check here:
hxxp://tsrh.watchout.ru/index.php?act=ST&f=3&t=14125&
. now check attached loader... extract it to program dir.. hide your debugger . i used SICE for this task ... run load it!.exe .. before running it .. do bpint3 on your debugger .. when SICE breaks .. you'll be at OEP (9090... because stolen bytes) write back 90 and do a eip then jmp eip
and dump! this is for full version of 3.0.4 Pro