Intermediate-representation recovery from low-level code
Thomas Reps, Gogul Balakrishnan, and Junghee Lim.
In Workshop on Partial Evaluation and Program Manipulation (PEPM).
Charleston, South Carolina, January 2006.
Invited paper.The goal of our work is to create tools that an analyst can use to understand the workings of COTS components, plugins, mobile code, and DLLs, as well as memory snapshots of worms and virus-infected code. This paper describes how static analysis provides techniques that can be used to recover intermediate representations that are similar to those that can be created for a program written in a high-level language.