Why are some methods inside the session file referred to as $E18 or $E20, etc.?

0 Likes

Problem:

Why are some methods inside the session file referred to as $E18 or $E20, etc.?

Resolution:

The $E___ is an automatically generated name for an exported function, which is being exported by ordinal number. These numbers are inserted by the compiler. The advantage is that it creates a smaller image or  hides function name. However, the consequence is the exported API's name is not stored in the exporting dll. Our symbol engine reads what the image has, so if the creator compiled with ordinal numbers, then there are no function names for Performance/Coverage Analysis to read in.

Old KB# 11336
Comment List
Anonymous
Related Discussions
Recommended