Publication Details

Generic detection and annotations of the statically linked code

ĎURFINA Lukáš and KOLÁŘ Dušan. Generic detection and annotations of the statically linked code. Acta Electrotechnica et Informatica, vol. 2013, no. 4, pp. 51-56. ISSN 1335-8243. Available from: http://www.aei.tuke.sk/papers/2013/4/2013-4.htm#ĎURFINA
Czech title
Generická detekcia a anotácia staticky linkovaného kódu
Type
journal article
Language
english
Authors
URL
Keywords

statically linked code, signature, detection, annotation

Abstract

Detection of a statically linked code is an important step in a process of decompilation. It eliminates a code, which has to be processed by decompiler. It provides an additional information about recognized code as linked functions with the types and number of arguments and return values. The detection is based on signatures, which are generated from the static libraries. The signatures are composed of the first bytes of library modules, CRC codes, module sizes, and public symbols. A tree structure of signature improves performance by decreasing a number of compared bytes. Generic approach of detection is achieved by an usage of a common object file format. This ensures that the process is not restricted on specific architecture or file format. However, this lightly increases a number of functions, which cannot be distinguished.

Published
2014
Pages
51-56
Journal
Acta Electrotechnica et Informatica, vol. 2013, no. 4, ISSN 1335-8243
Book
Acta Electrotechnica et Informatica
Place
Košice, SK
BibTeX
@ARTICLE{FITPUB10561,
   author = "Luk\'{a}\v{s} \v{D}urfina and Du\v{s}an Kol\'{a}\v{r}",
   title = "Generic detection and annotations of the statically linked code",
   pages = "51--56",
   booktitle = "Acta Electrotechnica et Informatica",
   journal = "Acta Electrotechnica et Informatica",
   volume = 2013,
   number = 4,
   year = 2014,
   location = "Ko\v{s}ice, SK",
   ISSN = "1335-8243",
   language = "english",
   url = "https://www.fit.vut.cz/research/publication/10561"
}
Back to top