mirror of
https://github.com/ApfelTeeSaft/NESDecompiler.git
synced 2026-08-27 11:53:25 +00:00
Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
8242ffb49b | ||
|
|
e76cec3d6d | ||
|
|
26af1f4aa6 | ||
|
|
bc3da6b960 | ||
|
|
c71aa4d6b2 | ||
|
|
bcd9ed4b87 | ||
|
|
c0380bd198 | ||
|
|
c05b7199c9 | ||
|
|
ab9a1fa313 | ||
|
|
bbcd2a6aad | ||
|
|
826747aacb | ||
|
|
8e811e2cbc | ||
|
|
6d3ec6c2c8 |
@@ -0,0 +1,73 @@
|
||||
# Changelog
|
||||
All notable changes to this project will be documented in this file.
|
||||
|
||||
The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
||||
and this project adheres to [Semantic Versioning](https://semver.org/).
|
||||
|
||||
---
|
||||
|
||||
## [v1.1.1] - 2025-10-18
|
||||
### Added
|
||||
- Decompilation can now start from the **first byte of a code region** (#12).
|
||||
|
||||
### Changed
|
||||
- Invalid instructions are now considered the **end of a function trace** (#11).
|
||||
- Improved stability of function tracing and edge-case instruction handling.
|
||||
|
||||
### Fixed
|
||||
- Minor internal decompiler logic bugs.
|
||||
- General performance and reliability improvements across builds.
|
||||
|
||||
### Notes
|
||||
- All Windows builds now include both GUI and CLI versions.
|
||||
- Linux and macOS builds are CLI-only.
|
||||
- All binaries are **self-contained** and **do not require a .NET runtime**.
|
||||
|
||||
**Contributors:**
|
||||
[@KallDrexx](https://github.com/KallDrexx)
|
||||
|
||||
---
|
||||
|
||||
## [v1.1.0] - 2025-10-12
|
||||
### Added
|
||||
- Implemented **single function decompiler** with proper tracing.
|
||||
- Added support for **sub-address instructions** and **virtual instructions** (#10).
|
||||
- Added **CI/CD workflow** (`build-release.yml`) for automated builds and packaging.
|
||||
- Added **multiple platform releases**:
|
||||
- Windows (x64, x86, ARM64) with GUI + CLI
|
||||
- Linux (x64, ARM64) CLI
|
||||
- macOS (x64, ARM64) CLI
|
||||
|
||||
### Changed
|
||||
- Improved function discovery to handle **wraparound and disassembly boundaries** (#9).
|
||||
- Reworked `ToString()` formatting for instructions for clarity.
|
||||
- Improved tracing logic for **unreferenced instruction analysis** (#6).
|
||||
- Decompiler now directly jumps to instructions that appear within other instructions.
|
||||
|
||||
### Fixed
|
||||
- Fixed incorrect ordering of instructions in output.
|
||||
- Fixed 16KB ROMs not decompiling (#7).
|
||||
- Fixed nullability warnings.
|
||||
- Fixed various stability issues in the decompiler core.
|
||||
|
||||
**Contributors:**
|
||||
[@ApfelTeeSaft](https://github.com/ApfelTeeSaft), [@KallDrexx](https://github.com/KallDrexx)
|
||||
|
||||
---
|
||||
|
||||
## [v1.0.0] - 2025-05-15
|
||||
### Added
|
||||
- **Initial release** of the NES Decompiler.
|
||||
- Included both **CLI** and **GUI** builds for Windows (x64).
|
||||
- Added base decompilation engine and ROM handling logic.
|
||||
- Added initial README and documentation.
|
||||
|
||||
**Contributors:**
|
||||
[@ApfelTeeSaft](https://github.com/ApfelTeeSaft)
|
||||
|
||||
---
|
||||
|
||||
## [Unreleased]
|
||||
- Planned improvements to function boundary detection.
|
||||
- Optimizations for recursive instruction analysis.
|
||||
- Additional architecture support under evaluation.
|
||||
@@ -0,0 +1,8 @@
|
||||
namespace NESDecompiler.Core.Decompilation;
|
||||
|
||||
/// <summary>
|
||||
/// A set of code that may contain executable code
|
||||
/// </summary>
|
||||
/// <param name="BaseAddress">Where the first byte of the region can be found from the CPU's memory map</param>
|
||||
/// <param name="Bytes">The set of data to pull code out of</param>
|
||||
public record CodeRegion(ushort BaseAddress, ReadOnlyMemory<byte> Bytes);
|
||||
@@ -0,0 +1,67 @@
|
||||
using NESDecompiler.Core.Disassembly;
|
||||
|
||||
namespace NESDecompiler.Core.Decompilation;
|
||||
|
||||
/// <summary>
|
||||
/// Represents an independently decompiled function
|
||||
/// </summary>
|
||||
public class DecompiledFunction
|
||||
{
|
||||
/// <summary>
|
||||
/// The CPU address where the address' first instruction is located
|
||||
/// </summary>
|
||||
public ushort Address { get; }
|
||||
|
||||
/// <summary>
|
||||
/// The instructions that make up this function in the correct order in which they should be
|
||||
/// executed.
|
||||
/// </summary>
|
||||
public IReadOnlyList<DisassembledInstruction> OrderedInstructions { get; }
|
||||
|
||||
/// <summary>
|
||||
/// Location and the labels of all jump and branch targets within this function
|
||||
/// </summary>
|
||||
public IReadOnlyDictionary<ushort, string> JumpTargets { get; }
|
||||
|
||||
public DecompiledFunction(
|
||||
ushort address,
|
||||
IReadOnlyList<DisassembledInstruction> instructions,
|
||||
IReadOnlySet<ushort> jumpTargets)
|
||||
{
|
||||
Address = address;
|
||||
JumpTargets = instructions
|
||||
.Where(x => jumpTargets.Contains(x.CPUAddress))
|
||||
.Where(x => x.Label != null)
|
||||
.Where(x => x.SubAddressOrder == 0) // only real instructions should be jumped to
|
||||
.ToDictionary(x => x.CPUAddress, x => x.Label!);
|
||||
|
||||
// We need to order the instructions so that the starting instruction is the first one encountered.
|
||||
// We can't just rely on the CPU address, because a function may jump to a code point earlier than
|
||||
// the first instruction.
|
||||
var entryPointInstructions = instructions.Where(x => x.CPUAddress == address)
|
||||
.Where(x => x.SubAddressOrder >= 0);
|
||||
|
||||
var initialInstructions = instructions
|
||||
.Where(x => x.CPUAddress > address)
|
||||
.OrderBy(x => x.CPUAddress)
|
||||
.ThenBy(x => x.SubAddressOrder);
|
||||
|
||||
var trailingInstructions = instructions
|
||||
.Where(x => x.CPUAddress < address)
|
||||
.OrderBy(x => x.CPUAddress)
|
||||
.ThenBy(x => x.SubAddressOrder); // real instructions before virtual ones
|
||||
|
||||
// If there was a loopback jump point at the function address, put that here. This is required
|
||||
// because if an emulator is executing a virtual loopback instruction and an IRQ occurs, this
|
||||
// will cause the virtual instruction to be saved to the stack, and that can cause the entry
|
||||
// point to be wrong.
|
||||
var loopbackInstructions = instructions.Where(x => x.CPUAddress == address)
|
||||
.Where(x => x.SubAddressOrder < 0);
|
||||
|
||||
OrderedInstructions = entryPointInstructions
|
||||
.Concat(initialInstructions)
|
||||
.Concat(trailingInstructions)
|
||||
.Concat(loopbackInstructions)
|
||||
.ToArray();
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,170 @@
|
||||
using NESDecompiler.Core.CPU;
|
||||
using NESDecompiler.Core.Disassembly;
|
||||
|
||||
namespace NESDecompiler.Core.Decompilation;
|
||||
|
||||
public static class FunctionDecompiler
|
||||
{
|
||||
/// <summary>
|
||||
/// Traces and decompiles a single function
|
||||
/// </summary>
|
||||
/// <param name="functionAddress">The CPU address of the entry point of the function to decompile</param>
|
||||
/// <param name="codeRegions">All available regions of bytes that could contain instructions for the function</param>
|
||||
public static DecompiledFunction Decompile(ushort functionAddress, IReadOnlyList<CodeRegion> codeRegions)
|
||||
{
|
||||
var instructions = new List<DisassembledInstruction>();
|
||||
var jumpAddresses = new HashSet<ushort>();
|
||||
var seenInstructions = new HashSet<ushort>();
|
||||
var addressQueue = new Queue<ushort>([functionAddress]);
|
||||
|
||||
while (addressQueue.TryDequeue(out var nextAddress))
|
||||
{
|
||||
if (!seenInstructions.Add(nextAddress))
|
||||
{
|
||||
if (nextAddress == functionAddress)
|
||||
{
|
||||
// This means a branch occurred that caused the flow to wrap around to instructions preceding
|
||||
// the function entrance. This usually happens when there is a jump/branch to right before the
|
||||
// entrypoint, usually due to decompiling in the middle of a loop. To fix this, we need to add
|
||||
// a jump back to the function entrypoint.
|
||||
if (functionAddress == 0x00)
|
||||
{
|
||||
const string message = "Wrap around instruction detected for a function at 0000, but that " +
|
||||
"doesn't make sense";
|
||||
|
||||
throw new InvalidOperationException(message);
|
||||
}
|
||||
|
||||
var addressHigh = (functionAddress & 0xFF00) >> 8;
|
||||
var addressLow = functionAddress & 0x00FF;
|
||||
|
||||
var jumpInstruction = new DisassembledInstruction
|
||||
{
|
||||
Info = InstructionSet.GetInstruction(0x4C),
|
||||
CPUAddress = nextAddress,
|
||||
Bytes = [0x4C, (byte)addressLow, (byte)addressHigh],
|
||||
TargetAddress = functionAddress,
|
||||
|
||||
// Make sure they appear before the function address
|
||||
SubAddressOrder = -1,
|
||||
};
|
||||
|
||||
instructions.Add(jumpInstruction);
|
||||
}
|
||||
|
||||
continue;
|
||||
}
|
||||
|
||||
var instruction = GetNextInstruction(nextAddress, codeRegions);
|
||||
if (instruction == null)
|
||||
{
|
||||
// Consider no instruction the end of the function. This is usually the case
|
||||
// with an always taken branch
|
||||
continue;
|
||||
}
|
||||
|
||||
instructions.Add(instruction);
|
||||
|
||||
// Ensure the function entrypoint has a label
|
||||
if (instruction.CPUAddress == functionAddress && instruction.Label == null)
|
||||
{
|
||||
instruction.Label = $"sub_{functionAddress:X4}";
|
||||
jumpAddresses.Add(functionAddress);
|
||||
}
|
||||
|
||||
if (IsEndOfFunction(instruction))
|
||||
{
|
||||
continue;
|
||||
}
|
||||
|
||||
if (instruction.TargetAddress != null)
|
||||
{
|
||||
jumpAddresses.Add(instruction.TargetAddress.Value);
|
||||
addressQueue.Enqueue(instruction.TargetAddress.Value);
|
||||
}
|
||||
|
||||
if (!instruction.IsJump)
|
||||
{
|
||||
addressQueue.Enqueue((ushort)(nextAddress + instruction.Info.Size));
|
||||
}
|
||||
}
|
||||
|
||||
// Add labels for any jump targets
|
||||
foreach (var instruction in instructions)
|
||||
{
|
||||
// Only real instructions should have a label, virtual ones should not
|
||||
if (jumpAddresses.Contains(instruction.CPUAddress) && instruction.SubAddressOrder == 0)
|
||||
{
|
||||
instruction.Label = $"loc_{instruction.CPUAddress:X4}";
|
||||
}
|
||||
}
|
||||
|
||||
return new DecompiledFunction(functionAddress, instructions, jumpAddresses);
|
||||
}
|
||||
|
||||
private static DisassembledInstruction? GetNextInstruction(ushort address, IReadOnlyList<CodeRegion> regions)
|
||||
{
|
||||
var relevantRegion = regions
|
||||
.Where(x => x.BaseAddress <= address)
|
||||
.Where(x => x.BaseAddress + x.Bytes.Length > address)
|
||||
.FirstOrDefault();
|
||||
|
||||
if (relevantRegion == null)
|
||||
{
|
||||
var message = $"No code region contained the address 0x{address:X4}";
|
||||
throw new InvalidOperationException(message);
|
||||
}
|
||||
|
||||
var offset = address - relevantRegion.BaseAddress;
|
||||
var bytes = relevantRegion.Bytes.Span[offset..];
|
||||
var info = InstructionSet.GetInstruction(bytes[0]);
|
||||
if (!info.IsValid)
|
||||
{
|
||||
var message = $"Warning: encountered unknown op code 0x{bytes[0]:X2} at address 0x{address:X4}";
|
||||
Console.WriteLine(message);
|
||||
return null;
|
||||
}
|
||||
|
||||
if (bytes.Length < info.Size)
|
||||
{
|
||||
var message = $"Opcode {info.Mnemonic} at address 0x{address:X4} requires {info.Size} bytes, but only " +
|
||||
$"{bytes.Length} are available";
|
||||
|
||||
throw new InvalidOperationException(message);
|
||||
}
|
||||
|
||||
var instruction = new DisassembledInstruction
|
||||
{
|
||||
Address = (ushort)offset,
|
||||
CPUAddress = address,
|
||||
Info = info,
|
||||
Bytes = bytes[..info.Size].ToArray(),
|
||||
};
|
||||
|
||||
Disassembler.CalculateTargetAddress(instruction);
|
||||
|
||||
return instruction;
|
||||
}
|
||||
|
||||
private static bool IsEndOfFunction(DisassembledInstruction instruction)
|
||||
{
|
||||
// RTI and RTS are obviously the end of a function. We consider BRK and JSR
|
||||
// to be the end of a function as well because an RTI or RTS will do a function
|
||||
// call into the next instruction. This is required because RTI/RTS could be
|
||||
// returning based on a modified stack, and therefore we are not guaranteed to
|
||||
// be returning to the expected spot.
|
||||
if (instruction.Info.Mnemonic is "JSR" or "BRK" or "RTI" or "RTS")
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
// Since we don't know where we are jumping at compile time, this will be treated
|
||||
// as a function call, thus we consider it the end of the function.
|
||||
if (instruction.Info.AddressingMode == AddressingMode.Indirect)
|
||||
{
|
||||
return true;
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
}
|
||||
@@ -72,6 +72,14 @@ namespace NESDecompiler.Core.Disassembly
|
||||
/// </summary>
|
||||
public bool IsJump => Info.Mnemonic == "JMP" || Info.Mnemonic == "JSR";
|
||||
|
||||
/// <summary>
|
||||
/// Determines the order of this instruction within a single address space. This is mostly
|
||||
/// needed in the cases that additional instructions are needed to be added in the same
|
||||
/// address location at runtime. Can be used to add runtime hooks or to work around
|
||||
/// decompilation issues. Should be 0 for all native instructions from a ROM.
|
||||
/// </summary>
|
||||
public sbyte SubAddressOrder { get; set; }
|
||||
|
||||
/// <summary>
|
||||
/// Returns a string representation of this instruction
|
||||
/// </summary>
|
||||
@@ -439,7 +447,7 @@ namespace NESDecompiler.Core.Disassembly
|
||||
/// Calculates the target address for branch and jump instructions
|
||||
/// </summary>
|
||||
/// <param name="instruction">The instruction to process</param>
|
||||
private void CalculateTargetAddress(DisassembledInstruction instruction)
|
||||
public static void CalculateTargetAddress(DisassembledInstruction instruction)
|
||||
{
|
||||
if (instruction.Info.AddressingMode == AddressingMode.Relative)
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user