diff options
| author | mattifestation <mattgraeber@gmail.com> | 2013-09-30 06:43:03 -0400 |
|---|---|---|
| committer | clymb3r <bialek.joseph@gmail.com> | 2013-11-03 22:48:48 -0800 |
| commit | 70e5b8375bceee892577a66d9f95597e85566110 (patch) | |
| tree | 485c9540bdd17ea46dd2f4d60e450ecef346a750 /PETools | |
| parent | 9fbb4ec3c39e0e42ffdfa55bdbb36aedd39e4216 (diff) | |
| download | PowerSploit-70e5b8375bceee892577a66d9f95597e85566110.tar.gz PowerSploit-70e5b8375bceee892577a66d9f95597e85566110.zip | |
Fixed minor logic bug in C type undecorated symbols
Diffstat (limited to 'PETools')
| -rw-r--r-- | PETools/Get-LibSymbols.ps1 | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/PETools/Get-LibSymbols.ps1 b/PETools/Get-LibSymbols.ps1 index 79dede5..414454f 100644 --- a/PETools/Get-LibSymbols.ps1 +++ b/PETools/Get-LibSymbols.ps1 @@ -249,7 +249,14 @@ } else { - $UndecoratedSymbol = $DecoratedSymbol.Substring(1).Split('@')[0] + if ($DecoratedSymbol[0] -eq '_' -or $DecoratedSymbol[0] -eq '@') + { + $UndecoratedSymbol = $DecoratedSymbol.Substring(1).Split('@')[0] + } + else + { + $UndecoratedSymbol = $DecoratedSymbol.Split('@')[0] + } } $SymInfo = @{ |