1 00:00:00,600 --> 00:00:07,170 Now is now Powell, both this target for who grace whereas the WHO case. 2 00:00:08,250 --> 00:00:19,350 So let's open for an ETF to combine problem and navigate to this for the right click and coffee and 3 00:00:19,370 --> 00:00:20,520 then you get TV. 4 00:00:21,750 --> 00:00:25,740 And then there's a basket which can combine both together. 5 00:00:25,800 --> 00:00:27,810 It's just to compound that. 6 00:00:30,400 --> 00:00:33,860 So it's been compiled, and you can see the SFR here. 7 00:00:33,880 --> 00:00:36,280 Let's run this target for Hugo and see what he does. 8 00:00:40,620 --> 00:00:42,540 And this is your first message box. 9 00:00:43,260 --> 00:00:48,660 He has got the caption voice message box and a message in the content reads. 10 00:00:48,990 --> 00:00:49,450 Hello. 11 00:00:49,510 --> 00:00:50,400 I am first message. 12 00:00:51,230 --> 00:00:54,410 You hit OK, you open. 13 00:00:54,570 --> 00:00:58,110 Closed the first message box and open the second message box. 14 00:00:59,680 --> 00:01:06,760 And click OK again, no closer to second, this box and the message box, hello, message box. 15 00:01:07,750 --> 00:01:08,800 So this is why it does. 16 00:01:09,190 --> 00:01:15,160 And you can also see here the message target for Okojie starting targeted for exiting. 17 00:01:15,760 --> 00:01:22,420 And that corresponds to this printer here and this screener here and in between, you have your three 18 00:01:22,420 --> 00:01:24,580 message box popping up SBIC. 19 00:01:25,600 --> 00:01:29,830 So let us try to know, inject the idea into it. 20 00:01:30,490 --> 00:01:31,660 So let's run it again. 21 00:01:33,220 --> 00:01:34,480 Target for good. 22 00:01:35,200 --> 00:01:37,060 So now the first message box is sure. 23 00:01:37,900 --> 00:01:42,270 And before he shows the second message box, we are going to inject. 24 00:01:42,650 --> 00:01:43,480 Yeah, yeah. 25 00:01:44,170 --> 00:01:51,040 And yeah, we are going to inject this one, which you have built -- dot the area and we are going 26 00:01:51,040 --> 00:01:52,210 to use Process Hacker. 27 00:01:52,630 --> 00:01:54,550 So let's open up process hacker. 28 00:01:56,490 --> 00:01:59,750 And then look for the target for who go here. 29 00:02:00,730 --> 00:02:06,240 Ranking on in select miscellaneous and then select Inject Other. 30 00:02:08,240 --> 00:02:10,880 It is like the WHO could yell and click open. 31 00:02:12,570 --> 00:02:20,100 And now you can see the output target for Greece starting coming from the target for the South and then 32 00:02:20,100 --> 00:02:25,320 message box and hooking is up is zero, which is coming from the --. 33 00:02:27,490 --> 00:02:29,350 So he's coming from. 34 00:02:31,010 --> 00:02:34,550 Here, message boss who can result, especially in such. 35 00:02:36,220 --> 00:02:41,380 So now it is hope, and we can now do whatever we want. 36 00:02:41,800 --> 00:02:46,810 So in this case, we have sir, we have replaced. 37 00:02:47,140 --> 00:02:52,060 The original message was modified one year modify one is here. 38 00:02:53,940 --> 00:02:54,330 So, right. 39 00:02:54,540 --> 00:02:56,970 So the modified message box, we do this. 40 00:02:59,110 --> 00:03:03,910 Mortified message box got no message box pop up on the screen, so let's see. 41 00:03:06,190 --> 00:03:08,800 So now if you click close here, see what happens. 42 00:03:11,020 --> 00:03:17,230 No second message box has popped up and you see here modified message box got no message, box boxes 43 00:03:17,230 --> 00:03:17,620 popped up. 44 00:03:18,310 --> 00:03:23,830 And again, second time my modified message Moscow message box box on my screen. 45 00:03:24,520 --> 00:03:25,840 So what he has done is. 46 00:03:27,510 --> 00:03:30,030 This Detroit dash has to intercept it. 47 00:03:30,060 --> 00:03:33,180 He always name is his boss and replace it with a modified message box. 48 00:03:33,840 --> 00:03:38,280 And when modified message box call is run, he will bring this message. 49 00:03:38,970 --> 00:03:41,250 We should hear one direct message postcard. 50 00:03:41,440 --> 00:03:42,300 This is my papa. 51 00:03:42,900 --> 00:03:45,660 And then you just return ideology and increase. 52 00:03:46,110 --> 00:03:48,720 So he does not show the origin message box and all this. 53 00:03:48,930 --> 00:03:53,970 And then after that, the the third one is being quiet over here again. 54 00:03:54,420 --> 00:04:01,770 You intercept and then show this empty same message, which you see here that does not allow the message 55 00:04:01,770 --> 00:04:03,870 box to come up because he has modified it. 56 00:04:04,950 --> 00:04:05,280 All right. 57 00:04:05,640 --> 00:04:15,780 So let's do another experiment this time we anchormen this, we commend the uncommon and uncommon this. 58 00:04:16,230 --> 00:04:21,360 This time we are going to follow everything and allow the message box to show. 59 00:04:23,100 --> 00:04:23,450 All right. 60 00:04:23,670 --> 00:04:24,960 So analysts reckon part. 61 00:04:30,450 --> 00:04:39,360 And getting the Iran out target again, and now we hook it again in getting our -- again. 62 00:04:44,240 --> 00:04:48,170 OK, now when you click OK, the second message box, be sure. 63 00:04:49,160 --> 00:04:51,980 And you look again at that message box, to be sure. 64 00:04:52,500 --> 00:04:59,810 Now this happened because we have forwarded all the original parameters to the original message box. 65 00:05:00,620 --> 00:05:02,000 That's why he shows up. 66 00:05:02,720 --> 00:05:03,050 All right. 67 00:05:03,380 --> 00:05:06,850 What if you want to only intercept the second message box? 68 00:05:06,860 --> 00:05:08,750 How do you do that like this? 69 00:05:10,250 --> 00:05:13,550 We can use this and commend this. 70 00:05:16,280 --> 00:05:23,870 So this here will compare the caption, the caption, as you will remember, is the tech barometer. 71 00:05:25,380 --> 00:05:30,720 The barometer is a caption, so if you compare the caption either Captions Conference's second message 72 00:05:30,720 --> 00:05:33,650 box, then you will do this. 73 00:05:33,660 --> 00:05:41,130 I b modify it and then so you you change the content of the stream to say I have modify and you also 74 00:05:41,130 --> 00:05:44,640 change the icon to see a movie icon error. 75 00:05:45,420 --> 00:05:54,310 So you can get all this information by going to this here and take a look at that icon so you can show 76 00:05:54,480 --> 00:05:54,780 here. 77 00:05:56,360 --> 00:06:04,530 So to show to change the icon, all you have to do is change the parameter for the SOF software metering 78 00:06:04,730 --> 00:06:06,310 type sort of type. 79 00:06:07,340 --> 00:06:13,040 Originally it was me, OK, if you look at the tag of hookah code and we look. 80 00:06:14,460 --> 00:06:21,690 See, OK, but then this will show you, Mrs. Marshall, and the icon is information icon. 81 00:06:22,890 --> 00:06:29,700 We are going to intercept the second message box instead shows the we are going to show you icon error 82 00:06:29,700 --> 00:06:32,220 message and we're going to change the content of the message. 83 00:06:32,490 --> 00:06:39,890 So the second parameter you still get is your content, your stringer issuing instant message box. 84 00:06:41,750 --> 00:06:44,360 This is a second parameter over here. 85 00:06:45,430 --> 00:06:45,880 OK. 86 00:06:45,970 --> 00:06:48,190 And this symbol here is prime minister. 87 00:06:48,280 --> 00:06:50,440 You are combining two parameters together. 88 00:06:50,860 --> 00:06:51,880 So and be OK. 89 00:06:52,180 --> 00:06:54,070 OK, but then you and ensure you're OK by then. 90 00:06:54,580 --> 00:07:02,110 And the irony here is if I can get you one issue, so you buy it together so that both of you sure this 91 00:07:02,110 --> 00:07:05,190 symbol here is the big operator and wins. 92 00:07:05,290 --> 00:07:05,910 All right. 93 00:07:06,090 --> 00:07:10,540 So there's always a way for combining barometers together. 94 00:07:11,770 --> 00:07:18,100 So unless Recompile is saving, you remember to save it first and then rebuild within. 95 00:07:22,470 --> 00:07:24,630 Now we run our target first. 96 00:07:25,230 --> 00:07:32,400 That is sure the first message box, and now we hope we inject New Hope again using Process Hacker. 97 00:07:38,440 --> 00:07:38,950 OK. 98 00:07:39,550 --> 00:07:39,780 No. 99 00:07:39,850 --> 00:07:40,150 18. 100 00:07:40,190 --> 00:07:41,200 OK, you were fine. 101 00:07:41,710 --> 00:07:43,570 Then the second message box has been changed. 102 00:07:43,600 --> 00:07:50,650 You can hear the error error beeping sound, and you can also see the content has been changed to be 103 00:07:50,650 --> 00:07:51,220 modified. 104 00:07:51,640 --> 00:07:56,770 And you can also see they've also changed gear icon to the icon area. 105 00:07:57,850 --> 00:07:59,290 And this is coming from here. 106 00:08:00,900 --> 00:08:03,390 The icon area, and it continues to me. 107 00:08:03,730 --> 00:08:12,510 So this is how you can intercept and modify the parameters to a function call and do whatever you want 108 00:08:12,510 --> 00:08:12,780 with it. 109 00:08:13,560 --> 00:08:20,580 This is how you can intersect in the intersect, the function calls using the library. 110 00:08:21,030 --> 00:08:22,890 So that's all for this lesson. 111 00:08:22,950 --> 00:08:24,300 Thank you for watching.