Remind me how to change the FLIRT threshold for minor functions so it ignores minor functions.
You once informed me via email, but I’ve lost it.
maybe this (from pelf -h)?
-M## minimal number of defined bytes in a pattern (default: 4)
not about create signature
about using flirt in IDA
I don’t think there is such a setting in IDA itself, AFAIK it tries to apply all signatures present in the .sig file.
If such an option doesn’t exist, I’d like it to appear.
So that when loading a file, you can specify the minimum size of functions to which signatures can be applied.
Because repackaging standard signatures is very expensive.
Furthermore, I still hope that FILRT will acquire some semblance of a Lumina interface.
So that automatic signature application can be disabled.
And, following the example of the Lumina interface, you can choose which functions to apply found signatures to and which to ignore.