decompiled-code-extractor

Extract complete function records from DeepExtractIDA analysis databases.

17|3|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill decompiled-code-extractor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: decompiled-code-extractor
Source: https://github.com/marcosd4h/DeepExtractRuntime/tree/main/skills/decompiled-code-extractor
Command: npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill decompiled-code-extractor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Extract and organize detailed function data from DeepExtractIDA analysis DBs to support downstream lifting and analysis tasks.

Core Features & Use Cases

  • Locate module databases, list and filter functions, and extract complete per-function records (decompiled C++, assembly, signatures, xrefs, string literals, vtable contexts, global variable accesses, stack frames, and loop analysis) for coding-lifting workflows.
  • Use with downstream skills to compose call graphs, classify functions, and lift code to clean C++ representations.

Quick Start

Locate a module's DB with find_module_db.py, identify the target function with list_functions.py, and extract its full data with extract_function_data.py.

Frequently Asked Questions about decompiled-code-extractor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract decompiled function data from an analysis database?

You can extract decompiled function data by locating the target module database and running Python scripts to pull complete FunctionRecords, including C++ code, assembly, and xrefs. This provides foundational data access for lifting workflows.

What is the best way to list and filter functions in a module DB before code lifting?

To list and filter functions in a module DB, use dedicated Python scripts to query the SQLite databases and identify specific function-level data. This indexing step isolates target functions before extracting their complete decompiled records.

Can I extract assembly and string literals together for decompiled functions?

Yes, you can extract assembly and string literals together by pulling complete FunctionRecord data. The extraction process aggregates decompiled C++, signatures, xrefs, vtable contexts, and stack frames into a single output for analysis.

Does this data extraction process work with SQLite DBs generated by IDA?

Yes, the extraction process works with SQLite DBs by accessing module analysis databases generated from DeepExtractIDA. It locates these databases and extracts function-level data to support downstream lifting and analysis tasks.

What limitations exist when extracting function data for call graph composition?

The extraction focuses on providing raw function-level data like xrefs and vtable contexts rather than composing the call graphs itself. It serves as the data-access layer, requiring downstream skills to perform the actual graph composition and code classification.