views:

11

answers:

1

PointerToSymbolTable:

The file offset of the COFF symbol table, or zero if no COFF symbol table is present. It is 0 for PE image files, since debugging information is depreciated.

Why it says debugging information is depreciated for PE image? AFIAK, executables in windows can also carry debug information,isn't that the case?

A: 

Note sure where you're reading that from, but this page in MSDN has no such caveat.

You need to remember that MSDN is somewhat Microsoft-specific. And in Microsoft-world, coff debugging information has long since been replaced by .PDB files, so you almost never get symbols inside the executable image when you use a Microsoft compiler (and hence PointerToSymbolTable will always be 0).

There are still programs that use embedded COFF data (such as MinGW, I believe).

Dean Harding
What's the structure name for debug symbols in PE?
COMer

related questions