Patent ID: 11940900
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer-implemented method comprising:
monitoring execution of binary code of one or more programs on a computer system, the monitoring comprising monitoring manipulation of at least one call stack maintained by the computer system for the execution of the binary code;
based on the monitoring, determining at least one function call pattern and at least one branch pattern exhibited by the execution of the binary code;
obtaining binary code of a target program and identifying, from the binary code of the target program, and using the determined at least one function call pattern and at least one branch pattern, function calls and branches, relations between the function calls and branches, and function and variable names; and
providing a representation of program flow control of the target program using the identified function calls and branches, relations, and function and variable names.