Rev Struct

When you're reverse engineering a binary and staring at decompiled code full of pointer arithmetic like `*(a1 + 0x10)` and `*(_DWORD *)(a1 + 8)`, this helps you reconstruct what the original struct looked like. It analyzes memory access patterns across a function and its callers and callees to figure out field offsets, sizes, and types. Works with either IDA Pro's MCP server or exported decompilation data from the IDA-NO-MCP plugin. The smart part is how it traces through the call chain to catch initialization in one function, field access in another, and destruction in a third, then aggregates everything to infer what each offset represents. Beats manually grep-ing through dozens of decompiled functions to piece together a structure definition.

Install to Claude Code

npx -y skills add p4nda0s/reverse-skills --skill rev-struct --agent claude-code