0

I'm trying to unpack an obb file used in an android game. From my initial google searches, it's my understanding that an obb can be basically any type of file. The only lead I have is the magic bytes at the start of the file spell out "AP_Pack!", but I couldn't find any format matching it.

This is where I'm currently stumped so any next steps would be greatly appreciated.

Andrew Jones
  • 11
  • 4
  • May be related: https://reverseengineering.stackexchange.com/q/1560 or https://reverseengineering.stackexchange.com/q/2161. // If you want this to be a general "what to do in general to figure out a file format" it should either be fine (like the question above) or closed as 'too broad' (like https://reverseengineering.stackexchange.com/q/11612), I'm not sure; if you ask a specific question for this particular file like https://reverseengineering.stackexchange.com/q/11126, then be careful of link rot. – user202729 Aug 16 '18 at 14:23

2 Answers2

1

Decompile the app and look for references to the magic signature. Unless it is obfuscated, it should not be too difficult to recover the format details from the code.

P.S. this project seems to have an unpacker referencing the magic string.

Igor Skochinsky
  • 36,553
  • 7
  • 65
  • 115
0

Have you tried to open the file with a HEX editor - for example - 010 Editor (https://www.sweetscape.com/010editor/) ? You can then see the first bytes of the file and look them up here: https://en.wikipedia.org/wiki/List_of_file_signatures

Remko
  • 3,228
  • 3
  • 22
  • 30
hariom
  • 51
  • 3
  • Sorry, I think I used some of the wrong terms. When I said the magic bytes are "AP_Pack!", I meant that I had opened the file in a hex and looked at the first bytes and that's what they were. I had checked a couple of list of file signatures, but I couldn't find any that matched. If it's any help the hex version of the first bytes is 41:50:5f:50:61:63:6b:21. – Andrew Jones Aug 16 '18 at 12:18