From 3384750f187e52442ad960ab21723f94a4b9ceaa Mon Sep 17 00:00:00 2001
From: Mark Rowe <mrowe@bdash.net.nz>
Date: Tue, 27 May 2025 13:35:46 -0700
Subject: [PATCH] [Rust] Support retrieving use / def of SSA registers in LLIL

---
 rust/src/low_level_il/function.rs | 51 +++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)

diff --git a/rust/src/low_level_il/function.rs b/rust/src/low_level_il/function.rs
index 495aae7905..b581a78000 100644
--- a/rust/src/low_level_il/function.rs
+++ b/rust/src/low_level_il/function.rs
@@ -209,6 +209,57 @@ impl Ref<LowLevelILFunction<Mutable, NonSSA>> {
     }
 }
 
+impl<M: FunctionMutability> Ref<LowLevelILFunction<M, SSA>> {
+    /// Return a vector of all instructions that use the given SSA register.
+    #[must_use]
+    pub fn get_ssa_register_uses<R: ArchReg>(
+        &self,
+        reg: LowLevelILSSARegisterKind<R>,
+    ) -> Vec<LowLevelILInstruction<M, SSA>> {
+        use binaryninjacore_sys::BNGetLowLevelILSSARegisterUses;
+        let register_id = match reg {
+            LowLevelILSSARegisterKind::Full { kind, .. } => kind.id(),
+            LowLevelILSSARegisterKind::Partial { partial_reg, .. } => partial_reg.id(),
+        };
+        let mut count = 0;
+        let instrs = unsafe {
+            BNGetLowLevelILSSARegisterUses(
+                self.handle,
+                register_id.into(),
+                reg.version() as usize,
+                &mut count,
+            )
+        };
+        let result = unsafe { std::slice::from_raw_parts(instrs, count) }
+            .iter()
+            .map(|idx| LowLevelILInstruction::new(self, LowLevelInstructionIndex(*idx)))
+            .collect();
+        unsafe { BNFreeILInstructionList(instrs) };
+        result
+    }
+
+    /// Returns the instruction that defines the given SSA register.
+    #[must_use]
+    pub fn get_ssa_register_definition<R: ArchReg>(
+        &self,
+        reg: &LowLevelILSSARegisterKind<R>,
+    ) -> Option<LowLevelILInstruction<M, SSA>> {
+        use binaryninjacore_sys::BNGetLowLevelILSSARegisterDefinition;
+        let register_id = match reg {
+            LowLevelILSSARegisterKind::Full { kind, .. } => kind.id(),
+            LowLevelILSSARegisterKind::Partial { partial_reg, .. } => partial_reg.id(),
+        };
+        let instr_idx = unsafe {
+            BNGetLowLevelILSSARegisterDefinition(
+                self.handle,
+                register_id.into(),
+                reg.version() as usize,
+            )
+        };
+        self.instruction_from_index(LowLevelInstructionIndex(instr_idx))
+    }
+}
+
 impl<M, F> ToOwned for LowLevelILFunction<M, F>
 where
     M: FunctionMutability,