Check patentability & draft patents in minutes with Patsnap Eureka AI!

Operand stack register identification method, device and equipment and storage medium

An operand stack and identification method technology, applied in program control devices, instruments, program control design, etc., can solve the problems of inability to realize reverse restoration of virtual instructions and low accuracy of control flow graphs.

Pending Publication Date: 2021-01-08
CHANGSHU INSTITUTE OF TECHNOLOGY
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, the accuracy of the control flow graph restored by this method is not high, and the reverse restoration of virtual instructions cannot be realized

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Operand stack register identification method, device and equipment and storage medium
  • Operand stack register identification method, device and equipment and storage medium
  • Operand stack register identification method, device and equipment and storage medium

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0025] Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

[0026] The steps shown in the flowcharts of the figures may be performed in a computer system, such as a set of computer-executable instructions. Also, although a logical order is shown in the flowcharts, in some cases the steps shown or described may be performed in an order different from that shown or described herein.

[0027] In the reverse analysis of virtual machine protection, the change value of each interpretation routine to the top of the operand stack is of great value to the reverse analysis of virtual instructions, but so far no one has proposed to determine the register corresponding to the operand stack of the interpretation routine However, no one has proposed using different operating instructions to analyze and crack the protection of the virtual machine by using different operating instructions to analyze the different characteristi...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention discloses an operand stack register identification method, device and equipment and a storage medium, and the operand stack register identification method comprises thesteps: determining the values of all registers before and after each interpretation routine is executed, and recording the two groups of states through employing the registers as two containers of akey value; confirming a register corresponding to an operand stack before entering a virtual machine; and then tracking and analyzing the change condition of the operand stack to further determine a register corresponding to each interpretation routine operand stack; and determining the register corresponding to each interpretation routine operand stack according to the execution characteristics of the interpretation routines and the change range of the registers, thereby facilitating subsequent virtual instruction grammar and semantic analysis.

Description

technical field [0001] The present invention relates to the technical field of operand stack registers, and also to the technical fields of information security, software analysis, reverse engineering and computer software, in particular to a method, device, device and storage medium for identifying operand stack registers, especially to a virtual machine Protected interpretation routine operand stack register identification method, device, equipment and storage medium. Background technique [0002] Virtual machine protection is a technology that combines virtualization and code obfuscation to realize software protection. Existing code anti-obfuscation analysis methods have great difficulties in restoring software protected by virtual machines. Some literature proposes a virtual machine protection cracking method based on dynamic data flow analysis. The method is supported by the dynamic binary instrumentation platform Pin, tracks and records the data flow information durin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F8/74G06F9/455
CPCG06F8/74G06F9/45504Y02D10/00
Inventor 乐德广
Owner CHANGSHU INSTITUTE OF TECHNOLOGY
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2025 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com