Welcome to the practical walkthrough on IED hooking.
So let's copy the path through this folder, right click and copy and then open x64 and tools command
from.
And change to the directory that you just copy cargo capacity to build both the hookah as well as the
target.
Now that he has finished, you can see the two new files, the tiger itself and also the -- that
is trying the target and see what he does to make sure that he's looking.
So it shows the first message which is expected, we'll hear his message.
You click OK.
You show us the second message box coming from here, you look again and you show us the items box coming
from here.
And then here you can see the.
Console output target for Hugo he study coming from here.
If you hit OK, now you show the second.
Message target for exiting, which is coming from here.
So now we are going to hope the progress table using our hookah.
So let's try it again now is showing the first message box and you are going to use Process Hacker as
you sure, and then select right click me target.
Click on Miscellaneous and then click on Inject Yeah, and select your --, I.D. --.
Kate, Open.
No idea who has been injected, as has already been attached.
Yes, they've been sent.
Let's click OK.
Straight away, no pop up message box is showing you step.
We see.
This new console output, who has been set for it for machine message box here, if you look at the,
you will see that it comes from here.
From here, who has been set for it function.
And then after they.
Modified message, Moscow.
No message pop up on the screen.
So what he does is he executes the new function, which will replace.
If you hear used to replace the original function, so it is calling the hulking function, which is
just one monjuvi message which brings up this message modifying message box.
So this one is shown here.
After that, when the tiger process tries to open the message box, the third message box again, this
25 message box is caught and that's why it prints this line again.
And you see here after day, he prints target for Hugo Exiting, which is the last message that you
see just before he could.
Which is here.
OK.
So that's how it works.
So in the days of watching in the next video crew, reverse engineer the IED cable looking to have a
low level look, thank you for watching.