70e5b8375b
Fixed minor logic bug in C type undecorated symbols
2013-11-03 22:48:48 -08:00
9fbb4ec3c3
Added Get-LibSymbols
...
Get-LibSymbols parses Microsoft .lib files and displays decorated and
undecorated symbols.
2013-11-03 22:48:47 -08:00
9bb31fc9b9
Removing Get-PEArchitecture
...
This functionality is present and maintained in Get-PEHeader.
2013-08-17 17:16:38 -04:00
9577a4e2c2
Compiler parameters were not applied to Add-Type
...
The compiler parameters were not being applied to Add-Type in
Get-PEHeader. Derp.
This led to unexpected errors when Visual Studio environment variables
were defined.
2013-08-16 06:28:47 -04:00
98be62a03a
Get-PEHeader can now return raw section data
2013-07-28 16:04:07 -04:00
4eca7b0126
Latest version of .NET Framework broke Get-PEHeader
...
To fix this, I needed to explicitly cast types in the SizeOf and
PtrToStructure methods.
2013-07-28 14:32:40 -04:00
55a6dbd019
Added Get-ObjDump
...
Get-ObjDump parses and return information about one or more Windows
object files. It is similar to dumpbin but it returns objects!
2013-07-09 20:17:01 -04:00
9d286e511f
Added ARM support to Get-PEHeader
...
Also fixed various pointer width bugs
2013-04-28 22:17:14 -04:00
2ff300c03a
DownloadFromMSSymbolServer is a better name
2013-03-10 14:27:45 -04:00
4f7e59c5a7
Fixed export parsing bug in Get-PEHeader
2013-03-10 14:14:11 -04:00
60c49734df
Added DownloadEXEFromMSSymbolServer method
...
After parsing a PE header with Get-PEHeader, you now have the option of
downloading the original executable from Microsoft's symbol server for
reference/comparision.
2013-03-10 11:29:53 -04:00
40eb187bca
Consistency improvements in comment-based help
2013-01-21 08:33:51 -05:00
03f34b1c1a
Updated PETools module file list
2013-01-20 21:37:23 -05:00
ce08c38843
Renamed Usage.txt to Usage.md to apply markdown.
2013-01-20 18:41:22 -05:00
e9b22e9ae2
Removed logic in scripts to load ps1xml files
...
* Now that PETools and ReverseEngineering are both full-fledged modules
with proper manifests, the manifests will take care of loading the
appropriate ps1xml files.
* Added Usage.txt to ReverseEngineering module.
2013-01-20 08:56:37 -05:00
59ff1a8b1e
PETools module doc. consistency improvements
...
* Slight consistency modifications were made to documentation.
* Added module manifest for PETools
2013-01-19 20:46:49 -05:00
befc24a6e8
Fixed bug in display of PE optional header
2012-07-25 17:37:12 -04:00
f8a3a70291
Fixed bug in executables with no imports/exports
...
I now check for the existance of imports/exports in the data directory.
2012-07-22 16:47:44 -04:00
65ebaea880
Added Get-PEHeader. PETools is now a module.
...
Get-PEHeader is a 32 and 64-bit in-memory and on-disk PE parsing
utility.
PETools is now a PowerShell module that can be loaded with
`Import-Module PETools`
2012-07-22 15:16:22 -04:00
mattifestation