d810-ng

D-810 ng is an IDA Pro plugin designed to enhance reverse engineering by deobfuscating code during the decompilation process. It integrates seamlessly into the IDA workflow and allows for the rapid creation and configuration of deobfuscation rules, significantly simplifying complex expressions and restoring natural control flow. Notable features include a wide array of instruction-level optimizations, such as mixed Boolean arithmetic and constant folding, as well as control-flow unflatteners that tackle various obfuscation techniques, making it a comprehensive tool for malware analysis.