  We introduce a novel approach to automatically synthesize a mathematical
representation of the control algorithms implemented in industrial
cyber-physical systems (CPS), given the embedded system binary. The output
model can be used by subject matter experts to assess the system's compliance
with the expected behavior and for a variety of forensic applications. Our
approach first performs static analysis on decompiled binary files of the
controller to create a sketch of the mathematical representation. Then, we
perform an evolutionary-based search to find the correct semantic for the
created representation, i.e., the control law. We demonstrate the effectiveness
of the introduced approach in practice via three case studies conducted on two
real-life industrial CPS.
