vlad/reverse-skills-max
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
aecfc9365536c6f06d3590cf3c1321875c2426d3
reverse-skills-max/vendor-new/analyst-ai-pack/skills/debugging-malware-with-x64dbg/references/api-reference.md

1.3 KiB
Raw Blame History

API Reference: Debugging Malware with x64dbg

Overview

scripts/analyst.py generates an x64dbg command script of strategic API breakpoints for a chosen goal (unpacking, injection, crypto, network, persistence). The output is a text script to load in x64dbg; the tool does not run any process.

Dependencies

Package Version Purpose
(stdlib) — argument handling, text output

External tools

Tool Purpose
x64dbg Windows user-mode debugging
Scylla (x64dbg plugin) Dump memory and rebuild import tables when unpacking

Core functions

build_script(presets)

Returns an x64dbg .txt script of bp commands for the selected presets, de-duplicating APIs across presets.

PRESETS

Maps each analysis goal to the relevant Windows APIs.

Usage

python scripts/analyst.py breakpoints --preset unpacking > bp.txt
python scripts/analyst.py breakpoints --preset injection --preset crypto > bp.txt
# in x64dbg: scriptload bp.txt

Sources