Hex-Rays and virtual functions

[jonwil]

Does anyone know the magic you have to do to get virtual functions to work in Hex-Rays, i.e. where it recognizes it as a call to abc->def(xyz) instead of something like return (*(int (__stdcall **)(signed int, signed int))(v3 + 56))(3, 1);

[Git]

As a start I would think you would have to define a struct for the class and choose the function as the struct offset for the 'n' in call(eax + n). These are the sort of things you would expect to be in the manual if you had paid £'0000s for it.

Anybody know what __SETO__ is ?

Git

[jonwil]

Actually, there is a manual (or something resembling one) here:
http://www.hex-rays.com/manual/

[upb]

it works like in normal ida without hexrays, you define the vtable for each class as a struct and then define the class itself (as struct) so that the first member of it is a pointer to the vtable struct. Then define each instance of that class as pointer to class struct.

And as ReWolf mentioned to me there is a way in IDA 5.2 to define struct members as pointers to functions _with function signature_.

[NeOXOeN]

i have one simple question did anyone make patch for Hex-Rays splash screen alwasy opening up when you start IDA maybe??
its quite annoying alwasy pressing yes..

i didnt have time to do it myself yet :P

[aliali]

Originally Posted by NeOXOeN

i have one simple question did anyone make patch for Hex-Rays splash screen alwasy opening up when you start IDA maybe??
its quite annoying alwasy pressing yes..

i didnt have time to do it myself yet :P

See the picture

There is a little check box in the lower left. Uncheck (or check I don't remember) it.