Log in

View Full Version : virtual function comments


5aLIVE
November 9th, 2005, 06:11
Hi, when debugging a program (with it's IDA map file loaded) I can see a call to a virtual function such as :

005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]

As expected, there is no comment string present until the EIP is at this instruction and the virtual table address pointer is calculated

Olly then displays a comment string like;
005A6AD7 FF91 20010000 CALL DWORD PTR DS:[ECX+120]
<Debugee.ParentClass:erivedClass::MemberFunction>

After this call has been executed, the comment string is cleared.
Is there a hot key or something else I can use to make an interesting comment "stick"? Or can comments only be added manually with copy and paste?

Thanks for any help.
Regards,
5aLIVE.

5aLIVE
November 9th, 2005, 06:30
Or can I change the runtime comment to be a label? Either way would be useful. Perhpas there is a plugin available that can do this?

5aLIVE.

5aLIVE
November 9th, 2005, 06:31
Or can I change the runtime comment to be a label? Either way would be useful. Perhpas there is a plugin available that can do this?

5aLIVE.

5aLIVE
November 9th, 2005, 06:34
Repeat post please delete

Ricardo Narvaja
November 9th, 2005, 09:16
you can add a coment, right click in the line, and add coment manually.

Ricardo Narvaja

5aLIVE
November 9th, 2005, 09:31
Hi Ricardo, I've been entering them manually (the ; key), but I am lazy and wondered if there was a key I could press to do this automatically?

It's not a big problem, I just wondered if it is possible?

5aLIVE

Ricardo Narvaja
November 9th, 2005, 10:11
i don“t know sorry

Ricardo