Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Cracking Audio Editor Pro Vers.2.9.5
  • schumbag
    Posts: 23
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack1.jpg
    About Software

    Audio Editor Pro 2.95 is a multifunctional audio editor application that can perform a variety of
    editing on your audio files. There are a number of interesting functions presented in this application, including
    filtering, audio effects, format conversion and more. The application also has more than 20 sound
    interesting effects and 6 filters.

    Site: http://www.mightsoft.com/
    Price: US$ 39.95
    OS: Win 98/ME/2000/XP/2003/Vista

    Lifetime & protection software

    This software is packed with protection:
    [-] The life span is 30 days.
    [-] Register form which will appear on if not registered within 30 days.
    [-] If the lifetime has expired, then the software must be registered by entering the code
    true. Software could not be used if the key does not match filled.
    [-] Software is encrypted with a Packer.
    [-] Software CONVERT and ripping only allow a maximum of 4 files for non-register
    If the protection is removed, then the user can use this software as been registered.

    Reversing Steps

    Previously, Crackers Kit Prepare the following first:
    [-] Peid v.0.94
    [-] DilloDIE v.1.6
    [-] PE Explorer V1.99
    [-] SND Olly v.1.10
    [-] Trial Reset v.3.0

    Step 1. Looking for information protection / Packer
    [tools: Peid v.0.94]

    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack2.jpg
    [-] Open PeiD, then Drag & Drop
    areditor.exe Packer who was detected by PEiD
    [-] Software is protected by
    Armadillo 3.78 - 4.xx

    Step 2. Unpacking the process [Tool: dilloDIE v.1.6]
    As a reference of In my experience,
    software that is protected
    by Armadillo
    should be unpacked
    before passing the
    permitted use.

    Let us direct Unpack
    this software.

    With dilloDIE v.1.6,
    "Unpack" the fourth
    program execution
    contained in the directory http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack3.jpg


    C: \ Program Files \ Mightsoft \ Audio Editor Pro before the registration period runs out.
    [-] Areditor.exe
    [-] Areditor16.exe
    [-] Arconverter.exe
    [-] Arripper.exe


    C: \ Program Files \ Mightsoft \ Audio Editor Pro before the registration period runs out.
    [-] Areditor.exe
    [-] Areditor16.exe
    [-] Arconverter.exe
    [-] Arripper.exe

    Unpacking by dilloDie results will be save in the same directory with the name
    [-] Areditor.exe.dDIE.exe
    [-] Areditor16.exe.dDIE.exe
    [-] Arconverter.exe.dDIE.exe
    [-] Arripper.exe.dDIE.exe

    Kempat file at the top will crack it one by one.

    Step 3. Rid of protection [Tool: PE Explorer V1.99, SND Olly v.1.10]
    Once unpacked, the software still displays the Nag Screen, this protection - it is, etc.. It is very
    sucks. Let us remove one by one.

    Eliminate Nag Screen - Registration Form on areditor.exe.dDIE.exe & areditor16.exe.dDIE.exe
    Open areditor.exe.dDIE.exe or areditor16.exe.dDIE.exe with PE Explorer V1.99, do the
    below:

    [-] Click the image, / Ctrl + R to open RESOURCE EDITOR.
    [-] You will find on the Registration Form found on the RESOURCE dialog.158
    DIRECTORY "Dialogue".
    [-] Right-click and choose Delete above dialog.158 Resource / Shift + Ctrl + D.
    [-] Save the file has been modified, for example with the name and open the file areditorCrack.exe
    execution.
    [-] PE Explorer is not only able to dispose of unwanted form, but can also
    change the icons, images, and text labels.
    Listen
    Read phonetically
    Rate translation


    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack4.jpg
    OK, Registration Form has been lost. There are two problems again.

    Protection eliminates restrictions and ripping CONVERT
    If the software is not registered properly then the user can only perform CONVERT and
    Ripping a maximum of 4 files
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack5.jpg
    Both the audio converter and CD ripper to limit the maximum file number = 4

    This protection can be found on arconverter.exe.dDIE.exe and arripper.exe.dDIE.exe

    A. With SND Olly change program flow arconverter.exe.dDIE.exe
    - Double-click the address that was originally JNZ short 004014C1 004014D1 004014D1 change to jmp short
    - Double-click the address originally 0040499E JNZ short change to jmp short 00,404,980 00,404,980
    - Right-click Copy to executable> All modifications> Copy All.
    - Right click and select Save Backup> data to the file. Save the crack becomes arconverter.exe
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack6.jpg
    B. With SND Olly change lanes arripper.exe program dDIE.exe
    - Double-click the address of the original 00406611 00406621 JNZ short turn into short jmp 00406621
    - Double-click the address originally 004084FF change 0040851D JNZ short a short jmp 0040851D
    - Right-click Copy to executable> All modifications> Copy All.
    - Right click and select Save Backup> data to the file. Save the crack becomes arripper.exe
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack7.jpg
    see???No More NAG SCREEN, No more Track limit

    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack8.jpg
    Additional Notes About Armadillo Protection

    Armadillo Software also protect the Windows system registry. He will create a registry string
    the registry database. If the trial period runs out before the unpacked with dilloDIE, then you will
    quite complicated with the registration request under this
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack9.jpg
    If the message above has appeared
    http://i786.photobucket.com/albums/yy144/chempreng/cakill_crack10.jpg
    unpacker dilloDIE also can not
    do much. There are ways to
    scanning of
    this protection and eliminate it,
    ie with TRIAL RESET tool.

    Here I use the Trial Reset 3.0.
    [-] Select and Click Armadillo protection
    "SCAN"
    [-] Once detected, select protective
    to delete and click
    right and "CLEAR KEY"
    [-] Scan Repeat again for
    ensure all protection Armadillo in the registry database had been deleted.

    FINISHED!!!

    Original Posting From :
    http://devilzc0de.org/forum/thread-1581.html
    (indonesian version language)

    NOTE for LiquidPoison
    who had met me in the irc.evilzone.org channel #iExploit
    I want to see yourskill Do not be arrogant, because science is not as widespread as you think.
  • m0rph
    Posts: 332
    Very nice paper dude, how long have you been reversing?
    while( !(succeed = try() ) );
  • Sh3llc0d3
    Posts: 1,910
    Nice paper!

    NOTE for LiquidPoison
    who had met me in the irc.evilzone.org channel #iExploit
    I want to see yourskill Do not be arrogant, because science is not as widespread as you think.



    We don't have a member called LiquidPoison, just so you know :)
  • schumbag
    Posts: 23
    @sh3llc0d3
    right,thank's before
    @m0rph
    just 20 minutes :)
  • Xin
    Posts: 3,251
    Good paper :)
    Xin