radareorg/radare2

Question about imports

Open

#14 843 ouverte le 18 août 2019

Voir sur GitHub
 (3 commentaires) (0 réactions) (0 assignés)C (3 229 forks)batch import
good first issue

Métriques du dépôt

Stars
 (23 826 stars)
Métriques de merge PR
 (Merge moyen 16h 24m) (99 PRs mergées en 30 j)

Description

Hello,

A very simple question: in the sequence below, how can I with ESIL, don't get into the code of sym.imp.func:

address1 call dword [sym.imp.function] address2 mov ...

Ideally, when I meet a call [sym.import...] , I want just to replace the address of import by the address +1 of the actual sequence(i.e. mov instruction on that case). I don't want to make a step over, because I need to see the code of other calls. My concern is only about imports.

Could you please help with some commands that automate that for all sym.imports that I can find in the binary.

Thanks a lot for your help in advance

Guide contributeur