×

Dynamic call tracking method based on CPU interrupt instructions to improve disassembly quality of indirect calls

  • US 9,767,004 B2
  • Filed: 06/16/2014
  • Issued: 09/19/2017
  • Est. Priority Date: 06/16/2014
  • Status: Active Grant
First Claim
Patent Images

1. A method for disassembling compiled object code, the method comprising:

  • disassembling a binary executable object to generate assembly language source code, wherein the assembly language source code includes one or more indirect function calls and wherein each indirect function call corresponds to a function dynamically identified using an address identified when executing the assembly language source code;

    converting one or more of the indirect function calls to one or more central processing unit (CPU) interrupt instructions;

    executing the assembly language source code;

    upon reaching the interrupt instruction to which each indirect function call was converted while executing the assembly language source code, determining a register value stored in a register specified in the indirect function call, wherein the register value specifies a memory address of the identified function; and

    for each interrupt instruction, replacing, in the assembly language source code, the register specified in the indirect function call that was converted to the interrupt instruction with a function name corresponding to the register value, and invoking the identified function.

View all claims
  • 2 Assignments
Timeline View
Assignment View
    ×
    ×