TODO ./configure --prefix=$HOME/qemu-build --sysconfdir=$HOME/qemu-build/etc --libexecdir=$HOME/qemu-build/usr/lib/qemu --localstatedir=$HOME/qemu-build/var --disable-bpf --disable-bsd-user --disable-capstone --disable-docs --disable-fdt --disable-gcrypt --disable-glusterfs --disable-gnutls --disable-gtk...

A few weeks ago I found a reverse engineering problem which basically boiled down to running a heavily obfuscated Linux binary and entering the correct number to get it to print a flag. Fortunately, the interesting bits of the program ran quite fast – after reading the input, it spends around 5us before printing out whether the guess was correct or not. This means that even a brute-force search of the possible inputs could finish in a reasonable time, and there is no need to expend much effort on actual reverse engineering if we don't have to. The only tricky part is, how do we convince it to try different inputs as fast as this?