How to batch update/rename a struct from IDA-View

Hi folks,

So assuming I am working on reversing my virtual tables, which I found in the assembly and named the functions.

Then I am making a structure out of them to become a vtable representation, where i just batch-select the entire array of offset fields and choose “Create structure”. That works great, it creates a structure, fills out the names and the parameters.

However, if at any point later i have to rename a whole bunch of these functions, and I would typically do it via renaming the actual functions, since I m mostly sitting in the dissasembly, I find it challenging to forward these changes to the structure.

I can easily do the opposite - getting names from the structure into the VTable by using “Copy field into to pointers” with “Rename all names“, but it doesnt seem i can do it the other way, other than renaming fields manually

See hrtng/doc/virtual-calls.md at master · KasperskyLab/hrtng · GitHub. It will help you with creating the vtable structures. I believe that hrtng will also synchronize them on rename. Both ways.

@Milanek thats for the Pro version, right?

I was hoping its just something stupid i was doing on my end. Im using IDA Free though with the online dissasembler, im not sure it supports plugins?