For a Win32 Portable Executable (PE)
- How can I get the list of classes used
- How to get the offset of a given class
For a Win32 Portable Executable (PE) How can I get the list of classes
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
For a Win32 Portable Executable (PE)
A class does not have an offset – its methods have offsets. If the PE file is a DLL, and a class is exported, you can get offsets of its methods from the exported function table. The names will be mangled though. The mangling scheme is compiler- and version-specific.
You can use the DUMPBIN tool (available with Visual Studio, or in Platform SDK) to watch the export table. IIRC, it can even unmangle the names for you. If you want to do it programmatically, use the functions from the ImageHlp API –
ImageLoad()and so forth.There’s no good way to get offsets of nonexported class methods.
Also, offsets can be found in a MAP file, or in debug symbols, or in a PDB file. If it’s a third party product, those won’t be available to you, most likely.
EDIT re: Microsoft DLLs. Microsoft makes debug symbols for a lot of their files (both Win32 and .NET) available via the Microsoft Symbol Server. Visual Studio since v. 2005 can pull those symbols automatically upon DLL loading.