Introduction

By using this python script, you can deobfuscate a batch script that is obfuscated with string substitution and escape character techniques.

Running the script

To run the script

python batch_interpreter.py --file c:\test\obfuscated_file.bat

* The code was written in a hurry and needs a major refactoring. Please stay tuned.

Use as a lib

frombatch_deobfuscator.batch_interpreterimportBatchDeobfuscator,handle_bat_filedeobfuscator=BatchDeobfuscator()
itsthewine=handle_bat_file(deobfuscator,'/home/petersichel/comfortable_study/newyorktownhouse.bat')