-
Notifications
You must be signed in to change notification settings - Fork 18
Open
Description
Requesting that you add the ability to parse BMP images stored as entries within the .NET resources.
Sample:
https://www.virustotal.com/gui/file/0a5dc3b6669cf31e8536c59fe1315918eb4ecfd87998445e2eeb8fed64bd2f2c
dnfile properly identified the resource names and types but the data property is NoneType. Attached is the output from the following code:
pe = dnfile.dnPE(filepath)
for r in pe.net.resources:
if r.name == “20a87df82283.Resources.resources”:
for entry in r.data.entries:
print(f”{r.name}: {entry.name} - {type(entry.data)}“)
print(entry.__dict__)
print(entry.struct.__dict__)
I know that the open-source project dnSpy does an excellent job of parsing this resource type from .NET executables so maybe some of that logic can be ported into this project.
https://github.com/dnSpyEx/dnSpy
https://github.com/dnSpyEx/dnSpy/blob/master/Extensions/dnSpy.BamlDecompiler/Baml/KnownTypes.cs
Could possibly use this code to dramatically increate support for other types at the same time.
Metadata
Metadata
Assignees
Labels
No labels
