[UE3] Lost Ark

[d07riv]

The patch is live and .db files now come out as gibberish. Anyone knows if they changed the key, or the encryption scheme?

[sader1992]

any idea about editing EFTable_GameMsg.db?
a small edit works, "too much edits" and the messages in the game starts to glitch and some appears empty, but a "big edit" break the file , well the file is still working ofc , but the game it self stop reading it.
I tried many different sqlite versions, including the same one that is used by Smilegate

I also tried binary edit on the file to not change the sqlite information atall , but this take too much time so I cannot do a "big edit" I could do "too much edits" which made the messages in the game starts to glitch just like when I do "too much edits" in sqlite.
I wonder how LaoTranslation edited the database , also the Chinese currently editing and adding the CN translation up to date.

maybe a custom version of sqlite ?
I would have said that there is something other than the file preventing the process , however incase of the Chinese translation they are only editing the EFTable_GameMsg file and putting it in the font.lpk, so it should be something related only to this file

I also tried to rebuild the EFTable_GameMsg with the same original entries just incase , and it didn't work , the game stop reading it (just like doing a "big edit").
it would help there was a console or an error logs, i did try to find if the game write any error logs , but no luck.

I almost consumed all my ideas , what left is decompiling the game and trying to get the sqlite files and codes from it, which I doubt I would do anytime soon.

am up for any ideas, I need fresh ideas, a fresh mind other than mine ~.

[spiritovod]

@molenzwiebel: Thank you, updated it in respective scripts.

It seems like they've rolled out that new encryption method for packages to steam version, so I can take a proper look at it. Though it may take a while due to lack of free time.

[ethan048]

@spiritovod could you please clarify if the issue with unpacking the textures in KR version was fixed and point me the to the scripts you've mentioned?

The Steam version has been resolved.
I don't think I found the AES key for the other versions.

https://cs.rin.ru/forum/viewtopic.php?f=10&t=100672
Check the link.

[ethan048]

Wow took me over a year but I finally managed to build a .upk decryptor for this game. Now time for some modding. 

Great work.
You succeeded in the end.
I want to talk about modding, but I don't think we should talk about modding here.
Can you make a new topic ?

[Aurorans]

Spent some time diving into the code to figure out the name obfuscation algorithm. The description from @sylvester334 helped a ton with this, but also cheers to smilegate for leaving the appropriately named FFileManagerWindows::ObfuscateFilename symbol in the EFGame DLL

In short, the names are shifted around by a fixed amount based on the length of the string. Certain characters are first escaped before they are obfuscated, using a pair of characters based on the position % 4 inside the input string. The following table is used for that purpose:

Code:

TABLE = {
    "Q": ["QP", "QD", "QW", "Q4"],
    "-": ["QL", "QB", "QO", "Q5"],
    "_": ["QC", "QN", "QT", "Q9"],
    "X": ["XU", "XN", "XH", "X3"],
    "!": ["XW", "XS", "XZ", "X0"],
}

If Q, -, _, X or ! appear in the input string, they will be replaced by one of these based on the position in the string, % 4. In other words, if the 3rd character (idx = 2) is a _, it will be replaced by QT (since 2 % 4 == 2, TABLE['_'][2] == "QT").

Some examples:

Code:

LV_LUT_Commander_Valtan_Extreme becomes LVQTLUTQ9COMMANDERQTVALTANQTEXNTREME
LV_ELG_Kayangel_ED_01_H         becomes LVQTELGQ9KAYANGELQNEDQN01QNH
SGintro_Warning                 becomes SGINTROQ9WARNING

Afterwards, the ascii values will be rotated according to a simple caesar cipher, where rotation is offset by the length of the escaped string. This works for all strings longer than 20 characters.

For inputs shorter than 20 characters, the input will be padded by adding a `!` and several `.`s until 20 characters are reached. This string is then escaped. The obfuscation loop then overwrites the period characters with earlier emitted characters, roughly according to the following pseudocode:

Code:

if input[i + unpadded_length] == '.' {
  input[i + unpadded_length] = output[i]
}

For deobfuscation of filenames, you simply reverse the shift, undo the escaping (by checking every pair of characters, seeing if they are in the table and the position % 4 matches the expected substitution, and then replacing the pair with the original character), and possibly split by ! if the original input was padded.

Here's an implementation in Rust capable of replicating both obfuscation and deobfuscation, matching 1-to-1 with the values produced by the game: https://gist.github.com/molenzwiebel/284318d9e963672b239f9fca901be89a. The result after renaming is pretty good!

Hello! I'm trying to implement this with the rust-script and rust itself

I run into a build warning when using rust itself. Rust-Script runs it, but doesn't build. Nothing happens when using rust-script name-obfuscation.rs.

Here's my powershell command:

Code:

rust-script name_obfuscation.rs

Running it in the Packages directory also does nothing, even if the script is located in that directory.

I am new to rust, what am I doing wrong?

[Brother]

Hi guys! I have a VK version of a game, their using another method of filenames obfuscation. Any know how to deobfuscating that? Maybe just need a different conversion table?

Example:
      Filename: 9G1MBIV4N1GZZEF4H0RG63S.upk
      Object: mn_cdkbo_00_ani_sk
      Class: SkeletalMesh

I'm uploaded a txt file which contains of all obfuscated names.
https://filebin.net/0m9xcpf33zob5wvw/LostArkNames.txt