View Single Post
  #1  
Old 02-18-2018, 21:25
phono phono is offline
Friend
 
Join Date: May 2016
Posts: 17
Rept. Given: 0
Rept. Rcvd 5 Times in 3 Posts
Thanks Given: 5
Thanks Rcvd at 44 Times in 10 Posts
phono Reputation: 5
Visualizing memory accesses of an executable

I read this blog post his weekend, might be of interest for some here:

Visualizing memory accesses of an executable

Links

Example Image

tracectory is a tool to analyze and visualize x86 instruction traces (of Windows executables, currently). The tool preprocesses an instruction trace using the miasm reverse engineering framework, and enables the user then to
  • graph memory accesses
  • show CPU state at arbitrary points in time
  • show memory contents at arbitrary points in time (locations whose value can easily be deduced from the trace)
  • trace data flow to see how the value of a certain memory write was derived
Reply With Quote
The Following 3 Users Say Thank You to phono For This Useful Post:
Stingered (03-02-2018), user1 (07-12-2018), zeffy (07-13-2018)