Fixed bug in executables with no imports/exports

I now check for the existance of imports/exports in the data directory.

1 files changed, 10 insertions, 0 deletions

diff --git a/PETools/Get-PEHeader.ps1 b/PETools/Get-PEHeader.ps1
index 315f397..8422390 100644
--- a/PETools/Get-PEHeader.ps1
+++ b/PETools/Get-PEHeader.ps1
@@ -665,6 +665,11 @@ $code = @"
     

     function Get-Exports()

     {

+    

+        if ($NTHeader.OptionalHeader.DataDirectory[0].VirtualAddress -eq 0) {

+            Write-Verbose 'Module does not contain any exports'

+            return

+        }

 

         # List all function Rvas in the export table

         $ExportPointer = [IntPtr] ($PEBaseAddr.ToInt64() + $NtHeader.OptionalHeader.DataDirectory[0].VirtualAddress)

@@ -759,6 +764,11 @@ $code = @"
 

     function Get-Imports()

     {

+        if ($NTHeader.OptionalHeader.DataDirectory[1].VirtualAddress -eq 0) {

+            Write-Verbose 'Module does not contain any imports'

+            return

+        }

+    

         $FirstImageImportDescriptorPtr = [IntPtr] ($PEBaseAddr.ToInt64() + $NtHeader.OptionalHeader.DataDirectory[1].VirtualAddress)

         if ($OnDisk) { $FirstImageImportDescriptorPtr = Convert-RVAToFileOffset $FirstImageImportDescriptorPtr }

         $ImportDescriptorPtr = $FirstImageImportDescriptorPtr