Last updated
Last updated
You can use IDA to interactively define and manipulate structures in the disassembly.
Consider this simple sample C program:
Here is the disassembly with no structures defined, as IDA automatically generates it:
In order to use meaningful names instead of numbers, we open the structure window and press insert to define a new strcture type. Structure members are added with the D key for data and the A key for ASCII strings. As we add new structure members, IDA automatically names them. You can change any member’s name by pressing N.
Finally, the defined structure type can be used to specify the type of an instruction operand. (menu Edit|Operand types|Struct offset).