Sample Project List Software Reverse Engineering
Automotive Computing Electronic power steering Embedded flash memory Inkjet printer software Laptop computers Laptop computers PC application software Software applications Perform software code extraction and live software analysis with ICE to analyze patent claims. Determine the sequence of signals used in a memory during certain functions. Extract code from a device and monitor functionality. Reverse engineer software for a device driver and produce a claim chart. Extract and inspect embedded code from a controller. Determine if a particular set of data structures and access methods are used. Functional testing to investigate multiple video patents. Used eval board and extracted software from MCU. Replaced CPU with in-circuit emulator. Executed software and performed live code analysis, inspection of memories and instructions during operation. Analyzed extracted code and mapped to patent claims. Circuit reverse engineering was used to determine probe locations. The circuit was then stimulated under software control to determine the sequences of signals applied. The data was read out from the device. The bus protocol was analyzed to determine how to extract the data and create a file containing the raw data. Performed functional testing and probing of USB interface, followed by software reverse engineering (disassemble, decompile, live debugging, and analysis) to map claim elements. Circuit reverse engineering was used to find the security and understand how to defeat it. Microsurgery was then performed to defeat the security. We observed the hardware and software, created and applied test cases, and performed data retrieval, inspection, and reconstruction. Generated test video input. Captured and inspected video output created by the software application to investigate the frame structure. Mapped analysis to patent elements. 2
Consumer Electronics Audio compression code Audio file analysis Download security DVD player DVD player Firmware analysis Analyze algorithm based on source code. Determine which flags were set for different encoding rates. Map patent to the dominant market technologies, and the companies that use them. Deliver claim charts against these targets. Determine how decoding of DVD data was done in a target system. Determine what code was executed during different events. Extract firmware code and determine when/where the code was used in the system. Inspection of available source code. Software was installed on a computer to analyze audio files and to also create test files. Grouped patents into technology categories and researched applicable markets and potential target companies within those markets. Recommended and procured target products. Applied the patents to product literature, specifications and the results of functional testing. Created a test DVD with specific and known data. The disc was analyzed and then compared to how the target system responded to the DVD data. A logic analyzer was used to capture addresses and data read from memory during specific events. The addresses were then sorted and compiled. Board reverse engineering was done to determine which chips were connected to the flash memory. A target chip was monitored doing start up to determine if code was loaded to this chip along with other chips. Game console Identify BitBLT synchronized with video. Data and code retrieval, observation of hardware. 3
Consumer Electronics Movie editor/viewer MPEG4 part 2 standard Deliver claim charts documenting methods for removing and inserting images into a movie stream. Create flowchart and provide comments of portions of the published software that are documented in the standard. Created custom video stream. Observed edit and play movie features using target product. Used screenshots of displayed and output video to support interpolated frames, and show where frames were removed. Performed software analysis of target routines and variables and created flowchart. Multimedia codecs Identify video MPEG2 program and transport stream software and hardware components. Observation (software), Windows DirectX SDK was used. Portable audio Determine if invention is used in target products. Literature was used to analyze target audio formats and map claim elements. Wired Communications Smartphone touch pad operation ADSL2 power management ATM protocols Provide claim chart documenting method implementing touch pad operation. Develop claim charts reading patent on standards. Develop claim charts reading patent on standards. Access smartphone processor through JTAG interface to extract code. Decompile code. Gain control of CPU to interactively analyze code in operation to find claim elements. Analysis of ITU-T ADSL2 specification G.992.3 (asymmetric digital subscriber line transceivers 2 [ADSL2]) and ITU-T G.994.1 (handshake procedures for digital subscriber line [DSL] transceivers). Analysis of applicable ATM specifications: ATM UNI 3.1 and ATM IMA specification 1.1 4
Wired Communications Wireless Communications Cable set-top box Gaming system chat feature Cell phone Determine specific processing in STB of video transmitted from cable headend. Determine audio codec used by gaming system to encode voice over the internet. Perform patent and product analysis involving mobile phone data compression algorithm against the V.42bis standard. Create custom video stream. Inject video into various locations in the STB datapath. Alternatively, inject video as a 6 MHz digital bin of a broadcast transmissions stream from the cable service provider. Analyze output video of STB relative to customer video input. Set up gaming consoles. Sniff internet traffic to determine session setup and termination. Analyze traffic payload of voice and tones to investigate codec. Used development board to access target software, extract, decompile, and analyze it. Gained control of processor using JTAG port. Used live software debugging to aid in analysis or algorithm variables and functions. 5
About Chipworks Chipworks is the recognized leader in reverse engineering and patent infringement analysis of semiconductors and electronic systems. The company s ability to analyze the circuitry and physical composition of these systems makes them a key partner in the success of the world s largest semiconductor and microelectronics companies. Intellectual property groups and their legal counsel trust Chipworks for success in patent licensing and litigation earning hundreds of millions of dollars in patent licenses, and saving as much in royalty payments. Research & Development and Product Management rely on Chipworks for success in new product design and launch, saving hundreds of millions of dollars in design, and earning even more through superior product design and faster launches. Contact Chipworks Chipworks 3685 Richmond Road, Suite 500 Ottawa, Ontario K2H 5B7 Canada T 1-613-829-0414 F 1-613-829-0515 Email: info@chipworks.com Web site: www.chipworks.com 6