Rev Struct

When you're reverse engineering a binary and staring at decompiled code full of pointer arithmetic like `*(a1 + 0x10)` and `*(_DWORD *)(a1 + 8)`, this helps you reconstruct what the original struct looked like. It analyzes memory access patterns across a function and its callers and callees to figure out field offsets, sizes, and types. Works with either IDA Pro's MCP server or exported decompilation data from the IDA-NO-MCP plugin. The smart part is how it traces through the call chain to catch initialization in one function, field access in another, and destruction in a third, then aggregates everything to infer what each offset represents. Beats manually grep-ing through dozens of decompiled functions to piece together a structure definition.

skills.sh installs: 2K
GitHub stars: 2.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add p4nda0s/reverse-skills --skill rev-struct --agent claude-code

Installs into .claude/skills of the current project.

Files

rev-struct - Structure Recovery

Recover data structure definitions by analyzing memory access patterns in functions and their call chains.

Pre-check

Determine which IDA access method is available:

Option A — IDA Pro MCP (preferred if connected): Check if the IDA Pro MCP server is connected (look for an active ida-pro or equivalent MCP connection). If connected, you can query IDA directly via MCP tools — no exported files needed. Proceed with the analysis using MCP.

Option B — IDA-NO-MCP exported data: If MCP is not connected, check if IDA-NO-MCP exported data exists in the current directory:

Check if decompile/ directory exists
Check if there are .c files inside

If neither MCP nor exported data is available, prompt the user:

No IDA access method detected. Choose one of the following:

Option A — IDA Pro MCP (recommended):
  Connect the IDA Pro MCP server so Claude can query IDA directly.

Option B — IDA-NO-MCP export:
  1. Download plugin: https://github.com/P4nda0s/IDA-NO-MCP
  2. Copy INP.py to IDA plugins directory
  3. Press Ctrl-Shift-E in IDA to export
  4. Open the exported directory with Claude Code

SKILL.md on GitHub

Details

Repository: github.com/p4nda0s/reverse-skills
First seen: Jun 3, 2026

More from p4nda0s/reverse-skills

All 8