gu (step-out or go up)

Description of the 'gu' command in HyperDbg.

Command

gu

Syntax

gu

gu [Count (hex)]

Description

Executes instructions one by one until one RET instruction is executed (step-out or go up).

Parameters

[Count (hex)] (optional)

The number of instructions to perform the instrument (The execution might not meet a RET instruction if not enough number is specified).

Examples

If you want to step-out or go up from the current function.

4: kHyperDbg> gu
ntkrnlmp!KiSystemServiceCopyEnd+0x25:
fffff802`2d045fe5    0F 1F 00                            nop dword ptr ds:[rax], eax

SDK

To step-out or go up in the target debuggee, you need to use the following function in libhyperdbg:

BOOLEAN
hyperdbg_u_stepping_step_over_for_gu(BOOLEAN last_instruction);

Remarks

Starting from v0.6, this command was added to the HyperDbg debugger.

This command is the same as the 'p (step-over)' except it checks whether the instruction is equal to RET or not.

All cores and threads (except the currently executing thread) find a chance to be executed between each step in this command.

Requirements

None

Related

k, kd, kq (display stack backtrace)

p (step-over)

t (step-in)

i (instrumentation step-in)