XOR-Decode-Strings-IDA-Plugin icon indicating copy to clipboard operation
XOR-Decode-Strings-IDA-Plugin copied to clipboard

verified publisher icon jstrosch
→

Metadata

This IDA Python plugin is intended to get you started creating IDA Plugins with Python, recognize the importance of deobfuscating strings and work on translating assembly to a higher-level language (i...

Results 1 XOR-Decode-Strings-IDA-Plugin issues
Sort by recently updated
recently updated
newest added

Consider using idaapi.get_arg_addrs() instead of idc.PrevHead()

About https://github.com/jstrosch/XOR-Decode-Strings-IDA-Plugin/blob/d5d7a154b5f024710c47b72b7fb782ee71e64ac3/xor_string_deobfuscator.py#L22 consider replacing ``` addr = idc.PrevHead(x.frm) obfuscated_string = GetOperandValue(addr, 0) ``` with ``` addr = idaapi.get_arg_addrs( x.frm ) obfuscated_string = GetOperandValue( addr[0], 0 ) ``` Since it'll be...

cw2k avatar cw2k

← Metadata

27
Stars
10
Forks
Watchers

Owner

verified publisher icon jstrosch

Metadata

This IDA Python plugin is intended to get you started creating IDA Plugins with Python, recognize the importance of deobfuscating strings and work on translating assembly to a higher-level language (i...

Back