                                   TEU - Tips

Hints 'n' Tips:
  * TEU now does DS-CRP, CS 1.03(recognized as 1.0b), Hackstop 1.18 (recognized
    as 1.17), Suckstop 1.11, PCrypt 3.50, EXELock, ProtX310...

  * to unpack EXEL666.EXE (1.0) type
      TEU175 EXEL666.EXE -!
    save on termination to get Borland Pascal, packed with XPack (garbled
    GetIntVec).

  * to unpack EXEL666.EXE (1.02 and 1.03) type
      TEU175 EXEL666.EXE -! -m:4
    save on termination and use PassiveX(TM) code to get Borland Pascal, packed
    with XPack (garbled GetIntVec).

  * to unpack EXEL666.EXE (1.04) type
      TEU178 EXEL666.EXE -!
    save on termination to get Borland Pascal, packed with XPack (garbled
    GetIntVec).

  * to unpack EXEL666.EXE (1.05) type
      TEU178 EXEL666.EXE -! -m:4
    save on termination and use PassiveX(TM) code to get Borland Pascal, packed
    with XPack (garbled GetIntVec).

  * to unpack Suckstop 1.11 type
      TEU175 SS.EXE -u:09,cd20
    and change IP to 100h.

    This shows the use of the undocumented u-switch (u means user defined)
    which is in TEU for some versions.
    usage:
      -u:function,bytes after int21
    For above Suckstop example: if after function 9 of int21h (print) follow
    the bytes cdh 20h (int 20h) then save CRACKED.EXE.
    To find interesting entrypoints which may be subject for the -u switch use
    TEU-U.EXE

  * to unpack ProtX310 protected files type
      TEU175 FILE.EXE -y
    which makes use of the DirectY(TM) control of TEU.

  * to unpack DS-CRP protected files use TEU177 or above, which overcomes
    DS-CRPs search patterns.

  * to unpack CS 1.02 protected files use TEU177 or above.

  * to unpack CS 1.03 protected files use TEU179 or above.

to be continued ...
