SDK for Windows 1.04??

From: Cini, Richard <>
Date: Fri Jun 22 08:47:48 2001


        I'm using the Windows Sourcer program from V Communications. WinSrc
has the ability to generate an import library from any Windows program by
scanning the "exported functions" portion of the file header. So, running
this on kernel.dll would produce a listing of the exported function names.
Some functions are not exported by name, but by ordinal number only. These
are referenced in module.ordinal format (such as "kernel.34"). So,
subroutines disassembled by Sourcer are labeled with their real name
("GlobalLock") or if the name is not available, the ordinal ("KERNEL_34").

        This utility works on any Windows program using the NE, P3, LE, or
PE type headers.

        My whole point was that the 1.04 SDK would probably give me some
clues as to what the MSDOS_XX functions are since very few are exported by
name. Windows programs were not supposed to call down into MSDOS.EXE or
MSDOSD.EXE (the rough equivalent to win386.exe or vmm.vxd in current
versions), Microsoft exported most functions by ordinal.


Richard A. Cini, Jr.
Congress Financial Corporation
1133 Avenue of the Americas
30th Floor
New York, NY 10036
(212) 545-4402
(212) 840-6259 (facsimile)

-----Original Message-----
From: Fred Cisin (XenoSoft) []
Sent: Thursday, June 21, 2001 11:06 PM
Subject: Re: SDK for Windows 1.04??

On Thu, 21 Jun 2001, George Currie wrote:
> Two different concepts. The DOS tech refs are refering to the values
> to place in ah (I think, or was it al?) before making a DOS or BIOS
> int call. This is all pre-DLL days. Richard is referring to the
> ordinal number within a DLL to reference a specific function located
> in the DLL.

He is referring to the number reported by his disassembler that is
disassembling the Windoze program (into DOS compatible assembly language).
The value placed in AH IS for the purpose of referencing a specific
dunction located in the MS-DOS DOS function handler (INT 21h).

> Not all functions in a dll have their names exported and
> sometimes the only way to get to them is by ordinal number. This is
> one way that M$ creates 'value added' to their software by utilizing
> these undocumented calls.

And there were/are a few undocumented functions in MS-DOS, such as #34h,
and INT 28. And don't forget the "network redirector" (since 3.10) that
is needed even to use MS's CDROM drivers.

Fred Cisin            
PO Box 1236                     (510) 558-9366
Berkeley, CA 94701-1236
Received on Fri Jun 22 2001 - 08:47:48 BST

This archive was generated by hypermail 2.3.0 : Fri Oct 10 2014 - 23:33:59 BST