From fd518058f5d2998ebbc28d317ab5d29b4f34ae91 Mon Sep 17 00:00:00 2001 From: Stephen Eckels Date: Thu, 8 Jun 2023 13:06:57 -0400 Subject: [PATCH] Update README.md --- README.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index f26fa18..8a844d6 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ The upstream Go runtime code is extended to handle: # Usage Refer to https://www.mandiant.com/resources/blog/golang-internals-symbol-recovery for reverse engineering details and example usage. -You can download pre-built GoReSym binaries from the [Releases tab](https://github.com/mandiant/GoReSym/releases/). +You can download pre-built `linux` and `windows` GoReSym binaries from the [Releases tab](https://github.com/mandiant/GoReSym/releases/). To build from source with a recent Go compiler, install libyara manually [Lib Yara Installation](https://yara.readthedocs.io/en/stable/gettingstarted.html) then invoke the Go compiler: @@ -19,10 +19,9 @@ To build from source with a recent Go compiler, install libyara manually [Lib Ya go build ``` -If you are cross compiling for other architectures you will need to do some configuration steps to allow `go-yara` to compile successfully for any foreign architectures [Go-Yara Cross Compilation](https://github.com/hillu/go-yara/blob/master/README.cross-building.md) - -Invoke GoReSym like this: +If you are cross compiling for other architectures you will need to do some configuration steps to allow `go-yara` to compile successfully for any foreign architectures [Go-Yara Cross Compilation](https://github.com/hillu/go-yara/blob/master/README.cross-building.md). See the build script https://github.com/mandiant/GoReSym/blob/master/build_all.sh for details, only cross compilation for windows on a debian host is supported. If you need to compile for macos, it must be done natively on an apple machine. +Once built invoke GoReSym like this: ``` GoReSym.exe -t -d -p /path/to/input.exe ```