Identifying library functions in executable file using patterns

Proceedings - 1998 Australian Software Engineering Conference, ASWEC 1998

Volumn 1998-November, Issue , 1998, Pages 90-97

  Van Emmerik, Mike ^a  

^a UNIVERSITY OF QUEENSLAND   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

HASH FUNCTIONS;

EXECUTABLE CODES; EXECUTABLE FILES; LIBRARY FILES; LIBRARY FUNCTIONS; LINEAR TIME; MEMORY MODELING; USER INTERVENTION;

PROGRAM COMPILERS;

EID: 78651584692     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ASWEC.1998.730916     Document Type: Conference Paper

References (10)

1. Z.J. Czech, G. Havas, and B.S. Majewski, "Perfect Hashing", Theoretical Computer Science, No. 182, 1997, pp. 1-143.
2. Z.J. Czech, G. Havas, and B.S. Majewski, "An optimal algorithm for generating minimal perfect hash functions", Information Processing Letters, Vol. 43, No. 5, October 1992, pp. 257-264. Also Technical Report TR0217, Department of Computer Science, University of Queensland 4072 Australia.
3. R. Gupta, S. Bhaskar, and S. Smolka, "On Randomization in Sequential and Distributed Algorithms", ACM comput. Surveys, Vol. 26, No. 1, March 1994, pp. 7-86.
4. Jurgen Ebert, "A versatile data structure for edgeoriented graph algorithms", Communications of the ACM, Vol. 30, No. 6, June 1987, pp. 513-519.
5. Chen Fuan, Lin Zangtian, and Li Li, "Design and Implementation Techniques of the 8086 C Decompiling System", Mini-Micro Systems, Vol. 14, No. 4, 1993, pp. 10-18, 31. Written in Chinese.
6. W.L. Peavy, "Inside Turbo Pascal 6.0 Units", Software le tpu6doc.txt in tpu6.zip. Anonymous ftp from garbo.uwasa.fi and mirrors, directory/pc/turbopas, 1991.
7. C. Cifuentes and K.J. Gough, "Decompilation of binary programs", Software - Practice and Experience, Vol. 25, No. 7, 1995, pp. 811-829.
8. Ilfak Guilfanov, "FLIRT (Fast Library Identication and Recognition Technology)", URL: http://www.datarescue.com/idaflirt.htm
9. James Larus, "EEL: An Executable Editing Library", URL: http://www.cs.wisc.edu/-larus/eel.html
10. \Tracepoint, An execution proler for Windows/NT binary programs", URL: http://www.tracepoint.com