Double click on offset opens window with every places where this type has been extracted.Types with ITALIC font have been found as void * arguments and are not used in shape recognition.Visited functions are marked with cross and color: Double click opens list with all virtual functions that helps to visit them. Types with BOLD font are virtual tables.Than recursively applies scanner to variables and functions that get our structure pointer as argument. First recursively touches functions to make Ida recognize proper arguments (it happens only once for each function during session).

Right Click on variable -> Deep Scan Variable.

Recognizes fields usage within current function

Right Click on variable -> Scan Variable.

The place where all collected information about scanned variables can be viewed and modified. Was introduced at ZeroNights 2016 (slides).īest to use with Class Informer plugin, because it helps to automatically get original names of the classes.

Also helps to transform decompiler output faster and allows to make some stuff otherwise impossible. Plugin assists in creation classes/structures and detection virtual tables.

Ida pro plugin