angr.analyses.deobfuscator.api_obf_peephole_optimizer

class angr.analyses.deobfuscator.api_obf_peephole_optimizer.APIObfType1PeepholeOptimizer

Bases: PeepholeOptimizationExprBase

Integrate type-1 deobfuscated API into decompilation output.

NAME = 'Simplify Type 1 API obfuscation references'

expr_classes = (<class 'angr.ailment.expression.Load'>,)

optimize(expr, **kwargs)

Parameters:

expr (Load)

class angr.analyses.deobfuscator.api_obf_peephole_optimizer.APIObfType3PeepholeOptimizer

Bases: PeepholeOptimizationExprBase

Integrate type-3 deobfuscated APIs (calls with const arguments which return APIs) into the decompilation output.

NAME = 'Simplify Type 3 API obfuscation references'

expr_classes = (<class 'angr.ailment.expression.Call'>,)

optimize(expr, **kwargs)

Parameters:

expr (Call)