Skip to content

Instantly share code, notes, and snippets.

@marcussacana
marcussacana / realbasic-overlay-resolve.py
Last active July 26, 2024 15:05 — forked from iscgar/realbasic-overlay-resolve.py
REALbasic (Xojo) Reverse-Engineering Helper Script
# IDA REALbasic reverse engineering helper script
# It seems that every version of REALbasic (Xojo) the loader
# has a different behaviour (especially with regard to parsing
# the imports table), so I'm documenting here that this script
# was created based on a 2009r5 executable.
# marcussacam, 2024-07-26 (Port for newer IDA)
# iscgar, 2018-09-26
#
# Based on the REALbasic OVERLAY resolver
# XpoZed @ http://nullsecurity.org, 2017-07-16