| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2013-11-13 | Normalized all scripts to ASCII encoding | mattifestation | 8 | -13/+13 | |
| 2013-09-30 | Fixed minor logic bug in C type undecorated symbols | mattifestation | 1 | -1/+8 | |
| 2013-09-29 | Added Get-LibSymbols | mattifestation | 3 | -2/+309 | |
| Get-LibSymbols parses Microsoft .lib files and displays decorated and undecorated symbols. | |||||
| 2013-08-17 | Removing Get-PEArchitecture | Matt Graeber | 2 | -96/+1 | |
| This functionality is present and maintained in Get-PEHeader. | |||||
| 2013-08-16 | Compiler parameters were not applied to Add-Type | Matt Graeber | 1 | -4/+2 | |
| The compiler parameters were not being applied to Add-Type in Get-PEHeader. Derp. This led to unexpected errors when Visual Studio environment variables were defined. | |||||
| 2013-07-28 | Get-PEHeader can now return raw section data | Matt Graeber | 1 | -7/+45 | |
| 2013-07-28 | Latest version of .NET Framework broke Get-PEHeader | Matt Graeber | 1 | -15/+15 | |
| To fix this, I needed to explicitly cast types in the SizeOf and PtrToStructure methods. | |||||
| 2013-07-09 | Added Get-ObjDump | Matt Graeber | 3 | -2/+1003 | |
| Get-ObjDump parses and return information about one or more Windows object files. It is similar to dumpbin but it returns objects! | |||||
| 2013-04-28 | Added ARM support to Get-PEHeader | Matt Graeber | 2 | -720/+741 | |
| Also fixed various pointer width bugs | |||||
| 2013-03-10 | DownloadFromMSSymbolServer is a better name | Matt Graeber | 1 | -1/+1 | |
| 2013-03-10 | Fixed export parsing bug in Get-PEHeader | Matt Graeber | 1 | -1/+1 | |
| 2013-03-10 | Added DownloadEXEFromMSSymbolServer method | Matt Graeber | 1 | -881/+902 | |
| After parsing a PE header with Get-PEHeader, you now have the option of downloading the original executable from Microsoft's symbol server for reference/comparision. | |||||
| 2013-01-21 | Consistency improvements in comment-based help | bitform | 3 | -12/+24 | |
| 2013-01-20 | Updated PETools module file list | bitform | 1 | -1/+1 | |
| 2013-01-20 | Renamed Usage.txt to Usage.md to apply markdown. | bitform | 1 | -0/+0 | |
| 2013-01-20 | Removed logic in scripts to load ps1xml files | bitform | 1 | -7/+0 | |
| * Now that PETools and ReverseEngineering are both full-fledged modules with proper manifests, the manifests will take care of loading the appropriate ps1xml files. * Added Usage.txt to ReverseEngineering module. | |||||
| 2013-01-19 | PETools module doc. consistency improvements | bitform | 5 | -80/+182 | |
| * Slight consistency modifications were made to documentation. * Added module manifest for PETools | |||||
| 2012-07-25 | Fixed bug in display of PE optional header | bitform | 1 | -4/+4 | |
| 2012-07-22 | Fixed bug in executables with no imports/exports | bitform | 1 | -0/+10 | |
| I now check for the existance of imports/exports in the data directory. | |||||
| 2012-07-22 | Added Get-PEHeader. PETools is now a module. | bitform | 6 | -0/+1524 | |
| Get-PEHeader is a 32 and 64-bit in-memory and on-disk PE parsing utility. PETools is now a PowerShell module that can be loaded with `Import-Module PETools` | |||||