IA-64二进制代码switch语句恢复技术研究

Study on Recovery of Switch Statements from IA-64 Binary Code

在对IA-64二进制代码进行分析的过程中,一个基本的问题就是识别通过跳转表实现的switch语句中n-条件分支的目标地址,该问题的解决使得对指定过程的机器指令的解码更加完整。文章基于切片和表达式置换技术,结合IA-64中为switch语句生成的汇编代码特点,给出了恢复跳转表及目标地址的方法,从而可以将包含跳转表的IA-64二进制代码恢复为高级switch语句。

In the analysis of IA-64 binary code,one of the fundamental problems is that of recognizing the target address of n-conditional branches of a switch statement implemented via a jump table.Without such addresses,the decoding of the machine instructions for a given procedure is incomplete.In this paper,we present a technique for recovering jump tables and their target addresses in IA-64 architecture.The technique is based on slicing and expression substitution.Using such a technique,we can translate the IA-64 binary code that contains jump table into a switch statement.