You are given a 16-byte string X. Describe briefly how one could find a message M such that the last three bytes of AESX (M) are 0x000102.

You are allowed only a single call to AES or its inverse. Explain breifly why the answer works.