[OllyDbg 1.x] [转帖]OllyDeobfuscator 1.0 by NTG
2014-3-18 11:28 2761
OllyDeobfuscator 1.0 by NTG
I want to share a plugin I've written for OllyDbg 1.10, OllyDeobfuscator.
1. Move NOPs in selected code to bottom.
- Select the code and start the operation to move NOPs to the bottom of the code.
2. Deobfuscate selected code.
- Select the code you want to deobfuscate and it will try to remove unnecessary instructions.
3. Smart deobfuscation.
- This is useful if you want to grab code with jumps to different locations.
You need to provide the start address and a stop condition.
Also you can get the code from the run trace or the selected code.
Once the code is grabbed, you can deobfuscate it and write it to a location.
A problem is that there are not so much instructions supported.