#define UNICODE
#define _UNICODE

#include <tchar.h>
#include <windows.h>
#include <ObjBase.h>
#include <ocidl.h>



void GetTypeInfoName(LPTYPEINFO pITypeInfo, LPTSTR pszName, MEMBERID memid)
{
BSTR pszTypeInfoName;

HRESULT hr = pITypeInfo->GetDocumentation(memid, &pszTypeInfoName, 0, 0, 0);
if ( S_OK != hr )
{
_tcscpy(pszName, _T("<unknown>"));
return;
}

#ifndef UNICODE
wcstombs(pszName, pszTypeInfoName, MAX_PATH);
#else
wcsncpy(pszName, pszTypeInfoName, MAX_PATH);
#endif

SysFreeString(pszTypeInfoName);
}

typedef BOOL (WINAPI* ENUMTYPELIBFUN_CALLBACK)(int nType, LPCTSTR lpClassName, LPCTSTR lpFunName, ULONG Address, LPARAM lParam);

DWORD EnumTypelibFun(LPCTSTR lpFilePath, ENUMTYPELIBFUN_CALLBACK pfnCallback, LPARAM lParam)
{
HRESULT hr;
LPTYPELIB lpTypeLib;
HMODULE hModule;
PIMAGE_DOS_HEADER lpDosHeader;
PIMAGE_NT_HEADERS lpNtHeader;
DWORD dwResult = 0;

hModule = LoadLibrary(lpFilePath);
if ( hModule == NULL )
{
return 0;
}

lpDosHeader = (PIMAGE_DOS_HEADER)hModule;
lpNtHeader = (PIMAGE_NT_HEADERS)((ULONG)hModule + lpDosHeader->e_lfanew);

hr = LoadTypeLib(lpFilePath, &lpTypeLib);
if ( S_OK != hr )
{
FreeLibrary(hModule);
return 0;
}

UINT nCount = lpTypeLib->GetTypeInfoCount();
for ( UINT i = 0; i < nCount; i++ )
{
LPTYPEINFO lpClassType;
LPTYPEATTR lpClassAttr;
IClassFactory* lpClassFactory;

hr = lpTypeLib->GetTypeInfo(i, &lpClassType);
if ( S_OK != hr )
{
continue;
}

hr = lpClassType->GetTypeAttr(&lpClassAttr);
if ( S_OK != hr )
{
lpClassType->Release();
continue;
}

if ( TKIND_COCLASS != lpClassAttr->typekind )
{
lpClassType->ReleaseTypeAttr(lpClassAttr);
lpClassType->Release();
continue;
}

hr = CoGetClassObject(lpClassAttr->guid,
CLSCTX_INPROC_SERVER,
NULL,
IID_IClassFactory,
(PVOID*)&lpClassFactory
);
if ( hr != S_OK )
{
lpClassType->ReleaseTypeAttr(lpClassAttr);
lpClassType->Release();
continue;
}

for ( UINT j = 0; j < lpClassAttr->cImplTypes; j++ )
{
HREFTYPE hRefType;
LPTYPEINFO lpRefTypeInfo;
LPTYPEATTR lpRefTypeAttr;
LPUNKNOWN lpUnknown;
DWORD Index;
TCHAR szClassName[MAX_PATH];
TCHAR szName[MAX_PATH];
PULONG VirtualTable;
IDispatch* lpDisptach;

hr = lpClassType->GetRefTypeOfImplType(j, &hRefType);
if ( S_OK != hr )
{
continue;
}

hr = lpClassType->GetRefTypeInfo(hRefType, &lpRefTypeInfo);
if ( S_OK != hr )
{
continue;
}

hr = lpRefTypeInfo->GetTypeAttr(&lpRefTypeAttr);
if ( S_OK != hr )
{
lpRefTypeInfo->Release();
continue;
}

hr = lpClassFactory->CreateInstance(NULL, IID_IDispatch, (PVOID*)&lpDisptach);
if ( S_OK != hr )
{
lpRefTypeInfo->ReleaseTypeAttr(lpRefTypeAttr);
lpRefTypeInfo->Release();
continue;
}

lpDisptach->QueryInterface(lpRefTypeAttr->guid, (PVOID*)&lpUnknown);
VirtualTable = *(PULONG*)lpUnknown; // 虚表基址

GetTypeInfoName(lpRefTypeInfo, szClassName, MEMBERID_NIL);
for ( Index = 0; Index < lpRefTypeAttr->cFuncs; Index++ )
{
LPFUNCDESC lpFuncDesc;
ULONG FunAddr;

hr = lpRefTypeInfo->GetFuncDesc(Index, &lpFuncDesc);
if ( hr != S_OK )
{
continue;
}

GetTypeInfoName(lpRefTypeInfo, szName, lpFuncDesc->memid);
dwResult++;

FunAddr = VirtualTable[Index] - (ULONG)hModule + lpNtHeader->OptionalHeader.ImageBase;
if ( !pfnCallback(0, szClassName, szName, FunAddr, lParam) )
{
lpRefTypeInfo->ReleaseFuncDesc(lpFuncDesc);
break;
}

lpRefTypeInfo->ReleaseFuncDesc(lpFuncDesc);
}

for ( Index = 0; Index < lpRefTypeAttr->cVars; Index++ )
{
LPVARDESC lpVarDesc;
DWORD VarAddr;

lpRefTypeInfo->GetVarDesc(Index, &lpVarDesc);
if ( hr != S_OK )
{
continue;
}

GetTypeInfoName(lpRefTypeInfo, szName, lpVarDesc->memid);
dwResult++;

VarAddr = VirtualTable[lpVarDesc->oInst] - (ULONG)hModule + lpNtHeader->OptionalHeader.ImageBase;
if ( !pfnCallback(1, szClassName, szName, VarAddr, lParam) )
{
lpRefTypeInfo->ReleaseVarDesc(lpVarDesc);
break;
}

lpRefTypeInfo->ReleaseVarDesc(lpVarDesc);
}

lpUnknown->Release();
lpRefTypeInfo->ReleaseTypeAttr(lpRefTypeAttr);
lpRefTypeInfo->Release();
}

lpClassFactory->Release();
lpClassType->ReleaseTypeAttr(lpClassAttr);
lpClassType->Release();
}

lpTypeLib->Release();

return dwResult;
}

BOOL WINAPI EnumTypeLibCallback(int nType, LPCTSTR lpClassName, LPCTSTR lpFunName, ULONG Address, LPARAM lParam)
{
return TRUE;
}

int main(int argc, char* argv[])
{
CoInitialize(NULL);

EnumTypelibFun(_T("d:\\ppstream\\PowerList.ocx"), EnumTypeLibCallback, 0);

CoUninitialize();
return 0;
}