Hi,
i need to do that. is there already a tool which can do that or does anybody have scripts or tools that help?
If i cant find anything, i will start programming a tool that can do the job (looks like a little bit work though).
Features should be:
-remove garbage-jumps like:
jmp @l1
@l1:
jmp @l2
@l2
or
call @l1
@l1:
xchg ss:[esp],ecx
pop ecx
-remove constant manipulation like
push 0343254325
pop eax
xor eax,e4452435
and eax,4352452
-refold loops (that is the most difficult thing i guess)
i want to detect which code (address) is executed several times and then merge it somehow. I think i need to make the code address-free and then introduce labels...
any ideas are welcome :)
PS: I am planning to use ollydbg tracelog and write a seperate app. Do you think an ida plugin would have any advantages? Ida-tracing doesnt work as good somehow and unfortunately x86emu doesnt support tracing :(
regards!




