01
Ask about one feature
Give the agent a program, a page, or a capture, plus one question.
REA Reverse Engineer Anything
REA Reverse engineer anything with agents, from app behavior down to native binaries.
Ask a coding agent about one feature. REA runs locally, reads the program, and returns evidence your agent can check. Guesses stay labeled as guesses.
- 0x5b or 0x5c?Two jumps land in the same place. Name the operator before you name the rule.
- Which call divides?The constant 100 is visible. Follow the helper that consumes it.
- 200 + 10% = 220After +, percent takes a share of the first number. After ×, it scales the product.
- 01One feature at a time
- 02One engine, no fallback
- 03Every claim has an address
Ask, inspect, then explain.
One feature at a time. REA does not replace Ghidra, Hopper or IDA. It connects the engine you already run to the agent you already use.
02
Read what is there
REA returns code, references, file ranges, or a capture. Each item names its source.
03
Keep the unknown
An inference can guide the next look. It cannot close a claim by itself.
Seen
Evidence has a location.
A file and line, a byte range, a disassembly address, or a field in a capture. The Windows Calculator percent path is a checked example, not a promise about every binary.
Not seen
A missing note is not proof.
On the Electron API Demos check published 12 Oct 2026, file and line hits matched, and several replies were still absent from the report. Absence in the report did not establish absence in the program.
What it can open.
Static reads stay on this machine. A native binary still needs the engine you install yourself.
Native binaries
Functions, strings and call targets through Ghidra, Hopper or IDA. Hopper has no Windows build.
JavaScript and Electron
Modules, routes and IPC from a folder or ASAR. Static reads do not execute the app.
Browser activity
A saved HAR can be read offline. Auth headers and cookies are stripped from the report.
Android
Packages, resources and selected bytecode, with a caller-supplied decoder where one is required.
.NET
Assembly metadata can be read from the file. That read is not a running process trace.
Firmware and captures
Some extractors and packet views are limited to specific systems. Check the doctor output before you rely on them.
Forty-four projects, on a separate shelf.
These public GitHub repositories matched the word reverse and had at least 8,000 stars on 15 Oct 2026. Some read a program. Some are reverse proxies or other projects that use the same word. REA does not ship them. A star is not a verdict, and a missing name is not a rejection.
258,295
REA
A local CLI and MCP server for reading a program you open.
109,929
frp
A reverse proxy for a service you run yourself.
88,150
Ghidra
A suite for disassembling and decompiling a native program you open.
Lots of resources here
Browse the library
Checked cases, with dates.
Each number belongs to one program. Full notes are on the showcase page.
Native
DX-Ball sound pan
One published reconstruction checked 3,205 raw x86 cases and matched 63 compiled function bytes. That is one game, not a general accuracy rate.
Described in the project notes and the 12 Oct 2026 GBHackers report.Electron
Notion clipboard
The packaged script shows the renderer asking the main process to write text and HTML to the system clipboard.
Feature trace, not a copy of Notion’s product.Measured
Electron API Demos
A 12 Oct 2026 run recorded 30 of 30 file:line checks and also listed replies the summary missed.
systemdesign.academy, REA 6.4.0, commit 26b3d1d of the demo.One question, then a located answer.
A session is something you can point at. The percent button in calc.exe is the shape of that session, not a template for every binary.
Ask
After +, what does the % button do?
Seen
0x5b and 0x5c land together. The constant is 100. 200 + 10% is 220: percent takes a share of the first number.
Still open
That rule belongs to this button. It does not travel to the next program, and a missing note would not prove the behavior is absent.
One local server. The client you already use.
Setup writes config only after you approve it. rea doctor is the list of what this machine can actually open.
- Claude Code
- Cursor
- Codex
- Gemini CLI
Not the vendor’s source. You get evidence from the file you opened.
Not offline once you send it. The tools run here. The text you hand the agent still goes to that agent’s model.
Not a second engine. Native work uses Ghidra, Hopper, or IDA. If that one is missing, REA does not swap in another.
Set it up on this machine.
Approve the plan before REA writes client config. Restart the agent after setup. Node 22.19+, 24.11+, or 26 and newer. Node 23 and 25 are outside the supported range.
The npm package is rea-agents. This site’s source is the ReaReverse repository.
npx rea-agents@latest setup
Source ReaReverse