This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=11738

LolHacksRule, posted Sun Jul 21, 2019 1:05 am (49391)

---

Can someone figure out these files? They appear to be made by CCreator (not sure where to find it) given by the filesystem. I think they are encrypted, given by the header of CRYPT_RES...

UPDATE: CCreator is Cocos Creator when looking at the executable code. Some are PNGs given by some leftover header data.

http://www.filedropper.com/pvzv2460cdats

LokiReborn, posted Sun Jul 21, 2019 5:48 am (49397)

---

LolHacksRule wrote:

Can someone figure out these files? They appear to be made by CCreator (not sure where to find it) given by the filesystem. I think they are encrypted, given by the header of CRYPT_RES...

UPDATE: CCreator is Cocos Creator when looking at the executable code. Some are PNGs given by some leftover header data.

http://www.filedropper.com/pvzv2460cdats

From the looks of it the cdata files are a wrapper format, in some circumstances the data isn't encrypted at the least like with default_btn_disabled.cdat for example.
I think the mobile exe would need to be examined to find what the exact usage is though and sadly that's not really my specialty I'll try to take a look though.

yingfengtingyu, posted Thu Feb 24, 2022 4:09 am (70092)

---

Yes, they are encrypted by xor encryption. Just first 100 bytes were encrypted by { 0x41, 0x53, 0x32, 0x33, 0x44, 0x53, 0x52, 0x45, 0x50, 0x4C, 0x4B, 0x4C, 0x33, 0x33, 0x35, 0x4B, 0x4F, 0x34, 0x34, 0x33, 0x39, 0x30, 0x33, 0x32, 0x4E, 0x38, 0x33, 0x34, 0x35, 0x4E, 0x46 }. You can see how to decrypt cdat at https://github.com/YingFengTingYu/PopStudio/