How to rename a vtable function

[wjllz]

Hey, I have some code like this:

// original source code
OSObject     * o;
o->release();

So I create a structure in binary ninja:

It will decompile it to :

Is there any way to make it be "o-relase()"?

thx and sry for my bad English...

[CouleeApps]

Chances are, your vtable is defined as a pointer to a structure containing function pointers. You will need two structures: one for the vtable and one for the object. In the object structure, the first member should be a pointer to a vtable structure. In the vtable structure, you should define function pointers at the offsets where they are used.

In your example, it would probably look like this:

struct OSObject_vtable
{
    char unknown[0x28]; // ~5 more functions here that are not known
    int64_t* (*release)(struct OSObject* this);
};
struct OSObject
{
    OSObject_vtable* vtable;
    // Rest of fields of OSObject
};

[wjllz]

shame of myself! thank u so much!