The GetWindowText function copies the text of the specified window

plMapOffsetToRVA

The plMapOffsetToRVA converts a Map Offset to Relative Virtual Address (RVA).A Map Offset is a pointer from the opened file (which is mapped during the openning process).

plMapOffsetToRVA(
   DWORD plMapOffset,       // The Offset to be converted
);

Parameters

plMapOffset

DWORD that contains the Map Offset, which will be converted to a Relative Virtual Address (RVA).A Map Offset is a pointer from the opened file (which is mapped during the openning process).

Return Value

If the function succeeds, the return value is a RVA, which is generated using the selected File Offset.

Example

.data?

    strucPointers PL_POINTERS <>

.code

    invoke plGetPeInfo, NULL, addr strucPointers, NULL

    lea eax,offset strucPointers

    assume eax:ptr PL_POINTERS

    mov eax,[eax].plSectionsStart

    invoke plMapOffsetToRVA,eax