|
|
Interactive Disassembler
Mrva, Milan ; Přikryl, Zdeněk (referee) ; Křoustek, Jakub (advisor)
This thesis describes procedures and tools of reverse engineering in terms of software development. There are introduces different techniques of protection against decomposition of executables. The work also mentions some programs used for decomposition analysis. Furthermore it contains information about architecture of processing units, with emphasis on microprocessors Intel and Motorola. Variety of executable formats is shown. Generic retargetable disassembler was implemented. There is a description of its structure and plugins. These plugins represents three algorithms used for disassembling a program. One of them applies a multi-process parsing engine, which is an own design by author of the thesis. At the end, these techniques are compared and further development is outlined.
|
|
|
Java Bytecode Disassembler
Hřibal, Jaromír ; Kučera, Jiří (referee) ; Křivka, Zbyněk (advisor)
The first part of this thesis studies the fundamental principles of Java Virtual Machine and presents in depth look at its instruction set and . class file format, both together well known as bytecode . The next part presents an overview of the existing tools for bytecode manipulation . The last part of this work describes the development of a new plugin for Eclipse IDE . This plugin allows the user to get more comfortable view of the given bytecode and to see the original source code from which the bytecode was generated . The plugin requires the source code to be accessible so it is not a typical decompilation tool .
|
|
|
An annotating disassembler for AMD64
Láska, Ladislav ; Mareš, Martin (advisor) ; Děcký, Martin (referee)
The goal of this work is to create a disassembler for the AMD64 architecture which would simplify program analysis in machine code. The work describes low-level instruction format, object file format and system conventions, on which we base our program. Its features are for example branch analysis and visualization, the ability to work with default memory contents, interpretation of ABI calling conventions, expression renaming and simplification based on known values. Scripting API for Python is integrated, which enables the user to write custom plug-ins, and extend its abilities beyond what the author has anticipated.
|
|
|
Interactive disassembler for Intel 64 processors
Faltín, Tomáš ; Yaghob, Jakub (advisor) ; Kofroň, Jan (referee)
The aim of this thesis is to create disassembler-debugger for Intel64 processors. Disassembler loads instructions and instruction's format from XML files which implies future extensibility for new instructions and architecture. After inserting of a program disassembler converts its instructions to assembly language. Debugger is able to run and control the program's instruction flow by stepping over single instruction or by setting some breakpoints that stops the program. Debugger can also show program's threads and find some basic programming structures like if statements and loops. Powered by TCPDF (www.tcpdf.org)
|
|
|
Disassembler and Analyser of Binary Code
Bayer, David ; Smrčka, Aleš (referee) ; Peringer, Petr (advisor)
This thesis is focused on binary code disassembly. It describes the design of ARM and AVR architectures and does a research into existing solutions. Based on this knowledge, we designed and implemented a disassembler-like application. The application provides a graphical user interface to facilitate the starting of disassembly and displays the result. The designed environment is extensible to more disassemblers, disassembly algorithms, and code analysis.
|
|
|
Visual Basic Disassembler
Adamica, Ján ; Náhlík, Jaroslav (referee) ; Jošth, Radovan (advisor)
Main goal of this thesis is to create disassembler for Visual Basic 6 binary .exe files. There is description of Portable Executable files, description of disassembler, as well as functions of Windows API calls. Visual Basic disassembler should provide as much information about Visual Basic 6 file as possible. There is detailed structure specification of Visual Basic 6 binary files.
|
|
|
Tools for Executable File Format Conversions
Matula, Peter ; Husár, Adam (referee) ; Hruška, Tomáš (advisor)
This paper describes methods and procedures used for object file format conversions. It introduces several commonly used formats (ELF, PE, E32Image, DEX) and project Lissom's object file format (LOFF). It contains basic information about libraries manipulating these formats and a description of a new library managing E32Image. The primary objective is to implement a program converting files between common formats and LOFF. This problem is solved by mapping all critical information from one format structures to another. To accomplish this task, it was necessary to modify and extend some features of Lissom object format. The result is the plugin based application capable of creating valid and runnable executable files in mentioned formats.
|
|
|
Code Transformation Applied to Decompilation
Šomlo, Ivan ; Bidlo, Radek (referee) ; Meduna, Alexandr (advisor)
This thesis discusses the decompilation process and its phases. Decompilation is the reverse process of compilation. Its goal is to transform input program, usually in machine code, into functionally equivalent form in some high level language. The thesis describes disassembling, intermediate code generation, basic block analysis, optimization, data flow analysis, code flow analysis and output code generation.
|
|
|
Interactive disassembler for Intel 64 processors
Faltín, Tomáš ; Yaghob, Jakub (advisor) ; Kofroň, Jan (referee)
The aim of this thesis is to create disassembler-debugger for Intel64 processors. Disassembler loads instructions and instruction's format from XML files which implies future extensibility for new instructions and architecture. After inserting of a program disassembler converts its instructions to assembly language. Debugger is able to run and control the program's instruction flow by stepping over single instruction or by setting some breakpoints that stops the program. Debugger can also show program's threads and find some basic programming structures like if statements and loops. Powered by TCPDF (www.tcpdf.org)
|
|
|
An annotating disassembler for AMD64
Láska, Ladislav ; Mareš, Martin (advisor) ; Děcký, Martin (referee)
The goal of this work is to create a disassembler for the AMD64 architecture which would simplify program analysis in machine code. The work describes low-level instruction format, object file format and system conventions, on which we base our program. Its features are for example branch analysis and visualization, the ability to work with default memory contents, interpretation of ABI calling conventions, expression renaming and simplification based on known values. Scripting API for Python is integrated, which enables the user to write custom plug-ins, and extend its abilities beyond what the author has anticipated.
|
guest ::
