angr.analyses.deobfuscator.scope_ops_analyzer¶

class angr.analyses.deobfuscator.scope_ops_analyzer.ScopeOpsWalker¶

Bases: CStructuredCodeWalker

ScopeOpsWalker walks a C construct (typically a C function) and extracts counts of all operations in each scope. Its intended use is to reason about the intent of different parts of functions (e.g., crypto implementations).

__init__()¶

handle(obj)¶

handle_CBinaryOp(obj)¶

handle_CUnaryOp(obj)¶

class angr.analyses.deobfuscator.scope_ops_analyzer.ScopeOpsAnalyzer¶

Bases: Analysis

An analysis that extracts and analyzes operations used by different scopes of a function.

__init__(cfunc)¶

Parameters:: cfunc (CFunction)

filter_scopes(wanted_ops, min_count)¶

Parameters:: wanted_ops (set)

crypto_scopes(min_count=20)¶