Reverse Engineering and Control-Flow Analysis with Intel Processor Trace
This blog-post demostrate how Intel Processor Trace (PT) can be usable for everyday reverse-engineering and debugging tasks by showing exactly how to capture and decode real execution, not just what the program could do in theory. PT is powerful and surprisingly underused; once you see how to drive it with perf, it becomes a reliable way to cut through indirection, obfuscation, and environment-dependent behavior. Agenda We start with core notions of control-flow analysis, move to what Intel PT actually records, then work through a practical perf workflow, deal with common pitfalls, and close with limits and an appendix on correlating addresses under ASLR....