I would like to know any difference between ordinal and hint value in the native dlls? Anyone knows?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Ordinals can be thought of as the alternative (internal) name of a exported function (All exports have a ordinal and some only have the ordinal a.k.a. NONAME). They were common in 16-bit windows but not so much these days (The import/export tables are smaller if you don’t include the “string name”). They are slightly faster for the loader to look-up and are often used for undocumented functions. The downside is that they might not be stable from release to release.
The hint is used by the loader as a shortcut into the dll export table, if the hint offset does not match the expected function name the normal search is used.
Take a look at An In-Depth Look into the Win32 Portable Executable File Format for more details about the different PE sections.