Hello and welcome to the lesson on reverse engineering IED hooking.
So let us now run the target again.
IED target.
The first message box has popped up, there is a test show for the big three.
So click on this easy for we were showing a big opening.
And then attach to the first target, to the IED target.
And then click run over here next.
We are going to go to the.
Memory map and look for the.
Text region of the memory, which is here.
I'd target double click on that and you will see it through message boxes in the text region.
And this is the one.
That is the second message box.
All right.
So according to our court, it is supposed to intercept and stop the second and third message box from
showing.
So let's see, let's see this function in the memories.
Yeah, the table.
So right click on this and then click on Follow in Dumb and select constant IED target message box.
Click on this and you will find here.
This is the address that contains the address of the function for Message Oxy.
And you can see the pattern of the here.
Now we are going to attach our our DNA, so click on the target and then Sally Miscellaneous and in.
Yeah.
Selectivity -- playing open a watch what happens to this address here?
Cali's v Chelsea nine.
So you can open.
And you see the address immediately changes to 10, 10 to three.
That means you have successfully injected our own function into this address to replace the original
one.
So this is a low level look when we do reverse engineering for the IED.
OK, so now if you continue to run the OK?
You see that the message box isn't pop up.
I suspect it because we intercepted the second and third message or here.
We do not allow the in a separate issue.
If you wanted to, you could try this second experiment by and commenting this in forwarding everything
to the origin message box.
And he should pop up.
And you can even continue then for the experiment by doing this saw and uncommon these two to only target
the second message box issue.
So that's all for the reverse engineering of IED hooking.
Thank you for watching.