One rea function run, step by step
Six lifelines: you, the rea 6.7.0 one-shot CLI, the BinarySession, the GhidraClient, the headless Ghidra JVM behind bridge.sock, and the artifact ledger-arm64-O1. Twelve numbered rows: rea function _percent_change with --provider ghidra --format json, runDirectAnalysis for analyze_function with the procedure _percent_change, the session parses the Mach-O header and hashes the file in 64 KiB chunks, ghidra is bound with selection source request and profile digest 3fc72c9b4b78498f, the client launches java AnalyzeHeadless with -import, -readOnly and -deleteProject under a 330 second deadline, the file is copied as target-01b5d08b08fb.bin into a private runtime root, the ping handshake returns analysis_complete true after the run_id and token are checked, one JSON line asks analyze_function, the reply carries ok true with the procedure, the pseudocode and 6 instructions, the client returns Evidence ev_b492c85e with confidence observed and 10 limitations, shutdown deletes the project within 10 seconds, and the JSON reaches stdout with exit 0 after 7 to 9 seconds.
you
the reader
rea 6.7.0
one-shot CLI
session
BinarySession
client
GhidraClient
Ghidra JVM
bridge.sock
artifact
ledger-arm64-O1
1
rea function _percent_change
--provider ghidra --format json
2
runDirectAnalysis analyze_function
{ procedure: _percent_change }
3
parse header, SHA-256
mach-o magic, 64 KiB chunks
4
ghidra bound, selection request
profile digest 3fc72c9b
5
java AnalyzeHeadless -import
-readOnly -deleteProject, 330 s deadline
6
copy as target-01b5d08b08fb.bin
private runtime root rea-ghidra-*
7
analysis_complete: true
ping handshake, run_id and token checked
8
analyze_function
one JSON line on bridge.sock
9
ok: true, result
procedure, pseudocode, 6 instructions
10
Evidence ev_b492c85e
confidence observed, 10 limitations
11
shutdown
project deleted, 10 s deadline
12
JSON on stdout, exit 0
7 to 9 s on the capture Mac