From 4f7e59c5a7223e077936760343f65aee3cf9134c Mon Sep 17 00:00:00 2001 From: Matt Graeber Date: Sun, 10 Mar 2013 14:14:11 -0400 Subject: Fixed export parsing bug in Get-PEHeader --- PETools/Get-PEHeader.ps1 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'PETools/Get-PEHeader.ps1') diff --git a/PETools/Get-PEHeader.ps1 b/PETools/Get-PEHeader.ps1 index 46ef75a..00afad8 100644 --- a/PETools/Get-PEHeader.ps1 +++ b/PETools/Get-PEHeader.ps1 @@ -751,7 +751,7 @@ $code = @" $Result['Ordinal'] = "0x$(($Key + $Base).ToString('X4'))" # Uncomment this after I somehow manage to implement the RVA for the imports # $Result['RVA'] = "0x$($FunctionHashTable[$Key].ToString('X8'))" - $Result['VA'] = "0x$(($FunctionHashTable[$Key] + $PEBaseAddr).ToString("X$([IntPtr]::Size*2)"))" + $Result['VA'] = "0x$(($FunctionHashTable[$Key] + $PEBaseAddr.ToInt64()).ToString("X$([IntPtr]::Size*2)"))" $Export = New-Object PSObject -Property $Result $Export.PSObject.TypeNames.Insert(0, 'Export') -- cgit v1.2.3