Matthieu Suiche’s blog !Happiness only real when shared.

Some useful commands (Memento)

If one time you want to fill a buffer (here size is 0×10000) with null bytes, and put a string inside.

Don’t forget the “a” between “>” and “< "

kd> $$>a< "FULL_SCRIPT_PATH" BASE_ADDRESS

$$
$$ Matthieu Suiche 08/2007
$$ http://www.msuiche.net
$$

.if (${/d:$arg1})
{
    f ${$arg1} L10000 0

    ea ${$arg1} "I'm a fucking string !!!! test it oon meeeeeeeeeee! haha"
}
.else
{
    .printf "Usage: BUFFER_ADDRESS";
}

add comment

Saturday, August 4th, 2007 at 11:49 am and is filed under Debugging, Windows. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.