diff options
| author | Valentin Popov <valentin@popov.link> | 2026-07-18 20:23:28 +0300 |
|---|---|---|
| committer | Valentin Popov <valentin@popov.link> | 2026-07-18 20:23:28 +0300 |
| commit | 837b613513e9a68b35ca2406e810b03e6947e223 (patch) | |
| tree | 4a1e39ea5ea9429d48bdd655003a69b1f9222814 /tools/ghidra | |
| parent | a7882545b7a9aa0409dae95f8f4e51922b438615 (diff) | |
| download | fparkan-837b613513e9a68b35ca2406e810b03e6947e223.tar.xz fparkan-837b613513e9a68b35ca2406e810b03e6947e223.zip | |
feat(runtime): load script varset defaults
Diffstat (limited to 'tools/ghidra')
| -rw-r--r-- | tools/ghidra/ExportAiScriptLoaderStrings.java | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/tools/ghidra/ExportAiScriptLoaderStrings.java b/tools/ghidra/ExportAiScriptLoaderStrings.java new file mode 100644 index 0000000..e1443c7 --- /dev/null +++ b/tools/ghidra/ExportAiScriptLoaderStrings.java @@ -0,0 +1,27 @@ +// Emits path literals used by the GOG AI script loader at 0x10001000. +// Run headless; the original PE remains read only. +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; + +public class ExportAiScriptLoaderStrings extends GhidraScript { + private static final long[] ADDRESSES = { + 0x10038a88L, 0x10038a9cL, 0x10038aa4L, 0x10038aacL, + 0x10038ab4L, 0x10038abcL, 0x10038ad0L, 0x10038ad8L, + 0x10038ae0L + }; + + @Override + public void run() throws Exception { + for (long value : ADDRESSES) { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(value); + byte[] bytes = new byte[256]; + int count = currentProgram.getMemory().getBytes(address, bytes); + StringBuilder text = new StringBuilder(); + for (int index = 0; index < count && bytes[index] != 0; index++) { + text.append((char) (bytes[index] & 0xff)); + } + println(address + " = \"" + text + "\""); + } + } +} |
