IDA: Extracting functions arguments from stripped binary

Asked Apr 04 '16 at 15:48

Active Nov 12 '17 at 09:54

Viewed 1,174 times

This thread describes method for extracting function arguments from ida. However this method is not working for stripped binaries (funcdata.size() is always 0). Is it possible to extract such information from stripped binaries?

edited Nov 12 '17 at 09:54

Megabeets

8,989
2
24
48

asked Apr 04 '16 at 15:48

Vahag Vardanyan

4

The thread to which you linked is relying on analyses from the Hex-Rays Decompiler, not on embedded symbols. Do you have the Hex-Rays Decompiler installed? – Jason Geffner Apr 04 '16 at 16:34
Yes, i have hex-rays decompiler and it works fine with recovring function prototype from stripped file. But the script from thread does not work for stripped binaries. – Vahag Vardanyan Apr 05 '16 at 10:29
When you press the Y key on the function, what is its prototype string? And where does the script from the other thread fail? – Jason Geffner Apr 05 '16 at 13:56
It seems that the problem was with my decompiler on ubuntu. I could get the script work on windows. Thank you very much for help. – Vahag Vardanyan Apr 05 '16 at 15:38

IDA: Extracting functions arguments from stripped binary

0 Answers0