I’ll be presenting on deobfuscating stack strings at @BSidesDEN this Friday. In the meantime, here’s an interactive playground to see how they work: http://www.williballenthin.com/tools/emu/