Q: How can I get this kind of output from X64DBG?

[Stingered]

MOV DWORD PTR DS:[402033], EAX

TO:


kernel32.BaseThreadInitThunk
Lparam = NULL
DlgProc = thisapp.0400103A
hOwner = NULL
PTemplate = 400
hInst = NULL
DialogBoxParamA
ExitCode = 7d733367
ExitProcess

Is there a plugin available to decode this, like OllyDBG?

THX!

[Stingered]

Answered my own question, haha.

https://github.com/ThunderCls/xAnalyzer

Installation info:
https://github.com/ThunderCls/xAnalyzer#installation

[-=bb=-]

Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA

[Stingered]

Originally Posted by -=bb=-

Thank you for that - I've been looking for the same thing myself.

Not sure if it is an x64dbg issue or a plugin issue but do you find that the comments generated appear truncated?

Example : hxxp://imgbox.com/aU9UIPJZ

You can see that the actual comment is complete yet appears truncated in x64dbg itself.

TIA

As of yet, I haven't. But I'll keep an eye out. Might check the bug base for the plugin to see if something like this has already been posted.