Function Renaming in Reverse Engineering of Embedded Device Firmware with ChatGPT
Firmware reverse engineering is crucial for exposing internal mechanisms and identifying security vulnerabilities in embedded systems. While reconstructing the structural components of code is generally feasible, the absence of function names greatly complicates efforts to analyze and comprehend firmware logic. Motivated by the demonstrated code generation capabilities of large language models (LLMs), this paper investigates their potential to automate function renaming. We introduce FirmNamer, a prototype system designed to streamline the labor-intensive process of ana- lyzing decompiled code and assigning meaningful function names. FirmNamer accomplishes this by dynamically constructing LLM prompts based on extracted function code and contextual informa- tion. Extensive evaluation shows that FirmNamer achieves superior performance in function renaming, obtaining a functional precision of 86.6% and a semantic precision of 49%, thereby surpassing existing state-of-the-art approaches such as DeGPT, DEBIN, NFRE, NERO, and SYMLM.
Authors
- Peng Di (ORCID: https://orcid.org/0000-0002-5799-5876)
- Puzhuo Liu (ORCID: https://orcid.org/0000-0002-8995-5924)
- Yu Jiang (ORCID: https://orcid.org/0000-0003-0955-503X)
Institutions
- UNSW Sydney (AU)
- Tsinghua University (CN)
Publication Details
- Published
- 2025-10-09
- DOI
- https://doi.org/10.1145/3759425.3763387
- Citations
- 1
- Primary Topic
- Scientific Computing and Data Management
- Type
- article
- Field-Weighted Citation Impact
- 4.17
Funders
- Ant Group
- China Postdoctoral Science Foundation