01_angr_avoid无法反编译主函数,模块比较多,加上avoid过滤条件之后,就没那么慢了。

import angr
project = angr.Project("./01_angr_avoid")
initial_state = project.factory.entry_state()
simulation = project.factory.simgr(initial_state)
print_good_address = 0x080485E0
will_not_succeed_address = 0x080485F2
simulation.explore(find=print_good_address, avoid=will_not_succeed_address)
solution_state = simulation.found[0]
print(solution_state.posix.dumps(0))



















