View Single Post
  #3  
Old 02-20-2019, 06:43
Avalon Avalon is offline
Friend
 
Join Date: Jul 2018
Posts: 7
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 10 Times in 7 Posts
Avalon Reputation: 0
Well Ida has analyzed and defined in the stack setup:
Code:
int *v1; // edi
_DWORD *v2; // esi
_DWORD *v3; // eax
If you create a struct of 3 PDWORD's, and apply it on the stack at v1 i.e.
Code:
struct SomeStruct
{
    PDWORD pdwField1, 
    PDWORD pdwField2, 
    PDWORD pdwField3
}
Then Ida will remove that *v2 and *v3, and they will become struct members on the stack of SomeStruct.pdwField2 and SomeStruct.pdwField3 which you can define as any pointer type you want, with the struct you defined.
Reply With Quote
The Following User Says Thank You to Avalon For This Useful Post:
niculaita (02-20-2019)