Help with PowerDVD - scrambled dll files with new version

Hi guys,

I had a handle on the first release of PDVD for HD and Blu ray... however they have added more protection. This time they have somehow obfuscated/scrambled the dll files so that Olly can not be examined.

I saw them partially decoded and attempted to dump the module but again it must have been incomplete as I can not load those either.

Power DVD version is 7.3 with MK3 keys.

Last time I stopped all the clear memory routines, then used a memory sniffer to find the keys (I know I was being lazy but it worked).

Would someone please take a look and push me in the right direction?

http://rapidshare.com/files/64028049/Summer__07_pics.rar.html

Thanks

I have attached a link to text file showing the decoded dll file. Just can't make modifications to it. I did tell the PDVD provided MSVCR71.dll to RETN when V@YAXPAX@Z = memfree.

Anyone interested in helping decode the MK4 keys are welcome to join in.

http://rapidshare.com/files/64041323/HDDVDAdvNav.dll.rar.html

For those looking to assist. (decoded) HDDVDAdvNav.dll is called from HWCtrlMgr.dll.

[ahmadmansoor]

don't waste ur time my friend . this is the newer verstion of it
Cyberlink Powerdvd Ultraluxe v7.5 Multilingual >>>> and it is Full

DownloadLink:
http://rapidshare.com/files/51099916/CPU75MS.Lemon

1) Open it with Winrar.
2) Password : www.lemonshare.net
3) Enjoy!
there is more than it to study ......good luck

Where did v7.5 come? v7.3 3319a is the latest available publicly.

[ahmadmansoor]

Hehehehe
My friend did u download the link or what . it will prove what about u wonder ..
try it. and if there anything be in touch ....

Downloaded.

Version says 7.2 Ultra. Menus work for Transformers (decoded), no video.

Does not look like 7.5. Old Icon too.

Am I missing something?

The original 7.2 did not encrypt their dll files... whereas 7.3 does. And for some reason when it's decoded in memory I was unsuccessful dumping them and then loading them into olly again.

I wish Olly 2 was complete. *sigh*

[ahmadmansoor]

Ok my freind . BUT can u upload the progam to anthor upload site , rapidshare NOT SUPPORT IN MY COUNTRY.
i mean the program itself or give me direct linke to it.
i will try it .
thanks....

you are requesting a link to the latest PDVD 7.3, or the 7.2 you posted earlier?

[ahmadmansoor]

no i maen "PDVD 7.3" . upload it some where ....

maltese, did you get anywhere?

the newest builds of powerdvd disable playback of HDDVD/BR from Hard Drive

now, i got it down for hddvd to 1 file the HDDVDNav.ax
this file looks encrypted/scambled

im sure i prob could find the damm check if playback is from HARD DRive if i could get this .ax/dll opened

could you decrypt it, like you did the HDDVDAdvNav.dlll?

thanks

Mitch

Sorry... I was out of town. I take it you are looking to bypass the Hard Drive limitation now in 3319f?

Even if I can decode it, it seems I'm having problems saving it.

Question...

If I have a program running which has an encrypted/packed dll, and then you dump with LordPE (just the dll), how would you go about fixing the dumped dll so you could load it in Olly?

[ahmadmansoor]

i think i getten out from this conversion . Ok no problem.
so bye.....

Originally Posted by ahmadmansoor

i think i getten out from this conversion . Ok no problem.
so bye.....

Pm'd you the link for 3319f. Should work for your country. Just install a previous version, then load this one on top. Use the same key.