You can overwrite vtable pointers, but you're further restricted to calling another function of the same type signature.