Flag: Tornado! Hurricane!

OpenRCE IDA SDK >> get_insn_tev_reg_result

get_insn_tev_reg_result
Category: Tracing

bool idaapi
get_insn_tev_reg_result(int n, const char *regname, regval_t *regval)
Store the value of register *regname into *regval when instruction trace event number n happened, after execution of the instruction. Returns false if the register wasn't modified or n doesn't represent an instruction trace event.

See get_insn_tev_reg_val() for obtaining registers before execution.

Examples:
#include <dbg.hpp>

// Loop through all trace events
for (int i = 0; i < get_tev_qty(); i++)
{
    regval_t esp;
    tev_info_t tev;

    // Get the trace event information
    get_tev_info(i, &tev);

    // If it's an instruction trace event...
    if (tev.type == tev_insn)
    {
        // Get ESP, store into &esp
        if (get_insn_tev_reg_result(i, "ESP", &esp))
            // Display the value of ESP
            msg("TEV #%d after exec: %a\n", i, esp.ival);
        else
            msg("No ESP change for TEV #%d\n", i);
    }
}


Related: clear_trace, enable_func_trace, enable_insn_trace, enable_step_trace, get_bpt_tev_ea, get_call_tev_callee, get_insn_tev_reg_result, get_insn_tev_reg_val, get_ret_tev_return, get_tev_info, get_tev_qty, is_func_trace_enabled, is_insn_trace_enabled, is_step_trace_enabled, set_trace_size

Note: You must be logged in to add notes to the IDA SDK reference manual.

There are 31,038 total registered users.


Recently Created Topics
Ultimate Hacking Cha...
Jun/21
CreateMutex
May/31
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Immunity Debugger Re...
Aug/03


Recent Forum Posts
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack


Recent Blog Entries
crystalwade
Jul/20
test

nieo
Mar/22
Android Application Reversing

halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit