Juiced (2005) *.dat

[mrmaller1905]

I got no filenames from Juiced DATs. Where is the memory address for the hash function from the executable to restore proper filenames?

The unpacker is already developed by Ekey:

https://github.com/Ekey/JCED.DAT.Tool

https://drive.google.com/file/d/1RYQmh4-4TUIfDODpCQesHK-C93Ok4r5W/view?usp=sharing

[ikskoks]

Filenames are known. You can find them here:

https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/Projects/FileNames.list

Hash function is also known and it's available here

https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/FileSystem/Package/DatHash.cs

 

As for memory address, it's your job to find it if you want to hook it.
More details here https://ikskoks.pl/tutorial-how-to-restore-hashed-filenames-from-archives/

But you can also try other methods as guessing/exe dump/hashcat etc.

[mrmaller1905]

On 5/11/2024 at 2:47 PM, ikskoks said:

Filenames are known. You can find them here:

https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/Projects/FileNames.list

Hash function is also known and it's available here

https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/FileSystem/Package/DatHash.cs

 

As for memory address, it's your job to find it if you want to hook it.
More details here https://ikskoks.pl/tutorial-how-to-restore-hashed-filenames-from-archives/

But you can also try other methods as guessing/exe dump/hashcat etc.

Are there programs that can repack custom files into DATs?

[ikskoks]

No, there are none as far as I know.

[mrmaller1905]

I said "Where is the memory address for the hash function from the executable" and can someone make a new source code to get filenames from Juiced DATs?

Edited October 21, 2024 by mrmaller1905