5aLIVE
November 9th, 2005, 06:11
Hi, when debugging a program (with it's IDA map file loaded) I can see a call to a virtual function such as :
005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]
As expected, there is no comment string present until the EIP is at this instruction and the virtual table address pointer is calculated
Olly then displays a comment string like;
005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]
<Debugee.ParentClass:
erivedClass::MemberFunction>
After this call has been executed, the comment string is cleared.
Is there a hot key or something else I can use to make an interesting comment "stick"? Or can comments only be added manually with copy and paste?
Thanks for any help.
Regards,
5aLIVE.
005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]
As expected, there is no comment string present until the EIP is at this instruction and the virtual table address pointer is calculated
Olly then displays a comment string like;
005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]
<Debugee.ParentClass:

After this call has been executed, the comment string is cleared.
Is there a hot key or something else I can use to make an interesting comment "stick"? Or can comments only be added manually with copy and paste?
Thanks for any help.
Regards,
5aLIVE.