| description |
|---|
Description of the 'gu' command in HyperDbg. |
gu
gu
gu [Count (hex)]
Executes instructions one by one until one RET instruction is executed (step-out or go up).
[Count (hex)] (optional)
The number of instructions to perform the instrument (The execution might not meet a RET instruction if not enough number is specified).
If you want to step-out or go up from the current function.
4: kHyperDbg> gu
ntkrnlmp!KiSystemServiceCopyEnd+0x25:
fffff802`2d045fe5 0F 1F 00 nop dword ptr ds:[rax], eax
To step-out or go up in the target debuggee, you need to use the following function in libhyperdbg:
BOOLEAN
hyperdbg_u_stepping_step_over_for_gu(BOOLEAN last_instruction);
Starting from v0.6, this command was added to the HyperDbg debugger.
This command is the same as the 'p (step-over)' except it checks whether the instruction is equal to RET or not.
All cores and threads (except the currently executing thread) find a chance to be executed between each step in this command.
None