SkillShop
SkillShop › Use cases › Security, Science & Hardware
Security, Science & HardwareDone with Claude

Reverse engineer a classic game ROM via Ghidra MCP

The author connected Claude to Ghidra through MCP to analyze and rename functions in an Atari River Raid ROM.

Reverse engineer a classic game ROM via Ghidra MCP preview
What They Did
The author ran an open-source Ghidra MCP server so Claude could inspect an unlabeled 8 kB Atari ROM, imported as 6502 only. Claude inferred the Atari platform from hardware registers and located the lives-decrement code. The author did the rebasing (twice) by hand and applied the one-byte patch outside Ghidra.
How It Went
Swapping DEY for NOP froze the lives counter at 3 in an emulator. Claude wrongly guessed the game was Centipede and struggled with sprite data. The MCP tools couldn't rebase or write the binary.
Worth Knowing
Setup was a chain of four components, and some tool calls took about 30 seconds each, so interactive use felt slow.
Try it yourself with Claude

Connect to Ghidra via MCP and load this [ROM or binary file]. Analyze the disassembled functions, infer their purpose from behavior and strings, and rename them with descriptive labels, producing an annotated function map when done.

Read the original ↗