The GetWindowText function copies the text of the specified window

PL_EXPORTS_INFO

The PL_EXPORTS_INFO structure contains info about the Exports Directory.Could be used to update the Exports Table.

PL_EXPORTS_INFO{
   DWORD    plAddrExportDir		
   DWORD    plSizeOfExportDir	
   DWORD    plBase		
   DWORD    plNumOfFunctions	
   DWORD    plNumOfNames		
   DWORD    plAddrOfFunctions

   DWORD    plAddrOfNames

   DWORD    plAddrOfOrdinals

   DWORD    plPtrExportDir

   DWORD    plPtrFunctions

   DWORD    plPtrNames

   DWORD    plPtrOrdinals		
};

Members

plAddrExportDir

Contains the RVA of the Exports Directory in the opened file.

plSizeOfExportDir

Contains the Exports Directory's size.

plBase

Contains the nBase of the Exports Directory in the file.

plNumOfFunctions

Contains the number of exported functions.

plNumOfNames

Contains the number of functions exported with name string.

plAddrOfFunctions

Contains the RVA, where the list with the addresses of the functions are.

plAddrOfNames

Contains the RVA, where the list with the addresses of the functions names are.

plAddrOfOrdinals

Contains the RVA, where the list with the addresses of the functions ordinal values are.

plPtrExportDir

Contains the pointer in the file to the start of the Exports Directory.

plPtrFunctions

Contains the pointer in the file to the list with the addresses of the functions.

plPtrNames

Contains the pointer to the list with the addresses of the functions names.

plPtrOrdinals

Contains the list with the addresses of the functions ordinal values.

Example use

.data?

strucExportsInfo PL_EXPORTS_INFO <>

.code

invoke plGetExportsInfo, addr strucExportInfo

lea esi,offset strucExportsInfo
assume esi:ptr PL_EXPORTS_INFO

inc [esi].plSizeOfExportDir

invoke plUpdateExportsInfo, addr strucExportsInfo