0

i have a PowerPC RE project with a large function (about 3600 lines in decompile) which several times a day Ghidra by itself decides to split in two parts, since there are a few bytes it cannot disassemble in between.

not disassembled bytes in the middle of the function

Since there are a lot of references from the second code part to data / pointers / register settings in the firs part, I would really like to avoid it.

  • how can I hinder Ghidra doing this again?
  • how can I combine the function parts into one?

Thanks!

By the way: it decompiles the big function frequently, even when I only add a comment. This takes about 2 minutes. how can I avoid this, too?

2
  • To my knowledge PowerPC commands always have a size of 32bit with doesn't fit to code from the screenshot. So I would start by checking what CPU the code is supposed to work on and if the code format of that CPU matches the format used by Ghidra. Commented Oct 24 at 11:27
  • @Robert PowerPC comes as 32- or 64-bit, this PowerPC CPU is MPC5644 with VLE used. There are only few lines which do not disassemble correctly, so I think the basic settings are ok. Commented Oct 25 at 13:49

0

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.