-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsm-xml-example.xml
4 lines (4 loc) · 3.78 KB
/
sm-xml-example.xml
1
2
3
4
<SuperMemoCollection><Count>6</Count><SuperMemoElement><ID>1</ID><Title>new-collection</Title><Type>Concept</Type><SuperMemoElement><ID>1512</ID><Title>Books</Title><Type>Topic</Type><SuperMemoElement><ID>4071</ID><Title>Books::Reversing</Title><Type>Concept</Type><SuperMemoElement><ID>4891</ID><Title>The Ghidra Book The Definitive Guide by Chris Eagle Kara Nance (z-lib.org).pdf</Title><Type>Topic</Type><SuperMemoElement><ID>1926</ID><Title>[1] The Ghidra Book The Definitive Guide by Chris Eagle Kara Nance (z-lib.org).pdf</Title><Type>Topic</Type><SuperMemoElement><ID>2570</ID><Type>Topic</Type><Content><Question><SPAN style="FONT-WEIGHT: 700; FONT-STYLE: italic">The Memory Map Window <BR></SPAN><SPAN>The Memory Map window displays a summary listing of the memory blocks <BR>present in the program, as shown in Figure 5-26. Note that what Ghidra <BR>terms </SPAN><SPAN style="FONT-STYLE: italic">memory blocks</SPAN><SPAN> are frequently called </SPAN><SPAN style="FONT-STYLE: italic">sections</SPAN><SPAN> when discussing the struc- <BR>ture of binary files. Information presented in the window includes the <BR>memory block (section) name, start and end addresses, length, permission <BR>flags, block type, initialized flag, as well as a space for source filename and <BR>user comments. The start and end addresses represent the virtual address <BR>range to which the program sections will be mapped at runtime.</SPAN> <BR><SPAN style="FONT-STYLE: italic"></SPAN></P>
<P><SPAN style="FONT-STYLE: italic">Figure 5-26: Memory Map window</SPAN>&nbsp;<BR> <SPAN>Double-clicking any start or end address in the window jumps the <BR>Listing window (and all other connected windows) to the specified address. <BR>The Memory Map window toolbar provides options to add/delete blocks, <BR>move blocks, split/merge blocks, edit addresses, and set a new image base. </SPAN><BR></P>
<P>&nbsp;<SPAN>These features are particularly useful when reverse engineering files with <BR>nonstandard formats, as the binary&#8217;s segment structure may not have been <BR>detected by the Ghidra loader. </SPAN></P>
<P><SPAN><BR>Command line counterparts to the Memory Map window include <BR>objdump (-h), readelf (-S), and dumpbin (/HEADERS).</SPAN> <SPAN><br><br><hr SuperMemo><SuperMemoReference><H5 dir=ltr align=left><Font size="1" style="color: transparent">#SuperMemo Reference:</font><br><FONT class=reference>#Title: The Ghidra Book The Definitive Guide by Chris Eagle Kara Nance (z-lib.org).pdf -- (Chapter 5: Ghidra Data Displays::Other Ghidra Windows::The Memory Map Window) ; (Chapter 5: Ghidra Data Displays::Other Ghidra Windows::The Function Call Graph Window)<br>#Date: D:20200731101701-04'00'<br>#Source: PDF<br>#Link: <a href="elements\6\20\2010.pdf">elements\6\20\2010.pdf</a></FONT></SuperMemoReference></Question><Image><URL>e:\new-supermemo\new-collection\elements\8\4\2450.png</URL><Name>2010.pdf: image 46 page 112</Name></Image></Content><LearningData><Interval>1</Interval><Repetitions>1</Repetitions><Lapses>0</Lapses><LastRepetition>30.04.2021</LastRepetition><AFactor>1.200</AFactor><UFactor>1.000</UFactor><RepHist>Topic #2,570: The Memory Map Window The Memory Map window displays a summary listing of the&lt;br&gt;ElNo=2570 Rep=1 Laps=0 Date=30.04.2021 Int=0 Grade=9 Priority=15.6898</RepHist></LearningData></SuperMemoElement></SuperMemoElement></SuperMemoElement></SuperMemoElement></SuperMemoElement></SuperMemoElement></SuperMemoCollection>