Can gtirb disassemble .res file?

GrammaTech / gtirb

Intermediate Representation for Binary analysis and transformation

https://grammatech.github.io/gtirb/

Other

305 stars 36 forks source link

Can gtirb disassemble .res file? #51

Closed swang206 closed 1 year ago

swang206 commented 2 years ago

I would like to disassemble windows resource file generated by gtirb to human-readable .rc file. Is that possible?

tjohnson-gt commented 2 years ago

GTIRB doesn't have any explicit modelling of Windows-style resources present in an exe other than just treating them as data. Nor does ddisasm support analyzing .res files.

eschulte commented 2 years ago

I think DDisasm does some parsing of Resources embedded in a PE file to populate a peResources AuxData table. I don't really know the Windows ecosystem so this might not be what you're after. https://github.com/GrammaTech/ddisasm/blob/master/src/gtirb-builder/PeReader.cpp#L206