Skip to content

Commit

Permalink
Readme
Browse files Browse the repository at this point in the history
  • Loading branch information
joney authored and joney committed Dec 25, 2020
1 parent 7f07503 commit 2c6ddd5
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions README.md
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
### BrachTrace

#### 思路
1. 利用BTS将CPU的执行过程记录到内存中。
2. 硬件级别是没有线程这种概念的，所以需要想办法将某个线程与CPU关联。
3. 对Windows内核核心函数SwapContext挂钩，目标线程开始执行时开启BTS,目标线程被切则关闭BTS
4. 抓取到数据后，在x64dbg中实现可视化界面。

0 comments on commit 2c6ddd5

Please sign in to comment.