Click here to Skip to main content
15,392,679 members
Articles / Programming Languages / C++
Posted 25 Jan 2005


129 bookmarked

Using classes exported from a DLL using LoadLibrary

Rate me:
Please Sign up or sign in to vote.
4.94/5 (66 votes)
25 Jan 20056 min read
An article on loading a DLL explicitly using LoadLibrary and using the classes exported by the DLL.

Sample Image - classesexportedusingLL


I have seen quite a lot of code explaining how to use classes exported from a DLL in an application. However, all these describe the usage of the exported classes by linking implicitly to the DLL. Refreshing our DLL concepts, there are two ways for an application to use a function written in a DLL. The first way is to have your application's source code simply reference symbols contained in the DLL. This causes the loader to implicitly load (and link) the required DLL when the application is invoked. This is known as implicit linking.

The second way is for the application to explicitly load the required DLL (using a LoadLibrary() call) and explicitly link to the desired exported symbol while the application is running. In other words, if the application decides that it wants to call a function in a DLL, it can explicitly load the DLL into the process' address space, get the virtual memory address of the function contained within the DLL, and then call the function using this memory address. The beauty of this technique is that everything is done while the application is running and the application can unload the DLL from its process address space when it has finished its work with the DLL. As you might have guessed, this technique is known as explicit linking.


So far, I spoke of using functions, but hey, what about using classes exported from a DLL? Well, in the case of implicitly linked DLLs, there is no difference at all. But what about loading DLLs explicitly and using the exported classes? Well, under normal circumstances, it cannot be done, but I wrote this article not to explain to you why it cannot be done, but to give you an idea as to how you can do it. That's right!! Using exported classes by loading a DLL using a LoadLibrary() call.

But before proceeding further, I warn you that the method given below is sort of a hack, and if for any reason you plan to use it in your project, please take the prior approval of your boss ... (if by any chance you do manage to get his/her approval on this technique!!). However, this column is basically for your understanding and also for extreme cases when you just cant do without this hack.

Using the code

If you look at the sample code, you can see that I have created a Calculator DLL called Calc.DLL and I am using the calculating powers present in the DLL in my console application called UserOfCalc (I couldn't think of a better name!).

// Calc.DLL contains an exported class
// called CCalc that contains 3 methods called Add,
Sub and GetLastFunc (). It is as follows:

// CALC.H - declares the CCalc class
// that is exported from the DLL
// and is imported in the EXE

#include <tchar.h>

#define CALC_API __declspec (dllexport)
#define CALC_API __declspec (dllimport)

#define SOME_INSTN_BUF        260

class CALC_API CCalc

    CCalc (); 

    int Add (int i, int j);
    int Sub (int i, int j);
    TCHAR* GetLastUsedFunc ();


The implementation of this DLL is as shown in the file Calc.cpp:

#include "Calc.h"
#include <windows.h>

    return TRUE;

// Ctor, initializes the m_szLastFuncCalled array
CCalc::CCalc ()

    memset (m_szLastUsedFunc, 0, sizeof (m_szLastUsedFunc));
    strcpy (m_szLastUsedFunc, "No function used yet");

int CCalc::Add (int i, int j)
    strcpy (m_szLastUsedFunc, "Add used");
    return (i + j);

int CCalc::Sub (int i, int j)
    strcpy (m_szLastUsedFunc, "Sub used");
    return (i - j);

Now, how do we use the functions present in this Calc class by explicitly loading the DLL? The steps are as follows:

  1. The first step is to load the Calc.DLL library in your application using LoadLibrary.
    HMODULE hMod = LoadLibrary ("Calc.dll");
    if (NULL == hMod)
        printf ("LoadLibrary failed\n");
        return 1;
  2. Since you have the header file of Calc.DLL, the next step is to allocate a block of memory that matches the class layout, and call your constructor code.
    CCalc *pCCalc = (CCalc *) malloc (sizeof (CCalc));
    if (NULL == pCCalc)
        printf ("memory allocation failed\n");
        return 1;

    But why in the C++ world are we using malloc instead of new!! Because the new operator calls CCalc's constructor for which we don't have any access. Remember, we have to load the DLL dynamically and hence there is no definition of CCalc's constructor available to us at build time.

    Hence we just obtain an uninitialized block of memory whose size equals the CCalc class' size.

  3. If you look up the exported functions in Dumpbin.exe (that's located under your Microsoft Visual Studio\VC98\Bin directory), and type dumpbin /exports, <path to="" calc.dll="">you will see a list of functions exported by the DLL. (By the way, I have used a DEF file to unmangle the mangled function names.) It is as shown in the figure.

    Figure 1 - Dumpbin output

    The list contains the virtual memory address of the functions Add, Sub, GetLastUsedFunc and the constructor.

    Since we obtained the block of memory, we have to call the constructor to initialize the block of memory. So, we get the relative virtual address of the constructor in the DLL.

    PCTOR pCtor = (PCTOR) GetProcAddress (hMod, "CCalc");
    if (NULL == pCtor)
        printf ("GetProcAddress failed\n");
        return 1;

    PCTOR is a function pointer and is present at the top of UserOfCalc.cpp. It is defined as follows:

    typedef void (WINAPI * PCTOR) ();
  4. Since we have the address of the constructor, we have to explicitly call it to initialize the block of memory obtained by malloc. Yes, but how do we associate an object for the constructor?

    If you remember, when any member function is called, including the constructor, the address of the object gets quietly passed to the called function and this address is stored in the stack. On an Intel based machine, this address of the object is pushed onto the stack via the ECX register. So, if you create a class and call its member function, the ECX register contains the 'this' pointer. This screen shot should make things clearer.

    Figure 2 - Watch window output

    If you observe the disassembly window, just after the execution of the line:

    LEA ECX, [EBP-4]

    you will see that the contents of ECX and '&bmw' are the same. On a machine having a different processor architecture, it could be another register instead of ECX. We just have to figure that out.

  5. Coming back to our Calc.dll, since we already have the address of a block of memory (that will in the future be an object), we move this address into the ECX register by using the Visual C++ inline assembler syntax:
    __asm { MOV ECX, pCCalc }
  6. Since we have already obtained the address of the constructor, we just say:
    pCtor ();
  7. When your function pointer pCtor() returns from the DLL, it would have initialized the object of the class contained in the DLL. Voila!!
  8. To call any other member function of the Calc class, once again move pCalc to ECX and obtain the proc address of the exported function and simply call the function. If you look at the disassembly for any simple class, you will observe that before any member function call, there is always an assembly instruction to move 'this' into ECX. This is basically what we have done.

Points of Interest

If you single step through the source code, this concept will be much clearer to you. For understanding the working of DLLs, please refer 'Programming Applications for Microsoft Windows' or 'Advanced Windows NT', both written by Jeffrey Richter. They are awesome!!

Finally, this is my first shot at writing something (anything!!). So, I would be really happy if you enjoy reading this article and if you find this useful. If you have any suggestions or criticisms, please feel free to mail me at


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Anup. V
Software Developer (Senior)
United States United States
No Biography provided

Comments and Discussions

Questionwill it work for class member function with multiple input parameters? Pin
ImNotMT13-Jul-21 22:23
MemberImNotMT13-Jul-21 22:23 
Suggestionalternative for both IA32 and x64 Pin
Elia10726-Feb-14 8:00
MemberElia10726-Feb-14 8:00 
GeneralRe: alternative for both IA32 and x64 Pin
Member 1485721329-Mar-21 3:54
MemberMember 1485721329-Mar-21 3:54 
QuestionError In GetProcAddress Pin
Dileep1217-Aug-13 0:05
MemberDileep1217-Aug-13 0:05 
Questionwhy your class members have no decoration names? Pin
BOY SCOUT8-Oct-11 16:01
MemberBOY SCOUT8-Oct-11 16:01 
GeneralNo .H file Pin
hawkeyeJ31-May-11 9:43
MemberhawkeyeJ31-May-11 9:43 
QuestionWhat if i wanna export a callback function Pin
mario_basanta21-Sep-10 6:13
Membermario_basanta21-Sep-10 6:13 
GeneralNot an ideal solution Pin
RAJKUMARV18-May-10 0:51
MemberRAJKUMARV18-May-10 0:51 
GeneralAhhh, but what if.. Pin
User 34555773-Mar-10 10:03
MemberUser 34555773-Mar-10 10:03 
GeneralPassing arguments to a Class Function Pin
Adeel Mirza18-Feb-10 19:29
MemberAdeel Mirza18-Feb-10 19:29 
Question"new" works for me.. but why? Pin
zx@mv5-May-09 23:46
Memberzx@mv5-May-09 23:46 
AnswerRe: "new" works for me.. but why? Pin
jef stuyck28-Mar-10 5:55
Memberjef stuyck28-Mar-10 5:55 
QuestionHow Dynamic works? Pin
Member 154123526-Dec-08 14:03
MemberMember 154123526-Dec-08 14:03 
GeneralNice Work Pin
Anand Todkar1-Aug-07 6:06
MemberAnand Todkar1-Aug-07 6:06 
QuestionCalling a Ctor which has parameters ? Pin
zapman25-Jun-07 23:38
Memberzapman25-Jun-07 23:38 
AnswerRe: Calling a Ctor which has parameters ? Pin
Anand Todkar1-Aug-07 5:58
MemberAnand Todkar1-Aug-07 5:58 
Questionhow can I use a class without having the .h file? Pin
6r15u3-May-07 5:44
Member6r15u3-May-07 5:44 
AnswerRe: how can I use a class without having the .h file? Pin
martypal20056-Jul-07 6:02
Membermartypal20056-Jul-07 6:02 
Generalgood one Pin
Boby Thomas P25-Mar-06 23:01
MemberBoby Thomas P25-Mar-06 23:01 
Generalmemory leak!!!!!!!!!! Pin
kimjim27-Jan-06 1:25
Memberkimjim27-Jan-06 1:25 
GeneralRe: memory leak!!!!!!!!!! Pin
Anup27-Jan-06 2:59
MemberAnup27-Jan-06 2:59 
GeneralGood Intro Pin
Armen Hakobyan17-Mar-05 20:46
professionalArmen Hakobyan17-Mar-05 20:46 
GeneralAlternative. Pin
Pablo Aliskevicius2-Feb-05 18:35
MemberPablo Aliskevicius2-Feb-05 18:35 
GeneralImprovement Pin
Robert Bielik27-Jan-05 10:53
MemberRobert Bielik27-Jan-05 10:53 
GeneralInteresting but not practical PinPopular
Alexandre Nikolov25-Jan-05 22:33
MemberAlexandre Nikolov25-Jan-05 22:33 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.