I'm running notepad.exe through Hiew, in order to make a message box display when notepad is started. I followed the directions, changing the .text section virtual size to the raw data size, then added unicode strings to the zero padding after the .text section. I pushed the parameters (in reverse order) and called MessageBoxW.
What happens is the message box is displayed but the caption and text are just gibberish. In Hiew, when I push the pointer onto the stack, it shows that the text actually points to some other place, not to my string.
My question is, is there some trick to pushing the correct pointer as a MessageBoxW parameter?