If you have almost all the file names (the whole relative path)
Pity but no. I can retrieve only last part of relative file path. File name without path.
See this topic and you will understand how Hash + FileNameList + QuickBMS works, then you should be able to do the same with your case.
Thanks. I have read this thread. As I can understand:
1. Ekey deciphered the algo as Murmur 2 and created an FPHook (dinput8).
FPHook extracts full file path of used file from RAM to log. (full path file list)
2. Delutto, you, using algo, created a File Names Compare Hash List.
And a tool (Frostpunk_DAT_Tool), which not only unpack but same time compare a hashed names from the list and replace the orginal path of files.
In case of fnv32 algo QBMS will automatically compare hash names with file paths. Am I right?
If so, then my case need FPHook analog.
Where should I start to make FPHook for steam version of Starships64.exe?
Am I need a tutorial for a debugger to start with?