Exetools  

Go Back   Exetools > General > x64 OS

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-13-2013, 14:07
moro3391 moro3391 is offline
Friend
 
Join Date: Jan 2013
Posts: 67
Rept. Given: 2
Rept. Rcvd 18 Times in 11 Posts
Thanks Given: 1
Thanks Rcvd at 44 Times in 22 Posts
moro3391 Reputation: 18
Problem to debugg a DLL file under 64 bit

Hi everybody
I've got a DLL file under 64 bit and i want to debug it with olly but unfortunately Olly doesn't accept the file because is 64 bit and just accepting the files under 32bit. so i'm asking if any plugin file to allow olly to debug files under 64 bit or any olly working under 64 bit.
thank you
Regards,
Reply With Quote
  #2  
Old 01-13-2013, 16:43
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,066
Rept. Given: 332
Rept. Rcvd 223 Times in 115 Posts
Thanks Given: 234
Thanks Rcvd at 512 Times in 288 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by moro3391 View Post
Hi everybody
I've got a DLL file under 64 bit and i want to debug it with olly but unfortunately Olly doesn't accept the file because is 64 bit and just accepting the files under 32bit. so i'm asking if any plugin file to allow olly to debug files under 64 bit or any olly working under 64 bit.
thank you
Regards,
Up to now Olly (older version 1.10 and next generation - 2.0 beta) are 32 bit only debuggers......

should I continue? as far as I remember, 32 bit process can't load 64 bit dlls, sorry

Ida Pro, have you heard about this before ? Just give it a try, it could handle 64 bit PE well.
Good luck
Reply With Quote
  #3  
Old 01-14-2013, 18:30
Av0id Av0id is offline
VIP
 
Join Date: Jan 2006
Posts: 399
Rept. Given: 112
Rept. Rcvd 111 Times in 69 Posts
Thanks Given: 0
Thanks Rcvd at 15 Times in 15 Posts
Av0id Reputation: 100-199 Av0id Reputation: 100-199
windbg may help you also
Reply With Quote
  #4  
Old 01-14-2013, 23:26
sendersu sendersu is offline
VIP
 
Join Date: Oct 2010
Posts: 1,066
Rept. Given: 332
Rept. Rcvd 223 Times in 115 Posts
Thanks Given: 234
Thanks Rcvd at 512 Times in 288 Posts
sendersu Reputation: 200-299 sendersu Reputation: 200-299 sendersu Reputation: 200-299
Quote:
Originally Posted by moro3391 View Post
I've heard about IDA PRO but i have no idea how to debug with it,i will find out about it.
all and even more
http://www.hex-rays.com/products/ida/debugger/index.shtml
Reply With Quote
  #5  
Old 02-19-2013, 04:28
arlequim's Avatar
arlequim arlequim is offline
IBMSecuritySystemsXForce
 
Join Date: Feb 2009
Location: Punta Entinas-Sabinar, ALMERIMAR
Posts: 292
Rept. Given: 51
Rept. Rcvd 317 Times in 104 Posts
Thanks Given: 44
Thanks Rcvd at 185 Times in 61 Posts
arlequim Reputation: 300-399 arlequim Reputation: 300-399 arlequim Reputation: 300-399 arlequim Reputation: 300-399
Today the magic duo under x64 platform are IDA (disassembler with integrated debugger as well and bochs extension) + WinDBG (debugger ring0/3). The last one is very powerful but its interface is not friendly at all. Just to know it better, read this document. Good luck!
__________________
<<< The L10n won't give up >>>
Reply With Quote
The Following User Gave Reputation+1 to arlequim For This Useful Post:
nikkapedd (02-20-2013)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Media Descriptor File (MDF/MDS) file format NimDa2k General Discussion 0 03-22-2009 16:49


All times are GMT +8. The time now is 21:57.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )