Vibe-Reverse-Engineering: Skill for Claude Code

Dynamic Analysis with livetools

For DX9 FFP proxy porting and RTX Remix compatibility, invoke the dx9-ffp-port skill.

A live analysis toolkit for running processes. Attach, trace functions, collect data, inspect state, step through code, patch memory, analyze offline -- composable tools that chain naturally for any RE scenario.

All commands: python -m livetools <command> [args]

Quick Reference

Session

python -m livetools attach <name_or_pid>             # attach to running process
python -m livetools attach <exe_path> --spawn        # launch + instrument before init code runs
python -m livetools detach                            # release target, stop daemon
python -m livetools status                            # check state

Breakpoints (blocking)

python -m livetools bp add <addr>             # set blocking code breakpoint
python -m livetools bp del <addr>             # remove breakpoint
python -m livetools bp list                   # list all BPs + hit counts

Wait for Hit

python -m livetools watch --timeout 60        # block until BP hit (returns snapshot)

Inspect (while frozen)

python -m livetools regs                      # all registers
python -m livetools stack [N]                 # top N dwords from ESP (default 16)
python -m livetools mem read <addr> <size>    # hex dump + multi-type interpretation
python -m livetools mem read <addr> <size> --as float32
python -m livetools disasm [addr] [-n count]  # disassemble (default: EIP, 16 insns)
python -m livetools bt                        # call stack backtrace

Supported --as types: float32, float64, half, uint8, int8, uint16, int16, uint32, int32, ptr, ascii, utf16.

Control

python -m livetools step [over|into|out]      # advance one instruction (returns snapshot)
python -m livetools resume                    # unfreeze target

Patch + Scan (anytime)

python -m livetools mem write <addr> <hex>    # write bytes to live memory
python -m livetools mem alloc <size>          # allocate rwx memory in target (for code caves)
python -m livetools scan <pattern> --range START:SIZE