Support for full retail version of "Tom Clancy's Splinter Cell: Chaos Theory"

[stianhoiland]

I am so delighted to see SCCT supported in UE Explorer! But the support is only for the demo version of the game and I'd love to see the full retail game supported. Could you make that happen and may I buy you the full game for this purpose? :)

[EliotVU]

Thanks but, I'm unable to support the full game because, the files appear to be encrypted, and I'm unable to read the assembly file to reverse-engineer it.

That said, I try again for the Versus Mode with success, by just decrypting the strings it's possible to read most of its contents.

[stianhoiland]

Oh. That's a showstopper. And a real bummer. I intended to volunteer some effort and get this game, and especially COOP (which is technically in what's colloquially called the offline version), some much deserved modding scaffolding. Dammit! :(

[EliotVU]

Yeah unfortunately, however the map files can be read just fine, see the commit above.

[EliotVU]

Also, it seems like some people have figured all of this out already at gildor maybe they could share their findings?

[stianhoiland]

Yes, I did a good bit of research before ending up here with UELib and UE Explorer, including reading everything remotely related on gildor.org. In fact it was @Joshhhuaaa's Splinter Cell repositories which led me to Gildor's.

Have these encryption schemes been broken in the past in other games? I'm completely unfamiliar with the topic.

[Joshhhuaaa]

I believe Ubisoft stripped the UnrealScript for both the single-player and Versus modes in SCCT when they shipped the game. The file sizes are noticeably smaller than they should be, which is a clear indication of this.

For example, when you export the scripts in UnrealEd (for Versus), you only get the defaultproperties section, but none of the actual UnrealScript itself.

Here’s an example of an Engine\Actor.uc file:

defaultproperties
{
     DrawScale3D=(X§(1289226)=1.000000,Y§(1289227)=1.000000,Z§(1289228)=1.000000)
     NearPlaneRatio=0.100000
     EchelonRange=1000.000000
     SpotHeight=250.000000
     SpotWidth=250.000000
     EchelonBias=0.001000
     EchelonNormalInfluence=1.000000
     perspectiveViewSlideBack=500
     LightBeamFalloffScale=1.000000
     HeatOpacity=1.000000
     EMFOpacity=1.000000
     NetUpdateFrequency=100.000000
     NetPriority=1.000000
     m_AmbientSoundRequest=-1
     LODBias=1.000000
     Texture=Texture§(556)'Engine§(21).S_Actor§(613)'
     DrawScale=1.000000
     ScaleGlow=1.000000
     CollisionRadius=22.000000
     CollisionHeight=22.000000
     SoundRadius=64.000000
     TransientSoundVolume=0.300000
     TransientSoundRadius=300.000000
     Mass=100.000000
     MessageClass=Class§(677)'Engine§(21).LocalMessage§(176062)'
     DrawType=DT_Sprite§(1290679)
     LightBeamInitialAlpha=128
     RemoteRole=ROLE_DumbProxy§(1290463)
     Role=ROLE_Authority§(1290466)
     MaxLights=4
     Style=STY_Normal§(1290711)
     SoundVolume=128
     SoundPitch=64
     bMustInitNetChannels=True
     bActorShadows=True
     bUseDynamicLights=True
     bAcceptsProjectors=True
     bReplicateMovement=True
     bEMFIsOn=True
     bApplyToStaticLighting=True
     bMovable=True
     bTryToMoveEncroachedActor=True
     bBlockZeroExtentTraces=True
     bBlockNonZeroExtentTraces=True
     bBlockCamera=True
     bJustTeleported=True
     bPlanarDepthSortingWithGlass=True
}

Because of this, I'm not sure how much can be done with these files. However, I would be interested to see what's possible. As far as I know, only SCCT Versus applied a strange form of "encryption" to the UnrealScript, where the strings are all scrambled.

I don’t think it would be compatible with the PC version, but when Ubisoft released SCCT's single player for PS3's HD collection in 2011, they accidentally left the UnrealScript intact. So, you might be able to get more information from these PS3 files.

SCCT PS3 UnrealScript.zip

[EliotVU]

Ah, thanks for the files, however the files being stripped should not be an issue, UELib should be able to re-construct the UnrealScript from the byte codes.

[stianhoiland]

the files appear to be encrypted, and I'm unable to read the assembly file to reverse-engineer it.

@EliotVU Would you care to explain a bit more what's going on here? I don't know much about reverse engineering but I'm technically inclined and would like to know more. Maybe I could contribute given some more pointers on what's going on.

And also, do you have any knowledge of this:

Have these encryption schemes been broken in the past in other games?

[Joshhhuaaa]

Ah, thanks for the files, however the files being stripped should not be an issue, UELib should be able to re-construct the UnrealScript from the byte codes.

Does this mean you could recover UnrealScript code that has been stripped by the developers, or are you only referring to extracting the defaultproperties only? It would be incredibly helpful if you could reconstruct the UnrealScript for SCCT Versus. I've been working on patches for it through reverse engineering, but guessing the missing UnrealScript is still slowing us down at times.

Here's an archive containing the UnrealScript for all the main Splinter Cell games. It includes the latest retail builds and some demo builds for both single player and Versus. I've also included the exported classes for the versions I know can be extracted. Thanks for looking into these games.