Hello! I've written a script for the obb archive but I suspect the file names in the region between the TOC and first file (0xe830-0x02927c) but the data is either xor'ed or something else. Here are the first 2 mb of the archive: http://*USE_ANOTHER_FILEHOSTING*/0dc4b8a ... oftM5HM.7z Can the file names be retrieved?
Thanks for every help!
			
			
									
						
										
						Modern Comar 5 - Android obb
- 
				aluigi
 - Site Admin
 - Posts: 12984
 - Joined: Wed Jul 30, 2014 9:32 pm
 
Re: Modern Comar 5 - Android obb
I don't know what type of obfuscation is used there for the filenames.
It's not a fixed-byte xor, not a xor performed with the previous or next byte.
Anyway this is the script:
			
			
									
						
										
						It's not a fixed-byte xor, not a xor performed with the previous or next byte.
Anyway this is the script:
Code: Select all
endian big
get DUMMY long
get FILES_OFF long
get NAMES_OFF long
get FILES long
for i = 0 < FILES
    get OFFSET long
    get SIZE long
    get NAME_OFF long
    get ZERO long
    log "" OFFSET SIZE
next i- 
				AlphaTwentyThree
 - Posts: 909
 - Joined: Sat Aug 09, 2014 11:21 am
 
Re: Modern Comar 5 - Android obb
Yeah, that's as far as I got, too. 
Thanks for checking anyway.
			
			
									
						
										
						Thanks for checking anyway.