namazso/IDAShell

Fat Mach-O support

Absolucy opened this issue · 3 comments

The shell extension doesn't show up for fat (multi-architecture) Mach-O files. I understand it may be a bit... weird, because a fat mach-o file can have both 64 and 32 bit slices, but maybe just default to 64-bit it's present, otherwise 32-bit?

The first "magic" of a fat mach-o file is 0xbebafeca (little endian), and the slices are just regular Mach-O.

hey, i'm about done with this but which ida is needed for things with this set:

#define CPU_ARCH_ABI64_32       0x02000000      /* ABI for 64-bit hardware with 32-bit types; LP32 */
#define CPU_TYPE_ARM64_32       (CPU_TYPE_ARM | CPU_ARCH_ABI64_32)

i never used a mac and have no idea where these exist

According to this changelog (+ MACHO: support ARM64_32. only in ida64 (for now)), ida64

i believe arm64_32 binaries are related to watchOS

fixed in a2019ab / v1.0.2