diff options
| author | mattifestation <mattgraeber@gmail.com> | 2013-09-30 06:43:03 -0400 |
|---|---|---|
| committer | mattifestation <mattgraeber@gmail.com> | 2013-09-30 06:43:03 -0400 |
| commit | ec39ee21130355e025c757ff50d88dd2e7c55a8e (patch) | |
| tree | a374d7c5b8c775082cfdb14efe2c2b9e951283d6 /PETools | |
| parent | e62121ea27d01f4cfa2be180353cc3bc34bdb677 (diff) | |
| download | PowerSploit-ec39ee21130355e025c757ff50d88dd2e7c55a8e.tar.gz PowerSploit-ec39ee21130355e025c757ff50d88dd2e7c55a8e.zip | |
Fixed minor logic bug in C type undecorated symbols
Diffstat (limited to 'PETools')
| -rw-r--r-- | PETools/Get-LibSymbols.ps1 | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/PETools/Get-LibSymbols.ps1 b/PETools/Get-LibSymbols.ps1 index 79dede5..414454f 100644 --- a/PETools/Get-LibSymbols.ps1 +++ b/PETools/Get-LibSymbols.ps1 @@ -249,7 +249,14 @@ } else { - $UndecoratedSymbol = $DecoratedSymbol.Substring(1).Split('@')[0] + if ($DecoratedSymbol[0] -eq '_' -or $DecoratedSymbol[0] -eq '@') + { + $UndecoratedSymbol = $DecoratedSymbol.Substring(1).Split('@')[0] + } + else + { + $UndecoratedSymbol = $DecoratedSymbol.Split('@')[0] + } } $SymInfo = @{ |