The reason is that 00B30000 is not the AIP. Got to address 00401000 and search for all intermodular calls and there you can see the real AIP destination. But AIP is on this target the smallest problem, the OEP protection and the VM is really hard to defeat.