Search papers, labs, and topics across Lattice.
The paper introduces LLM4CodeRE, a domain-adaptive LLM framework for bidirectional code reverse engineering, encompassing assembly-to-source decompilation and source-to-assembly translation. It employs a Multi-Adapter approach for task-specific alignment and a Seq2Seq Unified approach with task-conditioned prefixes to improve generation constraints. Experiments show LLM4CodeRE surpasses existing decompilation tools and general code models in bidirectional generalization.
Domain-adaptive fine-tuning of LLMs can dramatically improve code decompilation and reverse engineering, outperforming existing tools and general-purpose models.
Code decompilation analysis is a fundamental yet challenging task in malware reverse engineering, particularly due to the pervasive use of sophisticated obfuscation techniques. Although recent large language models (LLMs) have shown promise in translating low-level representations into high-level source code, most existing approaches rely on generic code pretraining and lack adaptation to malicious software. We propose LLM4CodeRE, a domain-adaptive LLM framework for bidirectional code reverse engineering that supports both assembly-to-source decompilation and source-to-assembly translation within a unified model. To enable effective task adaptation, we introduce two complementary fine-tuning strategies: (i) a Multi-Adapter approach for task-specific syntactic and semantic alignment, and (ii) a Seq2Seq Unified approach using task-conditioned prefixes to enforce end-to-end generation constraints. Experimental results demonstrate that LLM4CodeRE outperforms existing decompilation tools and general-purpose code models, achieving robust bidirectional generalization.