القائمة
Restore all function renames from FUNCTION_MAP.md back into a fresh Ghidra project after DB loss or re-import
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Reverse engineer and recreate the Hamsterball game (2000s Windows game by Raptisoft)
Start GhidraMCP headless server with the Hamsterball.exe project — always do this before any RE work
Complete guide to using and extending Hermes Agent — CLI usage, setup, configuration, spawning additional agents, gateway platforms, skills, voice, tools, profiles, and a concise contributor reference. Load this skill when helping users configure Hermes, troubleshoot issues, spawn agent instances, or make code contributions.
Create hand-drawn style diagrams using Excalidraw JSON format. Generate .excalidraw files for architecture diagrams, flowcharts, sequence diagrams, concept maps, and more. Files can be opened at excalidraw.com or uploaded for shareable links.
54 production-quality design systems extracted from real websites. Load a template to generate HTML/CSS that matches the visual identity of sites like Stripe, Linear, Vercel, Notion, Airbnb, and more. Each template includes colors, typography, components, layout rules, and ready-to-use CSS values.
Cross-compile D3D8-based game with MinGW, test on Wine with OpenGL translation
| name | ghidra-restore-renames |
| description | Restore all function renames from FUNCTION_MAP.md back into a fresh Ghidra project after DB loss or re-import |
| version | "2026-04-13T00:00:00.000Z" |
When the Ghidra project DB is lost/re-imported, recover all renames from docs/FUNCTION_MAP.md.
~/hamsterball-re/docs/FUNCTION_MAP.md — the authoritative list of all renamed functions.
Format: | 0x004XXXXX | FunctionName | Description |
export GHIDRA_HOME=/opt/ghidra_12.0.4_PUBLIC
MCP_JAR=~/.config/ghidra/ghidra_12.0.4_PUBLIC/Extensions/GhidraMCP/lib/GhidraMCP-5.12.0.jar
CLASSPATH="$MCP_JAR"
for jar in $GHIDRA_HOME/Ghidra/Framework/*/lib/*.jar; do CLASSPATH="${CLASSPATH}:${jar}"; done
for jar in $GHIDRA_HOME/Ghidra/Features/*/lib/*.jar; do CLASSPATH="${CLASSPATH}:${jar}"; done
for jar in $GHIDRA_HOME/Ghidra/Processors/*/lib/*.jar; do CLASSPATH="${CLASSPATH}:${jar}"; done
nohup java -Xmx4g -XX:+UseG1GC -Dghidra.home=$GHIDRA_HOME -Dapplication.name=GhidraMCP \
-classpath "$CLASSPATH" com.xebyte.headless.GhidraMCPHeadlessServer \
--port 8089 --bind 127.0.0.1 \
--project ~/hamsterball-re/analysis/ghidra/HamsterballProject/Hamsterball.gpr \
--program /Hamsterball.exe > /tmp/ghidra-mcp.log 2>&1 &
sleep 15
curl -s http://127.0.0.1:8089/health
cd ~/hamsterball-re && python3 analysis/ghidra/apply_renames.py
The script:
\|\s*0x([0-9A-Fa-f]+)\s*\|\s*(\w+)\s*\|http://127.0.0.1:8089/batch_create_labelsResults from Apr 2026: 840/841 labels created, 0 failed. 40% -> 61% documented.
curl -s http://127.0.0.1:8089/compare_programs_documentation
~/hamsterball-re/docs/KEY_FINDINGS.md — key address references~/hamsterball-re/docs/STRUCTS_AND_TYPES.md — struct definitions~/hamsterball-re/analysis/ghidra/renames_backup.json — last backup export0x prefix, but REST API wants raw hex like 00412345Catch@, Unwind@, operator_, thunk_, entry, Start