get_screen_ea( )
is ==
.text:000000014000B065 mov cs:qword_142167D38, rcx
Is there a function in the SDK to extract qword_142167D38? Preferably as a hexadecimal value rather than a string.
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this communityget_screen_ea( )
is ==
.text:000000014000B065 mov cs:qword_142167D38, rcx
Is there a function in the SDK to extract qword_142167D38? Preferably as a hexadecimal value rather than a string.
Elaborating on existing answers, if you prefer to use IDAPython:
decode_insn(here())
print hex(cmd.Op1.addr)
char szBuffer[MAXSTR];
ua_outop2( get_screen_ea( ), szBuffer, MAXSTR, 1 );
ea_t qword = cmd.Operands[1].addr;
Again for IDAPython:
mov dword_40C4A4, eax
I just use GetOperandValue for stuff like that:
Python>"%08x" % GetOperandValue(ScreenEA(),0)
0040c4a4