The analysis starts but does not show any results in a known vulnerable binary. The script stays stuck on the final part below. According to the script after finding a vuln func it should print[1] the x refs to it then jmp[2] to it but it does not seem to work.

Ref:
1. print "[+] Found %d ref(s) to %s" % (count, func_name)
2. print "[*] Jumping to 0x%08x" % self.items[index][2]

Output console:
[] Searching for sprintf
[] Searching for strcpy
[] Searching for strcat
[] Searching for memcpy
[] Searching for gets
[] Searching for printf
[*] Searching for scanf