├── .gitignore ├── DecryptCocos2dAsset.sln ├── DecryptCocos2dAsset ├── DecryptCocos2dAsset.csproj ├── Program.cs ├── gacha_cash_2017_0701.png └── out.png ├── LICENSE └── README.md /.gitignore: -------------------------------------------------------------------------------- 1 | ## Ignore Visual Studio temporary files, build results, and 2 | ## files generated by popular Visual Studio add-ons. 3 | ## 4 | ## Get latest from https://github.com/github/gitignore/blob/master/VisualStudio.gitignore 5 | 6 | # User-specific files 7 | *.suo 8 | *.user 9 | *.userosscache 10 | *.sln.docstates 11 | 12 | # User-specific files (MonoDevelop/Xamarin Studio) 13 | *.userprefs 14 | 15 | # Build results 16 | [Dd]ebug/ 17 | [Dd]ebugPublic/ 18 | [Rr]elease/ 19 | [Rr]eleases/ 20 | x64/ 21 | x86/ 22 | bld/ 23 | [Bb]in/ 24 | [Oo]bj/ 25 | [Ll]og/ 26 | 27 | # Visual Studio 2015 cache/options directory 28 | .vs/ 29 | # Uncomment if you have tasks that create the project's static files in wwwroot 30 | #wwwroot/ 31 | 32 | # MSTest test Results 33 | [Tt]est[Rr]esult*/ 34 | [Bb]uild[Ll]og.* 35 | 36 | # NUNIT 37 | *.VisualState.xml 38 | TestResult.xml 39 | 40 | # Build Results of an ATL Project 41 | [Dd]ebugPS/ 42 | [Rr]eleasePS/ 43 | dlldata.c 44 | 45 | # .NET Core 46 | project.lock.json 47 | project.fragment.lock.json 48 | artifacts/ 49 | **/Properties/launchSettings.json 50 | 51 | *_i.c 52 | *_p.c 53 | *_i.h 54 | *.ilk 55 | *.meta 56 | *.obj 57 | *.pch 58 | *.pdb 59 | *.pgc 60 | *.pgd 61 | *.rsp 62 | *.sbr 63 | *.tlb 64 | *.tli 65 | *.tlh 66 | *.tmp 67 | *.tmp_proj 68 | *.log 69 | *.vspscc 70 | *.vssscc 71 | .builds 72 | *.pidb 73 | *.svclog 74 | *.scc 75 | 76 | # Chutzpah Test files 77 | _Chutzpah* 78 | 79 | # Visual C++ cache files 80 | ipch/ 81 | *.aps 82 | *.ncb 83 | *.opendb 84 | *.opensdf 85 | *.sdf 86 | *.cachefile 87 | *.VC.db 88 | *.VC.VC.opendb 89 | 90 | # Visual Studio profiler 91 | *.psess 92 | *.vsp 93 | *.vspx 94 | *.sap 95 | 96 | # TFS 2012 Local Workspace 97 | $tf/ 98 | 99 | # Guidance Automation Toolkit 100 | *.gpState 101 | 102 | # ReSharper is a .NET coding add-in 103 | _ReSharper*/ 104 | *.[Rr]e[Ss]harper 105 | *.DotSettings.user 106 | 107 | # JustCode is a .NET coding add-in 108 | .JustCode 109 | 110 | # TeamCity is a build add-in 111 | _TeamCity* 112 | 113 | # DotCover is a Code Coverage Tool 114 | *.dotCover 115 | 116 | # Visual Studio code coverage results 117 | *.coverage 118 | *.coveragexml 119 | 120 | # NCrunch 121 | _NCrunch_* 122 | .*crunch*.local.xml 123 | nCrunchTemp_* 124 | 125 | # MightyMoose 126 | *.mm.* 127 | AutoTest.Net/ 128 | 129 | # Web workbench (sass) 130 | .sass-cache/ 131 | 132 | # Installshield output folder 133 | [Ee]xpress/ 134 | 135 | # DocProject is a documentation generator add-in 136 | DocProject/buildhelp/ 137 | DocProject/Help/*.HxT 138 | DocProject/Help/*.HxC 139 | DocProject/Help/*.hhc 140 | DocProject/Help/*.hhk 141 | DocProject/Help/*.hhp 142 | DocProject/Help/Html2 143 | DocProject/Help/html 144 | 145 | # Click-Once directory 146 | publish/ 147 | 148 | # Publish Web Output 149 | *.[Pp]ublish.xml 150 | *.azurePubxml 151 | # TODO: Comment the next line if you want to checkin your web deploy settings 152 | # but database connection strings (with potential passwords) will be unencrypted 153 | *.pubxml 154 | *.publishproj 155 | 156 | # Microsoft Azure Web App publish settings. Comment the next line if you want to 157 | # checkin your Azure Web App publish settings, but sensitive information contained 158 | # in these scripts will be unencrypted 159 | PublishScripts/ 160 | 161 | # NuGet Packages 162 | *.nupkg 163 | # The packages folder can be ignored because of Package Restore 164 | **/packages/* 165 | # except build/, which is used as an MSBuild target. 166 | !**/packages/build/ 167 | # Uncomment if necessary however generally it will be regenerated when needed 168 | #!**/packages/repositories.config 169 | # NuGet v3's project.json files produces more ignorable files 170 | *.nuget.props 171 | *.nuget.targets 172 | 173 | # Microsoft Azure Build Output 174 | csx/ 175 | *.build.csdef 176 | 177 | # Microsoft Azure Emulator 178 | ecf/ 179 | rcf/ 180 | 181 | # Windows Store app package directories and files 182 | AppPackages/ 183 | BundleArtifacts/ 184 | Package.StoreAssociation.xml 185 | _pkginfo.txt 186 | 187 | # Visual Studio cache files 188 | # files ending in .cache can be ignored 189 | *.[Cc]ache 190 | # but keep track of directories ending in .cache 191 | !*.[Cc]ache/ 192 | 193 | # Others 194 | ClientBin/ 195 | ~$* 196 | *~ 197 | *.dbmdl 198 | *.dbproj.schemaview 199 | *.jfm 200 | *.pfx 201 | *.publishsettings 202 | orleans.codegen.cs 203 | 204 | # Since there are multiple workflows, uncomment next line to ignore bower_components 205 | # (https://github.com/github/gitignore/pull/1529#issuecomment-104372622) 206 | #bower_components/ 207 | 208 | # RIA/Silverlight projects 209 | Generated_Code/ 210 | 211 | # Backup & report files from converting an old project file 212 | # to a newer Visual Studio version. Backup files are not needed, 213 | # because we have git ;-) 214 | _UpgradeReport_Files/ 215 | Backup*/ 216 | UpgradeLog*.XML 217 | UpgradeLog*.htm 218 | 219 | # SQL Server files 220 | *.mdf 221 | *.ldf 222 | *.ndf 223 | 224 | # Business Intelligence projects 225 | *.rdl.data 226 | *.bim.layout 227 | *.bim_*.settings 228 | 229 | # Microsoft Fakes 230 | FakesAssemblies/ 231 | 232 | # GhostDoc plugin setting file 233 | *.GhostDoc.xml 234 | 235 | # Node.js Tools for Visual Studio 236 | .ntvs_analysis.dat 237 | node_modules/ 238 | 239 | # Typescript v1 declaration files 240 | typings/ 241 | 242 | # Visual Studio 6 build log 243 | *.plg 244 | 245 | # Visual Studio 6 workspace options file 246 | *.opt 247 | 248 | # Visual Studio 6 auto-generated workspace file (contains which files were open etc.) 249 | *.vbw 250 | 251 | # Visual Studio LightSwitch build output 252 | **/*.HTMLClient/GeneratedArtifacts 253 | **/*.DesktopClient/GeneratedArtifacts 254 | **/*.DesktopClient/ModelManifest.xml 255 | **/*.Server/GeneratedArtifacts 256 | **/*.Server/ModelManifest.xml 257 | _Pvt_Extensions 258 | 259 | # Paket dependency manager 260 | .paket/paket.exe 261 | paket-files/ 262 | 263 | # FAKE - F# Make 264 | .fake/ 265 | 266 | # JetBrains Rider 267 | .idea/ 268 | *.sln.iml 269 | 270 | # CodeRush 271 | .cr/ 272 | 273 | # Python Tools for Visual Studio (PTVS) 274 | __pycache__/ 275 | *.pyc 276 | 277 | # Cake - Uncomment if you are using it 278 | # tools/** 279 | # !tools/packages.config 280 | 281 | # Telerik's JustMock configuration file 282 | *.jmconfig 283 | 284 | # BizTalk build output 285 | *.btp.cs 286 | *.btm.cs 287 | *.odx.cs 288 | *.xsd.cs 289 | -------------------------------------------------------------------------------- /DecryptCocos2dAsset.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio 15 4 | VisualStudioVersion = 15.0.27130.2027 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DecryptCocos2dAsset", "DecryptCocos2dAsset\DecryptCocos2dAsset.csproj", "{4855F0F8-CBEF-42D5-9526-9C8B33E96ABE}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|Any CPU = Debug|Any CPU 11 | Release|Any CPU = Release|Any CPU 12 | EndGlobalSection 13 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 14 | {4855F0F8-CBEF-42D5-9526-9C8B33E96ABE}.Debug|Any CPU.ActiveCfg = Debug|Any CPU 15 | {4855F0F8-CBEF-42D5-9526-9C8B33E96ABE}.Debug|Any CPU.Build.0 = Debug|Any CPU 16 | {4855F0F8-CBEF-42D5-9526-9C8B33E96ABE}.Release|Any CPU.ActiveCfg = Release|Any CPU 17 | {4855F0F8-CBEF-42D5-9526-9C8B33E96ABE}.Release|Any CPU.Build.0 = Release|Any CPU 18 | EndGlobalSection 19 | GlobalSection(SolutionProperties) = preSolution 20 | HideSolutionNode = FALSE 21 | EndGlobalSection 22 | GlobalSection(ExtensibilityGlobals) = postSolution 23 | SolutionGuid = {9DFB8EC7-1BC4-4852-A1F3-37FF1D66B8D4} 24 | EndGlobalSection 25 | EndGlobal 26 | -------------------------------------------------------------------------------- /DecryptCocos2dAsset/DecryptCocos2dAsset.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Exe 5 | netcoreapp2.0 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /DecryptCocos2dAsset/Program.cs: -------------------------------------------------------------------------------- 1 | using Ionic.Zlib; 2 | using System; 3 | using System.Collections.Generic; 4 | using System.IO; 5 | using System.Linq; 6 | 7 | namespace DecryptCocos2dAsset 8 | { 9 | class Program 10 | { 11 | // original 12 | // https://github.com/cocos2d/cocos2d-x/blob/v3/cocos/base/ZipUtils.h 13 | // https://github.com/cocos2d/cocos2d-x/blob/v3/cocos/base/ZipUtils.cpp 14 | static uint[] s_uEncryptedPvrKeyParts = new uint[4]; 15 | static uint[] s_uEncryptionKey = new uint[1024]; 16 | 17 | static void SetKey(uint key1, uint key2, uint key3, uint key4) 18 | { 19 | s_uEncryptedPvrKeyParts[0] = key1; 20 | s_uEncryptedPvrKeyParts[1] = key2; 21 | s_uEncryptedPvrKeyParts[2] = key3; 22 | s_uEncryptedPvrKeyParts[3] = key4; 23 | } 24 | 25 | static uint MX(uint z, uint y, uint p, uint e, uint sum) => 26 | (((z >> 5 ^ y << 2) + (y >> 3 ^ z << 4)) ^ ((sum ^ y) + (s_uEncryptedPvrKeyParts[(p & 3) ^ e] ^ z))); 27 | 28 | static void InitializeKey() 29 | { 30 | const int enclen = 1024; 31 | 32 | uint y, p, e; 33 | uint rounds = 6; 34 | uint sum = 0; 35 | uint z = s_uEncryptionKey[enclen - 1]; 36 | 37 | do 38 | { 39 | uint DELTA = 0x9e3779b9; 40 | 41 | sum += DELTA; 42 | e = (sum >> 2) & 3; 43 | 44 | for (p = 0; p < enclen - 1; p++) 45 | { 46 | y = s_uEncryptionKey[p + 1]; 47 | z = s_uEncryptionKey[p] += MX(z, y, p, e, sum); 48 | } 49 | 50 | y = s_uEncryptionKey[0]; 51 | z = s_uEncryptionKey[enclen - 1] += MX(z, y, p, e, sum); 52 | 53 | } while (--rounds > 0); 54 | } 55 | 56 | static void ExportKey() 57 | { 58 | var bytes = new List(); 59 | foreach (var x in s_uEncryptionKey) 60 | { 61 | bytes.AddRange(BitConverter.GetBytes(x)); 62 | } 63 | File.WriteAllBytes("key.bin", bytes.ToArray()); 64 | } 65 | 66 | static void Decrypt(ref byte[] bytes) 67 | { 68 | const int enclen = 1024; 69 | const int securelen = 512 * 4; 70 | const int distance = 64 * 4; 71 | 72 | var b = 0; 73 | var i = 0; 74 | var len = (bytes.Length - 12); 75 | 76 | for (; i < len && i < securelen; i += 4) 77 | { 78 | var key = BitConverter.GetBytes(s_uEncryptionKey[b++]); 79 | bytes[i + 0] ^= key[0]; 80 | bytes[i + 1] ^= key[1]; 81 | bytes[i + 2] ^= key[2]; 82 | bytes[i + 3] ^= key[3]; 83 | 84 | if (b >= enclen) 85 | { 86 | b = 0; 87 | } 88 | } 89 | 90 | for (; i < len; i += distance) 91 | { 92 | var key = BitConverter.GetBytes(s_uEncryptionKey[b++]); 93 | bytes[i + 0] ^= key[0]; 94 | bytes[i + 1] ^= key[1]; 95 | bytes[i + 2] ^= key[2]; 96 | bytes[i + 3] ^= key[3]; 97 | 98 | if (b >= enclen) 99 | { 100 | b = 0; 101 | } 102 | } 103 | } 104 | 105 | static void Main(string[] args) 106 | { 107 | SetKey(0xF68C6273, 0x07C32116, 0x4AF4F1AC, 0xBF0988A6); 108 | InitializeKey(); 109 | //ExportKey(); 110 | 111 | var bytes = File.ReadAllBytes("gacha_cash_2017_0701.png"); 112 | // skip header(12byte) 113 | bytes = bytes.Skip(12).ToArray(); 114 | // decrypt 115 | Decrypt(ref bytes); 116 | // skip length header(4byte) 117 | bytes = ZlibStream.UncompressBuffer(bytes.Skip(4).ToArray()); 118 | File.WriteAllBytes("out.png", bytes); 119 | } 120 | } 121 | } 122 | -------------------------------------------------------------------------------- /DecryptCocos2dAsset/gacha_cash_2017_0701.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/CRC32EX/DecryptCocos2dAsset/118a5cce699427603fb29adf8ace7abff737ab75/DecryptCocos2dAsset/gacha_cash_2017_0701.png -------------------------------------------------------------------------------- /DecryptCocos2dAsset/out.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/CRC32EX/DecryptCocos2dAsset/118a5cce699427603fb29adf8ace7abff737ab75/DecryptCocos2dAsset/out.png -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2018 CRC32EX 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # DecryptCocos2dAsset 2 | This project can help decrypt cocos2d's asset 3 | like *.pvr.ccz files. 4 | *.pvr.ccz file has "CCZp" `43 43 5A 70` header. 5 | ![](https://i.imgur.com/y8upqM9.png) 6 | 7 | ### How to get key 8 | key size is 16byte(4byte * 4key) 9 | 10 | hook or static/dynamic disassemble these functions 11 | ```txt 12 | cocos2d::ZipUtils::setPvrEncryptionKeyPart(int,uint) 13 | cocos2d::ZipUtils::setPvrEncryptionKey(uint,uint,uint,uint) 14 | ``` 15 | 16 | example 17 | ![](https://i.imgur.com/d3Uvc5O.png) 18 | 19 | ### Platform 20 | All platform is supported (Windows/Linux/macOS) 21 | 22 | ### How to run 23 | ``` 24 | $ dotnet run 25 | ``` 26 | 27 | ### Requirements 28 | - [.NET Core 2.0](https://dotnet.github.io/)
29 | --------------------------------------------------------------------------------