A200K / IDA-Pro-SigMaker

Signature maker plugin for IDA 8.x and 9.x
Other
334 stars 65 forks source link

Doesn't generate wildcards for MIPS code #19

Open ThirteenAG opened 1 month ago

ThirteenAG commented 1 month ago

What worked for me in the past with another sigmaker, is this approach specifically for mips

auto id = (::ph.id);
if (id == 0x0000000c) //mips
if (op.type == o_imm || op.type == o_reg || op.type == o_displ || op.type == o_phrase || op.type >= o_idpspec0)
{
    // should be fine to include as bytes
}
else
{
    // better to wildcard
}

and

qstring temp;
generate_disasm_line(&temp, cmd->ea);
if (temp.find('%') != qstring::npos || temp.find('-') != qstring::npos)
{
    // better to wildcard
}

Maybe there's a better way though.