A. per Real/rhapsody there is DRM info stored on the actual hardware not just the firmware on the player
"DRM info" as in a unique key used for DRM purposes is most likely stored in one of the flash memories, yes.
B. The diffrent DRM used on the R is called Helix and Its quite open source "helixcommunity.org" this portion of the DRM may be the thing that diffrent about the pre/bootloader and more than likely we can get some help from the helix community if this is the case .
I don't understand why you believe the DRM implementation has anything to do with the problems we have to run our bootloader on the R models. I've told you several matters that we have problems with. Can you please tell me how the particular DRM implementation changes any of that?
C. I think the helix DRM may be the diffrence thats causing the plaintext trick not to work
No. Go back and read up on what the "plaintext trick" is. It has nothing
to do with DRM.
D. I have and will keep on trying any new firmware on my E250R and if any one has a idea they want to try on my player that may help get us moving along I will gladly use my player to get us there .
Here's a few ideas to start with:
1 - dump a boot rom from an R model
2 - compare the boot roms we have and figure out what the differences are
3 - figure out how you can convince your R model to accept a custom-patched version of the BL to force it to accept the "plaintext" trick again (we have such a one to test with)
4 - bring your own ideas and research and figure out how to run custom code