---
id: 4584
title: "Visual C++ RTTI Inspection"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/visual-c-rtti-inspection.html"
published_at: "2013-07-12T22:00:00Z"
tags: ["windows", "reverse-engineering", "binary-analysis", "c", "rtti", "vftable"]
phying_url: "https://phying.com/item/4584"
lang: en
---

# Visual C++ RTTI Inspection

## Summary

Recovering Visual C++ class information from RTTI: the .data structures linking vftables to mangled class names (.?AV), and how decoding them eases analysis of virtual calls in compiled C++ binaries.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2013-07-12T22:00:00Z
- **Original:** https://blog.quarkslab.com/visual-c-rtti-inspection.html
- **Phying News:** https://phying.com/item/4584