[Refox]
> > level II branded app [...] brute-force those parameters? Ballpark figure.
> forever.

A couple of seconds.

Most bits of the obsfuscation parameters can be computed mathematically which means you need to brute-force only about 24 bits. In real-life terms this means, for example, that brute-forcing would be quicker than downloading the branded runtime dll via modem to look up the parameters.