freeqaz

Decompile and analyze a function from Ghidra. Shows decompiled C code, switch statements, and cast operations. Use when investigating function structure or debugging type issues. Automatically resolves symbol names to correct functions. Need to skip sandbox to access Ghidra over network.

Run decomp-synth (the guided source-synthesis permuter) on a function — beam search over 112 behaviour-neutral C++ transforms (signed/unsigned, declaration reorder, branch polarity, variable extraction, …), each scored with objdiff, to drive a near-match toward 100%. Use when a function is below 100% and you want to automatically try source variations.

Diff stack-frame layouts between target and base for a function. Labels base-side slots with source variable names from a MSVC /Z7 CodeView recompile. Identifies SWAPPED pairs (decl-reorder candidates), SHIFTED slots, DIFFER (different variables in same slot), and TGT_ONLY / BASE_ONLY (extra/missing locals). Filters out callee-save slots.

Dump vtable layout for a class from original COFF .obj files. Maps each slot to the actual virtual function symbol AND its declaration-order name from the class header, so ICF-merged entries (OnlyReturns / merged_Returns1 / etc.) are still identifiable. Use when debugging vtable offset mismatches in objdiff.

Diff a DATA symbol (vtable ??_7Class@@6B@, RTTI, pointer/jump table, string pool, static initializer) between the target and the decompiled build, showing byte differences and — for each relocation slot — which function/symbol each side points to. Use when a data symbol is below 100%, or to find which vtable slot resolves to the wrong function. The MCP run_objdiff wrapper does not expose data diffs, so this calls objdiff-cli directly.

Run DC3's original Xbox 360 debug XEX on Xenia (Linux/Vulkan) and navigate to gameplay. Captures headless frames of menus, song select, loading, and in-game venues with 3D characters. Use when testing original binary behavior, capturing IK telemetry, or comparing Xbox vs native rendering.

Capture Vulkan API traces from the native port using GFXReconstruct. Works headless (no swapchain needed). Use when debugging rendering issues, analyzing GPU workload, or capturing frames for inspection.

Take screenshots of the native port engine or milo-viewer. Captures headless GPU-rendered PNG frames at specified frame numbers. Use when debugging UI layout, rendering, or verifying visual changes.

Run the source permuter on a function to find signed/unsigned and variable extraction improvements. Use when working on a function that isn't matching 100% and you want to automatically try source variations.

Extract assets/materials from RB3 .ark archives and .milo/.dta files. Use when you need game assets for the native port, debugging rendering, or inspecting data.

Side-by-side target vs base assembly comparison with cluster boundaries and mismatch annotations. Shows aligned instructions with match markers, register swap details, and offset deltas. Use when diagnosing the last few percent of a function.

Find DC3 source for a given symbol/string. DC3 is the closest source oracle for rb3-xenon (same compiler, same flags, same engine version family). Use this BEFORE rb3wii-pair when looking for engine code; use rb3wii-pair for game-code logic that DC3 doesn't share.

Decompile and analyze a function from Ghidra. Shows decompiled C code, switch statements, and cast operations. Use when investigating function structure or debugging type issues. Automatically resolves symbol names to correct functions. Need to skip sandbox to access Ghidra over network.

Semantic search over Ghidra decompiled code. Use when looking for similar implementations, finding functions by behavior description, or searching for code patterns. Automatically filters out __unwind$ and other noise.

Check struct/class layout against Ghidra's Data Type Manager. Compares rb3-xenon header definitions with Ghidra's analysis to find offset mismatches. Use when debugging struct alignment issues or verifying class layouts.

Capture Vulkan API traces from the native port using GFXReconstruct. Works headless (no swapchain needed). Use when debugging rendering issues, analyzing GPU workload, or capturing frames for inspection.

Orchestrate a multi-wave, doc-synced investigation loop into (1) AUDIO CORRECTNESS — record the game's output and measure how far it diverges from the expected/ground-truth source audio (the "clipped noise" problem), and (2) ASSET-LOAD PERFORMANCE — profile and attribute the load-time stutters. You act as orchestrator/coordinator: each wave plans+reviews, fans out subagents (via the Workflow tool / ultracode) over independent hypotheses, converges, builds, re-measures, then plans the next wave. Agents hand off through on-disk docs. Use when iterating on web/native audio fidelity or load-stutter perf.

Verify the game's recorded audio is the SAME audio as the source song AND is played CORRECTLY (right pitch/speed, not clipped/noise/silent). Decrypts+decodes the source mogg into a ground-truth reference, captures the game output headless, then measures identity (mix-robust chroma cross-correlation + Chromaprint fingerprint), playback rate (resample-search → speed ratio; catches the 'chipmunk' bug), and distortion (reference-free clip/flat-top/wrap). Use after any audio change (mixer, limiter, resampler, decode, gain) to confirm the right song still plays correctly, or to investigate an audio-fidelity report. Native-first; works for web captures too.

Diff stack-frame layouts between target and base for a function. Labels base-side slots with source variable names from a MWCC DWARF recompile. Identifies SWAPPED pairs (decl-reorder candidates), SHIFTED slots, DIFFER (different variables in same slot), and TGT_ONLY / BASE_ONLY (extra/missing locals). Filters out callee-save slots.

Diff a DATA symbol (vtable, pointer/jump table, string pool, static initializer) between the target and the decompiled build, showing byte differences and — for each relocation slot — which function/symbol each side points to. Use when a data symbol is below 100%, or to see exactly where your decompiled vtable diverges from the target (which slot resolves to the wrong function). This is the diff counterpart to /vtable and /resolve-vcall, which only read the target.

Resolve a single virtual-call slot to its function symbol. Given `class, sub-object offset, slot`, returns the mangled symbol at that slot of the named class's MWCC vtable. Use when objdiff shows a vcall mismatch and you have the three numbers off the asm but don't want to dump the whole vtable.

Dump a class's MWCC vtable from build/SZBE69_B8/obj/*.o. Shows every sub-object table (primary + each base), slot index, byte offset, and the mangled function symbol. Use when objdiff shows a `lwz r12, OFF(r12)` mismatch and you need to map the offset to a virtual method, or when verifying a header's virtual-function order against the compiled binary.

Get decomp progress summary. Shows match statistics from the build report, per-category breakdowns, and identifies areas with the most remaining work. Use to check overall project status or find targets for decomp work.

Sweep a unit or glob of units for already-matching functions. Reads build/SZBE69_B8/report.json (no per-function objdiff invocations), auto-marks 100% matches as COMPLETE in decomp.db, and reports partial-match candidates ranked by closeness to 100%. Use this after a header change, a build-system change, or to find a unit's untouched workable functions.