1

This thread describes method for extracting function arguments from ida. However this method is not working for stripped binaries (funcdata.size() is always 0). Is it possible to extract such information from stripped binaries?

Improve this question
4
  • 4
    The thread to which you linked is relying on analyses from the Hex-Rays Decompiler, not on embedded symbols. Do you have the Hex-Rays Decompiler installed?
    – Jason Geffner
    Apr 4, 2016 at 16:34
  • Yes, i have hex-rays decompiler and it works fine with recovring function prototype from stripped file. But the script from thread does not work for stripped binaries.
    – Vahag Vardanyan
    Apr 5, 2016 at 10:29
  • When you press the Y key on the function, what is its prototype string? And where does the script from the other thread fail?
    – Jason Geffner
    Apr 5, 2016 at 13:56
  • It seems that the problem was with my decompiler on ubuntu. I could get the script work on windows. Thank you very much for help.
    – Vahag Vardanyan
    Apr 5, 2016 at 15:38

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.