Skip to content

Instantly share code, notes, and snippets.

@5teven1in
Created September 26, 2020 01:59
Show Gist options
  • Save 5teven1in/526f9255bd1bad044fdb83ee32b892d3 to your computer and use it in GitHub Desktop.
Save 5teven1in/526f9255bd1bad044fdb83ee32b892d3 to your computer and use it in GitHub Desktop.

Easy Unpack

Concept

  • basic reverse

Solution

After the binary decrypt and extract the real code, it will jump to the OEP. We can find the jump instrcution at the end of the binary.

...
jmp     loc_401150

So the OEP is 00401150.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment