windows-exe-decompiler-mcp-server 0.1.0 → 0.1.3

package/dist/index.js

@@ -18,6 +18,8 @@ import { artifactsDiffToolDefinition, createArtifactsDiffHandler } from './tools
 import { peFingerprintToolDefinition, createPEFingerprintHandler } from './tools/pe-fingerprint.js';
 import { peImportsExtractToolDefinition, createPEImportsExtractHandler } from './tools/pe-imports-extract.js';
 import { peExportsExtractToolDefinition, createPEExportsExtractHandler } from './tools/pe-exports-extract.js';
+import { pePdataExtractToolDefinition, createPEPdataExtractHandler, } from './tools/pe-pdata-extract.js';
+import { peSymbolsRecoverToolDefinition, createPESymbolsRecoverHandler, } from './tools/pe-symbols-recover.js';
 import { stringsExtractToolDefinition, createStringsExtractHandler } from './tools/strings-extract.js';
 import { stringsFlossDecodeToolDefinition, createStringsFlossDecodeHandler } from './tools/strings-floss-decode.js';
 import { yaraScanToolDefinition, createYaraScanHandler } from './tools/yara-scan.js';
@@ -25,9 +27,14 @@ import { runtimeDetectToolDefinition, createRuntimeDetectHandler } from './tools
 import { dotNetMetadataExtractToolDefinition, createDotNetMetadataExtractHandler } from './tools/dotnet-metadata-extract.js';
 import { dotNetTypesListToolDefinition, createDotNetTypesListHandler } from './tools/dotnet-types-list.js';
 import { packerDetectToolDefinition, createPackerDetectHandler } from './tools/packer-detect.js';
+import { binaryRoleProfileToolDefinition, createBinaryRoleProfileHandler, } from './tools/binary-role-profile.js';
+import { dllExportProfileToolDefinition, createDllExportProfileHandler, } from './tools/dll-export-profile.js';
+import { comRoleProfileToolDefinition, createComRoleProfileHandler, } from './tools/com-role-profile.js';
+import { rustBinaryAnalyzeToolDefinition, createRustBinaryAnalyzeHandler, } from './tools/rust-binary-analyze.js';
 import { triageWorkflowToolDefinition, createTriageWorkflowHandler } from './workflows/triage.js';
 import { reconstructWorkflowToolDefinition, createReconstructWorkflowHandler } from './workflows/reconstruct.js';
 import { deepStaticWorkflowToolDefinition, createDeepStaticWorkflowHandler } from './workflows/deep-static.js';
+import { functionIndexRecoverWorkflowToolDefinition, createFunctionIndexRecoverWorkflowHandler, } from './workflows/function-index-recover.js';
 import { semanticNameReviewWorkflowToolDefinition, createSemanticNameReviewWorkflowHandler, } from './workflows/semantic-name-review.js';
 import { functionExplanationReviewWorkflowToolDefinition, createFunctionExplanationReviewWorkflowHandler, } from './workflows/function-explanation-review.js';
 import { reportSummarizeToolDefinition, createReportSummarizeHandler } from './tools/report-summarize.js';
@@ -36,6 +43,7 @@ import { toolHelpToolDefinition, createToolHelpHandler } from './tools/tool-help
 import { ghidraAnalyzeToolDefinition, createGhidraAnalyzeHandler } from './tools/ghidra-analyze.js';
 import { ghidraHealthToolDefinition, createGhidraHealthHandler } from './tools/ghidra-health.js';
 import { systemHealthToolDefinition, createSystemHealthHandler } from './tools/system-health.js';
+import { systemSetupGuideToolDefinition, createSystemSetupGuideHandler, } from './tools/system-setup-guide.js';
 import { dynamicDependenciesToolDefinition, createDynamicDependenciesHandler } from './tools/dynamic-dependencies.js';
 import { dynamicTraceImportToolDefinition, createDynamicTraceImportHandler } from './tools/dynamic-trace-import.js';
 import { dynamicMemoryImportToolDefinition, createDynamicMemoryImportHandler } from './tools/dynamic-memory-import.js';
@@ -47,6 +55,8 @@ import { taskCancelToolDefinition, createTaskCancelHandler } from './tools/task-
 import { taskSweepToolDefinition, createTaskSweepHandler } from './tools/task-sweep.js';
 import { codeFunctionsListToolDefinition, createCodeFunctionsListHandler } from './tools/code-functions-list.js';
 import { codeFunctionsRankToolDefinition, createCodeFunctionsRankHandler } from './tools/code-functions-rank.js';
+import { codeFunctionsSmartRecoverToolDefinition, createCodeFunctionsSmartRecoverHandler, } from './tools/code-functions-smart-recover.js';
+import { codeFunctionsDefineToolDefinition, createCodeFunctionsDefineHandler, } from './tools/code-functions-define.js';
 import { codeFunctionsSearchToolDefinition, createCodeFunctionsSearchHandler } from './tools/code-functions-search.js';
 import { codeFunctionDecompileToolDefinition, createCodeFunctionDecompileHandler } from './tools/code-function-decompile.js';
 import { codeFunctionDisassembleToolDefinition, createCodeFunctionDisassembleHandler } from './tools/code-function-disassemble.js';
@@ -63,6 +73,11 @@ import { dotNetReconstructExportToolDefinition, createDotNetReconstructExportHan
 import { codeReconstructPlanToolDefinition, createCodeReconstructPlanHandler } from './tools/code-reconstruct-plan.js';
 import { semanticNameReviewPromptDefinition, createSemanticNameReviewPromptHandler, } from './prompts/semantic-name-review.js';
 import { functionExplanationReviewPromptDefinition, createFunctionExplanationReviewPromptHandler, } from './prompts/function-explanation-review.js';
+import { moduleReconstructionReviewPromptDefinition, createModuleReconstructionReviewPromptHandler, } from './prompts/module-reconstruction-review.js';
+import { codeModuleReviewPrepareToolDefinition, createCodeModuleReviewPrepareHandler, } from './tools/code-module-review-prepare.js';
+import { codeModuleReviewApplyToolDefinition, createCodeModuleReviewApplyHandler, } from './tools/code-module-review-apply.js';
+import { codeModuleReviewToolDefinition, createCodeModuleReviewHandler, } from './tools/code-module-review.js';
+import { moduleReconstructionReviewWorkflowToolDefinition, createModuleReconstructionReviewWorkflowHandler, } from './workflows/module-reconstruction-review.js';
 // Export public API
 export { MCPServer } from './server.js';
 export { loadConfig } from './config.js';
@@ -75,9 +90,9 @@ async function main() {
         const config = loadConfig(configPath);
         // Initialize components
         const workspaceManager = new WorkspaceManager(config.workspace.root);
-        const database = new DatabaseManager(config.database.path || './data/database.db');
-        const policyGuard = new PolicyGuard('./audit.log');
-        const cacheManager = new CacheManager('./cache', database);
+        const database = new DatabaseManager(config.database.path);
+        const policyGuard = new PolicyGuard(config.logging.auditPath);
+        const cacheManager = new CacheManager(config.cache.root, database);
         const jobQueue = new JobQueue();
         const analysisTaskRunner = new AnalysisTaskRunner(jobQueue, database, workspaceManager, cacheManager);
         analysisTaskRunner.start();
@@ -86,10 +101,11 @@ async function main() {
         // Register tools
         server.registerPrompt(semanticNameReviewPromptDefinition, createSemanticNameReviewPromptHandler());
         server.registerPrompt(functionExplanationReviewPromptDefinition, createFunctionExplanationReviewPromptHandler());
+        server.registerPrompt(moduleReconstructionReviewPromptDefinition, createModuleReconstructionReviewPromptHandler());
         // Task 8.1: sample.ingest tool
         server.registerTool(sampleIngestToolDefinition, createSampleIngestHandler(workspaceManager, database, policyGuard));
         // Task 8.2: sample.profile.get tool
-        server.registerTool(sampleProfileGetToolDefinition, createSampleProfileGetHandler(database));
+        server.registerTool(sampleProfileGetToolDefinition, createSampleProfileGetHandler(database, workspaceManager));
         // Task 18.15: artifact.read tool - Read manifest/gaps and other artifacts via MCP
         server.registerTool(artifactReadToolDefinition, createArtifactReadHandler(workspaceManager, database));
         // Task 18.18: artifacts.list tool - Enumerate artifact inventory with existence metadata
@@ -101,6 +117,8 @@ async function main() {
         server.registerTool(peImportsExtractToolDefinition, createPEImportsExtractHandler(workspaceManager, database, cacheManager));
         // Task 8.5: pe.exports.extract tool
         server.registerTool(peExportsExtractToolDefinition, createPEExportsExtractHandler(workspaceManager, database, cacheManager));
+        server.registerTool(pePdataExtractToolDefinition, createPEPdataExtractHandler(workspaceManager, database, cacheManager));
+        server.registerTool(peSymbolsRecoverToolDefinition, createPESymbolsRecoverHandler(workspaceManager, database, cacheManager));
         // Task 8.6: strings.extract tool
         server.registerTool(stringsExtractToolDefinition, createStringsExtractHandler(workspaceManager, database, cacheManager));
         // Task 8.7: strings.floss.decode tool
@@ -113,18 +131,24 @@ async function main() {
         server.registerTool(dotNetTypesListToolDefinition, createDotNetTypesListHandler(workspaceManager, database, cacheManager));
         // Task 8.10: packer.detect tool
         server.registerTool(packerDetectToolDefinition, createPackerDetectHandler(workspaceManager, database, cacheManager));
+        server.registerTool(binaryRoleProfileToolDefinition, createBinaryRoleProfileHandler(workspaceManager, database, cacheManager));
+        server.registerTool(dllExportProfileToolDefinition, createDllExportProfileHandler(workspaceManager, database, cacheManager));
+        server.registerTool(comRoleProfileToolDefinition, createComRoleProfileHandler(workspaceManager, database, cacheManager));
+        server.registerTool(rustBinaryAnalyzeToolDefinition, createRustBinaryAnalyzeHandler(workspaceManager, database, cacheManager));
         // Task 9.1: workflow.triage - Quick triage workflow
         server.registerTool(triageWorkflowToolDefinition, createTriageWorkflowHandler(workspaceManager, database, cacheManager));
         // Task 40.5.1: workflow.reconstruct - End-to-end source reconstruction workflow
-        server.registerTool(reconstructWorkflowToolDefinition, createReconstructWorkflowHandler(workspaceManager, database, cacheManager));
+        server.registerTool(reconstructWorkflowToolDefinition, createReconstructWorkflowHandler(workspaceManager, database, cacheManager, undefined, jobQueue));
         // Task 16.x: workflow.deep_static - Comprehensive long-running static analysis
         server.registerTool(deepStaticWorkflowToolDefinition, createDeepStaticWorkflowHandler(workspaceManager, database, cacheManager, jobQueue));
-        server.registerTool(semanticNameReviewWorkflowToolDefinition, createSemanticNameReviewWorkflowHandler(workspaceManager, database, cacheManager, server));
-        server.registerTool(functionExplanationReviewWorkflowToolDefinition, createFunctionExplanationReviewWorkflowHandler(workspaceManager, database, cacheManager, server));
+        server.registerTool(functionIndexRecoverWorkflowToolDefinition, createFunctionIndexRecoverWorkflowHandler(workspaceManager, database, cacheManager));
+        server.registerTool(semanticNameReviewWorkflowToolDefinition, createSemanticNameReviewWorkflowHandler(workspaceManager, database, cacheManager, server, undefined, jobQueue));
+        server.registerTool(functionExplanationReviewWorkflowToolDefinition, createFunctionExplanationReviewWorkflowHandler(workspaceManager, database, cacheManager, server, undefined, jobQueue));
+        server.registerTool(moduleReconstructionReviewWorkflowToolDefinition, createModuleReconstructionReviewWorkflowHandler(workspaceManager, database, cacheManager, server, undefined, jobQueue));
         // Task 9.2: report.summarize - Generate quick triage report
         server.registerTool(reportSummarizeToolDefinition, createReportSummarizeHandler(workspaceManager, database, cacheManager));
         // Task 24.x: report.generate - Generate stored multi-stage analysis report artifact
-        server.registerTool(reportGenerateToolDefinition, createReportGenerateHandler(workspaceManager, database));
+        server.registerTool(reportGenerateToolDefinition, createReportGenerateHandler(workspaceManager, database, cacheManager));
         // Task 15.1: ghidra.analyze - Analyze binary with Ghidra
         server.registerTool(ghidraAnalyzeToolDefinition, createGhidraAnalyzeHandler(workspaceManager, database, jobQueue));
         // Task execution controls: query/cancel/sweep analysis jobs
@@ -135,6 +159,7 @@ async function main() {
         server.registerTool(ghidraHealthToolDefinition, createGhidraHealthHandler(workspaceManager, database));
         // Task 40.5.2: system.health - Aggregated HA readiness health check
         server.registerTool(systemHealthToolDefinition, createSystemHealthHandler(workspaceManager, database, { cacheManager }));
+        server.registerTool(systemSetupGuideToolDefinition, createSystemSetupGuideHandler());
         // Task 18.22: dynamic.dependencies - probe dynamic-analysis component readiness
         server.registerTool(dynamicDependenciesToolDefinition, createDynamicDependenciesHandler(workspaceManager, database));
         // Runtime evidence import: normalize external traces / memory summaries into MCP artifacts
@@ -153,6 +178,8 @@ async function main() {
         server.registerTool(codeFunctionsListToolDefinition, createCodeFunctionsListHandler(workspaceManager, database));
         // Task 15.3: code.functions.rank - Rank functions by interest
         server.registerTool(codeFunctionsRankToolDefinition, createCodeFunctionsRankHandler(workspaceManager, database));
+        server.registerTool(codeFunctionsSmartRecoverToolDefinition, createCodeFunctionsSmartRecoverHandler(workspaceManager, database, cacheManager));
+        server.registerTool(codeFunctionsDefineToolDefinition, createCodeFunctionsDefineHandler(workspaceManager, database));
         server.registerTool(codeFunctionsSearchToolDefinition, createCodeFunctionsSearchHandler(workspaceManager, database));
         // Task 15.4: code.function.decompile - Decompile specific function
         server.registerTool(codeFunctionDecompileToolDefinition, createCodeFunctionDecompileHandler(workspaceManager, database));
@@ -166,6 +193,9 @@ async function main() {
         server.registerTool(codeFunctionRenamePrepareToolDefinition, createCodeFunctionRenamePrepareHandler(workspaceManager, database, cacheManager));
         server.registerTool(codeFunctionExplainPrepareToolDefinition, createCodeFunctionExplainPrepareHandler(workspaceManager, database, cacheManager));
         server.registerTool(codeFunctionExplainApplyToolDefinition, createCodeFunctionExplainApplyHandler(workspaceManager, database));
+        server.registerTool(codeModuleReviewPrepareToolDefinition, createCodeModuleReviewPrepareHandler(workspaceManager, database, cacheManager));
+        server.registerTool(codeModuleReviewApplyToolDefinition, createCodeModuleReviewApplyHandler(workspaceManager, database));
+        server.registerTool(codeModuleReviewToolDefinition, createCodeModuleReviewHandler(workspaceManager, database, cacheManager, server));
         server.registerTool(codeFunctionExplainReviewToolDefinition, createCodeFunctionExplainReviewHandler(workspaceManager, database, cacheManager, server));
         server.registerTool(codeFunctionRenameApplyToolDefinition, createCodeFunctionRenameApplyHandler(workspaceManager, database));
         server.registerTool(codeFunctionRenameReviewToolDefinition, createCodeFunctionRenameReviewHandler(workspaceManager, database, cacheManager, server));

package/dist/pe-runtime-functions.d.ts

@@ -0,0 +1,90 @@
+export interface PESectionRecord {
+    name: string;
+    virtualAddress: number;
+    virtualSize: number;
+    rawSize: number;
+    rawPointer: number;
+    characteristics: number;
+    executable: boolean;
+}
+export interface PEExportRecord {
+    rva: number;
+    name: string;
+    ordinal: number;
+    isForwarder: boolean;
+}
+export interface UnwindInfoRecord {
+    version: number;
+    flags: number;
+    flagNames: string[];
+    prologSize: number;
+    unwindCodeCount: number;
+    frameRegister: string | null;
+    frameRegisterId: number;
+    frameOffset: number;
+    handlerRva?: number;
+    chainedRuntimeFunction?: {
+        beginRva: number;
+        endRva: number;
+        unwindInfoRva: number;
+    };
+}
+export interface PERuntimeFunctionEntry {
+    beginRva: number;
+    endRva: number;
+    size: number;
+    beginVa: number;
+    endVa: number;
+    beginAddress: string;
+    endAddress: string;
+    unwindInfoRva: number;
+    sectionName: string | null;
+    executableSection: boolean;
+    confidence: number;
+    unwind: UnwindInfoRecord | null;
+}
+export interface PdataExtractResult {
+    machine: number;
+    machineName: string;
+    imageBase: number;
+    entryPointRva: number;
+    exceptionDirectoryRva: number;
+    exceptionDirectorySize: number;
+    pdataPresent: boolean;
+    xdataPresent: boolean;
+    count: number;
+    sections: PESectionRecord[];
+    exports: PEExportRecord[];
+    entries: PERuntimeFunctionEntry[];
+    warnings: string[];
+}
+export interface SmartRecoveredFunction {
+    address: string;
+    va: number;
+    rva: number;
+    size: number;
+    name: string;
+    nameSource: 'entry_point' | 'export' | 'synthetic_sub';
+    confidence: number;
+    source: 'pdata_runtime_function' | 'entry_point_only';
+    sectionName: string | null;
+    executableSection: boolean;
+    isEntryPoint: boolean;
+    isExported: boolean;
+    exportName?: string;
+    unwind?: UnwindInfoRecord | null;
+    evidence: string[];
+}
+export interface SmartRecoverResult {
+    machine: number;
+    machineName: string;
+    imageBase: number;
+    entryPointRva: number;
+    strategy: string[];
+    count: number;
+    functions: SmartRecoveredFunction[];
+    warnings: string[];
+}
+export declare function extractPdataFromPE(filePath: string): PdataExtractResult;
+export declare function smartRecoverFunctionsFromPE(filePath: string): SmartRecoverResult;
+//# sourceMappingURL=pe-runtime-functions.d.ts.map