Hello.
In this video, we are going to use A.J. to study the good at a low level.
So let's is sexy to you to reverse engineer.
So, OK, let's close this previous one.
And we're going to rerun again, Target.
All right.
So now it's raining that is attached to a big city for the big, this is before we version to it.
And then over here, my option preferences as follows.
So I just click on file, click on Attach and then select the target for -- attached to.
And then click right.
And then here, playing symbols, you are going to look at the message box API, so message box API
comes from user data too.
And here you can search for it.
His message box and the first one is the one we want.
So double click on it and I put breakpoint here.
You can put a breakpoint by going to right clicking and selecting Breakpoint toggle.
Or you can use used to shortcut key, which is have to.
So now I've got a break point on the message box here.
Take a look at the instruction.
It's some respiratory and so on.
All right.
So now let us inject our the air and see what happens to this instruction.
So to inject, we're going to use process Hecker again.
So we have our process hacker here, select your target for who could replicate and click on miscellaneous
and inject.
Yeah.
And so like Yahoo, could you open so it is already injected?
So now that is reanalyzed, this region, the code correctly and over here, go through analysis.
Analyze more you.
And now you can see the instruction has changed to a gym.
That means Detour has inserted the hook and costs you to jump in one city, jump to the trampoline.
It has replaced the original going to the gym.
And if you come back to our original point diagram, you can see here the target function has been replaced
with a gym.
That's why you are seeing this charm here.
And then whatever was previously day is has been copied to the trampoline, which is another memory.
So this is handy too as well.
And if you continue now.
The press presenter.
You can put a breakpoint here if you have not done so previously, OK?
And so he's a break point.
And now he's stepped over.
He jumps to your trampoline.
Chance again.
And this is your example in.
Right.
So now less clear on this one from two years ago.
Just click on.
Click on Security Return.
Again, this is.
I mean, modify, so now you have in sight.
Your original court.
All right, so this is how the whole thing works in the low level using a DVD to view the reverse engineer.
Good, thank you for watching.