Recon - PREVIEW

Recon 2011

Speakers
Yoann Guillot
Schedule
Day Sunday - 2011-07-10
Room Grand Salon
Start time 15:00
Duration 00:30
Info
ID 101
Event type Lecture
Track Main

Memory Eye

Reversing is usually done through code analysis. We propose a complementary approach, based on the analysis of a snapshot of the dynamic heap. This way we are able to reconstruct the major data structures used by the program, and even limited type reconstruc- tion for structures, arrays and linked lists. We illustrate this work on the Dwarf Fortress1 game, a very rich game (albeit with ascii graphics).