R/CREA + CodexHands-on guide & reusable prompts
A companion guide to the TunnelLab video

From reverse engineering
to building a real app

A practical REA + Codex workflow: locate an Electron app.asar package, connect the MCP tools, investigate the application with evidence, and build and test an independent desktop app.

Free resource · No account required · Your paths stay in your browser

Mind-map case study
Investigate → RebuildREA + Codex
REA + Codex Investigation Evidence Implementation Validation
Copy-ready promptsASAR file finderReal-world validation
STEP 01

Installation & setup

Start with Node.js and a local Codex environment on Windows. Then configure REA for Codex.

Node.jsRun REA with npx
CodexLocal coding agent with project access
REAReverse engineering tools via MCP
Check prerequisites
node -v
npm -v
Register REA with Codex
npx.cmd rea-agents@latest setup --client codex
npx.cmd -y rea-agents@latest doctor --client codex --json
Fully quit and relaunch Codex after setup. A healthy: true result confirms a valid registration, but you must also verify a live REA MCP tool call inside Codex.

Codex Desktop does not require the codex command to be available on your PowerShell PATH. Optional native binary-analysis engines such as Ghidra are generally not necessary for examining Electron JavaScript.

STEP 02

Find an app.asar file

Many Electron applications bundle their resources into .asar archives. Not every application uses Electron or this file format.

Option 1 — Search with PowerShell

First check the common Xmind installation locations:

Check common Xmind paths
$paths = @(
  "$env:LOCALAPPDATA\Programs\Xmind\resources\app.asar"
  (Join-Path $env:ProgramFiles 'Xmind\resources\app.asar')
  (Join-Path ([Environment]::GetFolderPath('ProgramFilesX86')) 'Xmind\resources\app.asar')
)
$paths | Where-Object { Test-Path -LiteralPath $_ }

To find .asar files in common installation folders for other applications, use this command. The recursive scan may take a few minutes:

Search common app directories for ASAR files
Alternative — Ask Codex to find the package

          

This prompt asks Codex to locate the target package and stop before any reverse engineering begins.

Only inspect app.asar or any installed software when authorized. Do not redistribute proprietary source code or assets without permission.

Option 2 — Use your browser's folder picker

On supported Chrome and Edge versions, you can explicitly choose an application folder. The browser can see matching filenames and relative paths, but cannot expose the absolute Windows drive path to this page.

Runs locally · Nothing is uploaded
STEP 03

Customize your project paths

Enter your workspace and target ASAR path. They will be automatically inserted into the copy-ready prompts below.

Paths are not uploaded or stored. Editing either field instantly updates the prompts displayed below.

STEP 04

All Codex prompts

Send these prompts in sequence. Open any card to inspect its full text, or use the copy button to paste it into Codex.

01

Workspace setup & live REA connection test

Confirm the environment without starting expensive analysis.

Show full prompt

Expected: valid paths and at least one successful real REA tool invocation.

02

Targeted investigation & evidence collection

Identify relevant entry points instead of analyzing thousands of files at once.

Show full prompt

Expected: architecture, feature evidence, implementation plan, limitations, and coverage summary.

03

Build an independent Windows desktop app

Turn verified behavioral findings into original, maintainable software.

Show full prompt

Expected: Electron project, functional features, automated tests, and packaged executable.

04

Functionality tests & comparison

Separate evidence-based findings from independently developed behavior.

Show full prompt

Tests that were not performed must be reported as NOT TESTED, not PASS.

05

Final video-ready report

Explain exactly what REA and Codex achieved without overstating the results.

Show full prompt
STEP 05

Fix MCP connection problems

A healthy MCP registration does not always mean the server can start and complete its handshake.

Find the underlying error

Check REA's Codex registration
npx.cmd -y rea-agents@latest doctor --client codex --json

If REA tools are unavailable, first fully quit and restart Codex. If the problem persists, give Codex this diagnostic prompt:

Diagnostic prompt

          
In our own case study, an incomplete REA copy in the npm cache caused Cannot find module 'which' during MCP startup. We verified a healthy installation and configured its exact launcher. Npm cache paths vary by machine—never copy a guessed path.
FAQ

Things worth knowing

Can this page scan my entire PC for ASAR files?

No. Websites cannot access local files without permission. The picker only scans a folder you explicitly choose. PowerShell can search common installation locations.

Why does my app have no ASAR file?

ASAR is common in Electron apps, but not universal. Native Windows applications and differently packaged Electron apps may not use it.

Does REA recover all original source code?

No. Inventorying files, analyzing selected modules, and understanding behavior are not equivalent to recovering an entire application's original source code.

Is a Codex-built app the same as the original?

No. The goal is an independent implementation of selected features and an honest functional comparison—not a direct copy of the original program.

Copied ✓