Continued decomp
This commit is contained in:
parent
8e35ffeae7
commit
6b9eb205d4
7 changed files with 769 additions and 14 deletions
2
.github/instructions/ghidra.instructions.md
vendored
2
.github/instructions/ghidra.instructions.md
vendored
|
|
@ -25,9 +25,11 @@ applyTo: "**"
|
|||
|
||||
- Prefer a single decompile call first.
|
||||
- If the decompiler collapses to thunk-heavy output, use one disassembly lookup to confirm the wrapper or parameter setup.
|
||||
- **When `decompile_function` output is too large** (>~50KB), the result is written to a temp JSON file that `read_file` returns as empty `{}`. Use `disassemble_function` instead — it returns inline assembly directly and is fully navigable for large functions.
|
||||
- Add a short decompiler comment when a rename is mapped from verified notes so the provenance stays visible in Ghidra.
|
||||
- Keep `crusader_decompilation_notes.md` updated after each verified batch.
|
||||
- Record raw-import addresses alongside original segment-relative offsets when porting names.
|
||||
- **Always use `rename_function_by_address`** — `rename_function` (by name) fails with "must have required property 'old_name'" and is broken. Use `"function_address": "000c:XXXX"` format.
|
||||
|
||||
# Current Verified Raw-Import Ports
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue