New Asprotect??

[hobgoblin]

Hi,
I haven't had the time to look any further at this. But try this: set a breakpoint at the api GetProcAddress (after loading the file onto Olly). After hitting F9 a couple of times (maybe 3, I don't remember), you will be right in the middle of where the program writes the IAT. As you will see the program stores the iat in the high memory. For me it was in the range 00B6000 to B6C0C8. The problem was that Imprec wasn't able to read it at this address. I didn't investigate it further.
Check it out and tell us what you find.:-) Also, go into the program itself after it's been unpacked, and check out how the program calls the api's. Seems kind of different that ordinary programs. I think britedream is right. There seems to be an encrypter of some kind that's used first, then the program is packed.

hobgoblin