A Windows application for recovering and verifying the keys, passwords and byte transforms used by game archives.
Status
In development
Overview
FalkTracr is a Windows tool for finding archive keys, passwords and custom byte transforms in games. It can inspect the executable and related files on disk or trace the game while it runs when the useful values only appear in memory.
Anything it finds is tried against the selected game files before it is reported. Plenty of random data can look like a key at first glance, so a result only counts when the archive accepts it.
Features
Finding and checking results
Inspect executables and supporting files on disk
Trace a running game when the value only appears in memory
Check recovered keys and passwords against the selected game files
Search user-created Windows memory dumps
Find supported containers across a game directory
Engines and archive formats
Unreal Engine PAK and IoStore containers
CryEngine CryPak archives
Godot encrypted PCK archives
UnityFS, UnityCN and wrapped Unity bundles
Vision.Octo catalogs and cache objects
ZIP archives using ZipCrypto or WinZip AES
Leadwerks archive masks
Working with FalkTracr
Keep separate investigations open in tabs
Terminal with command history, completion and built-in help
Run the same recovery tools from the command line
Gallery
A fresh FalkTracr session waiting for a target.A dynamic run recovering and checking the PCK key used by Batomon Showdown.Static analysis recovering and checking HoRoyal's SharedAssets transform.
