1

This thread describes method for extracting function arguments from ida. However this method is not working for stripped binaries (funcdata.size() is always 0). Is it possible to extract such information from stripped binaries?

4
  • 4
    The thread to which you linked is relying on analyses from the Hex-Rays Decompiler, not on embedded symbols. Do you have the Hex-Rays Decompiler installed? Apr 4 '16 at 16:34
  • Yes, i have hex-rays decompiler and it works fine with recovring function prototype from stripped file. But the script from thread does not work for stripped binaries. Apr 5 '16 at 10:29
  • When you press the Y key on the function, what is its prototype string? And where does the script from the other thread fail? Apr 5 '16 at 13:56
  • It seems that the problem was with my decompiler on ubuntu. I could get the script work on windows. Thank you very much for help. Apr 5 '16 at 15:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.