PDA

View Full Version : Tutorial Request IDA Function Indexes



shaneod
08-16-2011, 09:14 AM
I found CHLClient::GetAllClasses in client.dylib but I'm not sure how I'm supposed to get its index.
Anyone know how I'd go about finding the index? Apparently its 8 but I'm not sure how they found it.

darkcat
08-16-2011, 09:22 AM
I found CHLClient::GetAllClasses in client.dylib but I'm not sure how I'm supposed to get its index.
Anyone know how I'd go about finding the index? Apparently its 8 but I'm not sure how they found it.
you're an idiot. Learn vtable structures and memory layout.

Sköll
08-16-2011, 09:27 AM
The links in this thread seem useful
http://www.gamedeception.net/threads/22076-Recontructing-virtual-functions-offset?p=148476&highlight=#post148476

Also notice who the OP is

lev1ath4n
08-16-2011, 09:36 AM
Open up IDA again and locate GetAllClasses:

http://www.gamedeception.net/attachment.php?attachmentid=4051&d=1313504455

then click on the Function so that it looks like mine.
Do a CTRL + X to show the references.

Click OK

http://www.gamedeception.net/attachment.php?attachmentid=4052&d=1313504462

there is the vtable for the Client, and as you can see it's in the 9th position.

shaneod
08-16-2011, 01:44 PM
Worked perfectly, thanks. At the start I thought it wasn't working but I waited and about 25 mins later it found the xrefs so I could search.
EDIT: Updated IBaseClientDLL fully now. Thanks.