Now is now Powell, both this target for who grace whereas the WHO case.
So let's open for an ETF to combine problem and navigate to this for the right click and coffee and
then you get TV.
And then there's a basket which can combine both together.
It's just to compound that.
So it's been compiled, and you can see the SFR here.
Let's run this target for Hugo and see what he does.
And this is your first message box.
He has got the caption voice message box and a message in the content reads.
Hello.
I am first message.
You hit OK, you open.
Closed the first message box and open the second message box.
And click OK again, no closer to second, this box and the message box, hello, message box.
So this is why it does.
And you can also see here the message target for Okojie starting targeted for exiting.
And that corresponds to this printer here and this screener here and in between, you have your three
message box popping up SBIC.
So let us try to know, inject the idea into it.
So let's run it again.
Target for good.
So now the first message box is sure.
And before he shows the second message box, we are going to inject.
Yeah, yeah.
And yeah, we are going to inject this one, which you have built -- dot the area and we are going
to use Process Hacker.
So let's open up process hacker.
And then look for the target for who go here.
Ranking on in select miscellaneous and then select Inject Other.
It is like the WHO could yell and click open.
And now you can see the output target for Greece starting coming from the target for the South and then
message box and hooking is up is zero, which is coming from the --.
So he's coming from.
Here, message boss who can result, especially in such.
So now it is hope, and we can now do whatever we want.
So in this case, we have sir, we have replaced.
The original message was modified one year modify one is here.
So, right.
So the modified message box, we do this.
Mortified message box got no message box pop up on the screen, so let's see.
So now if you click close here, see what happens.
No second message box has popped up and you see here modified message box got no message, box boxes
popped up.
And again, second time my modified message Moscow message box box on my screen.
So what he has done is.
This Detroit dash has to intercept it.
He always name is his boss and replace it with a modified message box.
And when modified message box call is run, he will bring this message.
We should hear one direct message postcard.
This is my papa.
And then you just return ideology and increase.
So he does not show the origin message box and all this.
And then after that, the the third one is being quiet over here again.
You intercept and then show this empty same message, which you see here that does not allow the message
box to come up because he has modified it.
All right.
So let's do another experiment this time we anchormen this, we commend the uncommon and uncommon this.
This time we are going to follow everything and allow the message box to show.
All right.
So analysts reckon part.
And getting the Iran out target again, and now we hook it again in getting our -- again.
OK, now when you click OK, the second message box, be sure.
And you look again at that message box, to be sure.
Now this happened because we have forwarded all the original parameters to the original message box.
That's why he shows up.
All right.
What if you want to only intercept the second message box?
How do you do that like this?
We can use this and commend this.
So this here will compare the caption, the caption, as you will remember, is the tech barometer.
The barometer is a caption, so if you compare the caption either Captions Conference's second message
box, then you will do this.
I b modify it and then so you you change the content of the stream to say I have modify and you also
change the icon to see a movie icon error.
So you can get all this information by going to this here and take a look at that icon so you can show
here.
So to show to change the icon, all you have to do is change the parameter for the SOF software metering
type sort of type.
Originally it was me, OK, if you look at the tag of hookah code and we look.
See, OK, but then this will show you, Mrs. Marshall, and the icon is information icon.
We are going to intercept the second message box instead shows the we are going to show you icon error
message and we're going to change the content of the message.
So the second parameter you still get is your content, your stringer issuing instant message box.
This is a second parameter over here.
OK.
And this symbol here is prime minister.
You are combining two parameters together.
So and be OK.
OK, but then you and ensure you're OK by then.
And the irony here is if I can get you one issue, so you buy it together so that both of you sure this
symbol here is the big operator and wins.
All right.
So there's always a way for combining barometers together.
So unless Recompile is saving, you remember to save it first and then rebuild within.
Now we run our target first.
That is sure the first message box, and now we hope we inject New Hope again using Process Hacker.
OK.
No.
18.
OK, you were fine.
Then the second message box has been changed.
You can hear the error error beeping sound, and you can also see the content has been changed to be
modified.
And you can also see they've also changed gear icon to the icon area.
And this is coming from here.
The icon area, and it continues to me.
So this is how you can intercept and modify the parameters to a function call and do whatever you want
with it.
This is how you can intersect in the intersect, the function calls using the library.
So that's all for this lesson.
Thank you for watching.