Flag: Tornado! Hurricane!

OpenRCE IDA SDK >> get_insn_tev_reg_result

get_insn_tev_reg_result
Category: Tracing

bool idaapi
get_insn_tev_reg_result(int n, const char *regname, regval_t *regval)
Store the value of register *regname into *regval when instruction trace event number n happened, after execution of the instruction. Returns false if the register wasn't modified or n doesn't represent an instruction trace event.

See get_insn_tev_reg_val() for obtaining registers before execution.

Examples:
#include <dbg.hpp>

// Loop through all trace events
for (int i = 0; i < get_tev_qty(); i++)
{
    regval_t esp;
    tev_info_t tev;

    // Get the trace event information
    get_tev_info(i, &tev);

    // If it's an instruction trace event...
    if (tev.type == tev_insn)
    {
        // Get ESP, store into &esp
        if (get_insn_tev_reg_result(i, "ESP", &esp))
            // Display the value of ESP
            msg("TEV #%d after exec: %a\n", i, esp.ival);
        else
            msg("No ESP change for TEV #%d\n", i);
    }
}


Related: clear_trace, enable_func_trace, enable_insn_trace, enable_step_trace, get_bpt_tev_ea, get_call_tev_callee, get_insn_tev_reg_result, get_insn_tev_reg_val, get_ret_tev_return, get_tev_info, get_tev_qty, is_func_trace_enabled, is_insn_trace_enabled, is_step_trace_enabled, set_trace_size

Note: You must be logged in to add notes to the IDA SDK reference manual.

There are 28,658 total registered users.


Recently Created Topics
Reverse Engineer sof...
May/24
plugin_bochs_user
May/23
Cracking Mbot With a...
May/22
I have started a new...
May/22
windbg - olly/immunity
May/14
Reverse a WinRAR pac...
May/13
Add comments to resu...
May/10
can we code script ...
May/09
Type Casting Structu...
May/07
How to Reverse Engin...
May/03


Recent Forum Posts
windbg - olly/immunity
blowcheck
Help me guys
Olivier
Reverse a WinRAR pac...
NirIzr
windbg - olly/immunity
anonymouse
Reverse a WinRAR pac...
DriEm
Add comments to resu...
phn1x
IDA Resource Viewer ...
DriEm
Add comments to resu...
qiuhan
IDA Resource Viewer ...
waleeda...
IDA Resource Viewer ...
DriEm


Recent Blog Entries
bopwt568
May/27


waleedassar
Apr/20
OllyDbg NumberOfSections Crash

icegood
Apr/13
Advanced labels plugin for ...

waleedassar
Mar/31
GetModuleFileNameEx And Inf...

waleedassar
Mar/31
OllyDbg v1.10 And Wow64

More ...


Recent Blog Comments
michaelkorshandbags on:
May/24
OllyDbg v1.10 And Hardware ...

michaelkorshandbags on:
May/24
Ariadne framework and deobf...

michaelkorshandbags on:
May/24
Portable Executable Format ...

michaelkorshandbags on:
May/24
BIOS Disassembly Ninjutsu (...

michaelkorshandbags on:
May/24
Very comfortable to enjoy g...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit