This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=454

darkdamp, posted Sat Dec 20, 2014 2:32 pm (2261)

---

Hi,

First of all, I'm fairly new to the whole game research world, as for this forum, so I hope I'm posting this thread in the right section.
I did some research regarding .PAK for a game called Kingdom Come, made in CryEngine.

By following the work of Ekey and others I have been able to determine that within the .exe of game in question there's a public RSA key.
Reading these keys people have posted on e.g Pastebin, you notice they follow a certain pattern.

Code:

unsigned char g_RSAKeyData [140 or 162] = 
{ 0x30, 0x81 .... 0x02, 0x03, 0x01, 0x00, 0x01 }

They begin with 0x30, 0x81 and ends with 0x02, 0x03, 0x01, 0x00, 0x01. However, in the specific game I'm researching, I can't find this key within the .exe (as it was possible with Star Citizen for example). I also know there's been games with additional encryptions like XXTEA and containing DWORD keys within the sub_'s.

Correct me if I'm wrong with any of the above, but I'm wondering if anyone could point me to the right direction. I'd be more than happy to learn and do it myself, I'd just need some pointing.

Thanks in advance.

aluigi, posted Sun Dec 28, 2014 11:57 am (2345)

---

Ekey and Haoose know for sure something about CryEngine, so let's wait what they say.
Personally I worked only on the xxtea used in Crysis 2 but I remember almost nothing about how the key is generated or extracted.