WCU / Cybersecurity
~/CSC 471/Class 07/KP 16
Class 07 · KP 16 / 19

Tie-In: Lab 3 Part B — Hook MessageBoxW

You will breakpoint MessageBoxW, read its arguments, and prove

you can alter behavior.

x64 calling convention (first 4 args)

RDX and R8 are pointers — follow them in the dump as

Unicode to read the actual strings.