analyze-ida-decompiled

Analyze IDA Pro decompiled outputs and PE metadata from DeepExtractIDA.

17|3|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill analyze-ida-decompiled
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: analyze-ida-decompiled
Source: https://github.com/marcosd4h/DeepExtractRuntime/tree/main/skills/analyze-ida-decompiled
Command: npx skills add https://github.com/marcosd4h/DeepExtractRuntime --skill analyze-ida-decompiled

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This knowledge-heavy skill helps agents read and navigate IDA Pro decompiled code and PE metadata produced by DeepExtractIDA, turning complex outputs into actionable understanding.

Core Features & Use Cases

  • Guidance on extraction layouts, file_info.json structure, and IDA naming conventions.
  • Support for cross-reference workflows to answer questions about functions, exports, security features, and module roles.
  • Use cases include orienting in a module, analyzing a function, tracing call chains, and contextualizing module metadata.

Quick Start

Orient and analyze a module's decompiled output by reading file_info.json, then discover and trace functions using function_summary and grouped cpp files, and contextualize findings with imports and security metadata.

Frequently Asked Questions about analyze-ida-decompiled

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I understand IDA Pro decompiled code and PE metadata?

Understanding IDA Pro decompiled code involves reading file_info.json and function_summary metadata, then navigating grouped cpp files and class methods to trace call chains and determine the binary's role.

How do I orient myself when navigating IDA decompiled outputs?

Orienting in IDA decompiled outputs starts by reading the file_info.json structure to understand extraction layouts, then discovering standalone functions and class methods using IDA naming conventions and function_summary metadata.

What is the best way to analyze function behavior in IDA decompiled cpp files?

The best way to analyze function behavior in IDA decompiled cpp files is to cross-reference function_summary metadata with grouped code structures, allowing you to trace call chains and interpret standalone functions and class methods effectively.

How do I determine a binary's role from IDA Pro module metadata?

Determining a binary's role from IDA Pro module metadata involves contextualizing security_features, entry_points, imports, and rich_header data to understand function behavior and the module's overall purpose.

Can I trace call chains using IDA function summaries and grouped cpp files?

Yes, you can trace call chains by cross-referencing IDA function_summary metadata with grouped cpp files, which allows you to navigate class methods and standalone functions to follow execution paths.

Does analyzing IDA decompiled outputs require handling specific PE metadata formats?

Yes, analyzing IDA decompiled outputs requires handling PE metadata formats like file_info.json, which contains essential security_features, imports, entry_points, and rich_header information needed to contextualize the binary.