Result Details

Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation

KŘOUSTEK, J.; MATULA, P.; KOLÁŘ, D.; ZAVORAL, M. Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation. International Journal on Advances in Software, 2014, vol. 7, no. 1, p. 112-122. ISSN: 1942-2628.
Type
journal article
Language
English
Authors
Křoustek Jakub, Ing., Ph.D., DIFS (FIT)
Matula Peter, Ing., DIFS (FIT)
Kolář Dušan, doc. Dr. Ing., DIFS (FIT)
Zavoral Milan, Bc.
Abstract

Retargetable machine-code decompilation is used for a platform-independent transformation of executable files into a high level language (HLL) representation (e.g., C language). It is a complex task that must deal with a lot of different platform-specific features and missing information. Accurate preprocessing of input executable files is one of the necessary prerequisites in order to achieve the best results. Furthermore, we can use gathered information to achieve higher quality of decompilation. This paper presents an extended version of our previous system for an accurate code preprocessing. It is implemented as a generic preprocessing system that consists of a precise compiler and packer detector, plugin-based unpacker, converter into an internal platform-independent file format, and debugging information gathering library. We also describe an utilization of the collected information in a problem of automatic data-type reconstruction. This system has been adopted and tested in an existing retargetable decompiler. According to our experimental results, the proposed retargetable solution is fully competitive with existing platform-dependent tools.

Keywords

reverse engineering, decompilation, packer detection, unpacking, executable file, Lissom

URL
Published
2014
Pages
112–122
Journal
International Journal on Advances in Software, vol. 7, no. 1, ISSN 1942-2628
Book
Internation Journal on Advances in Software (IJAS)
BibTeX
@article{BUT111534,
  author="Jakub {Křoustek} and Peter {Matula} and Dušan {Kolář} and Milan {Zavoral}",
  title="Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation",
  journal="International Journal on Advances in Software",
  year="2014",
  volume="7",
  number="1",
  pages="112--122",
  issn="1942-2628",
  url="http://www.iariajournals.org/software/tocv7n12.html"
}
Projects
Centrum excelence IT4Innovations, MŠMT, Operační program Výzkum a vývoj pro inovace, ED1.1.00/02.0070, start: 2011-01-01, end: 2015-12-31, completed
Výzkum pokročilých metod ICT a jejich aplikace, BUT, Vnitřní projekty VUT, FIT-S-14-2299, start: 2014-01-01, end: 2016-12-31, completed
Research groups
Departments
Back to top