From d31d1f8eab7a2c79e349748939de01895af5de7e Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Sat, 18 Jul 2026 20:40:17 +0400 Subject: feat(script): decode compiled package framing --- tools/ghidra/ExportAiScriptLoader.java | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 tools/ghidra/ExportAiScriptLoader.java (limited to 'tools/ghidra/ExportAiScriptLoader.java') diff --git a/tools/ghidra/ExportAiScriptLoader.java b/tools/ghidra/ExportAiScriptLoader.java new file mode 100644 index 0000000..1b457d4 --- /dev/null +++ b/tools/ghidra/ExportAiScriptLoader.java @@ -0,0 +1,23 @@ +// Emits the GOG AI script-bundle loader, discovered from references to +// "MISSIONS\\SCRIPTS\\" and ".scr". Run headless; original input stays read only. +import ghidra.app.decompiler.DecompInterface; +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; +import ghidra.program.model.listing.Function; + +public class ExportAiScriptLoader extends GhidraScript { + private static final long ADDRESS = 0x10001000L; + + @Override + public void run() throws Exception { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(ADDRESS); + Function function = currentProgram.getFunctionManager().getFunctionAt(address); + println("===== AI script loader ====="); + if (function == null) { println("missing"); return; } + DecompInterface decompiler = new DecompInterface(); + decompiler.openProgram(currentProgram); + println(decompiler.decompileFunction(function, 60, monitor).getDecompiledFunction().getC()); + decompiler.dispose(); + } +} -- cgit v1.2.3