I came back to reply with just this. Christopher Domas's conference talk on the movfuscator is legendary:

https://www.youtube.com/watch?v=R7EEoWg6Ekk