Skip to content

Latest commit

 

History

History
58 lines (42 loc) · 3.38 KB

crochettime.md

File metadata and controls

58 lines (42 loc) · 3.38 KB
Raw

#CrochetTime (not to be confused with T-Time Dot Book)

Cracked by Nagato.

##Sites:

##Download Algorithm (Voyager Store):

  1. Get the book path, such as

     "amwdc0001".

  2. Compute

     "/home/dotbook/rs2_contents/voyager-store_contents/" + [path] + "/" + [path] + "_pc_image_crochet.book.bmit&B" + [8 digit random number]
 Ex: "/home/dotbook/rs2_contents/voyager-store_contents/amwdc0002/amwdc0002_pc_image_crochet.book.bmit&B00006032"

  3. Scramble the URL with this code.

  4. GET the book binary file list from "http://shangrila.voyager-store.com/dBmd" with the scrambled URL.

  5. Parse through the file list with this code.

  6. For each file name, append it to the path. Ex:

     "/home/dotbook/rs2_contents/voyager-store_contents/kdsv9784060625410/kdsv9784060625410_pc_image_crochet.book&D&11812&294404000052ff"

  7. Scramble it and download it through "http://shangrila.voyager-store.com/dBmd".

  8. Decrypt the files with this code.

  9. Use zlib to decompress the file to JPEG pages.

##Differences with Kodansha's Special Event:

Due to the 2011 Touhoku Earthquake and Tsunami and Shueisha uploading WSJ 2011-14 online for free, Kodansha released 9 issues from 6 magazines for free usign CrochetTime. Here are the differences in their structure.

  1. Examples of their unscrambled path (found through reversing the scrambling algorithm):

     "/opt/pccs/share2/cplus/t_files//978406KA01065.book.bmit&B" + [8 digit random number]
 "/opt/pccs/share2/cplus/t_files//978406KA01065.book&D&94047295&19100700009344"

  2. Their dBmd script is located at:

     "http://comic.bitway.ne.jp/kc/cgi-bin/dBmd.cgi?"

  3. Other than that, the path scrambling and file encryption algorithms, and the file list structures are exactly the same as the one use in Voyager Store.

##Notes:

  • If you leave off the ".bmit" for the file listing URL, you download an archive containing the entire book. The format was cracked by Nagato and yet to be implemented in OMD.

      Ex: "/home/dotbook/rs2_contents/voyager-store_contents/amwdc0002/amwdc0002_pc_image_crochet.book&B00006032"

  • For the THUM section in the file listing:
    Nagato: not sure if this is of any interest to you either but, you can get a thumbnail for all of the pages in the book from the THUM section
    Nagato: there's a big endian dword right after the section name that gives the size
    Nagato: then following that it looks like there's a big endian offset
    Nagato: from the beginning of the chunk + that offset, you will get the thumbnail data
    Nagato: the jpg size is section size - data offset
    Nagato: http://i.imgur.com/5052j.jpg

  • There is no authentication necessary.

  • The file name of the thumbnail of the product is the product's path. Ex: http://voyager-store.com/images/products/amwdc0002.png