IDA Pro定义新结构（Define a new structure）

Action name:AddStruct

This command defines a new structure or a new union.The new structure is created with zero length.You will have to add structure members using structure manipulation commands.

If the entered structure name denotes a standard structure type from a loaded type library,then its definition will be automatically used.In this case,the value of the'create union'checkbox will be ignored.

This command is available when you open a structures window.

You can add new members to the structure using the following commands:

command hotkey

-------------

make data D

make strlit A

make array*

rename N

You may also insert/delete undefined bytes into the middle of the structure by using expand and shrink commands.

"Create before current structure"means that the new structure will be placed immediately before the current structure type.Otherwise,the new structure is placed after the current structure.

"Don't include in the list"means that the structure will not be included in the list of the structures which appears when the user applies the structure definition,for example,when he creates a variable of this structure type.We recommend to mark this checkbox when you have defined all variables of this structure type and want to reduce the number of choices in the list.

以下为中文翻译：

Action name:AddStruct

此命令定义一个新结构或一个新并集。创建的新结构长度为零。您必须使用结构操作命令添加结构成员。

如果输入的结构名称表示加载的类型库中的标准结构类型，则将自动使用其定义。在这种情况下，“创建联合”复选框的值将被忽略。

打开结构窗口时，此命令可用。

您可以使用以下命令向结构添加新成员：命令热键---------make data D make strlit a

make array*rename NY

您也可以插入/删除未定义的字节通过使用展开和收缩命令将其插入结构的中间。

“在当前结构之前创建”意味着新结构将直接放置在当前结构类型之前。否则，新闻

结构将放置在当前结构之后。

“不包括在列表中”意味着该结构将不包括在用户应用结构定义时出现的结构列表中，例如，当他创建此结构类型的变量时。我们建议您在定义了此结构类型所有变量并希望减少列表中的选项数量时，标记此复选框。