radareorg/radare2

Question about imports

開放

#14,843 建立於 2019年8月18日

 (3 則留言) (0 個反應) (0 位負責人)C (3,229 個分叉)batch import
good first issue

倉庫指標

星標
 (23,826 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

Hello,

A very simple question: in the sequence below, how can I with ESIL, don't get into the code of sym.imp.func:

address1 call dword [sym.imp.function] address2 mov ...

Ideally, when I meet a call [sym.import...] , I want just to replace the address of import by the address +1 of the actual sequence(i.e. mov instruction on that case). I don't want to make a step over, because I need to see the code of other calls. My concern is only about imports.

Could you please help with some commands that automate that for all sym.imports that I can find in the binary.

Thanks a lot for your help in advance

貢獻者指南