PDA

View Full Version : DRM10 cracked?


Pages : [1] 2 3 4 5 6

vsv
31st January 2005, 13:07
Information from microsoft.public.windowsmedia.drm

Posted by Satoru Koshiba (JP):
"As far as I survey at this time some popular DRM Protected Video
Providers's contents were cracked...
Many many unlocked video files were distributiong with no payment...

And ...at 17:00(GMT+9:00) anonymous cracker named 'lark' upload source code of 'DRM crack software'
Software name is "DrmDbg.exe" and "DRM2WMV".

DrmDbg.exe will pick up "KID" and "Seed" from PC's memory when user
playback DRM Protected contents , and make "xxxxx.key" file.
DRM2WMV will unlock ProtectedFile using "xxxxx.key"."

Translate this from japanese language:
http://pc5.2ch.net/test/read.cgi/avi/1098298090/

Neo Neko
31st January 2005, 20:57
Hehehehe. That aught to keep MS busy wasting time developing DRM11. Lord knows they will never learn that DRM is pointless.

Sharktooth
1st February 2005, 14:04
If it can be watched it can be copied...

arman68
1st February 2005, 23:14
Great news! Now, if only our politicians realized that DRM is evil...

Originally posted by vsv
DrmDbg.exe will pick up "KID" and "Seed" from PC's memory when user
playback DRM Protected contents

The correct translation is probably something to do with "child" object and encryption "seed" :D

E-Male
2nd February 2005, 03:21
so watching HD-WMV files from dvd (for example) is now possible without i-net? :D

vsv
2nd February 2005, 11:01
I think this is bad news...
99% of Hollywoods S##t must be DRMed:)
Goodies always is free!

hartiberlin
3rd February 2005, 07:32
Can somebody please post a link,
where one can download these 2 programs:

drmdbg.exe and drm2wmv.exe

I have not found them yet.
I want to try them out on some test files.
Thanks !

Regards, Harti.

Elias
7th February 2005, 15:48
Originally posted by Neo Neko
Hehehehe. That aught to keep MS busy wasting time developing DRM11. Lord knows they will never learn that DRM is pointless. They'll never learn their lesson that all these copy protections are going to get cracked sooner or later. Go ahead Micro$oft, waste another billion dollars on a new copy protection method that'll get ripped up in a matter of months. What a waste of time, money and effort.

k0r0n4
10th February 2005, 19:23
Originally posted by Elias
They'll never learn their lesson that all these copy protections are going to get cracked sooner or later. Go ahead Micro$oft, waste another billion dollars on a new copy protection method that'll get ripped up in a matter of months. What a waste of time, money and effort.
Indeed. The sad part is that they don't realize how silly this goose chase is. It's just a matter of "who can release faster, M$ or some cracker?" The first hint should just be the fact that they are even up to DRM10 in the first place! Why don't they see what they are doing is pointless? Oh well, M$ does a lot of dumb things, this is just one more to add to a growing list.

hartiberlin
10th February 2005, 20:11
Originally posted by hartiberlin
Can somebody please post a link,
where one can download these 2 programs:

drmdbg.exe and drm2wmv.exe

I have not found them yet.
I want to try them out on some test files.
Thanks !

Regards, Harti.


So nobody has these 2 programs yet ???

Where are they ?

Sharktooth
10th February 2005, 21:11
hartiberlin you wont find those programs here because it is illegal software.
You better search elsewhere.

stephanV
10th February 2005, 21:26
also coz it seems to be a hoax :rolleyes:

Neo Neko
10th February 2005, 23:24
Originally posted by Sharktooth
hartiberlin you wont find those programs here because it is illegal software.
You better search elsewhere.

Not really. No more illegal than most DVD decrypters etc. For this you have to have the key or license etc for it to work. From the information so far there is no way to brute force it yet. I think the issue is that it is a Japanese site and there are not many Japanese here to read it or search other Japanese sites for it.

Originally posted by stephanV
also coz it seems to be a hoax :rolleyes:

Always possible. But I would not go that far yet. Apparently there has been talk ok MS Usenet groups about site operators finding their content being distributed unencrypted after they used DRM 10.

lark
30th March 2005, 15:15
Originally posted by vsv
...

And ...at 17:00(GMT+9:00) anonymous cracker named 'lark' upload source code of 'DRM crack software'
Software name is "DrmDbg.exe" and "DRM2WMV".

...

sorry guys, it wasn't me ;-)
t :)

Yusaku
30th March 2005, 22:07
Originally posted by Neo Neko
Not really. No more illegal than most DVD decrypters etc. For this you have to have the key or license etc for it to work. From the information so far there is no way to brute force it yet.

Well, let's see. Even though I think you are right, there seem to be certain companies that law doesn't fully apply to, microsoft included.

Anyway, attached to this post is a little something I got off of winny. Should an operator approve it, enjoy ;)

Note: I will not reply to any PM concerning these applications - neither asking me to send them, nor usage instructions.

communist
31st March 2005, 17:02
Since no mod has approved the attachment and I doubt this is going to happen I have only one simple question:
Have you tried the tools and can you confirm that they really remove the DRM from locked files?

Yusaku
2nd April 2005, 06:09
yes, I've successfully decrypted few trailers from http://www.microsoft.com/windows/windowsmedia/content_provider/film/ContentShowcase.aspx - it is not a hoax. It is just b**ch to set up.

buzzqw
2nd April 2005, 08:19
an english help on how to use ?

BHH

Wilbert
2nd April 2005, 14:33
This is a machine translation. Perhaps there are japanese people here who can provide a better translation?

--------------------

drm2wmv.txt

drm2wmv
It only converts it from ..peel.. data based on the DRM information removal etc. , KID, and SID to reproduce normally.
The DRM licensing twining done on WMP doesn't do anything at all (Decode is excluded).

Up to 2005/02/15 inside in the time limit type
Please teach if there are uncorrespondence and a bug.

drm1\*.key drm2\*.key
(It is execution ahead when the execution file was done. Each all folder is seen though did. )
However.
*/sees only DRM2WMV2 > < < drm2\ = DRM2WMV1 ../.. > < DRM2WMV2>. drm1\ = each < DRM2WMV1>
*Drm2\ is previously seen.

It comes in succession and < KID>abcdefg== < KID > cannot be converted.
(DRM1 doesn't have this in DRM2 in there is only MS sample. )
*KID DRM1=ASCII,KID DRM2=unicode

*Enco ..again.. is legally an out so as not to circulate. data that has released DRM
*I do not think that there is what cracks legally even if circulating though it is one a respondent book with DRM. (If it is the same as the origin. )

drmdbg.txt

------------------------------------------------------------------------------
Drmdbg is a debugger for wmp.
It is for NT, 2000, and XP in the kernel because it cannot wear the memory patch. 9x system cannot use it.
(NT unconfirmed)
-------------------------------------------------------------------------------
[wmp]
Place with exe=WMP(There is wmplayer.exe, too. )
The cash folder of Omoto of ieCache=IE ahead(End \ is not put. )
It disregards it when not is.
It 1 no 0=(When ending, stop)= stops with stop = breakpoint.
Drmclien = breakpoint 1 no 0== is done.
blackbox=
indivbox=
drmv2clt=
wmvcore=

[*.dll] It is possible to correspond to a lot of DLL by changing the content. (DLL for the break is : only by being in ini. )
Crcxx is crc32 of 0-0x400. (Display it. )
Adrxx is an address pulled from the base.
Regxx is a register. (push xx)
Addxx is a numerical value added to the address of the regxx register. (0-place combination is not needed. )
(It is DLL of wmp9 confirmed by 2000 to put as of now. )

*Numerical values are all hexadecimals.
*It is necessary to examine that it is not in crcxx for myself.
*Same Ver picks up with Windows Updata and is different putting. DLL
It differs when other encoder etc. are put.
*Crcxx is written and ok if keeping suitable. (Regxx shall not be corresponding. )
-------------------------------------------------------------------------------
Example of display
-----drm1-----
drmdbg Ver 0.31 by ...
CreateProcess: C:\Program Files\Windows Media Player\wmplayer.exe
010010C0 program entry point
IsDebuggerPresent: memwriteret=1 callret=0
mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv
crc: AC782817 c:\winnt\system32\drmclien.dll
setbp 091B527C 50
crc: 2850B98C c:\winnt\system32\drmv2clt.dll
setbp 09252BCC 50
crc: 0A3A07B3 c:\documents and settings\all users\drm\indivbox.key
setbp 02E17C56 56
eax 01B268A5

<DRM2WMV1>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[mms://wms4.navi.flets/gsd-area1/sd_12_w_1000.wmv]
</DRM2WMV1>

CloseProces
Enter key run
-----drm1-----
-----drm2-----
drmdbg Ver 0.31 by ...
CreateProcess: C:\Program Files\Windows Media Player\wmplayer.exe
010010C0 program entry point
IsDebuggerPresent: memwriteret=1 callret=0
mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv
crc: 2850B98C c:\winnt\system32\drmv2clt.dll
setbp 09252BCC 50
crc: AC782817 c:\winnt\system32\drmclien.dll
setbp 091B527C 50
crc: 0A3A07B3 c:\documents and settings\all users\drm\indivbox.key
setbp 02EF7C56 56
esi 01B75F10
C:\Documents and Settings\*\Local Settings\Temporary Internet Files\Content.IE5\CLIRSPAB\puchi_albu51_1[1].dat

<DRM2WMV2>
<KID>abcdefg==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[mms://stream3.highq.flets/hellopro/pv/p022/puchi_albu51_1.wmv]
</DRM2WMV2>

CloseProces
Enter key run
-----drm2-----

*IsDebuggerPresent cannot be normally reproduced if not becoming memwriteret=1 callret=0.
*It stops in the place of Enter key run at one o'clock.
*The following do not stop if the breakpoint stops once.
(Stop if DLL unloads and the reload. )
*Please pick up from wmv or pick up KID from drm2wmv.
-------------------------------------------------------------------------------
About the ID/PAS confirmation

Please let me approve usually first of all about DRM with the ID/PAS confirmation.
It is ok if it doesn't reproduce after it approves and it reproduces with drmdbg.
..html start standard.. is not tried. Cannot you do for IE?
*It is original window according to indivbox.key.
-------------------------------------------------------------------------------
About blackbox.dll

As for blackbox, the part is encrypted. It decodes before the correspondence is executed.
When DLL is loaded, the break cannot be set.
Because the break is set after it is examined that the breakpoint changes
It is ok if it does several times though there is Miss.
-------------------------------------------------------------------------------
About indivbox.key

C:\Documents and Settings\All Users\DRM\(standard)
It returns to blackbox.dll if the file in the inside is erased.
*Indivbox.key thinks that it changes into a thing different every time it picks it up.
-------------------------------------------------------------------------------
About drmclien.dll

The conversion processing is done with Decrypt at drm1 and search out the place where push is done here, please.
Add xxx and 6d push xxx of win2000+wmp9 are around. Rc4key is processed with call after this.
-------------------------------------------------------------------------------
About drmv2clt.dll

Because drmv2clt is a rapper of blackbox.dll and indivbox.key
Please search out the place where blackbox.dll and indivbox.key are done in call looking for C00D2723.

-------------------------------------------------------------------------------
About Win XP

When canceling if the breakpoint is done to indivbox.key
Drmv2clt.dll is tried.
-------------------------------------------------------------------------------
About the cash of IE

To the cash folder of IE when in real time seeing
It searches out and kid is found because it preserves it temporarily (Remain according to the license).
*Because DRM1 will not be cached maybe, kid cannot be acquired.
*The local file doesn't display the place today.
-------------------------------------------------------------------------------

key2find.txt

There is KID from the key file or key2find is searched out.

key2find kid

drm1\*.key drm2\*.key
(It is execution ahead when the execution file was done. Each all folder is seen though did. )
However.
*/sees only DRM2WMV2 > < < drm2\ = DRM2WMV1 ../.. > < DRM2WMV2>. drm1\ = each < DRM2WMV1>
*DRM2\ is previously seen.

Wilbert
2nd April 2005, 14:51
I downloaded one of those trailors with drm, but I can't get it to work though.

drm2wmv -v Alexander_Trailer_1080p.wmv

doesn't do anything.

Yusaku
2nd April 2005, 15:03
hints:

* drmdbg should (if properly configured) show you SID. Turn on all necessary breakpoints (drmclien, wmvcore etc.) and look for DLL versions supported by it (CRC shown in drmdbg must be same as one from ini file)
* then fill in KID (look at the DRM file with hexeditor, it is stored as a unicode text in header) into the template
* Save completed template to drm2 directory (whatever.key)
* change computer date to 12/Feb/2005
* md c:\windows\#dummy (might not be always necessary)
* drm2wmv crypted.wmv

buzzqw
2nd April 2005, 15:53
ok !
now i need somthing more simple to use :confused:

a GUI ?

BHH

Wilbert
2nd April 2005, 22:13
I can't get it to work. I use

- W2K SP4
- DirectX 9c
- WMP6.4
- the 720p and 1080p clips without drm play fine with WMP6.4 (except sound)
- firewall disabled

I changed the link to mplayer2.exe in drmdbg.ini. If i open drmdbg.exe, WMP6.4 opens. If I open the clip after that, I see the following


drmdbg Ver 0.31 by ...
CreateProcess: C:\Program Files\Windows Media Player\mplayer2.exe
01001064 "bunch of letters with hats on it"
IsDebuggerPresent: memwriteret=1 callret=0


the clip plays, but remains totally black.

Yusaku
2nd April 2005, 22:26
you have to use WMP9/10 for DRM playback. Plus, it doesn't hurt to first check that DRM playback works at all, before trying to hack into it. Follow the above only after you can actually see the trailers; and only if they are really DRMed (File>Properties>Licences is not empty)

Edit: non-DRMed can, of course, be played back in almost anything, including WMP6.4

acidsex
3rd April 2005, 03:13
Any chance someone can throw together a GUI that allows you to select the input file and where to output the un-drm file so that all the command line stuff is transparent and doesnt require dumb asses like me who cant figure it out to keep struggling with it.

JoeShrubbery
3rd April 2005, 20:29
Or at least a more clear example of how to set it up properly. I just can't make heads or tails of that babelfished translation. I've been wanting to convert my Terminator 2: Extreme Edition HD WMVs into something that doesn't need to phone home for a new licence after only a few days.

Yusaku
3rd April 2005, 21:01
Just follow my hints. First you need to somehow get KID and SID (especially the later) using drmdbg. For that you need to make sure your DLLs are recognized by it; and turn it on in ini (set all five options to one should do it). Basically, you need to ensure that output from drmdbg looks similar to the example in drmdbg.txt

Just try it and report where are you stuck. (no, I'm not writing a guide)

SeeMoreDigital
3rd April 2005, 21:10
Originally posted by JoeShrubbery
I've been wanting to convert my Terminator 2: Extreme Edition HD WMVs into something that doesn't need to phone home for a new licence after only a few days. Me too!

communist
3rd April 2005, 23:15
Thanks mods and Yusaku - apparantly I got it to work :D

Here is what I did :
Open drmdbg.ini set all of the following settings from 0 to 1 and save the file.
[wmp]
exe="C:\Program Files\Windows Media Player\wmplayer.exe"
;ieCacheに最後\付けない
ieCache=
;stop=0でEnter key runで停止しない
stop=0
;BP 0=しない 1=する
wmvcore=1;ieCacheからkid拾うのに使用
drmv2clt=1;blackbox&indivboxの予備用
drmclien=1;DRM1で使用
blackbox=1;DRM2で使用
indivbox=1;DRM2で使用

Then run drmdb from cmd prompt, press ENTER to let it start WMP, then open your drm-ed file. Wait till it has opened and plays correctly. You should see crc values being reported in the cmd prompt for the dll files. Close WMP.
Open drmdbg.ini and fill in your crc values for each of those dlls, there should be something like ;9.0.0.3250
crc02=0xA34B52DD
adr02=0x156CB
reg02=0x50
whereas the first line is your WMP version (Help -> About). In the 2nd line replace the crc value if it doenst match with yours (0x stays). I only got crc values for blackbox.dll / drmv2clt.dll and drmclien.dll but it worked for me. Whereas blackbox and drmclien were version 3250 for me and I put them there, for drmv2clt there was no 3250 but xpsp2 (which I'm running) so I filled it there.
Save the ini and run drmdbg again, WMP again, open your WMV again and this time it should report something like this:
<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>
Copy it to a text file.
Open your WMV with a hex editor (like the one in VirtualDub) and look for the KID. Once you've found it copy it to your text file between <KID> and </KID> :p
Save the txt file with .key (something.key) extension and put it into the drm2 directory.
Now set your date to 12Feb/2005 and do md c:\windows\#dummy (Dont know if these steps are important but I did them anyway).
Run DRM2WMV -v yourprotectedfile.wmv , the unprotected file should be saved into the same directory (make sure you have enough hdd space).

Thanks again to Yusaku.

Yusaku
4th April 2005, 01:53
Exactly ;)

Note that changing CRC is not guaranteed to work, in that case find other DLLs (but same WMP version) on google.

DeeGee
4th April 2005, 18:25
I just downloaded Batman Begins drm'd trailer before I read this thread and watched it. I didn't think it was anything important when WMP said that it needs to download some update to play the file.
Now when I try to run WMP with drmdbg.exe it complains this "Running this process under a debugger while using DRM content is not allowed." WMP version is 10.00.00.3802.
So can we understand that when there are bugs in MS products they are "features", but when somebody does something like this MS is repairing it asap? Or is there some other explanation?

SeeMoreDigital
4th April 2005, 18:36
It would still be nice to have a GUI.... anybody!

haubrija
4th April 2005, 20:25
DeeGee,

I think MS created an "Update" for WMP to thwart the use of these tools. See this link.

http://msmvps.com/chrisl/archive/0001/01/01/36006.aspx

I think if WMP downloaded this update, you can no longer use this tool.

acidsex
5th April 2005, 02:20
Thats the thing so far with M$' DRM is even if its cracked, its not cracked very long as they can make the changes on the server side. Seeing how long this took for a crack to happen just bolsters MS' claims that its the most secure thus far.

Im curious to see what Nero is coming up WRT drm. I noticed in the properties it has a line for drm. I heard rumors that they may be using 448bit blowfish and if so, I dont think that it is crackable for the next 1M years.

communist
5th April 2005, 06:54
As with all 'highly' secure environments the crackers dont really crack the encryption scheme as such but rather access the content at the most weakest link, like in this and other cases you already need a license file. It lets the standard components do the decoding / decrypting and then hacks into the system.

A 'real' crack however would do the same even if you didn have a license / key in the first place. It would really be able to crack the encryption - which as of late are way too strong to crack in a timely manner, hence why noone tries to break in via this route.

Hiro2k
5th April 2005, 08:44
Just like how Apple's DRM was "hacked" or beter phrased "bypassed". The music is encrypted with the user's key, so obviously to decode it they have to have the key. So the program used the key to decode the file and then parse the raw streams into a new container.

The latest program bypassed the encryption altogether. Because when you download the music from Apple, it doesn't come encrypted. iTunes uses your key to encrypt the file when you download it, so the obvious way to circumvent it is not to use iTunes. So what this program did was connect to the iTunes server and purchase the music (not stealing) but it would not encrypt the music. The interesting thing about this method is that it doesn't tamper with the DRM or try to remove it. The files are simply downloaded in thier original format. This caused some nice debates about whether or not it breaks the DMCA.

Like communist said, no one is trying to break the encryption, it's easier to exploit a bug in the software that implements the encryption. That job is best left to math majors, which have not been able to break any of the most commonly used encryption algorithms used today. There have been a few newer vulnerabilities discovered that might lead to the actual breaking of an algorithm, like MD5 and SHA1. Brute forcing an algorithm takes a long time even using a huge cluster of computers, and we need to make some huge advancements in computing in order to break these algorithms (quantum computers).

switzch
6th April 2005, 17:11
I am having some problems with this, here is what I have done.

1)Opened my file which pulled the licence from the web
2)Changed the drmdbg.ini to have the 1's instead of 0's. Looks like this:


exe="C:\Program Files\Windows Media Player\wmplayer.exe"
;ieCache\t
ieCache=
;stop=0Enter key run~
stop=0
;BP 0= 1=
wmvcore=1;ieCachekidEgp
drmv2clt=1;blackbox&indivbox\p
drmclien=1;DRM1gp
blackbox=1;DRM2gp
indivbox=1;DRM2gp

3)Ran DRMDBG and got CRC's for the following files:
- indivbox.key (?) - 4b19a0e8
- drmclien.dll (9.0.0.3250) - a34b52dd
- drmv2clt.dll (9.0.0.3250) - 84e59e12

4)Updated the drmdbg.ini with the above crc's so they look like this.. Note: I changed all version's CRC's for each file.

[drmclien.dll]
;9.0.0.2980
crc00=0xA34B52DD
adr00=0x1527C
reg00=0x50
;9.0.0.2980
crc01=0xA34B52DD
adr01=0x1527C
reg01=0x50
;9.0.0.3250
crc02=0xA34B52DD
adr02=0x156CB
reg02=0x50

[indivbox.key]
;10.0.0.3646
crc00=0x4BA9A0E8
adr00=0x17BE6
reg00=0x56
;10.0.0.3646
crc01=0x4BA9A0E8
adr01=0x17C56
reg01=0x56

[blackbox.dll]
;9.0.0.2980
crc00=0xC40620AA
adr00=0xAFB9
reg00=0x51
add00=4
;9.0.0.2980
crc01=0x5824BFB2
adr01=0x832C
reg01=0x51
add01=4
;9.0.0.3250
crc02=0x3EA3C4F6
adr02=0x19647
reg02=0x50
add02=4

[drmv2clt.dll]
;9.00.00.3257
crc00=0x84E59E12
adr00=0x2367E
reg00=0x50
add00=0x4a8; (blackbox)
;9.00.00.2980
crc01=0x84E59E12
adr01=0x22BCC
reg01=0x50
add01=0x2314; (indivbox)
;xpsp2
crc00=0x84E59E12
adr00=0x1442D
reg00=0x50
add00=0x14c; (indivbox)

5) Ran DRMDBG again and got this:

<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

6) Used Hex Editor (in VOB SUB) to get "abcdefg*==" which i put into the test.key file to look like this:
<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

7)Put the test.key in this folder: C:\drm2wmv\drm2wmv1241\drm2

8)Changed date to Feb12th/2005 and created C;\windows\#dummy

9)Ran "DRM2MV -v test.wmv"

Thought it was going to work, then I got this error.. which i have no clue what it means.

C:\drm2wmv\drm2wmv1241>drm2wmv -v test.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku
DRMv2 header object
DRMv2 KID (abcdefg*==)
=L[=T_+
keyfile+KIDF_

G[F_+ <ENTER>+IfF_+


C:\drm2wmv\drm2wmv1241>

Wrath0fb0b
7th April 2005, 13:16
OK . . here are a few things that I've figured out.

#1. You need a fresh install of windows XP with WMP9 becaue drmdbg does NOT work with any of the 10.x version.

(read: if your \windows\system32\drmclin.dll has version 10.x then it is not compatible with drmbg v0.31 and probably can't be reversed)

#2. If you try to run a protected movie on WMP9 you get a page telling you to download new DRM stuff which gets the new DLLs.

see: http://www.microsoft.com/windows/windowsmedia/drm/freeme.aspx

#3. You can avoid the behavior in #2 if you can edit these:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmrm10/htm/iwmrmheaderobject.asp

specifically, you need to edit

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmrm10/htm/headerindividualizedversion.asp

And that's where I'm screwed. I have my laptop with the virgin DLLs but it won't get a license because they have it set to require the latest DLLs.

If anyone knows how to edit these WMRMHeader objects I would love to hear from them . . .

I tried ultraedit but that obviously didn't work. Any other thoughts?

Sigmatador
9th April 2005, 13:04
@Yusaku

can you find the source code as well ?

cirerita
11th April 2005, 01:30
I think there's a far easier way to obtain your unprotected WMV file: I spent 2 hours trying to follow the steps indicated above, to no avail. I finally dragged and dropped the DRM protected file into the drm2wmv.exe file, and it seems to work! After dragging & dropping the DRM file, a DOS window pops up and the unprotected wmv file begins to be copied... Then you go to the "properties" tab of the unprotected WMV file and the license tab is gone for good! Then you can open up the WMV in Zoomplayer and play around with the filters, etc...

cynix
11th April 2005, 12:12
Originally posted by Sigmatador
@Yusaku

can you find the source code as well ?
I don't think lark has ever released source code of any of his programs/patches/etc. Let's hope he changes his mind this time, though :)

KornX
11th April 2005, 19:53
is there a gui out somewhere
i am asking because in some countries it's not illegal to kill copy protection...

KornX

Doom9
11th April 2005, 20:46
is there a gui out somewhereNo there isn't.. are you volunteering to write one? ;)

KornX
11th April 2005, 21:16
i guess not
html isn't the right code - but the only i know :rolleyes:

KornX

switzch
12th April 2005, 16:19
is there a gui out somewhere

A gui would be nice, but i think a bigger problem is in order for WMP to get a licence for say T2:EE it forces WMP to update itself which prevents any of this de-drm stuff from working. If anyone knows how to get around this, please post the answer. When I get some time I am going to try to get a licence, update WMP, then backup the licence and perform a windows rollback. Not sure if this will work - it was suggested over at AVS but i dont think anyone has tried.

Sigmatador
12th April 2005, 18:10
Originally posted by cynix
I don't think lark has ever released source code of any of his programs/patches/etc. Let's hope he changes his mind this time, though :)

i ask for this because the first post says:

And ...at 17:00(GMT+9:00) anonymous cracker named 'lark' upload source code of 'DRM crack software'
Software name is "DrmDbg.exe" and "DRM2WMV".


(but i can reverse the code, just a matter of time)

edit: do you know if lark has a website or something ?

Black_Madness
13th April 2005, 18:33
:D
Hi everybody :

I had many problems with the WMV 9 protected,but with this post i can remove the licence, thank you very much by your messages. i create a little front end with visual basic 6, this tool is very simple,it's a beta version be careful with your data.

copy file at

...\Drm2wmv1241 <dir>
...\Drmdbg031 <dir>
...\Drmdbg_front.exe


Itエs my little contribution.

Thanks again.

>>>>>>>>>>>>>>>>>>>>>Black Madness

acidsex
13th April 2005, 20:53
??? Did you post a link that hasnt been approved yet or something because I do not see any link to your program.

Black_Madness
13th April 2005, 22:18
Second change . . .:D

I can't add attachment .

http://galeon.com/blackmadness/Drmdbg_front.zip

philarete
13th April 2005, 22:48
Is it a kind of joke ?
Your link doesn't go anywhere...

I tried the manual method and as other people running "drm2wmv -v file.wmv" doesn't do anything.:confused:

SeeMoreDigital
13th April 2005, 23:31
His link works for me :)

Here's what the GUI looks like: -

http://img157.echo.cx/img157/6514/drmdbg3mr.gif


Cheers

rhayman
14th April 2005, 00:18
you have to right click and save target as, It did not work for me either when i clicked on the link normally.

I cant get this tool to work anyway, when i try to play a clip i get the following box:

http://img.photobucket.com/albums/v154/rhayman/DRM.jpg

If i click on ok and then obtain the licence, when i run drmdbg i dont get a crc for blackbox.dll. After the update all the dll's that are supposed to show in drmdbg are the same version as before the update (3250 wmp9) so i dont know whats going wrong :(

If i enter all the correct crc values and leave the black box crc and run drmdbg again i get the SID but its obviously wrong as its only made up of the letter A.

e.g. <SID>AAAAAAAAAAAAAAAAAAAAAAAA=</SID>

philarete
14th April 2005, 09:47
My apologies, I didn't try the right click (shame on me :o ).
Nevertheless I can't open the zip file... :confused:

EDIT : getright tells me the link is broken and that it is only a web page (galeon).

philarete
14th April 2005, 10:21
Here are the steps I have followed :

drmdbg Ver 0.31 by taku
CreateProcess: C:\Program Files\Windows Media Player\wmplayer.exe
010010C0 穽粮祕粱簓 礙糜稟粨[ 窩磴糜稟
IsDebuggerPresent: memwriteret=1 callret=0
crc: 2850B98C c:\windows\system32\drmv2clt.dll
setbp 065C2BCC 50
crc: AC782817 c:\windows\system32\drmclien.dll
setbp 0666527C 50
crc: 5824BFB2 c:\windows\system32\blackbox.dll
eax 01445290

<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

setbp 071F832C 51
ecx 01443424

<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

CloseProces
Enter key run
After modifying the crc values in drmdbg.ini I only see the second SID information appearing (anyway I have tried both of them without success).

Editing the wmv file with UltraEdit32 leads me to the KID information :
....DRM.....abcdefg==.O...http://www.microsoft.com/isapi/redir.dll?prd=wmdrm&pver=2&os=win&sbp=newclient.6&
Then I created a *.key file with the SID and KID information and put it in the drm2 folder. Created a dummy folder, then changed date to 12 february 2005. And finally I got :
drm2wmv -v essai.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku


And nothing happens !!:mad:
Trying with an old version of drm2wmv give me some strange message :
drm2wmv -v essai.wmv
Found DRMv2 header object.
Found KID (abcdefg*==)
Found DRMv1 header object.
Starting to look for license.
keyfile in no KID found

Press <ENTER> to acknowledge error.


I'm trying this on a free short movie that I can't show to anyone because of this f****** DRM (only I have the license for one month).

cirerita
14th April 2005, 10:48
use the drag&drop tip clue I posted; it will show you both the KID and the SID; copy the info into the .key file, drag&drop the protected file again and then you're done!

philarete
14th April 2005, 11:08
Doing a drag & drop with the file on drm2wmv.exe does exactly the same thing than when running directly a CMD prompt : nothing... :(

EDIT : trying another version of drm2wmv (16/03/2005) gives me this :
drm2wmv -v essai.wmv
Found DRMv2 header object.
Found KID (abcdefg*==)
Found DRMv1 header object.
Found KID (abcdefg*==)
Starting to look for license.
keyfile in no KID found

Press <ENTER> to acknowledge error.


Why am I having two KID and SID informations ??

Sirber
14th April 2005, 13:53
You seems to have 2 DRM header.

Barty
14th April 2005, 13:55
rhayman, I've got the same problem...

didn't get a crc for blackbox.dll either, and my SID is <SID>AAAAAAAAAAAAAAAAAAAAAAAA=</SID> too.. and the resulting WMV is f*cked up (BUT free of drm ;)) probably cause of this wrong SID.

rhayman
14th April 2005, 16:19
Originally posted by Barty
rhayman, I've got the same problem...

didn't get a crc for blackbox.dll either, and my SID is <SID>AAAAAAAAAAAAAAAAAAAAAAAA=</SID> too.. and the resulting WMV is f*cked up (BUT free of drm ;)) probably cause of this wrong SID.

I never got that far, i cant figure out how to get the KID, ise a hex editor and theres about 20 kid names in there and in between is a load of garbage :(

I have never used a hex editor before

Barty
14th April 2005, 17:27
Originally posted by rhayman
I never got that far, i cant figure out how to get the KID, ise a hex editor and theres about 20 kid names in there and in between is a load of garbage :(

I have never used a hex editor before

you could download that program..
http://cryptome.org/FreeMe.zip
it's another tool which attempts to remove DRM from WMV, but dont let that interfere you in any way with drmdbg or drm2wmv.
But i believe (if i remember correctly) that using freeme with the wmv in the command line shows the KID for you.

But a hex editor would work also, i believe it's stored between the two strings <KID> and </KID> inside the wmv.

Wilbert
14th April 2005, 18:06
FreeMe works for drm1. What we are talking about in this thread works for drm1 and drm2 (latter is a new protection).

philarete
14th April 2005, 18:35
Nope, you can see only the KID in a DRM V2 by searching "==" as a string.
Normally the first one you'll see will begin by Qt..., it is the right one.
Wasn't freeme only for wma files ?

EDIT : oops

QQ
14th April 2005, 19:38
i get the same problem - i got KID, got SID, created the .key file in DRM2 directory:


<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>


but when I run drm2wmv nothing happens! no message, no error, nothing! :( I tried running filemon, and it shows that it doesnt even search for any files! :(

Digga
14th April 2005, 21:05
could sb kindly upload (attach) the frontend?
trying to download it from the url always results in a corrupt file for me...

QQ
14th April 2005, 22:09
that front end is uselless, and does more harm than good - dont use it

Black_Madness
15th April 2005, 03:10
Hi :
I upload the new beta "GUI" version, right click and save target as .

See Ya

http://galeon.com/blackmadness/Drmdbg_front2.zip




>>>>>>>>>>>>>>>>>>>>Black Madness

Digga
15th April 2005, 04:28
Originally posted by Black_Madness
I upload the new beta "GUI" version:rolleyes: ...and what might be the changes besides a new English interface?!


@QQ: why do you consider the frontend so bad?

QQ
15th April 2005, 06:25
because it doesn't seem to do anything usefull. it writes your entered crcs to all the configurations, messes up writing exe, doesnt find out KID either, and only lets you create *.key if you got all the info.. rest you still have got to do yourself :(

cirerita
15th April 2005, 11:14
Here are the steps I've used. I've been able to remove the DRM license in the two DRM protected files I've tried so far. Good luck.

0) set date back to feb 5 and modify drmdbg.ini (WMPlayer path, enable wmcore, drmv2clt, etc)

1) drag&drop protected file into drmdbg.exe, WMPlayer will pop up, open protected file using WMPlayer and check whether the CRC data is right or not; if it isn't, just copy the CRC data (blackbox, drmclien, etc) from the MS-DOS window into drmdbg.ini (you'll have to do this only once since the CRC will work with different protected files); you'll have to paste the right CRC data right after your WMPlayer version (check "about" in WMPlayer).

2) drag&drop DRM file into drmdbg.exe again, copy SID data into a txt file using a .key extension.

This is mine (your SID will be different):

<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

3) drag&drop DRM file into drm2wmv.exe

4) copy KID data into the .key file

This is mine (your KID and SID will be different):

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>


5) save .key file into "drm2" folder

6) drag&drop DRM file into drm2wmv.exe again

7) an unprotected file will be copied in the same folder

Barty
15th April 2005, 14:49
anybody know why some of us don't get a CRC for blackbox.dll, resulting in a wrong SID, resulting in a wrong WMV in the end..?

tjf
15th April 2005, 17:10
cirerita:

Your procedure works for me, but only for DRM protected files that do not require individualization - they just need blackbox.dll. However for example T2 WMV HD requires that the computer is before playback individualized. Some files are downloaded, indivbox.key file is created and from that moment I am not able to decrypt anything. The DRM then does not use blackbox.dll anymore.

Tomas

SeeMoreDigital
15th April 2005, 17:23
I'm still, totally unable to play my T2 WMV disc.... bummer :angry:

philarete
15th April 2005, 18:25
I am really wondering if I have the same drm2wmv version...
Because doing a drag and drop on the exe doesn't do anything with my drm file.:mad:
Mine is dated 4 february 2005, 29.5 kB

And WMP isn't accessing the web to download any key file.

QQ
15th April 2005, 19:57
Originally posted by Barty
anybody know why some of us don't get a CRC for blackbox.dll, resulting in a wrong SID, resulting in a wrong WMV in the end..?

only one of dlls needs to be debugged - it can be blackbox.dll, drmclien.dll or drm2clt.dll. Doesn't matter which one. The fact that you dont get crc for blackbox.dll means that your file already matches predefined one, and thus you dont need to change anything. If you get SID then it's correct sid. If it can't break on any of dlls it wont output anything.

Your procedure works for me, but only for DRM protected files that do not require individualization - they just need blackbox.dll. However for example T2 WMV HD requires that the computer is before playback individualized. Some files are downloaded, indivbox.key file is created and from that moment I am not able to decrypt anything. The DRM then does not use blackbox.dll anymore.

After individualisation, DRM dll's get updated with patched versions, which no longer can be used. You can check their version. You have to put back some recognisable versions, and it should work then.

tjf
15th April 2005, 22:01
Originally posted by QQ
After individualisation, DRM dll's get updated with patched versions, which no longer can be used. You can check their version. You have to put back some recognisable versions, and it should work then.

I compared all three dll files (blackbox, drmclien and drmv2clt) before and after the individualization and they are identical.

Tomas

QQ
15th April 2005, 22:09
how and in which directory did you compare them?

cirerita
16th April 2005, 01:26
I can't say whether dragging & dropping works for T2 because I don't have the disc; however, I can say that the drag&drop method works perfectly with the On-Disk DRM WMV-HD.

tjf
16th April 2005, 07:48
Originally posted by QQ
how and in which directory did you compare them?

I copied the 3 files from c:\windows\system32 directory to another one, individualized the WMP, did the same again and compared them with Compare It! They were all bit identical.

Tomas

QQ
16th April 2005, 10:13
hm, how do "individualize" it then?

Yusaku
16th April 2005, 11:32
it creates a new file in "documents & settings\all users\drm" called indivbox.key - this file is in fact a DLL with randomly shuffled blocks and your keys.

rhayman
18th April 2005, 02:57
If i do individualise (thats a hard work to spell, and i'm guessing i got it wrong :) ) then i never get a blackbox.dll show up, im guessing this is because you have to individualise before you can use DRM, microsoft have probably already updated this so the tool wont work. (sorry if that makes no sense)

So just out of interest everyone who can get this tool to work, did you by any chance individulise wmp before this tool came out?

I also tried changing the date to febuary before doing the individualise and the date kept changing back to the correct date after about 3 seconds. I even changed the date in the bios and it still would not work.

QQ
18th April 2005, 10:36
yes, i have individualised my wmp numerous times (asks to do it if you delete DRM folder)

fallblau11
18th April 2005, 22:45
SIMPLE sample problem (HAS ANYONE SOLVED THIS:
1)
Has anyone got drm stripped free version of
http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip

TO PLAY?

2)I used wmp9 .3250
for file I got
got SID and KID

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2> (I made test.key)

USED drm2wmv.exe on file and IT DEcrypted the file and got a new file.
New file is almost same size but Scrambled when I tried to play it.
SCRAMBLED GREEN SCREEN and squeaky sounds noises.
Did Program work, are you still suppose to get a non-watchable movie,
do I need special filters??

vikt
18th April 2005, 23:03
I tried the tool and i have pretty much given up.
Using a fresh windows xp installation and wmp 9 ver 3250 i got a sid with just AAAAA recurring. I knew this was wrong but went on to decrpyt the file but just as the guy said before wmv is garbled.

All the wmvs i have require indivizualisation and i think a soon as you do this it downloads IndivBox.key. I think ms have updated this file rendering the tool useless. The SIDs that the tools spits out are now invalid and useless. Most DRMs need an indivizualised DRM setup so ms have affectlively closed this hole up. I'm sure the tool worked when it was released though.

Anyone able to decrypt a drm wmv that has asked for DRM components to updated and therefore doesn't use blackbox.dll??

fallblau11
18th April 2005, 23:10
Difference for me is I got

unique legit looking SID

not AAAAA=

but still scramnled content

QQ
19th April 2005, 06:13
Originally posted by vikt
I tried the tool and i have pretty much given up.
Using a fresh windows xp installation and wmp 9 ver 3250 i got a sid with just AAAAA recurring. I knew this was wrong but went on to decrpyt the file but just as the guy said before wmv is garbled.

All the wmvs i have require indivizualisation and i think a soon as you do this it downloads IndivBox.key. I think ms have updated this file rendering the tool useless. The SIDs that the tools spits out are now invalid and useless. Most DRMs need an indivizualised DRM setup so ms have affectlively closed this hole up. I'm sure the tool worked when it was released though.

Anyone able to decrypt a drm wmv that has asked for DRM components to updated and therefore doesn't use blackbox.dll??

Yes. Though I do believe it still uses blackbox.dll

Plub
19th April 2005, 19:07
hmm i filled in the crc values but the programm doesn't show the SID. Only again the crc once per dll, blackbox doesn't show up.
Isn't there anyother programm to get the SID? Or an update?

hartiberlin
20th April 2005, 10:15
Originally posted by fallblau11
SIMPLE sample problem (HAS ANYONE SOLVED THIS:
1)
Has anyone got drm stripped free version of
http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip

TO PLAY?

2)I used wmp9 .3250
for file I got
got SID and KID

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2> (I made test.key)

USED drm2wmv.exe on file and IT DEcrypted the file and got a new file.
New file is almost same size but Scrambled when I tried to play it.
SCRAMBLED GREEN SCREEN and squeaky sounds noises.
Did Program work, are you still suppose to get a non-watchable movie,
do I need special filters??

Hmm, I got a different SID:

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

But my drm2wmv.exe, which is:
29,5 KB (30.208 Bytes) big,
does not do anything, if I try to drag and drop
the wmv file onto it.
So is my drm2wmv.exe file buggy, or what ?
Or is the SID still wrong ?

Regards, Stefan.

hartiberlin
20th April 2005, 10:39
P.S: I got 2 different drm2wmv.exe files !
The other one I got from here:

http://rapidshare.de/files/1146940/mmdt.rar.html

password: 4gulli
is:
126 KB (129.887 Bytes) big !

In this Rar archive both programms are the same,
so drmdbrg.exe is really missing there !

But also with this I can not extract any file from
the upper Warnerbrothers DRMed testsample movie.

Regards, Stefan.

vikt
20th April 2005, 12:11
those files are just fakes.
They are just the old freeme tool renamed.

Plub
20th April 2005, 16:41
can somebody who successfully cracked wmv files upload his blackbox.dll, drmclien.dll and drmv2clt.dll please?

QQ
20th April 2005, 17:22
filling CRC is NOT enough. It helps only in cases where DLL version is same, but CRC different (eg opcode addresses in memspace are same!) then you fill the new crc, and it successfully sets breakpoint on needed address. if your version is wrong, not matching one of predefined addresses, then even if you fill the CRC it wont work! (but then it shouldnt give any SID anyway)

tjf
20th April 2005, 17:47
I still do not understand how this tool can work after individualization. The indivbox.key file that is used instead of blackbox.dll is different on every computer, or even on the same one if I delete it and individualize again. So it is obvious the CRC in ini file will never match. When I change the CRC in ini file to match the indivbox.key it does not find the SID.

Tomas

Plub
20th April 2005, 19:10
so, where can i find a drmv2clt.dll version, which can set the right breakpoint? My one (9.0.0.2980) isn't very useful, i doens't set the breakpoint, although i entered the right CRC.
I tried many drmv2clt.dll files i found on emule and via google, but they all don't set breakpoints, or the SID is AAAA..AA= -_-

philarete
20th April 2005, 22:15
The only time I have obtained an AAAA... SID was with a drag and drop, launching the exe with cmd resulted in two different SIDs without changing the CRC, and only one after changing the CRC.

hartiberlin
20th April 2005, 22:19
So did somebody succeed to extract the the wmv file from:

http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip

with these key:

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

or with this key:

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

at my PC with Win2000 SP4 the drm2wmv.exe
does not do anything, when I drag the WMV file
onto it and have the same name
trailer_super2_drm.key file in the same folder and
additionally in the /drm2 folder...
Also it does not do anything, if I do it in a DOS-Shell
window.
Is my drm2wmv.exe buggy, or does it only work on Windows
XP ?
I have WMP 9 version 9.00.00.3250

Regards, Stefan.

Plub
21st April 2005, 13:40
tried your file with your keys, my drm2wmv.exe doesn't do anything,too (got XP sp1) very strange. I already decrypted a wma, which worked good.

fallblau11
21st April 2005, 16:18
Common problem which when (solved, or not) will tell us the value of the drm2wmv program.





JUST TRYING TO DIRECT OUR COMBINED MENTAL ENERGIES.

ATTACK! ATTACK! ATTACK!

http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip

hartiberlin
26th April 2005, 04:51
I think WMV9 is save enough also with the
new patches from Microsoft to encode my videos
with it now and sell it online.

We have seen, that it is not so easy to hack it,
also not from the PROs over here...

Does anybody know a good DRM service provider to sell
licenses ?

What about www.payvision.com
or simular.

Can one oneself use my own license server
for this on a Linux apache server ?
Or Do I need a Windows 2003 server for this ?

Does Microsoft take license fees, if I want to
sell my own DRM protected movies in WMV9 format ?

What utilities are there to encrypt the WMV9 movies
after they have been encoded by Windows Media Encoder ?

Thanks.

Regards, Stefan.

QQ
26th April 2005, 06:24
Originally posted by tjf
I still do not understand how this tool can work after individualization. The indivbox.key file that is used instead of blackbox.dll is different on every computer, or even on the same one if I delete it and individualize again. So it is obvious the CRC in ini file will never match. When I change the CRC in ini file to match the indivbox.key it does not find the SID.

Tomas

it works because it doesn't need indivbox.key. Only one matching file of 4 is needed - indivbox.key, or blackbox.dll, drm2clt.dll, or drmclien.dll

QQ
26th April 2005, 06:25
Originally posted by hartiberlin
So did somebody succeed to extract the the wmv file from:

http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip

with these key:

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

or with this key:

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

at my PC with Win2000 SP4 the drm2wmv.exe
does not do anything, when I drag the WMV file
onto it and have the same name
trailer_super2_drm.key file in the same folder and
additionally in the /drm2 folder...
Also it does not do anything, if I do it in a DOS-Shell
window.
Is my drm2wmv.exe buggy, or does it only work on Windows
XP ?
I have WMP 9 version 9.00.00.3250

Regards, Stefan.

perhaps it's fake version? otherwise, it didnt work for me if i had japanese locale set in windows - when i switched to US it started to work.

and dont forget the date!

hartiberlin
26th April 2005, 14:50
Which key did you use ?
How did you set your PC to US version ?

Please describe in detail what you did.
Did you now get a decrypted version of the warner
bros movie trailer ?
Thanks.
Regards, Stefan.

QQ
30th April 2005, 10:22
both of those keys are identical.. you can change locale in control panel.

tjf
30th April 2005, 10:38
I was finally able to decrypt Terminator 2 or the trailer_super2_drm.wmv files.

I used fresh English Windows XP SP1 installation with WMP9. Then I downloaded Japanese WMP9 from Microsoft and extracted drmv2clt.dll file to c:\Program Files\Windows Media Player directory.

In the original drmdbg.ini I did not change anything except of the breakpoints at the top. I set drmv2clt=1 and the rest to 0.
drmclien=0;
blackbox=0;
indivbox=0;

Tomas

hartiberlin
30th April 2005, 14:13
Originally posted by tjf
I was finally able to decrypt Terminator 2 or the trailer_super2_drm.wmv files.

I used fresh English Windows XP SP1 installation with WMP9. Then I downloaded Japanese WMP9 from Microsoft and extracted drmv2clt.dll file to c:\Program Files\Windows Media Player directory.

In the original drmdbg.ini I did not change anything except of the breakpoints at the top. I set drmv2clt=1 and the rest to 0.
drmclien=0;
blackbox=0;
indivbox=0;

Tomas
Hi Tomas,
can you please describe in detail,
what you exactly did ?
Where did you get the license key from ?
Did you once login the Internet to have the key
already on your Harddrive ?

Could you now decrypt all the Terminator 2 movie to your harddisk ?

Can it now be watched with Mediaplayer Classic ?
Many thanks.

Regards, Harti.

tjf
30th April 2005, 18:53
hartiberlin: I posted my procedure here on AVS Forum (http://www.avsforum.com/avs-vb/showthread.php?s=&postid=5556628#post5556628).

Yes, I decrypted all the files with the license downloaded from internet. They are now DRM free and able to be played in any directshow player.

Tomas

tron181214
7th May 2005, 22:27
i have found the kid and sid for my decrypted file and stored them into key-files in the drm-folders. but then the trouble begins i have 2 different drm2wmv.exe-files
the file of size 129.887 is saying:

Found DRMv2 header object.
Found KID (abcdefg*==)
Found DRMv1 header object.
Found KID (abcdefg*==)
Starting to look for license.
keyfile in no KID found

but i have exactly the given KIDs written in my .keyfiles in the drm-folders. why doesn't the programm find them?

the second drm2wmv is of size 30.208 and it is just saying:

DRM(Ver1&2) Conversion tool Ver 1.241 by taku

i tried with different dates (5 fed, 12 feb) but i got always the same result.

can anyone help me please, what am i doing wrong?

QQ
7th May 2005, 23:00
the 30xxx size one should be good. what locale do you have in regional settings?

EC-EXCURSION
8th May 2005, 22:14
Is the software on the first page posted by Yusaku known to work?

Yusaku
8th May 2005, 22:55
only if you follow hints :)

Especially do not forget changing date and create %windows%\#dummy (with the FEB date)

QQ
9th May 2005, 06:22
i didnt have to create that dir :)

hartiberlin
9th May 2005, 08:12
Is anyone able to deDRM this file:

https://secured.payvision.com/demo/demofiles/drmmovie.wmv

?

As I maybe wanted to go with their solution, I wonder, if
the elite hackers over here are able to strip the
DRM from this file.
Is the individualisation version 2.2 already hacked ?

Regards, Stefan.

Yusaku
9th May 2005, 15:12
if you send me 2 euros, so that I can check it for free...

I am definitely not going to pay just to view a demo.

I can confirm, though, that even after upgraded individualisation I am able to get SID of all movies on harddrive; i.e. chances that I'd be able to decrypt that video once I get a valid licence are 95%+

hartiberlin
9th May 2005, 19:34
Hi,here is how to get a free license with it:
just click the 0900 billing.
Then click click Step 5.
then the next screen comes up which says at the top:
"You still need to pay, click here that you pretend to have paid."
Click there and you will get a free license for 2 times play.

After you have viewed the movies 2 times the license is invalid.
so after the first play stop the player to still have a valid license
on your harddrive.

By the way, in which directory is the license key stored ?

Please post, if you can strip the DRM off.
Thanks.

Regards, Harti.

qq321
10th May 2005, 07:44
I get nothing with drm2wmv

XPVOL+SP1 or Win2000+SP1(NOT ENGLISH VERSION IS IT MATTER?) WMP9.00.00.2980(ENG or JAPdrmv2clt.dll)

download.microsoft.com/download/4/3/d/43dc9661-f69b-4735-9797-b3c98199085e/Ray_720p.exe

this file do't need to updata DRM so there is no indivbox.key in alluser\DRM
but nomatter individualization or not i get the same result

drm2wmv.zip from DOOM9

md c:\windows\#dummy

a Ray_720p.key in \drm2

change date to 12\Feb\2005

and there is what i get:

"<DRM2WMV2>
<KID></KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>"

i can find KID manually abcdefg*==

but nomatter add it or not it return:

"F:\1\drm2wmv1241>drm2wmv Ray_720p.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku

F:\1\drm2wmv1241>"

it do nothing atall

some question please help:




1,do you download drm2wmv from DOOM9?if not any other link?

2,any one have ripped Ray_720p.wmv success?

3,most DRMED files need individualization drm2wmv donot work after update?

4,I think the KID and SID are correct because cirerita has post it in DOOM9(in the page4),we have the same KID and SID,he say he have sucessfully rip it out with these ID,but why could'nt I?




could anybody mail me yours drm2wmv.zip or the three dll which work fine on your machine?many thanks!

tufasijian@lycos.com

Yusaku
10th May 2005, 09:29
(whee! 300th post)

qq321: you have correct drm2wmv, but probably some error in the procedure. To be honest, it doesn't run for me sometimes eiher; I just solved it by using drm2wmv on another computer :)

hartiberlin: works. Check your PM. And the demo is pretty awful as well - a digital trailer, recorded on SVHS, captured and encoded to DivX and reencoded to WMV. Gosh!

tron181214
10th May 2005, 18:25
qq: my regional settings are those for germany, can anyone confirm, that there is a difference in the regional settings?

i now get the same outputs as qq321 and the weird thing is: a few days ago, drm2wmv worked for me, even with regional settings for germany. And now i don't get it to work, even with the same key-files as before...is it like yusaku said, sometimes it is working and sometimes not? Unfortunlately i cant remember exactly the date i used, whe drm2wmv worked, is the exact date of any importance or is it enough to have a date BEFORE feb 5 or feb 12 or what?
Anyone has figured out, why drm2wmv is sometimes working sometimes not?

crypto
11th May 2005, 00:59
tjf:
awesome, 100%. Thanks for the instructions on avs.

EC-EXCURSION
11th May 2005, 02:09
Yo crypto, were you able to Decrypt Terminator 2 HD? Or were you just thanking him for posting the guide?

I have some questions on that guide...

crypto
11th May 2005, 08:19
Yo, it works on T2EE HD and others I tried. I live i an EU country where removing DRM is illegal, so I decrypted a part to see if it works. For legal reasons I keep using the DRM'ed version.

DevilR
11th May 2005, 13:07
For all that have problem. Be shure to replace the drmv2clt.dll in Windows\system23\dllcache and windows\system32 with the japanese version

After that all worked fine with the manual (different movie though).

without exchanging tha file i get somting like this:

c:\mydir>drm2wmv -v tc.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku

c:\mydir>

but with the drm2clt.dll replaced (also in cache dir due XP protection)

it works:

c:\mydir>drm2wmv.exe -v tc.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku
DRMv2 header object 。ョ
DRMv2 KID (abcdefg*==)
_ナ」祗[饑ニT鮹饑鯊
_ナ」祗[鬯鱆鰰饑鮹鬚
ナo-穰磧磴糀 <[DRM_ナ」、鬥]-tc.wmv>
稠[秧E穡祓稈稟鬥、霏饑トn魃饑鯊
覺穡祓稈稟ノ: 131627@1穡祓稈稟禝磴禳: 8948
|##################################################| 100%
ナリ穡祓稈稟ノ: 131627

c:\mydir>

DevilR
11th May 2005, 13:23
Originally posted by hartiberlin
Is anyone able to deDRM this file:

https://secured.payvision.com/demo/demofiles/drmmovie.wmv

?

As I maybe wanted to go with their solution, I wonder, if
the elite hackers over here are able to strip the
DRM from this file.
Is the individualisation version 2.2 already hacked ?

Regards, Stefan.

works

C:\test>drm2wmv.exe -v drmmovie.wmv
DRM(Ver1&2) Conversion tool Ver 1.241 by taku
DRMv2 header object 。ョ
DRMv2 KID (abcdefg*==)
_ナ」祗[饑ニT鮹饑鯊
_ナ」祗[鬯鱆鰰饑鮹鬚
ナo-穰磧磴糀 <[DRM_ナ」、鬥]-drmmovie.wmv>
稠[秧E穡祓稈稟鬥、霏饑トn魃饑鯊
覺穡祓稈稟ノ: 391@1穡祓稈稟禝磴禳: 7200
|##################################################| 100%
ナリ穡祓稈稟ノ: 391

rhayman
11th May 2005, 19:23
I finally managed to do this, the reason it was not working was because the #dummy file was not created using the 12th feb date.

But it only worked with one file, i cant get it to work with anything else :(

EDIT: Turns out you have to make a new dummy file each time.

SeeMoreDigital
12th May 2005, 09:48
As a matter of interest... How many variations of DRM are there?

I seem to remember reading somewhere that the DRM on my Terminator 2 (North American) disc is not the same as the DRM that can be found on European releases, such as Tomb Raider II, The Italian Job, etc (http://www.high-def.de/)....


Cheers

crypto
12th May 2005, 16:44
T2EE uses an online license, the other EU releases use an offline license. The DRM encryption is identical. Only the way how the key is generated is different. Online license receives the key from the license server, while the offline license is generated locally by starting licgen.exe. Licgen ensures that you have the original DVD before creating the key.

Here we can see how critical the breach is. UnDRM'ing opens the door for illegal copies and that is why MS has immediately patched the hole. Only some localized versions of the DRM components seem not to be patched yet. But that's only a matter of time. I think this is also the cause why some users succeed while others fail with the identical procedure.

EC-EXCURSION
13th May 2005, 01:06
:D :) :cool:

I DID IT! I took the drm out of my T2 HD disk! Im so happy! My eyes actually started watering when decrypted it. (and it doesnt even look that good :( )


What did I do different from tomas' guide? Well I changed the src info... And changed the 0's to 1's.

wmvcore=1;ieCacheからkid拾うのに使用
drmv2clt=1;blackbox&indivboxの予備用
drmclien=1;DRM1で使用
blackbox=1;DRM2で使用
indivbox=1;DRM2で使用

Also I had to put the video threw dmr2wmv.exe twice. The first time I put it threw so I could get the KID info. And then I put it in the .key file.

And the second time I ran it through decrypted!

I would like to thank Yusaku for supplying the tools, tj21 for making the guide on the AVS forum, communist for posting the modifications I needed to make in order to to get it to work, and last but not leaste, Everyone at Doom9 and AVS forum who posted in the two topics.:cool:

Yusaku
14th May 2005, 23:51
Originally posted by crypto
UnDRM'ing opens the door for illegal copies and that is why MS has immediately patched the hole.

Technical note: MS did so far absolutely nothing about the hole. It was developed in Japan, so it is clear it was written for Japanese version of WMP. The problems we're having with it arise from the fact that most of us here do not run Japanese w2k/XP (and I've tested that it doesn't work on Japanese w2k3).

Also, unDRMing not only opens door for illegal copying, but also for fair use :)

crypto
15th May 2005, 09:39
> Technical note: MS did so far absolutely nothing about the hole.

I thought that the DRM DLLs have been updated with debug detection code. Since Build 3802 WMP reports "Running this process under a debugger while using DRM content is not allowed."

Maybe not all localized versions have got the 3802 patch. Another interesting aspect is that drm2wmv does not seem to load any of the DRM DLLs. I do not see a way to close the hole for existing content where the SID is already known.

hartiberlin
17th May 2005, 12:17
Originally posted by crypto
T2EE uses an online license, the other EU releases use an offline license. The DRM encryption is identical. Only the way how the key is generated is different. Online license receives the key from the license server, while the offline license is generated locally by starting licgen.exe. Licgen ensures that you have the original DVD before creating the key.



How is the offline license safe ?

Canエt I just copy the whole DVD 1:1 and then install the
copy in another PC and register the license also there ?

How can the licgen.exe check, if it is really the
original disc and not a copy ?


Regards, Harti.
P.S: Thanks to Yusako for decrypting the demofile
from payvision. Now I can let them know,
that their DRM is insecure...

crypto
17th May 2005, 13:26
Canエt I just copy the whole DVD 1:1 and then install the
copy in another PC and register the license also there ?


The criteria licgen reads to verify the original dvd are secret. I think it reads the ean code or some other structure like the css key area, which the copy does not have.

EC-EXCURSION
18th May 2005, 13:56
Originally posted by hartiberlin
P.S: Thanks to Yusako for decrypting the demofile
from payvision. Now I can let them know,
that their DRM is insecure...
Why would you want to do that? No good could come of it...

hartiberlin
18th May 2005, 15:03
Hi no panic,
the people over there know it already, but they
are relaxed, cause you need to have the license first
to crack it and so you would have to buy the license first.
ALso with the current tools it is very complicated to do it
and the tools are only here available.

Regards, Harti.

roxfan
20th May 2005, 01:59
Fiddling with the clock was kinda annoying so I unpacked the file and disabled all the date checks. I've also translated the messages.
http://rapidshare.de/files/1866123/drm2wmv_e.rar.html

qq321
20th May 2005, 09:39
it works for me in any condition now,well done!

biokats
20th May 2005, 18:27
Thanks roxfan


Now it works better, thanks!!!!!!

Now is only matter of time if someone could edit the code and make the drmdbg work under wmp10, but it doesn't matter now drm2wmv works and it's in english, wow!!!,

P.D. Would you be so kind and traslate drmdbg too?, please!!!!! :(

philarete
22nd May 2005, 16:41
The "japanese" method works fine on my "atom films" short movies.:)
Now I can show them to other people, that's great, 'cause they are really funny.

QQ
22nd May 2005, 18:25
roxfan, what packer was that?

roxfan
22nd May 2005, 21:55
Originally posted by QQ
roxfan, what packer was that?
Looks like a custom one, PEiD didn't recognize it. But it was pretty simple, manual tracing and dumping in OllyDbg did the job.

bugmenotwillyou
23rd May 2005, 12:58
How much does the file size differ, when the DRM have been removed from a file?

I assume the files does get a bit smaller?

crypto
23rd May 2005, 19:19
> I assume the files does get a bit smaller?

No, sizes are nearly equal. Just a 2 KB header record is stripped.

QQ
23rd May 2005, 20:06
Originally posted by roxfan
Looks like a custom one, PEiD didn't recognize it. But it was pretty simple, manual tracing and dumping in OllyDbg did the job.

ah, good thing i didnt even get started on it :) my skills dimished ever since i uninstalled sice

bugmenotwillyou
23rd May 2005, 20:27
Originally posted by crypto
> I assume the files does get a bit smaller?

No, sizes are nearly equal. Just a 2 KB header record is stripped.

I don't don't much about cryptography, but could this sort of cryption be called 1:1 ?

When looking at the Unix /etc/shadow file the crypted passwords are much longer than the decrypted.

Wouldn't it be more secure if the DRM did that too?

QQ
23rd May 2005, 20:49
no, it wouldnt. the most secure encryption is simple xor, provided you have key of same length as content=) anyway, you dont have to add any overhead data, cause it wouldnt matter - it's just unneeded. unix encryption makes longer strings because afaik it converts data to readable format - that is instead of using all 256 chars it uses 32 or smth, thus to encode each char ASCII you need 1.6 5bit table symbols :)

bugmenotwillyou
23rd May 2005, 21:24
Originally posted by QQ
no, it wouldnt. the most secure encryption is simple xor, provided you have key of same length as content=) anyway, you dont have to add any overhead data, cause it wouldnt matter - it's just unneeded. unix encryption makes longer strings because afaik it converts data to readable format - that is instead of using all 256 chars it uses 32 or smth, thus to encode each char ASCII you need 1.6 5bit table symbols :)

I see. :D

This might be a stupid question:

If I crypt something, can I then later apply DRM to that file without haven't to re-encrypt the file?

I mean; Is DRM not a encryption itself, but a program that just can allow and deny keys to a crypted file?

DRM can't alter the data. Can it?

miztadux
27th May 2005, 15:20
my little experience with the subject:

ok i finally managed to undrm some wmvs.
this forum is really complete, i don't think i can add original content, just some sum-up notes:

* this drm isn't *really* cracked yet, meaning we can't get the key from the file, the only thing we can do is to acquire a legit key somehow and use it to descramble the file the same way the media player would.

* the key is called 'SID', the 'KID' seems to be just an identifier

* the kid is real easy to get you can either:
- run drm2wmv without KID, it will spit it out
- run freeme.exe, it will too
- hex edit to find it in the wmv header
(be careful, the kid is not bond to end with '==', those are just some padding chars, it can end with a single '=' or none at all)

* i think the tricky part is to get the key=sid, the only solution is drmdbg, the idea behind it is to debug wmp to get the key from wmp's memory.

* i think drmdbg and drm2wmv were just 'proof of concept' tools, or at least the result of a smart guy being pissed by drm schemes, they were not supposed to be widely spread, hence the wmp9 JP lock in with drmdbg and the #dummy/time check in drm2wmv.
(btw a big "thank you" to roxfan for his english/no check version !!)

now some hints on the method i used:

* the pain in the ass with this scheme is to get drmdbg to work, the scary part being "...with a fresh install", but bear in mind that drm2wmv (and moreover drm2wmv_e) doesn't have the same requirements, with roxfan version you don't even need the 12/feb-#dummy tweak.
so what i did is setup a virtual machine with a fresh (localized) xp sp2 install (already had it handy) and put english wmp 9 on it, this way i was able to get the SID without touching my system.
the virtual machine (slower/fewer cpu/disk) isn't a problem as you only need read access to the file (can share it via virtual cd for example) and you just need to play it for a sec.
once you have the correct .key, you can do the heavy processing with drm2wmv on any kind of system, like one with large/fast disk space, with no requirement for wmp, local setting and so on...
it's sweet if you're dealing with very large files and don't want/can't set up a fresh install with some free space

* some details with drmdbg: i didn't need to copy the japanese dlls, just put my crc's in the .ini for the *matching version* of wmp.
a good thing would be to share the drmdbg.ini entries that are known to work (by that i mean crcs and correct break point addresses)
i don't have the one i used here, so sorry i won't be able to start :(

* about the "offline drm" (dvds with licgen.exe): i had a chance to fiddle with such a .iso, i could get the license with no hassles, even with a simple rip, so i don't think not having the original is a problem

finaly, i'd like to thank everyone in this forum and the avs one who have helped explain the use of those programs, Lark/Taku/Anyone who wrote them, Yusaku for the precious hints and roxfan for his nifty changes (btw the 'AAAAAA' and 'does nothing' bugs with drm2wmv should be no more with this one)!

bugmenotwillyou
27th May 2005, 16:08
I wonder why no news sites has covered this?

Slashdot rejected my story.

Could it be, that Microsoft have payed all major news sites in advance to not post the news, if DRM 10 was "cracked"?

QQ
27th May 2005, 16:30
Originally posted by bugmenotwillyou
I see. :D

This might be a stupid question:

If I crypt something, can I then later apply DRM to that file without haven't to re-encrypt the file?

I mean; Is DRM not a encryption itself, but a program that just can allow and deny keys to a crypted file?

DRM can't alter the data. Can it?

DRMis a method of restricting what can you do with media file. DRMed media file is encrypted. To view it, you must have a licence, which contains decryption key. When you have it, the file is decrypted on the fly and shown to you. Besides that, licence can have some other restrictions (timeout, burning to cd, etc). So i'm not sure what do you refer to by saying "can i crypt".. DRM IS an encryption.. AND method to allow/deny keys :)

Yusaku
27th May 2005, 16:46
well, there was already quite wide coverage of the crack; I think that was more than enough (I do not read 2ch too much - my japanese is really bad; and without Japanese it was almost impossible to make this work... but with all the news I had to just read a few pages at 2ch, the hints there were easy to follow).

And as DRM2WMV had made it to the slashdot once already, anyone interested has it by now... If you spread it too much, you'll only force M$ to patch this hole and start a new hacking round.

All in all, M$ confirmed that their DRM is really strongest one on market and can be easily updated to fix existing holes. At the same time, though, they confirmed that DRM cannot principially survive convinced hacker... the fact that the hack came from Japan is simply due to the fact that till now MSDRM was not used seriously anywhere else (not true anymore with napster and yahoo).

QQ
27th May 2005, 16:59
Originally posted by bugmenotwillyou
I wonder why no news sites has covered this?

Slashdot rejected my story.

Could it be, that Microsoft have payed all major news sites in advance to not post the news, if DRM 10 was "cracked"?

that, or threatened. it took ages after the rumour for the tools to appear!

jerry07
27th May 2005, 18:06
there are new version of "drmdbg" that support WMP v10.00.00.3802 and more easy to use...

Plub
27th May 2005, 19:52
you know where to get it ?

biokats
28th May 2005, 09:14
there are new version of "drmdbg" that support WMP v10.00.00.3802 and more easy to use...

Maybe we are only being cheated, xD it sounds very good to be real. But i don't understand why you din't put any other information, but thanks for the new.

remedy
28th May 2005, 18:36
hi there... WMV9 DRM file with expired license (reported by WMP10).
what i got from most previous postings, the drmdbg is useless if the certifcate is once expired...is that true? Is there any clue for such a case...?

xtknight
30th May 2005, 05:20
i got the programs to work but the video on my undrm'd files was all garbled and corrupted and there was no audio. the size was the same, off by 2 bytes from the DRM file. this was done with the english drm2wmv. i wonder if that english version screwed up something? has anyone successfully undrm'd a file with the english version? the japanese version just says drm2wmv by taku and does nothing else. my date is set to february 12/2005 and i have the c:\windows\#dummy folder. the drm2wmv tool doesn't require any japanese dlls right, or does it? in any case i have the japanese WMP on here already, and it still just stays at that message, with the -v parameter and without it.

update: ok somehow i got it to work by recopying the drmv2clt.dll to wmp folder and re-running drm2wmv -v on it. now the video is fine. so my conclusion is the english version's decoding function got corrupted in the process. :confused:

update2: oh, never mind, here's a conclusion: the drmv2clt.dll recopy fixed the playback of both the file decoded by english version and jap version. playback is fine! except on files that i decoded with english version before i tried the jap version successfully. wow i'm confused. i can 're-conclude' that the english version did infact corrupt the file. comparing the japanese output with the english output wmv under ASF View revealed that the data packets differ. what's wrong?

update3: never mind, it was because my keys differed. i'm stupid. :D

here's a tip: just use XPLite to uninstall windows media player 9/10 (uncheck 9 and it will uninstall 10 too). then get the japanese version, extract the sfx installer exe to a folder. if you have a winxp cd in your drive, take it out. now go back in xplite and install windows media 9 and it will ask you for a source. select the directory of the self-extracted japanese version. then when it says it's missing a file just cancel it out it'll work anyway. then you have the japanese version installed without reinstalling windows or any of that crap.

ultimatebilly
31st May 2005, 04:18
that, or threatened. it took ages after the rumour for the tools to appear!
Maybe they didn't want to spread the news because I think there was kind of an agreement not to crack the Microsoft DRM, to keep it from becoming widely used.
Under that light, it is probably good that there are people reporting the progress made here to Billy...

CooperS
31st May 2005, 06:17
Success. WinXP SP2. Media player localized. I kept getting that AAAAA crap but when I replaced drmv2clt.dll with the Jap one all is good.

This is fantastic!

Plub
31st May 2005, 21:29
Where can i download the englisch or the new version??

draganong
1st June 2005, 14:09
I was wondering if anyone could write a GUI for that or a way to script it to do batch processing....

1. Start drmdbg
2. Open source file
3. Grab SID and put it in the .key file
4. Close WMP
5. Open DRM2WMV w/ the source file
6. Grab KID and put it in the .key file
7. Decrypt file

Go back for next file in batch....

That would be great, especially for multipart movie files.

Thanks !

jerry07
1st June 2005, 17:34
http://rapidshare.de/files/2110701/drmdbg527.rar.html
HOPE M$ DON'T SEE THIS........................ :( :( :( :(

draganong
1st June 2005, 17:52
http://rapidshare.de/files/2110701/drmdbg527.rar.html
HOPE M$ DON'T SEE THIS........................ :( :( :( :(

How is this different from the existing version posted before and what language is the readme written in ?

jerry07
1st June 2005, 18:30
How is this different from the existing version posted before and what language is the readme written in ?

what different? see my previous post.....
DRMDBG is made by a japanese..so is japanese language

Plub
1st June 2005, 20:15
WOW, thank you!!
Now everything works fine, thanks thanks :D

bugmenotwillyou
2nd June 2005, 02:49
try my gui
i only tested it on xp sp2 with wmplayer 9
http://rapidshare.de/files/2121172/DRM2WMV.gui.rar.html

Yusaku
2nd June 2005, 04:33
Thanks a lot, jerry07.

Now, the readme sheds some light upon the reply Christopher Levy's reply cited on 2channeru (http://pc5.2ch.net/test/read.cgi/avi/1107556060/212) (readme says lark heavily helped with this release, between others). As one Czech classic says, "I think his statements could be successfully doubted".

Then again, he's a person who thinks US law applies world-wide, (locally) invalid AUP stands above (local) law (invaliding it), buying a media does not grant you lifetime usage rights (Yes, Chris, I listen to my parents' vinyls with some "ancient" rock&pop sometimes, and yes, they are nearing 50 years) or that DIVX and DivX is the same thing (that, Chris, was a test - I told myself that if a DRM person will mistake those two, that I won't continue the discussion. BTW those DIVX custommers cannot play the content they rightfully own). (http://msmvps.com/chrisl/archive/2005/02/16/36147.aspx)

Because someone linked this page at the above blog (that is read by MS), I am pretty sure Microsoft knows - and even without this link, I doubt noone at MS can use winny/share/ringoch, so I don't think that the post does too much harm. It is good to know that work continues on updating this tool, though :)

draganong
2nd June 2005, 14:56
try my gui
i only tested it on xp sp2 with wmplayer 9
http://rapidshare.de/files/2121172/DRM2WMV.gui.rar.html

Thanks, I will give it a try. Check out also sidda and drmcreep that work great in a batch file (fromthe AVS forum).

BennyS
5th June 2005, 08:59
Hello

This is pair DRM key that can decrypt

http://download.microsoft.com/download/4/3/d/43dc9661-f69b-4735-9797-b3c98199085e/FridayNightLights_720p.exe


Delete all file in c:\Documents and Settings\All Users\DRM
Put DRM key in c:\Documents and Settings\All Users\DRM

and then put SID/KID file key "FridayNightLights_720p.key" in drm2 folder

then either drag&drop or type in command promt

drm2wmv_e FridayNightLights_720p.wmv

Voila drm removed
i tested 2 times on 2 difference clean installed XP SP2



ATTN:
DRMed file can not be played using this license key (it will not work)
but drm2wmv_e can decrypt DRMed file with this PAIR key

B.



HELP HELP

Since I can not decrypt T2 EE myself (I am not Region1 and i give up searching working proxy) please post PAIR DRM key

copy whole c:\Documents and Settings\All Users\DRM
and your SID key for T2 EE
thanks.

srp336
5th June 2005, 23:03
Is anyone using this with WMA? I've tried in vain with WMP9 (version number 9.00.00.2980). Are there previous versions (previous builds) of this anywhere. Are people who are getting results with WMP9 using this version?

For people who are getting results with WMP10, are you replacing any DLLs with the Japanese versions? I've tried installing the Japanese WMP9 in its entirety, but nothing worked.

Thanks!

BennyS
8th June 2005, 01:44
Hello all

Anyone here has succesfully decrypt T2EE that has :
<KID>abcdefg*==</KID> ?

I think i can use yout KID decrypt my T2EE using your SID
if you have same KID as mine I will very appreciate
if you post/pm the SID that you found
(T2_PartX.key)

I hv been trying myself finding a way to solve proxy problem
And i end up using DIAL UP direct to US but it said i must upgrade to WMV10
IMHO WMV10 can't be used for debug, right? even i downgrade wmv9 license become not work


Regard,
B.

crypto
8th June 2005, 07:18
Hi BennyS,

are you sure about the KID? It seems not to be for T2EE.

You can use an US or Canada proxy to get a playback license. There are plenty of them. A long distance dialup isn't really necessary.

BennyS
8th June 2005, 10:56
crypto

Yes i am sure, i think there are several version T2EE
my T2EE file
T2_Part1.wmv 2052215KB 9-May-2003 12:52 (2,101,467,811 bytes)
T2_Part2.wmv 2000765KB 9-May-2003 12:56 (2,048,783,123 bytes)
T2_Part3.wmv 1892338KB 9-May-2003 12:59 (1,937,753,441 bytes)
T2_Part4.wmv 876005KB 9-May-2003 1:01 (897,029,107 bytes)

btw EC-EXCURSION already sent me his key
and it WORK!!! ... thanks to him

m sure other with same KID will work too

B.

BennyS
8th June 2005, 15:01
Hello all

Today i can watch my T2EE HD disc for the first time
since i bought it more then year ago.
I hv difficulty connect trough proxy.. tested lot of proxy
and none work.

For those who own original DVD T2EE (Barcode 12236 14628)
and having difficulties retrieving license here the magic key:
<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

Check your T2_Part1.wmv with hex editor and look at the KID
if it same then you can use the key

There are several version of T2EE

Hope you guys also post your working magic key for helping others

Regard,
B.

EC --> thanks for your help :)

crypto
8th June 2005, 19:25
Very interesting. Mine is 3 days older and chopped in 1GB chunks.

1037772383 May 6 2003 T2_Part1.wmv
1063700371 May 6 2003 T2_Part2.wmv
1032686621 May 6 2003 T2_Part3.wmv
1016110863 May 6 2003 T2_Part4.wmv
905335531 May 6 2003 T2_Part5.wmv
1031970871 May 6 2003 T2_Part6.wmv
897029181 May 6 2003 T2_Part7.wmv

KID & SID are those shown in the AVSForum post mentioned earlier in this thread

BennyS
9th June 2005, 10:43
I got confirm from 2 users :)

<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

B.

Rash
10th June 2005, 03:30
For those who own original DVD T2EE (Barcode 12236 14628)
and having difficulties retrieving license here the magic key:
<DRM2WMV2>
<KID>abcdefg*==</KID>
<SID>abcdefg=</SID>
<INFO></INFO>
[]
</DRM2WMV2>

Check your T2_Part1.wmv with hex editor and look at the KID
if it same then you can use the key
Holy Crap!!! :eek: That's my KID right there! Does it mean I can use your .key file then?
So now what, do I run drm2wmv and it would start decoding the files? Humm, I guess it won't work with the latest WMP10, would it? Anyway, if someone could tell me where do I get the English version of drm2wmv I would be really thankfull.

Sorry for the repeated questions. I read the whole thread but I still have some doubts since each one found a different way of doing this.

Thanks a lot.

BennyS
10th June 2005, 04:34
Hello Rash

find drm2wmv_e it in front of you
It will work even without mediaplayer installed

save that key with rash.key and :

c:\folder\drm2\rash.key
c:\folder\drm2wmv_e.exe
c:\folder\T2_Partx.wmv (x == 1..4)

just drag&drop T2_Partx.wmv one by one to drm2wmv_e
make sure you hv enough HD space

B.

BennyS
10th June 2005, 04:43
Anyony here has Step Into Liquid ?

Please post KID/SID ... i believe this one is as hard as T2EE
(Need Internet Phone Call to US/Canada) and its not easy find working proxy

Regard,
B.

Rash
10th June 2005, 05:17
find drm2wmv_e it in front of you
It will work even without mediaplayer installed
Thanks a lot for your reply Benny. :) Just one thing, if you mention the two files you posted on this page they are waiting for approval, so I can't download them. Don't you, by any chance, have the URL you downloaded them?

Unfortunately I can't help you with Step Into Liquid ID's. I have great difficulty dialing to US to get the licence too. :(

BennyS
10th June 2005, 08:13
hello rash

check user roxfan reply #133

you can use drm2wmv jp version too
it has time lock so you must!!!

change your computer date to 12\Feb\2005
make folder c:\windows\#dummy
so your #dummy folder will hv date 12\Feb\2005 (important)

begin drag&drop your t2 file

you can change back your computer date now



hv fun


B.

Koepi
10th June 2005, 15:46
Don't post any keys or SIDs here! I want to remind you about rule6 - we don't support piracy here!

I edited every SID/KID in this whole thread now. Please do not post such IDs anymore, else you'll get struck.

Thanks.

Cheers
Koepi

Rash
11th June 2005, 03:15
Thank you very very much Benny. It worked perfectly. And sorry Koepi.

riggits
11th June 2005, 05:10
Don't post any keys or SIDs here! I want to remind you about rule6 - we don't support piracy here!

I edited every SID/KID in this whole thread now. Please do not post such IDs anymore, else you'll get struck.

Thanks.

Cheers
Koepi

No disrespect intended, but I wish to know how posting keys supports piracy? 'Pirate' versions of videos discussed in this thread are widely available for download, so I suspect that anybody asking for a key is obviously not downloading an illegal copy.. anybody requesting a key is more likely trying to use something they've already got a legal right to use.
I'm not asking for a key, just req. a clarification. thanks!

TMLewiss2
11th June 2005, 05:49
I read t his entire thing and I am still confused as heck, I can't get any of the programs to work...

Let me be more specific, I ran drmdbg.exe, then ran my video, and it just spams cdc: 54c0fbfd C:\documents and settings\all users\drm\indivbox.key

After that I don't know what to do...

Doom9
11th June 2005, 11:41
well.. it is a sticky issue. I'm not even sure if memory serves me right but since those keys might well be user specific, it's pretty much like posting login/password for something only you should have access to, and you wouldn't do that, would you? So, getting help with those programs is okay but once we're entering a personalized area, somebody might take unfavorable notice.. and it's better to be helped to use those tools, than having your quick fix for movie one, but be left in the rain for movie two because we've been served a C&D in the meantime.

Yusaku
11th June 2005, 13:58
no, the KID is hardcoded into the video (directly in the header) and only a single SID can decrypt it. It is similar to e.g. PGP, where there are many keys (read: licences) that unlock one master key to decrypt the content. The SID is this "master" key, that a licence gives you access to; it does not change from user to user. In the case of e.g. Terminator DVD, the key has no value unless you own the physical media (and thus according to Bernes Convention the licence), and as such distributing these keys is IMO perfectly legal. It is different in the Pay per View systems, like *.flets top-level domain of one japanese ADSL provider; where you can download the files as you like, you "only" need to pay for licence.

Doom9
11th June 2005, 14:09
but then you put the burden to decide which type of content it is onto the moderators. And that's really not their job.

TMLewiss2
12th June 2005, 00:34
It's ok, I just made a network program that screenshots everyframe, then compiles them back into an AVI.

crypto
12th June 2005, 19:15
> distributing these keys is IMO perfectly legal

Wrong, posting a key is illegal. It is a copyrighted intellectual property. The moderators of this forum did the right decission in deleting it.

The KID is an identifier of the movie. The license server uses it to lookup the necessary key to decrypt the movie.

This SID is the universal key to decrypt the movie. It is identical for all copies made from the encrypted master.

hhanh00
13th June 2005, 01:54
There is an interesting development in this ever going battle against DRM. The next version of Windows (Longhorn) will contain a mechanism to run certain processes in a secure context where even administrators aren't able to attach a debugger to them or read/write into their memory. Only applications signed by Microsoft will be able to run in the secure context and communicate directly with other secure apps. Obviously, Media player will be one of them. It's not unbreakable, of course - but looks like a much harder job. It will not be a user mode hack anymore.

Yusaku
13th June 2005, 07:41
hhanh00: yeah, I know. I would be quite surprised, though, if this protection worked with SoftIce, from what I've heard these processes will basically get same privileges as core/drivers - shielding them from userland, but not "the real" debuggers. And there's always a possibility of crashing the WMP (not that hard thing to do) and examining dump, or examining hiberfil.sys.

Probably easiest approach will be a little pachwork in kernel32.dll, though. Basically, it comes down to the fact that you cannot ever protect content, as makers of game consoles learn periodically with each new machine.

crypto: I am not that sure. According to DMCA, yes - but according to that law, most of this site is illegal anyways. I am pretty sure cryptographical key is not intelectual property (it was done automatically using a machine, it has no value (by itself), it is not based on human work). It has the same value as PGP key or digital signature, like copyright protection on a CD - that is none.

The difference between legality and illegality lies somewhere else:
Legal: key to Terminator DVD gives you ability to use the disc that you own, and to perform fair-use rights. Because only people who do own the disc can use the key, no harm's done (according to law, MS will see it differently).
Illegal: key to content that you don't own (PPV, ...) allows you to decrypt a content that you do NOT have a licence to. In that case, the person posting the key could be probably found guilty of helping others to gain "unjustified enrichment"; and overall it is clearly morally wrong, not to mention forum rules :)

I think it is better that the keys are gone - there's simply no need for them, and as Doom9 said, you can hardly expect the moderators to filter these selectively - it is just too much work. That said, the SIDs that were posted in this thread were IMO all legal.

Maxxman
13th June 2005, 12:30
Greetings to everyone on this forum (my debut post!!)

I've been following this thread right from the start, had a look at all the different method's posted and sofar have not had any luck in getting any of them to work!

The posted gui seemed like an ideal solution at first glance, but I get a Runtime error subscript out of range message. I have yet to see any proof that you can actually decrypt drm, seems to be plenty of "text" based post's with kid's/sid's but no actual "decrypted" files getting posted, or screen shot's of the proccess working. Now Im not trying to start anything here, Maybe it does work, but it does'nt for me. Can anyone post a definitive guide?

It's only realy a matter of time before a util does appear to break drm, look at how quickly css was broken, but until such time's guess I'l just need to keep trying!!!

Regards - maxx.

p.s - I've been following doom9.org since it's infancy, my regards to doom9 for creating such an excellent site.

hhanh00
13th June 2005, 18:21
hhanh00: yeah, I know. I would be quite surprised, though, if this protection worked with SoftIce, from what I've heard these processes will basically get same privileges as core/drivers - shielding them from userland, but not "the real" debuggers. And there's always a possibility of crashing the WMP (not that hard thing to do) and examining dump, or examining hiberfil.sys.

Probably easiest approach will be a little pachwork in kernel32.dll, though. Basically, it comes down to the fact that you cannot ever protect content, as makers of game consoles learn periodically with each new machine.

The softice approach shouldn't work. The debugging right is disabled on these process and since the code to create a process migrated into the kernel, it is not possible from user mode to change those rights. If you crash the WMP, it will trigger some code that will blank the security IDs before creating the dump. Same thing for hiberfil.sys. The system assumes that if you are a legitame user, you will be easily able to reacquire the key, therefore the system clears the key as soon as it thinks it went into an unsecure context. The simpliest is to change a kernel dll so that the whole thing is disabled (like what happened with XP activation). But to me, it's harder to do. This whole business came from pressure from content providers to have a secure media environment. :mad:


Basically, it comes down to the fact that you cannot ever protect content, as makers of game consoles learn periodically with each new machine

I wouldn't be so sure. Of course from a theorical point of view, it is true since the content has to be decrypted before playing, but in practice it seems like the industry is getting better at protecting and the methods for circumventing DRMs are more and more difficult to find. I think that at one point, it will simply to be too complex to be worthwhile.

Maxxman
15th June 2005, 16:31
Well F*cK me extremely hard! I have just decrypted The batman trailer, I can't believe It worked! I retract my previous statement in the above post, DRM decryption is possible. The only slightly annoying thing is the "activemoviewindow" that appears when you play the file, other than that Im now very happy!!!! ;)

-maxx.

QQ
15th June 2005, 19:18
I wouldn't be so sure. Of course from a theorical point of view, it is true since the content has to be decrypted before playing, but in practice it seems like the industry is getting better at protecting and the methods for circumventing DRMs are more and more difficult to find. I think that at one point, it will simply to be too complex to be worthwhile.

And the people in the scene are getting better all the time aswell. But you're right - everything will be cracked as long as it's feasable to do so. And I have no idea when will we hit that point (if ever).

TMLewiss2
16th June 2005, 03:45
What I don't understand is why do they protect trailers... who cares if people change them to a different codec. It would only get more people to download it, which in turn would advertise the movie even more... I can understand real movies, but trailers are a waste of protection.

thomasphoenix
16th June 2005, 22:26
The drm2wmv_e and drmdbg527 combo works!! And I have done it on win2k pro
with mp9 and no japanese dll .My Hd t2 was gathering dust and thanks to the posters here ive done this in one day.My regards to all the cool dudes who fight for the paying consumers rights.

AirGumby
17th June 2005, 22:50
I've been following this DRM 10 stuff for awhile but just can't grasp why you need all these .dll's, etc... to crack a .wmv file?

I've downloaded some pr0n that when you try to play it launches a "licenses Activation" from the site I've downloaded it from. It asks for your password and login to play the file. It's obvious you have to sign up to the site to allow to play it.

My question is. If the "real" .wmv file is in the protected .wmv file, why do you need all of this stuff to decrypt the file from the crypted stage? I'm sorry if this sounds stupid. I'm just new at this all and is curious to know why there isn't some .GUI program that runs the encrypted .wmv file through it's process to decrypt the file as another name and then you have the .wmv file decrypted and unprotected...

Any one stop GUI programs that does this all with out the need to have Media Player 9, etc... just to decrypt the DRM movie?

E-Male
17th June 2005, 23:15
your right
it's odd there isn't a one-click GUI tool to solve all problems in the world

AirGumby
17th June 2005, 23:31
your right
it's odd there isn't a one-click GUI tool to solve all problems in the world

You don't have to be a smart-ass. It was just a question about what I've read in this thread... Sheesh... :rolleyes:

E-Male
18th June 2005, 13:17
well, i just didn't like the way you sounded, especially on your first post
btw, i still don't like it

AirGumby
18th June 2005, 15:36
Well I bought a license for one of the movies so I can play around with it. The problem I'm having is I can't seem to locate it. The folder /documents and settings/all users/DRM is invisible and I can't seem to figure out how to see the files in that folder.

The license files I purchases for the movie to work correctly. Would it include the SID? Any help would be appreciated...

By the way I'm on Media Center 2005, Media Player 10...

zakxos
18th June 2005, 17:46
hello all people

can you tell me please, first, if this program works?
can anyone post a tutorial on how to use this program?

thank you!

thomasphoenix
18th June 2005, 19:26
It works! I did t2 full movie 7files and Batman begins trailer, Give me a couple of days ill try to come up with a tutorial!

Ice =A=
18th June 2005, 19:39
That would be reeeally appreciated!!! :)

MikeHunt79
20th June 2005, 01:08
Anyone have the drm2wmv.gui? the link on the rapidshare server doesn'y work.

And a tut would be great. :)

QQ
20th June 2005, 06:23
there are more than enough "tuts" in this very thread..

MikeHunt79
20th June 2005, 11:23
Yep, there are plenty of tut's, I'll see if I can use the english patched version of drm2wmv. Now... if anyone managed to download drm2wmv.gui before the link went dead, could you plz. e-mail it to me at mike_hunt_79uk <at> yahoo (dot) co <dot> uk

thomasphoenix
20th June 2005, 13:50
1) first download the drmv2clt.dll from the net(run a search for drmv2clt.dll) version 9.00.00.3250.
(check properties tab for version)copy it in wmp9 install Folder

2)then get the drm2wmv.zip(old version) file unzip it,youll get two folders drm2wmv1241 and drmdbg031

replace the 9th,10,11,12,lines of drmdbg.ini(inside drmdbg031) with this

drmv2clt=1;
drmclien=0;
blackbox=0;
indivbox=0;

3)replace drmdbg.exe with newer exe in drmdbg527(posted by jerry07)


4) in the drm2wmv1241 folder(which also contain folders drm1 and drm2) folder place drm2wmv_e.exe and delete all the other

files.except drm1 and drm2 of course

5)now run the drmdbg new version ,it'll open wmp browse your drm'ed file,itll open it, mp will search for the licence(if

outside u.s use a public proxy from http://www.publicproxyservers.com/page1.html) getting the licences may take some time and

may require some patches which mp9 might prompt u for(thankfully didnt take more than few moments for me), once the licence

comes u'll
get a msg box with the sid and kid codes and also saying its been copied to the clipboard,open notepad and paste the data
save it as <yourfilename>.key remember to save as all files not txt,save it inside drm2 folder inside drm2wmv1241 folder.

6)last and easy part, copy your file into the same folder "drm2wmv1241"(where the drm1 and drm2 folders are also located) and

drag and drop the media file on the drm2wmv_e.exe
now a dos window should pop up and show you the decoding progress.Itll will save a file called NODRM<your filename> in the

same dir.(its possible u might be able to skip the steps 1 and 2 with the newer drmdbg527,ie you might not need the drmv2clt)

this tut is for win2k

I hope its useful. :)

MikeHunt79
21st June 2005, 11:03
Cheers for the tut, I finally managed it. I actually skipped steps 1 and 2, and the video came out flawlessly! Thanks.

I'm using winxp sp2, wmp 9, drmdbg527, and drm2wmv_e. :)

somnus
23rd June 2005, 03:44
would anyone happen to know where I could find the newer version of drmdbg the link appears to be dead

thomasphoenix
23rd June 2005, 03:58
http://rapidshare.de/files/2110701/drmdbg527.rar.html seems to be working even now.

somnus
23rd June 2005, 04:34
Hmm strange........at any rate it does work now
Thanks

somnus
24th June 2005, 00:54
thomasphoenix

Which version of Media Player are you using?

JJFlash
24th June 2005, 01:55
Yeah, same question I wanted to ask :)

I can see this text string in the newer drmdbg:

drmdbg 2005/05/27 for "wmp v10.00.00.3802" by lark & inoyan

I have Win2K (SP4), and I'm using WMP v9.00.00.3250, my drmv2clt.dll version is 9.00.0000.2980, and the older drmdbg works fine.

When I launched drmdbg and managed to make WMP download some new license, the text I mentioned before appeared, then, as sooned as I clicked OK, I had some error message which basically said that it couldn't debug WMP.

It's not a big deal since the old drmdbg still works for me, but since thomasphoenix mentioned that he's using Win2K and not WinXP, I'm just curious about why the new drmdbg doesn't work for me :)

thomasphoenix
24th June 2005, 04:23
win2k has only windows media player 9 not 10,but the drm files and drmpatch from the ms side are drm 10 which have to be updated in any case before getting the licence for the file.

meilin
25th June 2005, 04:41
I kick out drm of this file:
http://pdl.warnerbros.com/wbmovies/batmanbegins/trailer/drm/trailer_super2_drm.wmv.zip
but when play it ,i got three active movie window!
the picture is
http://img154.echo.cx/img154/6813/err0mn.jpg

thomasphoenix
25th June 2005, 06:08
You're right same thing here but its a bug with windows media player i played the file in nero show time and it played with one window.:-)

meilin
25th June 2005, 06:25
hoho.
It is lucky that is not a big problem:)

philarete
25th June 2005, 10:38
Something usefull to know : if you want to play WMV HD files correctly and without a very high CPU usage, you need to throw away WMV.
All you need is a DVD software player handling DXVA or VMR, and the WMV9 codec installed.

My own experience on a notebook with 1080i files : upgrade to WMP10 and the two patches to handle WMV DXVA acceleration (which by the way implies that you can't decrypt anymore DRM-protected files, Microsoft has been very smart handling this problem : if you want the WMV DXVA acceleration, first apply our DRM-protection patch !).
When using WMP10, my CPU usage is permanently between 95 and 100%, and the video plays very slowly (aka 0.5x).
When using Sonic Cineplayer, my CPU usage goes from 0 to 100%, and the video plays normally (1x). :D

JJFlash
25th June 2005, 12:59
win2k has only windows media player 9 not 10,but the drm files and drmpatch from the ms side are drm 10 which have to be updated in any case before getting the licence for the file.
Oh.. okay. I see, now. Thank you very much for the explanation :)

jerry07
25th June 2005, 13:52
Something usefull to know : if you want to play WMV HD files correctly and without a very high CPU usage, you need to throw away WMV.
All you need is a DVD software player handling DXVA or VMR, and the WMV9 codec installed.

My own experience on a notebook with 1080i files : upgrade to WMP10 and the two patches to handle WMV DXVA acceleration (which by the way implies that you can't decrypt anymore DRM-protected files, Microsoft has been very smart handling this problem : if you want the WMV DXVA acceleration, first apply our DRM-protection patch !).
When using WMP10, my CPU usage is permanently between 95 and 100%, and the video plays very slowly (aka 0.5x).
When using Sonic Cineplayer, my CPU usage goes from 0 to 100%, and the video plays normally (1x). :D



the new drmdbg527 can use with DRMPATCH AND WMV DXVA..i am using it

philarete
25th June 2005, 16:09
Perhaps (personaly I am using WMP9 on my computer, so I am not encountering any problem).
I think it is going to be a race between Microsoft and some smart guys... :)

sns2015
25th June 2005, 23:24
Has anyone gotten this to work with WMP 10? I really don't want to have to reinstall XP on any of my computers (They all have WMP 10 and SP2). Or, is there an easier way to uninstalling WMP 10 without reinstalling windows?

philarete
25th June 2005, 23:46
When there is a will there is a way...
I remember reading that you could uninstall WMP10 easily. In fact if you are using XP's restoring system, it won't be a problem at all.
If you are not, it is going to be more tricky.
But google is your friend (and also the search function on this forum). :)

abudara
28th June 2005, 11:03
http://rapidshare.de/files/2562906/drmdbg621.rar.html

tomos
29th June 2005, 20:36
wow, finally got this working on a test vid. awesome :)

Yusaku
29th June 2005, 21:57
http://rapidshare.de/files/2562906/drmdbg621.rar.html
Very nice. It seems microsoft is playing cat & mouse game now :) (readme says something about hidden minor update from M$)

randystuff
30th June 2005, 01:52
Hey guys, I got stuff to work great but after using it for about 10 files my windows media player 9 just completely died. I mean completely died... reinstalling doesn't work at all which is quite bizarre. Does anyone know what is happening? I'm using WinXP and SP2 but I haven't changed the dll file for windows media player. Very strange...

Great work on the tutorial though. Great shite!

Maxxman
30th June 2005, 21:22
Why does'nt a dos box open when drmdbg621 is run?

kumi
1st July 2005, 07:16
wmpdbgsrc045.zip:

http://www5.mimima.com/link.php?ref=hC9nc6dVlq

edit: source code (I haven't checked it since I'm not a coder)... save to disk and rename it with a .ZIP extension.

crypto
1st July 2005, 08:14
kumi:
Cool 8)
p.s. @all, claims to be a torrent, rename to zip

SurgicTube
1st July 2005, 23:32
Why does'nt a dos box open when drmdbg621 is run?

Same question I have... I'm trying to get this to work with WMP 10 before trying to install WMP 9.

cooljoebay
2nd July 2005, 04:11
If you want to uninstall any version of media player ......open RUN and type:

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\wmp.inf,Uninstall

This will get rid of WMP10 easily. When you reboot you may see some kind of error. No problem just install as usual.

Who needs Restore...thats a big joke.

jerry07
2nd July 2005, 06:58
Same question I have... I'm trying to get this to work with WMP 10 before trying to install WMP 9.

no DOSBOX in NEW VERSION

cooljoebay
2nd July 2005, 16:11
Does anyone know why after upgrading up and down more than once you start getting 'unknown error' popup with WMP10 when trying to just open the DRM video?

Maxxman
3rd July 2005, 11:07
no DOSBOX in NEW VERSION

So how do you get it to work then? how do you display the KID/SID info?

tomos
3rd July 2005, 12:36
it just saves it in a .key file doesnt it?

BennyS
3rd July 2005, 16:52
Those 2 new drmdbg will pop-up message on screen when they found
the sid/kid. and it automatically ctrl+c for you

so just open notepad and paste it after they pop-up some value

the new version work with wmp10

no need to downgrade to wmp9

B.

randystuff
5th July 2005, 03:50
If you want to uninstall any version of media player ......open RUN and type:

RunDll32 advpack.dll,LaunchINFSection %windir%\INF\wmp.inf,Uninstall

This will get rid of WMP10 easily. When you reboot you may see some kind of error. No problem just install as usual.

Who needs Restore...thats a big joke.

I ran that command and it totally ripped WIndows Media Player from my XP and now I can't install it back on because of some Windows Incompatibility. I've tried reinstalling with the other versions but it doesn't work. Can someone please help me!

bkf.1
5th July 2005, 15:40
Hello, please can you somebody summarize this thread? You know make some step-by-step tutorial ;) Something like "how to kick DRM from WMV" ;)

buzzqw
5th July 2005, 17:23
@bkf.1

just at page eleven (1 only page before this)

read the post of thomasphoenix

and next time try search

BHH

bkf.1
5th July 2005, 17:51
@bkf.1

just at page eleven (1 only page before this)

read the post of thomasphoenix

and next time try search

BHH
Ok sorry I have found it just after I've submited my post :/ Everything is going fine but when I run decrypted video in WMP 6.4 then error message appear:

AppName: mplayer2.exe AppVer: 6.4.9.1125 ModName: wmv8ds32.ax
ModVer: 8.0.0.4000 Offset: 000135e4

and when I run decrypted video in WMP 10 then some color madness appear (it looks like corupted JPG file). It seems drm2wmv_e.exe is not compatible with WMP 10 because new drmdbg621 is compatible with WMP 10;) I don't know :(

JiJi
6th July 2005, 10:39
drmdbg621 works with WMP10? Do we need to change/add anything after initial install? (ie, swithcing DLLs on previous drmdbg versions.)
__________________

@bfk.1 -- Not sure if that's being caused by WMP10 (since I'm still using WMP9), but the most likely cause might be a corrupt/incomplete file.

With the earlier tools, where you needed to input the KID and SID manually, the problems I ran into would be incorrect SID (mistyped), resulting in garbled video/sound.

Now, with recent tools (527;621 -- copies KID/SID to clipboard), if decrypted file is garbled, it could be due to corrupt or incomplete download/file.

Maxxman
6th July 2005, 18:21
Where can you download some test files like the batman trailer? :confused:

kss3
6th July 2005, 19:22
Hello. I am the beginner of PC and I am a Japanese. I followed the link of WEB and arrived at this site. I read 11-page post of thomasphoenix. and although I think that I worked as written there, if I use drmdbg.exe(drmdbg621) and reproduce a DRM file on WMP9, WMP will be completed at the moment. Why ?? I am using the version 9.00.00.3075 of WMP9. Would you teach plainly very much excuse me?

My PC (Win XP home edition Version 2002 Service Pack 1)

sns2015
6th July 2005, 19:32
I followed the tutorial on page 11 (with the new version of dmbrg) using WMP 10. I opened a file that I know has DRM (a WMVHD file off of a DVD) and a popup saying that it has been copied never showed up. Do I just have to wait a while for it show up or does it not work with WMVHD files from DVDs (even though people got it to work with Terminator 2...)? Because of WMP 10 I have to use the most recent DLL for drmv2clt (because the thing is immediately overwritten when I open WMP10). Any help is appreciated.

Maxxman
6th July 2005, 19:56
I followed the tutorial on page 11 (with the new version of dmbrg) using WMP 10. I opened a file that I know has DRM (a WMVHD file off of a DVD) and a popup saying that it has been copied never showed up. Do I just have to wait a while for it show up or does it not work with WMVHD files from DVDs (even though people got it to work with Terminator 2...)? Because of WMP 10 I have to use the most recent DLL for drmv2clt (because the thing is immediately overwritten when I open WMP10). Any help is appreciated.


likewise, nothing happens, no screen popup, no keys copied so you can paste them. :confused:

JiJi
6th July 2005, 22:47
...I guess I'm sticking with WMP9. :|

Sounds like those of you using WMP10 are having trouble...

bkf.1
8th July 2005, 11:38
drmdbg621 works with WMP10? Do we need to change/add anything after initial install? (ie, swithcing DLLs on previous drmdbg versions.)
__________________

@bfk.1 -- Not sure if that's being caused by WMP10 (since I'm still using WMP9), but the most likely cause might be a corrupt/incomplete file.

With the earlier tools, where you needed to input the KID and SID manually, the problems I ran into would be incorrect SID (mistyped), resulting in garbled video/sound.

Now, with recent tools (527;621 -- copies KID/SID to clipboard), if decrypted file is garbled, it could be due to corrupt or incomplete download/file.
At first, thanx for your help so soon;) File is not corrupted for sure but I would like to download some test file. BTW I will try to unninstall WMP10, install WMP9 and try it again. I will report... ;)

kris2pe
8th July 2005, 14:02
I tried following the steps on part 11 of this forum but I wonder how am I going to get drmdbg527. Coz the once posted in the forum are all dead? :helpful:

Wilbert
8th July 2005, 19:18
I attached drmdbg527 for you. It has to be approved of course :)