5

Bit of a noob question, I'm working through some examples on crackmes.

In Ollydbg and x64dbg, in the stack, disassembler and registry windows, there are texts to show values of memory locations, for instance:

Ollydbg descriptions

I would have thought IDA would have had this information readily available in the debugger, however it seems the user has to hover over addresses to view it.

enter image description here

Is there a way to display this available in IDA? It is much more useful in Olly/x64 to have the text, rather than debug070:7EFDE000 etc

Thanks

1

Unfortunately there's not such option built into IDA, however you can write an IDAPython script for that, using some UI and/or DBG hooks.

By hooking any time the debugger pauses and scanning register/stack addresses and adding comments (which will be visible).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.