Virtual method table detection correction

[MICRDEV]

Hello!

vtables are not detected automatically in my case. Is there a way to tweak the detection, so I don't need to define each one manually?

Here is a example of vtable which wasn't detected:

I'm sure that starting from 0x8d93a8 there are vtable methods pointers.

[psifertex]

Can you show a bit more about the code that references that jump table (or even better, attach the binary? put it in a zip if it's not sensitive). These sorts of failures happen when there's a failure of the possible value set to track the ranges the jump table could be.

[MICRDEV]

it is referenced in the constructor, like this

[psifertex]

Ahh, sorry, I missed the title and was just thinking "missing jump table" from the previous conversation we had. For C++ classes you'll need to create a structure and apply it at that location. There's no auto-class recovery in Binary Ninja at this time. You might have a look at:

https://blog.trailofbits.com/2017/02/13/devirtualizing-c-with-binary-ninja/

For the general case of missing jump tables I originally misunderstood you to be asking about, here's a list of the ways that you can use to recover jump tables:

https://binary.ninja/2020/09/10/user-informed-dataflow.html#jump-table-example