ZenHAX

Free Game Research Forum | Official QuickBMS support | twitter @zenhax | SSL HTTPS://zenhax.com
It is currently Mon Sep 24, 2018 6:59 pm

All times are UTC




Post new topic  Reply to topic  [ 583 posts ]  Go to page Previous 112 13 14 15 1630 Next
Author Message
PostPosted: Mon Feb 12, 2018 2:16 pm 

Joined: Sat Feb 10, 2018 8:49 pm
Posts: 2
how to find encryption key on pubg ?
i have limited knowledge


Top
   
PostPosted: Tue Feb 13, 2018 11:05 pm 

Joined: Tue Feb 13, 2018 10:56 pm
Posts: 4
hello Aluigi!
trying for like 4hours already to decrypt files from Battle Rush game.
used UT4.bms

all what i got is

Code:
QuickBMS generic files extractor and reimporter 0.8.3
by Luigi Auriemma
e-mail: me@aluigi.org
web:    aluigi.org
        (Jan 21 2018 - 15:18:31)

                   quickbms.aluigi.org  Homepage
                            zenhax.com  ZenHAX Forum
                               @zenhax  Twitter & Scripts

- GUI mode activated, remember that the tool works also from command-line
  where are available various options like folder scanning, filters and so on

- select the BMS script to use
- select the input archives/files to extract, type * or "" for whole folder and subfolders
- select the output folder where extracting the files
- open input file C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
- open script C:\Users\Dafuq\Downloads\quickbms\unreal_tournament_4.bms
- set output folder C:\Users\Dafuq\Downloads\quickbms\hd

  offset   filesize   filename
--------------------------------------
The archive is encrypted, select the number of the key to use or type yours:
0: KIWIKIWIKIWIKIWIKIWIKIWIKIWIKIWI
1: _aS4mfZK8M5s5KWC2Lz2VsFnGKI7azgl
2: bR!@nbR0wnc@rychR!$d@nd@v3d3R3kj!mj0$hk3v!nm!ch@3lm!k3s3@nst3v3t!m
3: casd#55@#$%323!$^#b%05sa5W|hhaf4365s52ss51|55m!|{55s^@@36f233|-|0w@%3g8hssDk35/!Nm|_|%ds23%a32d5&23as3%12p|-|y$t3ds562d23fav3c@dyw38#49
4: C8C4847F3B4FA52D4AAD57A52358CDBC
5: k14z0ZLR8a7jNm49uyBzxXYY9LpTHcehLSNiC3jAkzBsffPuy8YsTa72RLD9KWIn
6: E7@[dZfoYCW;+YWR;0JK^{9tt:yU0_T&
7: E1A1F2E4AA066C54BD5090F463EDDF58D01684243672B3CE809FF47FF473B04A
8: I0vV6wr0TFbg3m23QuSIwnYC1sI0AIDq
9: VWSUATAUAVAW
10: y298qjSb115NqQ3Agad30DWn2QYrTI8CT6aP05l2PBV9Qe92S94PdoVCCy06A38L
11: b9uW0RKNY91be8HN3Lemi68j6Xsi2l7fQJYsp5oR4al4C4c9kY5E0l90411l9P3L
12: press RETURN for no encryption (Lineage 2 Revolution)

- please insert the content for the variable KEY:

KEY: no key, encryption disabled
  ed9aa0f9 2683053906 00000000.dat

Error: incomplete input file 0: C:\Users\Dafuq\Downloads\quickbms\pakchunk0-WindowsClient.pak
       Can't read 64 bytes from offset ed9aa0f9.
       Anyway don't worry, it's possible that the BMS script has been written
       to exit in this way if it's reached the end of the archive so check it
       or contact its author or verify that all the files have been extracted.
       Please check the following coverage information to know if it's ok.

  coverage file 0     0%   236461     40809808   . offset ed9aa0f9

Last script line before the error or that produced the error:
  174 clog NAME OFFSET ZSIZE SIZE

Press ENTER or close the window to quit




this is a part from .PAK https://drive.google.com/open?id=1YQo_5LJFCzCV2W_v4IQ3nqt38YfWC5xn
i suppose this is a .Exe file https://drive.google.com/open?id=14dI8t5rfbJ3H-cR2u1t2I4e7e1_WMa00

can you help me ? ^^


Top
   
PostPosted: Thu Feb 15, 2018 7:00 pm 

Joined: Tue Feb 13, 2018 10:56 pm
Posts: 4
tried to trace exe and just find aec key via notepad++ :D still nothing, is anybody know any way of retrieving the aes key from exe ?


Top
   
PostPosted: Sat Feb 17, 2018 9:18 pm 

Joined: Wed Feb 07, 2018 2:20 pm
Posts: 2
w^yR*H3Ew_b@5@dpjB*RvRE^=$VBB6xY


Top
   
PostPosted: Sun Feb 18, 2018 9:19 am 

Joined: Tue Feb 13, 2018 10:56 pm
Posts: 4
omg, thank you. can i ask you a question ? how you found that ?


Top
   
PostPosted: Mon Feb 19, 2018 2:59 pm 

Joined: Fri Feb 02, 2018 9:30 am
Posts: 6
aluigi wrote:
If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.


What do you mean by that? The key changes every time the game launches or something? (and yes it's zlib)


Top
   
PostPosted: Mon Feb 19, 2018 7:47 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8828
I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.


Top
   
PostPosted: Tue Feb 20, 2018 3:49 am 

Joined: Tue Feb 20, 2018 3:47 am
Posts: 1
new android UE4 game 'BLADE2'

PAK is encrypted.
Is there a way to get an aes key?

sample pak download link : https://drive.google.com/file/d/1M3XjiN ... sp=sharing


Top
   
PostPosted: Tue Feb 20, 2018 4:37 pm 

Joined: Fri Feb 02, 2018 9:30 am
Posts: 6
aluigi wrote:
I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.


So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))


Top
   
PostPosted: Tue Feb 20, 2018 11:13 pm 
Site Admin
User avatar

Joined: Wed Jul 30, 2014 9:32 pm
Posts: 8828
In some previous posts some users reported that games are starting to no longer store the keys in clear-text, that's the reason why you can't find it.
If you are not into reverse engineering you have to wait that other users post the keys (if they care/want).


Top
   
PostPosted: Thu Feb 22, 2018 10:14 am 

Joined: Wed Nov 15, 2017 1:30 am
Posts: 40
Anyone know the aes key for Fractured Space game? Thanks in advance.


Top
   
PostPosted: Thu Feb 22, 2018 3:03 pm 

Joined: Thu Jan 18, 2018 7:56 pm
Posts: 11
mq1r2 wrote:
aluigi wrote:
I simply meant that the text you pasted didn't have the "algorithm" field that I needed to be sure it was zlib, nothing else.


So what do you suggest I try next? I've tried almost every viable aes key in the exe but every single one of them gives me the same error message. (the: the compressed zlib/deflate input is wrong or incomplete (-3))


I can help you, but you have to upload to dumped executable.


Top
   
PostPosted: Fri Feb 23, 2018 7:55 pm 
User avatar

Joined: Sun Aug 17, 2014 7:27 pm
Posts: 1143
Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet
Image
Image

SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur


Attachments:
SAOFB-WindowsNoEditor (4 mb).part2.rar [2.29 MiB]
Downloaded 66 times
SAOFB-WindowsNoEditor (4 mb).part1.rar [4 MiB]
Downloaded 61 times
SAOFB-WindowsNoEditor.sig.rar [683.35 KiB]
Downloaded 163 times
SAOFB-WindowsNoEditor (2 mb).rar [3.08 MiB]
Downloaded 60 times
Top
   
PostPosted: Fri Feb 23, 2018 10:39 pm 

Joined: Thu Jan 18, 2018 7:56 pm
Posts: 11
makc_ar wrote:
Sword Art Online: Fatal Bullet encryption
Game: http://store.steampowered.com/app/62669 ... tal_Bullet
Image
Image

SAOFB-Win64-Shipping.exe http://dropmefiles.com/DANur


Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump


Top
   
PostPosted: Sat Feb 24, 2018 12:19 am 
User avatar

Joined: Sun Aug 17, 2014 7:27 pm
Posts: 1143
MrMe wrote:
Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump

Mmmm... What do you mean?
Image
.rar 108 mb


Top
   
PostPosted: Sat Feb 24, 2018 4:19 pm 

Joined: Sat Feb 24, 2018 4:10 pm
Posts: 5
Hi everyone.

I try to unpak file and i have this error when i pressed RETURN.

Code:
12: press RETURN for no encryption (Lineage 2 Revolution)

- please insert the content for the variable KEY:

KEY: no key, encryption disabled
Info:  algorithm   250
       offset      0000000000000049
       input size  0x0000000000000970 2416
       output size 0x000000000000223b 8763
       result      0xffffffffffffffff -1

Error: the uncompressed data (-1) is bigger than the allocated buffer (8763)

Last script line before the error or that produced the error:
  157 clog MEMORY_FILE CHUNK_OFFSET CHUNK_ZSIZE CHUNK_SIZE

Press ENTER or close the window to quit


How can i fix the allocated buffer error ?
Someone can help me to find the AES key ?

Big exe https://we.tl/kC7Iq9lUax

Or the way to find it ?

Thank.


Last edited by Phalasius on Sat Feb 24, 2018 8:55 pm, edited 1 time in total.

Top
   
PostPosted: Sat Feb 24, 2018 7:08 pm 

Joined: Thu Jan 18, 2018 7:56 pm
Posts: 11
makc_ar wrote:
MrMe wrote:
Can you dump the executable while running it?
https://github.com/glmcdona/Process-Dump

Mmmm... What do you mean?
Image
.rar 108 mb


1. Run the game till you're in some main menu or whatever, make sure it is loaded.
2. Run "pd64 -p SAOFB-Win64-Shipping.exe" (or pd32 if 32bit process)


Top
   
PostPosted: Sat Feb 24, 2018 9:10 pm 
User avatar

Joined: Sun Aug 17, 2014 7:27 pm
Posts: 1143
MrMe wrote:
1. Run the game till you're in some main menu or whatever, make sure it is loaded.
2. Run "pd64 -p SAOFB-Win64-Shipping.exe" (or pd32 if 32bit process)

Loading clean hash database from 'С:\Steam\steamapps\common\SWORD ART ONLINE FATAL BULLET\SAOFB\Binaries\Win64\clean.hashes'.
Did not find an existing clean hash database, using an empty one.
dump_process CreateToolhelp32Snapshot failed with error 5: dumping process unknown with pid 0x240f0...
... building import reconstruction table ...
Finished running.

DENUVO in SAOFB-Win64-Shipping.exe *sob*
Image


Top
   
PostPosted: Mon Feb 26, 2018 10:20 am 

Joined: Sat Feb 24, 2018 4:10 pm
Posts: 5
Hi everyone

. I try to find the Sea of thieves AES key in big exe with hexa editor, but nothing, do you think there can be find in associate .dll ?

About this external script https://github.com/mmozeiko/aes-finder, you think that can be help ?

You said
Quote:
If the algorithm is 1 (zlib, which wasn't visible in the copy&paste) then it's not a static key.

but if is 250, what does it mean ?

Thank for all.


Top
   
PostPosted: Mon Feb 26, 2018 2:45 pm 

Joined: Fri Feb 02, 2018 9:30 am
Posts: 6
Phalasius wrote:
but if is 250, what does it mean ?

Thank for all.


250 is snappy compression


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic  [ 583 posts ]  Go to page Previous 112 13 14 15 1630 Next

All times are UTC


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Powered by phpBB® Forum Software © phpBB Limited