View Single Post
  #4  
Old 03-05-2020, 10:14
computerline computerline is offline
Friend
 
Join Date: Jun 2014
Posts: 81
Rept. Given: 39
Rept. Rcvd 28 Times in 12 Posts
Thanks Given: 143
Thanks Rcvd at 125 Times in 50 Posts
computerline Reputation: 28
Quote:
Originally Posted by jonwil View Post
I am running IDA Pro 7.0.170914 along with HexRays x86 7.0.0.170914
I am running a fully up-to-date version of Windows 10.
When I try to run a program in IDA (or attach to an existing program) using the "local window debugger" debugger option, IDA crashes with an "error 1491". Is there a fix (other than spending thousands of dollars on the latest IDA version?)
This bug cause by win32_user.dll when use IDA 7.0 with Windows build > 16xxx, as it build with asset from sdk, just comment out the assert and rebuild win32_user.dll (QASSERT(1491, size() < 2) or patch to nopout the check in binary file.

Code:
// winbase_debmod.cpp
// Line 388
// ......
bool ntdll_vec_t::add(eanat_t addr, size_t sz, HANDLE h)
{
  if ( has(addr) )
    return false;

  // max number of ntdlls: ntdll32.dll and ntdll.dll
  //QASSERT(1491, size() < 2);
  ntdll_range_t &r = push_back();
  r.start = addr;
  r.end = addr + sz;
  r.handle = h;
  return true;
}
Fix binary file
https://mega.nz/#!xdcnyQZK!MzO9dQqPZ...DKx5ONkcNGD1ZU

The newer version doen't got this problem.
Reply With Quote
The Following 5 Users Say Thank You to computerline For This Useful Post:
chants (03-05-2020), deepzero (03-05-2020), niculaita (03-05-2020), RiRye (03-10-2020), zeffy (03-05-2020)