Author: Piotr

# Views: 2814

/* some gibberish */


/* some globals */
int g1 = 0;
int g2 = 0;
int g3 = 0;
int g4 = 0;


/* you can use following procedure in your own software if you want :) */
int sub1(int param1)
{
g1 = (param1 * 55) + GetTickCount();
g1 ^= 0x66;
g1 ^= 33;
return g1;
}


void yo(int param)
{
char buff[10];
g2 = g3 = param;
sub1(param);
memset((void*)&buff;,0x0,param);
}


int main(void)
{
int our_param = 5; // <--- we will be tracing this _asm { lea eax,our_param int 3 }; // just an breakpoint if (our_param > 10)
return 0;

yo(our_param);

our_param = 0;
return 0;
}

• blue node - shows the child node (child object)
• red node - shows the instruction wich refferenced the object
• Defined regs - shows the traced regs at current moment
• Created at - shows where the object was created
  
• Destroyed at - shows where the object was destroyed

• stable tracing driver
• take care of node dupilcation
• miniregions (and yes, they are not standard mini regions)
• stack tracing avoidance methods (heuristics)
• multithreading