description |
---|
Description of 'eb', 'ed', and 'eq' functions in HyperDbg Scripts |
eb
ed
eq
eb( Address, Value );
ed( Address, Value );
eq( Address, Value );
[Expression (Address)]
Address of the target memory that needs to be modified.
[Expression (Value)]
The value that needs to be replaced on the target address.
eb
modifies a single byte
.
ed
modifies a dwrod
.
eq
modifies a qword
value.
If the address is valid, then the above functions return 1
. Otherwise, 0
is returned.
The following code edits memory (quad-word) at fffff8031d44fde0
and change it to 0x12345678deadbeef
.
IsEditApplied = eq(fffff8031d44fde0, 0x12345678deadbeef);
The following code changes a byte to 0x90 at the location that the rcx register is pointing to, then adds 0x8 to it.
IsEditApplied = eb(poi(@rcx)+8, 0x90);
You can also use these functions without checking for the return value.
eq(fffff8031d44fde0, 0x12345678deadbeef);
It's possible to use these functions with an if statement.
if (eq(@r11, 0x12345678deadbeef) == 1)
{
printf("changes are applied.\n");
}
else
{
printf("changes are NOT applied.\n");
}
None
None