A focused desktop explorer for Mach-O, Fat binaries, .a archives, and the dyld shared cache. Drill from structure to code — sections, symbols, disassembly, ObjC & Swift metadata — in one window. Version 3 is a ground-up rewrite in Rust.
From load commands down to a single disassembled instruction — and the modern Apple metadata most tools skip.
Load commands, sections, symbols, relocations, and strings — laid out in a navigable tree mirroring the file on disk, with a hex view that follows your selection.
Disassembly of __TEXT,__text next to the bytes it came from. Capstone is built in — nothing extra to install.
Browse __swift5_* semantic graphs and Objective-C class/metadata structures decoded into readable rows.
List every image inside a dyld shared cache, filter it, and extract one image or all of them — then drill straight back in.
Bounds-checked parsing, tested against truncated and mutated binaries plus a fuzz target, so a malformed file degrades gracefully instead of crashing.
Filter rows, copy a cell, a row or everything visible, export CSV, and move from the keyboard. Parsing runs off the UI thread, so large files keep the window responsive.
An xref report of call and jump targets, computed addresses, memory references and stored pointers, tied back to symbols.
Code Directory, requirements and decoded entitlements, plus rebase, bind, exports trie and chained fixups.
Neutral light and dark themes, or follow the system setting. A built-in update check tells you when a new release is out.
Mach header, load commands, sections, symbol & string tables, dynamic loader info — all in one navigable hierarchy.
Each node opens a filterable table; select a row and the hex view jumps to the exact bytes.
The log reports what was parsed and any warnings; the information panel spells out the selected row.
Run the same analysis tree without the GUI — perfect for CI, batch jobs, and piping into jq.
The fastest way on macOS — installs the cask straight from the tap.
A signed and notarized DMG for macOS (Apple silicon and Intel). Linux (tarball) and Windows (installer or portable zip) builds are previews.
