Skip to content

Instantly share code, notes, and snippets.

@withzombies
Created November 21, 2016 01:53
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save withzombies/156dda9f12bec78bfa53a5e1fd3ee40d to your computer and use it in GitHub Desktop.
Save withzombies/156dda9f12bec78bfa53a5e1fd3ee40d to your computer and use it in GitHub Desktop.
binja_memcpy.py output
$ python binja_memcpy.py /bin/bash
Analyzing /bin/bash
100038024 dst:<entry rsi>
src:<entry rdi>
n:<range: -0x80000000 to 0x7fffffff>
1000380c9 dst:<undetermined>
src:<entry rdi>
n:<range: -0x80000000 to 0x7fffffff>
10003a50a dst:<undetermined>
src:<undetermined>
n:<undetermined>
10003ab58 dst:<undetermined>
src:<undetermined>
n:<undetermined>
10003ab8a dst:<undetermined>
src:<undetermined>
n:<range: -0x80000000 to 0x7fffffff>
10003ac28 dst:<undetermined>
src:<const 0x10008f010>
n:<undetermined>
10003ad4e dst:<undetermined>
src:<const 0x10008f010>
n:<undetermined>
10003e198 dst:<undetermined>
src:<undetermined>
n:<range: -0x80000000 to 0x7fffffff>
1000401c8 dst:<undetermined>
src:<undetermined>
n:<undetermined>
100048041 dst:<undetermined>
src:<undetermined with offset 0x1c>
n:<range: -0x80000000 to 0x7fffffff>
100048207 dst:<undetermined with offset 0x1c>
src:<entry rdi>
n:<range: -0x80000000 to 0x7fffffff>
100048239 dst:<undetermined>
src:<entry rdi + 0xc>
n:<range: -0x80000000 to 0x7fffffff>
1000483e6 dst:<undetermined>
src:<undetermined with offset 0xa>
n:<undetermined>
100048416 dst:<undetermined with offset 0x1>
src:<undetermined with offset 0x1>
n:<undetermined>
10004a5f0 dst:<undetermined>
src:<undetermined>
n:<undetermined>
10004a617 dst:<undetermined with offset 0x1>
src:<undetermined>
n:<undetermined with offset 0x1>
10004c86b dst:<undetermined with offset 0xa>
src:<undetermined>
n:<undetermined>
10004c897 dst:<undetermined with offset 0x1>
src:<undetermined>
n:<undetermined with offset 0x1>
10004c96b dst:<undetermined>
src:<undetermined>
n:<undetermined>
10004cd0f dst:<undetermined with offset 0x20>
src:<entry rdi>
n:<undetermined with offset 0x1>
10004d123 dst:<undetermined with offset 0x1>
src:<undetermined>
n:<undetermined>
10004de59 dst:<undetermined>
src:<entry rsi>
n:<undetermined>
10004f4bf dst:<undetermined>
src:<undetermined>
n:<undetermined>
10004f513 dst:<undetermined>
src:<undetermined>
n:<range: 0x0 to 0xffffffff>
10004f8f9 dst:<undetermined>
src:<entry rdi>
n:<range: -0x80000000 to 0x7fffffff>
10004fc14 dst:<undetermined>
src:<undetermined>
n:<undetermined with offset 0x1>
10004fc4d dst:<undetermined>
src:<undetermined>
n:<undetermined with offset 0x1>
10005019e dst:<undetermined>
src:<undetermined>
n:<undetermined>
1000501c1 dst:<undetermined>
src:<undetermined>
n:<undetermined>
10005091b dst:<undetermined>
src:<undetermined>
n:<range: 0x8 to 0x800000000, step 0x8>
100010818 dst:<undetermined>
src:<undetermined>
n:<undetermined>
1000109ea dst:<undetermined>
src:<undetermined>
n:<undetermined>
100010a49 dst:<undetermined>
src:<undetermined>
n:<undetermined>
100015857 dst:<undetermined>
src:<entry rdi>
n:<range: -0x80000000 to 0x7fffffff>
100015cf0 dst:<undetermined>
src:<entry rdi>
n:<undetermined with offset -0x1>
100015d01 dst:<undetermined with offset -0x1>
src:<entry rsi>
n:<entry rdx>
10002189f dst:<stack frame offset -0xc8>
src:<const 0x10008fe00>
n:<const 0x98>
10002192e dst:<const 0x10008fe00>
src:<stack frame offset -0xc8>
n:<const 0x98>
10002a7f8 dst:<undetermined>
src:<undetermined>
n:<range: -0x80000000 to 0x7fffffff>
10002ada5 dst:<undetermined>
src:<undetermined>
n:<undetermined>
10002adce dst:<undetermined>
src:<undetermined>
n:<undetermined>
100034fe4 dst:<undetermined with offset 0x100090860>
src:<stack frame offset -0x58>
n:<undetermined>
1000354fb dst:<undetermined>
src:<undetermined>
n:<range: -0x80000000 to 0x7fffffff>
100058350 dst:<entry rdi>
src:<entry rsi>
n:<undetermined>
1000698a4 dst:<const 0x100091408>
src:<stack frame offset -0x1130>
n:<const 0x90>
100069b91 dst:<entry rsi>
src:<const 0x100091498>
n:<const 0x90>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment