{"action":"created","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/4674","repository_url":"https://api.github.com/repos/radare/radare2","labels_url":"https://api.github.com/repos/radare/radare2/issues/4674/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/4674/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/4674/events","html_url":"https://github.com/radare/radare2/issues/4674","id":150075326,"number":4674,"title":"Radare detects Resources of the PE as Code","user":{"login":"AriEi4","id":18167024,"avatar_url":"https://avatars.githubusercontent.com/u/18167024?v=3","gravatar_id":"","url":"https://api.github.com/users/AriEi4","html_url":"https://github.com/AriEi4","followers_url":"https://api.github.com/users/AriEi4/followers","following_url":"https://api.github.com/users/AriEi4/following{/other_user}","gists_url":"https://api.github.com/users/AriEi4/gists{/gist_id}","starred_url":"https://api.github.com/users/AriEi4/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AriEi4/subscriptions","organizations_url":"https://api.github.com/users/AriEi4/orgs","repos_url":"https://api.github.com/users/AriEi4/repos","events_url":"https://api.github.com/users/AriEi4/events{/privacy}","received_events_url":"https://api.github.com/users/AriEi4/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"alvarofe","id":3474042,"avatar_url":"https://avatars.githubusercontent.com/u/3474042?v=3","gravatar_id":"","url":"https://api.github.com/users/alvarofe","html_url":"https://github.com/alvarofe","followers_url":"https://api.github.com/users/alvarofe/followers","following_url":"https://api.github.com/users/alvarofe/following{/other_user}","gists_url":"https://api.github.com/users/alvarofe/gists{/gist_id}","starred_url":"https://api.github.com/users/alvarofe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alvarofe/subscriptions","organizations_url":"https://api.github.com/users/alvarofe/orgs","repos_url":"https://api.github.com/users/alvarofe/repos","events_url":"https://api.github.com/users/alvarofe/events{/privacy}","received_events_url":"https://api.github.com/users/alvarofe/received_events","type":"User","site_admin":false},"milestone":null,"comments":6,"created_at":"2016-04-21T13:30:35Z","updated_at":"2016-04-21T14:04:37Z","closed_at":null,"body":"Hi, \r\nIn some files, r2 detect the resources of the PE file as code and try to disassemble it.\r\n\r\nHere is an example - CardGames.dll (Windows dll)\r\nHere's a link to this dll from Windows7x86 Machine: http://www.filedropper.com/cardgames\r\nIDA detects the file as PE without code (and without functions), but r2 detects 3343 functions after 'aa;aac',\r\n\r\nIf you check the file in ResourceHacker/PExplore or any other tool - you will see all the resources, without code or import\\export functions at all.\r\n\r\nAny ideas?\r\n"},"comment":{"url":"https://api.github.com/repos/radare/radare2/issues/comments/212934842","html_url":"https://github.com/radare/radare2/issues/4674#issuecomment-212934842","issue_url":"https://api.github.com/repos/radare/radare2/issues/4674","id":212934842,"user":{"login":"Maijin","id":1408600,"avatar_url":"https://avatars.githubusercontent.com/u/1408600?v=3","gravatar_id":"","url":"https://api.github.com/users/Maijin","html_url":"https://github.com/Maijin","followers_url":"https://api.github.com/users/Maijin/followers","following_url":"https://api.github.com/users/Maijin/following{/other_user}","gists_url":"https://api.github.com/users/Maijin/gists{/gist_id}","starred_url":"https://api.github.com/users/Maijin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Maijin/subscriptions","organizations_url":"https://api.github.com/users/Maijin/orgs","repos_url":"https://api.github.com/users/Maijin/repos","events_url":"https://api.github.com/users/Maijin/events{/privacy}","received_events_url":"https://api.github.com/users/Maijin/received_events","type":"User","site_admin":false},"created_at":"2016-04-21T14:04:37Z","updated_at":"2016-04-21T14:04:37Z","body":"also, in the current case, ida is really bad didn't even tell you what entry point is found in the binary just throwing you FFFFFFF awful..."}}