Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  Retreiving function parameter names and types

Topic created on: October 21, 2011 19:17 CDT by luckiejacky .

Hello guys,
[IDA SDK]
When I have a function pointer, how can I get the full function name with argument types?
Thanks

  prot0man   March 5, 2012 19:39.03 CST
This question doesn't make much sense. Do you mean an effective address for the function? You can get the function name using the effective address (EA) by using the GetFunctionName function in idc.py. Figuring out the argument types of a function is not an easy task, but what you might try doing is iterating each instruction in the function from function start to end looking for mov/lea instructions that index ebp as the second operand (e.g. mov eax, [ebp+c]). So iterate all instructions looking for the highest ebp index and then divide it by 4 to get the number of arguments that are used in a function.

To figure out the actual types of the arguments, you'll have to make inferences about how those arguments are used. If you find an easier way to do this, definitely let me know. I've been wondering if you can access attributes in the decompiled version of a given function (then all you could at least more easily use what IDA is telling you what type a function argument is), but i've not seen any example code that invoked the decompiler on a given effective address or anything like that.

Note: Registration is required to post to the forums.

There are 30,625 total registered users.


Recently Created Topics
Your Skin Very Soft...
Apr/17
Question about debbu...
Apr/16
IDA PRO Struct Point...
Apr/15
problems with pseudo...
Apr/04
Problem with ollydbg
Mar/22
Should binaries be n...
Mar/22
Ida pro on infineon ...
Mar/10
need help about an D...
Feb/25
Stop a VB6 Applicati...
Feb/13
Add one new segment,...
Jan/23


Recent Forum Posts
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin
Pydbg load() issue
phreak
Pydbg load() issue
netw0rm
How would you interp...
mbin
Pydbg load() issue
phreak


Recent Blog Entries
oleavr
Apr/17
frida.re 1.2.0 is out, with...

Michealhance
Apr/17
Remove Wrinkles For Longer

edithgarza
Apr/16
Improve Your Look With More...

gloriabuirk
Apr/16
TropiCleanse Review - Total...

gareebnavas
Jan/21
Android Malware Analysis

More ...


Recent Blog Comments
pedram on:
Dec/21
frida.github.io: scriptable...

cin100dy on:
Dec/16
Devil May Cry Cosplay Costu...

NeOXQuiCk on:
Nov/26
DONGLE

maharlee on:
Nov/21
Cheap Nike Shoes NZ,Nike Sh...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit