aluigi, posted Sat Jun 16, 2018 12:38 pm (35939)

---

Over 3Gb of unparsed data in a 22Gb archive is a lot indeed but probably it depends by the game and the archive (aligned files with a big alignment maybe).
Maybe the archive has been "updated" and these 3Gb are the old unreferenced files, I doubt but who knows.
Both umodel and the script agree on the number of files so that's ok.

In case you are paranoid quickbms has a feature for debugging all the unparsed data, that pak file is really huge but if you want to try it anyway the option is -B and it will create a file called QUICKBMS_DEBUG_FILE that you can analyze with a hex editor.
You don't need to re-extract everything, just use:

Code:

quickbms.exe -B -0 unreal_tournament_4.bms F:\farpoint_vr_ps4\A0100\Image0\refuge\content\paks\pakchunk0-ps4.pak

If you do it, keep us update

Tosyk, posted Sat Jun 16, 2018 12:59 pm (35944)

---

thanks Luigi!

I manage to deal with the debug process and got 3.3Gb QUICKBMS_DEBUG_FILE

Code:

- 10265 files found in 266 seconds
  coverage file 0    86%   22052930264 25457853478 . offset 00000005ed6803fa

what should I search for in this file with HEX?

aluigi, posted Sat Jun 16, 2018 1:01 pm (35946)

---

Great
The first thing to do is checking if there are lot of zeroes used for padding/alignment.
A simple way to do the test is using the "replace" feature of the hex editor and replacing all the bytes 0x00 with nothing, save the edited file with a new name and tell me its size.

PitterFisher, posted Sat Jun 16, 2018 2:40 pm (35953)

---

F13 AES key is probably not in the game files, as i found this:

Code:

https://steam.f13-services.illfonic.com:9111/v0/aes256/create
https://steam.f13-services.illfonic.com:9111/v0/aes256/retrieve

Tosyk, posted Sun Jun 17, 2018 7:24 am (35968)

---

aluigi wrote:

Great
The first thing to do is checking if there are lot of zeroes used for padding/alignment.
A simple way to do the test is using the "replace" feature of the hex editor and replacing all the bytes 0x00 with nothing, save the edited file with a new name and tell me its size.

I tried for 2 times do the replace an both process waste for 5-7 hours before I turned them off. I think it needs few days of constant work to do the job. Is there a faster way?

aluigi, posted Sun Jun 17, 2018 8:04 am (35970)

---

@Tosyk
Impossible, that's something done relatively quick.
I have a tool on my website called rmchar, try it:
rmchar.exe input.dat output.dat 0
http://aluigi.org/mytoolz.htm (at the bottom of the category)

Tosyk, posted Sun Jun 17, 2018 9:20 am (35971)

---

aluigi wrote:

@Tosyk
Impossible, that's something done relatively quick.
I have a tool on my website called rmchar, try it:
rmchar.exe input.dat output.dat 0
http://aluigi.org/mytoolz.htm (at the bottom of the category)

thanks I got the file. attached

aluigi, posted Sun Jun 17, 2018 10:37 am (35978)

---

Perfect it was just padding data so it's all correct
3Gb -> 250Kb

Tosyk, posted Sun Jun 17, 2018 10:46 am (35980)

---

aluigi wrote:

Perfect it was just padding data so it's all correct
3Gb -> 250Kb

great! thanks a lot Luigi. now I can trash all redundants

p.s.: Farpoint do not ask for AES key btw and works with unreal_tournament_4.bms v0.4.19

aluigi, posted Sun Jun 17, 2018 10:55 am (35982)

---

Does that mean it doesn't work with script 0.4.20?

Tosyk, posted Sun Jun 17, 2018 10:57 am (35983)

---

aluigi wrote:

Does that mean it doesn't work with script 0.4.20?

I downloaded version 19 yesterday - you update script faster than I able to download it

aluigi, posted Sun Jun 17, 2018 12:33 pm (35988)

---

Ah yeah, I updated it because there was a small customization adopted by a game in which the offsets of the chunks were relatives instead of the default absolute ones.

For Mac users:
quickbms 0.9.0 is out and it includes openssl necessary for the encrypted UE4 archives.
Another difference in this macosx binary is that it's compiled for 64bit CPU because openssl wasn't available for 32bit in brew... well that's a problem only if you are using a very very old OS, the alternative was using the dynamically linked jurassik openssl 0.9.8 of the system but I preferred to have a 100% statically linked executable (99% because System needs to be dynamic).
Give me your feedback.

GHFear, posted Sun Jun 17, 2018 3:07 pm (35992)

---

If there is anyone here willing to teach a fella how to retrieve AES keys from Unreal games I would be eternally grateful. I have learned to mod most everything in Unreal Engine games over the years and could share some well kept secrets to whoever could show me how to get the AES key. I have spent a couple hundred hours going through the game with IDA Pro, breakpoints at launch all the way until after the AESENC: and AESDEC: and find nothing of interest.
I know how to launch custom maps and gamemodes in any Unreal 3-4 game, add new blueprints and C to menus in game and mod blueprints for unbannable mods and even how to mod variables, text, meshes, music and textures still inside the PAK file.

PM me if you know how to retrieve the AES keys. Thanks!

Game Ripper, posted Sun Jun 17, 2018 5:39 pm (35996)

---

Hi guys, is anyone able to find the key required for decryption of archives from MX vs ATV All Out v1.07? Apparently the old one doesn't work anymore.
Here's the newer EXE file. Thanks in advance!
Later!

Wheatley126, posted Sun Jun 17, 2018 5:45 pm (35997)

---

Just a little update, I found out that F13's .pak file is encrypted with libVorbis, if that helps at all

jonno, posted Sun Jun 17, 2018 7:14 pm (35999)

---

Wheatley126 wrote:

Just a little update, I found out that F13's .pak file is encrypted with libVorbis, if that helps at all

Vorbis is an audio codec

Game Ripper, posted Tue Jun 19, 2018 9:46 am (36028)

---

Hmm, apparently that key suggested by MrMe here should still work with EXE from v1.07: I've just found the same text string in it.
So I'm wondering where's the root of my trouble... any suggestions? Actually I'm trying to decompress / unpack / decrypt a FMOD bank, should such files be processed differently than UE4 PAK archives?
Later!

ChrisX930, posted Wed Jun 20, 2018 9:50 am (36048)

---

Hey Guys,

I just decrypted the Nintendo Switch Game "Fortnite" and wanted to extract and probably rebuild the pak I just extracted from the Game.

I've tried the unreal_tournament_4.bms to extract the pak-file ( http://zenhax.com/viewtopic.php?f=9&t=1005 ) without luck.

I'm getting this error:

Quote:

select the BMS script to use. type ? for using the clipboard
- select the input archives/files to extract, type * or "" for whole folder and subfolders
- select the output folder where extracting the files
- open input file I:\Nintendo Switch\Fortnite Update\romfs\FortniteGame\Content\Paks\FortniteGame-Switch.pak
- open script I:\Nintendo Switch\Fortnite Update\romfs\FortniteGame\Content\Paks\unreal_tournament_4 (1).bms
- set output folder I:\Nintendo Switch\Fortnite Update\romfs\FortniteGame\Content\Paks

offset filesize filename
--------------------------------------
0000000000000000 0 FortniteGame/FortniteGame.uproject
0000000000000049 7404 FortniteGame/FortniteGame.uproject
Info: algorithm 250
offset 0000000000000049
input size 0x0000000000000586 1414
output size 0x0000000000001cec 7404
result 0xffffffffffffffff -1

Error: the uncompressed data (-1) is bigger than the allocated buffer (7404)

Last script line before the error or that produced the error:
194 clog NAME CHUNK_OFFSET CHUNK_ZSIZE CHUNK_SIZE

Using u4pak.py gives me this:

Quote:

u4pak.py info "I:\Nintendo Switch\Fortnite Update\romfs\FortniteGame\Content\Paks\FortniteGame-Switch.pak"
unsupported version: 6

So it seems the file is somehow compressed and uses UE4 PAK version 6?

Could you help me out with that?

I want to extract the files and, if possible, rebuild it / replace files.


EDIT:
Here's the file:
https://drive.google.com/open?id=1s8fKs24vjnt-w63PQh04LPcnvkhOqku9

aluigi, posted Wed Jun 20, 2018 10:21 am (36050)

---

Are you using script 0.4.20?

I remember some user posted something about version 6 and it was fixed in 0.4.20.

ChrisX930, posted Wed Jun 20, 2018 10:35 am (36051)

---

aluigi wrote:

Are you using script 0.4.20?

I remember some user posted something about version 6 and it was fixed in 0.4.20.

My Script ist the 0.4.20 version (Unreal Engine 4 - Unreal Tournament 4 (*WindowsNoEditor.pak) (script 0.4.20))
But with this script, it doesn't seems to work :S

aluigi, posted Wed Jun 20, 2018 1:00 pm (36052)

---

Try the new script 0.4.20a in which I force oodle if VERSION is 6, maybe now it works.
It's the same link.

ChrisX930, posted Wed Jun 20, 2018 1:34 pm (36054)

---

it worked, it seems.
Thanks . !

Zikmont, posted Sat Jun 23, 2018 4:06 am (36125)

---

Hey! Is there anyone who can find an AES key in this file? Pls, help me...I dunno what to do
https://drive.google.com/open?id=1obIf2 ... oy2NONn41y

Zikmont, posted Mon Jun 25, 2018 3:42 am (36197)

---

2 files that i got with filecutter.bms
https://drive.google.com/file/d/1Q65lDJEuaDV8Qbf5vSQC6DB6wpJZfOkx/view?usp=sharing
https://drive.google.com/file/d/1q9D5IfZnOHCM2n7iLoZDxW4j9VmrIoht/view?usp=sharing

Help me pls with aes key. I need it a lot

Zikmont, posted Mon Jun 25, 2018 2:24 pm (36205)

---

Can . helps me or someone else? I dunno how to find the AES key in exe file. I know that it's in there, but i dunno how to find it. May be someone will teach me what to do or where I have to look at? I've tried to use this script https://github.com/mmozeiko/aes-finder but it doesn't work to me. So what I'm gonna do?