xLumexMoonx, posted Mon Nov 13, 2017 6:49 pm (30023)

---

aluigi wrote:

Honestly I don't know what's the exact problem but probably I can guess it.
The following are the details of the involved entries (last entry plus the next one):

Code:

. 00000000000013ce
.
. 00000000009c3358 get     NAMESZ     0x0000000000000029 -1030
. 00000000009c335c getdstr NAME       "Infernales/Content/hell4_BuiltData.ubulk"
 41
    49 6e 66 65 72 6e 61 6c 65 73 2f 43 6f 6e 74 65   Infernales/Conte
    6e 74 2f 68 65 6c 6c 34 5f 42 75 69 6c 74 44 61   nt/hell4_BuiltDa
    74 61 2e 75 62 75 6c 6b 00                        ta.ubulk.
. 00000000009c3385 get     OFFSET     0x00000000e683c000 8
. 00000000009c338d get     ZSIZE      0x00000000502df800 8
. 00000000009c3395 get     SIZE       0x00000000502df800 8
. 00000000009c339d get     ZIP        0x0000000000000000 4
. 00000000009c33a1 getdstr HASH       "" 20
    00 20 75 52 e2 88 8a 10 fc 15 a2 49 f8 43 f4 16   . uR.......I.C..
    35 ff 4e 5c                                       5.N\
. 00000000009c33b5 get     ENCRYPTED  0x0000000000000000 1
. 00000000009c33b6 get     CHUNK_SIZE 0x0000000000000000 4
.
. 00000000000013cf
.
. 00000000009c33ba get     NAMESZ     0x0000000000000028 -1030
. 00000000009c33be getdstr NAME       "Infernales/Content/hell4_BuiltData.uexp"
40
    49 6e 66 65 72 6e 61 6c 65 73 2f 43 6f 6e 74 65   Infernales/Conte
    6e 74 2f 68 65 6c 6c 34 5f 42 75 69 6c 74 44 61   nt/hell4_BuiltDa
    74 61 2e 75 65 78 70 00                           ta.uexp.
. 00000000009c33e6 get     OFFSET     0x0000000136b1c000 8
. 00000000009c33ee get     ZSIZE      0x0000000009af7960 8
. 00000000009c33f6 get     SIZE       0x0000000009af7960 8
. 00000000009c33fe get     ZIP        0x0000000000000000 4
. 00000000009c3402 getdstr HASH       "" 20
    9f a9 35 fc 46 ef b8 29 1c b2 56 8b fc 98 ea 01   ..5.F..)..V.....
    17 e8 ab db                                       ....
. 00000000009c3416 get     ENCRYPTED  0x0000000000000000 1
. 00000000009c3417 get     CHUNK_SIZE 0x0000000000000000 4

As visible there, we have just a non-compressed file.
The script uses Clog instead of Log for working easily with encrypted files without doing a branch of instructions for compressed and one for uncompressed files, probably this choice consumes lot of memory for nothing and this is something I'm going to check in the next version of quickbms.

In short I see no errors in the script and I guess the problem is just in the impossibility to re/allocate the memory necessary for extracting the files, in fact "Infernales/Content/hell4_BuiltData.ubulk" is quite big (1.3 Gb) resulting in too much memory for a 32bit process.

Now, how to fix it in the meantime?
Try running quickbms_4gb_files.exe with the -9 option, if you use the double-click gui you must simply make a shortcut to the exe and adding -9 to the Target property of the shortcut.

Let me know if it works.
If it doesn't work you have to wait the next version of quickbms which is not planned yet.

ok.

it still doesn't work:

http://www.mediafire.com/view/a082de5bo ... Error.jpg#

but i hope u can make it for the future.

ronnan2009, posted Fri Dec 01, 2017 3:27 pm (30431)

---

Any way of making this work with Transformers online game, .pak files? http://tfol.qq.com/main.shtml

aluigi, posted Sat Dec 09, 2017 9:19 am (30601)

---

Use the filecutter on the pak archive and upload the 2 generated files:
http://aluigi.org/bms/filecutter.bms

mbit555, posted Thu Dec 14, 2017 4:36 pm (30756)

---

Hey. I'm having a problem with the Fortnite game, it looks like encryption is used.
I enclose exe and two files of 10 mb through the program filecutter.bms (http://zalil.su/7613466)

This game uses the system of dividing pak into pieces (http://prntscr.com/hnhwpb) This is what the unreal_tournament_4 script produces.bms when I select the file pakchunk0-WindowsClient.pak (http://prntscr.com/hnhxhg)

I tried to find the encryption key through the HEX editor (http://prntscr.com/hnhzyl) but it did not help. Maybe I'm doing something wrong? AES key is: VWSUATAUAVA

UPD: I was mistaken, the real key is: y298qjSb115NqQ3Agad30DWn2QYrTI8CT6aP05l2PBV9Qe92S94PdoVCCy06A38L
but unpack using unreal_tournament_4 script fails, gets stuck half way. It seems that the script does not correctly determine the structure of the .pak file

Sydie, posted Sat Jan 06, 2018 4:05 pm (31339)

---

mbit555 wrote:

Hey. I'm having a problem with the Fortnite game, it looks like encryption is used.
I enclose exe and two files of 10 mb through the program filecutter.bms (http://zalil.su/7613466)

This game uses the system of dividing pak into pieces (http://prntscr.com/hnhwpb) This is what the unreal_tournament_4 script produces.bms when I select the file pakchunk0-WindowsClient.pak (http://prntscr.com/hnhxhg)

I tried to find the encryption key through the HEX editor (http://prntscr.com/hnhzyl) but it did not help. Maybe I'm doing something wrong? AES key is: VWSUATAUAVA

Thanks guys - I've successfully unpacked Paragon!
Thanks . for his awesome quickbms!
Thanks @mbit555 for the information above, you almost had it - the key is VWSUATAUAVAW

I wanted know how the heroes in Paragon are setup. I've watched all Unreal Engine Twitch streams, but I had to see it for myself.
This game is made by great artists, optimized using innovative techniques and developed by amazing devs!
Therefore I needed to rip the original models myself and not simply download one of the available ripped models, since most of them are modified.

I've tried using "UE4 pak-file Unpacker by Haoose v0.5", but it was crashing when trying to unpack "pakchunk0-WindowsClient.pak", therefore I switched to aluigi's quickbms.

Here's what I used:
1. Used quickbms_4gb_files.exe [0.8.1] with unreal_tournament_4.bms [0.4.13]. It said that the .pak is encrypted and asked for a key
2. Opened OrionClient-Win64-Shipping.exe with hex editor, searched for AES, found the key - VWSUATAUAVAW
3. Enter the key in cmd from step 1
4. Repeat for all .pak in the folder - pakchunk0-WindowsClient.pak is first, then pakchunk0_s1-WindowsClient.pak, then pakchunk0_s2-WindowsClient.pak, etc.
5. Done!

Extracted models using UMODEL by Gildor - select "Override game detection" checkbox, select "Unreal Engine 4" and version "4.18".
Umodel was crashing when trying to open characters - something to do with skeletons - I just moved all files ending with _Skeleton to a backup folder in case this is fixed in the future, but you can delete them.



Here are the game names:
Venus - THE FEY
Mambo - MORIGESH
Vamp - COUNTESS
Sparrow - SPARROW
Gadget - GADGET
Femme - YIN
Ice - AURORA
Fallen Angel - SERATH
Medic - ???
Mudang - ???
Muriel - MURIEL
Phase - PHASE
Tacticia - LT-BELICA
Totem - DEKKER

PS: I'm just a technical artist, I don't know how this worked I'm just happy it did and you guys made some great tools for that!

milk, posted Mon Jan 08, 2018 8:02 am (31398)

---

how to download 0.5 version?

ZENHAXnumba1, posted Mon Jan 08, 2018 2:41 pm (31418)

---

Sydie wrote:

mbit555 wrote:

Hey. I'm having a problem with the Fortnite game, it looks like encryption is used.
I enclose exe and two files of 10 mb through the program filecutter.bms (http://zalil.su/7613466)

This game uses the system of dividing pak into pieces (http://prntscr.com/hnhwpb) This is what the unreal_tournament_4 script produces.bms when I select the file pakchunk0-WindowsClient.pak (http://prntscr.com/hnhxhg)

I tried to find the encryption key through the HEX editor (http://prntscr.com/hnhzyl) but it did not help. Maybe I'm doing something wrong? AES key is: VWSUATAUAVA

Thanks guys - I've successfully unpacked Paragon!
Thanks . for his awesome quickbms!
Thanks @mbit555 for the information above, you almost had it - the key is VWSUATAUAVAW

I wanted know how the heroes in Paragon are setup. I've watched all Unreal Engine Twitch streams, but I had to see it for myself.
This game is made by great artists, optimized using innovative techniques and developed by amazing devs!
Therefore I needed to rip the original models myself and not simply download one of the available ripped models, since most of them are modified.

I've tried using "UE4 pak-file Unpacker by Haoose v0.5", but it was crashing when trying to unpack "pakchunk0-WindowsClient.pak", therefore I switched to aluigi's quickbms.

Here's what I used:
1. Used quickbms_4gb_files.exe [0.8.1] with unreal_tournament_4.bms [0.4.13]. It said that the .pak is encrypted and asked for a key
2. Opened OrionClient-Win64-Shipping.exe with hex editor, searched for AES, found the key - VWSUATAUAVAW
3. Enter the key in cmd from step 1
4. Repeat for all .pak in the folder - pakchunk0-WindowsClient.pak is first, then pakchunk0_s1-WindowsClient.pak, then pakchunk0_s2-WindowsClient.pak, etc.
5. Done!

Extracted models using UMODEL by Gildor - select "Override game detection" checkbox, select "Unreal Engine 4" and version "4.18".
Umodel was crashing when trying to open characters - something to do with skeletons - I just moved all files ending with _Skeleton to a backup folder in case this is fixed in the future, but you can delete them.



Here are the game names:
Venus - THE FEY
Mambo - MORIGESH
Vamp - COUNTESS
Sparrow - SPARROW
Gadget - GADGET
Femme - YIN
Ice - AURORA
Fallen Angel - SERATH
Medic - ???
Mudang - ???
Muriel - MURIEL
Phase - PHASE
Tacticia - LT-BELICA
Totem - DEKKER

PS: I'm just a technical artist, I don't know how this worked I'm just happy it did and you guys made some great tools for that!

stupid to ask but where to put the AES key ? im a noob in this forum . thank you in advance

aluigi, posted Mon Jan 08, 2018 2:53 pm (31419)

---

quickbms will ask you to insert a password or choosing one from a list displayed on screen, so when prompted just copy the key and paste it on the console (press the right button of the mouse)

ZENHAXnumba1, posted Mon Jan 08, 2018 3:27 pm (31420)

---

aluigi wrote:

quickbms will ask you to insert a password or choosing one from a list displayed on screen, so when prompted just copy the key and paste it on the console (press the right button of the mouse)

ohhh ok now i understand. thank you again

Sybex, posted Wed Jan 10, 2018 11:08 pm (31451)

---

mbit555 wrote:

Hey. I'm having a problem with the Fortnite game, it looks like encryption is used.
I enclose exe and two files of 10 mb through the program filecutter.bms (http://zalil.su/7613466)

This game uses the system of dividing pak into pieces (http://prntscr.com/hnhwpb) This is what the unreal_tournament_4 script produces.bms when I select the file pakchunk0-WindowsClient.pak (http://prntscr.com/hnhxhg)

I tried to find the encryption key through the HEX editor (http://prntscr.com/hnhzyl) but it did not help. Maybe I'm doing something wrong? AES key is: VWSUATAUAVA

UPD: I was mistaken, the real key is: y298qjSb115NqQ3Agad30DWn2QYrTI8CT6aP05l2PBV9Qe92S94PdoVCCy06A38L
but unpack using unreal_tournament_4 script fails, gets stuck half way. It seems that the script does not correctly determine the structure of the .pak file

Hey there,
i tried the same thing and also getting an error, it seems unresponsive after a while you get an not enough memory error (didn't screenshot the error msg).

You have any chance to check this? I need the fortnite files, too.

Thanks in advance
Sybex

MrMe, posted Thu Jan 18, 2018 8:06 pm (31687)

---

. can you retrieve the AES key of the paks from this game? I tried to find it using IDA but that failed.

Game binary: https://mega.nz/#!rx1UGKAY!GWA_9UOK6cgz ... w67Dyj0DzU
Pak cut (used filecutter.bms): https://mega.nz/#!XoMExKxI!9Ojce5W8Ykmq ... IabaScOlxI

- Edit

Looks like I found it, but it doesn't work. I referenced GalGun*VR code to FN to find it.
-

imdoubletrouble, posted Fri Jan 19, 2018 1:43 am (31688)

---

I too am looking into doing this for Fortnite. I've bookmarked this page if anymore progress is made.

aluigi, posted Fri Jan 19, 2018 11:02 am (31691)

---

Can you upload the first 100Mb of the archive?

MrMe, posted Fri Jan 19, 2018 4:17 pm (31698)

---

aluigi wrote:

Can you upload the first 100Mb of the archive?

Ofcourse, https://mega.nz/#!2pUSHLaJ!Zt3HrxeOpFPl ... Nn21ViIy0A

Also, because the quickbms script did not work I started working on my own tool to unpak using your script and unreal engine 4.19 as reference.
I noticed a things that were missing from your script (not sure if on purpose).

The script currently parses the trail (footer?) incorrectly, it should be like this:

Code:

EncryptedIndex = reader.ReadByte();
Magic = reader.ReadUInt32();
Version = reader.ReadInt32();
IndexOffset = reader.ReadInt64();
IndexSize = reader.ReadInt64();
IndexHash = reader.ReadBytes(20);

If EncryptedIndex equals 1, the name index is AES encrypted.

Edit: Yup, works fine in my program.

Sybex, posted Sat Jan 20, 2018 12:23 pm (31730)

---

Quote:

Edit: Yup, works fine in my program. https://i.imgur.com/0ADW4xO.png

Can you please explain what to do?

Thanks

aluigi, posted Sat Jan 20, 2018 1:55 pm (31734)

---

MrMe wrote:

I noticed a things that were missing from your script (not sure if on purpose).
The script currently parses the trail (footer?) incorrectly, it should be like this:
EncryptedIndex = reader.ReadByte();

The script covers older versions of the format (before encryption was implemented) and some customized versions, I have to find a way to add support for the encrypted toc and still remaining compatible with all the versions and options.

aluigi, posted Sat Jan 20, 2018 3:29 pm (31737)

---

Ok problem solved by a feature I implemented yesterday in the upcoming quickbms 0.8.3 (what a luck, just in time) and I confirm that now the extraction is correct.
Thanks for the feedback to MrMe and all the users who are contributing with keys and suggestions (less work for me).

I have uploaded the new script that obviously can't be used with the current quickbms 0.8.2a.
If you are in rush replace all the references to TOC_FILE with MEMORY_FILE10 and remove the "quickbmsver" line, it should take you few seconds to edit.

MrMe, posted Sat Jan 20, 2018 5:47 pm (31739)

---

aluigi wrote:

Ok problem solved by a feature I implemented yesterday in the upcoming quickbms 0.8.3 (what a luck, just in time) and I confirm that now the extraction is correct.
Thanks for the feedback to MrMe and all the users who are contributing with keys and suggestions (less work for me).

I have uploaded the new script that obviously can't be used with the current quickbms 0.8.2a.
If you are in rush replace all the references to TOC_FILE with MEMORY_FILE10 and remove the "quickbmsver" line, it should take you few seconds to edit.

Awesome! I'll give it a try when 0.8.3 is out, got my own tool for the time being.

aluigi, posted Sun Jan 21, 2018 2:47 pm (31777)

---

0.8.3 is out and everything worked perfectly here.

peupuppy, posted Mon Jan 22, 2018 2:34 am (31786)

---

Please, does anyone have encryption key for PUBG?

zanzaman, posted Mon Jan 22, 2018 7:32 am (31787)

---

...

aluigi, posted Mon Jan 22, 2018 8:35 am (31792)

---

peupuppy wrote:

Please, does anyone have encryption key for PUBG?

Upload the big (and decrypted, ...steamless...) executable in case someone wants to check it.

peupuppy, posted Mon Jan 22, 2018 1:53 pm (31799)

---

aluigi wrote:

peupuppy wrote:

Please, does anyone have encryption key for PUBG?

Upload the big (and decrypted, ...steamless...) executable in case someone wants to check it.

Download: https://mega.nz/#!tdN2UAAY!G2ZMSXrMkPXI ... rwkgIT-9HU?
VirusTotal: https://www.virustotal.com/#/file/d3821 ... /detection

brendan19, posted Mon Jan 22, 2018 3:03 pm (31801)

---

Trying the script on the Street Fighter V Arcade Edition StreetFighterV_General.pak archive causes this error to appear.

I am using the latest version of QuickBMS and the Unreal 4 Engine script as well.

It does output two files and one folder before it gives that error.

Other game archives extract without an issue however.

aluigi, posted Mon Jan 22, 2018 3:24 pm (31802)

---

@brendan19
Did you have the same error with older versions of quickbms and script?
Does it use an encryption key?