search

Vector35 / binaryninja-api

Public API, examples, documentation and issues for Binary Ninja
https://binary.ninja/
MIT License
927 stars 209 forks source link

Search in the imports/exports in the triage view does not account for ordinal #4590

Closed xusheng6 closed 1 year ago

xusheng6 commented 1 year ago

Sometimes we wish to search the imports/exports by ordinal, but right now it does not work -- it only searches for the name of the symbol: https://github.com/Vector35/binaryninja-api/blob/e280f8d5b348808a06d73e7a5db91e13b58d2c16/examples/triage/exports.cpp#L229

Use case: I am dealing with a crackme that uses MFC, and the import functions are all like Ordinal_mfc140ud_9386. I loaded the MFC DLL in binja and applied the PDB. We can see that ordinal 9386 is function CWnd::GetWindowTextW. If I can search for exports by ordinal, it would be easier for me to match the ordinal with its name.

Screenshot 2023-08-30 at 11 01 04 AM

xusheng6 commented 1 year ago

Crackme: https://crackmes.one/crackme/64cba316b25df8732eebc402

Related to: #3772

xusheng6 commented 1 year ago

Fixed in dev 3.6.4532