反编译中库函数识别技术研究.pdfVIP

反编译中的库函数识别技术研究 1，2 1 1 秦艳锋 , 王清贤 , 曾勇军 (1.国家数字交换系统工程技术研究中心(NDSC)，河南省郑州市 450002；2.洛阳外国语学院语言工程系, 河南省洛阳市 471003) 摘 要：库函数识别技术是反编译过程中一个重要组成部分。全面研究了静态库函数和动态库函数的识别技术，详细研究 了静态库函数识别的关注点、难点，结合标准库、专业库和用户库各自的特点，对静态库函数的识别过程进行了分析与探 讨；根据动态库的特点，对使用了一般调用方式和特殊调用方式的动态库函数识别方法进行了简要的论述，最后对库函数 识别技术进行了分析总结与展望。 关键词：函数识别；库函数；静态库；动态库；模式匹配 中图分类号：TP311 文献标识码：A Research on Technology of Library Functions Identification in Decompiling 1 ，2 1 1 QIN Yanfeng , WANG Qingxian , ZENG Yongjun (1. China National Digital Switching System Engineering Technological RD Center(NDSC), Zhengzhou,450002, China) (2. Department of Basic Courses, Luoyang University of Foreign Languages, Luoyang 471003, China) Abstract The library function identification is a very important part during decompilation .This paper takes a comprehensive study of the static library function and the dynamic library function identification technology. It studies detailedly concerns and difficulties of the static library function identification. Combined with the respective characteristics of standard libraries, professional libraries and user libraries, the identification process of the static library functions are analyzed and discussed. According to the characteristics of the dynamic library, it discusses briefly the identification technology of the dynamic library function which uses the common call mode and special call mode. Finally, it summarizes the static and dynamic library function identification technology. Key words function identification; library function; static library; dynamic library;