Reverse engineering software using a full system simulator
mfthomps
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
intel