MaddoScientisto
24d4416003
- Introduced `seg043_boundary_repair.json` to manage function boundaries in segment 043. - Created `read_file.py` for reading and printing file content size. - Added `resolve_bb4f.py` to resolve specific function call targets. - Implemented `resolve_top_targets.py` to find resolved NE targets for top-called wrapper functions. - Added `script_contents.txt` to summarize NE relocation far calls. - Updated `tier4_ghidra.txt`, `tier4_ghidra_check.txt`, `tier4_output.txt`, and `tier4_result.txt` with function call statistics. - Created `tier5_errors.txt` for error logging and `tier5_output.txt` for additional function call statistics. - Established `tools` directory with helper scripts for the Ghidra project, including CLI and common functionalities. - Implemented command-line interface in `cli.py` for various project operations. - Added `common.py` for shared functions and configurations across tools. - Introduced `validate_fixups.py` to validate NE relocation fixups against known addresses.
44 lines
No EOL
1.3 KiB
JSON
44 lines
No EOL
1.3 KiB
JSON
{
|
|
"transaction": "Repair seg043 boundaries around 0007:5a90",
|
|
"remove_functions": [
|
|
"0007:5b6f"
|
|
],
|
|
"create_functions": [
|
|
{
|
|
"entry": "0007:5a90",
|
|
"name": "seg043_func_0090",
|
|
"body_start": "0007:5a90",
|
|
"body_end": "0007:5b79",
|
|
"comment": "Recovered from standalone seg043 boundary scan: true start at seg043:0090, body spans seg043:0090..0179.",
|
|
"comment_type": "plate"
|
|
},
|
|
{
|
|
"entry": "0007:5b7a",
|
|
"name": "seg043_func_017a",
|
|
"body_start": "0007:5b7a",
|
|
"body_end": "0007:5c1b",
|
|
"comment": "Recovered from standalone seg043 boundary scan: second prologue at seg043:017a, body spans seg043:017a..021b.",
|
|
"comment_type": "plate"
|
|
},
|
|
{
|
|
"entry": "0007:5c1c",
|
|
"name": "seg043_func_021c",
|
|
"body_start": "0007:5c1c",
|
|
"body_end": "0007:5c80",
|
|
"comment": "Recovered from standalone seg043 boundary scan: third prologue at seg043:021c, body spans seg043:021c..0280.",
|
|
"comment_type": "plate"
|
|
}
|
|
],
|
|
"comments": [
|
|
{
|
|
"address": "0007:5b6f",
|
|
"text": "Old auto-created split overlaps the earlier seg043:0090..0179 routine and should not be treated as a real entrypoint.",
|
|
"type": "plate"
|
|
}
|
|
],
|
|
"assert_functions": [
|
|
"0007:5a90",
|
|
"0007:5b7a",
|
|
"0007:5c1c"
|
|
]
|
|
} |