
-------------------------------------------------------------------------
 +   +  + + + + +   + +   +
 +--+ +---+ +----+ +----+ +--+--+  +   ++ ++
 ++     + +           ++   +++
 +--+     +---- +--+           ++   +++
    +++  +          +    
 +-+  +-+  +-----+  +------+ +------+    +-+    +-+ +-+  +---+    +-+
-------------------------------------------------------------------------



        Technical notes about ROSETINY
        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1.)     Requirements:

        ROSETINY.EXE:       80286 or above, MS-DOS 3.3 or above
        RoseTiny32:         Pentium and Windows/32
        ROSETINYed files:   80286 or above, MS-DOS 3.0 or above
        TINYPROG:           Version 2.? (1.?) that supports the /K switch

        WWPACK:             Version 3.02 (or BSQ, if you got it) or above.
                            Not required, but improves compression!



2.)     Tested TINYPROG Versions:

        TINYPROG 1.0, 3.6, 3.8 & 3.9 + 4.0

        TinyProg 1.0 will sometimes hang!
        Please send me TinyProg > 4.0 if you've got them!



3.)     Tested unPACKers

Generic unpackers:

        UUP  1.4, CUP  1.2, SnapShot 2.2, Intruder 1.30+
        TSUP 1.6, UUP 1.4, AutoHack 4.1, AutoHack II/1.0b
        TBCLEAN, RVK - no comments
        CUP 386/3.2, 3.3, 3.4
        UPC, TEU

Normal unpackers:

        SBust 1.4, TPCX 1.0, XOPEN, XOP, AHCR 1.xx ....
        X-Tract 1.51a....

        TRON   versions 1.21 (Reg), 1.20 (Reg) and 1.06 (Reg)
                                   - unable to extract & recognize
        UNP    version 4.12
        UNP    version 3.31 is able to open RoseTiny 0.90 but not 0.92
        UNP    versions 3.30, 3.21, 3.20, 3.10 & 2.13
                                   - unable to extract & recognize

        COMP BUSTER (NagBuster 1.1) - unable to extract & recognize

        XO, DCA (rIDDLER) - unable to set breakpoints ....

Special unpackers:

        UNTiny (from ROSE) - Shall I write an unpacker for ROSETINY...?
        UnpTiny by Vandals - always works only with the previous release :)

        Hint: EXE files scanning programs will often detect a 'DIET 1.00
        extra' compression...

        Please send me any unpacker which is able to extract ROSETINY and
        I will update ROSETINY!


4.)     EXE-Header

        The EXE-Header contains (in Version 0.95) at offset 1Ch the
        following bytes:

                1c : 'R'       \
                1d : 'T'       /  ROSETINY signature
                1e :  0        \
                1f : 95 (dec)  /  Version 0.95

        The program CHK4RT (Check for ROSETINY) can be used to detect
        ROSETINYed programs! I have skipped this lame program with the
        0.95b release. Program it by yourself if you need it!

        One of the best EXE identifier is ChkExe from Hanno Boeck.


5.)     Registration

        You don't have to 'register'! If you like this product, you can
        support me by sending suggestions and feedback.


6.)     About the programming

        This is _NOT_ a PKTINY hack (but PKTINY has shown me *that* it is
        possible to fool unpackers)!  I've written the basic program
        (TP+Units & MASM+Macros) in 20 minutes (+1h testing +1h doc)!
        It's really easy to mess around with TRON & UNP if you how they
        work...

        Bugs? Improvements? Parameters? Processor checking? DOS checking?


7.)     Other 'HACKER' products from ROSE?

        RCRYPT  - crypts COM files
        RCC286  - ROSE COM CRYPT II - encrypt COM's using the HackStop
                  Mutation Engine!
        RUE     - ROSE Unpackable EXE files generator (shell)
                  unTRONable DIET, ProPack files...
                  EXE file encryption...
                  EXE to COM...
        UNTINY  - Unpacker package for TinyProt, COM and EXE protectors
        DECOM   - decrypts polymorph encrypted viruses
        RVK     - removes viruses and hacking protections from COM files
        HS      - HackStop: Uncrackable protection for COM/EXE (shareware)

        and many more...

        Hint:     ROSETINY was generated using the tools above!


8.)     History

        ver     date            improvements
        ------------------------------------------------------------------
        1.06    08-Nov-2003     Re-compiled with new libraries, added win32
        			version to the distribution
        ------------------------------------------------------------------        			
        1.05    23-Sept-2001    Loader re-compiled, ported to FPC and VPC
        ------------------------------------------------------------------
        1.04    01-June-2000    Internal version.
        ------------------------------------------------------------------
        1.03    20-Sept-1999    Totally rewritten loader, using anti TR,
                                anti IceUNP etc. tricks. Uses now inline
                                memory encryption from HackStop.
        ------------------------------------------------------------------
        1.02    11-Nov-97       Re compiled using the newest HackStop macros.
                                Size reduction, changed ROSEBBS.TXT
        ------------------------------------------------------------------
        1.01    06.07.97        Added anti-code for TEU 1.73. As normal this
                                totally screws the "great" ROSETINY patcher
                                from Vandals. But I think this is nothing
                                new to you. :)

                                Hints to the guys from Vandals:
                                1.) Next time I'll use a more complex
                                encryption method - so write an generic
                                unpacker now! :)
                                2.) Hope you like this version of HackStop
        ------------------------------------------------------------------
        1.00    18.04.97        Yo, the guys from Vandals now have written
                                an "generic" unpacker for RoseTiny - what a
                                joke! Why?
                                1.) It's only a patcher
                                2.) Uses UNP.EXE to unpack the host
                                3.) Doesn't do much of error checking, just
                                    screwing your PC with a new ROSETiNY
                                    version.

                                Hints to the guys from Vandals:
                                1.) Don't patch the jump, trace the envelope.
                                    If you don't know how, you can request
                                    my unTINY source... :)
                                2.) You are so lame, that you even must
                                    add MY special customized UNP 4.12
                                    version, I had given to Hanno. Get it
                                    by yourself! (Or use my unTINY.EXE :)
                                3.) Check out the HackStop on ROSETINY.EXE :)
                                4.) Why doesn't your great DEBUG trick
                                    and MegaDevil's COM Unpacker work with
                                    ALLBUGS.COM? :)
        Improvements:
                                + Anti Intruder, UPC 1.05 macro added
                                + Anti CUP 386/3.2 macro added
                                + now the TinyProg envelope is encrypted
                                + Crypter uses stack against tracers...
        ------------------------------------------------------------------
        0.98    03.04.97        Got my hands on the UnpTiny 2.1f from the
                                Vandals... hmmm thinking, what's about a
                                special version of ROSETINY including only
                                additionally the string "Special release
                                for the TPiNC party"?  Right, this one's
                                screws UnpTiny, that's all for this release.
        ------------------------------------------------------------------
        0.97    08.03.97        Fixed the macros to work under Windows 95
                                (NEG SP :)
        ------------------------------------------------------------------
        0.96    12.07.96        Changed some macros and fixed a spelling
                                bug. I though it was worth it after about
                                one year to release a new version. :-)
        ------------------------------------------------------------------
        0.95b   03.06.96        I ONLY have re compiled the source to bypass
                                the first ROSETINY unpacker by Vandal.
                                Vandal: Great job, only recompiling blows
                                your unpacker up!
        0.95a   04.11.95        Changed the DOX and help screen.
        0.95    21.10.95        Changed copyright notice, yet unpackable
                                changed the security envelope (tighter code).
        ------------------------------------------------------------------
        0.94    18.03.95        New antidebugging code (trivial, I know).
                                If WWPack 3.02 is found the Header is
                                pre compressed using WWPack "Pr".
        ------------------------------------------------------------------
        0.93    04.02.95        Added one new macro, recompilation. For
                                internal use (you can guess why?).
        ------------------------------------------------------------------
        0.92a   28.12.94        Added WWPack 3.01 support, but due to a bug
                                in WWPack, this doesn't work! Not released!
        0.92    20.10.94        Added two instructions to fool UNP 3.31,
                                which is able to open ROSETINY 0.90!
        ------------------------------------------------------------------
        0.91                    internal version
        ------------------------------------------------------------------
        0.90e   13.10.93        tested with UNP 3.30 and TRON 1.21
        0.90d   03.09.93        fixed a bug with NDOS 7.0's EMM386, tested
                                with UNP 3.20 (thanks 2 MrMsNORT)
        0.90c   29.08.93        added display of compression ratio;
                                TINYPROG is now invoked with the /K switch
                                (kill backup file)
        0.90b                   internal version
        0.90    09.08.93        first public release
        ------------------------------------------------------------------


9.)  Author

        ROSE SWE, Dipl.-Ing. Ralph Roth
        See ROSEBBS.TXT for full address, FAX, Email, PGP-Key etc.
        http://come.to/rose_swe/


10.) Where to get TinyProg?

From: Alex Robinson <onlyme_info@tranzoa.com>
Reply-To: onlyme_info@tranzoa.com
Organization: Tranzoa, Co.
Subject: Re: TINYPROG

Olaf Wolna wrote:
> Is TINYPROG v4.0 (attached) an official version or is it
> a hack of v3.9 ?
> What is the current version of TINYPROG?

Olaf,

Your instincts are correct. This is a bogus version. The current version
of TinyProg is 3.9. It's at:

http://www.tranzoa.com/Download/tinyp3_9.zip

I would not run this "4.0" version on my machine, that's for sure! Some
time ago, someone warned me that there was a "4.0" version out that
contained a virus of one sort or another.


/* ENJOY */

