컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� 栢栢栢� 栢栢栢� 栢栢栢芳 栢栢栢芳 栢栢栢栢� 栢� 栢芳 栢� 栢� 栢� 栢�袴栢� 栢�袴谷芳 栢�袴袴� 栢�袴袴� 훤谷排袴� 栢� 栢栢� 栢� 휩芳 栢�� 栢栢栢�� 栢� 栢� 栢栢栢芳 栢栢芳 栢� 栢� 栢�栢� 栢� 휩栢排� 栢�袴栢� 栢� 栢� 훤袴谷舫 栢�袴� 栢� 栢� 栢뵌栢쁜舫 휩排� 栢� 栢� 휩栢栢排� 栢栢栢舫 栢栢栢芳 栢� 栢� 栢� 휩栢舫 栢� 훤� 훤� 훤袴袴� 훤袴袴暠 훤袴袴暠 훤� 훤� 훤� 훤袴� 훤� 컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴컴� Technical notes about ROSETINY ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1.) Requirements: ROSETINY.EXE: 80286 or above, MS-DOS 3.3 or above ROSETINYed files: 8086 or above, MS-DOS 3.0 or above TINYPROG: Version 2.? (1.?) which supports the /K switch WWPACK: Version 3.02 (or BSQ, if you got it) or above. 2.) Tested TINYPROG Versions: TINYPROG 1.0, 3.6, 3.8 & 3.9 + 4.0 TinyProg 1.0 will sometimes hang! Please send me TinyProg > 4.0 if you've got them! 3.) Tested unPACKers Generic unpackers: UUP 1.4, CUP 1.2, SnapShot 2.2, Intruder 1.30 TSUP 1.6, UUP 1.4, AutoHack 4.1, AutoHack II/1.0b TBCLEAN, RVK - no comments CUP 386/3.2, 3.3 UPC, TEU Normal unpackers: SBust 1.4, TPCX 1.0, XOPEN, XOP, AHCR 1.xx .... X-Tract 1.51a.... TRON versions 1.21 (Reg), 1.20 (Reg) and 1.06 (Reg) - unable to extract & recognice UNP version 4.12� UNP version 3.31 is able to open RoseTiny 0.90 but not 0.92 UNP versions 3.30, 3.21, 3.20, 3.10 & 2.13 - unable to extract & recognice COMPBUSTER (NagBuster 1.1) - unable to extract & recognice XO, DCA (rIDDLER) - unable to set breakpoints .... Special unpackers: UNTiny (from ROSE) - Shall I write an unpacker for ROSETINY...? UnpTiny by Vandals - allways works only with the previous release :) Hint: EXE files scanning programs will often detect a 'DIET 1.00 extra' compression... Please send me any unpacker which is able to extract ROSETINY and I will update ROSETINY! 4.) EXE-Header The EXE-Header contains (in Version 0.95) at offset 1Ch the following bytes: 1c : 'R' \ 1d : 'T' / ROSETINY signature 1e : 0 \ 1f : 95 (dec) / Version 0.95 The program CHK4RT (Check for ROSETINY) can be used to detect ROSETINYed programs! I have skipped this lame program with the 0.95b release. Program it by yourself if you need it! One of the best EXE identifier is ChkExe from Hanno Boeck. 5.) Registration You don't have to 'register'! If you like this product, you can support me by sending me the newest packers und unpackers like: TRON, UNP, CUP, XOPEN or COMPBUST TINYPROG, PROTECT, PROPACK, COMPACK, TINYPROG ... ...but I'm pretty sure I have them all... ...or just write a funny postcard or email... If you enclose additionally an SAE + a disc you will receive the newest version of ROSETINY if availiable! (Germany: DM 5,-- in Briefmarken f걊 unseren Bearbeitungsaufwand + R갷kumschlag beilegen) 6.) About the programming This is _NOT_ a PKTINY hack (but PKTINY has shown me *that* it is possible to fool unpackers)! I've written the basic program (TP+Units & MASM+Macros) in 20 minutes (+1h testing +1h docu)! It's really easy to mess around with TRON & UNP if you how they work... Bugs? Inprovements? Parameters? Processorchecking? DOS checking? 7.) Other 'HACKER' products from ROSE? RCRYPT - crypts COM files RCC2 - ROSE COM CRYPT II - enrypt COM's using the HackStop Mutation Engine, yet unhackable! RUE - ROSE Unpackable EXE files generator (shell) unTRONable DIET, ProPack files... EXE file encryption... EXE to COM... Untiny - Unpacker package for TinyProt, COM and EXE protectors DECOM - decrypts polymorph encrypted viruses RVK - removes viruses and hacking protections from COM files HS - HackStop: Uncrackable protection for COM/EXE (shareware) Registration fee: DM 30,-- and many more... Hint: ROSETINY was generated using the tools above! 8.) History ver date improvements ------------------------------------------------------------------ 1.02 11-Nov-97 Recompiled using the newest HackStop macros. Size reduction, changed ROSEBBS.TXT ------------------------------------------------------------------ 1.01 06.07.97 Added anti-code for TEU 1.73. As normal this totally screws the "great" ROSETINY patcher from Vandals. But I think this is nothing new to you. :) Hints to the guys from Vandals: 1.) Next time I'll use a more complex encryption method - so write an generic unpacker now! :) 2.) Hope you like this version of HackStop ------------------------------------------------------------------ 1.00 18.04.97 Yoh, the guys from Vandals now have written an "generic" unpacker for RoseTiny - what a joke! Why? 1.) It's only a patcher 2.) Uses UNP.EXE to unpack the host 3.) Doesn't do much of error checking, just screwing your PC with a new ROSETiNY version. Hints to the guys from Vandals: 1.) Don't patch the jump, trace the envelope. If you don't know how, you can request my unTINY source... :) 2.) You are so lame, that you even must add MY special customized UNP 4.12� version, I had given to Hanno. Get it by yourself! (Or use my unTINY.EXE :) 3.) Check out the HackStop on ROSETINY.EXE :) 4.) Why doesn't your great DEBUG trick and MegaDevil's COM Unpacker work with ALLBUGS.COM? :) Improvements: + Anti Intruder, UPC 1.05 macro added + Anti CUP 386/3.2 macro added + now the TinyProg envelope is encrypted + Crypter uses stack against tracers... ------------------------------------------------------------------ 0.98 03.04.97 Got my hands on the UnpTiny 2.1f from the Vandals... hmmm thinking, what's about a special version of ROSETINY including only additionally the string "Special release for the TPiNC party"? Right, this one's screws UnpTiny, that's all for this release. ------------------------------------------------------------------ 0.97 08.03.97 Fixed the macros to work under Windows 95 (NEG SP :) ------------------------------------------------------------------ 0.96 12.07.96 Changed some macros and fixed a spelling bug. I though it was worth it after about one year to release a new version. :-) ------------------------------------------------------------------ 0.95b 03.06.96 I ONLY have recompiled the source to bypass the first ROSETINY unpacker by Vandal. Vandal: Great job, only recompiling blows your unpacker up! 0.95a 04.11.95 Changed the DOX and help screen. 0.95 21.10.95 Changed copyright notice, yet unpackable changed the security enveloppe (tigher code). ------------------------------------------------------------------ 0.94 18.03.95 New antidebugging code (trivial, I know). If WWPack 3.02 is found the Header is precompressed using WWPack "Pr". ------------------------------------------------------------------ 0.93 04.02.95 Added one new macro, recompilation. For internal use (you can guess why?). ------------------------------------------------------------------ 0.92a 28.12.94 Added WWPack 3.01 support, but due to a bug in WWPack, this doesn't work! Not released! 0.92 20.10.94 Added two instructions to fool UNP 3.31, which is able to open ROSETINY 0.90! ------------------------------------------------------------------ 0.91 internal version ------------------------------------------------------------------ 0.90e 13.10.93 tested with UNP 3.30 and TRON 1.21 0.90d 03.09.93 fixed a bug with NDOS 7.0's EMM386, tested with UNP 3.20 (thanx 2 MrMsNORT) 0.90c 29.08.93 added display of compression ratio; TINYPROG is now invoked with the /K switch (kill backup file) 0.90b internal version 0.90 09.08.93 first public release ------------------------------------------------------------------ 9.) Author ROSE SWE, Dipl.-Ing. Ralph Roth See ROSEBBS.TXT for full address, FAX, Email, PGP-Key etc. /* ENJOY */