Hi again,
$ qq() { > LC_ALL=C perl -0777ne 'print $& while /Q;Q;.{0,32}/g' "$@" | > hexdump -ve '36/1 "%_p" "\n"'; > }
Silly me, forgot the `s'.
$ qq() { > LC_ALL=C perl -0777ne 'print $& while /Q;Q;.{0,32}/gs' "$@" | > hexdump -ve '36/1 "%_p" "\n"'; > } $
That's where my 32-byte-long guess comes unstuck. A Q;Q; appears within the structs around LIBC's.
$ qq e3-nand-backup.4 | fgrep -3 .LIBC Q;Q;..^.. ..........WTL_MAILCON..... Q;Q;..... ..........WTL_RES......... Q;Q;..M. ........Q;Q;..... ........ Q;Q;..... ..........LIBC............ Q;Q;..... ........Q;Q;...Q. ........ ..WTL_WAV.........Q;Q;..... ........ ..WTL_CHUNK.......Q;Q;..$.. ........ $
$ qq e3-nand-backup.4 | fgrep -3 .LIBC Q;Q;..... ..........WTL_RES......... Q;Q;..M. ..........WTL_TXT......... Q;Q;..... ..........WTL_TOBMP....... Q;Q;..... ..........LIBC............ Q;Q;..... ..........RENDER.......... Q;Q;...Q. ..........WTL_WAV......... Q;Q;..... ..........WTL_CHUNK....... $