---
id: 2074
title: "Devirtualizing C++ with Binary Ninja"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/"
published_at: "2017-02-13T11:50:32Z"
tags: ["reverse-engineering", "static-analysis", "binary-ninja", "c-plus-plus", "llil", "vtable"]
phying_url: "https://phying.com/item/2074"
lang: en
---

# Devirtualizing C++ with Binary Ninja

## Summary

A Binary Ninja plugin example resolves C++ virtual calls: LLIL finds vtable pointers in constructors, register assignments are tracked, and the vtable offset computed to jump to the target function.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2017-02-13T11:50:32Z
- **Original:** https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/
- **Phying News:** https://phying.com/item/2074