计算机应用与软件
計算機應用與軟件
계산궤응용여연건
COMPUTER APPLICATIONS AND SOFTWARE
2014年
1期
85-88,164
,共5页
吴伟民%司斯%阮奕邦%林志毅%蔡欣童
吳偉民%司斯%阮奕邦%林誌毅%蔡訢童
오위민%사사%원혁방%림지의%채흔동
静态递归反汇编%置信度评估函数%函数划分块
靜態遞歸反彙編%置信度評估函數%函數劃分塊
정태체귀반회편%치신도평고함수%함수화분괴
Static recursive disassembly%Confidence evaluation function%Function division block
针对传统静态递归反汇编算法因无法解析间接跳转指令而导致反汇编结果不完整的问题,提出一种基于函数划分块和置信度的递归反汇编算法:以函数为划分块,对代码间隙进行多次递归扫描,获取反汇编过程中可能遗漏的重要基本块;建立置信度评估函数,以置信度为依据,剔除冲突的基本块,筛选出高置信度的基本块,用于补充和优化反汇编结果。实验证明,改进后的递归反汇编算法具有较高的反汇编精度。
針對傳統靜態遞歸反彙編算法因無法解析間接跳轉指令而導緻反彙編結果不完整的問題,提齣一種基于函數劃分塊和置信度的遞歸反彙編算法:以函數為劃分塊,對代碼間隙進行多次遞歸掃描,穫取反彙編過程中可能遺漏的重要基本塊;建立置信度評估函數,以置信度為依據,剔除遲突的基本塊,篩選齣高置信度的基本塊,用于補充和優化反彙編結果。實驗證明,改進後的遞歸反彙編算法具有較高的反彙編精度。
침대전통정태체귀반회편산법인무법해석간접도전지령이도치반회편결과불완정적문제,제출일충기우함수화분괴화치신도적체귀반회편산법:이함수위화분괴,대대마간극진행다차체귀소묘,획취반회편과정중가능유루적중요기본괴;건립치신도평고함수,이치신도위의거,척제충돌적기본괴,사선출고치신도적기본괴,용우보충화우화반회편결과。실험증명,개진후적체귀반회편산법구유교고적반회편정도。
Traditional static recursive disassembly algorithms fail to resolve indirect jump instructions which results in incomplete disassem-bly outputs.Therefore a recursive disassembly algorithm based on function division block and confidence is proposed.The algorithm regards functions as division blocks to carry out several recursive scans upon code gaps to obtain the possible missing important basic blocks during the disassembly process.Then it establishes the confidence evaluation function,which,by comparing confidence degrees to erase conflicting bas-ic blocks,then chooses high confident basic blocks for completing and optimizing disassembly results.Experiments prove that the improved recursive disassembly algorithm performs better on disassembly accuracy.