ÄÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ ³ ³Ú¿ÚÄ UnPackStop v0.94a (c) by Szaszi ³ Ú¿Ú¿º ³ ³ÃÙÀ¿ E-mail: szabo30@iit.uni-miskolc.hu Å ³³ÃÙ³ ÀÄÙ³ ÄÙ ............................................... ÀÄÀÙ³ . ÄÍ[ Unregistered Freeware Version ]ÍÄ ÄÍ[ Contents ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ ÄÍ[ Introduction ]ÍÄùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùÄÍ[ Usage ]ÍÄ ÄÍ[ System requirements ]ÍÄùùùùùùùùùùùùùùùùùùùùùùùùùùùùùÄÍ[ Features ]ÍÄ ÄÍ[ Future versions ]ÍÄùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùùÄÍ[ History ]ÍÄ ÄÍ[ (in)Compatibility ]ÍÄùùùùùùùùùùùùùùùùùùùùùùùÄÍ[ About the author ]ÍÄ ÄÍ[ To other protection tool's authors ]ÍÄùùùùùùùùùùùùùÄÍ[ Greetings ]ÍÄ ÄÍ[ Introduction ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ My english is not too good, but I hope you understand it. UnPackStop is a little tool, which protects your executables against generic unpackers and makes hacker's job harder ( I hope :) It's not an unhackable protection, but if you can't hack it, it may be better than your protection. ÄÍ[ Usage ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ It's easy to use UPSTOP : UPSTOP [target] Examples : - UPSTOP ABC.EXE it creates ABC.UPS backup file and ABC.EXE protected file - UPSTOP ABC.EXE ABCP.EXE it creates ABCP.EXE protected file If the source file has overlays or it's a new-EXE you will get an error message. ÄÍ[ System requirements ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ required: 80386 recommended : Pentium II / 128Mb / 3Dfx / 9Gb / DVD / Gravis / 21" :) ÄÍ[ Features ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ - various anti-debug tricks ( INT x, DRx and many other tricks ) - full EXE and COM encryption - random encryption keys - multiple layer encryption - lame polymorphic layer - lame checksums ÄÍ[ Future versions ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ - better compatibility - overlay handling - advanced polymorphic engine - /c switch : create COM type output ( if possible ) - /k switch : I don't know what will it do :) - nice interface ;) ÄÍ[ History ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ v0.9á : first public version ( released only in Hungary ) v0.91á : internal release v0.92á : - anti UPC code - advanced protection - "unhandled" invalid opcode trick v0.94 : - runs only on 386+ processors - fixed some bug - win '95 compatible - lame polymorphic layer - macrokiller ( wandering code ) - english DOC v0.94a : - bugfixed version - include UnPackMe ÄÍ[ (in)Compatibility ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ Protected files work under ( for me ) : MS-DOS 6.22, EMM386, QEMM, Windows 3.11, Windows '95, OS/2 3.0 Protected file incompatible with : - generic unpackers - CUP386 v3.4 - IceUnP v0.1.1 - UPC v1.11 - GTR v1.90 - ENTPACK - TEU v1.79 - and many other - debuggers ( if you are a lame cracker and just run under :) - S-ICE v2.62 - TR v1.97 - DeGlucker v0.03 - and many other ÄÍ[ About the author ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ Szaszi ( Szab¢ L szl¢ ), 20 years old E-mail : szabo30@iit.uni-miskolc.hu HomePage : http://www.iit.uni-miskolc.hu/~szabo30 You should contact me : - if you can hack the protection - if you write an UPSTOP remover - if you find a bug - if you have any idea to make it better - if you want more information about UPSTOP - if you release a protected program ( you should send me a registered version ) - if you think UPSTOP is the best :) ÄÍ[ To other protection tool's authors ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ I don't want to say : UPSTOP better than *STOP and ... I hope you think this :) I don't ( want to ) steal any code, I use only my tricks. ( Yes, I'm using INT1, INT3, DRx, stack,... tricks, but the method of using is my idea ). So if you find a trick which is similar with your trick, it's a chance ! ÄÍ[ Greetings ]ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ [ZeNiX] of pCE '98 - for hacking UPSTOP v0.92á [eGIS!] of pCE '98 - for UPSR v0.92 the author of CUP386 - for CUP386 ÄÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÄÄÄ