diff options
| author | Valentin Popov <valentin@popov.link> | 2026-07-18 20:33:14 +0300 |
|---|---|---|
| committer | Valentin Popov <valentin@popov.link> | 2026-07-18 20:33:14 +0300 |
| commit | 24ba0bdd3756c2f84f27ae0fd70485f930bd991b (patch) | |
| tree | 98c5ee49708c73653e16e50e2316da5872631ffa /tools | |
| parent | ea09804778ba7b1855b37fa21865bd6762e81638 (diff) | |
| download | fparkan-24ba0bdd3756c2f84f27ae0fd70485f930bd991b.tar.xz fparkan-24ba0bdd3756c2f84f27ae0fd70485f930bd991b.zip | |
feat(script): resolve handler thirty dword callbacks
Diffstat (limited to 'tools')
| -rw-r--r-- | tools/ghidra/ExportAiVarSetParser.java | 23 | ||||
| -rw-r--r-- | tools/ghidra/ExportAiVarSetU32Resolver.java | 23 |
2 files changed, 46 insertions, 0 deletions
diff --git a/tools/ghidra/ExportAiVarSetParser.java b/tools/ghidra/ExportAiVarSetParser.java new file mode 100644 index 0000000..f425f30 --- /dev/null +++ b/tools/ghidra/ExportAiVarSetParser.java @@ -0,0 +1,23 @@ +// Emits the actual text-to-varset parser called by the AI varset loader. +// Run headless; the original PE remains read only. +import ghidra.app.decompiler.DecompInterface; +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; +import ghidra.program.model.listing.Function; + +public class ExportAiVarSetParser extends GhidraScript { + private static final long ADDRESS = 0x100174a0L; + + @Override + public void run() throws Exception { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(ADDRESS); + Function function = currentProgram.getFunctionManager().getFunctionAt(address); + println("===== AI varset parser ====="); + if (function == null) { println("missing"); return; } + DecompInterface decompiler = new DecompInterface(); + decompiler.openProgram(currentProgram); + println(decompiler.decompileFunction(function, 60, monitor).getDecompiledFunction().getC()); + decompiler.dispose(); + } +} diff --git a/tools/ghidra/ExportAiVarSetU32Resolver.java b/tools/ghidra/ExportAiVarSetU32Resolver.java new file mode 100644 index 0000000..247220d --- /dev/null +++ b/tools/ghidra/ExportAiVarSetU32Resolver.java @@ -0,0 +1,23 @@ +// Emits the u32 resolver used by corpus-reachable Handler(30) for indexed +// varset records. Run headless; the original PE remains read only. +import ghidra.app.decompiler.DecompInterface; +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; +import ghidra.program.model.listing.Function; + +public class ExportAiVarSetU32Resolver extends GhidraScript { + private static final long ADDRESS = 0x10013570L; + + @Override + public void run() throws Exception { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(ADDRESS); + Function function = currentProgram.getFunctionManager().getFunctionAt(address); + println("===== AI varset u32 resolver ====="); + if (function == null) { println("missing"); return; } + DecompInterface decompiler = new DecompInterface(); + decompiler.openProgram(currentProgram); + println(decompiler.decompileFunction(function, 60, monitor).getDecompiledFunction().getC()); + decompiler.dispose(); + } +} |
