EXETOOLS FORUM  

Go Back   EXETOOLS FORUM > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-12-2018, 12:19
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 71
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 100
Thanks Rcvd at 49 Times in 22 Posts
Stingered Reputation: 2
Q: How can I get this kind of output from X64DBG?

MOV DWORD PTR DS:[402033], EAX

TO:


kernel32.BaseThreadInitThunk
Lparam = NULL
DlgProc = thisapp.0400103A
hOwner = NULL
PTemplate = 400
hInst = NULL
DialogBoxParamA
ExitCode = 7d733367
ExitProcess

Is there a plugin available to decode this, like OllyDBG?

THX!
Reply With Quote
  #2  
Old 01-12-2018, 12:47
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 71
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 100
Thanks Rcvd at 49 Times in 22 Posts
Stingered Reputation: 2
Answered my own question, haha.

https://github.com/ThunderCls/xAnalyzer

Installation info:
https://github.com/ThunderCls/xAnalyzer#installation
Reply With Quote
The Following User Says Thank You to Stingered For This Useful Post:
-=bb=- (01-12-2018)
  #3  
Old 01-12-2018, 19:45
-=bb=- -=bb=- is offline
Family
 
Join Date: Sep 2009
Location: slowly learning
Posts: 72
Rept. Given: 22
Rept. Rcvd 37 Times in 10 Posts
Thanks Given: 16
Thanks Rcvd at 17 Times in 3 Posts
-=bb=- Reputation: 37
Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA
Reply With Quote
  #4  
Old 01-13-2018, 07:15
Stingered Stingered is offline
Friend
 
Join Date: Dec 2017
Posts: 71
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 100
Thanks Rcvd at 49 Times in 22 Posts
Stingered Reputation: 2
Thumbs up

Quote:
Originally Posted by -=bb=- View Post
Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA
As of yet, I haven't. But I'll keep an eye out. Might check the bug base for the plugin to see if something like this has already been posted.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
miracl output Peter[Pan] General Discussion 2 04-14-2006 22:21


All times are GMT +8. The time now is 19:11.


ICP05004977
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX