Towards Generic Deobfuscation of Windows API Calls

Vadim Kotov, Michael Wojnowicz

A common way to get insight into a malicious program's functionality is to look at which API functions it calls. To complicate the reverse engineering of their programs, malware au…