/*
Script written by KuNgBiM
Script   : DotFix NiceProtect Auxiliary Script
Date     : January 02, 2008
Test Environment : OllyDbg 1.10, ODBGScript 1.65, WinXP
Debugging options: Tick all items in OllyDbg's Debugging Options-Exceptions
Tools  : OllyDbg, ODBGScript 1.65
*/

#log

var tmp

// ൱ڡbp FindWindowAֱ֧¶

gpa "FindWindowA","user32.dll"
cmp $RESULT,0
je error

// Ѱҡretn 8׼

find $RESULT,#C20800#
cmp $RESULT,0
je error
bp $RESULT
esto
bc eip

// 5F7

sti
sti
sti
sti
sti

// ESP()

mov tmp,esp
bphws tmp,"r"
esto
esto
bphwc tmp

msg "Alt+Mڴ澵PE header÷ʶϵ,Shift+F9жϺ,ٴCODE÷ʶϵ,Shift+F9к󼴿ɵڲȻʱIATҲûܵˡ"

msg "ʾ: ޲StolenCodeVM codeԼȥ! ^_^"

ret

error:
msg "ű!"
ret