Phantom Blade Zero

Phantom Blade Zero is a game by S-GAME on a custom branch of Unreal Engine 5 (project ProjectPBZ). The observations are of Steam app 4115450, build 26266538. Observed · PBZ

Engine version

Its pak files are version 12, which CUE4Parse reads as Unreal Engine 5.7 Sourced · CUE4Parse; the executable holds Unreal Engine 5.6 strings and a change Epic made in 5.8. The base is therefore most likely 5.7 with changes of the developer’s own. Inferred · PBZ

Data in the install

Content is in ProjectPBZ/Content/Paks/: the IoStore container ProjectPBZ-Windows (a 47,488,040-byte .utoc, 328,220 chunks, and 66 .ucas partitions of up to 2 GiB), the global container global, the pak ProjectPBZ-Windows.pak and nine movie paks (IoStore containers). Observed · PBZ Blocks are Oodle-compressed in 256 KiB blocks, and no Oodle library ships beside the executable; the audio is Wwise. Observed · PBZ

The executable platform/steam/PBZ.exe (signed by S-GAME) is protected by Denuvo anti-tamper, and the install ships no anti-cheat: no EasyAntiCheat, BattlEye or ACE folder and no kernel driver (no .sys file at all); EOSSDK-Win64-Shipping.dll is there without an EasyAntiCheat folder. The other SDKs are Steam, WeGame (rail_api64), TapTap and Migu (MiguGameSDK64 2.1.4.4 with CheckEnv.exe, MRTCEngine and viumsgsdk), for cloud play, anti-addiction and store features, and ProjectPBZ/Binaries/Win64/8za_v2.exe is an archiver console program signed by S-GAME. Observed[a listing of every executable, library and driver of the install]{games=“phantom-blade-zero”}

What is special

• Encrypted containers. The game container’s flags are 0x0b (compressed, encrypted, indexed) and every pak has an encrypted index, all under the zero key GUID; only global is unencrypted (IoStore containers). Proven · PBZ
• Partitioned data. One table of contents addresses 66 data files, against MECCHA CHAMELEON’s one. Proven · PBZ

The packages

Without the key nothing inside the containers (the file tree, the packages, whether they need property mappings) is described.

What is known

System	Claims	Confidence	Proven or observed
Overview	3		67%
Archives and files	25		64%

Computed from the engine's pages; the whole picture is on the coverage page.