Flag: Tornado! Hurricane!

 Forums >>  Debuggers  >>  Using IDA PRO to debug 64 bit programs in Win 7 64 bit

Topic created on: January 13, 2010 14:54 CST by DrWho .

Hello, I have tried to run the debugger in IDA Pro which I am running on Win 7 64 bit but all I ever get is an error message "Failed to create process with error: The request is not supported.Command "ProcessStart" failed". This was using the Wndbg debugger that comes with IDA Pro. I downloaded the actual Wndbg software for 64 bit programs but I can't seem to get IDA Pro to work with it. I am hoping someone can tell me which debugger I should use to debug 64 bit windows 7 programs that will work with IDA PRO v5.5.

Thanks in advance

  debjit625     January 15, 2010 15:13.31 CST
Not sure if its the case may be, IDA Pro consist of two different version 32bits and 64bits for application running under 64bits system you have to use the 64bit version.Or may be its because of Windows 7.

  Silkut     January 16, 2010 12:57.05 CST
IDA runs fine under Windows 7 32bits, as said debjit625 the 64bits version is a separated binary that comes along the classic one (idag64.exe). If this still doesn't work, maybe its your target..

Regards.

  sikke   January 17, 2010 12:30.48 CST
IDAG64.exe is a 32 bit binary (but it disassembles 64 bit code). So it cannot attach to a 64 bit process on that same machine. AFAIK you need to debug a 64 bit app from another (virtual) machine (on which you use IDAG64.exe to load the app) and then run e.g. WinDbg on the target machine and connect the IDAG64.exe to the remote debugger. See the HexRays site for details.

regards

Note: Registration is required to post to the forums.

There are 31,322 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
hi!
Jul/01
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit