┌-───────┐ ┌-────┐  ┌-────┐  ┌-─┬──┐
└──┤  ├─-┘ |   ·-┤  │  │  │  │  ·  │
   │  │    ├──·  │  │  · ─┤  │  .  │
   │  :    └─────┘  └──┴─-┘  └──┴─-┘
   |  .  The Sabotage Rebellion hackers
   :  ·       Proudly Presents:
   .    ╔════─────────────────────────--··
   ·    ║ Natura Sound Therapy 1.5
        │
        │ Tutorial[RUS]
        │
        | 26-05-2002
        :
        . tsrh-tutor-nst15arm.zip
        ·

==============================================================================
  [ Target     ]:  ................................ Natura Sound Therapy 1.5
  [ URL        ]:  ................. http://www.opticalsweets.com/natura.htm
  [ Packer     ]:  ......................................... Armadillo xx.xx
  [ Protection ]:  ....................................... Serial, Timelimit
  [ Tools      ]:  .................... Hiew, IDA 4.21, Armadillo Killer 1.3
==============================================================================



        Åα¿óá, ¡áα«ñ.


       æ¬áτá½  ∩ "Natura Sound Therapy 1.5".. Γδα¬-Γδα¬.. Armadillo :(.. ¡Ñ
     »«¡∩Γ¡«  ¬á¬«⌐  óÑαß¿¿  :)...  «¬¿, ¿º Γπ½º«ó »α«Γ¿ó φΓ«⌐ úáñ«ßΓ¿ ÑßΓ∞
     "Armadillo deprotector 1.1" ¿ "Armadillo Killer 1.3".
       Åπ߬áε »Ñαóπε - «¡á τÑú«⌐-Γ« «αÑΓ í½áú¿¼ ¼áΓ«¼.. ¡π ñá ½áñ¡« - ¼«ªÑΓ
     «¡á  »«ñ  XP  αáí«ΓáΓ∞  ¡Ñ  σ«τÑΓ..  ºáΓ«  óΓ«αá∩  ºáαáí«Γá½á  ¿  ñáªÑ
     unpacked.exe ß«ºñá½á :).. »π߬áε... Ñ»αßΓ - απúáÑΓß∩ ¿ óßÑ Γá¬«Ñ :(...
     ú½∩¡π½  ó  hiew - Γá¼ ¡Ñ entry point, á ½áªá ¬á¬á∩-Γ« :).. ½áñδ. íπñѼ
     »αáó¿Γ∞..  úαπªπ  ó  IDA,  τΓ«  íδ  ¡á⌐Γ¿  oep..  ñ¿ºáß¼¡π½«ß∞.. á ¬á¬
     ß«íßΓóÑ¡¡«   ú«ó«α∩  φëà  ßá¼δ⌐  oep  óδú½∩ñ¿Γ?..  »α«úá  ¡á  ñѽ∞Σ∩σ
     ¡á»¿ßá¡¡á  ¿  φΓ«  αáñπÑΓ  :)..  íδßΓα« ¬«¼»¿½∞¡π½ ñѽ∞ΣÑ⌐ «ñ¡π »πßΓπε
     Σ«α¼«τ¬π ¿ Γ«ªÑ IDA «íαáí«Γá½.. ¿¼ÑѼ:

     ----- test.exe IDA listing -----

         CODE:00460288               public PROGRAM
         CODE:00460288 PROGRAM       proc near
         CODE:00460288               push    ebp
         CODE:00460289               mov     ebp, esp
         CODE:0046028B               add     esp, 0FFFFFFF4h
         CODE:0046028E               mov     eax, offset dword_4600F8
         CODE:00460293               call    @Sysinit@@InitExe$qqrv
         CODE:00460298               mov     eax, ds:off_461F98

     ----- test.exe IDA listing -----

       ó«Γ  Γᬠ »α¿¼Ñα¡«  ñ«½ªÑ¡  óδú½∩ñÑΓ∞  oep... ºáσ«ªπ ó »Ñαóδ⌐ call ¿
     ó¿ªπ:

     ----- test.exe IDA listing -----

         CODE:004060F4 @Sysinit@@InitExe$qqrv proc near
         CODE:004060F4               push    eax
         CODE:004060F5               push    0
         CODE:004060F7               call    GetModuleHandleA_0
         CODE:004060FC               mov     edx, offset unk_4610A8
         CODE:00406101               push    edx
         CODE:00406102               mov     ds:hInstance, eax
         CODE:00406108               mov     [edx+4], eax
         CODE:0040610B               mov     dword ptr [edx+8], 0
         CODE:00406112               mov     dword ptr [edx+0Ch], 0
         CODE:00406119               call    @SysInit@_16393 
         CODE:0040611E               pop     edx
         CODE:0040611F               pop     eax
         CODE:00406120               call    @System@@StartExe$qqrv
         CODE:00406125               retn
         CODE:00406125 @Sysinit@@InitExe$qqrv endp ; sp = -4

     ----- test.exe IDA listing -----

       áúá!  óδºδóáÑΓß∩  GetModuleHandleA  - ºá φΓ« ¿ ºáµÑ»¿¼ß∩ :).. ¿ΘѼ ó
     αá߻ᬫóá¡¡«¼  .exe  ó맮ó  GetModuleHandleA...  óδºδóáÑΓß∩ óßÑú« «ñ¿¡
     ࠧ:

     ----- unpacked.exe IDA listing -----

         CODE:00404B9C sub_404B9C    proc near
         CODE:00404B9C               push    eax
         CODE:00404B9D               push    0
         CODE:00404B9F               call    GetModuleHandleA
         CODE:00404BA4               mov     edx, (offset asc_41A098+4)
         CODE:00404BA9               push    edx
         CODE:00404BAA               mov     ds:dword_41B4B4, eax
         CODE:00404BB0               mov     [edx+4], eax
         CODE:00404BB3               call    sub_404B50
         CODE:00404BB8               pop     edx
         CODE:00404BB9               pop     eax
         CODE:00404BBA               call    sub_40306C
         CODE:00404BBF               retn
         CODE:00404BBF sub_404B9C    endp

     ----- unpacked.exe IDA listing -----

φëà ¬πß«¬ ó ßó«ε «τÑαÑñ∞ óδºδóáÑΓß∩ ¿º:

     ----- unpacked.exe IDA listing -----

        CODE:00419BC8               push    ebp
        CODE:00419BC9               mov     ebp, esp
        CODE:00419BCB               add     esp, 0FFFFFFF4h
        CODE:00419BCE               mov     eax, offset dword_419B18
        CODE:00419BD3               call    sub_404B9C
        CODE:00419BD8               jmp     short loc_419BE4

     ----- unpacked.exe IDA listing -----

       φΓ«  ¿  ÑßΓ∞  ¡áΦ  ¿ß¬«¼δ⌐ oep: 0419BC8h-0400000h(ImageBase)=019BC8h
     »α«»¿ΦѼ Ñú«  ß  »«¼«Θ∞ε  Hiew  ¿ »α«íπѼ ºá»πßΓ¿Γ∞ - óßÑ αáí«ΓÑΓ. ¡ÑΓ
     ¡áú-ß¬α¿¡á, ¡ÑΓ Γá⌐¼½¿¼¿Γá. ¼δ ßñѽ὿ φΓ«!


     p.s
       Armadillo Killer 1.3 ¼«ª¡« ßΓ∩¡πΓ∞ ß http://protools.cjb.net

     p.p.s
       æ»αáΦ¿óá⌐ΓÑ, τΓ« ¡Ñ »«¡∩Γ¡«. 󫺼«ª¡« »«½πτ¿ΓÑ «ΓóÑΓ :)

  ---------------------------------------------------------------------------
   Nitrogen ([email protected])                                    [TSRh TeaM]
                                                  26.05.2002, 23:20 (gmt +5)

                                   ▄
      ·                            ██▄
      :     █▄               ▄▄█▀▀▀████▄  ▄▄▄▄▄▄▄▄▄            ▄    ▄▄▄▄▄
 ···──│·┐   ███▄           ▄████ ░ █▓▓▓█  █████   ██         ▄██  ░ █████
   ··--───-·█████·──════--·█▓▓▓█·░·█▒▒▒█··█▓███·░·▐██▄·-─-·▄████·░░·█████·-─··
     ··─┘   █▓███ ░        █▒▒▒█ ░ █▓▓▓█  █▓▓██ ░  ████    █▓███ ░░ █▓███
      │  ▄  █▓▓▓█  ▄       █░░░█ ░  ▀███  █▓▓▓█ ░░ █▓▓█  ░ █▓▓▓█ ░░ █▓▓▓█
      │  ██▄█▒▓▓█▄██       █▒▒▒█ ░    ▀█  █▒▓▓█ ░░ █▒▒█  ░ █▒▓▓█ ░░ █▒▓▓█
      │  ██▀█▒▒▒█▀██       █▓▓▓█▄▄▄▄▄     █▒▒▒█ ░░ █▓▓█  ░ █▒▒▒█ ░  █▒▒▒█
      |  ▀  █░░░█  ▀       ████████████▄  █░░░█ ░░ ████  ░ █░░░█  ▄ █░░░█
      :     █   █ Nitrogen  ▀▀██████▓▓▓█  █   █ ░░ ██▀  ░░ █   █ ██ █   █
      :     █░░░█  [TSRh]  ▄       █▒▒▒█  █░░░█ ▄▄▄█▀  ░░  █░░░█ ▀  █░░░█
      .     █▒▒▒█ ░    ▄█  ██▄   ░ █░░░█  █▒▒▒█    ██▄  ░░ █▒▒▒█  ░ █▒▒▒█
      .     █▓▓▒█ ░  ▄███  ████▄ ░ █▒▒▒█  █▓▓▓█ ░░ ████  ░ █▓▓▓█ ░░ █▓▓▓█
      ·     █▓▓▓█ ░ █▓▓▓█  █▓▓▓█ ░ █▓▓▓█  █▓▓▓█ ░░ █▓▓▓█ ░ █▓▓▓█ ░░ █▓▓▓█
    ··─────·███▓█·░·█▒▒▒█··█▒▒▒█·░·█████··█▓███·░░·█▒▒▒█·░·█▓███·░░·█▓███·──··
      ·      ████ ░ █▓▓▓█  █▓▓▓█ ░ ████▀  ███▀  ░  █▓▓▓█ ░ █████ ░  ███▀
      ·       ▀▀█▄▄▄████▀  ▀████▄▄▄█▀▀    █▀       █████   █████    █▀
                             ▀██                    ▀███
                               ▀                      ▀█


        ▄┌█───────────────────────────────────────────────────────────┐▄
    ─ ── : ..:: | :::..      ..:::RELEASE.iNF0:::..      ..::: | ::.. : ── ─
    │░░░░└───────────────────────────────────────────────────────────█┘░░░░│
  ┌─│───────────┘                                              └───────────│─┐
  │█:                                                                      :█│
  │█        Target: [ Natura Sound Therapy 1.5                          ]   █│
  │█           URL: [ http://www.opticalsweets.com/natura.htm           ]   █│
  │█                                                                        █│
  │█        Writer: [ Nitrogen                                          ]   █│
  │█          Type: [ Tutorial                                          ]   █│
  │█      Language: [ Russian                                           ]   █│
  │█                                                                        █│
  │█  Release Date: [ 26-05-2002                                        ]   █│
  │█  Release Name: [ tsrh-tutor-nst15arm.zip                           ]   █│
  │█                                                                        █│
  │█:                                                                      :█│
  └─│──────────────────────────────────────────────────────────────────────│─┘
    │  █████████▓▓▓▓▓▓▓▓▓▒▒▒▒▒▒▒▒▒▒▒░░░░░░░░▒▒▒▒▒▒▒▒▒▒▒▓▓▓▓▓▓▓▓▓█████████  │
  ┌ ─ ── ────────────────────────────────────────────────────────────── ── ─ ┐
  ││ [Target.Description]                                                   ││
  ││  ─ ── ─── ──────                                                       ·:
  └─--··
 
       NATURA  Sound  Therapy  software  features  sounds of ocean waves, a
     babbling  brook,  a thunderstorm, and a forest evening. Each sound has
     its own volume control and sounds can be mixed with each other to form
     unique  combinations. These nature sounds have been digitally recorded
     in  stereo sound. NATURA also offers brainwave frequency patterns that
     can  be  added  to the nature sounds or played on their own, enhancing
     mental focus and producing states of meditation and relaxation. NATURA
     includes  a  kaleidoscope visualization as well which can be turned on
     and off.
 
  ┌┘                                                                        └┐
  ││                                                                        ││
  └ ─ ── ────────────────────────────────────────────────────────────── ── ─ ┘
  │   █████████▓▓▓▓▓▓▓▓▓▒▒▒▒▒▒▒▒▒▒▒░░░░░░░░░░▒▒▒▒▒▒▒▒▒▒▒▓▓▓▓▓▓▓▓▓█████████   │
  └────────────│───────────────────────────────────────────────│─────────────┘
               │                 [TSRh.Members]                │
               │                 ──────┐┌──────                │
  ┌─│──────────┘                       ││                      └───────────│─┐
  │█:                                  └┐                                  :█│
  │█:    [ B-$hep     ] .............  └┐  [ founder, cracker         ]    :█│
  │█:    [ OxEn       ] .............  └┐  [ founder, cracker         ]    :█│
  │█:    [ Nitrogen   ] .............  └┐  [ cracker, coder           ]    :█│
  │█:    [ EGOiST     ] .............  └┐  [ cracker                  ]    :█│
  │█:    [ aZZaZZeLLo ] .............  └┐  [ cracker, design          ]    :█│
  │█:    [ Fox        ] .............  └┐  [ cracker, design          ]    :█│
  │█:    [ ByTESCRK   ] .............  └┐  [ cracker                  ]    :█│
  │█:    [ FAN        ] .............  └┐  [ cracker, trial member    ]    :█│
  │█:    [ Auric      ] .............  └┐  [ cracker, trial member    ]    :█│
  │█:    [ Koba Yashi ] .............  └┐  [ cracker, trial member    ]    :█│
  │█:    [ QIce       ] .............  └┐  [ cracker, trial member    ]    :█│
  │█:                                  ││                                  :█│
  └─│──────────────────────────────────────────────────────────────────────│─┘
    | ·                       .o0o. CONTACTS .o0o.                       · |
    └─┼··                                                              ··┼─┘
      │  [ WEB Site   ] .............  ││  [http://www.kickme.to/tsrh ]  │
      |  [ E-mail     ] .............  └┐  [[email protected]              ]  |
      :  [ IRC        ] .............  ││  [DAL.net, #tsrh            ]  :
      ·  ──────────────────────────────┘└──────────────────────────────  ·
      ·                                                                  ·