Detail výsledku

Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation

KŘOUSTEK, J.; MATULA, P.; KOLÁŘ, D.; ZAVORAL, M. Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation. International Journal on Advances in Software, 2014, vol. 7, no. 1, p. 112-122. ISSN: 1942-2628.
Typ
článek v časopise
Jazyk
anglicky
Autoři
Křoustek Jakub, Ing., Ph.D., UIFS (FIT)
Matula Peter, Ing., UIFS (FIT)
Kolář Dušan, doc. Dr. Ing., UIFS (FIT)
Zavoral Milan, Bc.
Abstrakt

Retargetable machine-code decompilation is used for a platform-independent transformation of executable files into a high level language (HLL) representation (e.g., C language). It is a complex task that must deal with a lot of different platform-specific features and missing information. Accurate preprocessing of input executable files is one of the necessary prerequisites in order to achieve the best results. Furthermore, we can use gathered information to achieve higher quality of decompilation. This paper presents an extended version of our previous system for an accurate code preprocessing. It is implemented as a generic preprocessing system that consists of a precise compiler and packer detector, plugin-based unpacker, converter into an internal platform-independent file format, and debugging information gathering library. We also describe an utilization of the collected information in a problem of automatic data-type reconstruction. This system has been adopted and tested in an existing retargetable decompiler. According to our experimental results, the proposed retargetable solution is fully competitive with existing platform-dependent tools.

Klíčová slova

reverse engineering, decompilation, packer detection, unpacking, executable file, Lissom

URL
Rok
2014
Strany
112–122
Časopis
International Journal on Advances in Software, roč. 7, č. 1, ISSN 1942-2628
Kniha
Internation Journal on Advances in Software (IJAS)
BibTeX
@article{BUT111534,
  author="Jakub {Křoustek} and Peter {Matula} and Dušan {Kolář} and Milan {Zavoral}",
  title="Advanced Preprocessing of Binary Executable Files and its Usage in Retargetable Decompilation",
  journal="International Journal on Advances in Software",
  year="2014",
  volume="7",
  number="1",
  pages="112--122",
  issn="1942-2628",
  url="http://www.iariajournals.org/software/tocv7n12.html"
}
Projekty
Centrum excelence IT4Innovations, MŠMT, Operační program Výzkum a vývoj pro inovace, ED1.1.00/02.0070, zahájení: 2011-01-01, ukončení: 2015-12-31, ukončen
Výzkum pokročilých metod ICT a jejich aplikace, VUT, Vnitřní projekty VUT, FIT-S-14-2299, zahájení: 2014-01-01, ukončení: 2016-12-31, ukončen
Výzkumné skupiny
Pracoviště
Nahoru