Topic created on: September 29, 2009 13:14 CDT by Nadya .

Hi

I have this problem that I need to analyze piece of AMD64 assembly code. First process lets call it A creates and debugs process B using CreateProcessA (DEBUG_PROCESS+ DEBUG_ONLY_THIS_PROCESS), WaitForDebugEvent, ContinueDebugEvent. Piece of code that I want to analyze is inside B process and I can't analyze it statically it has to be dynamically. I was trying get inside B process using WinDbg(kernel debugging) setting int 3h inside B process but WinDbg refuses to debug debugged process, next I was trying to break on B process API's but no luck here either. Please can someone help me out, how to break inside B proces? I'm new when it comes to windbg.