KeenSecurityLab / BinAbsInspector

BinAbsInspector: Vulnerability Scanner for Binaries
GNU General Public License v3.0
1.58k stars 231 forks source link

在处理Call qword ptr [some_address] 如果some_address是指向导入函数,getmemblock返回值为NULL,该如何修正呢 #66

Open pwnht opened 1 year ago

pwnht commented 1 year ago

比如说处理call openprocess的时候,首先取140003040的地址的值,然后call image image 140003040的值是3f66并不是函数的地址 image getmemblock为空导致无法分析出函数。