逆编译系统中开关结构的识别与恢复

开头结构的恢复是逆编译中的重要部分,也是很困难的部分。本文分析了C语言开关结构在可执行文件中的形式、特点和表示;定义了一种模式语言,用以描述开关结构引导区识别模板;介绍了开关结构识别程序和恢复程序的设计原理及实现方法,识别程序使用这些模板,识别开头结构引导区类型,获取相关信息。恢复程序可以根据这些信息将不同开头结构转换成统一格式的中间代码形式,使用该方法可以很容易地针对新编译器或新版本,在反编译系统中增添新模板。

RECOGNITION AND RECOVERY OF SWITCH STRUCTURE IN DECOMPILATION SYSTEM

Recovery of switch structure in decompilation is not only impor tant but also very difficult . This paper makes an analysis of the form. the feat ure and the expression of switch structure of C language in executable file. A pattern language is defined to describe the recognition pattern of switch struc ture boot. An introduction of the design principle and the realization method are m ade about the recognition program and the recovery program of switch structure. Usin g these patterns . the recognition program can recognize the type of switch structure boot and obtain relating information.with which the recovery program can translate different switch structures into intermediate code in the same f orm . with this method a new pattern can be easily added in decompilation syst em according to a new compiler or a new version.