On 12/05/2015 17:03, Claudio Fontana wrote:
> I see, will take some time to figure out I think, due to my lack of
> familiarity with the Windows compilation environment.
>
> Incidentally, if somebody knows of memmem equivalents in the Windows API, or
> how function replacements are usually han
On 11.05.2015 16:16, Luiz Capitulino wrote:
> On Fri, 24 Apr 2015 14:39:48 +0200
> hw.clau...@gmail.com wrote:
>
>> From: Claudio Fontana
>>
>> usage is similar to the commands x, xp.
>>
>> Example with string: looking for "ELF" header in memory:
>>
>> (qemu) s/100cb 0x40001000 "ELF"
>> searc
On Fri, 24 Apr 2015 14:39:48 +0200
hw.clau...@gmail.com wrote:
> From: Claudio Fontana
>
> usage is similar to the commands x, xp.
>
> Example with string: looking for "ELF" header in memory:
>
> (qemu) s/100cb 0x40001000 "ELF"
> searching memory area [40001000-400f5240]
>
On Fri, 24 Apr 2015 14:39:48 +0200
hw.clau...@gmail.com wrote:
> From: Claudio Fontana
>
> usage is similar to the commands x, xp.
>
> Example with string: looking for "ELF" header in memory:
>
> (qemu) s/100cb 0x40001000 "ELF"
> searching memory area [40001000-400f5240]
>
From: Claudio Fontana
usage is similar to the commands x, xp.
Example with string: looking for "ELF" header in memory:
(qemu) s/100cb 0x40001000 "ELF"
searching memory area [40001000-400f5240]
40090001
(qemu) x/20b 0x4009
4009: '\x7f' 'E' 'L' 'F' '\x0
