Skip to main content

Timeline for COM interface methods

Current License: CC BY-SA 4.0

7 events
when toggle format what by license comment
Jul 7, 2020 at 7:44 comment added Nuzzolilo ComView doesn't seem to run. Can someone confirm if this works?
May 24, 2018 at 20:31 history edited Remko CC BY-SA 4.0
added wayback machine link to COMView
Sep 25, 2013 at 21:26 comment added Rolf Rolles Good answer! As Jason stated in his comment, once you know the type name for some variable, IDA will often know about it if it's a standard Windows COM type. In this case, you'd go to the ppv variable in the data section (highlight that token and press enter) and then press 'y' to enter the type IShellWindows *. From there, IDA's parameter-tracking algorithms will pick up many of the references and automatically and fill them in for you. (Those algorithms aren't perfect -- they can't be due to mathematical impossibility issues involved -- so you may still have to fill some in manually).
Sep 23, 2013 at 14:10 history edited Jason Geffner CC BY-SA 3.0
added 5 characters in body
Sep 22, 2013 at 17:30 vote accept astrophonic
Sep 22, 2013 at 16:58 comment added Jason Geffner I forgot to mention, you also might be able to tell IDA to interpret ppv as an IShellWindows* variable, in which case IDA will show you that [ppv+1C] is a call to IShellWindows::Count().
Sep 22, 2013 at 16:54 history answered Jason Geffner CC BY-SA 3.0