EXETOOLS FORUM

EXETOOLS FORUM (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Q: How can I get this kind of output from X64DBG? (https://forum.exetools.com/showthread.php?t=18599)

Stingered 01-12-2018 12:19

Q: How can I get this kind of output from X64DBG?
 
MOV DWORD PTR DS:[402033], EAX

TO:


kernel32.BaseThreadInitThunk
Lparam = NULL
DlgProc = thisapp.0400103A
hOwner = NULL
PTemplate = 400
hInst = NULL
DialogBoxParamA
ExitCode = 7d733367
ExitProcess

Is there a plugin available to decode this, like OllyDBG?

THX!

Stingered 01-12-2018 12:47

Answered my own question, haha.

https://github.com/ThunderCls/xAnalyzer

Installation info:
https://github.com/ThunderCls/xAnalyzer#installation

-=bb=- 01-12-2018 19:45

Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA

Stingered 01-13-2018 07:15

Quote:

Originally Posted by -=bb=- (Post 111858)
Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA

As of yet, I haven't. But I'll keep an eye out. Might check the bug base for the plugin to see if something like this has already been posted.


All times are GMT +8. The time now is 19:28.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2018, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX