View Full Version : Tutorial Request IDA Function Indexes
shaneod
08-16-2011, 09:14 AM
I found CHLClient::GetAllClasses in client.dylib but I'm not sure how I'm supposed to get its index.
Anyone know how I'd go about finding the index? Apparently its 8 but I'm not sure how they found it.
darkcat
08-16-2011, 09:22 AM
I found CHLClient::GetAllClasses in client.dylib but I'm not sure how I'm supposed to get its index.
Anyone know how I'd go about finding the index? Apparently its 8 but I'm not sure how they found it.
you're an idiot. Learn vtable structures and memory layout.
Sköll
08-16-2011, 09:27 AM
The links in this thread seem useful
http://www.gamedeception.net/threads/22076-Recontructing-virtual-functions-offset?p=148476&highlight=#post148476
Also notice who the OP is
lev1ath4n
08-16-2011, 09:36 AM
Open up IDA again and locate GetAllClasses:
http://www.gamedeception.net/attachment.php?attachmentid=4051&d=1313504455
then click on the Function so that it looks like mine.
Do a CTRL + X to show the references.
Click OK
http://www.gamedeception.net/attachment.php?attachmentid=4052&d=1313504462
there is the vtable for the Client, and as you can see it's in the 9th position.
shaneod
08-16-2011, 01:44 PM
Worked perfectly, thanks. At the start I thought it wasn't working but I waited and about 25 mins later it found the xrefs so I could search.
EDIT: Updated IBaseClientDLL fully now. Thanks.
Powered by vBulletin® Copyright © 2013 vBulletin Solutions, Inc. All rights reserved.