angr 9.2.166__cp310-abi3-manylinux_2_28_aarch64.whl

angr/analyses/decompiler/dephication/__init__.py

@@ -0,0 +1,6 @@
+from __future__ import annotations
+from .graph_vvar_mapping import GraphDephicationVVarMapping
+from .graph_dephication import GraphDephication
+from .seqnode_dephication import SeqNodeDephication
+
+__all__ = ["GraphDephication", "GraphDephicationVVarMapping", "SeqNodeDephication"]

angr/analyses/decompiler/dephication/dephication_base.py

@@ -0,0 +1,100 @@
+from __future__ import annotations
+from typing import TYPE_CHECKING
+from typing import Any
+import logging
+from collections import defaultdict
+
+from angr.analyses import Analysis
+
+if TYPE_CHECKING:
+    from angr import KnowledgeBase
+
+l = logging.getLogger(name=__name__)
+
+
+class DephicationBase(Analysis):
+    """
+    This is the base class for analyses that removes phi expressions from AIL graphs, SequenceNodes, and other types of
+    AIL statement containers.
+    """
+
+    def __init__(
+        self,
+        func,
+        vvar_to_vvar_mapping: dict[int, int] | None = None,
+        rewrite: bool = False,
+        variable_kb: KnowledgeBase | None = None,
+    ):
+        if isinstance(func, str):
+            self._function = self.kb.functions[func]
+        else:
+            self._function = func
+
+        self.variable_kb = variable_kb
+        self.vvar_to_vvar_mapping = vvar_to_vvar_mapping if vvar_to_vvar_mapping is not None else None
+        self.rewrite = rewrite
+        self.output = None
+
+    def _analyze(self):
+        if self.vvar_to_vvar_mapping is None:
+            self.vvar_to_vvar_mapping = self._collect_and_remap()
+
+        if self.rewrite:
+            self.output = self._rewrite_container()
+
+    def _collect_and_remap(self) -> dict[int, int]:
+        # collect phi assignments
+        phi_to_srcvarid = self._collect_phi_assignments()
+
+        vvar_to_vvar = {}  # a mapping between vvar IDs to phi vvar IDs when applicable
+        vvar_to_phivarids = defaultdict(set)
+        for phi_varid, varids in phi_to_srcvarid.items():
+            for varid in varids:
+                vvar_to_phivarids[varid].add(phi_varid)
+
+        # iterate until fixed point
+        while True:
+            changed = False
+            for varid in list(vvar_to_phivarids):
+                phivarids = vvar_to_phivarids[varid]
+                new = phivarids.copy()
+                for vv in phivarids:
+                    if vv in vvar_to_phivarids:
+                        new |= vvar_to_phivarids[vv]
+                if new != phivarids:
+                    changed = True
+                    vvar_to_phivarids[varid] = new
+
+            if not changed:
+                break
+
+        # unify those that are mapped to multiple phi variables
+        phivarid_to_phivarid = {}
+        for phivarids in vvar_to_phivarids.values():
+            if len(phivarids) > 1:
+                min_phivarid = min(phivarids)
+                # remap the existing ones first
+                for phivarid, mapped_to in list(phivarid_to_phivarid.items()):
+                    if phivarid in phivarids:
+                        continue
+                    if mapped_to in phivarids:
+                        phivarid_to_phivarid[phivarid] = min_phivarid
+                # map the new ones
+                for phivarid in phivarids:
+                    phivarid_to_phivarid[phivarid] = min_phivarid
+
+        # fill in vvar_to_vvar mapping
+        for phi_varid, varids in phi_to_srcvarid.items():
+            mapped_phivarid = phivarid_to_phivarid.get(phi_varid, phi_varid)
+            for varid in varids:
+                vvar_to_vvar[varid] = mapped_phivarid
+            if phi_varid != mapped_phivarid:
+                vvar_to_vvar[phi_varid] = mapped_phivarid
+
+        return vvar_to_vvar
+
+    def _collect_phi_assignments(self) -> dict[int, set[int]]:
+        raise NotImplementedError
+
+    def _rewrite_container(self) -> Any:
+        raise NotImplementedError

angr/analyses/decompiler/dephication/graph_dephication.py

@@ -0,0 +1,70 @@
+from __future__ import annotations
+from typing import TYPE_CHECKING
+import logging
+from collections import defaultdict
+
+import networkx
+
+from angr.ailment.expression import Phi, VirtualVariable
+from angr.ailment.statement import Assignment
+from angr.knowledge_plugins.functions import Function
+from angr.analyses import register_analysis
+from .graph_rewriting import GraphRewritingAnalysis
+from .dephication_base import DephicationBase
+
+if TYPE_CHECKING:
+    from angr import KnowledgeBase
+
+
+l = logging.getLogger(name=__name__)
+
+
+class GraphDephication(DephicationBase):  # pylint:disable=abstract-method
+    """
+    GraphDephication removes phi expressions from an AIL graph, essentially transforms a partial-SSA form of AIL graph
+    to a normal AIL graph.
+    """
+
+    def __init__(
+        self,
+        func: Function | str,
+        ail_graph,
+        vvar_to_vvar_mapping: dict[int, int] | None = None,
+        rewrite: bool = False,
+        variable_kb: KnowledgeBase | None = None,
+    ):
+        """
+        :param func:                            The subject of the analysis: a function, or a single basic block
+        :param ail_graph:                       The AIL graph to transform.
+        """
+
+        self._graph = ail_graph
+
+        super().__init__(func, vvar_to_vvar_mapping=vvar_to_vvar_mapping, rewrite=rewrite, variable_kb=variable_kb)
+
+        self._analyze()
+
+    def _collect_phi_assignments(self) -> dict[int, set[int]]:
+        g = self._graph
+        phi_to_src = defaultdict(set)
+
+        for block in g:
+            for stmt in block.statements:
+                if isinstance(stmt, Assignment) and isinstance(stmt.dst, VirtualVariable) and isinstance(stmt.src, Phi):
+                    for _, vvar in stmt.src.src_and_vvars:
+                        if vvar is None:
+                            l.debug("Invalid vvar None found in %r.src.src_and_vvars.", stmt)
+                        else:
+                            phi_to_src[stmt.dst.varid].add(vvar.varid)
+
+        return phi_to_src
+
+    def _rewrite_container(self) -> networkx.DiGraph:
+        # replace all vvars with phi variables in the graph
+        rewriter = GraphRewritingAnalysis(
+            self.project, self._function, self._graph, self.vvar_to_vvar_mapping, variable_kb=self.variable_kb
+        )
+        return rewriter.out_graph
+
+
+register_analysis(GraphDephication, "GraphDephication")

angr/analyses/decompiler/dephication/graph_rewriting.py

@@ -0,0 +1,112 @@
+from __future__ import annotations
+from typing import Any
+import logging
+
+import networkx
+
+from angr import ailment
+from angr.utils.ail import is_phi_assignment
+from angr.analyses import ForwardAnalysis
+from angr.analyses.forward_analysis.visitors.graph import NodeType
+from angr.analyses.forward_analysis import FunctionGraphVisitor
+from .rewriting_engine import SimEngineDephiRewriting
+
+
+l = logging.getLogger(__name__)
+
+
+class GraphRewritingAnalysis(ForwardAnalysis[None, NodeType, object, object]):
+    """
+    This analysis traverses the AIL graph and rewrites virtual variables accordingly.
+    """
+
+    def __init__(self, project, func, ail_graph, vvar_to_vvar: dict[int, int], variable_kb=None):
+        self.project = project
+        self._function = func
+        self._graph_visitor = FunctionGraphVisitor(self._function, ail_graph)
+        self.variable_kb = variable_kb
+
+        ForwardAnalysis.__init__(
+            self, order_jobs=False, allow_merging=False, allow_widening=False, graph_visitor=self._graph_visitor
+        )
+        self._graph = ail_graph
+        self._vvar_to_vvar = vvar_to_vvar
+        self._engine_ail = SimEngineDephiRewriting(
+            self.project, self._vvar_to_vvar, func_addr=self._function.addr, variable_kb=self.variable_kb
+        )
+
+        self._visited_blocks: set[Any] = set()
+        self.out_blocks = {}
+
+        self._analyze()
+
+        # remove phi statements
+        # modifying blocks inline should be fine here - no one has ever used these blocks
+        for block in self.out_blocks.values():
+            block.statements = [stmt for stmt in block.statements if not is_phi_assignment(stmt)]
+
+        self.out_graph = self._make_new_graph(ail_graph)
+
+    def _make_new_graph(self, old_graph: networkx.DiGraph) -> networkx.DiGraph:
+        new_graph = networkx.DiGraph()
+        for node in old_graph:
+            new_graph.add_node(self.out_blocks.get((node.addr, node.idx), node))
+
+        for src, dst in old_graph.edges:
+            new_graph.add_edge(
+                self.out_blocks.get((src.addr, src.idx), src), self.out_blocks.get((dst.addr, dst.idx), dst)
+            )
+
+        return new_graph
+
+    #
+    # Main analysis routines
+    #
+
+    def _pre_analysis(self):
+        pass
+
+    def _initial_abstract_state(self, node) -> None:
+        return None
+
+    def _run_on_node(self, node, state: None):
+        """
+
+        :param node:    The current node.
+        :param state:   The analysis state.
+        :return:        A tuple: (any changes occur, successor state)
+        """
+
+        if isinstance(node, ailment.Block):
+            block = node
+            block_key = (node.addr, node.idx)
+            engine = self._engine_ail
+        else:
+            l.warning("Unsupported node type %s.", node.__class__)
+            return False, None
+
+        if block_key in self._visited_blocks:
+            return False, None
+
+        engine: SimEngineDephiRewriting
+        engine.out_block = None
+        engine.process(None, block=block)
+
+        self._visited_blocks.add(block_key)
+
+        if engine.out_block is not None:
+            assert engine.out_block.addr == block.addr
+
+            if self.out_blocks.get(block_key, None) == engine.out_block:
+                return True, None
+            self.out_blocks[block_key] = engine.out_block
+            engine.out_block = None
+            return True, None
+
+        return True, None
+
+    def _intra_analysis(self):
+        pass
+
+    def _post_analysis(self):
+        pass

angr/analyses/decompiler/dephication/graph_vvar_mapping.py

@@ -0,0 +1,363 @@
+from __future__ import annotations
+import logging
+from collections import defaultdict
+
+from angr.ailment import AILBlockWalker
+from angr.ailment.block import Block
+from angr.ailment.expression import Phi, VirtualVariable, VirtualVariableCategory
+from angr.ailment.statement import Assignment, Jump, ConditionalJump, Label
+
+from angr.analyses import Analysis
+from angr.analyses.s_reaching_definitions import SRDAModel
+from angr.knowledge_plugins.functions import Function
+from angr.analyses import register_analysis
+from angr.utils.ssa import is_phi_assignment, DEPHI_VVAR_REG_OFFSET
+
+l = logging.getLogger(name=__name__)
+
+
+class GraphDephicationVVarMapping(Analysis):  # pylint:disable=abstract-method
+    """
+    GraphDephicationVVarMapping collects information from an AIL graph regarding how virtual variables should be mapped
+    to each other in order to remove phi variables. This mapping will later be used to transform a partial-SSA form of
+    AIL graph to a conventional AIL graph.
+
+    This class largely implements "Translating Out of Static Single Assignment Form" by Sreedhar et al.
+    """
+
+    def __init__(
+        self,
+        func: Function | str,
+        ail_graph,
+        entry=None,
+        vvar_id_start: int = 0,
+        arg_vvars: list[VirtualVariable] | None = None,
+    ):
+        """
+        :param func:                            The subject of the analysis: a function, or a single basic block
+        :param ail_graph:                       The AIL graph to transform.
+        """
+
+        if isinstance(func, str):
+            self._function = self.kb.functions[func]
+        else:
+            self._function = func
+        self._graph = ail_graph
+        self._entry = (
+            entry
+            if entry is not None
+            else next(iter(bb for bb in self._graph if bb.addr == self._function.addr and bb.idx is None))
+        )
+        self._vvar_defloc = {}
+        self.vvar_id_start = vvar_id_start
+        self._stmts_to_prepend = defaultdict(list)
+        self._arg_vvars = arg_vvars or []
+
+        self.vvar_to_vvar_mapping = None
+        self.copied_vvar_ids: set[int] = set()
+        self._rd: SRDAModel = self.project.analyses.SReachingDefinitions(
+            subject=self._function, func_graph=self._graph
+        ).model
+        self._blocks: dict[tuple[int, int | None], Block] = {(block.addr, block.idx): block for block in self._graph}
+
+        self._analyze()
+
+    def _analyze(self):
+        self.vvar_to_vvar_mapping = self._collect_and_remap()
+
+    def _collect_and_remap(self) -> dict[int, int]:
+        # collect phi assignments
+        phi_to_srcvarid = self._collect_phi_assignments()
+
+        # initialize phi_congruence_class
+        phi_congruence_class: dict[int, set[int]] = {}
+        for phi_varid in phi_to_srcvarid:
+            phi_congruence_class[phi_varid] = {phi_varid}
+        for src_and_varids in phi_to_srcvarid.values():
+            for _, varid in src_and_varids:
+                phi_congruence_class[varid] = {varid}
+
+        # compute liveness
+        liveness = self.project.analyses.SLiveness(
+            self._function, func_graph=self._graph, entry=self._entry, arg_vvars=self._arg_vvars
+        )
+
+        live_ins = liveness.model.live_ins
+        live_outs = liveness.model.live_outs
+        interference = liveness.interference_graph()
+
+        unresolved_neighbor_map = defaultdict(set)
+
+        # check for interferences
+        candidate_vvar_set_to_phiid: defaultdict[frozenset[int], set[int]] = defaultdict(set)
+        for phi_id, src_and_varids in phi_to_srcvarid.items():
+            candidate_vvar_set: set[int] = set()
+            src_and_varids = list(src_and_varids)
+
+            for i in range(-1, len(src_and_varids)):
+                for j in range(i + 1, len(src_and_varids)):
+                    if i == -1:
+                        src1 = self._vvar_defloc[phi_id][0]
+                        var1 = phi_id
+                    else:
+                        src1, var1 = src_and_varids[i]
+                    src2, var2 = src_and_varids[j]
+
+                    if var1 == var2:
+                        continue
+
+                    if interference.has_edge(var1, var2):
+                        intersection_1 = phi_congruence_class[var1].intersection(live_outs[src1])
+                        intersection_2 = phi_congruence_class[var2].intersection(live_outs[src2])
+                        if intersection_1 and not intersection_2:
+                            # case 1
+                            candidate_vvar_set.add(var1)
+                        elif not intersection_1 and intersection_2:
+                            # case 2
+                            candidate_vvar_set.add(var2)
+                        elif intersection_1 and intersection_2:
+                            # case 3
+                            candidate_vvar_set.add(var1)
+                            candidate_vvar_set.add(var2)
+                        else:
+                            # case 4
+                            unresolved_neighbor_map[var1].add(var2)
+                            unresolved_neighbor_map[var2].add(var1)
+
+            # process unresolved_neighbor_map in a decreasing order of the number of neighbors
+            while unresolved_neighbor_map:
+                varid, neighbors = max(unresolved_neighbor_map.items(), key=lambda x: len(x[1]))
+                del unresolved_neighbor_map[varid]
+
+                candidate_vvar_set.add(varid)
+
+                for neighbor in neighbors:
+                    if neighbor in unresolved_neighbor_map:
+                        unresolved_neighbor_map[neighbor].discard(varid)
+                        if not unresolved_neighbor_map[neighbor]:
+                            del unresolved_neighbor_map[neighbor]
+
+            if candidate_vvar_set:
+                candidate_vvar_set_to_phiid[frozenset(candidate_vvar_set)].add(phi_id)
+
+        for vvar_set, phi_ids in candidate_vvar_set_to_phiid.items():
+            # insert copies of variables as needed
+            for varid in vvar_set:
+                insertion_type, new_vvar_ids = self._insert_vvar_copy(varid, phi_ids)
+
+                if insertion_type == 0:
+                    for src, old_vvar_id, new_vvar_id in new_vvar_ids:
+                        self.copied_vvar_ids.add(new_vvar_id)
+
+                        phi_congruence_class[new_vvar_id] = {new_vvar_id}
+                        live_outs[src].add(new_vvar_id)
+
+                        src_block = self._blocks[(src[0], src[1])]
+                        for succ in self._graph.successors(src_block):
+                            succ_key = succ.addr, succ.idx
+                            if old_vvar_id not in live_ins[succ_key] and not self._used_in_phi(
+                                succ, src_block, old_vvar_id
+                            ):
+                                live_outs[src].discard(old_vvar_id)
+
+                        # update interference graph
+                        for vvar_id in live_outs[src]:
+                            interference.add_edge(new_vvar_id, vvar_id)
+
+                else:  # insertion_type == 1, i.e. the set has only one element
+                    for phi_block_loc, old_phi_varid, new_phi_varid in new_vvar_ids:
+                        self.copied_vvar_ids.add(new_phi_varid)
+
+                        phi_congruence_class[new_phi_varid] = {new_phi_varid}
+
+                        live_ins[phi_block_loc].discard(old_phi_varid)
+                        live_ins[phi_block_loc].add(new_phi_varid)
+
+                        # update interference graph
+                        for vvar_id in live_ins[phi_block_loc]:
+                            interference.add_edge(new_phi_varid, vvar_id)
+
+        # update phi_congruence_class
+        for phi_id in phi_to_srcvarid:
+            (phidef_block_addr, phidef_block_idx), phidef_stmt_idx = self._vvar_defloc[phi_id]
+            phi_block = self._blocks[(phidef_block_addr, phidef_block_idx)]
+            # phi_stmt is the newly created phi statement with variables replaced
+            phi_stmt = phi_block.statements[phidef_stmt_idx]
+            phi_src_vvar_ids = {src_vvar.varid for _, src_vvar in phi_stmt.src.src_and_vvars if src_vvar is not None}
+            new_class = phi_congruence_class[phi_stmt.dst.varid]
+            for src_vvar_id in phi_src_vvar_ids:
+                new_class |= phi_congruence_class[src_vvar_id]
+                phi_congruence_class[src_vvar_id] = new_class
+
+        # append statements that were recorded for prepending
+        for block, stmts in self._stmts_to_prepend.items():
+            for stmt in stmts:
+                self._prepend_stmt(block, stmt)
+
+        # remove congruence classes with only one element
+        for phi_varid in list(phi_congruence_class):
+            if len(phi_congruence_class[phi_varid]) == 1:
+                del phi_congruence_class[phi_varid]
+
+        mapping: dict[int, int] = {}
+        for phi_varid, congruence_class in phi_congruence_class.items():
+            for varid in congruence_class:
+                mapping[varid] = phi_varid
+
+        return mapping
+
+    def _insert_vvar_copy(
+        self, varid: int, phi_varids: set[int]
+    ) -> tuple[int, set[tuple[tuple[int, int | None], int, int]]]:
+        new_vvar_info: set[tuple[tuple[int, int | None], int, int]] = set()
+        new_vvar_id = self.vvar_id_start
+        self.vvar_id_start += 1
+
+        if varid not in phi_varids:
+            # it's one of the source vvars
+
+            stmt_appended_locs: dict[tuple[int, int | None], VirtualVariable] = {}
+
+            # update all phi statements
+            for phi_varid in phi_varids:
+                (phidef_block_addr, phidef_block_idx), phidef_stmt_idx = self._vvar_defloc[phi_varid]
+                phi_block = self._blocks[(phidef_block_addr, phidef_block_idx)]
+                phi_stmt = phi_block.statements[phidef_stmt_idx]
+
+                for src, vvar in list(phi_stmt.src.src_and_vvars):
+                    if vvar is None or vvar.varid != varid:
+                        continue
+
+                    if src not in stmt_appended_locs:
+                        # we have not yet appended a statement to this block
+                        the_block = self._blocks[src]
+                        ins_addr = the_block.addr + the_block.original_size - 1
+                        if vvar.category == VirtualVariableCategory.PARAMETER:
+                            # it's a parameter, so we copy the variable into a dummy register vvar
+                            # a parameter vvar should never be assigned to
+                            new_category = VirtualVariableCategory.REGISTER
+                            new_oident = DEPHI_VVAR_REG_OFFSET
+                        else:
+                            new_category = vvar.category
+                            new_oident = vvar.oident
+                        new_vvar = VirtualVariable(
+                            None, new_vvar_id, vvar.bits, new_category, oident=new_oident, ins_addr=ins_addr
+                        )
+                        assignment = Assignment(None, new_vvar, vvar, ins_addr=ins_addr)
+
+                        self._append_stmt(the_block, assignment, old_vvarid=varid, new_vvarid=new_vvar_id)
+
+                        stmt_appended_locs[src] = new_vvar
+
+                    else:
+                        new_vvar = stmt_appended_locs[src]
+
+                    replaced_vvars: set[int] = set()
+                    for _, phi_used_vvar in list(phi_stmt.src.src_and_vvars):
+                        if phi_used_vvar is not None and phi_used_vvar.varid == varid and varid not in replaced_vvars:
+                            replaced, phi_stmt = phi_stmt.replace(phi_used_vvar, new_vvar)
+                            assert replaced
+                            replaced_vvars.add(varid)
+                    phi_block.statements[phidef_stmt_idx] = phi_stmt
+
+                    new_vvar_info.add((src, varid, new_vvar_id))
+
+            return 0, new_vvar_info
+
+        # it's the phi assignment destination vvar
+
+        for phi_varid in phi_varids:
+            phi_vvar = self._rd.varid_to_vvar[phi_varid]
+            (phidef_block_addr, phidef_block_idx), phidef_stmt_idx = self._vvar_defloc[phi_varid]
+            the_block = self._blocks[(phidef_block_addr, phidef_block_idx)]
+            ins_addr = the_block.addr
+            new_vvar = VirtualVariable(
+                None, new_vvar_id, phi_vvar.bits, phi_vvar.category, oident=phi_vvar.oident, ins_addr=ins_addr
+            )
+            assignment = Assignment(None, phi_vvar, new_vvar, ins_addr=ins_addr)
+
+            phi_stmt = the_block.statements[phidef_stmt_idx]
+            replaced, phi_stmt = phi_stmt.replace(phi_vvar, new_vvar)
+            the_block.statements[phidef_stmt_idx] = phi_stmt
+
+            self._record_stmt_for_prepending(the_block, assignment)
+
+            new_vvar_info.add(((phidef_block_addr, phidef_block_idx), phi_varid, new_vvar_id))
+
+        return 1, new_vvar_info
+
+    @staticmethod
+    def _append_stmt(block, stmt, old_vvarid: int | None = None, new_vvarid: int | None = None):
+
+        def _handle_VirtualVariable(  # pylint:disable=unused-argument
+            expr_idx: int, expr: VirtualVariable, stmt_idx: int, stmt, block: Block | None
+        ):
+            assert old_vvarid is not None and new_vvarid is not None
+            return (
+                None
+                if expr.varid != old_vvarid
+                else VirtualVariable(
+                    None, new_vvarid, expr.bits, expr.category, oident=expr.oident, ins_addr=expr.ins_addr
+                )
+            )
+
+        if block.statements and isinstance(block.statements[-1], (Jump, ConditionalJump)):
+            block.statements.insert(len(block.statements) - 1, stmt)
+
+            # replace the vvar usage in the last statement if it's used there
+            if old_vvarid is not None and new_vvarid is not None:
+                replacer = AILBlockWalker()
+                replacer.expr_handlers[VirtualVariable] = _handle_VirtualVariable
+                new_stmt = replacer.walk_statement(block.statements[-1])
+                if new_stmt is not None and new_stmt is not block.statements[-1]:
+                    block.statements[-1] = new_stmt
+
+        else:
+            block.statements.append(stmt)
+
+    def _record_stmt_for_prepending(self, block, stmt):
+        self._stmts_to_prepend[block].append(stmt)
+
+    @staticmethod
+    def _prepend_stmt(block, stmt):
+        first_nonlabel_nonphi_idx = len(block.statements)
+        for i, s in enumerate(block.statements):
+            if not isinstance(s, Label) and not is_phi_assignment(s):
+                first_nonlabel_nonphi_idx = i
+                break
+        block.statements.insert(first_nonlabel_nonphi_idx, stmt)
+
+    @staticmethod
+    def _used_in_phi(dst_block, src_block, vvar_id: int) -> bool:
+        src = src_block.addr, src_block.idx
+        for stmt in dst_block.statements:
+            if isinstance(stmt, Label):
+                continue
+            if is_phi_assignment(stmt):
+                for src_, vvar in stmt.src.src_and_vvars:
+                    if src_ == src and vvar is not None and vvar.varid == vvar_id:
+                        return True
+            else:
+                # early exit
+                return False
+        return False
+
+    def _collect_phi_assignments(self) -> dict[int, set[tuple[tuple[int, int], int]]]:
+        g = self._graph
+        phi_to_src = defaultdict(set)
+
+        for block in g:
+            for stmt_idx, stmt in enumerate(block.statements):
+                if isinstance(stmt, Assignment) and isinstance(stmt.dst, VirtualVariable):
+                    if isinstance(stmt.src, Phi):
+                        for src, vvar in stmt.src.src_and_vvars:
+                            if vvar is None:
+                                l.debug("Invalid vvar None found in %r.src.src_and_vvars.", stmt)
+                            else:
+                                phi_to_src[stmt.dst.varid].add((src, vvar.varid))
+                    self._vvar_defloc[stmt.dst.varid] = (block.addr, block.idx), stmt_idx
+
+        return phi_to_src
+
+
+register_analysis(GraphDephicationVVarMapping, "GraphDephicationVVarMapping")