What problem does it solve? Reverse engineers often face binaries hardened with junk code, opaque predicates, control flow flattening, VM protection, and encrypted strings, and base models frequently conflate packing with obfuscation or miss the right deobfuscation strategy. This Skill provides a structured playbook for identifying, classifying, and defeating these protections in native binaries. ## Core Features & Use Cases - Obfuscation Identification: Quick symptom-to-technique mapping (flat CFG, mov-only code, pushad VM entry, XOR loops, empty IAT) with a full decision tree. - Deobfuscation Techniques: Concrete methods for opaque predicate proving with Z3, symbolic deflattening with angr, SMC unpacking via Unicorn emulation, VM handler extraction, and import hash resolution. - Tool Guidance: A curated toolbox covering IDA Pro, Ghidra, D-810, Triton, miasm, REVEN, demovfuscator, x64dbg, and Unicorn with best-fit scenarios. - Use Case: Given a CTF binary whose disassembly shows a single giant switch dispatcher, use this Skill to recognize control flow flattening and apply D-810 or angr-based symbolic deflattening to recover the original CFG. ## Quick Start Analyze this obfuscated binary, identify which obfuscation techniques it uses, and walk me through defeating them step by step.
