killchain-compendium/Reverse Engineering/Dynamic Linked Libraries.md

261 B

DLL Reversing

  • Start DLL on its own with the help a wrapper
HMODULE dll = LoadLibraryA("DLL.DLL");
typedef void(WINAPI* Add_TypeDef)(int, int); // Add(int x, int y)
Add_TypeDef Add = (Add_TypeDef)GetProcAddress(dll, "Add_MangledName");
Add(1, 2);