一种控制流基本块的静动态结合反汇编方法  

Disassembly Method Combined Static and Dynamic State Based on Control Flow Block

作　　者：唐成华[1,2] 王璐[1] 张鑫[1] 王宇[2] 强保华[1,3] 

机构地区：[1]桂林电子科技大学广西信息科学实验中心,广西桂林541004 [2]迪肯大学信息技术系 [3]桂林电子科技大学广西可信软件重点实验室,广西桂林541004

出　　处：《小型微型计算机系统》2016年第9期1942-1946,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61462020;61163057;61363006)资助;广西自然科学基金项目(2014GXNSFAA118375)资助;广西信息科学实验中心基金项目(20130329)资助;桂林电子科技大学研究生教育创新计划项目(GDYCSZ201421)资助;广西可信软件重点实验室基金资助

摘　　要：针对静态反汇编间接跳转定位难和反汇编路径覆盖等问题,提出一种基于控制流基本块精确的静动态结合反汇编方法,首先利用函数定位切分识别函数块依赖关系,其次从超汇编指令集中产生粗粒度控制流图,接着结合中断标记点处理机制实现对代码执行路径可知,继而建立精确的控制流基本块,并最终完成以实际控制流引导的反汇编过程.实验结果表明该方法能有效地提高代码反汇编的准确性和覆盖率,为代码分析提供了一种新的解决途径.Aiming at the problem of the difficulty of indirect jump location in static disassembly and the coverage of disassembly path, a disassembly method combined static and dynamic state based on control flow is proposed. Firstly, The function block dependency relations are identified by using the function location. Secondly, the coarse grain control flow graph is generated from the super as- sembly instruction, and the code execution path can be known by the combination of the interrupt mark point processing mechanism, then the accurate control flow block is established, and the disassembly process under the guidance of actual control flow is finally completed. Experimental results indicate this method can effectively improve the accuracy and coverage of code disassembly, and pro- vides a new solution for code analysis.

关 键 词：反汇编 控制流图 基本块 中断处理机制 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]