From 33d16dfca3bf245403d07d258d94e894b1ea7f42 Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Sat, 18 Jul 2026 22:55:31 +0400 Subject: docs(script): trace callback command one --- tools/ghidra/ExportIron3dAiCallbackCommand1.java | 23 ++++++++++++++++++++++ .../ExportIron3dAiCallbackCommand1Dispatch.java | 23 ++++++++++++++++++++++ 2 files changed, 46 insertions(+) create mode 100644 tools/ghidra/ExportIron3dAiCallbackCommand1.java create mode 100644 tools/ghidra/ExportIron3dAiCallbackCommand1Dispatch.java (limited to 'tools') diff --git a/tools/ghidra/ExportIron3dAiCallbackCommand1.java b/tools/ghidra/ExportIron3dAiCallbackCommand1.java new file mode 100644 index 0000000..08e8d73 --- /dev/null +++ b/tools/ghidra/ExportIron3dAiCallbackCommand1.java @@ -0,0 +1,23 @@ +// Emits the command-one consumer reached from the recovered CreateSuperAI +// host callback. Run headless; the original PE remains read only. +import ghidra.app.decompiler.DecompInterface; +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; +import ghidra.program.model.listing.Function; + +public class ExportIron3dAiCallbackCommand1 extends GhidraScript { + private static final long ADDRESS = 0x10095160L; + + @Override + public void run() throws Exception { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(ADDRESS); + Function function = currentProgram.getFunctionManager().getFunctionAt(address); + println("===== Iron3D CreateSuperAI callback command 1 ====="); + if (function == null) { println("missing"); return; } + DecompInterface decompiler = new DecompInterface(); + decompiler.openProgram(currentProgram); + println(decompiler.decompileFunction(function, 120, monitor).getDecompiledFunction().getC()); + decompiler.dispose(); + } +} diff --git a/tools/ghidra/ExportIron3dAiCallbackCommand1Dispatch.java b/tools/ghidra/ExportIron3dAiCallbackCommand1Dispatch.java new file mode 100644 index 0000000..a5712a1 --- /dev/null +++ b/tools/ghidra/ExportIron3dAiCallbackCommand1Dispatch.java @@ -0,0 +1,23 @@ +// Emits command one's selected-node dispatch callee. Run headless; the +// original PE remains read only. +import ghidra.app.decompiler.DecompInterface; +import ghidra.app.script.GhidraScript; +import ghidra.program.model.address.Address; +import ghidra.program.model.listing.Function; + +public class ExportIron3dAiCallbackCommand1Dispatch extends GhidraScript { + private static final long ADDRESS = 0x10095600L; + + @Override + public void run() throws Exception { + Address address = currentProgram.getAddressFactory().getDefaultAddressSpace() + .getAddress(ADDRESS); + Function function = currentProgram.getFunctionManager().getFunctionAt(address); + println("===== Iron3D callback command 1 node dispatch ====="); + if (function == null) { println("missing"); return; } + DecompInterface decompiler = new DecompInterface(); + decompiler.openProgram(currentProgram); + println(decompiler.decompileFunction(function, 120, monitor).getDecompiledFunction().getC()); + decompiler.dispose(); + } +} -- cgit v1.2.3