@suprjami I just wrote about those obfuscation techniques:

https://hackers.town/@madcap/110503296565140190