Search code examples
windowsdllassemblyportable-executable

C++ How Do I Export Address Table Hooking (EAT)?

How would I do Export Address Table (EAT) Hooking?

I'm able to do IAT (Import Address Table) hooking.

Can someone give me a example?

Thank You!

Solution

  • EAT hooking follows a very similar method to IAT hooking, the major difference is a change in where you look, have a look at the PE File Exports section of the Win32 PE format.

    A very simple (although in C) example can be found here, just compile and disassemble if you really need it in assembly form.