Lets suppose I have a very big binary and I want to reverse just a part of this binary.
Is there a way to tell angr to start symbolic analysis at a given address ?
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.Sign up to join this community
There sure is.
p = angr.Project("target_binary") state = p.factory.blank_state(addr=0x400770)
I strongly recommend reading the State Presets section of the docs for more information. Crucially, all of the state preset constructors can take the
addr argument; depending what you're doing, there may be a better preset to use than
Examples from the angr team that include starting analysis at a specific address: