{"id":1712,"date":"2024-03-04T01:30:11","date_gmt":"2024-03-03T16:30:11","guid":{"rendered":"https:\/\/h4ck.kr\/?p=1712"},"modified":"2024-05-20T13:28:27","modified_gmt":"2024-05-20T04:28:27","slug":"easy-unpack","status":"publish","type":"post","link":"https:\/\/h4ck.kr\/?p=1712","title":{"rendered":"Easy Unpack"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">ReadMe.txt<\/h2>\n\n\n\n<p>ReversingKr UnpackMe<\/p>\n\n\n\n<p>Find the OEP<\/p>\n\n\n\n<p>ex) 00401000<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n\n\n<p>OEP\ub780 Original Entry Point\ub85c,\u00a0<strong>\ud328\ud0b9\ub41c \ud30c\uc77c\uc758 \uc2e4\uc81c \ud504\ub85c\uadf8\ub7a8 \uc2dc\uc791 \ubd80\ubd84<\/strong>\uc744 \uc758\ubbf8\ud55c\ub2e4.<\/p>\n\n\n\n<p>\ub514\ubc84\uae45\ud558\ub2e4\ubcf4\uba74 OEP \uc9c0\uc810\uc744 \ucc3e\uc744 \uc218 \uc788\ub2e4.<br>jmp loc_0x401150 \uc774 \uc9c0\uc810\uc774 OEP\ub85c, \uc810\ud504\ub418\ub294 \uac83\uc744 \ubcfc \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p>\ub610, \uc815\uc801\ubd84\uc11d\uc744 \ud588\uc744\ub54c\uc640\ub294 \ub2ec\ub9ac \ub3d9\uc801\ubd84\uc11d\uc73c\ub85c \ub514\ubc84\uae45\ud574\uc11c \ud655\uc778\ud574\ubcf4\uba74,<br>0x401150 \uc9c0\uc810\ubd80\ud130 \uba85\ub839\uc5b4\uac00 \uc644\uc804\ud788 \ub2e4\ub974\uac8c \ubcf4\uc774\ub294 \uac83\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"555\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15-1024x555.png\" alt=\"\" class=\"wp-image-1715\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15-1024x555.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15-300x163.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15-768x416.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15-1536x832.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-15.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"555\" src=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13-1024x555.png\" alt=\"\" class=\"wp-image-1713\" srcset=\"https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13-1024x555.png 1024w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13-300x163.png 300w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13-768x416.png 768w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13-1536x832.png 1536w, https:\/\/h4ck.kr\/wp-content\/uploads\/2024\/03\/image-13.png 1920w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">FLAG<\/h2>\n\n\n\n<p><strong>00401150<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ReadMe.txt ReversingKr UnpackMe Find the OEP ex) 00401000 Solution OEP\ub780 Original Entry Point\ub85c,\u00a0\ud328\ud0b9\ub41c \ud30c\uc77c\uc758 \uc2e4\uc81c \ud504\ub85c\uadf8\ub7a8 \uc2dc\uc791 \ubd80\ubd84\uc744 \uc758\ubbf8\ud55c\ub2e4. \ub514\ubc84\uae45\ud558\ub2e4\ubcf4\uba74 OEP \uc9c0\uc810\uc744 \ucc3e\uc744 \uc218 \uc788\ub2e4.jmp loc_0x401150 \uc774 \uc9c0\uc810\uc774 OEP\ub85c, \uc810\ud504\ub418\ub294 \uac83\uc744 \ubcfc \uc218 \uc788\ub2e4. \ub610, \uc815\uc801\ubd84\uc11d\uc744 \ud588\uc744\ub54c\uc640\ub294 \ub2ec\ub9ac \ub3d9\uc801\ubd84\uc11d\uc73c\ub85c \ub514\ubc84\uae45\ud574\uc11c \ud655\uc778\ud574\ubcf4\uba74,0x401150 \uc9c0\uc810\ubd80\ud130 \uba85\ub839\uc5b4\uac00 \uc644\uc804\ud788 \ub2e4\ub974\uac8c \ubcf4\uc774\ub294 \uac83\uc744 \ud655\uc778\ud560 \uc218 \uc788\ub2e4. FLAG 00401150<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[16],"tags":[24],"class_list":["post-1712","post","type-post","status-publish","format-standard","hentry","category-reversing-kr","tag-reversing"],"_links":{"self":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/1712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1712"}],"version-history":[{"count":1,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/1712\/revisions"}],"predecessor-version":[{"id":1716,"href":"https:\/\/h4ck.kr\/index.php?rest_route=\/wp\/v2\/posts\/1712\/revisions\/1716"}],"wp:attachment":[{"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/h4ck.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}