-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathvalidate.h
47 lines (44 loc) · 1.87 KB
/
validate.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
/*
* ___________ __ __
* \_ _____/__ ____/ |_____________ _____/ |_
* | __)_\ \/ /\ __\_ __ \__ \ _/ ___\ __\
* | \> < | | | | \// __ \\ \___| |
* /_______ /__/\_ \ |__| |__| (____ /\___ >__|
* \/ \/ \/ \/
* _____ .__ ________ ___
* / \ _____ ____ | |__ \_____ \ |_ |
* / \ / \\__ \ _/ ___\| | \ ______ / | \ | _|
* / Y \/ __ \\ \___| Y \ /_____/ / | \ |___|
* \____|__ (____ /\___ >___| / \_______ /
* \/ \/ \/ \/ \/
*
* Extract Mach-O 2 - v1.0
* (c) 2019, fG! - [email protected] - https://reverse.put.as
*
* An IDA plugin to extract Mach-O binaries inside code or data segments
*
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*
* validate.h
*
*/
#pragma once
#include <stdint.h>
// IDA SDK includes
#include <ida.hpp>
#include <idp.hpp>
#include <bytes.hpp>
#include <kernwin.hpp>
#include <mach-o/fat.h>
uint8_t validate_macho(ea_t address);
uint8_t validate_fat(struct fat_header fatHeader, ea_t position);