ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Mon Oct 21, 2019 8:05 pm

All times are UTC




Post new topic  Reply to topic  [ 9 posts ] 
Author Message
PostPosted: Tue Oct 08, 2019 4:44 pm 

Joined: Tue Oct 08, 2019 4:40 pm
Posts: 3
Welp sad day today. Looks like with the introduction to DbD 3.3.0 they decided to start using AES. uModel works fine strangely, but QuickBMS requires a key. Anyone want to be a clutch legend and find it? Would be greatly beneficial for leaks on the game and the community. You will be credited on my Youtube, cheers!

Here's a link to the win64-no-edit and a pakchunk for trial and error

http://www.mediafire.com/file/duo4mq5xo ... k.rar/file


Top
   
PostPosted: Thu Oct 10, 2019 12:42 pm 

Joined: Sat Sep 28, 2019 7:00 pm
Posts: 5
NecroCrafts wrote:
uModel works fine strangely, but QuickBMS requires a key.

It's because they've encrypted only config files and probably archive index, while assets are still unencrypted and uModel can work with them directly.
Is that possible to share actually encrypted pak? I suppose it should be pakchunk0-WindowsNoEditor (you can test it with quickbms by unpacking it).


Top
   
PostPosted: Thu Oct 10, 2019 5:16 pm 

Joined: Tue Oct 08, 2019 4:40 pm
Posts: 3
spiritovod wrote:
NecroCrafts wrote:
uModel works fine strangely, but QuickBMS requires a key.

It's because they've encrypted only config files and probably archive index, while assets are still unencrypted and uModel can work with them directly.
Is that possible to share actually encrypted pak? I suppose it should be pakchunk0-WindowsNoEditor (you can test it with quickbms by unpacking it).


I did leave a pakchunk in the mediafire link above if it helps any! I chose one that was small enough for easier file upload. I don't know much about how AES works, but any knowledge is welcomed.


Top
   
PostPosted: Thu Oct 10, 2019 6:37 pm 

Joined: Sat Sep 28, 2019 7:00 pm
Posts: 5
NecroCrafts wrote:
if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.


Top
   
PostPosted: Fri Oct 11, 2019 7:27 am 

Joined: Wed Jun 05, 2019 7:30 am
Posts: 3
spiritovod wrote:
NecroCrafts wrote:
if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.


pakchunk0


Top
   
PostPosted: Fri Oct 11, 2019 9:43 am 

Joined: Wed Jun 05, 2019 7:30 am
Posts: 3
spiritovod wrote:
NecroCrafts wrote:
if it helps any

No, it doesn't help actually, because that chunk is not encrypted, the decryption part in exe is not triggered, so there is no way (at least for me) to check if the found key is legit or not. That is why I've asked for pakchunk0.

https://media.discordapp.net/attachment ... nknown.png
and https://media.discordapp.net/attachment ... nknown.png
i found way to decrypt, thx for hint =)


Top
   
PostPosted: Fri Oct 11, 2019 10:35 am 

Joined: Sat Sep 28, 2019 7:00 pm
Posts: 5
Dark_VladislaV wrote:
i found way to decrypt, thx for hint =)

That's good to hear. Thanks for the file, but it's not encrypted as well. I wonder, is it really something encrypted there, because I was able to extract both provided paks without any aes prompt with quickbms and the latest script.

Anyway, I'll post what I've found as a key, but since I can't confirm it, it could be wrong.
Code:
0x8F856C5E220E60479AFEEA3317B671738527B3F1BA6FCF4F9D557B8E7F157091


Top
   
PostPosted: Fri Oct 11, 2019 6:06 pm 

Joined: Tue Oct 08, 2019 4:40 pm
Posts: 3
spiritovod wrote:
Dark_VladislaV wrote:
i found way to decrypt, thx for hint =)

That's good to hear. Thanks for the file, but it's not encrypted as well. I wonder, is it really something encrypted there, because I was able to extract both provided paks without any aes prompt with quickbms and the latest script.

Anyway, I'll post what I've found as a key, but since I can't confirm it, it could be wrong.
Code:
0x8F856C5E220E60479AFEEA3317B671738527B3F1BA6FCF4F9D557B8E7F157091


That's odd, Ill try this Key and report back if it worked in QuickBMS.

Edit: Negative, did not work.


Top
   
PostPosted: Fri Oct 11, 2019 8:30 pm 

Joined: Sat Sep 28, 2019 7:00 pm
Posts: 5
NecroCrafts wrote:
Negative, did not work.

Well, I expected that. So, actually encrypted pak is required or maybe the whole game. You can find out which pak is encrypted by trying to extract chunks one by one (and quickbms should ask for aes key on encrypted one). At least pakchunk0 and pakchunk8 are not encrypted. Without that it will be just random guessing, sorry.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 9 posts ] 

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited