Commands have the following format (notice the arguments are comma separated):
command arg1, arg2, argN
- Please note that all integer constants are represented in hex. For example, after executing the following command,
$iwill be 256 (0x100):
mov $i, 100. This also means a variable cannot begin with letters from A to F.
- Throughout this documentation,
[arg1](argument with a square bracket) represents an optional argument.
arg1(argument without a square bracket) represents an mandatory argument. “[” and “]” represent memory reference operation in expression evaluation for the argument. If you don’t want to refer to the content in the memory pointer, don’t add “[” and “]”.
- For commands with two or more arguments, a comma (,) is used to separate these arguments. Do not use a space to separate the arguments.
- x64dbg only supports integer in expressions. Strings, Floating point numbers and SSE/AVX data is not supported. Therefore you cannot use
[eax]=="abcd"operator to compare strings. Instead, you can compare the first DWORD/QWORD of the string, or use an appropriate plugin which provides such feature.
- The “==” operator is used to test if both operands are equal. The “=” operator is used to transfer the value of the expression to the destination.