diff options
| author | bitform <matt@exploit-monday.com> | 2012-07-25 17:37:12 -0400 |
|---|---|---|
| committer | bitform <matt@exploit-monday.com> | 2012-07-25 17:37:12 -0400 |
| commit | befc24a6e89ce6ff7d5007e27ba5ad4f1e5029a9 (patch) | |
| tree | 206631d0c83ddff62bd8304831bbe9c37c2f933b | |
| parent | f8a3a702913dc94da34837fdf98cf3bbb274c09e (diff) | |
| download | PowerSploit-befc24a6e89ce6ff7d5007e27ba5ad4f1e5029a9.tar.gz PowerSploit-befc24a6e89ce6ff7d5007e27ba5ad4f1e5029a9.zip | |
Fixed bug in display of PE optional header
| -rw-r--r-- | PETools/PETools.format.ps1xml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/PETools/PETools.format.ps1xml b/PETools/PETools.format.ps1xml index 2a1cbdb..bce54bd 100644 --- a/PETools/PETools.format.ps1xml +++ b/PETools/PETools.format.ps1xml @@ -134,19 +134,19 @@ </ListItem>
<ListItem>
<Label>SizeOfStackReserve</Label>
- <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.ImageBase.ToString('X8'))" } else { "0x$($_.ImageBase.ToString('X16'))" }</ScriptBlock>
+ <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.SizeOfStackReserve.ToString('X8'))" } else { "0x$($_.SizeOfStackReserve.ToString('X16'))" }</ScriptBlock>
</ListItem>
<ListItem>
<Label>SizeOfStackCommit</Label>
- <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.ImageBase.ToString('X8'))" } else { "0x$($_.ImageBase.ToString('X16'))" }</ScriptBlock>
+ <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.SizeOfStackCommit.ToString('X8'))" } else { "0x$($_.SizeOfStackCommit.ToString('X16'))" }</ScriptBlock>
</ListItem>
<ListItem>
<Label>SizeOfHeapReserve</Label>
- <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.ImageBase.ToString('X8'))" } else { "0x$($_.ImageBase.ToString('X16'))" }</ScriptBlock>
+ <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.SizeOfHeapReserve.ToString('X8'))" } else { "0x$($_.SizeOfHeapReserve.ToString('X16'))" }</ScriptBlock>
</ListItem>
<ListItem>
<Label>SizeOfHeapCommit</Label>
- <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.ImageBase.ToString('X8'))" } else { "0x$($_.ImageBase.ToString('X16'))" }</ScriptBlock>
+ <ScriptBlock>if ($_.Magic.ToString() -eq 'PE32') { "0x$($_.SizeOfHeapCommit.ToString('X8'))" } else { "0x$($_.SizeOfHeapCommit.ToString('X16'))" }</ScriptBlock>
</ListItem>
<ListItem>
<PropertyName>LoaderFlags</PropertyName>
|