I have done several analyzing and realized that the first half of the file itself is packed / encrypted with unknown library, however the most of the remaining part is not encrypted @ all.
What I have found first is the ShaderCache.pak file.
The starting point (offset in hexadecimal) of the ShaderCache.pak in nigel : 29996B96
In hex values of the starting point :
504B03041400000000007047553E000000000000000000000000
And if the value started @ offset 4 byte is indicating the version, that means the version has been changed a lot too.
Btw it is interested that seems like Crytek has only released the D3D9 ShaderCache file instead of D3D10 one as for the demo release!
-- Edit --
DarkVash wrote:
no use. It's some kind of modified PKZip arichiviaton mode with all CRCs at 0x00. Winrar opens it and crate a dritree because this particular modification mantains the footer of standard pkzip
I have confirmed that there is a high chance that it is using PKZip algorithm ..... coz I have found that the hex value "504B0304" is a zip file container header.
Sry I have made a srs mistake that using the beta file as a test subject ..... however there are still some chunks inside the nigel which can be extracted without performing any addition analyzing.
DarkVash was right ..... the first 1/4 part of the nigel is encrypted or @ least unknown atm ..... however the remaining part is actually plaintext and non-encrypted file.
Sry guys I have made a big mistake
) this is going to be very good I think
also removed some unnecessary steps