ExportedFunctions is null despite a valid export data directory

secana / PeNet

Portable Executable (PE) library written in .Net

Apache License 2.0

590 stars 114 forks source link

ExportedFunctions is null despite a valid export data directory #271

Closed unkusr007 closed 1 year ago

unkusr007 commented 1 year ago

Steps to reproduce:

Open a notepad
read notepad process memory and dump vcruntime140.dll module
create a PeFile with the module content
ExportedFunctions is null.

secana commented 1 year ago

If I understand you correctly, you try to open a dump of a module not a PE file from disk? PeNet does not support PE files from memory, only from disk.

unkusr007 commented 1 year ago

Ok that's too bad! Thanks.