Question regarding .PAK

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
darkdamp
Posts: 2
Joined: Sat Dec 20, 2014 2:06 pm

Question regarding .PAK

Post by darkdamp »

Hi,

First of all, I'm fairly new to the whole game research world, as for this forum, so I hope I'm posting this thread in the right section.
I did some research regarding .PAK for a game called Kingdom Come, made in CryEngine.

By following the work of Ekey and others I have been able to determine that within the .exe of game in question there's a public RSA key.
Reading these keys people have posted on e.g Pastebin, you notice they follow a certain pattern.

Code: Select all

unsigned char g_RSAKeyData [140 or 162] = 
{ 0x30, 0x81 .... 0x02, 0x03, 0x01, 0x00, 0x01 }

They begin with 0x30, 0x81 and ends with 0x02, 0x03, 0x01, 0x00, 0x01. However, in the specific game I'm researching, I can't find this key within the .exe (as it was possible with Star Citizen for example). I also know there's been games with additional encryptions like XXTEA and containing DWORD keys within the sub_'s.

Correct me if I'm wrong with any of the above, but I'm wondering if anyone could point me to the right direction. I'd be more than happy to learn and do it myself, I'd just need some pointing.

Thanks in advance.
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Question regarding .PAK

Post by aluigi »

Ekey and Haoose know for sure something about CryEngine, so let's wait what they say.
Personally I worked only on the xxtea used in Crysis 2 but I remember almost nothing about how the key is generated or extracted.