Jinmo / applescript-disassembler

A simple run-only applescript disassembler
MIT License
112 stars 19 forks source link

DefineActor, PositionalMessageSend, ... and function selection support #4

Closed Jinmo closed 6 years ago

Jinmo commented 6 years ago

I hadn't reverse engineered it deeply, but DATA_OFFSET variable of disassembler.py is related with the function index. In addition, I feel like it should be changed to negative offset I think, because with DATA_OFFSET = 2, *ctf one did not show the main function, but it showed the hex encode function.

After changing the variable to 3, it worked with literals support.