Imports

Rabin2 is able to find imported objects by an executable, as well as their offsets in its PLT. This information is useful, for example, to understand what external function is invoked by call instruction. Pass -i flag to rabin2 to get a list of imports. An example:

  1. $ rabin2 -i /bin/ls
  2. [Imports]
  3. nth vaddr bind type lib name
  4. -------------------------------------
  5. 1 0x000032e0 GLOBAL FUNC __ctype_toupper_loc
  6. 2 0x000032f0 GLOBAL FUNC getenv
  7. 3 0x00003300 GLOBAL FUNC sigprocmask
  8. 4 0x00003310 GLOBAL FUNC __snprintf_chk
  9. 5 0x00003320 GLOBAL FUNC raise
  10. 6 0x00000000 GLOBAL FUNC free
  11. 7 0x00003330 GLOBAL FUNC abort
  12. 8 0x00003340 GLOBAL FUNC __errno_location
  13. 9 0x00003350 GLOBAL FUNC strncmp
  14. 10 0x00000000 WEAK NOTYPE _ITM_deregisterTMCloneTable
  15. 11 0x00003360 GLOBAL FUNC localtime_r
  16. 12 0x00003370 GLOBAL FUNC _exit
  17. 13 0x00003380 GLOBAL FUNC strcpy
  18. 14 0x00003390 GLOBAL FUNC __fpending
  19. 15 0x000033a0 GLOBAL FUNC isatty
  20. 16 0x000033b0 GLOBAL FUNC sigaction
  21. 17 0x000033c0 GLOBAL FUNC iswcntrl
  22. 18 0x000033d0 GLOBAL FUNC wcswidth
  23. 19 0x000033e0 GLOBAL FUNC localeconv
  24. 20 0x000033f0 GLOBAL FUNC mbstowcs
  25. 21 0x00003400 GLOBAL FUNC readlink
  26. ...