From 92dac97102190395613c868b1582efc8a4f054c8 Mon Sep 17 00:00:00 2001 From: Kaoru0822 Date: Sat, 10 Oct 2026 20:43:06 -0700 Subject: [PATCH] docs(website): add beginner help to the native analysis guide (#1689) Add a short glossary, an analysis-tool chooser linked to native setup, a note that REA does not include DX-Ball, and help for copying a file's full path. Co-authored-by: Claude Opus 5.5 --- website/public/guides/native/index.html | 82 ++++++++++++++++++++++++- 1 file changed, 80 insertions(+), 2 deletions(-) diff --git a/website/public/guides/native/index.html b/website/public/guides/native/index.html index c92f7f98d..5264cbebe 100644 --- a/website/public/guides/native/index.html +++ b/website/public/guides/native/index.html @@ -168,6 +168,33 @@ returns its instructions and callers, which give the agent a way to investigate the missing arithmetic.

+
+ New to these terms? +
    +
  • + Instructions: the steps the processor runs, + shown in readable form such as MOV or + ADD. +
    • +
  • + Decompiler result / pseudocode: an analysis + tool's attempt to turn instructions back into C-like code. It + can miss parts, as in this example. +
    • +
  • + Caller: a function that calls this one. It + shows which values are passed in. +
    • +
  • + Address: a location in the program, written + in hexadecimal, such as 0x00406400. +
    • +
  • + Constants: fixed numbers stored in the + program, read as raw bytes and decoded. +
    • +
+

Three pieces of evidence, one calculation @@ -211,9 +238,40 @@

Ask about the behavior

After - connecting REA to your agentconnecting REA to your agent + and + setting up a native analysis tool, provide the local executable and a question:

+
+ Which analysis tool should I use? +

REA needs one of these to read native programs:

+
    +
  • + Hopper (macOS or Linux): REA's setup detects + it or offers to install it. On macOS, open Hopper once and + choose demo mode or activate a license before your first + analysis. +
    • +
  • + Ghidra (macOS or Linux; experimental on + Windows): free, but needs an existing Ghidra 12.1.x + installation and a 64-bit JDK 21 or newer. +
    • +
  • + IDA (Windows): for an existing IDA setup with + an MCP registration. +
    • +
+

+ See + Set up native analysis + for the steps. +

+

Example prompt. Give your agent the path to your local DX-Ball - 1.07 executable. + 1.07 executable. REA doesn't include DX-Ball, so use your own + copy, or ask the same kind of question about another small Windows + program you have.

+
+ How do I get a file's full path? +
    +
  • + Windows: in File Explorer, right-click the + file and choose Copy as path. On Windows 10, hold + Shift while right-clicking. +
    • +
  • + macOS: in Finder, right-click the file, hold + Option and choose Copy "…" as Pathname. +
    • +
  • + Any system: drag the file into a terminal + window and its path appears. +
    • +
+

Read the REA results