逆编译中用户自定义库函数识别技术研究  

Research on Recognition of User Library Functions in Decompiling

作　　者：张龙杰[1] 谢晓方[1] 袁胜智[1] 李洪周[1] 

机构地区：[1]海军航空工程学院

出　　处：《现代电子技术》2009年第14期120-123,共4页Modern Electronics Technique

摘　　要：静态库函数分为系统库函数和用户自定义库函数,它的识别问题一直是反编译技术的难点,特别是对于用户自定义库函数,由于通用性低,信息获取困难,因而这方面的研究很少。分析用户自定义库函数在存储器中的存储方式和特征,提出一种用户自定义库函数的识别方法,首次采用两级中间语言(低级中间语言和高级中间语言)的形式进行处理,对中间语言的生成、函数伪代码模块的提取、识别模板的建立等关键技术进行详细的分析研究,最后给出识别实例。实践证明具有较高的应用价值。The storage and constitution patterns of user library functions in binary code is analysed, then a method for recognizing user library functions,which is more difficult and complex than the recognition of system library functions. In the course of recognition,it adopts an intermediate language that consists of two levels - the low level intermediate language and the high level intermediate language. By this measure, the scale of the work is reduced. The rest parts of the article put its focus on the key technology of de - compilation, which includs control flow analysis, data type analysis, the pick up of user library functions and the establishment of function recognition template, etc. In the end, it offers an example to illustrate the method which proves to be of great use in practice.

关 键 词：用户自定义库函数 中间语言 逆编译 控制流分析 数据类型分析 

分 类 号：TP311.51[自动化与计算机技术—计算机软件与理论]