2.9.1 Instruction Tracing

To perform instruction tracing (for example, trace into) on the previous program, you can use the following settings in the Trace into dialog. As mentioned previously, to capture the trace events in a log file, you need to specify the full path to the log file and the Log Text:

The Log Text value in the preceding screenshot (0x{p:cip} {i:cip}) is in the string format, which specifies the debugger to log the address and the disassembly of all the traced instructions. The following is the trace log of the program. As a result of choosing the Trace into option, the instructions inside the function (0xdf1000) are also captured (highlighted in the following code). Instruction tracing is useful to get a quick idea of a program's execution flow:

0x00DF1011      mov ebp, esp
0x00DF1013 call 0xdf1000
0x00DF1000 push ebp
0x00DF1001 mov ebp, esp
0x00DF1003 pop ebp
0x00DF1004 ret
0x00DF1018 xor eax, eax
0x00DF101A pop ebp
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset