If you identified the packer/protector used, you can look up the commandline for "PREP" in these tables. If you are not sure, just use "PREP CE4". You might even start with "PREP CE7" and then go downwards with the sensibility, if GTR does not stop at the unpacked program. OPTIONS FOR UNPACKING COMs <==========================> "PREP C#", where # is one of the following numbers: COM-HEADER # RECOGNITION-STRING COMMENT ================----========================---------------- CC 2.61b 5 COM2TXT 1.11 5 COMLOCK 0.1 9 COMPACK 4.5 4 (C) 1991 W Collisa not 1st requester COMPREXE 1.0 9 COMT 0.1d 9 COMT_is_copyright_Alex COMSCRAMBLER0.1 8 CRYPT 2.0 4 DX=DS, not 1st requester CRYPTCOM 2.0 6 DEEPCRYPT 0.1b 3 not 1st requester DOPCRYPTCOM1.04 8 ELITE 2.0 4 DX=DS SI=IP DI=SP FDS-CP 0.4a 9 (c) fds0ft GUARDIAN AN1.0b 8 HACKSTOP 1.10 7 Hackstop 1.10 HACKSTOP 1.11c 7 Hackstop 1.11c HACKSTOP 1.13 7 Hackstop 1.13 HACKSTOP 1.14s 7 Hackstop 1.14s HACKSTOP 1.15s 6 Hackstop 1.15s HACKSTOP 1.17ás 6 Hackstop 1.17ás HS386 1.17 7 Hackstop 1.17/386 ICE 1.00 8 SI=100 JMP-CP 0.5a 9 KEVINFILEK1.15a 9 MASK 2.3 4 MASK 2.3. Executable E DX=DS SI=IP DI=SP not 1st requester MESS 1.07 9 Stonehead's MESS v1.07 MESS 1.13 9 Stonehead's MESS v1.13 MESS 1.14 9 Stonehead's MESS v1.14 NETRUN 3.1 4 (c)1995.JIM.TUCKER PCRYPT 3.50 3 PCRYPT BX=CS not 1st requester PKLITE 1.50 9 PKLITE Copr. PKLITE 2.04g 9 PKLITE Copr. 1990-1995 PROTECT! 5.5 9 Protect! EXE/COM v.5.5 SP=FFF8 PROTECT! 5.6 9 Text from Marquis SP=FFF8 PROTECT! 6.0 9 PROTEXE 3.0 4 run with option: ~~~ProtEXE-RegInfo~~~ PROTEXE 3.10 9 run with option: ~~~ProtEXE-RegInfo~~~ PROTEXE 3.11 9 run with option: ~~~ProtEXE-RegInfo~~~ RCC 1.10 MILD 4 RCCþ1.10m not 1st requester RCC 1.12 MILD 4 RCCþ1.12m not 1st requester RCC 1.12 HARD 5 RCCþ1.12h not 1st requester RCC 1.13 MILD 3 RCCþ1.13m not 1st requester RCC 1.13 HARD 3 RCCþ1.13h not 1st requester RCC-II 1.06 4 RCC-IIþ1.06 RCC386 0.51 4 RCRYPT 0.91 4 SI=IP DI=SP 2nd requester ROSETINY 1.01 6 ROSETINY (C) DX=CS SI=IP RSCC 1.01 3 RSCC/1.01 SCRAM! 0.7c1 9 SCRAM! v0.7c1 by bushw SCRAM! 0.8a1 9 SCRAM! v0.8a1 by bushw SHRINK 1.0 7 XCOMOR 0.99h 7 XcomOR OPTIONS FOR UNPACKING EXEs <==========================> "PREP E#", where # is one of the following numbers: EXE-HEADER # RECOGNITION-STRING COMMENT ================----========================---------------- AINEXE 2.23 3 AIN2 ALEC 1.5 9 ALEC 1.5 (C) 1997! by Ra ALEC 1.6.386.pro 9 ALEC 1.6.386.pro (C) 199 AVPACK 1.22 3 AVPACK AXE 2.0 5 SEA-AXE 2.0 BITLOK 3.1 9 -----Yellow Rose------Ye CC 2.61b 4 COMPREXE 1.0 9 CRACKSTOP 1.0b 8 Crackstop 1.0b - (c) ES screwed up CRACKSTOP 1.01 9 Crackstop v1.01 - (c) CRACKSTOP 1.02 9 Crackstop v1.02 - (c) CRUNCH 1.0 4 CRUNCH CRYPT 2.0 3 AX=BP=CS DOP CRYPT 1.04 9 DoP not 1st requester ELITE 2.0 9 ELITE v. 2.00S EXECODE 1.0 9 ExeCode v1.0 Copyright EXEGUARD 1.3 4 EXEGUARD Ver 1.3 (c) 1 AX=SS BX=CS EXEHIGH 1.01 3 AX=SS CX=DS SI=CS EXELOCK666 1.03 4 EXEPACK 4.06 4 !Packed file is corrup AX=DS SI=SS DI=SP GUA. ANGEL 1.0b 8 HACKSTOP 1.10 7 Hackstop 1.10 HACKSTOP 1.11c 6 Hackstop 1.11c HACKSTOP 1.13 9 Hackstop 1.13 HACKSTOP 1.14s 9 Hackstop 1.14s HACKSTOP 1.15s 9 Hackstop 1.15s HACKSTOP 1.17ás 9 Hackstop 1.17ás HS386 1.17 9 Hackstop 1.17/386 JMCE 0.7j 9 not 1st requester LSCRYPT 1.21 9 Crypt by LIGHT SHOW LSTOP 1.0 6 LamerStop v1.0 LZEXE 91 4 LZ91 MEGALITE 1.20a 3 Not enought memory$ BX=BP=DS DX=SP not 1st requester MESS 1.13b 6 Stonehead's MESS v 1.13 DX=DS DI=SP MUTAWWP 1.0 2 WWP BX=BP=CS DX=SS 3rd requester PACK 2.01 6 PCRYPT 3.50 4 PCRYPT 3.50 by MERLiN DI=SP not 1st requester PKLITE 1.50 9 PKLITE Copr. PKLITE 2.04g 9 PKlite(R) Copr. 1990-19 PKTINY 1.62 5 PKLITE Copr. DX=DS DI=SP PROTECT! 5.5 9 Protect! EXE/COM v.5.5 PROTECT! 5.6 9 Text from Marquis PROTECT! 6.0 9 PROTEXE 3.0 4 run with option: ~~~ProtEXE-RegInfo~~~ PROTEXE 3.10 9 run with option: ~~~ProtEXE-RegInfo~~~ PROTEXE 3.11 9 run with option: ~~~ProtEXE-RegInfo~~~ REC 0.32 7 DX=CS RELOCATION PACK 3 BX=CS DX=DS ROSERELPACK 0.02 2 BX=CS DX=DS ROSETINY 1.01 5 ROSETINY (C) DX=DS DI=SP RJCRUSH 1.10 9 RJS1 SECURE 0.27 9 Patch it! SECURE 0.28 9 Patch it! SECURE 0.29 9 Patch it! SUCKSTOP 1.08r 4 Suckstop v1.08r (c) 19 SUCKSTOP 1.11r 4 Suckstop v1.11r (c) 19 TINYPROG 3.9 6 TINYPROG says, "Bad pr VSD 2.00 4 Virus Self-Destructor ANTI-VIRUS-ENVELOPE WWP 3.04 4 WWP DS=FFFF WWP 3.05 5 WWP WWP 3.05b5 3 WWP BX=CS DX=SS BP=CS