usr/Get-PeException.ps1
|
function Get-PeException { [CmdletBinding()]param($Path) end { Get-PeView -Path $Path -Exception -Callback { $fs.Position = Convert-RvaToRaw $Data.RVA $IMAGE_OPTIONAL_HEADER.SectionAlignment while (1) { if (!($va = $br.ReadUInt32())) { break } [PSCustomObject]@{ Begin = $va.ToString('X8') End = $br.ReadUInt32().ToString('X8') Unwind = $br.ReadUInt32().ToString('X8') } } } # Exception } } Export-ModuleMember -Function Get-PeException |