binary-analysis-patterns

To identify function boundaries during binary analysis, this Skill detects architecture-specific prologues, epilogues, and calling conventions across x86-64 and ARM. It systematically maps these patterns to reconstruct program logic and reveal control flow graph structures.

Recognizing control flow patterns in disassembly involves identifying switch tables and data-flow structures to reconstruct the CFG. This Skill highlights decompilation cues by mapping these control flow mechanisms across the provided compiled binary.

These binary analysis patterns are suitable for malware analysis and vulnerability research. The Skill applies disassembly fundamentals and data-structure pattern recognition to reconstruct program logic within unknown compiled binaries.

Reconstructing program logic from unknown binaries requires familiarity with common assembly patterns and architecture-specific conventions. This prerequisite knowledge is necessary to interpret the disassembly fundamentals and decompilation cues the Skill generates.

This Skill provides practical workflows that integrate with tools like Ghidra, IDA Pro, or Binary Ninja. It supports reverse engineering by outputting function boundary detection and pattern matches for analysis within these environments.