During analysis you may frequently encounter a scenario such as:

later on ebp is used as a base offset for computing relative addresses, etc.
I run across this method:
http://malwareanalysis.com/CommunityServer/blogs/geffner/archive/2006/03/17/11.aspx
but I got stuck at the last step. I can't get IDA to interpret a register (edi in that case) as a structure offset. Any ideas will be appreciated

you dont transform register into structures, but offsets applied to them in structures.
Check your right-click menu and you find it there.
(i forgot, but i am sure you missed: click the offset part!)

On an expression which uses ebp, press Ctrl-R and enter the ebp value (the address of pop ebp instruction) into Base Address field. Optionally, check "Treat base as plain number", this will keep down the number of unnecessary xrefs.

Hey, stop calling me in the middle of the night like that!

Thanks for the replies, 66% of them were helpfull

rofl

>>Thanks for the replies, 66% of them were helpfull
delta, i unpucked: so your is 3d replie, so your post is that 33%, so .... ya ya ;-D

PS. hsit! & this was my 1000 post ((:

Lowkick gets an A in diplomacy

That's what you get for being overly case-insensitive.