Skip to content
Visual C++ RTTI Inspection
blog.quarkslab.com | research | #windows | #reverse-engineering | #binary-analysis | #c | #rtti | #vftable
Summary
Recovering Visual C++ class information from RTTI: the .data structures linking vftables to mangled class names (.?AV), and how decoding them eases analysis of virtual calls in compiled C++ binaries.
- Published
- Collected