x (examine symbols and find functions and variables address)
Description of the 'x' command in HyperDbg.
Command
x
Syntax
x [Module!Symbol (wildcard string)]
Description
Finds the functions or variables address in the memory based on symbols.
Parameters
[Module!Symbol (wildcard string)]
Specifies a function or a variable name or a pattern that the symbol must contain. The Symbol can contain a variety of wildcard characters and specifiers. (For more information about the syntax, see Remarks)
Examples
In the following example, we searched for the address of the ExAllocatePoolWithTag function in the nt module.
In the following example, we searched for the address of functions (and names) which, starts with ExAllocatePoo in the nt module.
IOCTL
None
Remarks
These are some examples of wildcard characters supported by this command.
foo
Looks for a global symbol (functions, variables) named "foo".
foo?
Looks for a global symbol that starts with "foo" and contains one extra character afterward, such as "fool" and "foot".
foo!bar*
Looks for a global symbol in "foo" that starts with "bar" and contains extra characters afterward, such as "foo!bar1" and "foo!bar2".
Requirements
None
Related
None
Last updated