发明名称 Repairing portable executable files
摘要 A portable executable file can be repaired by identifying an invalid field of a portable executable file. A likelihood of repairing the invalid field of the portable executable file is determined. A repair model for repairing the invalid field of the portable executable file is generated, and the invalid field of the portable executable file is repaired based upon, at least in part, the repair model.
申请公布号 US8826071(B2) 申请公布日期 2014.09.02
申请号 US201012846030 申请日期 2010.07.29
申请人 ReversingLabs Corporation 发明人 Pericin Tomislav
分类号 G06F11/00 主分类号 G06F11/00
代理机构 Holland & Knight LLP 代理人 Colandreo Brian J.;Soggu Pamela K.;Holland & Knight LLP
主权项 1. A computer implemented method comprising: identifying, by a computing device, an invalid field of a portable executable file; determining, by the computing device, a likelihood of repairing the invalid field of the portable executable file; generating, by the computing device, a repair model for repairing the invalid field of the portable executable file; and repairing, by the computing device, the invalid field of the portable executable file based upon, at least in part, the repair model, wherein repairing the invalid field of the portable executable file includes correcting the invalid field of the portable executable file via one or more algorithms; wherein generating the repair model includes generating the repair model based upon one or more empirically derived rules, wherein the one or more empirically derived rules include calculations to correct the invalid field based upon, at least in part, previous errors and whether the previous errors were repaired to obtain an executable file, wherein the one or more empirically derived rules are based upon, at least in part, a comparison between different operating system versions and how the different operating system versions process the portable executable file.
地址 Cambridge MA US