Recon - PREVIEW
Recon 2011
Speakers | |
---|---|
Yoann Guillot |
Schedule | |
---|---|
Day | Sunday - 2011-07-10 |
Room | Grand Salon |
Start time | 15:00 |
Duration | 00:30 |
Info | |
ID | 101 |
Event type | Lecture |
Track | Main |
Memory Eye
Reversing is usually done through code analysis. We propose a complementary approach, based on the analysis of a snapshot of the dynamic heap. This way we are able to reconstruct the major data structures used by the program, and even limited type reconstruc- tion for structures, arrays and linked lists. We illustrate this work on the Dwarf Fortress1 game, a very rich game (albeit with ascii graphics).