This is a machine translation. Perhaps there are japanese people here who can provide a better translation?
--------------------
drm2wmv.txt
drm2wmv
It only converts it from .peel. data based on the DRM information removal etc. , KID, and SID to reproduce normally.
The DRM licensing twining done on WMP doesn't do anything at all (Decode is excluded).
Up to 2005/02/15 inside in the time limit type
Please teach if there are uncorrespondence and a bug.
drm1*.key drm2*.key
(It is execution ahead when the execution file was done. Each all folder is seen though did. )
However.
*/sees only DRM2WMV2 > < < drm2 = DRM2WMV1 ./. > < DRM2WMV2>. drm1 = each < DRM2WMV1>
*Drm2 is previously seen.
It comes in succession and < KID>abcdefg < KID > cannot be converted.
(DRM1 doesn't have this in DRM2 in there is only MS sample. )
*KID DRM1=ASCII,KID DRM2=unicode
*Enco .again. is legally an out so as not to circulate. data that has released DRM
*I do not think that there is what cracks legally even if circulating though it is one a respondent book with DRM. (If it is the same as the origin. )
drmdbg.txt
------------------------------------------------------------------------------
Drmdbg is a debugger for wmp.
It is for NT, 2000, and XP in the kernel because it cannot wear the memory patch. 9x system cannot use it.
(NT unconfirmed)
-------------------------------------------------------------------------------
[wmp]
Place with exe=WMP(There is wmplayer.exe, too. )
The cash folder of Omoto of ieCache=IE ahead(End is not put. )
It disregards it when not is.
It 1 no 0=(When ending, stop)= stops with stop = breakpoint.
Drmclien = breakpoint 1 no 0 is done.
blackbox=
indivbox=
drmv2clt=
wmvcore=
[*.dll] It is possible to correspond to a lot of DLL by changing the content. (DLL for the break is : only by being in ini. )
Crcxx is crc32 of 0-0x400. (Display it. )
Adrxx is an address pulled from the base.
Regxx is a register. (push xx)
Addxx is a numerical value added to the address of the regxx register. (0-place combination is not needed. )
(It is DLL of wmp9 confirmed by 2000 to put as of now. )
*Numerical values are all hexadecimals.
*It is necessary to examine that it is not in crcxx for myself.
*Same Ver picks up with Windows Updata and is different putting. DLL
It differs when other encoder etc. are put.
*Crcxx is written and ok if keeping suitable. (Regxx shall not be corresponding. )
-------------------------------------------------------------------------------
Example of display
-----drm1-----
drmdbg Ver 0.31 by ..
CreateProcess: C:Program FilesWindows Media Playerwmplayer.exe
010010C0 program entry point
IsDebuggerPresent: memwriteret=1 callret=0
mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv
crc: AC782817 c:winntsystem32drmclien.dll
setbp 091B527C 50
crc: 2850B98C c:winntsystem32drmv2clt.dll
setbp 09252BCC 50
crc: 0A3A07B3 c:documents and settingsall usersdrmindivbox.key
setbp 02E17C56 56
eax 01B268A5
<DRM2WMV1>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv]
</DRM2WMV1>
CloseProces
Enter key run
-----drm1-----
-----drm2-----
drmdbg Ver 0.31 by ..
CreateProcess: C:Program FilesWindows Media Playerwmplayer.exe
010010C0 program entry point
IsDebuggerPresent: memwriteret=1 callret=0
mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv
crc: 2850B98C c:winntsystem32drmv2clt.dll
setbp 09252BCC 50
crc: AC782817 c:winntsystem32drmclien.dll
setbp 091B527C 50
crc: 0A3A07B3 c:documents and settingsall usersdrmindivbox.key
setbp 02EF7C56 56
esi 01B75F10
C:Documents and Settings*Local SettingsTemporary Internet FilesContent.IE5CLIRSPABpuchi_albu51_1[1].dat
<DRM2WMV2>
<KID>abcdefg</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv]
</DRM2WMV2>
CloseProces
Enter key run
-----drm2-----
*IsDebuggerPresent cannot be normally reproduced if not becoming memwriteret=1 callret=0.
*It stops in the place of Enter key run at one o'clock.
*The following do not stop if the breakpoint stops once.
(Stop if DLL unloads and the reload. )
*Please pick up from wmv or pick up KID from drm2wmv.
-------------------------------------------------------------------------------
About the ID/PAS confirmation
Please let me approve usually first of all about DRM with the ID/PAS confirmation.
It is ok if it doesn't reproduce after it approves and it reproduces with drmdbg.
.html start standard. is not tried. Cannot you do for IE?
*It is original window according to indivbox.key.
-------------------------------------------------------------------------------
About blackbox.dll
As for blackbox, the part is encrypted. It decodes before the correspondence is executed.
When DLL is loaded, the break cannot be set.
Because the break is set after it is examined that the breakpoint changes
It is ok if it does several times though there is Miss.
-------------------------------------------------------------------------------
About indivbox.key
C:Documents and SettingsAll UsersDRM(standard)
It returns to blackbox.dll if the file in the inside is erased.
*Indivbox.key thinks that it changes into a thing different every time it picks it up.
-------------------------------------------------------------------------------
About drmclien.dll
The conversion processing is done with Decrypt at drm1 and search out the place where push is done here, please.
Add xxx and 6d push xxx of win2000+wmp9 are around. Rc4key is processed with call after this.
-------------------------------------------------------------------------------
About drmv2clt.dll
Because drmv2clt is a rapper of blackbox.dll and indivbox.key
Please search out the place where blackbox.dll and indivbox.key are done in call looking for C00D2723.
-------------------------------------------------------------------------------
About Win XP
When canceling if the breakpoint is done to indivbox.key
Drmv2clt.dll is tried.
-------------------------------------------------------------------------------
About the cash of IE
To the cash folder of IE when in real time seeing
It searches out and kid is found because it preserves it temporarily (Remain according to the license).
*Because DRM1 will not be cached maybe, kid cannot be acquired.
*The local file doesn't display the place today.
-------------------------------------------------------------------------------
key2find.txt
There is KID from the key file or key2find is searched out.
key2find kid
drm1*.key drm2*.key
(It is execution ahead when the execution file was done. Each all folder is seen though did. )
However.
*/sees only DRM2WMV2 > < < drm2 = DRM2WMV1 ./. > < DRM2WMV2>. drm1 = each < DRM2WMV1>
*DRM2 is previously seen.