-
-
[转帖]OllyDeobfuscator 1.0 by NTG
-
发表于: 2014-3-18 11:28 4567
-
OllyDeobfuscator 1.0 by NTG
I want to share a plugin I've written for OllyDbg 1.10, OllyDeobfuscator.
Features:
1. Move NOPs in selected code to bottom.
- Select the code and start the operation to move NOPs to the bottom of the code.
2. Deobfuscate selected code.
- Select the code you want to deobfuscate and it will try to remove unnecessary instructions.
3. Smart deobfuscation.
- This is useful if you want to grab code with jumps to different locations.
You need to provide the start address and a stop condition.
Also you can get the code from the run trace or the selected code.
Once the code is grabbed, you can deobfuscate it and write it to a location.
A problem is that there are not so much instructions supported.
赞赏
他的文章
看原图
赞赏
雪币:
留言: