radareorg/radare2

Question about imports

Aberta

#14.843 aberto em 18 de ago. de 2019

 (3 comentários) (0 reação) (0 responsável)C (3.229 forks)batch import
good first issue

Métricas do repositório

Stars
 (23.826 estrelas)
Métricas de merge de PR
 (Métricas PR pendentes)

Description

Hello,

A very simple question: in the sequence below, how can I with ESIL, don't get into the code of sym.imp.func:

address1 call dword [sym.imp.function] address2 mov ...

Ideally, when I meet a call [sym.import...] , I want just to replace the address of import by the address +1 of the actual sequence(i.e. mov instruction on that case). I don't want to make a step over, because I need to see the code of other calls. My concern is only about imports.

Could you please help with some commands that automate that for all sym.imports that I can find in the binary.

Thanks a lot for your help in advance

Guia do colaborador