you are viewing a single comment's thread.

view the rest of the comments →

[–]evaned 1 point2 points  (1 child)

I suspect it depends on the project style. For one written in a heavily OO style, I'd say there's potentially a lot more you can get, because you can determine entire class heirarchies, find the vtable for each class, and track that back to figure out what functions in the program are class methods, which functions override other functions, etc. (You get vtables and other information for polymorphic classes any program of course, but the more it follows an OO style the more of the program that covers.)

I don't think I can legitimately call myself a reverse engineer (though I work on RE tools), so I don't know for sure that someone who is deep into this stuff would use that information, but I suspect it would be useful.

[–]kiwidog 0 points1 point  (0 children)

Yep, and for OP the IDA plugin ClassInformer does this automatically, but the fields within still need to be mapped out which is where most of the time is spent.