Execution Trace Viewer

冥界3大法王 · 发表于 2020-7-3 18:31

本帖最后由冥界3大法王于 2020-7-3 18:32 编辑

Execution Trace Viewer is an application for viewing, editing and analyzing execution traces. It was originally made for reverse engineering obfuscated code, but it can be used to analyze any kind of execution trace.

Features

open, edit and save execution traces
search & filter trace by disasm, reg values, memory address/value, etc
add comments and bookmarks
write python plugins
supports x64dbg traces

git clone https://github.com/teemu-l/execution-trace-viewerpip install pyqt5 yapsy qdarkstyle capstonepython tv.pyTrace file formatsFollowing file formats are supported:

.tvt - Default file format. Developed from x64dbg trace format. 3 differences with x64dbg format: comments, disasm and bookmarks added.
.trace32 / .trace64 - x64dbg file format. Only reading supported. Loading x64dbg traces is slow because the code needs to be disassembled.
json - Traces can be saved and loaded from json text files.

Traces folder contains one sample trace. It is ~11k lines of obfuscated code (by VMProtect3). All the handlers are disassembled and added to bookmarks table.important]PluginsExecution Trace Viewer can be extended by Python3 plugins. Plugins are launched from plugins menu or from right-click menu on trace table. Check the example plugins and core/api.py for more info.
https://github.com/teemu-l/mem-trace-plugin/archive/master.zip

冥界3大法王 · 发表于 2020-7-3 18:33

这玩意不错吧 .栈帧信息都有了。调试文件也能查看了。

shangbingfamou · 发表于 2020-7-3 18:50

好不错需要好东西好东西一直在找

caicaisin · 发表于 2020-7-3 19:04

不错好东西下载

zhenlou3 · 发表于 2020-7-3 19:51

这个支持一下

894944021 · 发表于 2020-7-3 19:52

学习了，非常感谢

snowfox · 发表于 2020-7-3 20:13

看起来不错

qq126344 · 发表于 2020-7-3 20:16

1111111111111

yw450330 · 发表于 2020-7-3 21:45

源码打开居然是404，这什么情况

w92vv · 发表于 2020-7-3 23:48

这……这是个啥

帐号		自动登录	找回密码
密码			注册[Register]

[Other] Execution Trace Viewer

免费评分