4 ms·

Exploit code is here - http://pastie.org/753699 http://pastie.org/753699

• barrkel 17y ago
  It looks like the hard work is done by a different script, mobidedrm by Darkreverser, and this script just pulls the file path out of a running instance of the Kindle PC app. I presume the Kindle app is creating a temporary file on disk which mobidedrm is then able to reverse, rather than decrypting the original file, otherwise there'd be no point in writing a Win32 debugger in Python. (It's also pulling out a couple of more bits of info.) The technique is very sensitive to the version of the Kindle app. It's currently using the hash of the executable to choose which breakpoint locations to set and hook, which are hard-coded virtual addresses.
  • lemming 17y ago
    I believe what the script is actually doing is extracting the Mobipocket PID - K4PC uses a different PID for each book.