This is a work in progress by someone who is learning about Binary Ninja.
References
- https://api.binary.ninja/binaryninja.binaryview-module.html
- https://gist.github.com/psifertex/6fbc7532f536775194edd26290892ef7
Get database name
// Searches all instructions for any references to undefined memory addresses. | |
// Useful for reversing firmware when you are still determining the correct memory mappings. | |
// Invalid addresses could indicate that you need to add a new segment at that address. | |
// | |
// @author starfleetcadet75 | |
// @category Search | |
// @keybinding | |
// @menupath | |
// @toolbar |
This is a work in progress by someone who is learning about Binary Ninja.
References
Get database name
define noundef ptr @Func_180000000(ptr readonly returned %MEMORY, i64 %RAX, i64 %RBX, i64 %RCX, i64 %RDX, i64 %RBP, i64 %R8, i64 %R9, i64 %R10, i64 %R11, i64 %R12, i64 %R13, i64 %R14, i64 %R15, i64 %GSBASE, i64 %FSBASE) local_unnamed_addr #0 { | |
%0 = load ptr, ptr %MEMORY, align 8, !tbaa !6 | |
%1 = getelementptr inbounds i8, ptr %0, i64 99992 | |
%2 = getelementptr inbounds i8, ptr %0, i64 99984 | |
%3 = getelementptr inbounds i8, ptr %0, i64 99976 | |
%4 = getelementptr inbounds i8, ptr %0, i64 99968 | |
store i64 %RDX, ptr %3, align 8, !tbaa !11 | |
%5 = getelementptr inbounds i8, ptr %0, i64 99952 | |
%6 = getelementptr inbounds i8, ptr %0, i64 99936 |
Alpc = Advanced Local Inter-Process Communication | |
Cc = Common Cache | |
Cm = Configuration Manager | |
Dbgk = Debugging Framework for User-Mode | |
Em = Errata Manager |