| 摘要 |
A system and a method for generating an original code of an execute image are provided to search and recover a re-altered code in an execute image at which rearrangement occurs in case that a code of the execute image is re-hooked or altered in a memory. A file search module(100) searches a mapped file in an execute image, and the execute image is loaded to a first address in a memory. An information analyzing module(200) analyzes the header information of the searched file. A region allocation module(300) loads the execute image of the searched file to a second address based on an analyzed header information, and maps a rearrangement target session based on a first address. A region allocation information table specifies the mapped rearrangement target session based on an actually loading address among the plural sessions included in a certain file when loading the execute images of the specific file to a memory.
|
