I haven't heard of this tool before, but I don't think it would work for obfuscated code. Check out the graph image on my wiki [1]. While this image doesn't sho

I haven't heard of this tool before, but I don't think it would work for obfuscated code. Check out the graph image on my wiki [1]. While this image doesn't show the exact scenario, imagine that the first instruction is a `JUMP_ABSOLUTE 100` and the rest of the instructions between offset [3,100) are just garbage or invalid. A naive disassembler (like the `dis` module in python) interprets the bytecode linearly -- i.e. one instruction after another. Rizin's diassembler [2] seems to take the same approach. The way I do disassembly is to only disassemble code paths that are potentially executed by queueing non-conditional jumps, both targets of a conditional jump, and the next instruction when the current instruction is non-jumping instruction. [1] https://github.com/landaire/unfuck/wiki/Obfuscation-Tricks https://github.com/landaire/unfuck/wiki/Obfuscation-Tricks [2] https://github.com/rizinorg/rizin/blob/e3d1b967854c33cf9dfbbfa58e9da16b2525a881/librz/asm/arch/pyc/pyc_dis.c#L35 https://github.com/rizinorg/rizin/blob/e3d1b967854c33cf9dfbb...