-
The code I'm reversing takes address of the structure + 0x10 and, probably because of some optimizations, uses this relative pointer to access structure fields. Is it possible to have this displayed correctly in decompilation? Iirc ghidra allows creating relative pointer typedefs for that. You can create a type for a pointer with offset. |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
You probably want to use either |
Beta Was this translation helpful? Give feedback.
-
Works perfectly. :D |
Beta Was this translation helpful? Give feedback.
You probably want to use either
__offset(T, N)
on the parameter/variable or__ptr_offset(N)
on the struct definition.