Modern Comar 5 - Android obb

Extraction and unpacking of game archives and compression, encryption, obfuscation, decoding of unknown files
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Modern Comar 5 - Android obb

Post by AlphaTwentyThree »

Hello! I've written a script for the obb archive but I suspect the file names in the region between the TOC and first file (0xe830-0x02927c) but the data is either xor'ed or something else. Here are the first 2 mb of the archive: http://*USE_ANOTHER_FILEHOSTING*/0dc4b8a ... oftM5HM.7z Can the file names be retrieved?
Thanks for every help!
aluigi
Site Admin
Posts: 12984
Joined: Wed Jul 30, 2014 9:32 pm

Re: Modern Comar 5 - Android obb

Post by aluigi »

I don't know what type of obfuscation is used there for the filenames.
It's not a fixed-byte xor, not a xor performed with the previous or next byte.
Anyway this is the script:

Code: Select all

endian big
get DUMMY long
get FILES_OFF long
get NAMES_OFF long
get FILES long
for i = 0 < FILES
    get OFFSET long
    get SIZE long
    get NAME_OFF long
    get ZERO long
    log "" OFFSET SIZE
next i
AlphaTwentyThree
Posts: 909
Joined: Sat Aug 09, 2014 11:21 am

Re: Modern Comar 5 - Android obb

Post by AlphaTwentyThree »

Yeah, that's as far as I got, too. ;)
Thanks for checking anyway. :)