0

I want to get memory value records read or written by user defined function of one executable without symbol information with Intel Pin.because there is no symbol information Intel pin can not identify the scope of function(mainly user defined function),so routine level instrument does not work.:),so only instruction level instruction can be chosen, but how to connect each instruction with one function. for example I want get memory read or written by "getSum", can anyone provide any information? thanks.:)

int getSum()
{
   int sum = 0;

   for(int i = 1 ; i <= 10;i++){
       sum += i;
   }
   return sum;
}
wentaolu
  • 1
  • 1
  • can anyone help? thank u. – wentaolu May 25 '18 at 16:39
  • 1
    If you don't have routine mapping information, separation by routine will be difficult. You will need to perform static analysis on each image and attempt to guess function start and end using heuristic approaches. This type of analysis is probably beyond the scope of a q&a format... – nitzanms May 27 '18 at 07:26

0 Answers0