Abstract: This paper analyzes the structural feature of common functions after decompiling, proposes function identification technology based on basic block partition, and applies it in the design of fast library function identification. It provides the solution for the problems in library function identification such as relocation and cascade identification. Realization method on how to build and read the function feature database and library identification algorithm is represented. Experimental results prove that the technology can identify library functions precisely.

Key words: decompile, identification, library function, basic block

摘要： 分析一般函数在反汇编后的结构特征，提出一种基于基本块划分的函数识别技术，将其用于库函数快速识别的设计中。针对库函数识别中的重定位及级联识别等问题，给出解决方案，阐述建立、读取库函数特征数据库的实现方法以及库函数识别算法。实验结果证实，该技术可以准确地识别库函数。

关键词: 反编译, 识别, 库函数, 基本块

CLC Number: 

• TP311.13