Awesome GitHub RepositoriesWindows x64 Debuggers

Raddebugger is a native Windows x64 debugger that also functions as a high-speed PE/COFF linker and a PDB/DWARF debug information converter. It combines these three capabilities into a single development tool aimed at inspecting and controlling native x64 Windows applications, with the ability to attach to multiple processes simultaneously within one session. The debugger is built around a custom binary debug format that converts standard PDB and DWARF symbols into a compact representation for fast loading and minimal memory overhead. It includes a fuzzy symbol search engine for locating func

本项目是一个结构化的课程和教学指南，专注于 x64 Windows 逆向工程。它提供了一套通过学习汇编语言和操作系统内部原理来分析和反编译 Windows 二进制文件的课程。 该材料涵盖 Windows 二进制分析和恶意软件分析，特别侧重于解释 x64 机器码以恢复原始程序逻辑。它引导用户完成追踪程序行为和记录函数调用的过程，以了解二进制文件如何运行。 技术范围包括汇编级反编译、调试器驱动的状态检查和动态调用追踪。它还涵盖了基于指令的分析、Windows API Hooking 以及 x64 寄存器映射，以监控软件如何与系统交互。

Retoolkit is a reverse engineering tool orchestrator and malware analysis environment provisioner for Windows. It functions as a binary analysis workflow automator that installs and configures the specialized software toolchains required for security research. The project manages the execution and lifecycle of standalone analysis binaries through a registry-based Windows shell context menu. This integration allows users to launch external tools directly from the file system right-click menu by passing selected file paths as command line arguments to third-party executables. The system covers