Hello! I've written a script for the obb archive but I suspect the file names in the region between the TOC and first file (0xe830-0x02927c) but the data is either xor'ed or something else. Here are the first 2 mb of the archive: http://*USE_ANOTHER_FILEHOSTING*/0dc4b8a ... oftM5HM.7z Can the file names be retrieved?
Thanks for every help!
Modern Comar 5 - Android obb
-
- Site Admin
- Posts: 12984
- Joined: Wed Jul 30, 2014 9:32 pm
Re: Modern Comar 5 - Android obb
I don't know what type of obfuscation is used there for the filenames.
It's not a fixed-byte xor, not a xor performed with the previous or next byte.
Anyway this is the script:
It's not a fixed-byte xor, not a xor performed with the previous or next byte.
Anyway this is the script:
Code: Select all
endian big
get DUMMY long
get FILES_OFF long
get NAMES_OFF long
get FILES long
for i = 0 < FILES
get OFFSET long
get SIZE long
get NAME_OFF long
get ZERO long
log "" OFFSET SIZE
next i
-
- Posts: 909
- Joined: Sat Aug 09, 2014 11:21 am
Re: Modern Comar 5 - Android obb
Yeah, that's as far as I got, too.
Thanks for checking anyway.
Thanks for checking anyway.