View Full Version : MFC32.ordinal.???
generalhackbar
May 27th, 2001, 12:43
Hello,
I would like to know how to get the API 's name represented by MFC32.ordinal.??? while disassembling with Windasm.
Thanks.
Kayaker
May 27th, 2001, 19:02
Hi gh,
Your first post, which I replied to, got lost in the ISP shuffle I guess.
I haven't got mfc32 on my system, but if it's like the rest of the mfc dlls, most of the API's are referenced by ordinal, not by name. If you check out the dll in Exescope you'll see this.
MFC42.dll has only 6 named functions. Not sure if Wdasm recognizes these or not, the rest you'll never see anyway 'cause I don't think there's anything *to* see.
Kayaker
generalhackbar
May 30th, 2001, 02:32
thanks Kayaker,
i have found out that the names exist but the only way to translate the ordinal into the real name is to look into the MCF32.def.
Kayaker
May 30th, 2001, 04:45
Hi generalhackbar,
Just curious, are there really (semi)descriptive names in the .def file, or are they just generic default names?
For example in mfc42 the "names" of an exported function seem either to be descriptive, or just "Ordinal x"
Addr:5F479A16 Ord: 1 (0001h) Name: DllGetClassObject
Addr:5F46E19E Ord: 256 (0100h) Name: Ordinal:0100
Before linking, would the .def file contain something a bit more useful than "Ordinal 100", and would this info be transferred into the compiled dll?
Kayaker
I wrote a lousy little prog that inserts function names from mfc.def into wdasm .alf files. It should be attached to this post, with source, in a zip file.
I don't know how mfc32.def is set up, so I have no idea if it'll work. Mfc42.def is set up like this (for ordinal 5880 [decimal]):
?SetBorderStyle@COleControl@@QAEXF@Z @ 5880 NONAME
Let me know if it works.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.