1

This thread describes method for extracting function arguments from ida. However this method is not working for stripped binaries (funcdata.size() is always 0). Is it possible to extract such information from stripped binaries?

  • 4
    The thread to which you linked is relying on analyses from the Hex-Rays Decompiler, not on embedded symbols. Do you have the Hex-Rays Decompiler installed? – Jason Geffner Apr 4 '16 at 16:34
  • Yes, i have hex-rays decompiler and it works fine with recovring function prototype from stripped file. But the script from thread does not work for stripped binaries. – Vahag Vardanyan Apr 5 '16 at 10:29
  • When you press the Y key on the function, what is its prototype string? And where does the script from the other thread fail? – Jason Geffner Apr 5 '16 at 13:56
  • It seems that the problem was with my decompiler on ubuntu. I could get the script work on windows. Thank you very much for help. – Vahag Vardanyan Apr 5 '16 at 15:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.