gu (step-out or go up)

Description of the 'gu' command in HyperDbg.

gu

gu
gu [Count (hex)]

Executes instructions one by one until one RET instruction is executed (step-out or go up).

[Count (hex)] (optional)

The number of instructions to perform the instrument (The execution might not meet a RET instruction if not enough number is specified).

If you want to step-out or go up from the current function.

4: kHyperDbg> gu
ntkrnlmp!KiSystemServiceCopyEnd+0x25:
fffff802`2d045fe5    0F 1F 00                            nop dword ptr ds:[rax], eax

To step-out or go up in the target debuggee, you need to use the following function in libhyperdbg:

BOOLEAN
hyperdbg_u_stepping_step_over_for_gu(BOOLEAN last_instruction);

Starting from v0.6, this command was added to the HyperDbg debugger.

This command is the same as the 'p (step-over)' except it checks whether the instruction is equal to RET or not.

All cores and threads (except the currently executing thread) find a chance to be executed between each step in this command.

None

Last updated 1 year ago