Recon - PREVIEW
Recon 2011
| Speakers | |
|---|---|
|
|
Yoann Guillot |
| Schedule | |
|---|---|
| Day | Sunday - 2011-07-10 |
| Room | Grand Salon |
| Start time | 15:00 |
| Duration | 00:30 |
| Info | |
| ID | 101 |
| Event type | Lecture |
| Track | Main |
Memory Eye
Reversing is usually done through code analysis. We propose a complementary approach, based on the analysis of a snapshot of the dynamic heap. This way we are able to reconstruct the major data structures used by the program, and even limited type reconstruc- tion for structures, arrays and linked lists. We illustrate this work on the Dwarf Fortress1 game, a very rich game (albeit with ascii graphics).