Joseph Doherty
fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
55 lines
2.2 KiB
Java
55 lines
2.2 KiB
Java
import ghidra.app.decompiler.DecompInterface;
|
|
import ghidra.app.decompiler.DecompileResults;
|
|
import ghidra.app.script.GhidraScript;
|
|
import ghidra.program.model.address.Address;
|
|
import ghidra.program.model.listing.Function;
|
|
import java.io.File;
|
|
import java.io.PrintWriter;
|
|
|
|
public class DecompileSelectedFunctions extends GhidraScript {
|
|
@Override
|
|
protected void run() throws Exception {
|
|
String[] args = getScriptArgs();
|
|
if (args.length < 2) {
|
|
println("usage: DecompileSelectedFunctions <output-file> <address-or-rva> [<address-or-rva>...]");
|
|
return;
|
|
}
|
|
|
|
File output = new File(args[0]);
|
|
output.getParentFile().mkdirs();
|
|
|
|
DecompInterface decompiler = new DecompInterface();
|
|
decompiler.openProgram(currentProgram);
|
|
|
|
long imageBase = currentProgram.getImageBase().getOffset();
|
|
try (PrintWriter writer = new PrintWriter(output, "UTF-8")) {
|
|
writer.printf("# %s selected decompile%n%n", currentProgram.getName());
|
|
for (int i = 1; i < args.length; i++) {
|
|
long raw = Long.decode(args[i]);
|
|
long absolute = raw < imageBase ? imageBase + raw : raw;
|
|
Address address = toAddr(absolute);
|
|
Function function = getFunctionContaining(address);
|
|
if (function == null) {
|
|
writer.printf("## %s%n%nNo function at %s.%n%n", args[i], address);
|
|
continue;
|
|
}
|
|
|
|
writer.printf("## %s at %s%n%n", function.getName(), function.getEntryPoint());
|
|
writer.printf("Signature: `%s`%n%n", function.getSignature());
|
|
DecompileResults results = decompiler.decompileFunction(function, 90, monitor);
|
|
if (!results.decompileCompleted()) {
|
|
writer.printf("Decompile failed: %s%n%n", results.getErrorMessage());
|
|
continue;
|
|
}
|
|
|
|
writer.println("```c");
|
|
writer.println(results.getDecompiledFunction().getC());
|
|
writer.println("```");
|
|
writer.println();
|
|
}
|
|
} finally {
|
|
decompiler.dispose();
|
|
}
|
|
}
|
|
}
|