From 837b613513e9a68b35ca2406e810b03e6947e223 Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Sat, 18 Jul 2026 21:23:28 +0400 Subject: feat(runtime): load script varset defaults --- tools/ghidra/ExportAiScriptLoaderStrings.java | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 tools/ghidra/ExportAiScriptLoaderStrings.java (limited to 'tools/ghidra/ExportAiScriptLoaderStrings.java') diff --git a/tools/ghidra/ExportAiScriptLoaderStrings.java b/tools/ghidra/ExportAiScriptLoaderStrings.java new file mode 100644 index 0000000..e1443c7 --- /dev/null +++ b/tools/ghidra/ExportAiScriptLoaderStrings.java @@ -0,0 +1,27 @@ +// Emits path literals used by the GOG AI script loader at 0x10001000. +// Run headless; the original PE remains read only. +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; + +public class ExportAiScriptLoaderStrings extends GhidraScript { + private static final long[] ADDRESSES = { + 0x10038a88L, 0x10038a9cL, 0x10038aa4L, 0x10038aacL, + 0x10038ab4L, 0x10038abcL, 0x10038ad0L, 0x10038ad8L, + 0x10038ae0L + }; + + @Override + public void run() throws Exception { + for (long value : ADDRESSES) { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(value); + byte[] bytes = new byte[256]; + int count = currentProgram.getMemory().getBytes(address, bytes); + StringBuilder text = new StringBuilder(); + for (int index = 0; index < count && bytes[index] != 0; index++) { + text.append((char) (bytes[index] & 0xff)); + } + println(address + " = \"" + text + "\""); + } + } +} -- cgit v1.2.3