1

I am working on a reverse engineering task, in which I need to recover function prototype (including number of parameters, type of each parameter) from the input binary (ELF binary on 64-bit Linux).

While IDA-Pro can be guided to recover function prototype for functions defined inside the binary code, I am trapped in recovering library functions invoked inside the binary code.

For example:

mov str_pointer, %rdi
call puts  <---- Library function 

So here is my question:

  1. can I use IDA-Pro to somehow recover the library function's prototype?
  2. If not,it seems to me that I can benefit from some database on this info? Could anyone shed some lights on this?

Thanks

1 Answer 1

1

Go to the function that you want to get the prototype for and press "Y". If you have the decompiler, just decompile it and check if the prototype it guessed is right. Often you will need to fix things manually. However, I can assure these ways work because I actually use them almost daily.

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.