PL_SECTION_INFO

The PL_SECTION_INFO structure contains info from the PE Header of a PE file.Could be used to update the PE Header.
PL_SECTION_INFO{
QWORD plName
DWORD plVirtualSize
DWORD plVirtualAddress
DWORD plRawSize
DWORD plRawAddress
DWORD plCharacteristics
DWORD plPtrSection };
Members
plName
Contains the string with the Name of the section.It is aways exactly 8 bytes long.
plVirtualSize
Contains the Virtual Size of the section (the size when the file is loaded in memory).
plVirtualAddress
Contains the Virtual Address of the section.
plRawSize
Contains the Raw Size of the section (the size on disk).
plRawAddress
Contains the RAW Address of the section.
plCharacteristics
This DWORD contains the characteristics of the section.
plPtrSection
Contains the pointer to the section in the file.
Remarks
If you are going to use plUpdateSectionInfo the plPtrSection will not be touched.It is not used by the Library during the update process of the section.If there are changes in the position of the section in the file the plPtrSection in your structure will be updated by the Library auto.
Example use
|
.data? strucSectionInfo PL_SECTION_INFO <>
.code invoke plGetSectionInfo, addr strucSectionInfo, 1
lea esi,offset strucSectionInfo
mov [esi].plVirtualSize,00002000h
invoke plUpdateSectionInfo, addr strucPeInfo, NULL
|
See Also
plGetSectionInfo, plUpdateSectionInfo, plAddSection, plDeleteSection

Pumqara <programs@mail.bg> 2004. All rights reserved.