The GetWindowText function copies the text of the specified window

PL_PEINFO

The PL_PEINFO structure contains info from the PE Header of a PE file.Could be used to update the PE Header.

PL_PEINFO{
   DWORD    plEntryPoint
   DWORD    plImageBase
   DWORD    plSizeOfImage
   DWORD    plSizeOfHeaders
   DWORD    plFileAlignment
   DWORD    plCheckSum
   DWORD    plSectionAlignment       	
   WORD     plNumberOfSections
};

Members

plEntryPoint

Contains the entry point's RVA.

plImageBase

Contains the Image Base of the file.This is the base address, where the file will be loaded in memory.

plSizeOfImage

Contains the size of the file, when loaded in memory (the virtual size).

plSizeOfHeaders

Contains the size of the header.

plFileAlignment

Contains the value, with which the sections should be aligned raw.

plCheckSum

Contains unique DWORD (something like uniq file identifier)

plSectionAlignment

Contains the value, with which the sections should be aligned virtually.

plNumberOfSections

Contains the number of sections that are in the file.

Example use

.data?

strucPeInfo PL_PEINFO <>

.code

invoke plGetPeInfo,addr strucPeInfo, NULL, NULL

lea esi,offset strucPeInfo
assume esi:ptr PL_PEINFO

mov [esi].plCheckSum,12345678h

invoke plUpdatePeInfo,addr strucPeInfo,NULL

See Also

plGetPeInfo, plUpdatePeInfo