------------------------------------------------------------------------------
drmdbgwmppfobKłB
J[lɃpb`łȂ NT,2000,XPpłB9xn͎g܂B
(NTmF)
------------------------------------------------------------------------------
[wmp]
exe=WMP鏊(wmplayer.exe)
ieCache=IȆ匳̃LbVtH_(Ō\tȂ)
        ͖܂
stop=u[N|CgŒ~ 0=Ȃ(I~) 1=
drmclien=u[N|Cg 0=Ȃ 1=
blackbox=
indivbox=
drmv2clt=
wmvcore=

[*.dll] eς邱ƂőDLLɑΉł܂B(u[NΉDLLiniɂ̂)
crcxx0-0x400crc32(\܂)
adrxx̓x[XAhX
regxx̓WX^(push xx)
addxxregxx WX^̃AhXɒǉ鐔l(0ꍇȂ)
(ݓĂ̂2000ŊmFwmp9DLL)

*l͑S16i
*crcxxɂȂ͎̂ŒׂKv
*DLL͓VerłWindows UpdataƏEĂēꂽ͈̂Ⴄ݂
 ̑GR[_ƈႤ݂
*crc\crcxxĂƂ͓Kɂok(regxxvȂ悤)
------------------------------------------------------------------------------
\
-----drm1-----
drmdbg Ver 0.31 by taku
CreateProcess: C:\Program Files\Windows Media Player\wmplayer.exe
010010C0 vO Gg[ |Cg
IsDebuggerPresent: memwriteret=1 callret=0
mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv
crc: AC782817 c:\winnt\system32\drmclien.dll
setbp 091B527C 50
crc: 2850B98C c:\winnt\system32\drmv2clt.dll
setbp 09252BCC 50
crc: 0A3A07B3 c:\documents and settings\all users\drm\indivbox.key
setbp 02E17C56 56
eax 01B268A5

<DRM2WMV1>
<KID></KID>
<SID>pPvoLdjownRBq4QIWzgts4UWVvM=</SID>
<INFO></INFO>
[mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv]
</DRM2WMV1>

CloseProces
Enter key run
-----drm1-----
-----drm2-----
drmdbg Ver 0.31 by taku
CreateProcess: C:\Program Files\Windows Media Player\wmplayer.exe
010010C0 vO Gg[ |Cg
IsDebuggerPresent: memwriteret=1 callret=0
mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv
crc: 2850B98C c:\winnt\system32\drmv2clt.dll
setbp 09252BCC 50
crc: AC782817 c:\winnt\system32\drmclien.dll
setbp 091B527C 50
crc: 0A3A07B3 c:\documents and settings\all users\drm\indivbox.key
setbp 02EF7C56 56
esi 01B75F10
C:\Documents and Settings\*\Local Settings\Temporary Internet Files\Content.IE5\CLIRSPAB\puchi_albu51_1[1].dat

<DRM2WMV2>
<KID>cXooHU11fUqOqh5cCZ9zag==</KID>
<SID>3oPOB7roTQUU5DcJx9MTFna+cOM=</SID>
<INFO></INFO>
[mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv]
</DRM2WMV2>

CloseProces
Enter key run
-----drm2-----

*IsDebuggerPresentmemwriteret=1 callret=0ɂȂȂƐĐł܂
*Enter key run̏ňꎞ~܂܂
*u[N|Cg͂P~܂Ǝ͎~܂܂
 (DLLA[hčă[hΎ~܂܂)
*KIDwmvEdrm2wmvEĉ
------------------------------------------------------------------------------
ID/PASmFɂ

ID/PASmFDRM͂܂ʂɏFĉB
FĐdrmdbgōĐokB
ȂAhtmlNW炵Ă܂BIȄꍇłȂB
*indivbox.keyɂĂ͓Ǝ̑ł
------------------------------------------------------------------------------
blackbox.dllɂ

blackbox͕ÍĂ܂BYsOɕ݂B
Ȃ̂DLL[hɃu[Nݒ肪ł܂B
u[N|Cgς̂𒲂ׂĂu[Nݒ̂
~X鎞܂񂩂okB
------------------------------------------------------------------------------
indivbox.keyɂ

C:\Documents and Settings\All Users\DRM\(W)
̃t@Cblackbox.dllɖ߂܂B
*indivbox.key͏ExɈႤɕς悤ȋC
------------------------------------------------------------------------------
drmclien.dllɂ

drm1̎Decryptŕϊ̂łpush鏊ToĉB
win2000+wmp9̏ꍇ add xxx,6d push xxx B̌callrc4key̏B
------------------------------------------------------------------------------
drmv2clt.dllɂ

drmv2cltblackbox.dllindivbox.keỹbp[Ȃ̂
C00D2723Tblackbox.dllindivbox.keycallĂ鏊ToĉB
------------------------------------------------------------------------------
Win XPɂ

indivbox.keyɃu[N|CgƋIꍇ
drmv2clt.dll̕Ă݂B
------------------------------------------------------------------------------
IẼLbVɂ

A^CŌ鎞IẼLbVtH_
ꎞۑ(CZXɂĂ͎c)̂ŒTokid܂B
*DRM1͂ԂLbVȂ͗lȂ̂kid擾łȂB
*[Jt@C͍̏\܂
------------------------------------------------------------------------------
