Convert machine code into LLVM IR for reverse engineering workflows.
npx skills add https://github.com/NeverSight/NeverC --skill binary-lifting-neversight
Please help me install this Agent Skill. Skill: binary-lifting Source: https://github.com/NeverSight/NeverC/tree/main/.agents/skills/binary-lifting Command: npx skills add https://github.com/NeverSight/NeverC --skill binary-lifting-neversight
Binary lifting turns opaque machine code into an intermediate representation you can analyze, transform, and recompile, reducing the effort needed for reverse engineering and vulnerability research.
Real-world use case: you have an obfuscated x86-64 sample and need to convert it into LLVM IR to identify the original logic, simplify the control/data flow, and guide a safe deobfuscation or patch.
Ask the AI to lift an x86-64 binary into LLVM IR by proposing a pipeline covering disassembly, function recovery, indirect jump resolution, and IR generation with correctness-minded flag/memory modeling.
High-intent search queries and answers about installing and using this skill.
Binary lifting converts machine code into LLVM IR by modeling instruction semantics, tracking flags and side effects, and reconstructing function boundaries to enable downstream analysis and transformation workflows.
Control-flow recovery from obfuscated binaries uses recursive descent, speculative disassembly, and indirect jump resolution to reconstruct function boundaries and branching behavior for accurate IR generation and deobfuscation.
Yes, Triton-assisted lifting uses symbolic execution to extract AST and register semantics, translating them into LLVM IR so you can run simplification passes, recover VM handler logic, and re-emit cleaned code for further study.
Binary lifting applies across architectures by mapping x86 and ARM operations into LLVM IR while tracking flags and side effects, enabling deobfuscation and recompilation workflows for samples from different platforms.
Validation-oriented comparison checks the lifted LLVM IR behavior against the original binary by verifying that instruction semantics translation and control-flow reconstruction accurately model flags, memory, and side effects.
LLVM IR reduces the effort needed for vulnerability research by turning opaque machine code into an intermediate representation you can analyze, optimize, and transform to guide safe deobfuscation or patching.
backengineeringConvert binary executables into LLVM IR using RetDec, McSema, and Triton.
randDiscover relevant IR skills during LLVM IR and compiler development workflows.
Clay-HHKPerform exact symbolic mathematics on algebraic, calculus, and differential equation expressions.
gmh5225Translates machine code into LLVM IR for analysis and de-ossification.
