Let's suppose an obfuscated binary program.
This programs loads a payload in memory. This payload contains encrypted instructions. The program decrypts this payload and jumps to it.
I want to break the program in immunity debugger when the CPU runs a NOP instruction (this is an example).
I can do it manually by running the program step by step and see if EIP points on a 0x90 byte. But I want to automate this task. Is there a way to do that in immunity debugger ?
Thanks a lot