Author: xorhex
Copyright: 2025
Various features to make windows malware analysis easier.
Various features to make windows malware analysis easier like adding function prototypes.
- Rename the variable to the API name
- Right click on the variable and select
BinjaExtrasand clickApply Type
Sometimes a custom function will resolve an API and then jump to it. The function prototype of the function that contains this code that both resolves and calls/jumps to the API function matches the corrisponding API function prototype being resolved - simply rename the function and the type is auto applied.
All of the features can be controlled (enabled/disabled) via the settings.
Nothing special, just install through the Binary Ninja plugin manager.
Nothing special, just install through the Binary Ninja plugin manager.
Nothing special, just install through the Binary Ninja plugin manager.
- move the Usage content into the readme so that it will render in BinaryNinja's plugin manager
This plugin requires the following minimum version of Binary Ninja:
- 6455
This plugin is released under a MIT license.
2