# rev-symbol

Recovers function names in decompiled code by analyzing constants, strings, and call relationships. Useful when reverse engineering stripped binaries.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1900 installs · ★ 2314
- Author: P4nda0s
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/P4nda0s/reverse-skills/tree/HEAD/skills/rev-symbol/SKILL.md
- Updated: 2026-05-06
- HTML: https://affpapa.org/en/nevibecode/skills/rev-symbol

## What it does

This skill identifies the purpose of stripped functions in decompiled C code. It inspects internal characteristics such as string literals, numeric constants, and loop structures. When recognized cryptographic constants or compression headers appear, it flags the matching algorithm immediately.

Cross-reference patterns help determine function identities. The tool inspects caller and callee chains, matching paired calls such as memory allocation or mutex handling. Crucially, the skill fails to operate without an active IDA Pro MCP connection or an exported IDA-NO-MCP directory structure containing decompiled files.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/rev-symbol/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/rev-symbol/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/rev-symbol/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/rev-symbol/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install P4nda0s/reverse-skills rev-symbol
```

2. **Manually: put the files in place**
- File: `.github/skills/rev-symbol/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/P4nda0s/reverse-skills --path skills/rev-symbol
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/rev-symbol/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add P4nda0s/reverse-skills --skill rev-symbol -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/P4nda0s/reverse-skills/tree/HEAD/skills/rev-symbol/SKILL.md

## When to use it
- identify cryptographic and hashing routines from magic constants
- assign descriptive symbols to unnamed decompiled functions
- deduce API usage from paired function call patterns
- trace caller chains to verify return value handling

## Example prompts
- Identify the function at address 0x401000 from its decompiled code
- Recover the symbol for sub_401234 using its cross-references and strings
- Analyze constants in this function and suggest an appropriate name

## Similar
- [reverse-engineer](https://affpapa.org/en/nevibecode/skills/reverse-engineer.md) — skill · 892 installs
- [binary-analysis-patterns](https://affpapa.org/en/nevibecode/skills/binary-analysis-patterns.md) — skill · 10900 installs
- [ghidra-headless](https://affpapa.org/en/nevibecode/skills/ghidra-headless.md) — skill · 507 installs
- [learn-reverse-engineering](https://affpapa.org/en/nevibecode/skills/learn-reverse-engineering.md) — skill · 488 installs
- [ghidra](https://affpapa.org/en/nevibecode/skills/ghidra.md) — skill · 652 installs
- [ctf-rev](https://affpapa.org/en/nevibecode/skills/ctf-rev.md) — skill · 321 installs

From the same set: [p4nda0s/reverse-skills](https://affpapa.org/en/nevibecode/by/p4nda0s/reverse-skills.md) — 7 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md