feat: offline channel

Author: WorldObservationLog

import.h

@@ -264,6 +264,22 @@ extern struct shared_ptr *_ZNK17storeservicescore10URLRequest5errorEv(void *);
 extern struct shared_ptr *_ZNK17storeservicescore10URLRequest8responseEv(void *);
 extern struct shared_ptr *_ZNK17storeservicescore11URLResponse18underlyingResponseEv(void *);
 
+extern void * _ZN17storeservicescore15PurchaseRequestC2ERKNSt6__ndk110shared_ptrINS_14RequestContextEEE(void *, struct shared_ptr *);
+extern void *_ZN17storeservicescore15PurchaseRequest23setProcessDialogActionsEb(void *, int);
+extern void *_ZN17storeservicescore15PurchaseRequest12setURLBagKeyERKNSt6__ndk112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE(void *, union std_string *);
+extern void *_ZN17storeservicescore15PurchaseRequest16setBuyParametersERKNSt6__ndk112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE(void *, union std_string *);
+extern void *_ZN17storeservicescore15PurchaseRequest3runEv(void *);
+extern struct shared_ptr *_ZNK17storeservicescore15PurchaseRequest8responseEv(void *);
+extern struct shared_ptr *_ZN17storeservicescore16PurchaseResponse5errorEv(void *);
+extern struct std_vector _ZNK17storeservicescore16PurchaseResponse5itemsEv(void *);
+extern struct std_vector _ZNK17storeservicescore12PurchaseItem6assetsEv(void *);
+extern union std_string *_ZNK17storeservicescore13PurchaseAsset3URLEv(void *, void *);
+extern int _ZNK17storeservicescore19StoreErrorCondition9errorCodeEv(void *);
+
+extern void *_ZN17storeservicescore14RequestContext8fairPlayEv(void *, void *);
+extern struct std_vector _ZN17storeservicescore8FairPlay21getSubscriptionStatusEv(void *);
+
+
 const char *const android_id = "dc28071e981c439e";
 const char *const fairplayCert = "MIIEzjCCA7agAwIBAgIIAXAVjHFZDjgwDQYJKoZIhvcNAQEFBQAwfzELMAkGA1UEBhMCVVMxEz"
 								 "ARBgNVBAoMCkFwcGxlIEluYy4xJjAkBgNVBAsMHUFwcGxlIENlcnRpZmljYXRpb24gQXV0aG9y"

main.c

@@ -23,10 +23,12 @@
 
 static struct shared_ptr apInf;
 static uint8_t leaseMgr[16];
+static struct shared_ptr reqCtx;
 struct gengetopt_args_info args_info;
 char *amUsername, *amPassword;
 struct shared_ptr GUID;
 int decryptCount = 1000;
+int offlineFlag;
 char *device_infos[9];
 
 // Account info cache
@@ -595,6 +597,37 @@ inline static int new_socket() {
 }
 
 
+const char* get_m3u8_method_download(struct shared_ptr reqCtx, unsigned long adam) {
+    void *purchase_request = malloc(1024);
+    _ZN17storeservicescore15PurchaseRequestC2ERKNSt6__ndk110shared_ptrINS_14RequestContextEEE(purchase_request, &reqCtx);
+    _ZN17storeservicescore15PurchaseRequest23setProcessDialogActionsEb(purchase_request, 1);
+    union std_string urlBagKey = new_std_string("subDownload");
+    _ZN17storeservicescore15PurchaseRequest12setURLBagKeyERKNSt6__ndk112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE(purchase_request, &urlBagKey);
+    char *buyParametersStr = malloc(128);
+    sprintf(buyParametersStr, "salableAdamId=%lu&price=0&pricingParameters=SUBS&productType=S", adam);
+    union std_string buyParameters = new_std_string(buyParametersStr);
+    _ZN17storeservicescore15PurchaseRequest16setBuyParametersERKNSt6__ndk112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE(purchase_request, &buyParameters);
+    _ZN17storeservicescore15PurchaseRequest3runEv(purchase_request);
+    struct shared_ptr *response = _ZNK17storeservicescore15PurchaseRequest8responseEv(purchase_request);
+    struct shared_ptr *error = _ZN17storeservicescore16PurchaseResponse5errorEv(response->obj);;
+    if (error->obj == NULL) {
+        struct std_vector items = _ZNK17storeservicescore16PurchaseResponse5itemsEv(response->obj);
+        struct shared_ptr *firstItem = items.begin;
+        struct std_vector assets = _ZNK17storeservicescore12PurchaseItem6assetsEv(firstItem->obj);
+        struct shared_ptr *lastAsset = (struct shared_ptr *)assets.end - 1;
+        union std_string *url_str = malloc(sizeof(union std_string));
+        _ZNK17storeservicescore13PurchaseAsset3URLEv(url_str, lastAsset->obj);
+        const char *url = std_string_data(url_str);
+        if (url) {
+            char *result = strdup(url);  // Make a copy
+            free(url_str);
+            return result;
+        }
+    } 
+    return NULL;
+}
+
+
 const char* get_m3u8_method_play(uint8_t leaseMgr[16], unsigned long adam) {
     union std_string HLS = new_std_string_short_mode("HLS");
     struct std_vector HLSParam = new_std_vector(&HLS);
@@ -656,7 +689,12 @@ void handle_m3u8(const int connfd) {
         }
         char *ptr;
         unsigned long adamID = strtoul(adam, &ptr, 10);
-        const char *m3u8 = get_m3u8_method_play(leaseMgr, adamID);
+        const char *m3u8;
+        if (offlineFlag) {
+            m3u8 = get_m3u8_method_download(reqCtx, adamID);
+        } else {
+            m3u8 = get_m3u8_method_play(leaseMgr, adamID);
+        }
         if (m3u8 == NULL) {
             fprintf(stderr, "[.] failed to get m3u8 of adamId: %ld\n", adamID);
             writefull(connfd, "\n", sizeof("\n"));
@@ -974,6 +1012,19 @@ void write_music_token(void) {
     fclose(fp);
 }
 
+int offline_available() {
+    struct shared_ptr *fairplay = malloc(16);
+    _ZN17storeservicescore14RequestContext8fairPlayEv(fairplay, reqCtx.obj);
+    struct std_vector fairplay_status = _ZN17storeservicescore8FairPlay21getSubscriptionStatusEv(fairplay->obj);
+    char *begin_ptr = (char*)fairplay_status.begin;
+    char *second_item_ptr = begin_ptr + 16;
+    int state = *(int*)((char*)second_item_ptr + 8);
+    if (state == 2 || state == 3) { // kFPSubscriptionCanPlayContent, kFPSubscriptionCanStreamAndPlayContent
+        return 1;
+    } 
+    return 0;
+}
+
 int main(int argc, char *argv[]) {
     cmdline_parser(argc, argv, &args_info);
     char *copy_that_needs_to_be_freed = NULL;
@@ -988,12 +1039,12 @@ int main(int argc, char *argv[]) {
     #endif
 
     init();
-    const struct shared_ptr ctx = init_ctx();
+    reqCtx = init_ctx();
     if (args_info.login_given) {
         amUsername = strtok(args_info.login_arg, ":");
         amPassword = strtok(NULL, ":");
     }
-    if (args_info.login_given && !login(ctx)) {
+    if (args_info.login_given && !login(reqCtx)) {
         fprintf(stderr, "[!] login failed\n");
         return EXIT_FAILURE;
     }
@@ -1004,10 +1055,15 @@ int main(int argc, char *argv[]) {
     _ZN22SVPlaybackLeaseManager12requestLeaseERKb(leaseMgr, &autom);
     FHinstance = _ZN21SVFootHillSessionCtrl8instanceEv();
 
+    offlineFlag = offline_available();
+    if (offlineFlag) {
+        printf("[+] This account supports offline channel\n");
+    }
+
     // Cache account info
-    g_storefront_id = get_account_storefront_id(ctx);
-    g_dev_token = get_dev_token(ctx);
-    g_music_token = get_music_user_token(get_guid(), g_dev_token, ctx);
+    g_storefront_id = get_account_storefront_id(reqCtx);
+    g_dev_token = get_dev_token(reqCtx);
+    g_music_token = get_music_user_token(get_guid(), g_dev_token, reqCtx);
     fprintf(stderr, "[+] account info cached successfully\n");
 
     write_storefront_id();