idac

Automate function decompilation and C++ class hierarchy reconstruction from binaries in IDA Pro.

47|4|Updated Apr 22, 2026
One-click install
npx skills add https://github.com/trailofbits/idac --skill idac
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: idac
Source: https://github.com/trailofbits/idac/tree/main/src/idac/skills/idac
Command: npx skills add https://github.com/trailofbits/idac --skill idac

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill simplifies and accelerates reverse-engineering and C++ class recovery by providing a comprehensive toolkit for analyzing, decompiling, and recovering type information from binaries.

Core Features & Use Cases

  • Decompilation and Disassembly: Automate extraction of function pseudocode for analysis of code internals.
  • Type and Prototype Recovery: Facilitate reconstruction of function signatures, class hierarchies, and vtable layouts.
  • Class Recovery: Assist in rebuilding complete C++ class structures from binary data, RTTI, and vtables in complex codebases.
  • Use Case: When analyzing a protected game binary, recover class hierarchies and function prototypes to understand the code flow and locate vulnerabilities.

Quick Start

Use the idac skill to decompile a target function and begin class recovery workflows.

Frequently Asked Questions about idac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I recover C++ class hierarchies and vtable layouts from a stripped binary?

Recover C++ class hierarchies from binaries by automating the extraction of vtable layouts, RTTI data, and function prototypes. This rebuilds complete class structures to understand code flow and locate vulnerabilities without manual effort.

What is the best way to automate function decompilation in an IDA Pro workflow?

Automate function decompilation in IDA Pro by using targeted scripts to extract pseudocode and reconstruct accurate type information. This accelerates reverse-engineering analysis and reduces manual decompilation overhead.

How does type reconstruction from vtables work for reverse-engineering protected software?

Type reconstruction from vtables works by parsing binary data and RTTI to rebuild function signatures and class hierarchies. It imports accurate type information into IDA Pro, facilitating rapid analysis of protected codebases.

Can I use this to decompile and analyze protected game binaries?

Yes, you can analyze protected game binaries by decompiling target functions and recovering class structures. It helps locate vulnerabilities and understand code flow in complex, protected software environments.

Do I need IDA Pro to reconstruct function prototypes and class structures?

Yes, IDA Pro is required as the supporting environment for reconstructing function prototypes and C++ class structures. The toolkit relies on IDA Pro environments to facilitate accurate type importation and binary analysis.

When should I not use automated binary decompilation for class recovery?

Avoid automated binary decompilation when analyzing binaries lacking vtables or RTTI, as class recovery relies on this metadata. Complex obfuscation may also require manual intervention beyond automated type reconstruction.