evaluate_expression
Evaluate x64dbg expressions to resolve API names, registers, arithmetic, and pointer dereferences. Use [address] syntax for fast pointer reads.
Instructions
Evaluate an x64dbg expression. Resolves API names, registers, arithmetic, pointer dereferences. TIP: Use [address] syntax to read a pointer value, e.g. '[rsp]' reads the QWORD at RSP. This is faster than read_memory for single values.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| expression | Yes | x64dbg expression. Examples: 'IsDebuggerPresent', 'rcx', 'kernel32.dll:VirtualAlloc', '[rsp]', 'rip + 0x100'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Structured result data (varies by tool) | |
| error | No | ||
| details | No | Detailed text breakdown | |
| success | Yes | ||
| summary | Yes | One-line human-readable result | |
| suggested_next_tools | No | Tools recommended to call next based on this result |