How can I print the opcodes in a trace log?
I can use {x:bswap([cip])}
but this will print a fix amount of bytes (which most of the time will end up as either more or less number of bytes), regardless of the ones that the instruction does have
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this communityYou can use {mem;dis.len(cip)@cip}
. See http://help.x64dbg.com/en/latest/introduction/Formatting.html for the relevant documentation.
trace record log file already logs opcodes
select the trace window
select start run trace
accept the file name
and start tracing
it will trace 50000 steps (default can be configured in preferences) and stop
and the format of trace file is documented so you can code some utility to parse it if you want