Skip to content

Ghidra loader and analyzer for Microware OS-9 memory modules.

License

Notifications You must be signed in to change notification settings

kevinhartman/mwos-ghidra

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Microware OS9 Ghidra Extensions

This repo contains Ghidra loaders and analyzers for working with Microware OS9 memory modules.

Currently, only MIPS program and driver modules are supported.

Analyzer

  • Since OS9 uses a shared memory map (no virtual addresses), all code and data references are accessed via offsets from two CPU registers initialized by the OS: the CP and GP registers, respectively. For MIPS variants, Ghidra supports data references calculated / accessed through the GP ($31), but does not support code references via the CP ($30). The analyzer included in this repo adds support for this. This functionality is added directly to the built-in MIPS Constant Reference Analyzer (option (Microware OS9) Assume CP value). Note that you may need to run this analysis multiple times consecutively to discover all functions.

Loader

  • The program module loader can load OS9 program modules and also fixes data references / performs proper relocations.
  • The driver loader works, but doesn't seem to provide a very nice decompilation. There's probably a few things I'm missing regarding how the official linker lays these out / some assumptions we could make to improve the disassembly. Currently, if the driver is for an SBF device, you'll get SBF entry points added to the disassembly if you provide the path to a device descriptor for the device in the loader's options.

About

Ghidra loader and analyzer for Microware OS-9 memory modules.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published