Thank you for your answer. I did find the /proc/<pid>/maps file, and I did gather the memory map from there.
I used gdb to attach to process, and "dump binary memory" command to dump it to file.
The memory was in 3 areas: 0x08048000 -- 0x08??????
0x40000000 -- 0x???????? and 0xBFFED000 -- 0xC0000000
I did successfully dump the first and the third memory, but the sdecond one showed only zeros on the hex editor. Nevermind, I finished what I needed.
Maybe there was an easier way for dumping the memory, but, I am a bit novice to Linux ))))
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.