Project Description
VMExplorer is a tool that helps developpers analyze the virtual memory of a process and explore its user address space.

The current version includes the following features:
  • Map view and a list view of the userland
  • Memory analysis report generator
  • List of identified objects that are loaded in memory (modules, heaps, thread stacks, system objects, ...)
  • Simple Hexadecimal viewer
  • Page/Region/Memory object property viewer
  • Automatic memory objects update

Future enhancements include:
  • Ability to open crash dump files
  • Save and load projects
  • Record and replay memory events
  • Documentation (internal like tooltips, and external).
  • Statistics module for heap fragmentation.
  • Dynamic creation of memory object description
  • Enhanced hexadecimal viewer that takes into account memory object description
  • Basic disassembler for function pointers

Compatibility note
VMexplorer was developped and tested on Win XP 32 bits.
The code relies on undocumented Windows API and data structures that are subject to change from version to versions.
No work was done until now on the compatibility with Windows Vista and 64 bits platforms.


Screenshots

vme04screenshot.jpg
Main window with map view

vme04listview.jpg
Main window with list view

vme04report1.jpg
Memory report : summary

vme04report2.jpg
Memory report : modules

vme04report3.jpg
Memory report : heaps
Last edited Jun 13 at 5:09 PM by cedrou, version 13
Comments
Necromantici wrote  Jun 20 at 2:48 AM 
This is one of the most coolest projects I have seen here. I would like to help even when im not to good on internals. If you need a monkey to bring you some sodas send me a message...

alexmca wrote  Sep 10 at 4:33 PM 
This is a great tool! I am looking forward to the enhancements. In the mean time, is there a way to calculate % heap fragmentation from the memory report? Thanks.

fantassin wrote  Sep 23 at 10:40 PM 
Great tool, I love it!

It seems it does not handle virtual space above 2gb for 3gb processes. I am looking forward for this update. I did it temporarily for me.
Thanks again.

Updating...