1 00:00:00,630 --> 00:00:05,520 Hello, welcome to the pratico drew in line looking. 2 00:00:06,480 --> 00:00:15,930 So now let's try to compile the BofA Douglas relisting, could you call the combined ActionScript? 3 00:00:19,270 --> 00:00:26,320 Now that is being built, he can now test our target for betcha by running it first. 4 00:00:28,150 --> 00:00:32,170 So this is the first hello message box. 5 00:00:33,280 --> 00:00:35,770 It is coming from here. 6 00:00:37,250 --> 00:00:38,300 First message box. 7 00:00:40,370 --> 00:00:41,420 You click, OK. 8 00:00:42,440 --> 00:00:45,560 Now he's showing the second one coming from here. 9 00:00:47,090 --> 00:00:47,930 Okay. 10 00:00:48,680 --> 00:00:50,960 How is that message both coming from here? 11 00:00:52,250 --> 00:00:52,640 All right. 12 00:00:52,640 --> 00:00:57,730 So now we're run again, but this time you are going to inject the idea. 13 00:00:58,460 --> 00:00:59,510 So now he's running. 14 00:01:00,260 --> 00:01:03,590 We will inject using the process hacker. 15 00:01:05,960 --> 00:01:08,720 Look for the target for special good. 16 00:01:08,760 --> 00:01:19,610 Right click on it, go to miscellaneous inject DNA and select your special car and click Open immediately. 17 00:01:19,610 --> 00:01:25,340 You see the message target for who is starting and it is coming from here. 18 00:01:25,760 --> 00:01:28,310 Target for who is starting next. 19 00:01:28,310 --> 00:01:30,440 You will see this message message box. 20 00:01:30,450 --> 00:01:37,880 He has been hooked, which is coming from the special counsel and he is coming from. 21 00:01:39,150 --> 00:01:49,860 Here, message box has been hooked and followed by the message by and modified the message boxes at 22 00:01:50,220 --> 00:01:59,240 this address in memory, which is coming from here, followed by the invites for the copy. 23 00:01:59,520 --> 00:02:01,290 It's Fashion Week here. 24 00:02:04,550 --> 00:02:16,190 So now, if we continue to run by clicking, OK, you see, that is two new message mission nor message 25 00:02:16,190 --> 00:02:17,840 box pop up on screen. 26 00:02:18,680 --> 00:02:21,290 So it is expected it is coming from here. 27 00:02:21,710 --> 00:02:28,010 That is because I will how a modified message box has replaced the original message box. 28 00:02:28,550 --> 00:02:37,670 And each time he tries to show the second message box, he will instead come to our modified message 29 00:02:37,670 --> 00:02:39,220 box visual. 30 00:02:39,230 --> 00:02:42,380 Just up this line here you see on the screen. 31 00:02:43,460 --> 00:02:51,770 And then when he tries to call the message box for third time, he also calls have a modified message 32 00:02:51,770 --> 00:02:58,130 box, which shows the modified message here mono message box providing a screen for the second time. 33 00:02:58,850 --> 00:03:00,050 So it is how it works. 34 00:03:00,950 --> 00:03:08,540 So in the next lesson, I'm going to reverse engineer this and show you how it works from a low level. 35 00:03:09,020 --> 00:03:10,190 See you in the next lesson.