PL_SECTION_INFO

    The PL_SECTION_INFO structure contains info from the PE Header of a PE file.Could be used to update the PE Header.

PL_SECTION_INFO{
   QWORD    plName
   DWORD    plVirtualSize
   DWORD    plVirtualAddress
   DWORD    plRawSize
   DWORD    plRawAddress
   DWORD    plCharacteristics
   DWORD    plPtrSection
};


Members

plName

   Contains the string with the Name of the section.It is aways exactly 8 bytes long.

 

plVirtualSize

    Contains the Virtual Size of the section (the size when the file is loaded in memory).

 

plVirtualAddress

    Contains the Virtual Address of the section.

 

plRawSize

    Contains the Raw Size of the section (the size on disk).

 

plRawAddress

    Contains the RAW Address of the section.

 

 plCharacteristics

    This DWORD contains the characteristics of the section.

 

plPtrSection

    Contains the pointer to the section in the file.

 

Remarks

 

    If you are going to use plUpdateSectionInfo the plPtrSection will not be touched.It is not used by the Library during the update process of the section.If there are changes in the position of the section in the file the plPtrSection in your structure will be updated by the Library auto.

Example use

 

.data?

    strucSectionInfo PL_SECTION_INFO <>

 

.code

    invoke plGetSectionInfo, addr strucSectionInfo, 1

   

    lea esi,offset strucSectionInfo
    assume esi:ptr PL_SECTION_INFO

 

    mov [esi].plVirtualSize,00002000h

    

    invoke plUpdateSectionInfo, addr strucPeInfo, NULL

 

See Also

plGetSectionInfo, plUpdateSectionInfo, plAddSection, plDeleteSection

Pumqara <programs@mail.bg> 2004. All rights reserved.