Hook unexported functions about detours HOT 5 CLOSED

You need to use something else to find the address, for example the DIA API with PDB symbols, or hardcoding a raw offset, etc.

Then once you have a function pointer, you should be able to use Detours as usual.

from detours.

I'm not familiar with DIA Api and googling brings up some unrelated stuff, can you please provide link or some documentation?

thanks

from detours.

You can also use a tool like Ghidra or IDA to find the address of the function you want to hook.

You can then:

• Subtract that address with the load address Ghidra/IDA sets (this gives you the offset)
• Find the base address of the loaded executable (You can use GetModuleHandleA)
• Add that offset to the base address of the loaded executable. You now have the address of the function to hook.

from detours.

Yes, that would be hardcoding a raw offset

from detours.

Thanks it was very helpful

from detours.