Reading the Listing
The Listing is the address-oriented view of program instructions and data. Its fields include addresses, bytes, mnemonics, operands, labels, and comments. Field layout is configurable in the upstream Browser Field Formatter.
Three states to keep separate
Section titled “Three states to keep separate”| State | Meaning | Typical use |
|---|---|---|
| Cursor location | The current program address or field | Context-sensitive actions |
| Selection | A range or set of addresses | Actions that operate on several bytes or instructions |
| Highlight | A persistent visual emphasis | Keep a region visible while navigating |
A normal click can clear a selection. A highlight remains until explicitly cleared. Check the active range before an action that changes code, data, or analysis.
Follow the evidence
Section titled “Follow the evidence”Start at a known function or entry point. Trace one branch and one call, then inspect the referenced addresses. Distinguish an operand’s displayed text from the actual reference or scalar value. Use the Decompiler as another view of the same program, not as the source of truth for every machine-level detail.
Before changing a code/data boundary, preserve your current reasoning in a comment and check nearby references. An apparently invalid instruction can indicate the wrong processor selection, embedded data, or a genuine decoding problem.
TODO: update screenshot with Opcodex Listing field labels and its default layout. VERIFY action labels and shortcuts in the running release.
Next: Decompiler and Keyboard shortcuts.
Source: CodeBrowser Listing help.
Adapted from the Ghidra documentation (Apache 2.0).