Evolve (.PAK)

[michalss]

can you please share key with me on PM ??

[Kein]

can you please share key with me on PM ??

If he does - let me know too?

[StuKKa]

I need the key too. Would be nice ... Thank you

[cra0]

Guys seriously it's not even hard

Download the 64bit version of this
http://www.ntcore.com/exsuite.php

find the running process then go into the modules of it

rightclick the module Evolve.exe or what ever the retail one is called

"Dump PE" save it somewhere


Open it inside of IDA and look for what i posted before.

[StuKKa]

If you never worked this way, it's a bit confusing.
I found the point in the file, but what do you mean "load into rax register"?
A little bit more context would help.

[cra0]

If you never worked this way, it's a bit confusing.
I found the point in the file, but what do you mean "load into rax register"?
A little bit more context would help.

lea rax, unk_142643C10

lea == load effective address in the register

it loads the address of the byte[] so unk_142643C10 if you look in IDA you can see the byte array values
etc etc

There are two keys note

[StuKKa]

Thank you, but it doesn't really worked out as expected (still could not extract, rsa error). Maybe I'm waiting for the models and skins to be published by someone, to create good render images of them for a small wiki (i don't like this ingame screenshots where you could see nothing of the details).
But thanks for the help, nice to see how to get into the file. Never thought about such a way.

[dss539]

http://sktest.aruarose.com/PakDecrypt_Evolve.7z

Fill RSAKeyData.bin with the key from the release version (should be 140 bytes).

What did you have to change to make this support Evolve's format?
I recompiled the Crysis 3 PakDecrypt with the correct 140 byte key and the correct XXTea keys, but just like volfin's attempt, this yielded 0B zip files.
The extraction failed in ProcessCDR when checking the ehdr.Size.
Actual value 6, expected value 8.

Furthermore, I also tried your modified exe. This was more successful. Your version outputs .pak.zip files that are ~2kb smaller than the original .pak files.
However, 7-Zip is unable to open this file.
Have I misunderstood something?

[Sir Kane]

The format of the encryption and signature data in the header comment changed (the 2kb or whatever less is that data). Also be aware that XXTEA isn't actually used.

7zip opens the decrypted files just fine for me.

[dss539]

The format of the encryption and signature data in the header comment changed (the 2kb or whatever less is that data). Also be aware that XXTEA isn't actually used.

7zip opens the decrypted files just fine for me.

You're right.
I was stupidly using the wrong key.
Got it all sorted out, now. Thanks very much!

I am still curious about the exact source code you used, if you are interested in sharing.

[lumekano]

Hmm....Only Closed Beta Should Work Right?

[dss539]

Hmm....Only Closed Beta Should Work Right?

No, retail also works if you use the correct key.

[lumekano]

ok Thx if That So...

btw , This is my Key ( rax, unk_14008C9B6 ) I'm Really Getting Stuck if I Try Looking For Key ( hex View ) in The IDA, Anyways Can U Gave Example Where's I Put The Key And How I Put Keys in the RSAKeyData.bin or Anyone Plz, Srry About Noobs, cuz This is My First Time Use That Program ( I Know is Super Easy )

address in the register ???

array values ???

What is Worst Shame...

[dss539]

Use a hex editor to write 140 bytes in the bin file.
As for finding the key, I really just lucked into it.
I spent a long time looking for it. The previously posted instructions weren't much help, even though theoretically they should have been.
Clearly I don't know what I'm doing.

However, I searched the entire dump for a string of bytes that looked similar to the previously mentioned key.

[lumekano]

Use a hex editor to write 140 bytes in the bin file.
As for finding the key, I really just lucked into it.
I spent a long time looking for it. The previously posted instructions weren't much help, even though theoretically they should have been.
Clearly I don't know what I'm doing.

However, I searched the entire dump for a string of bytes that looked similar to the previously mentioned key.

Huh?????? I thought Was impossible, Anyways thx to u cra0 and dss539 it Works.

So Hmm... Maybe I Will Update All Char Soon If Someone Ask Me About Download.