[REQ][PC]Crysis 3 .pak files

[Ekey]

IDK my card supported DX11 but MP Alpha does not work.

[Evin]

Crysis 2?

Of course, I wanted to say; Crysis 3 beta.

[Gh0stBlade]

You're best of with the Xbox 360 files if you ask me. You can just rename the .pak to .zip and they will be readable in standard unzippers like winrar. This is the same process for Crysis 2 aswell, I don't know how the PC files are but the Xbox version should have the same content so you could use them instead.

[Sir Kane]

Sorry, but I had to remove this.

[Ekey]

Well remain find the key for decrypt

[Sir Kane]

Sorry, but I had to remove this.

[Ekey]

Going to make a decryption tool once I completely figured this out.

Well GL

[BiggestSmile]

They keys (there's 16 of them) and IV are the PAK. But they're RSA encrypted with a fixed key (found inside the exe). Not sure if I can post the key here.

Going to make a decryption tool once I completely figured this out.

"They keys (there's 16 of them) and IV are the PAK."
What do you actually mean?
I dont think they actually use Twofish.
They was still using XXTEA for pak encryption as for CE3 3.4.0 version at least.
As said Aluigi, author of quickbms, encryption key was stored in CrySystem.dll
Crysis 3 does not include dlls anymore, libraries are statically linked now. Origin includes anti-debugging code, so there's few ways: try to statically analyze it or wait till Crysis 3 release, to get cracked binary with out anti-debugging
I've also found RSA public key in executable, and i find it embarrassing that they store it as is.
Maybe they store encryption key for paks the same way? As keys are 16 byte length, we could go through exe's strings with regex to find 16 byte length sequence?

[Sir Kane]

Sorry, but I had to remove this.

[renato]

You're best of with the Xbox 360 files if you ask me. You can just rename the .pak to .zip and they will be readable in standard unzippers like winrar. This is the same process for Crysis 2 aswell, I don't know how the PC files are but the Xbox version should have the same content so you could use them instead.

how did you opened the .cgfm file in Noesis?

[Gh0stBlade]

how did you opened the .cgfm file in Noesis?

I was unable to load the .cgfm files it Noesis myself. I guess that Noesis does not support Crysis 3 models so I made a quick python script to load them but it doesn't have full support YET.

[Sir Kane]

Sorry, but I had to remove this.

[BiggestSmile]

Made a tool to convert the encrypted PAK files to normal ZIP files. Uses LibTomCrypt and LibTomMath (http://libtom.org/).
Doesn't do an awful lot of validation, so it might hang or crash, but it shouldn't (was fine with the files I tested).

Just the exe:
http://sktest.aruarose.com/PakDecryptBin.7z

Exe + source:
http://sktest.aruarose.com/PakDecrypt.7z

Thank you very much Kane! You did really great job and did it so fast
Special thanks for sources!

[dragbody]

Thanks Kane. It works great! Now I'm looking forward to model and texture support.

[Gruselgurke]

Those links give me a 404 :/
Though I'm pretty sure that the files will be decrypted in the full game. Thats hot it went with Crysis 2 back then. Alpha and Beta had encrypted pak files and the full game had plain zip.