Abstract: The process of reverse engineering is an executable program typically begins with static disassembly that translates machine code to assembly code, which creates opportunities for theft of intellectual property and discoveries of vulnerabilities of the program. In order to disrupt the static disassembly process so as to make programs harder to disassemble correctly, after a deep research on the static disassembly obfuscation technique based on branch functions and its weakness on invisibility and code execution speed, this paper proposes an improved obfuscation technique based on branch functions which not only can hide the jump instructions efficiently but also enhance the code execution speed, and make the analysis of reverse engineering more difficult at the same time.

Key words: reverse engineering, obfuscation technique, static disassembly, branch functions