search

ajkhoury / SigMaker-x64

IDA Pro 7 compatible SigMaker plugin
537 stars 88 forks source link

Doesn't seems to work #1

Closed ghost closed 6 years ago

ghost commented 6 years ago

It just gave me a wrong sig. tim 20171219174317

ajkhoury commented 6 years ago

This is not a bug. It does an intelligent scan for the smallest signature. If you look up that signature, it's probably a reference to the function you're trying to sig. (Notice the (+0x1) there too). You can change how it searches for signatures in the options.

ghost commented 6 years ago

Sorry, it's my wrong.