How the MSVC Compiler Generates XFG Function Prototype Hashes

Published

2020-11-11 23:00

Collected

2026-07-08 12:27

---
id: 4447
title: "How the MSVC Compiler Generates XFG Function Prototype Hashes"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/how-the-msvc-compiler-generates-xfg-function-prototype-hashes.html"
published_at: "2020-11-11T23:00:00Z"
tags: ["windows", "reverse-engineering", "compiler", "control-flow-integrity", "cfg", "xfg"]
phying_url: "https://phying.com/item/4447"
lang: en
---

# How the MSVC Compiler Generates XFG Function Prototype Hashes

## Summary

A deep dive into how the MSVC compiler generates XFG (Xtended Flow Guard) function prototype hashes, the finer-grained successor to Windows CFG, based on IDA Pro and WinDbg analysis.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2020-11-11T23:00:00Z
- **Original:** https://blog.quarkslab.com/how-the-msvc-compiler-generates-xfg-function-prototype-hashes.html
- **Phying News:** https://phying.com/item/4447