TopHat, posted Tue Jun 29, 2021 5:04 pm (64976)

---

@spiritovod When I extracted the paks I did indeed get a folder full of numerical wem files in the "Streams" folder and the other folders had specifically named uassets.
https://imgur.com/a/crEnYaq

I'll use that tool with the wem files. My question is are those wem files in the Streams folder just the same as the uassets in the other folders just without proper names?

spiritovod, posted Tue Jun 29, 2021 7:29 pm (64980)

---

@TopHat: If these uassets are relatively small, they are most likely contain info about wem files and control schemes, as UE can't read such wwise format directly. If you have more questions about already extracted audio, feel free to create separate topic at Audio format section of the forum, since this topic is for general issues with UE packages, including encryption and extraction.

DJ Normality, posted Fri Jul 02, 2021 7:33 am (65003)

---

Bloodhunt AES keys ? Please and thanks!
https://drive.google.com/file/d/1PUJ55G ... sp=sharing

spiritovod, posted Fri Jul 02, 2021 12:00 pm (65004)

---

@DJ Normality: I've added the key to the list (available via my signature), but the package has custom format and current scripts are not compatible with it. I'll take a look at it later, the issue looks similar to Scavengers (though that script also doesn't work properly here).

------------------------------------------------------

Bloodhunt script added to specific scripts bundle. Though one file seems bugged and it will not be extracted.

DJ Normality, posted Sat Jul 03, 2021 4:04 pm (65017)

---

Thank you working good!! I did make a account for that site your on. Very cool. You have helped me do many titles. Also I organized the keys differently they do seem easier to read. The new ones in [update] I found randomly I think some are there but others are not. So them just need organized. Anyway. Thanks again for all you do and I really appreciate this one. Any news on Tony Hawk 1&2 HD ? I found 34 keys in that game but I cant seem to dump the assets with any of them. When you got time of course.
I started doing BloodHunt and noticed Umodel fails so the only way to get anything is by batching the files and im still not seeing any meshes. Maybe I just havent reached them yet.

**update**

I did find meshes so im happy

Lx22, posted Sat Jul 03, 2021 6:25 pm (65021)

---

DJ Normality wrote:

Thank you working good!! I did make a account for that site your on. Very cool. You have helped me do many titles. Also I organized the keys differently they do seem easier to read. The new ones in [update] I found randomly I think some are there but others are not. So them just need organized. Anyway. Thanks again for all you do and I really appreciate this one. Any news on Tony Hawk 1&2 HD ? I found 34 keys in that game but I cant seem to dump the assets with any of them. When you got time of course.

I started doing BloodHunt and noticed Umodel fails so the only way to get anything is by batching the files and im still not seeing any meshes. Maybe I just havent reached them yet.

**update**

I did find meshes so im happy

what did you use to view the meshes?

spiritovod, posted Sat Jul 03, 2021 7:27 pm (65024)

---

@DJ Normality: I understand your concern about list format, but due to forum's format limitations and automatic line breaks in case of high scale settings or viewing in portrait mode suggested representation will be much harder to read, compared to the current one.
If you mean latest THPS 1 2 game (HD are remakes from 2012 & 2016), you can read about it in this topic and this post.
And next time please don't directly insert screenshots like this, you can attach them to your posts or provide links for them at image hosting.

@Lx22: Bloodhunt is supported by umodel (after extraction), since it's a UE4 game, there is a topic for it here. If you have other questions about particular assets (like models), feel free to ask in respective forum sections, since this topic is for general issues with UE packages, including encryption and extraction.

anas43950, posted Sun Jul 04, 2021 6:16 am (65032)

---

aluigi wrote:

The files inside the pak archives aren't encrypted.
Have you tried to just press RETURN when quickbms tells you to select the encryption key?

Bro plz help me in repacking the .dat files into a pak file
The reimport command is not working
I am trying it for pubgm india pak file
I have successfully unpacked and editted it
Many youtubers are providing editted paks but I want to make one for myself with specific features
I know there is a way to repack it, I just can't figure it out
Plz help

Kein, posted Sun Jul 11, 2021 2:27 pm (65138)

---

Nvm, found the answer

lokakam, posted Thu Jul 15, 2021 9:40 am (65208)

---

Hello, can someone help me to find AES key. (Police Simulator: Patrol Officers)
https://www100.zippyshare.com/v/LXimST8M/file.html

spiritovod, posted Thu Jul 15, 2021 10:51 am (65209)

---

@lokakam: The game is not encrypted - just use 4.26 script from the post in my signature, it should work.

ninokuni, posted Tue Jul 20, 2021 8:41 am (65269)

---

ninokuni, posted Tue Jul 20, 2021 8:49 am (65270)

---

@spritovod

It was in your post!
thanks so much.

DJ Normality, posted Fri Jul 23, 2021 4:34 am (65312)

---

New World Keys ? I tried myself but no luck. Please n thanks.
https://mega.nz/file/rqYRkIyD#go0XUgO0o ... KPFA8I3gAg

spiritovod, posted Fri Jul 23, 2021 7:25 am (65316)

---

@DJ Normality: It's not an UE game. Also, there is a topic for it already.

------------------------------------------------------

I've updated 4.26 script, it now handles more default flags. It should fix an issue with Orcs Must Die 3 and other games like this.

ardvent, posted Thu Aug 05, 2021 8:27 pm (65536)

---

I'm stuck on Back4Blood's new PAK format.
Neither the official Unreal 4 BMS script or spiritvoid's script works.
The PAK files are packchunk#-WindowsNoEditor.pak and contain .sig signature files.
The Engine version is 4.25

I uploaded pakchunk0-WindowsNoEditor.pak for testing: https://www.filemail.com/d/qrdnjwjslmnblnu

File in a hex editor:


quickbms -l output:

Code:

quickbms.exe -l unreal_tournament_4_0.4.25b.bms 'F:\SteamLibrary\steamapps\common\Back4BloodBeta\Gobi\Content\Paks\pakchunk0-WindowsNoEditor.pak'

QuickBMS generic files extractor and reimporter 0.11.0

- open input file F:\SteamLibrary\steamapps\common\Back4BloodBeta\Gobi\Content\Paks\pakchunk0-WindowsNoEditor.pak
- open script unreal_tournament_4_0.4.25b.bms

  offset   filesize   filename
--------------------------------------

- 0 files found in 0 seconds
  coverage file 0     0%   64         67286771   . offset 00000008

Using the official unreal_tournament_4.bms runs into a memory error

gladias9, posted Fri Aug 06, 2021 2:00 am (65546)

---

As stated above, Back 4 Blood .paks aren't supported by current scripts. Needs update

spiritovod, posted Fri Aug 06, 2021 10:04 am (65555)

---

@ardvent, @gladias9: The game is using slightly different package format, which could be easily fixed in the script, but it seems they've customized encryption as well, while both index and assets(?) are encrypted. And denuvo EAC doesn't make it easier to analyze at all.
I'll update this post later, but for now situation looks more like the one with latest Tony Hawk's Pro Skater (which was never solved, afaik). Just to avoid questions about correct key, it's 0x30A725CE..., though as you can understand it's quite useless in case of custom encryption.

Update: The thing is that you can actually extract every package from the current distro of open beta, except the first one. This approach looks strange and more like a flaw, so currently I'm very uncertain is it worth to release a solution or wait until beta will end (or even longer) to avoid possible fixes on that side. Here is POC for the idea though.

ardvent, posted Mon Aug 09, 2021 7:51 pm (65657)

---

spiritovod wrote:

@ardvent, @gladias9: The game is using slightly different package format, which could be easily fixed in the script, but it seems they've customized encryption as well, while both index and assets(?) are encrypted. And denuvo EAC doesn't make it easier to analyze at all.
I'll update this post later, but for now situation looks more like the one with latest Tony Hawk's Pro Skater (which was never solved, afaik). Just to avoid questions about correct key, it's 0x30A725CE..., though as you can understand it's quite useless in case of custom encryption.

Update: The thing is that you can actually extract every package from the current distro of open beta, except the first one. This approach looks strange and more like a flaw, so currently I'm very uncertain is it worth to release a solution or wait until beta will end (or even longer) to avoid possible fixes on that side. Here is POC for the idea though.

This has been helpful, and I've been able to test the PoC, but the PAK provided differs from the one in the game files, how were you able to decrypt the index? Was the key 0x30A725CE?

Edit, additionally UnrealKey came up with nothing for the EXE

Edit: I see that is an address, but I'm having trouble looking it up in HxD i'll investigate further.

Kyser7, posted Fri Aug 13, 2021 4:52 pm (65702)

---

I'm struggling to correctly deserialize FloatCurve (or CurveFloat, depending where you read) ATT property files at the moment.

I've got two different tools which can actually deserialize the curvefloat uasset/uexp files, but both give incorrect results. I've attached an example.

JohnWickParse / uasset-data-extract results (attached) are missing the "value" property for the curve keys, umodel can't parse it, and fmodel results (attached) gives garbled numbers which don't make sense.

Fmodel looks the most complete, but most of the values are jumping randomly between tiny (1e-43) and huge (1e22) values, which makes no sense for a curve meant to run from about 20 to 5000 or 6000.

I'm pretty new to UnrealEngine in general, so I haven't made much progress so far - from the looks most of the deserialization functions have been found by trial and error.

spiritovod, posted Fri Aug 13, 2021 10:43 pm (65708)

---

@Kyser7: quickbms is designed more for extraction / repacking things rather than deserializing complex structures. It's better to ask such questions at more relevant places, like Fmodel community at discord or UE forums - or check UE documentation / source code. For now it seems you're a bit confused with definitions, since FloatCurve may be an instance of UCurveFloat object or FRichCurve struct, both of them are not that simple. Judging by the sample, you're interested in FRichCurveKey, but there is possibility that the game in question is using custom implementation of that part, hence those strange results in Fmodel - which it's designed mainly for Fortnite with its own differences from stock engine, so for other random UE4 games produced data may be incorrect and you'll need to parse it manually.

---------------------------------------------------------

Back 4 Blood script added to specific scripts bundle. It's compatible only with paks with decrypted indices due to custom encryption, used in PC version. You can find such paks in special version of OBT build, provided in the game topic.

Kyser7, posted Sat Aug 14, 2021 11:10 am (65717)

---

@spiritovod Thanks. I believe they are FRichCurve (splines), but that could just be the deserializer incorrectly interpreting the struct type. Sadly already asked at both FModel and QuickBMS communities, and haven't managed to pique anybodies interest enough to investigate on my behalf. If the answer is I need to learn the UE source code and fork QuickBMS/FModel/Whatever to correctly parse the struct, then I suppose that is what I need to do... just hoping someone else on here may see it and go "Oh yeah, I know that issue". I was somewhat surprised that FRichCurves/UCurveFloats aren't already correctly deserialized, considering how much they get used in animations and such.

Kein, posted Sun Aug 15, 2021 5:26 am (65733)

---

Kyser7 wrote:

I'm struggling to correctly deserialize FloatCurve (or CurveFloat, depending where you read) ATT property files at the moment.

I have already extracted all values for the Isle, it is in the table sheet posted earlier on subreddit.

@spiritovod
The b4b script just skips every file in pakchunk0-WindowsNoEditor.pak - there is no way to extract it manually? It has the most useful data

spiritovod, posted Sun Aug 15, 2021 1:29 pm (65739)

---

@Kein: This skipping part was added only to ensure that encrypted assets will be properly skipped in other archives. Apparently, they exist only in the first pak and I could simply exclude it and don't add that part to the script, but oh well...
The only way to do it "manually" is to fully automate it, like writing a plugin for debugger to dump certain registers at certain breakpoints - or to reverse decryption scheme. In this case it looks like only key expansion function is modified, so you can grab expanded key and use it with default AES implementation, but I may be wrong. Anyway, it's only a beta and anything can change in the full release.

LiangZong, posted Sat Aug 21, 2021 4:39 pm (65807)

---

Arena Breakout / ????

Apk Link:https://dlcdn-live.uam.qq.com/Public/TechnicalTest/UAGame-Android-Shipping-arm64-es2_v1.0.52.52.0_253553.signed.shell.apk

The AES Key for this game could not be found, the SO file is encrypted.

4.26 game