Skip to main content
xAnalyzer provides command-line commands that can be executed in the x64dbg command window. These commands offer quick access to analysis functions and can be bound to custom hotkeys for efficient workflow.

​
Analysis Commands

​
xanal selection

Performs a fast analysis over a selected range of instructions in the disassembly window.
​
xanal selection
command
Syntax:
xanal selection
Description: Analyzes only the instructions you have selected in the disassembly window. This provides quick, targeted analysis without processing the entire function or module.Usage:
  1. Select multiple instructions in the disassembly window
  2. Execute xanal selection in the command bar
  3. Wait for analysis to complete
Features:
  • Fast analysis of specific code regions
  • Supports multiple selected calls
  • Processes API definitions and arguments
  • Detects loops within selection
Example:
# Select 10-20 instructions in disassembly, then:
xanal selection
You can also access this via the right-click menu: xAnalyzer → Analyze Selection

​
xanal function

Analyzes an entire function based on the currently selected instruction.
​
xanal function
command
Syntax:
xanal function
Description: Automatically discovers and analyzes the entire function containing your currently selected instruction. xAnalyzer processes all instructions from function prolog to epilog (RET).Usage:
  1. Place cursor on any instruction within a function
  2. Execute xanal function in the command bar
  3. Analysis processes entire function block
Features:
  • Automatic function boundary detection
  • Analyzes all calls within the function
  • Detects all loops in the function
  • Processes arguments for all API calls
Example:
# Navigate to any instruction in a function, then:
xanal function
This is ideal for analyzing a specific function without processing the entire module.

​
xanal module

Performs a complete analysis of the entire current module.
​
xanal module
command
Syntax:
xanal module
Description: Launches a full analysis over the entire module. The depth of analysis depends on the Extended Analysis configuration option.Behavior:
  • Extended Analysis OFF: Analyzes main code sections and entry point regions
  • Extended Analysis ON: Analyzes the entire code section comprehensively
Usage:
xanal module
Features:
  • Complete module analysis
  • All API calls detected and commented
  • All functions analyzed
  • All loops detected
  • VB DllFunctionCall stubs detected
With Extended Analysis enabled, this command may take considerable time on large executables and consume significant memory.
Output: After completion, xAnalyzer prints an execution summary to the log window:
[xAnalyzer] Analysis Summary:
- Defined calls detected: 245
- Undefined calls detected: 12
- DLL function calls detected: 8
- Loops detected: 34
- Total comments set: 312
- Total labels set: 89

​
Removal Commands

These commands remove previous xAnalyzer analysis data from your disassembly.

​
xanalremove selection

Removes analysis data from the selected instruction range.
​
xanalremove selection
command
Syntax:
xanalremove selection
Description: Removes all xAnalyzer comments, labels, and annotations from the selected instructions.Usage:
  1. Select the instructions to clean
  2. Execute xanalremove selection
Removes:
  • Auto-generated comments (if configured)
  • Auto-generated labels (if configured)
  • Loop markers
  • Argument annotations
Example:
# Select instructions, then:
xanalremove selection

​
xanalremove function

Removes analysis data from the entire current function.
​
xanalremove function
command
Syntax:
xanalremove function
Description: Clears all xAnalyzer analysis data from the function containing the current instruction.Usage:
# Navigate to any instruction in the function, then:
xanalremove function
Removes:
  • All function API call comments
  • Function labels
  • Loop detection markers
  • Argument information

​
xanalremove module

Removes all analysis data from the entire module.
​
xanalremove module
command
Syntax:
xanalremove module
Description: Removes all xAnalyzer analysis data from the current module, effectively reverting to the pre-analysis state.Usage:
xanalremove module
This operation cannot be undone. Consider saving your database before removing extensive analysis data.
Removes:
  • All auto-generated comments (if configured)
  • All auto-generated labels (if configured)
  • All loop markers
  • All argument annotations
  • All function tracking data

​
Help Command

​
xanal help

Displays help information in the log window.
​
xanal help
command
Syntax:
xanal help
Description: Shows available commands and brief usage information in the x64dbg log window.

​
Setting Hotkeys

You can bind xAnalyzer commands to custom keyboard shortcuts for faster access:
1

Open Shortcuts Settings

In x64dbg, go to Options → Preferences → Shortcuts
2

Find Plugin Commands

Navigate to the Plugins section and locate xAnalyzer commands
3

Assign Keys

Click on a command and press your desired key combination
4

Save

Click OK to save your hotkey configuration
Ctrl+Shift+X  →  xanal selection
Ctrl+X        →  xanal function
Ctrl+Alt+X    →  xanal module

​
Command Usage Examples

# Navigate to a function and analyze it
xanal function

​
Workflow Tips

Incremental Analysis

Start with xanal function on suspicious functions, then expand to xanal module if needed.

Selective Cleanup

Use xanalremove selection to clean specific areas before re-analyzing with different settings.

Hotkey Workflow

Bind commands to hotkeys for rapid analysis while stepping through code.

Command Chaining

Combine commands in scripts for automated analysis workflows.
All commands respect the current configuration options. For example, if Extended Analysis is enabled, xanal module will perform a more comprehensive analysis.

​
Legacy Commands (Deprecated)

The following commands are deprecated but may still work in older versions:
  • xanal exe (replaced by xanal module)
  • xanalremove exe (replaced by xanalremove module)
Use the new module variants instead of exe for better compatibility with future versions.

Build docs developers (and LLMs) love

Get started for freeTalk to us