Thread: Visualizing memory accesses of an executable
View Single Post
  #3  
Old 03-02-2018, 09:09
Stingered Stingered is offline
Banned User
  
Join Date: Dec 2017
Posts: 257
Rept. Given: 0
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 296
Thanks Rcvd at 181 Times in 90 Posts
Stingered Reputation: 3
Quote:
Originally Posted by phono View Post
I read this blog post his weekend, might be of interest for some here:

Visualizing memory accesses of an executable

Links

Example Image

tracectory is a tool to analyze and visualize x86 instruction traces (of Windows executables, currently). The tool preprocesses an instruction trace using the miasm reverse engineering framework, and enables the user then to
  • graph memory accesses
  • show CPU state at arbitrary points in time
  • show memory contents at arbitrary points in time (locations whose value can easily be deduced from the trace)
  • trace data flow to see how the value of a certain memory write was derived
Read through this about a week ago. I could be missing the obvious, but I just don't see any real application for this based on how I debug. No issues with your post...
Reply With Quote
The Following User Says Thank You to Stingered For This Useful Post:
user1 (07-12-2018)