gtirb icon indicating copy to clipboard operation
gtirb copied to clipboard

Published 20 hours ago • verified publisher icon GrammaTech

Can gtirb disassemble .res file?

Open swang206 opened this issue 3 years ago • 2 comments

I would like to disassemble windows resource file generated by gtirb to human-readable .rc file. Is that possible?

swang206 avatar Jan 27 '22 19:01 swang206

GTIRB doesn't have any explicit modelling of Windows-style resources present in an exe other than just treating them as data. Nor does ddisasm support analyzing .res files.

tjohnson-gt avatar Jan 27 '22 20:01 tjohnson-gt

I think DDisasm does some parsing of Resources embedded in a PE file to populate a peResources AuxData table. I don't really know the Windows ecosystem so this might not be what you're after. https://github.com/GrammaTech/ddisasm/blob/master/src/gtirb-builder/PeReader.cpp#L206

eschulte avatar Jan 29 '22 16:01 eschulte