diff options
| -rw-r--r-- | PETools/Get-PEHeader.ps1 | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/PETools/Get-PEHeader.ps1 b/PETools/Get-PEHeader.ps1 index 315f397..8422390 100644 --- a/PETools/Get-PEHeader.ps1 +++ b/PETools/Get-PEHeader.ps1 @@ -665,6 +665,11 @@ $code = @" function Get-Exports()
{
+
+ if ($NTHeader.OptionalHeader.DataDirectory[0].VirtualAddress -eq 0) {
+ Write-Verbose 'Module does not contain any exports'
+ return
+ }
# List all function Rvas in the export table
$ExportPointer = [IntPtr] ($PEBaseAddr.ToInt64() + $NtHeader.OptionalHeader.DataDirectory[0].VirtualAddress)
@@ -759,6 +764,11 @@ $code = @" function Get-Imports()
{
+ if ($NTHeader.OptionalHeader.DataDirectory[1].VirtualAddress -eq 0) {
+ Write-Verbose 'Module does not contain any imports'
+ return
+ }
+
$FirstImageImportDescriptorPtr = [IntPtr] ($PEBaseAddr.ToInt64() + $NtHeader.OptionalHeader.DataDirectory[1].VirtualAddress)
if ($OnDisk) { $FirstImageImportDescriptorPtr = Convert-RVAToFileOffset $FirstImageImportDescriptorPtr }
$ImportDescriptorPtr = $FirstImageImportDescriptorPtr
|