17 Commits

Author	SHA1	Message	Date
Matt Graeber	9bb31fc9b9	Removing Get-PEArchitecture ... This functionality is present and maintained in Get-PEHeader.	2013-08-17 17:16:38 -04:00
Matt Graeber	9577a4e2c2	Compiler parameters were not applied to Add-Type ... The compiler parameters were not being applied to Add-Type in Get-PEHeader. Derp. This led to unexpected errors when Visual Studio environment variables were defined.	2013-08-16 06:28:47 -04:00
Matt Graeber	98be62a03a	Get-PEHeader can now return raw section data	2013-07-28 16:04:07 -04:00
Matt Graeber	4eca7b0126	Latest version of .NET Framework broke Get-PEHeader ... To fix this, I needed to explicitly cast types in the SizeOf and PtrToStructure methods.	2013-07-28 14:32:40 -04:00
Matt Graeber	55a6dbd019	Added Get-ObjDump ... Get-ObjDump parses and return information about one or more Windows object files. It is similar to dumpbin but it returns objects!	2013-07-09 20:17:01 -04:00
Matt Graeber	9d286e511f	Added ARM support to Get-PEHeader ... Also fixed various pointer width bugs	2013-04-28 22:17:14 -04:00
Matt Graeber	2ff300c03a	DownloadFromMSSymbolServer is a better name	2013-03-10 14:27:45 -04:00
Matt Graeber	4f7e59c5a7	Fixed export parsing bug in Get-PEHeader	2013-03-10 14:14:11 -04:00
Matt Graeber	60c49734df	Added DownloadEXEFromMSSymbolServer method ... After parsing a PE header with Get-PEHeader, you now have the option of downloading the original executable from Microsoft's symbol server for reference/comparision.	2013-03-10 11:29:53 -04:00
bitform	40eb187bca	Consistency improvements in comment-based help	2013-01-21 08:33:51 -05:00
bitform	03f34b1c1a	Updated PETools module file list	2013-01-20 21:37:23 -05:00
bitform	ce08c38843	Renamed Usage.txt to Usage.md to apply markdown.	2013-01-20 18:41:22 -05:00
bitform	e9b22e9ae2	Removed logic in scripts to load ps1xml files ... * Now that PETools and ReverseEngineering are both full-fledged modules with proper manifests, the manifests will take care of loading the appropriate ps1xml files. * Added Usage.txt to ReverseEngineering module.	2013-01-20 08:56:37 -05:00
bitform	59ff1a8b1e	PETools module doc. consistency improvements ... * Slight consistency modifications were made to documentation. * Added module manifest for PETools	2013-01-19 20:46:49 -05:00
bitform	befc24a6e8	Fixed bug in display of PE optional header	2012-07-25 17:37:12 -04:00
bitform	f8a3a70291	Fixed bug in executables with no imports/exports ... I now check for the existance of imports/exports in the data directory.	2012-07-22 16:47:44 -04:00
bitform	65ebaea880	Added Get-PEHeader. PETools is now a module. ... Get-PEHeader is a 32 and 64-bit in-memory and on-disk PE parsing utility. PETools is now a PowerShell module that can be loaded with `Import-Module PETools`	2012-07-22 15:16:22 -04:00