secana/PeNet

ExportedFunctions is null despite a valid export data directory

unkusr007 opened this issue · 2 comments

unkusr007 commented

Steps to reproduce:

  • Open a notepad
  • read notepad process memory and dump vcruntime140.dll module
  • create a PeFile with the module content
  • ExportedFunctions is null.
secana commented

If I understand you correctly, you try to open a dump of a module not a PE file from disk? PeNet does not support PE files from memory, only from disk.

unkusr007 commented

Ok that's too bad! Thanks.