@p4nda0s

rev-u3d-dump recovers c# method names and addresses from unity il2cpp binaries by parsing global-metadata.dat, outputting function mappings for ida or ghidra reverse engineering workflows.

rev-struct recovers data structure definitions by analyzing memory access patterns across function call chains, supporting both IDA Pro MCP and exported decompilation formats to infer field offsets, types, and semantic meaning.

rev-symbol recovers obscured function names by analyzing decompiled code, string constants, magic numbers, cross-references, and call patterns. works with ida pro mcp or exported decompile artifacts.

rev-frida covers frida script generation for dynamic analysis including native hooks, java/objc instrumentation, runtime tracing and memory inspection, with guidance on modern cli behavior.

rev-idapython provides code snippets for IDAPython and IDALib scripting in IDA reverse engineering workflows, covering register and memory operations. incomplete reference material with minimal procedural guidance.

Dump DEX files from a running Android app for unpacking/deobfuscation. Activate when the user wants to unpack an Android APK, dump DEX from memory, extract…

Debug and emulate specific code fragments or functions using the Unicorn engine. Activate when the user wants to emulate a function with Unicorn, trace binary…