Timeline for COM interface methods
Current License: CC BY-SA 4.0
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Jul 7, 2020 at 7:44 | comment | added | Nuzzolilo | ComView doesn't seem to run. Can someone confirm if this works? | |
May 24, 2018 at 20:31 | history | edited | Remko | CC BY-SA 4.0 |
added wayback machine link to COMView
|
Sep 25, 2013 at 21:26 | comment | added | Rolf Rolles | Good answer! As Jason stated in his comment, once you know the type name for some variable, IDA will often know about it if it's a standard Windows COM type. In this case, you'd go to the ppv variable in the data section (highlight that token and press enter) and then press 'y' to enter the type IShellWindows *. From there, IDA's parameter-tracking algorithms will pick up many of the references and automatically and fill them in for you. (Those algorithms aren't perfect -- they can't be due to mathematical impossibility issues involved -- so you may still have to fill some in manually). | |
Sep 23, 2013 at 14:10 | history | edited | Jason Geffner | CC BY-SA 3.0 |
added 5 characters in body
|
Sep 22, 2013 at 17:30 | vote | accept | astrophonic | ||
Sep 22, 2013 at 16:58 | comment | added | Jason Geffner | I forgot to mention, you also might be able to tell IDA to interpret ppv as an IShellWindows* variable, in which case IDA will show you that [ppv+1C] is a call to IShellWindows::Count(). | |
Sep 22, 2013 at 16:54 | history | answered | Jason Geffner | CC BY-SA 3.0 |