Manually unpacking Asprotect

Okay, I did the Imprec part, then I did the trace, changed the REP STOS BYTE PTR ES:[EDI] to JMP EDI, traced with F8, and get an access violation at:

00A55A11 FF50 28 CALL DWORD PTR DS:[EAX+28]

I nop that call, then trace till the next access violation at:

00A54CAC E8 10994A01 CALL 01EFE5C1

I nop that, and try tracing with f8 from here, but getthe message:

Don't know how to step, because memory at address 01EFE5C1 is not readable. Try to change EIP or pass exception to program.

What do I do from here?, I thought I was going so well up until here.