Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Automatic unique signature creator #13

Open
NotNite opened this issue Jul 3, 2024 · 0 comments
Open

Automatic unique signature creator #13

NotNite opened this issue Jul 3, 2024 · 0 comments

Comments

@NotNite
Copy link

NotNite commented Jul 3, 2024

Right now with IDA's SigMaker-x64 you can place your cursor on a function and generate a signature for it (either directly or using callsite indirection):

A direct signature is available for the current address.
adding references
Added 9 references to the selected address.
added a total of 10 references.
[402ccd1e] Signature E8 ?? ?? ?? ?? 48 89 9E ?? ?? ?? ?? 48 89 5E 58  is a viable candidate for final evaluation.
[402e3d8e] Signature E8 ?? ?? ?? ?? 48 8B 1D ?? ?? ?? ?? 40 38 7B 08  is a viable candidate for final evaluation.
direct reference: [actual address in first opcode] E8 ?? ?? ?? ?? 48 89 9E ?? ?? ?? ?? 48 89 5E 58 

However, this plugin seems to only support creating a signature from a selection, which is not ideal if any part of the function changes (and doesn't use any callsite indirection at all). I'd like the ability to automatically generate a sig for a function that uniquely matches in the current executable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant