Skip to content

Commit

Permalink
add new formatting functions
Browse files Browse the repository at this point in the history
  • Loading branch information
mrexodia committed Jan 10, 2019
1 parent 9c76e24 commit b8e0505
Showing 1 changed file with 13 additions and 0 deletions.
13 changes: 13 additions & 0 deletions introduction/Formatting.rst
Original file line number Diff line number Diff line change
Expand Up @@ -27,13 +27,26 @@ Complex Type

``{ntstatus@code}`` will print the name of NTSTATUS error code and the description of it(with ``FormatMessage``).

``{ascii[;length]@address}`` will print the ASCII string at ``address`` with an optional ``length`` (in bytes).

``{ansi[;length]@address}`` will print the ANSI string at ``address`` with an optional ``length`` (in bytes).

``{utf8[;length]@address}`` will print the UTF-8 string at ``address`` with an optional ``length`` (in bytes).

``{utf16[;length]@address}`` will print the UTF-16 string at ``address`` with an optional ``length`` (in words).

``{disasm@address}`` will print the disassembly at ``address`` (equivalent to ``{i:address}``).

``{modname@address}`` will print the name of the module at ``address``.

--------
Examples
--------

- ``rax: {rax}`` formats to ``rax: 4C76``
- ``password: {s:4*ecx+0x402000}`` formats to ``password: L"s3cret"``
- ``log {x:bswap(rax)}`` if rax=0000000078D333E0 the result will be E033D37800000000 because of bswap fun which reverse the hex value

-------
Plugins
-------
Expand Down

0 comments on commit b8e0505

Please sign in to comment.