ÜÜÜ ÜÜÜ ÜÜÜ ÜÜÜ ÜÜÜÜÜÜÜ ÜÜÜÜÜÜ  ÜÜÜ ÜÜÜ  ÜÜÜÜÜÜ   ÜÜÜÜÜ   ÜÜÜÜÜ
     Û Û Û Û Û ßÛÛ Û Û ÜÜÜÜÛ Û ÜÜÜßÛ Û ÛÜÛ Û  ÛÜÜÜÜßÛ ÛßÜÜÜßÛ ÛßÜÜÜÛÜ
     Û ÛÜÛ Û Û ÛÜß Û ÛÜÜÜÜ Û Û ÛÛÛ Û Û ßÜß Û  ÜÛÜÜÜßÛ ÛßÜÜÜßÛ Û ÜÜÜßÛ
     ÛÜÜÜÜÜÛ ÛÜÛßÛÜÛ ÛÜÜÜÜÜÛ ÛÜÜÜÜÛß ÛÜÛßÛÜÛ  ÛÜÜÜÜÛß ßÛÜÜÜÛß ßÛÜÜÜÛß  V1.74


0.warnings:
~~~~~~~~~~~

Warning! This document may contain some lame jokes and maybe even some
writing mistypes!! If you think this is an act of crime, or if you are one
of the very small portion of the population which experience epileptic
seizures when misunderstanding certain kind of words,
which are btw commonly present in our daily environment, then please
*stop reading* immediately!
I cannot be made responsible for any damage caused by this documentation.

1.intro:
~~~~~~~~

UNSDW386 removes all files protected with SDW386 1.17 or 1.74 with both
switches /L and /S for long and small decryptors.
This unpacker will not work under Windows95/98/NT/2000 -> boot to DOS.

Also included is the newest TR Script File just for you. ;)
If you have any problems unpacking with UNSDW386, use the Script File.

2.features:
~~~~~~~~~~~
positive:
- Original size restored after unpacking
- Using hardware breakpoints (No wrong MtE decryptions)
- 2 byte bug fixed in the unpacked version
- "The 50% of time" crap in the last version was not true, this bug was
  already solved in the released version

negative:
- Pretty single specific this time (only version 1.71 and 1.74 supported)

3.usage:
~~~~~~~~
The unpacker 'UNSDW386' :
       UNSDW386.COM <filename.com>

The Script File 'UNPACK' :
(1) TR.EXE <filename.com>
(2) DO UNPACK
(3) Q

4.techInfo:
~~~~~~~~~~~
UNSDW386 uses one HW breakpoints for bypassing the polymorphism WWPE
(Wild Worker Polymorphic Engine) used by SDW386 and another one for bypassing
anti brkpoint code like 'MOV DRx, EAX' and the image decryptor.
UNSDW386 requires at least a 386+ to run, like SDW386 itself and no Windows
version running in the background.

5.SDW386 versions:
~~~~~~~~~~~~~~~~~
UNSDW386 is able to unpack SDW386 1.71 and 1.74. The signature and version
number is used to get the used version. If a lamer changed either the
signature or the version number then the user will be prompted to guess for
the used version. ;)
Try both version numbers if you are not sure about it.

6.greetz:
~~~~~~~~~
in no fuckin' order:

MantiC0re       - Still to easy for unpacking. One Offset is wrong and should
                  be a delta offset, fix this. Thanx for all the credits. :)
ûirogen         - Great mutation engine ... ;)
Hetero          - For source code and conversations
HRA, Oliver and   
JVP             - Thanx for the great betatesting help with TRAP.
Public Enemy    - For QEMM and all the nice bug reports
Ali             - Thanx for DG source, so I could play around with it ;)
Rose            - For the newest HS119 protected files: Wow, AntiTR and
                  new AntiTEU code in it!! ;) But CUP386 /3, EDUMP, GTR... ??
Wild Worker     - Too many INT21s in your MtE -> Slow

all ExE-Li$t members ... and everyone who wants to become one!

7.future:
~~~~~~~~~
No future UNSDW386's. Just wanted to demonstrate that anti hw breakpoint
debugging can be easily bypassed if not done really intelligent.
Maybe fully commented sourcecode!?

8.about:
~~~~~~~~
SDW386 was done by...

MANtiC0RE // Tyumen, Russia // E-Mail: manticore@altern.org
FidoNet: 2:5077/60@FidoNet

UNSDW386 was done by...

CHRiSTOPH // Neuwied, Germany // E-Mail: ChristophG1@Hotmail.Com
FidoNet: NotYetAvailable@FidoNet