Research On Anti Reverse Engineering Technology Based On Instruction Confusion

With the development of information industry,software protection technology is becoming more and more important,which has become an important part of the field of network and information security.In software protection technology today,code obfuscation,flower instruction,disassembly and tracking technology,shell encryption and other measures.In this paper,with the Windows7 operating system as the environment,the main research of code obfuscation technology,from the view of enhancing static code reading to resist reverse engineering cracking.Code obfuscation can be divided into many modes.In this paper,we mainly use the equivalent substitution of assembler instruction,the transformation of calling logic and structure,and the increase of redundant code as the main research direction.Through the study of the binary features of the key structures in the program,the process of the implementation of the underlying technology is deeply understood,and the purpose of this research is achieved.The research of this paper is divided into three parts:(1)by collecting the key structures and language instructions of the program in the advanced language,it is classified and classified into different feature groups.First,locate the functions and responsibilities of related structures from the perspective of high-level language.(2)after the classification is completed,the source code of the advanced language compiled is compiled,and the related tools are used to analyze,sum up and summarize the underlying Compilation Rules and binary code features of the executable files,and the two binary data of the parsed key structures are structured and modeled.A data model of each structure is built to facilitate generality in subsequent use.(3)according to the assembly instruction model which is created and combined with assembly code,the equivalent deformation of the related instructions is deformed without changing the original meaning of the model instruction,and its complexity and confusion are increased.Through the analysis of the file structure in the program,the file structure and logical layout are properly deformed,and the debugging difficulty of dynamic debugging is increased and the reading thinking in static reading is confused.A software protection technology based on instruction confusion for reverse engineering is developed.