10:14 am (32681)

---

Anyone know the aes key for Fractured Space game? Thanks in advance.

MrMe, posted Thu Feb 22, 2018 3:03 pm (32684)

---

mq1r2 wrote:

aluigi wrote:

I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.

So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))

I can help you, but you have to upload to dumped executable.

makc_ar, posted Fri Feb 23, 2018 7:55 pm (32700)

---

Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet



SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur

MrMe, posted Fri Feb 23, 2018 10:39 pm (32702)

---

makc_ar wrote:

Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet



SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur

Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump