期刊文献+

反编译中的库函数识别的实现研究 被引量:5

Applied Study of Library Functions Recognition in Decompiling
下载PDF
导出
摘要 库函数的识别是整个反编译过程的一个重要组成部分。结合反编译的整个过程特点,全面地分析了对可执行程序的静态库和动态库识别的实现技术问题,并给出了相应可行的实现方案。在实际中得到了很好的应用。 Recognising library functions is a very important part during decompilation. Analysing the whole process of decompilation for executive program,this paper analyses some technology implementation problems which are appeared during the recognition for static and dynamic libraries,and some feasible solutions are given,which is well applied in practical application.
出处 《计算机应用研究》 CSCD 北大核心 2004年第12期34-35,58,共3页 Application Research of Computers
基金 国家"863 /CIMS"计划资助项目 (863 51 1 92 0 0 0 1 ) 国防预研项目基金资助 (1 5 4 1 )
关键词 反编译 静态库 动态库 库函数 Decompile Static Library Dynamic Library Library Function
  • 相关文献

参考文献12

  • 1C Cifuentes.Reverse Compilation Technique[D].Queensland University of Technology: C.Cifuentes,1994.20-34.
  • 2E J Chikofsky,J H Cross.Reverse Engineering and Design Recovery:A Taxonomy[J].IEEE Software,1990,13(7):7-17.
  • 3Liu Zongtian.Research on Decompiling Technology[J]. ComputSci.& Technol,1994,9(4):2-8.
  • 4Intel. IA-32 Intel Architecture Software Developer's Manual-vo-lume1:Basic Architecture [EB/OL].http://www.intel.com ,2002.
  • 5Intel.IA-32 Intel Architecture Software Developer's Manual-volu-me2:Instruction Set Reference [EB/OL].http: // www.intel.com,2002.
  • 6Intel.IA-32 Intel Architecture Software Developer's Manual-volu-me3:System Programming Guide[EB/OL].http: // www. intel.com,2002.
  • 7Matt Pietrek.Peering Inside the PE: A Tour of the Win32 Portable Executable File Format[J/OL].http://msdn.microsoft.com,1994.
  • 8Cristina Cifuentes.An Environment for the Reverse Engineering of E-xecutable Programs[J].IEEE,1995,5(3):4-12.
  • 9AhoA,Ullman J.Principles of Compiler Design[M].Addison-Wes-ley:Jeffrey D.Ullman,l986.25-81.
  • 10H Swart Z.The Case for Reverse Engineering[J].Business Computer Journal,1984,3(12):1-10.

共引文献1

同被引文献34

  • 1汪小飞,赵克佳,田祖伟.数据流分析的关键技术研究[J].计算机科学,2005,32(12):91-93. 被引量:10
  • 2胡政,陈凯明.C++逆编译中库函数识别研究[J].计算机工程与应用,2006,42(3):66-68. 被引量:8
  • 3齐宁,付文,赵荣彩.二进制翻译中的库函数识别技术研究[J].计算机应用,2006,26(4):983-985. 被引量:10
  • 4曾鸣,赵荣彩.二进制代码中函数混淆调用的识别[J].计算机工程与应用,2007,43(17):24-28. 被引量:2
  • 5沈美明,温冬婵.IBM-PC汇编语言程序设计[M].2版.北京:清华大学出版社,2005.
  • 6Kaspersky IC Hacker Disassembling Uncovered[M]. [S. l.]: A-LIST Publishing, 2003.
  • 7Cifuentes C. Reverse Compilation Technique[D]. Queensland, Australia: Queensland University of Technology, 1994.
  • 8Guilfanov I. Fast Library Identification and Recognition Technology, DataRescue[EB/OL]. [2008-10-11]. http://www.hex-rays.com/ idapro/flirt.htm.
  • 9Microsoft. Microsoft Portable Executable and Common Object File Format Specification[EB/OL]. [2008-02-15]. http://www.microsoft. com/whdc/system/platform/firmware/PECOFF.mspx.
  • 10Mike Van Emmerik.Static single assignment for decompilation[D].University of Queensland,School of Information Technology and Electrical Engineering,2007.

引证文献5

二级引证文献9

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部