//////////////////////////////////////////////////////////

//		          AoRE TEAM

//               script by TallfaZ  31/03/2007

//   This script unjunks stolen code by DotFix_NiceProtect_2.2

//

//////////////////////////////////////////////////////////











var pushecx

var popecx

var subst

var  tmp1

var tmp2

var tmp3

var tmp4

var begin





ask "Enter the address where you've found the pattern!"



cmp $RESULT, 0

je cancel_pressed



mov begin,$RESULT

mov tmp1, $RESULT

mov tmp2, $RESULT



/////////////////////////////////////////////////

re:

find tmp1, #51f91b#

cmp $RESULT,0

je nextJunk_1

mov pushecx, $RESULT

find tmp1, #59eb#

cmp $RESULT,0

je nextJunk_1

mov popecx, $RESULT



mov subst, popecx

sub subst, pushecx

add subst, 4



fill pushecx, subst, 90

mov tmp1, popecx

jmp re





/////////////////////////////////////////////////

nextJunk_1:

find tmp2, #EB01??#

cmp $RESULT,0

je nextJunk_2

fill $RESULT, 3, 90

jmp nextJunk_1





/////////////////////////////////////////////////

nextJunk_2:

findop tmp2, #EB??#

cmp $RESULT,0

je GoodBoy

mov tmp3, $RESULT

inc $RESULT

mov subst, [$RESULT]

and subst, 0ff

add subst, 2

fill tmp3, subst, 90

jmp nextJunk_2





cancel_pressed:

msg "Canceled"

ret



GoodBoy:

log begin

an begin

eval "The beginning of your stolen code is {begin}"

msg $RESULT

ret



BadBoy:

msg "Something wrong was happened! sorry"

ret