Private exe Protector unpacking

Posted: August 18, 2011 in Private exe Protector unpacking

Author : by deepzero, 2011

Foreword

Private exe Protector (PEP) is a lower end intermediate PE file protection and licensing solution. The price, 200$, is quiet high, which might be one of the reasons this protector is rarely being used.  I chose it here because there is little to no documentation available on version 3.x. From the PEP
homepage:
Private exe Protector (PEP) is a professional licensing, anti-tampering and software examination system. PEP works with traditional methods, such as file compression, code fragment encryption, metamorphic loading, protection from debugging and file tampering , and features new innovative techniques, including data protection with stolen resources technique and partial code execution on a virtual machine. Licensing functions can be automatically integrated into the protected program, which allows the end user to quickly and securly manage all licences issued with the built in licence manager. All in all, it is the ideal solution for software developers.

Tools used
OllyDebug 1.10, LordPe, ImpRec, CFF Explorer, PiD, ResHacker, HexEdit (all freeware).
OllyDebug plugins: ollyadvanced, MultiMate assembler, odbgscript, IDAficator,AnalyzeThis!

Download tutorial here : http://www.mediafire.com/?2132cq2cadv42ez

Advertisements
Comments
  1. the zink says:

    so many thx bro…but i can’t understand…ehhehe..sorry..i am a new be for this..but..can u help me how to unpack this file.. http://www.4shared.com/get/Di8nvAEA/SETUP_PRO_KARAOKE_DELUXE.html please..give me a tutorial how to unpack this PEP protction…send me on my email….sorry my english is to bad… 😀

    keep posting bro…nice share..

  2. kiddie says:

    thanks for the tutorial bro, can you send a tutorial that asked by the zinc to me ..

    sorry if my english is hard to understand.

    thank you

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s