!a (assemble physical address)
Description of the '!a' command in HyperDbg.
Command
!a
Syntax
!a [Address (hex)] [asm {AsmCmd1; AsmCmd2}]
Description
Assembles (shows HEX byte codes) or puts the resulting instruction codes into the (physical) memory.
Parameters
[Address (hex)] (optional)
The physical address of where we want to start putting resulting codes into its memory.
[asm {AsmCmd1; AsmCmd2}]
The target assembly codes.
Process ID doesn't make sense in physical memory. If you specify pid for physical memory, it is ignored.
Examples
If you just want to view the result of assembly (byte codes in HEX) without modifying the memory, the following command can be used.
The following command is used when we want to assemble assembly codes and put the resulting bytes into the target memory at abc1c0
.
IOCTL
None
Remarks
To view the byte code of an assembly snippet, you can use the following command (
StartAddress
is useful when dealing with relative instructions like JMP).
This command is guaranteed to keep debuggee in a halt state (in Debugger Mode); thus, nothing will change during its execution.
Requirements
None
Related
Last updated