1

This thread describes method for extracting function arguments from ida. However this method is not working for stripped binaries (funcdata.size() is always 0). Is it possible to extract such information from stripped binaries?

4
  • 4
    The thread to which you linked is relying on analyses from the Hex-Rays Decompiler, not on embedded symbols. Do you have the Hex-Rays Decompiler installed? Commented Apr 4, 2016 at 16:34
  • Yes, i have hex-rays decompiler and it works fine with recovring function prototype from stripped file. But the script from thread does not work for stripped binaries. Commented Apr 5, 2016 at 10:29
  • When you press the Y key on the function, what is its prototype string? And where does the script from the other thread fail? Commented Apr 5, 2016 at 13:56
  • It seems that the problem was with my decompiler on ubuntu. I could get the script work on windows. Thank you very much for help. Commented Apr 5, 2016 at 15:38

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.