Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #3  
Old 02-20-2019, 06:43
Avalon Avalon is offline
Friend
 
Join Date: Jul 2018
Posts: 7
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 10 Times in 7 Posts
Avalon Reputation: 0
Well Ida has analyzed and defined in the stack setup:
Code:
int *v1; // edi
_DWORD *v2; // esi
_DWORD *v3; // eax
If you create a struct of 3 PDWORD's, and apply it on the stack at v1 i.e.
Code:
struct SomeStruct
{
    PDWORD pdwField1, 
    PDWORD pdwField2, 
    PDWORD pdwField3
}
Then Ida will remove that *v2 and *v3, and they will become struct members on the stack of SomeStruct.pdwField2 and SomeStruct.pdwField3 which you can define as any pointer type you want, with the struct you defined.
Reply With Quote
The Following User Says Thank You to Avalon For This Useful Post:
niculaita (02-20-2019)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Multiply by negative one chants General Discussion 8 02-08-2017 23:23
I need some suggestion about a site structure Hero General Discussion 4 04-30-2005 16:34
Need help with IDA and operand offsets Ecmhacker General Discussion 4 05-04-2003 10:20


All times are GMT +8. The time now is 00:20.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )