You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A bit more research is required to determine how IDA calculates function signatures. Calculating signatures independently would allow other tools (such as radare2, binary-ninja, Ghidra) to use the lumen server.
The signature is the md5 of the function's bytes and a bitmap of the same length.
Hi, just letting You know, in case You're still working on it, it's actually hash of function bytes, but all function & variable adresses are nulled, so
call sub_... (E8 BA AD F0 0D) turns into call $+5 (E8 00 00 00 00)
mov eax, dword_... (B8 BA AD F0 0D) turns into mov eax, 0 (B8 00 00 00 00)
and the other part is nulled array, where any place that got cleared from original function bytes is replaced with 0xFF
Hope it's clear enough, and that it will be helpful ;)
A bit more research is required to determine how IDA calculates function signatures. Calculating signatures independently would allow other tools (such as radare2, binary-ninja, Ghidra) to use the lumen server.
The signature is the md5 of the function's bytes and a bitmap of the same length.
Ideally, something like this:
The text was updated successfully, but these errors were encountered: