How to call non-exported functions of a DLL?

问题

I need to call (get) non-exported functions of a DLL. Unlike PE export table, non-exports do not have any table having entries for these. More over, all disassembler like IDAPro and other debuggers only show exported function names with decorated names (After Shift+F3 in case of IDA) and show all other functions like sub_000FF sorts of.

Any idea how to get and call non-exported functions of DLL programmatically? (GetProcAddress after LoadLibrary only calls decorated exported functions not designed for non exports.)

回答1:

I solved the problem myself after usage of of DIA SDK .

I collected the function address from there and then via assembly rotuines I am able to call the function directly. Thanks everybody for comments.

来源：https://stackoverflow.com/questions/2264699/how-to-call-non-exported-functions-of-a-dll