https://overkazaf.github.io/reverse_engineering/tags/%E8%8A%B1%E6%8C%87%E4%BB%A4/Android 与 Web 逆向工程实战手册Hugo 0.147.7 & FixIt v0.4.0-alpha.3-20251224074056-4fec1cdazh-CNoverkazaf@gmail.com (+5)overkazaf@gmail.com (+5)Tue, 14 Jan 2025 00:00:00 +0000https://overkazaf.github.io/reverse_engineering/android/04-reference/advanced/junk_code_and_ollvm_obfuscation/Tue, 14 Jan 2025 00:00:00 +0000overkazaf@gmail.com (+5)https://overkazaf.github.io/reverse_engineering/android/04-reference/advanced/junk_code_and_ollvm_obfuscation/<h1 class="heading-element" id="花指令与-ollvm-混淆技术深度解析"><span>花指令与 OLLVM 混淆技术深度解析</span> <a href="#%e8%8a%b1%e6%8c%87%e4%bb%a4%e4%b8%8e-ollvm-%e6%b7%b7%e6%b7%86%e6%8a%80%e6%9c%af%e6%b7%b1%e5%ba%a6%e8%a7%a3%e6%9e%90" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h1><p>在 Android Native 层逆向分析中，花指令（Junk Code）和 OLLVM（Obfuscator-LLVM）是两种最常见的代码混淆技术。花指令通过插入无意义的指令干扰反汇编器，而 OLLVM 则在编译阶段对控制流和数据流进行深度混淆。本文将深入分析这两种技术的原理、识别方法和去混淆策略。</p>