For those of you who don't do RE CTF's, anything XOR'd _usually_ (yeah yeah there are exceptions) indicates 'oh this region is interesting because someones tryi

For those of you who don't do RE CTF's, anything XOR'd _usually_ (yeah yeah there are exceptions) indicates 'oh this region is interesting because someones trying to obfuscate something'. Sort of like "oh hey, this has binary has been packed with __, there's a fair chance it's been done for for malware purpose". Things are a lot more complicated these days with FLEXlm and network authentication (KMS type stuff), but previously that'd be the first place one would look to start designing keygens (rather than just patching your JE -> JNE; JZ -> JNZ haha). Take a look at Didier's Github. (1) It has basically the 'batteries included starter kit' of the Immunity/Olly/IDA plugins that are useful. 1: https://github.com/DidierStevens/DidierStevensSuite https://github.com/DidierStevens/DidierStevensSuite