diff options
| author | Jordan Wiens <jordan@psifertex.com> | 2022-03-29 17:31:45 -0400 |
|---|---|---|
| committer | Jordan Wiens <jordan@psifertex.com> | 2022-03-29 17:31:45 -0400 |
| commit | d6944d957d68c6bbd050b5fc869184a6e086b69c (patch) | |
| tree | 8f60a6aec9a865be9fd350ee13ade36cc3d2a739 /docs/dev | |
| parent | f0d9ba427994be01e08111bc8a45219a6cdaed42 (diff) | |
add simple BNIL summary text
Diffstat (limited to 'docs/dev')
| -rw-r--r-- | docs/dev/bnil-overview.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/docs/dev/bnil-overview.md b/docs/dev/bnil-overview.md index 6f5f1f51..a6b367fe 100644 --- a/docs/dev/bnil-overview.md +++ b/docs/dev/bnil-overview.md @@ -14,6 +14,19 @@ Except that overview isn't telling the whole story! The real stack of BNIL _actu This short introduction is a very brief guide to BNIL with much more details in [Part 1: LLIL](bnil-llil.md) and [Part 2: MLIL](bnil-mlil.md). +## Summary + +While the image above shows a bit of the logical relationships between each IL in terms of analysis, it's only an approximation. The actual analysis includes more edges than just those shown. That said, here's a short overview of some of the differences between each IL and when you might wish to use a given one: + +- Lifted IL is intended to be a straight-forward translation from native instruction semantics to LLIL instructions. Note that Lifted IL and LLIL share the same instructions and are substantively similar with a few small differences. +- Low Level IL (LLIL) is converted from Lifted IL, LLIL removes NOP instructions and folds flags into conditional instructions but otherwise contains the same operations as Lifted IL. +- Low Level IL SSA Form is an [SSA](https://en.wikipedia.org/wiki/Static_single_assignment_form) form of LLIL. +- Mapped Medium Level IL is a translation layer between LLIL that is rarely needed for analysis but is useful for the translation process. +- Medium Level IL (MLIL) translates registers and memory accesses into variables, types are associated with variables, platform information is used to generate call sites with types (both inferred and explicit) and parameters, data flow is calculated and constants are propagated. +- Medium Level IL SSA Form is an [SSA](https://en.wikipedia.org/wiki/Static_single_assignment_form) form of MLIL. +- High Level IL (HLIL) [builds on](https://api.binary.ninja/binaryninja.function-module.html#binaryninja.function.Function.request_debug_report) (use the `high_level_il` report type) MLIL by adding higher level control flow instructions, a number of dead-code and variable passes as well as other simplification/folding. It also includes an [AST](https://api.binary.ninja/binaryninja.highlevelil-module.html#binaryninja.highlevelil.HighLevelILInstruction.ast). + + ## Reading IL All of the various ILs (with the exception of the SSA forms) are intended to be easily human-readable and look much like pseudo-code. There is some shorthand notation that is used throughout the ILs, though, explained below: |
