The letter seems to check out as valid from what I can find. at any rate, there is a little-known solution that Microsoft has produced themselves that barely anyone ever used. Not many Microsoft employees still remember it cause it was a back-burner feature for 95/98: QuickView. You coul right-click on a file, select QuickView, and a window would popup showing the document, or if an executable, a list of infomation about it that is highly detailed, including ordinals, synbols, relocations, all sorts of offsets, and a number of useful things. It would dump infomation for PE and NE executables, and also MZ headers (DOS exec and stubs). Sadly, I don't know why a Microsoft employee didn't think of this before. It would be simple to get the Wine system libraries from the wine-win32-dlls package, and use a test Win98 box or so to find out what ordinals are in them.
Of couse, the gre/Winedump/Linux solution is also suggested. Try running that in combination of gdb.
Hans Leidekker wrote:
Hi list,
I'm forwarding a question from someone at Microsoft(!). I could recommend grep, winedump and Linux of course but I was wondering if anyone on this list has a good suggestion for this guy?
Don't believe it? I didn't either, but look at the headers, this mail was accepted from a mailserver in the microsoft.com domain:
Return-Path: a-gaolap@microsoft.com Received: from mail.vu.nl (IDENT:MU9AWzJpIWdhZlkI0e97gBGdUUEagQyZ@mail.vu.nl [130.37.129.161]) by mail.it.vu.nl (8.11.6/8.11.6) with ESMTP id k2DHsnL15211 for hans@mail.it.vu.nl; Mon, 13 Mar 2006 18:54:49 +0100 Received: from mail1.microsoft.com (mail1.microsoft.com [131.107.3.125]) by mail.vu.nl (8.11.6/8.11.6) with ESMTP id k2DHsjW13651 for hans@it.vu.nl; Mon, 13 Mar 2006 18:54:46 +0100 Received: from mailout1.microsoft.com ([157.54.1.117]) by mail1.microsoft.com with Microsoft SMTPSVC(6.0.3790.2499); Mon, 13 Mar 2006 09:54:41 -0800 Received: from RED-MSG-50.redmond.corp.microsoft.com ([157.54.61.146]) by mailout1.microsoft.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 13 Mar 2006 09:54:41 -0800
And here's the line from our mailserver log:
Mar 13 18:54:46 nath sendmail[13651]: k2DHsjW13651: from=a-gaolap@microsoft.com, size=6136, class=0, nrcpts=1, msgid=22DDEC51216B404E8C056F8F5198E9270616976E@RED-MSG-50.redmond.corp.microsoft.com, proto=ESMTP, daemon=MTA, relay=mail1.microsoft.com [131.107.3.125]
-Hans
---------- Forwarded Message ----------
Subject: Hi Date: Monday 13 March 2006 18:54 From: "Gaolai Peng (Volt)" a-gaolap@microsoft.com To: hans@it.vu.nl
Hi Hans,
My name is Gaolai. I am working on antivirus software for MS exchange.
One of our customers gets following error when he opened our product, "the ordinal 319 could not be located in the Dynamic link library wldap32.dll, "initialization of dll msrd2x40.dll terminated". For sure our product doesn't need ordinal 319, ldap_create_vlv_control. His environment is NT 4.0 SP 6. I looked up the msdn, func ldap_create_vlv_control requires Windows Vista or Windows XP. So I figured the user must have installed some software that needs at least XP or Vista?
From http://source.winehq.org/source/ChangeLog, I found out you were the
first person who implemented this function. Can you give some suggestion about how do I find out what software needs ordinal 319? What I am supposed to do to fix this without suggesting the user to install XP?
Thanks.
Gaolai