get-vtable-address

Retrieve vtable address, symbol, size, and virtual function count for a class in a binary.

60|11|Updated Jan 23, 2026
One-click install
npx skills add https://github.com/hzqst/CS2_VibeSignatures --skill get-vtable-address
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: get-vtable-address
Source: https://github.com/hzqst/CS2_VibeSignatures/tree/main/.claude/skills/get-vtable-address
Command: npx skills add https://github.com/hzqst/CS2_VibeSignatures --skill get-vtable-address

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the process of finding the virtual function table (vtable) address and size for a given class name within a binary, which is crucial for reverse engineering and dynamic analysis.

Core Features & Use Cases

  • VTable Discovery: Locates the exact virtual address and size of a class's vtable.
  • Platform Support: Handles both Windows and Linux naming conventions for vtables.
  • Method Flexibility: Supports direct symbol lookup and a fallback method using RTTI information.
  • Use Case: When analyzing a C++ game executable, you need to understand the object-oriented structure. Use this Skill to quickly find the vtable for CCSPlayerPawn to inspect its virtual methods.

Quick Start

Use the get-vtable-address skill to find the vtable address for the class named CGameRules.

Frequently Asked Questions about get-vtable-address

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the vtable address for a specific C++ class in a binary?

To find the vtable address for a specific C++ class, you can use the get-vtable-address Skill. It retrieves the virtual function table address, symbol, size, and number of virtual functions by looking up class names in the binary's symbols.

Does vtable address lookup work with both Windows and Linux binaries?

Yes, vtable address lookup works with both Windows and Linux binaries. The Skill handles platform-specific naming conventions for vtables and utilizes a fallback method using RTTI information if direct symbol lookup fails.

How does RTTI help locate a virtual function table when symbols are missing?

RTTI helps locate a virtual function table by serving as a fallback method when direct symbols are stripped. The Skill uses Run-Time Type Information to infer and retrieve the vtable address and size for the specified class.

Can I analyze C++ game executables to find class virtual functions in IDA Pro?

Yes, you can analyze C++ game executables to find class virtual functions in IDA Pro. The Skill requires the IDA Pro MCP plugin to execute and quickly discover vtables for object-oriented structures like CCSPlayerPawn.

What is the best way to get the size of a class vtable during reverse engineering?

The best way to get the size of a class vtable during reverse engineering is to use an automated lookup tool. This Skill returns the exact virtual address, vtable size, and total number of virtual functions for a specified class name.