The new asprotect 1.31

[britedream]

To hobgoblin:

Sorry I couldn't upload it to the exetools, please pm with your email.

It is an asprotect beta,so I am not going to put detailed steps for unpacking it in the open forum, for the obvious reason,but there aren't that many steps anyway, just find where asprotect is directing the iat , force it to make the table for you, use ImportRec to fix the table.second , overcome the antidump.done.

in my unpacking I concentrated on the iat , so for time limitation, I didn't redirect the antidumps, I just used the same high memory as asprotect, and code small dll as finger saving for that purpose,Also I didn't redo the process for fixing the iat for the five or so left apies, I just code them directly, you will distinguish my direct adding form ImportRec adding.

since I am using a high memory, it may not work if your configuration is different than mine, I will try to redirect the antidumps in the future, to avoid that.
here is an image of some jumps to iat to show the ones I directly added and the imortRec adding:

[britedream]

no need for the image, the whole iat now is fixed by importrec: here itis:
this one should works on all xp now.{don't use it , just compare to}

[britedream]

hobgoblin, please check your email, target has been sent.

I wouldn't mind a copy of that as well

Hi britedream,
Please could you send a copy to me as well
Many Thanks
R@dier

[britedream]

To R@der and svensk:

please wait ,I am waiting for a feed back. regarding the unpacked to see how it works on other pc.

britedream either you got previous version or newer one? or the OEP from the attached tree is wrong

and maybe this IAT won't work with my dumped exe!

i got Whereisit? v3.60.521 and right OEP is: 002FB5EC (006FB5EC)

for any where is it version or just latest one look with W32dasm for the unique text string : AMAINICON go a little up where that piece of code start
( 558BEC83C4F0 .....)that's the OEP.

would you confirm which exactly version you got?

Regards