PCM

PCM is a reverse engineering tool based on MCP, providing functions such as IDA integration and memory analysis.

Security Developer tools #Reverse Engineering #IDA Integration #Memory Analysis .Python

rating : 2.5 points

downloads : 53

update time : 2025-04-27

What is PCM?

PCM is an MCP server implementation designed for IDA Pro. It allows interaction with IDA Pro via network protocols, providing more powerful debugging and analysis capabilities.

Main Features

PCM provides various functional extensions, including function analysis, cross-reference lookup, decompilation, etc., to help users perform binary analysis more efficiently.

Use Cases

Suitable for professional reverse engineers and security researchers, especially excelling in handling complex malware samples.

Install uv

Configure IDA Pro

Start the PCM Service

Function Analysis ExampleAnalyze a suspicious malware function.

API Call TracingFind all places where a specific API is called.

Do I need a special version of IDA Pro to use PCM?

Can I use PCM alone without MCP?

Is PCM suitable for beginners in decompilation?

🚀 PCM

PCM (Reverse version of MCP), MCP for reverse engineering.

🚀 Quick Start

PCM is a tool designed for reverse engineering, offering a variety of analysis and memory - related features.

✨ Features

Analysis

IDA
- repl (IDAPython)
- Disassembly
- Decompilation
- Type setting
- ...
Memory
- Battle reports

Complete Feature List

- `get_function_by_name(name)`: Get a function by its name.
- `get_function_by_address(address)`: Get a function by its address.
- `get_current_address()`: Get the currently user - selected address.
- `get_current_function()`: Get the currently user - selected function.
- `list_functions()`: List all functions in the database.
- `decompile_function(address)`: Decompile the function at the specified address using Hex - Rays.
- `disassemble_function(address)`: Get the assembly code (address: description) for the function at the specified address.
- `get_entrypoints()`: Get all entry points of the binary file.
- `get_function_blocks(address)`: Get all basic blocks in the function at the specified address.
- `get_function_cfg(address)`: Get the control flow graph of the function at the specified address.
- `get_xrefs_to(address)`: Get all cross - references pointing to the given address.
- `get_xrefs_from(address)`: Get all cross - references originating from the given address.
- `set_decompiler_comment(address, comment)`: Set a comment in the decompiled pseudo - code at the specified address.
- `set_disassembly_comment(address, comment)`: Set a comment in the assembly code at the specified address.
- `rename_local_variable(function_address, old_name, new_name)`: Rename a local variable in the function at the specified address.
- `rename_function(function_address, new_name)`: Rename the function at the specified address.
- `set_function_prototype(function_address, prototype)`: Set the prototype of the function at the specified address.
- `set_local_variable_type(function_address, variable_name, new_type)`: Set the type of a local variable in the function at the specified address.
- `create_structure_type(name, members, is_union)`: Create a new structure type.
- `get_metadata()`: Get the metadata of the current IDB.
- `repl_idapython(content)`: Run IDAPython code and return the captured stdout/stderr results.
- `add_note(title, content, address, tags)`: Add a new analysis note for the current binary file.
- `update_note(note_id, title, content, tags)`: Update an existing note.
- `get_notes(file_md5, address, tag)`: Get analysis notes under specified conditions.
- `delete_note(note_id)`: Delete the note with the specified ID.

📦 Installation

Prerequisites:

uv

Clone the repository

git clone https://github.com/rand-tech/pcm

Add pcm to your MCP configuration Example:

{
    "mcpServers": {
        "pcm": {
            "command": "uv",
            "args": [
                "--directory",
                "path_to/pcm",
                "run",
                "server.py"
            ]
        }
    }
}