2026 · Preprint
Recall-Oriented Precise Binary-to-Source Function Matching
BScout matches decompiled functions to a source corpus using chunked embeddings and inlining-aware training. Existing matches provide positional clues to expand candidates; LLM selection and structural filters refine the resulting correspondences.
Scope and limitations
BinKit-BCSA covers 3,904 small-utility binaries; Large-10 covers larger projects only at x86-64/O2. Some anomaly thresholds come from FreeCAD in Large-10. Incomplete ground truth, sparse anchors and source-corpus coverage limit conclusions. Function chunks are encoded independently, and extra refinement trades precision and cost against recall. This is correspondence retrieval, not proof of source recovery or semantic equivalence.
Why it fits this collection
Helps identify source origins and reused components in stripped binaries, including inlined functions.
Publication and review details
- Venue
- arXiv
- Status
- Preprint
- Publication / posting date
- October 16, 2026
- Date source
- First arXiv submission; the reviewed version is v1, not a verified proceedings publication.
- First arXiv submission
- October 16, 2026
- arXiv
- 2610.23546
- Reviewed arXiv version
- v1
Reviewed arXiv v1 and its four-author order. The paper promises a replication package upon formal peer-reviewed publication; no dedicated public implementation or license was verified. No models, binaries or experiments were run.
Sources reviewed
Source review only; experiments were not rerun for this collection. Cite the original authors using the linked paper or BibTeX.