Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does not work with latest x64dbg releases #65

Open
ayuanx opened this issue Mar 19, 2024 · 0 comments
Open

Does not work with latest x64dbg releases #65

ayuanx opened this issue Mar 19, 2024 · 0 comments

Comments

@ayuanx
Copy link

ayuanx commented Mar 19, 2024

Tested with x64dbg latest Mar 8 2024 and also earlier 2024 versions, same result.

xAnalyzer 2.5.6 Plugin by ThunderCls 2021
Extended analysis for static code
-> For latest release, issues, etc....
-> For help type command "xanal help"
-> code: http://github.com/ThunderCls/xAnalyzer
-> blog: http://reversec0de.wordpress.com

Initializing wait objects...
Initializing debugger...
Initializing debugger functions...
Setting JSON memory management functions...
Getting directory information...
Start file read thread...
Retrieving syscall indices...
Symbol Path: D:\Develop\x64dbg\x64\symbols
Allocating message stack...
Initializing global script variables...
Registering debugger commands...
Registering GUI command handler...
Registering expression functions...
Registering format functions...
Registering Script DLL command handler...
Starting command loop...
Initialization successful!
Loading plugins...
[pluginload] xAnalyzer
Syscall indices loaded!
Error codes database loaded!
Exception codes database loaded!
NTSTATUS codes database loaded!
Windows constant database loaded!
Reading notes file...
File read thread finished!
[PLUGIN, xAnalyzer] Command "xanal" registered!
[PLUGIN, xAnalyzer] Command "xanalremove" registered!
[PLUGIN] xAnalyzer v2 Loaded!
Handling command line...
  "D:\Develop\x64dbg\x64\x64dbg.exe" 
Debugging: C:\Program Files\xxxxx\yyyyy.exe
Database file: D:\Develop\x64dbg\x64\db\yyyyy.exe.dd64
Loading commandline...
Loading database from D:\Develop\x64dbg\x64\db\yyyyy.exe.dd64 375ms
Process Started: [0000000140000000](x64dbg://localhost/address64#0000000140000000) C:\Program Files\xxxxx\yyyyy.exe
  "C:\Program Files\xxxxxx\yyyyy.exe"
  argv[0]: C:\Program Files\xxxxxx\yyyyy.exe
Breakpoint at [0000000140068C20](x64dbg://localhost/address64#0000000140068C20) (entry breakpoint) set!
DLL Loaded: [00007FF8D1520000](x64dbg://localhost/address64#00007FF8D1520000) C:\Windows\System32\ntdll.dll
DLL Loaded: [00007FF8CF560000](x64dbg://localhost/address64#00007FF8CF560000) C:\Windows\System32\kernel32.dll
DLL Loaded: [00007FF8CEA80000](x64dbg://localhost/address64#00007FF8CEA80000) C:\Windows\System32\KernelBase.dll
DLL Loaded: [00007FF8CF8C0000](x64dbg://localhost/address64#00007FF8CF8C0000) C:\Windows\System32\user32.dll
DLL Loaded: [00007FF8CF6A0000](x64dbg://localhost/address64#00007FF8CF6A0000) C:\Windows\System32\gdi32.dll
DLL Loaded: [00007FF8D1350000](x64dbg://localhost/address64#00007FF8D1350000) C:\Windows\System32\comdlg32.dll
DLL Loaded: [00007FF8CBD80000](x64dbg://localhost/address64#00007FF8CBD80000) C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_[6595b64144ccf1df](x64dbg://localhost/address64#6595b64144ccf1df)_6.0.9600.19394_none_[62486577ecb635cf](x64dbg://localhost/address64#62486577ecb635cf)\comctl32.dll
DLL Loaded: [00007FF8D1470000](x64dbg://localhost/address64#00007FF8D1470000) C:\Windows\System32\advapi32.dll
DLL Loaded: [00007FF8CFA60000](x64dbg://localhost/address64#00007FF8CFA60000) C:\Windows\System32\shell32.dll
DLL Loaded: [00007FF8CF380000](x64dbg://localhost/address64#00007FF8CF380000) C:\Windows\System32\ole32.dll
DLL Loaded: [00007FF8CF860000](x64dbg://localhost/address64#00007FF8CF860000) C:\Windows\System32\shlwapi.dll
DLL Loaded: [00007FF8C2580000](x64dbg://localhost/address64#00007FF8C2580000) C:\Windows\System32\wininet.dll
DLL Loaded: [00007FF8CEBA0000](x64dbg://localhost/address64#00007FF8CEBA0000) C:\Windows\System32\msvcrt.dll
DLL Loaded: [00007FF8CF800000](x64dbg://localhost/address64#00007FF8CF800000) C:\Windows\System32\sechost.dll
DLL Loaded: [00007FF8D0FF0000](x64dbg://localhost/address64#00007FF8D0FF0000) C:\Windows\System32\rpcrt4.dll
DLL Loaded: [00007FF8D1130000](x64dbg://localhost/address64#00007FF8D1130000) C:\Windows\System32\combase.dll
DLL Loaded: [00007FF8C22B0000](x64dbg://localhost/address64#00007FF8C22B0000) C:\Windows\System32\iertutil.dll
DLL Loaded: [00007FF8CDC10000](x64dbg://localhost/address64#00007FF8CDC10000) C:\Windows\System32\userenv.dll
DLL Loaded: [00007FF8CE9A0000](x64dbg://localhost/address64#00007FF8CE9A0000) C:\Windows\System32\sspicli.dll
DLL Loaded: [00007FF8CE5C0000](x64dbg://localhost/address64#00007FF8CE5C0000) C:\Windows\System32\profapi.dll
DLL Loaded: [00007FF8CD120000](x64dbg://localhost/address64#00007FF8CD120000) C:\Windows\System32\SHCore.dll
System breakpoint reached!
[xAnalyzer]: Doing analysis, please wait... 
Starting analysis...
Basic block starts in 188ms!
0 functions from the exception directory...
79969 basic blocks, 2149 function starts detected...
Basic blocks in 296ms!
65545/79969 delayed blocks...
18244/65545 delayed blocks resolved (47301/79969 still left, probably unreferenced functions)
47301/79969 unreferenced blocks
5035 functions found!
Functions in 47ms!
Function ranges in 0ms!
Analysis finished!
4112 functions discovered!
Starting xref analysis...
72319 xrefs found in 156ms!
Starting analysis...
2154 called functions populated
[xAnalyzer]: Analysis completed in 1.435000 secs 
[xAnalyzer]: Execution Summary 
------------------------------- 
 - Defined Functions Detected: 0 
 - Undefined Functions Detected: 0 
 - VB DllFunctionCalls Stubs Detected: 0 
 - Total Functions Detected: 0 
 - Total Loops Detected: 0 
 - Total Comments Set: 0 
 - Total Labels Set: 0 
------------------------------- 
Analysis finished in 218ms!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant