mrmaller1905 Posted May 11 Share Posted May 11 I got no filenames from Juiced DATs. Where is the memory address for the hash function from the executable to restore proper filenames? The unpacker is already developed by Ekey: https://github.com/Ekey/JCED.DAT.Tool https://drive.google.com/file/d/1RYQmh4-4TUIfDODpCQesHK-C93Ok4r5W/view?usp=sharing Link to comment Share on other sites More sharing options...
Solution ikskoks Posted May 11 Solution Share Posted May 11 Filenames are known. You can find them here: https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/Projects/FileNames.list Hash function is also known and it's available here https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/FileSystem/Package/DatHash.cs As for memory address, it's your job to find it if you want to hook it. More details here https://ikskoks.pl/tutorial-how-to-restore-hashed-filenames-from-archives/ But you can also try other methods as guessing/exe dump/hashcat etc. 1 Link to comment Share on other sites More sharing options...
mrmaller1905 Posted May 13 Author Share Posted May 13 On 5/11/2024 at 2:47 PM, ikskoks said: Filenames are known. You can find them here: https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/Projects/FileNames.list Hash function is also known and it's available here https://github.com/Ekey/JCED.DAT.Tool/blob/main/JCED.Unpacker/JCED.Unpacker/FileSystem/Package/DatHash.cs As for memory address, it's your job to find it if you want to hook it. More details here https://ikskoks.pl/tutorial-how-to-restore-hashed-filenames-from-archives/ But you can also try other methods as guessing/exe dump/hashcat etc. Are there programs that can repack custom files into DATs? Link to comment Share on other sites More sharing options...
ikskoks Posted May 15 Share Posted May 15 No, there are none as far as I know. Link to comment Share on other sites More sharing options...
mrmaller1905 Posted June 1 Author Share Posted June 1 I said "Where is the memory address for the hash function from the executable?" Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now