#include #include void libafl_qemu_main_loop( void ); void libafl_qemu_sys_init(int argc, char **argv, char **envp); void libafl_qemu_cleanup( void ); void libafl_qemu_set_breakpoint( unsigned long int ); void libafl_qemu_remove_native_breakpoint( unsigned long int ); void libafl_qemu_set_native_breakpoint( unsigned long int ); void libafl_snapshot_save( const char* ); void libafl_snapshot_load( const char* ); int64_t libafl_get_clock( void ); int main(int argc, char **argv, char **envp) { libafl_qemu_sys_init(argc, argv, envp); libafl_qemu_set_native_breakpoint(0x4c60);//send 217028 libafl_qemu_main_loop(); libafl_qemu_remove_native_breakpoint(0x4c60); libafl_qemu_set_native_breakpoint(0x00004f5c); libafl_snapshot_save("Start"); printf("Snap start icount: %lu\n",libafl_get_clock()); libafl_qemu_main_loop(); printf("tr1 icount: %lu\n",libafl_get_clock()); libafl_snapshot_load("Start"); libafl_qemu_main_loop(); printf("tr2 icount: %lu\n",libafl_get_clock()); libafl_qemu_cleanup(); return 0; }