Hello everyone !!

Well I downloaded
AbsoluteShield Internet Eraser Pro 2.32
from download.com ( search for AbsoluteShield )
and I thought "another Azpr protected software !"
well I unpacked the proggie and did all revirgin procedure ,
But guess what : the F****** proggie does not run , in fact
it fails before reaching the OEP ( at the windows loader ).
I am familiar with Azpr protected proggies and I thought maybe
there is a new trick ?

I know that you are all tired from Azpr unpacking but Please check
this one and tell me if you discovered something new .

Thank you all !

can you give more details, such as what exactly happens when it "does not start".

-nt20

I hope you're referring to AbsoluteShield Track Eraser 2.32 from sys-shield. (There was no AbsoluteShield Internet Eraser Pro 2.32). Very old strain of "standard" ASsPR. Nothing new. Did you fix the APIs properly? Esp. the user32.dll's DialogBoxParamA?

Signed,
-- FoxThree

Something must have gone wrong when you did dumping or rebuilding or something, cause it worked fine for me.

More info please!

/Manko

Well , first , I must say S O R R Y guys !
there is no new azpr trick !
I don' t know why but revirgin created wrong import table ,
the original_first_thunk and the first_thunk contained offsets
that are outside the Pe offset ( 2A357600 in the first_thunk )
and that cause the problem , the window's loader tried to
get DATA from invalid address .

So Manko rights , it is suppose to be no problem to unpack
this target !

Thank You All !!!!!