load using ollydbg
search for binary string "7508B801000000C20C00"
put a bp on the RET
f9 break
f7
u will be here
00426343 60 PUSHAD <---here
00426344 E8 00000000 CALL QXJDGL.00426349
00426349 5D POP EBP
scroll download a bit u will see
0042638B 58 POP EAX
0042638C 894424 1C MOV DWORD PTR SS:[ESP+1C],EAX
00426390 61 POPAD
00426391 FFE0 JMP EAX <----- put bp here
f7 u will be on the oep....
but i'm not sure whether that is the correct OEP...no time to further analyze...
actually i seldom speak english in real life...actually i speak cantonese...
but when i use computer i will only write in english...write in mandarin is very time cosuming for me....
actually i seldom speak english in real life...actually i speak cantonese... but when i use computer i will only write in english...write in mandarin is very time cosuming for me....
You are from HONGKONG or Guangdong?
:D Maybe you can speak/write cantonese:D :D
反对者不要打我PP哦