Data for RQ1
Below are the file recovery result for BinStruct and 3 baselines (ModX, Delink and BCD).
For BinStruct, both summaries and function partition (identified by address) are provided.
For baselines, only the function partition (also identified by address) are provided.
Data for RQ2
Below are the module recovery result for BinStruct and Architecture Recovery Tools. For ModX, Delink and BCD, the partition is identical to RQ1. Also, the ground truth partition of files are available below.
For BinStruct, the module summaries are also included.
Data for RQ3
All the intermediate results of BinStruct analyzed in RQ3 are available below:
Data for RQ4
The time consumption and prompt usages are available below:
Data for RQ5
The module recovery result for libxml2 and PredatorTheStealer are available below. Also, the PredatorTheStealer's binary is included in an encrypted zip file with password "1111". PredatorTheStealer is a MALWARE, DO HANDLE WITH CARE.