nihilus / snowman

Snowman decompiler
http://derevenets.com/
105 stars 15 forks source link

no support for big endian PE files. #58

Open nihilus opened 8 years ago

nihilus commented 8 years ago

Need to add support for big endian PE files.

uxmal commented 8 years ago

Out of curiosity, what big-endian CPU would those PE files apply to?

nihilus commented 8 years ago

@uxmal the mips r3000

mrexodia commented 8 years ago

PE are indeed stored as little endian. Not 100% sure about Windows on arm though... On Tue, 7 Jun 2016 at 00:00, John Källén notifications@github.com wrote:

Out of curiosity, what big-endian CPU would those PE files apply to?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/nihilus/snowman/issues/58#issuecomment-224102144, or mute the thread https://github.com/notifications/unsubscribe/ACWCmaMi5pA0kuuUnv_nlT4wB6MSSqkPks5qJJiUgaJpZM4IvW-3 .

uxmal commented 8 years ago

@nihilus : I'd love to see a PE binary with BigEndian mips code; you wouldn't happen to have once that is "distributable"?

nihilus commented 8 years ago

I might have to make my own gcc toolchain for that ;-)

uxmal commented 8 years ago

It's just that the MIPS PE images I have are all little-endian. A big endian PE image would be a curious beast for sure. Indeed, winnt.h, defines processor type 0x0160 as MIPS 3000 big-endian. Wonder what CE device that was!