vzco
Official@vzco
Provides advanced binary instrumentation and reverse engineering capabilities for Windows x64 processes through memory inspection and structural analysis.
Agent Skills by vzco
Showing 31 vetted skills indexed across 1 GitHub repositories.
vzcoadd-skill
Create a new Skill unit scaffold with compliant SKILL.md frontmatter for the ARC Probe plugin.
vzcomap-module
Discover and label all functions in a loaded module using exports, RTTI, and .pdata data.
vzcoinvestigate-module
Orchestrate end-to-end unknown module investigation using ARC Probe capabilities.
vzcoread-write-memory
Read and write process memory across data types via CLI, TCP, or bridge.
vzcotrace-writes
Trace memory writes in x64 processes using hardware breakpoints and disassembly.
vzcofind-callers
Identify direct caller functions and map their call sites for a target function address.
vzcodetect-params
Infer Windows x64 function parameters from prologues and register usage.
vzcogh-release-check
Compare published GitHub releases with local build artifacts using gh CLI.
vzcoinject
Inject ARC Probe into a running Windows x64 process via TCP port 9998.
vzcofind-function
Locate target functions in running processes via strings, RTTI, or behavior.
vzcoanalyze-module
Analyze loaded modules to extract exports, RTTI data, strings, and function references.
vzcoresolve-rip
Resolve RIP-relative addresses in x86-64 instructions using target calculation.
vzcomake-signature
Generate durable byte signatures to locate functions across binary updates.
vzcotrace-string-to-function
Trace memory-resident strings to referencing functions and generate GUI labels.
vzcorelease
Build, package, sign, and publish ARC Probe releases to GitHub.
vzcofind-string-xref
Trace string references to LEA instructions and generate reusable signatures.
vzcoprobe-bridge
Automate ARC Probe GUI memory inspection via the Claude Bridge HTTP API.
vzcoidentify-class
Resolve C++ object class names and vtable layouts via RTTI.
vzcoanalyze-vtable
Analyze C++ virtual function tables to map entries and label overrides.
vzcoprobe-gui-struct
Map live memory data structures via RTTI discovery in the ARC Probe GUI.
vzcopublish-readme
Update public README content with latest skills, commands, and screenshots.
vzcodiscover-class
Map a C++ class's vtable and inheritance chain in a running process via RTTI.
vzcosync-plugin
Synchronize private plugin assets to a public repository with frontmatter validation.
vzcofollow-pointers
Traverse multi-level pointer chains from a base address to read nested memory values.
Frequently Asked Questions About vzco
FAQPage SchemaWhat specific tasks can I perform with these capabilities?▼
You can perform deep binary analysis, including mapping C++ class structures via RTTI, tracing memory write operations, resolving RIP-relative addresses, and identifying function callers. These capabilities enable precise reverse engineering of Windows x64 processes and the creation of portable signatures for function relocation.
Who is the target persona for these technical capabilities?▼
The target personas are security researchers, malware analysts, and reverse engineers focused on Windows binary analysis. These professionals utilize these functions to inspect live process memory, document function call graphs, and maintain structural metadata for complex software modules.
What are the prerequisites for deploying these memory inspection functions?▼
Deployment requires a Windows x64 environment and the ARC Probe plugin infrastructure. Users must have the ability to attach to target processes via TCP port 9998 and possess sufficient system privileges to perform read and write operations on process memory.