Flag: Tornado! Hurricane!

OpenRCE IDA SDK >> get_ret_tev_return

get_ret_tev_return
Category: Tracing

ea_t idaapi
get_ret_tev_return(int n)
Returns the address of the calling function for function trace event number n. Returns BADADDR if there is no such function trace event number n. The type of the function trace event must be tev_ret.

Examples:
#include <dbg.hpp>

// Loop through all trace events
for (int i = 0; i < get_tev_qty(); i++)
{
    tev_info_t tev;
    
    // Get the trace event information
    get_tev_info(i, &tev);

    // If it's an function return trace event...
    if (tev.type == tev_ret)
    {
        ea_t addr;
        if ((addr = get_ret_tev_return(i)) != BADADDR)
            msg("Function returned to %a\n", addr);
    }
}


Related: clear_trace, enable_func_trace, enable_insn_trace, enable_step_trace, get_bpt_tev_ea, get_call_tev_callee, get_insn_tev_reg_result, get_insn_tev_reg_val, get_ret_tev_return, get_tev_info, get_tev_qty, is_func_trace_enabled, is_insn_trace_enabled, is_step_trace_enabled, set_trace_size

Note: You must be logged in to add notes to the IDA SDK reference manual.

There are 29,898 total registered users.


Recently Created Topics
Decompiling raw bina...
May/22
Incorrect bitness wh...
May/20
PaiMei stalker modul...
May/19
Attach to program us...
May/13
IDA PRO how to make ...
May/12
FACT: OpenRCE is dead.
May/08
Int 3 anti debug?
May/05
help needed - Beginn...
May/03
Attaching IDA Pro to...
Apr/27
File type
Apr/21


Recent Forum Posts
Ollydbg 2.0 - Plugin...
openrce...
IDA PRO how to make ...
codeinject
FACT: OpenRCE is dead.
codeinject
IDA Resource Viewer ...
r2x64
FACT: OpenRCE is dead.
djnemo
FACT: OpenRCE is dead.
codeinject
FACT: OpenRCE is dead.
pedram
help needed - Beginn...
araujo
Attaching IDA Pro to...
codeinject
Int 3 anti debug?
codeinject


Recent Blog Entries
lowpriority
Apr/13
OllyMigrate Plugin for Olly...

everdox
Mar/08
2 anti-trace mechanisms spe...

everdox
Mar/07
Advanced debugging techniques

everdox
Mar/06
Branch tracing and LBR acce...

everdox
Mar/05
Using pre-paged in virtual ...

More ...


Recent Blog Comments
clarisonic on:
Apr/03
New version of Ollydbg!

clarisonic on:
Apr/03
New version of Ollydbg!

trackerx90 on:
Mar/04
SuppressDebugMsg As Anti-De...

coachfactory on:
Feb/25
Portable Executable Format ...

coachfactory on:
Feb/25
A new Anti-Olly trick.

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit