map-struct

Map C++ object memory layouts from addresses using RTTI and hex dumps.

15|4|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/vzco/arc-probe --skill map-struct
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: map-struct
Source: https://github.com/vzco/arc-probe/tree/main/plugins/arc-probe/skills/map-struct
Command: npx skills add https://github.com/vzco/arc-probe --skill map-struct

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Map memory dumps to reconstruct accurate struct layouts from memory addresses, RTTI, and memory patterns.

Core Features & Use Cases

  • Auto-detects vtable pointers and RTTI to identify class names and inheritance.
  • Reconstructs field layouts with offsets, types, and hints from hex dumps and memory scans.
  • Enables cross-instance comparison to validate field boundaries and type inferences for robust reverse engineering.

Quick Start

Provide a memory address and optional size to begin mapping the structure.

Frequently Asked Questions about map-struct

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I reconstruct a C++ struct layout from a memory dump?

You can reconstruct a C++ struct layout from a memory dump by providing a memory address and optional size to map field offsets, types, and hints using RTTI and vtable pointers.

How does RTTI help infer memory field boundaries during reverse engineering?

RTTI helps infer memory field boundaries by auto-detecting vtable pointers to identify class names and inheritance, enabling accurate reconstruction of field layouts from hex dumps.

Can I compare multiple memory instances to validate struct field inferences?

Yes, you can compare multiple memory instances to validate field boundaries and type inferences, which ensures robust reverse engineering of struct layouts across similar binaries.

What do I need to start mapping memory addresses to struct fields?

To start mapping memory addresses to struct fields, you need tooling to dump memory blocks, read RTTI, and derive field offsets from the provided memory address and optional size.

Does this approach work for reverse engineering C++ objects across different binaries?

Yes, this approach applies to reverse engineering memory layouts in C++ objects across similar binaries by leveraging vtable pointers, RTTI, and hex dump analysis.

What is the best way to identify class inheritance from hex dumps?

The best way to identify class inheritance from hex dumps is to auto-detect vtable pointers and RTTI to extract class names and map them to the reconstructed struct layouts.