dbmeans “define byte”, i.e. a reservation of 1 byte of memory,dwmeans “define word” (2 bytes of memory),ddmeans “define double-word” (4 bytes of memory).- in graph view, edges represent branches between nodes. blue for unconditional, green for true, and red for false branch taken
- can group nodes
- creating structs with padding, say you see an undefined field being used, and decompiler says, to edit your struct accordingly:
Initial struct and field is atpad[y]and typeintand where0 <= y < x, y is index, x is length, it’s length in struct definitions, and index in dereferencing array:struct example { char pad[x]; };Now becomes:
struct example { char pad[y]; int field_name; char pad[x-(y+sizeof(field_name))]; }you can create enums and structs
can parse c header files to bring in type information
Mto select what the magic number means
Ida Notes
April 25, 2026