History :


version 1.1 build 5  [10-17-1998]

  Documentation
  ! Fixed a small mistake.                                         (10-17)
  + Changed File_ID.DIZ so that some SITEOPs can't use BUILD 	   (10-17)
    NUKE reason (some are really stupid !!!). Pffff.. They are too
    lazy to do a real DUPE check.

  ProcDump
  + Added some check about windows centering.                      (10-17)

  CodeShot
  + Module Dumper reactivated ;).				   (10-17)
  + Module Partial Dumper added.				   (10-17)

version 1.1 build 4  [10-11-1998] - PUBLIC

  Phoenix
  + Enhanced IAT detector criterea				   (10-11)

  Shiva
  + On error while reading process memory in final step, Display   (10-11)
    the original EIP we fetched and Error Code.

  Unpacker
  + VBOX problem analyzed. Seems the wrapper is tricky : It tries  (10-11)
    to use Int 3 backdoor to detect SoftICE. Seems to coz a part of
    the code layer (including EIP code start) to not be decrypted
    while tracing code to get Original EIP & Clean Data section.
  => Make a dump and stamp the crypted part... Suxxxx but Works ;).

version 1.1 build 3  [10-06-1998]

  Shiva
  + Added OBJR command						   (10-06)
  + Added BPREG command						   (10-06)
  - Removed range checking option (useless)			   (10-06)
  + Added Breakpoint Hit checking option.			   (10-06)

  Unpacker
  ! Modified VBOX script					   (10-06)
    But still doesn't work with dialog VBOX.

version 1.1 build 2  [10-04-1998]

  PE header editor
  + Now you can choose between Header only and File modifications. (10-04)

  Phoenix
  ! Changed internal module snapshot.                              (10-03)
  ! Fixed a small bug in DLL detector.                             (10-04)
  + New rebuilder code works.                                      (10-02)
  + Create a brand new import section for trashed PE.              (10-02)

  Unpackers
  + Added FAST support for VBOX appz.                              (09-28)
    I will look for TimeLock fast support soon.
  + Added WWPACK32 universal remover [Type I & II].                (09-22)

version 1.1 build 1  [09-21-1998]

  Team - ProcDump Coders
  + Added Riz La+ in interface coding section

  PE Header editor
  + Added a PE infos editor.					   (09-11)
  + Added a Directory editor.                                      (09-11)
  + Added a section editor.                                        (09-11)

  CodeShot - Task/module handler Translated in ASM32. 		   (05-19)
  + Added a snapshot descriptor free				   (07-23)
  + Cleaned up the code         				   (08-18)
  + Raw/Partial dump						   (09-12)
  + Auto Refresh on task kill					   (09-21)
  > ProcList external tool is 100% asm.

  Phoenix - PE Rebuilder Code converted in ASM32.          	   (05-24)
  + Added the possibility of using actual import dir infos.        (06-18)
  + Added a global most secure error handling.  		   (06-18)
  + Added a valid header check (for already Working PE file).      (06-25)
  + Added a PE Structure compactor.     			   (06-25)
  + Added a new Signature stamper.      			   (06-25)
  + Added a PE loader, now any PE file should load ! not only the  (06-28)
    memory dump you should have done.
  + Added a Merge Section Code.					   (07-10)
  + Added a new IAT table Start & Size detector.		   (07-16)
  + Added an "intelligent" dummy thunk skipper.			   (07-29)
  + Added an Import DLL directory builder.      		   (07-16)
  + Added a Reloc check & fix in MZ header for IDA STUPID LOADER.  (08-03)
  + Enhanced the PE/RAW file detector.				   (08-03)
  + TLS section autoskip					   (08-21)
  + Enhanced the PE loader [virtual/physical size auto choice]     (08-23)
  + Fixed a small bug in PE Loader code				   (09-19)
  + Fixed a bug in Section RVA detector				   (09-19)
  + Enhanced the import table rebuilder (Name completion)          (09-19)
  > MakePE external tool done for GTR95 project.

  Shiva - Script & Trace engine translated in ASM32.              (06-14)
  + Skip of Script errors (Secured System).     		   (06-14)
  + Code Tracer Works                                              (07-31)
  + More Debug Output						   (09-12)
  + External Predump reenabled.					   (09-19)
    You can even supply the Target file to rip import infos ;).
  > UnpackPE 1.02 is 100% working, and better than ProcDump B2R3   (08-28)

  ProcDump - Interface Translated in ASM32. 			   (09-07)
  + Syslist fill.                                                  (09-12)
  + Syslist module auto refresh on click                           (09-16)
  + Graying Cancel button when Unpack is canceled		   (09-17)
  + Auto Center for File dialog enhanced			   (09-21)

  Reorganized internal data structures.			   (06-08)

  Unpackers
   + Added Universal support for WWPACK32 x.xx including 1.11.     (09-18)
   + Added special support for WWPACK32 1.10 release.              (09-18)
   + Neolite support tested on 1.01. Still work ;)		   (09-18)


 OLD Generation - Delphi + Inline ASM code - No more really updated.

version 1.0 Beta 2r3[xx-xx-1998] (quick update).

  NT4 compliant again - r2 wasn't :( 				   (08-23)
  Added CleanUp for SnapShot (internal code)			   (08-23)
  Fixed a small script parser bug.				   (08-23)
  Changed a command name : SUB -> DEC                             (07-01)
  Added a TLS section autoskip					   (08-21)
  Added support for Petite x.xx				   (08-18)
  Added support for NeoLite 0.xx				   (08-18)
  Added support for Manolo 					   (07-01)
  Added support for HASIUK Packed file (activision use it).	   (06-18)
  Added support for Securom "protected file" (Sony dreams ;).     (06-18)
  Securom support works too with Louis Cryptor ;) Hiho bunter ;)  (06-18)
  Added a new option for import table rebuild.			   (06-18)
  Enhanced Tracer dump criterea.				   (06-18)

version 1.0 Beta 1  [05-26-1998] - Public

  Added Script Tracer (95%).					   (04-23)
  Finished the script tracer ;)                                   (05-05)
   Check script.[ini|txt] for details.
  Added support for PESHiELD due to script tracer ;)		   (05-05)
  Added NT<5.0 support (not exactly the same as 95,98&NT5)        (05-07)
  Added some unpacking options for experts.	         	   (05-07)
  Added an option manager (option button). [for expert !]	   (05-03)
   Actually it means me ;) U should never change advanced options !
  Added IAT recomputer and Improved Import Scanner                (05-24)
  Changed the way of unpacking (trace & fast). More convenient.   (04-28)
   check doc about trace & fast unpacking.
  Changed About box activation - by click on Logo now.   	   (05-03)
  Disabled the maximize button (thanx Nop ;)			   (05-04)
  Disabled all button for all dialogbox.			   (05-16)
  Started the anti SEH things.					   (04-30)
  Optimized some functions calls and code.			   (05-21)
  Fixed a little bug in import rebuilder.      		   (05-22)
  Fixed an index in name scanner (OOOooooppps !!!)		   (05-26)
  Fixed the Process Termination after trace/unpacking.		   (05-07)
  Fixed the Process Kill Command (now we wait full death)  	   (05-07)
  Fixed Process Display after a KILL				   (05-20)
  Fixed a Code Fault that may have occurred (never got it anyway) (05-07)
  Fixed the temporary dump delete if unpack failed		   (05-16)
  Fixed in module view a cosmetic bug				   (05-20)
  Fixed the Write error pb when Trace was canceled		   (05-20)
  Fixed the kill message (app name was missing)		   (05-20)
  Cleaned up resource file					   (05-26)
  Updated the whole documentation due to many changes.  	   (05-05)
  Updated the script documentation. Someone Asked me ;)           (04-27)

version 1.0 Alpha 9 [04-20-1998] - Public (04-23).

  Added some sanity check about non PE header.                    (04-10)
  Added Module lister for a given process.                        (04-12)
  Added Module Dumper.                                            (04-12)
  Added Header Full rebuilder when destroyed.                     (04-13)
  Added Fast unpacker for a few packers.                          (04-15)
  Import Rebuilder 100% working [many things fixed]               (04-20)
   Rebuild ordinal for crashed import table at runtime.
  On successfull unpack, display EIP before Jump.                 (04-15)
  Some cosmetic changes.			                   (04-13)
  Source code cleaned up a little.                                (04-13)
   I know, I know : u don't care ;)
  Optimized a little the code size.                               (04-12)
  Helped a little the garbage collector...ooopps ;)               (04-20)
  Updated the documentations			                   (04-20)

version 1.0 Alpha 8 [04-06-1998] - Public

  "Public" version ;) For those who knows how/why to use this.
  Changed a bit the object size updater.
  On failure, Display EIP we where.
  Terminate correctly in all cases now (Trace)... except if Win crash ;)
  Exe Size reduced.
  New GFX added ;)

version 1.0 Alpha 7 [03-27-1998]

  Changed the debug tracing interception mode.
  Eip no more destroyed in dump & reload mode.
  First version WITH a working PE unpacker !!
  Fixed a little bug in import rebuilder.
  Removed "always on top" feature... was annoying.

version 1.0 Alpha 6v[03-26-1998]

  Visual Progression of the tracer so that u can know if we are killed or
   not.
  Some others minor things.

version 1.0 Alpha 6 [03-24-1998]

  Tracer Code fixed and more secure - no more Reboot32 code ;).
  Traps for ACCESS_VIOLATION
  Traps when Process is out of itself !!

version 1.0 Alpha 5 [03-23-1998]

  Tracer Code added [TO DEBUG] !!Don't use if u don't know what u do!!
   Means : Only if u are called Stone or G-RoM ;).
   Actually it is nearly a Reboot32 Code ;).

version 1.0 Alpha 4 [03-20-1998]

  DLL export analyzer enhanced.
   -> ordinal export supported in import rebuilder [Ex: kernel32.1 allowed].
  Memory leak fixed.
  Load External option fixed (ahem....forgot a boolean test !).
  Mangled import function restore. See Special Section.

version 1.0 Alpha 3 [03-19-1998]

  DLL name autorestore.
  IAT special entry pb solved.

version 1.0 Alpha 2 [03-18-1998]

  New import section detector (generic).
  Header rebuild 100% okay now [bss always 0 !]
  Some checks were added just in case.

version 1.0 Alpha   [03-13-1998]

  Import loader now rebuild a valid import table, import by Name is always
   tried before by ordinals.

version prealpha    [03-08-1998]

  External Buffer conversion added.

version 0           [03-03-1998]

  Interface done
  Translated my win32 asm prototype in inline asm under delphi.
  File dump at exact size works now.
