How to call non-exported DLL functions?

I need to call (get) non-exportable DLL functions. Unlike the PE export table, non-export does not have a table containing entries for them. Moreover, all disassemblers, such as IDAPro and other debuggers, display only exported function names with decorated names (after Shift + F3 in the case of IDA) and show all other functions, such as sub_000FF.

Any idea how to get and call non-exported DLL functions programmatically? ( GetProcAddress after LoadLibrary only calls decorated exported functions that are not intended to be exported.)

+4
source share
1 answer

I solved the problem myself after using the DIA SDK.

I collected the function address from there, and then through mounting rotations I can call the function directly. Thanks everyone for the comments.

+2
source

Source: https://habr.com/ru/post/1301314/


All Articles