Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
IOKit
How to find a IOSomeClassMetaClass
Find string "IOSomeClass"
Find a (pc relative) code reference to string "IOSomeClass", this is a IOSomeClass::MetaClass constructor.
Follow the code below for a value loaded into r0 and then stored in the newly constructed object, this is the votable for IOSomeClass::MetaClass.
Above that votable is the votable for OSSomeClass.