nx_pe_thunk_dump.nx
buildroot/runtime/nx_pe_thunk_dump.nx
about
nx_pe_thunk_dump.nx -- SOVEREIGN PE troubleshooting organ (replaces the python oracle). Reads a built
PE, locates the CreateFileA thunk by its `mov edx,0x80000000` signature (BA 00 00 00 80), and prints
the emitted thunk bytes as hex -- so "is the emitted thunk what the organ intended" is one step, in Nishi.
dependencies 1 imports · 0 importers
imports: nx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 6 | func d_putc(ch: i64) -> i64 { let t: *u8 = sys_mmap(1); t[0] = ch as u8; sys_write(1, t, 1); return 0 } |
| 7 | func d_hexbyte(v: i64) -> i64 |
| 15 | func d_u16(b: *u8, o: i64) -> i64 { return (b[o] as i64) | ((b[o+1] as i64) << 8) } called by 1: main |
| 16 | func d_u32(b: *u8, o: i64) -> i64 { return (b[o] as i64) | ((b[o+1] as i64) << 8) | ((b[o+2] as i64) << 16) | ((b[o+3] as i64) << 24) } called by 1: main |
| 18 | func main() -> i64 |