print (evaluate and print expression in debuggee)
Description of the 'print' command in HyperDbg.
Command
Syntax
print [Expression (string)]
Description
Shows the result of an expression that will be executed in the remote debuggee.
Parameters
[Expression (string)]
The expression is based on HyperDbg's scripting language.
Examples
The following command shows the @rax
register in the debuggee.
0: kHyperDbg> print @rax
The following command shows the data as an 8-byte hex, pointed by the @rcx
register.
0: kHyperDbg> print dq(@rcx))
The following command shows the value pointed by $proc+@rdx
which $proc is equivalent to current _EPROCESS
added to the rdx register.
0: kHyperDbg> print $proc+@rdx
The following command shows the value of an address, which first, rax register is added with 0xa0 constant then a dereference occurs and the target is shown as a QWORD hex.
0: kHyperDbg> print poi(@rax+a0)
IOCTL
For using this command, you use the same SDK function as the '.formats' command.
Remarks
This command is exactly like print(expr);
in script engine, except that HyperDbg automatically adds print(
and );
.
This command is guaranteed to keep debuggee in a halt state (in Debugger Mode); thus, nothing will change during its execution.
Requirements
None
Related
None
Last updated