Building Custom Disassemblers - Proidea

49 downloads 609 Views 929KB Size Report
SIMATIC.IEC... 00000d80h: 00 00 53 37 5F 4C 56 00 00 00 20 00 2C 6D 00 00 ; . .S7_LV... . .... Warning: there is a internationalized German version of STL/AWL!
Building Custom Disassemblers Instruction Set Reverse Engineering

Agenda        

Motivation Introduction to the playing field How to obtain byte code Recognizing basic properties of the byte code Implementing an IDA Pro processor module Calling Conventions Advanced Addressing Modes Reading code you are not supposed to

Motivation – General 00000d70h: 00000d80h: 00000d90h: 00000da0h: 00000db0h: 00000dc0h: 00000dd0h: 00000de0h: 00000df0h: 00000e00h: 00000e10h: 00000e20h: 00000e30h: 00000e40h: 00000e50h: 00000e60h: 00000e70h: 00000e80h: 00000e90h:

00 00 00 07 01 41 FF 7E 00 38 00 68 00 00 3C 00 19 54 45

00 00 00 4C 2D 43 B8 42 04 07 09 1C 02 05 00 00 4B 49 00

53 53 00 70 35 02 00 00 41 00 38 FB 00 05 04 0E 03 43 00

49 37 00 0B 60 82 06 10 62 00 07 78 61 50 00 00 70 00 00

4D 5F 00 00 39 FB FB 30 00 00 00 03 00 01 0C 00 25 49 20

41 4C 00 02 A0 78 70 03 02 01 00 78 02 00 00 00 CF 45 00

54 56 68 FB 00 03 07 00 21 FB 00 41 68 A4 4A 88 19 43 D2

49 00 1D 78 40 78 4A 03 C0 79 00 44 2C 00 07 00 4B 00 97

43 00 68 03 00 68 70 21 00 03 FB 02 65 04 01 00 00 00 00

00 00 2C 78 9C 1C 0B A0 62 7A 78 82 00 00 01 00 00 00 00

49 20 41 7E FF 00 00 7E 00 7E 03 FB 01 12 EA 12 00 00 00

45 00 61 43 B8 42 02 42 02 57 7A 70 00 00 08 00 00 00 00

43 2C 00 00 00 02 FB 00 FF 00 7E 07 00 1D 00 03 53 57 00

00 6D 02 98 05 82 78 10 B8 0C 47 52 02 00 00 70 49 45 00

00 00 FB 38 68 68 03 30 00 70 00 70 00 33 06 25 4D 5F 00

00 00 70 09 1D 2D 78 03 0B 0B 0C 0B 00 00 08 CF 41 54 00

; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;

..SIMATIC.IEC... ..S7_LV... .,m.. ......h.h,Aa..ûp .Lp...ûx.x~C.˜8. .-5`9 .@.œÿ¸..h. AC.‚ûx.xh..B.‚hÿ¸..ûp.Jp...ûx.x ~B..0...! ~B..0. ..Ab..!À.b..ÿ¸.. 8.....ûy.z~W..p. ..8.....ûx.z~G.. h.ûx.xAD.‚ûp.Rp. ...a..h,e....... ...P..¤.......3.