I'm relatively new to scripting environments in disassemblers. What I am looking for is a way to dump all of the vtable methods from a C++ disassembly in such a way that I can access them later for further programmatic analysis. My intention is to pass them to another framework in order to do symbolic execution.

Based on my naive understanding of the available options I am going to assume the easiest way to do this is IDA python.

In IDA Python how can I gather the addresses and bodies of all methods contained in vtables?

Extra Credit: The same for Binary Ninja or any other disassembler platform.

  • How that vtable is exported from the module? Is that a COM interface? – Biswapriyo May 29 '19 at 9:41
  • 1
    I'm asking about virtual method tables in C++, modules and Windows specific COM objects aren't necessarily involved. – baordog May 29 '19 at 19:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.