As part of an assignment, I am delving into the world of Internet Explorer, and am trying to figure out exactly what class(es) are being allocated on the heap.
mshtml!CEventObj::GenericGetElement() method, the
eax register points to an instance of a class,
edi points to the object it references, and
esi points to the vftable.
This being said, I inserted a breakpoint that would list these registers each time through the function, and they always point to the same vftable.
The vftable in question is
mshtml!CBodyElement, but does this actually mean that all these instances are of the
CBodyElement, or could they be for classes derived from
If they are from derived classes, how do I determine the actual classes being allocated ?