Wolcen Lords of Mayhem : Decrypt .PAK archive from CryEngine

[okami29]

Hi,
The game Wolcen Lords of Mayhem is currently in alpha and will support modding.
We can already edit xml files to make mods.
But in order to make more complex mods, we will need to know how the game is working.
If we can decrypt/uncompile some .pak file made in CryEngine, this will greatly help because we don't need compiled pak files to make them work in the game.
For example has anyone been able to decrypt the scripts.pak archive or know how it could be done ?
https://ufile.io/d184f
As I believe the .pak ar just renamed .zip file with password, I tried the method from the tutorial (Retrieving ZIP passwords from games - the zero skills way) but :
1- dumproc returns an error zero size
Maybe it's because Wolcen is a 64 bit application ?

Thanks

[okami29]

After making some research it seems the pak files are not simple zip files but are encrypted with a key generated with PakEncrypt from CryEngine, and PakDecrypt needs this key to uncrypt the .pak file.
So how am I supposed to find these keys and decypt the pak file?

[weiyun]

Yes, I found the key in game exe. You can put this key.dat file to the PakDecrypt folder and it will work correctly. However, you can't re-encrypt the paks using this key file because it uses RSA and private key is unknown.

[okami29]

Thank you weiyun !
It's working ! I successfully exracted the .pak thank to you.
How did you find the key.dat in the .exe ?

[weiyun]

Thank you weiyun !
It's working ! I successfully exracted the .pak thank to you.
How did you find the key.dat in the .exe ?

I used x64dbg to debug the game exe and found the key in memory.

[atom0s]

Does anyone happen to have PakDecrypt that accepts a key.dat file they could upload? I can't find any public versions that accept this file and I cannot find the source anywhere available online. All links are dead that I can find.

[Abramoff]

Help! How to use a key.dat and PakDecrypt to unpack the files? really need

[atom0s]

Made a new post here: viewtopic.php?p=41911#p41911

I dumped the current key and modified a PakDecrypt to work with it.