Help with PowerDVD - scrambled dll files with new version
 

Hi guys,

I had a handle on the first release of PDVD for HD and Blu ray... however they have added more protection. This time they have somehow obfuscated/scrambled the dll files so that Olly can not be examined.

I saw them partially decoded and attempted to dump the module but again it must have been incomplete as I can not load those either.

Power DVD version is 7.3 with MK3 keys.

Last time I stopped all the clear memory routines, then used a memory sniffer to find the keys (I know I was being lazy but it worked).

Would someone please take a look and push me in the right direction?

Thanks

I have attached a link to text file showing the decoded dll file. Just can't make modifications to it. I did tell the PDVD provided MSVCR71.dll to RETN when V@YAXPAX@Z = memfree.

Anyone interested in helping decode the MK4 keys are welcome to join in.

For those looking to assist. (decoded) HDDVDAdvNav.dll is called from HWCtrlMgr.dll.

Cyberlink Powerdvd Ultraluxe v7.5 Multilingual
 

don't waste ur time my friend :rolleyes: . this is the newer verstion of it
Cyberlink Powerdvd Ultraluxe v7.5 Multilingual >>>> and it is Full

DownloadLink:
http://rapidshare.com/files/51099916/CPU75MS.Lemon

1) Open it with Winrar.
2) Password : www.lemonshare.net
3) Enjoy!
there is more than it to study ;) ......good luck :)

Where did v7.5 come? v7.3 3319a is the latest available publicly.

Hehehehe :p
My friend did u download the link or what :confused: . it will prove what about u wonder :D ..
try it. and if there anything be in touch ;) ....

Downloaded.

Version says 7.2 Ultra. Menus work for Transformers (decoded), no video.

Does not look like 7.5. Old Icon too.

Am I missing something?

The original 7.2 did not encrypt their dll files... whereas 7.3 does. And for some reason when it's decoded in memory I was unsuccessful dumping them and then loading them into olly again.

I wish Olly 2 was complete. *sigh*

Ok my freind . BUT can u upload the progam to anthor upload site , rapidshare NOT SUPPORT IN MY COUNTRY.
i mean the program itself or give me direct linke to it.
i will try it .
thanks....

you are requesting a link to the latest PDVD 7.3, or the 7.2 you posted earlier?

no i maen "PDVD 7.3" . upload it some where ....

maltese, did you get anywhere?

the newest builds of powerdvd disable playback of HDDVD/BR from Hard Drive

now, i got it down for hddvd to 1 file the HDDVDNav.ax
this file looks encrypted/scambled

im sure i prob could find the damm check if playback is from HARD DRive if i could get this .ax/dll opened :)

could you decrypt it, like you did the HDDVDAdvNav.dlll?

thanks

Mitch

Sorry... I was out of town. I take it you are looking to bypass the Hard Drive limitation now in 3319f?

Even if I can decode it, it seems I'm having problems saving it.

Question...

If I have a program running which has an encrypted/packed dll, and then you dump with LordPE (just the dll), how would you go about fixing the dumped dll so you could load it in Olly?

i think i getten out from this conversion . Ok no problem.
so bye.....

Pm'd you the link for 3319f. Should work for your country. Just install a previous version, then load this one on top. Use the same key.

maybe we can process patch it....

this file HDDVDNav.ax has the hard drive check in it (or something)
when i replace an older version say from 3319a, it works on hard drive
oddly the file sizes are the same, but they dont match in content
since this is a directshow filter, id think we should be able to load it, and dump it, and get it repaired...

mitch

I'm building a new PC this weekend. I'll be able to pick this up on Monday.

today they released a new build 3516, the patch is on thier site
downloading it now...

now im told, the option to play from HD is completly removed
ill look at it, someone posted the play from hd is greyed out
but i think its always greyed out, till it sees the right directory
structure...
course they could have removed all the code to do it, and we'll never get play from hd back

im sure they didnt want to do this, they where forced to by the AACSLA or some evil dvd consortium

mitch

ok, i got the new build

what happens is, when u browse the directories for a HDDVD the OK Button stays grey

so, in the browse for files, maybe we can figure out what its looking for

HDDVD_TS

something

mitch

Since it works for SD movies, there has to be a check to see if a HD file like EVO or m2ts is selected.

I recall a section of the code analyzing what to do based on the media. This was before the Hard Drive option was tampered with.

Guess they wanted us working on non AACS things to keep us busy re-enabling crippled features.

Water cooling is here. Will take time to install new PC and start again with PD.

does ntdvm.exe mean anything? I changed 2 bytes both to 00 00 that were different at the beginning of a normal dll and PD encrypted dll.

Olly could open but it is of ntdvm.exe and not the decoded dll I see when paused during debugging.

DLL's are not my area of specialty.

i dont know if this help but this is the SN of our program
Cyberlink PowerDVD Ultra Deluxe v7.3.3319

DX9LJ-NF9LP-G2NUB-DL8EB-Z63E2-X9X3Z

I wish i could debug the thing...

the directory check is in the main program, in powerdvd.exe

which is not encrypted too...

but i cant debug, my olly crashes

mitch