find-string-xref

Trace string references to LEA instructions and generate reusable signatures.

15|4|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/vzco/arc-probe --skill find-string-xref
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: find-string-xref
Source: https://github.com/vzco/arc-probe/tree/main/plugins/arc-probe/skills/find-string-xref
Command: npx skills add https://github.com/vzco/arc-probe --skill find-string-xref

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers and reverse engineers often need to map a runtime string (such as an error message or UI label) to the exact function that uses it. This skill provides a guided approach to locate the function by tracing the string through string references to code references and disassembly context.

Core Features & Use Cases

  • String-to-code trace: locate where a string is loaded or referenced in the program.
  • Cross-module references: identify where the string is used across different modules or binaries.
  • Disassembly-assisted navigation: examine surrounding functions to understand context and usage.

Quick Start

Search for the string with the built-in tracing tools to identify its memory references, then follow the code path to the referencing function.

Frequently Asked Questions about find-string-xref

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the function that references a specific string in disassembled code?

To find the function referencing a string, locate LEA instructions loading that string address, then disassemble the surrounding function context to identify where and how the string is used across modules.

What is a string cross-reference in reverse engineering?

A string cross-reference maps a known runtime string, such as a log message or UI label, to the specific instruction address and surrounding function that loads or references it during execution.

Can I trace string references across multiple modules or binaries?

Yes, you can trace cross-module string references by searching memory for the target string, identifying LEA instructions loading its address across binaries, and disassembling surrounding functions to map cross-module usage.

Do I need disassembly tools to trace a string to its code references?

Yes, disassembly and pattern-search capabilities are required to locate LEA instructions loading the string address, disassemble surrounding function context, and generate reusable function signatures for later analysis.

What is the best way to map a runtime error message to its originating function?

The best way to map a runtime error message to its function is to trace the string from its memory address to LEA loading instructions, then disassemble surrounding function context to pinpoint exact usage locations.

Why should I trace string references instead of manually searching disassembly?

Tracing string references automates locating LEA instructions loading known strings, provides a guided path to exact referencing functions, and generates reusable signatures without manually scanning disassembly output.