22 Jun
2001
22 Jun
'01
1:47 a.m.
Fred:
I'm using the Windows Sourcer program from V Communications. WinSrc
has the ability to generate an import library from any Windows program by
scanning the "exported functions" portion of the file header. So, running
this on kernel.dll would produce a listing of the exported function names.
Some functions are not exported by name, but by ordinal number only. These
are referenced in module.ordinal format (such as "kernel.34"). So,
subroutines disassembled by Sourcer are labeled with their real name
("GlobalLock") or if the name is not available, the ordinal
("KERNEL_34").
This utility works on any Windows program using the NE, P3, LE, or
PE type headers.
My whole point was that the 1.04 SDK would probably give me some
clues as to what the MSDOS_XX functions are since very few are exported by
name. Windows programs were not supposed to call down into MSDOS.EXE or
MSDOSD.EXE (the rough equivalent to win386.exe or vmm.vxd in current
versions), Microsoft exported most functions by ordinal.
Rich
==========================
Richard A. Cini, Jr.
Congress Financial Corporation
1133 Avenue of the Americas
30th Floor
New York, NY 10036
(212) 545-4402
(212) 840-6259 (facsimile)
-----Original Message-----
From: Fred Cisin (XenoSoft) [mailto:cisin@xenosoft.com]
Sent: Thursday, June 21, 2001 11:06 PM
To: classiccmp(a)classiccmp.org
Subject: Re: SDK for Windows 1.04??
On Thu, 21 Jun 2001, George Currie wrote:
Two different concepts. The DOS tech refs are
refering to the values
to place in ah (I think, or was it al?) before making a DOS or BIOS
int call. This is all pre-DLL days. Richard is referring to the
ordinal number within a DLL to reference a specific function located
in the DLL.
He is referring to the number reported by his disassembler that is
disassembling the Windoze program (into DOS compatible assembly language).
The value placed in AH IS for the purpose of referencing a specific
dunction located in the MS-DOS DOS function handler (INT 21h).
Not all functions in a dll have their names exported
and
sometimes the only way to get to them is by ordinal number. This is
one way that M$ creates 'value added' to their software by utilizing
these undocumented calls.
And there were/are a few undocumented functions in MS-DOS, such as #34h,
and INT 28. And don't forget the "network redirector" (since 3.10) that
is needed even to use MS's CDROM drivers.
--
Fred Cisin cisin(a)xenosoft.com
XenoSoft http://www.xenosoft.com
PO Box 1236 (510) 558-9366
Berkeley, CA 94701-1236