Map a C++ class's vtable and inheritance chain in a running process via RTTI.
npx skills add https://github.com/vzco/arc-probe --skill discover-class
Please help me install this Agent Skill. Skill: discover-class Source: https://github.com/vzco/arc-probe/tree/main/plugins/arc-probe/skills/discover-class Command: npx skills add https://github.com/vzco/arc-probe --skill discover-class
Quickly locate and map a C++ class in a live process using RTTI, then reveal its vtable, getters, and a basic layout for labeling in the GUI.
Run the tool with a class name to begin mapping its RTTI, vtable, and inheritance.
High-intent search queries and answers about installing and using this skill.
To find a C++ class in a running process using RTTI, you can use a class mapping tool that searches modules by name, locates the vtable, and reveals key virtual functions to identify the class structure.
Mapping a C++ vtable and inheritance tree during reverse engineering is best done by leveraging RTTI data to locate the class, extract its vtable, and build the full inheritance chain of related classes.
Yes, you can label C++ class fields in a disassembler GUI by mapping the vtable and identifying key virtual functions, which allows you to derive a basic layout and apply GUI labels to the structures.
Yes, mapping a C++ class via RTTI requires the target binary to be loaded with modules, RTTI access enabled, and memory inspection capabilities to successfully locate the class and disassemble its vtable.
You need RTTI access to map C++ virtual functions because RTTI provides the necessary type metadata to locate the class by name across modules, enabling the extraction of its vtable and field layout.
vzcoMap live memory data structures via RTTI discovery in the ARC Probe GUI.
vzcoDiscover and label all functions in a loaded module using exports, RTTI, and .pdata data.
HLND2TLocate a function's vtable offset and index from its address in IDA Pro.
vzcoOrchestrate end-to-end unknown module investigation using ARC Probe capabilities.
