DEbug x64 application using IDA PRO 6.1

debugging 64-bit reverse-engineering ida bochs
dandan picture dandan · Jul 27, 2014 · Viewed 8.8k times · Source

I have IDA PRO 6.1 - (i am unable to install the latest version)

I am trying to debug x64 application with bochs debugger or windgb.

I did the following:

  1. installed Bochs-2.4.6
  2. Installed both x86&x64 version of the windows debugger.

  3. Made sure the default path to the debugger for Windows in ida.cfg is pouting to:

    DBGTOOLS = "C:\\Program Files (x86)\\Windows Kits\\8.1\\Debuggers\\x86\\";

I cannot ebug x64 with any debugger and i would appreciate a little guidance as to the right way to configure the debuggers.

I am unable to debug any x64 application. When i set the debugger to bochs it starts running and then gets stuck with errors like:

enter image description here

When I try to use windgb it keeps reporting that:

Could not initialize WinDgb engine...with error: The specified procedure could not be found.(000007F)...

When i click OK I get:

"The File can't be loaded by the debugger plugin. Please verify that the parameters are valid."

What are the right parameters?

Is there a connection string when I am debugging a local application. In the IDA help files it says to leave the Connection string empty for local application, but even when I select the x64 dbgsrv.exe and set the default connection string is does not work.

Answer

metz picture metz · Jul 28, 2015

I had the same problem, adding the windbg x86 location to the PATH environment variable solved the issue for me: 

PATH = %PATH%;C:\Program Files (x86)\Windows Kits\10\Debuggers\x86

Related questions

Debugging dump of 32-bit process captured on 64-bit machine

I recently received a 64-bit crash dump from a customer. Our processes are all 32-bit, but the customer's machine is running x64 Server 2008. Visual Studio (both 2008 and 2010 Express) is telling me that I have to use the 64-bit version of …

Read More
How to debug with Visual C++ 6 on Windows 7 x64?

Surely the answer will be "you can't" or "use XP mode", but I'd like to know if it it possible. The issue I have is that whenever I debug some application and hit a breakpoint, when I stop the debugger …

Read More
How do I remedy "The breakpoint will not currently be hit. No symbols have been loaded for this document." warning?

A C# desktop application on the express edition worked, but then it didn't work 5 seconds later. I tried the following: Ensure debug configuration, debug flag, and full debug information are set on all assemblies. Delete all bin and obj folders …

Read More