good first issue
Repository-Metriken
- Stars
- (23.826 Stars)
- PR-Merge-Metriken
- (Durchschn. Merge 16h 24m) (99 gemergte PRs in 30 T)
Beschreibung
Hello,
A very simple question: in the sequence below, how can I with ESIL, don't get into the code of sym.imp.func:
address1 call dword [sym.imp.function] address2 mov ...
Ideally, when I meet a call [sym.import...] , I want just to replace the address of import by the address +1 of the actual sequence(i.e. mov instruction on that case). I don't want to make a step over, because I need to see the code of other calls. My concern is only about imports.
Could you please help with some commands that automate that for all sym.imports that I can find in the binary.
Thanks a lot for your help in advance