Hello and welcome back.
In this video, we are going to do a practical walkthrough on their behavior and look how the expert
directory structure, which the country to the air and comparing the V90 large.
So I mean, maybe two machine windows seven.
I created a photo call.
Now they have to.
And then you can go in download this zip file this project and Zip, put it in my desk to inside here
I have a window and the Dark Age here for which you can obtain by reading this, opening this text file
here you show you writing it.
He might be slightly different for yours, but basically he's in this.
So to get this view 90, you will go to this path here.
It means you open the sea dry, cleaning your seafood and go to program for x86 and then go to windows.
It's.
Can they look for 10 for Windows, 10 in before eating food?
And they look for 10 zero zero?
Maybe this number here helping is.
And then you say here there's a U.N. for the one year for Libya and throughout the region.
And then w-, you should be able to locate your win in the.
He's the one who invented a hedge, so a copy of me and he he copies in and put in this for the two
I this one.
Copy and.
So the reason the copyright is you don't want to accidentally add is far from this location.
So now you can open this, we need a huge rectly added, you know that?
And while you know, that is open, you can control if you search or you can just click on this search,
you search, find and here look for a spot.
And it's called dear.
You finally just go on.
So this is a structure for the part of the paper that contains the export directory.
Now we are going to open the country to the L in B using B B.
So let's go and look for an entity to the.
Connected to the oil is found in the sea dry windows system, 32.
System System32,
again, you can scroll down.
And under care, there should be kind of three to.
Yeah.
So you can directly copy this.
A PC in your this folder here, 90s.
All right, so this way you accidentally go in this far.
So now you can open this web.
So fire your bidet.
Now, all of these these files here shortcuts, so these shortcuts created from the flight order and
the activities.
You can find your B that he actually.
He would be back, you just right click and drag to the desktop to create your shortcut.
So now open feedback.
And then you're going to jail in the.
And BBC Sun say.
So if you go to the option here, there.
It is, but highly paid it, scroll down, you can see, and that has punditry directory structure,
he said this address.
So this is Schoharie reality to address.
So if you want to follow this in the memory, you just right click is full.
Are we in the FC?
Click on it and you come here.
Yes, how you get this?
So now this is a off your spot that it is right here.
And this is the member of the structure, so you can see characteristics here.
Refer to give it.
Which is this four characters this form right here?
Album Money Song Zeros, and then if you want to have a human readable view of this, all you need to
do is click on next step.
And then you can see the human readable view for all these bites here.
So characteristics here is referring to this four year because it's a dual format and the value is always
zero zero next only stand is in the Valley five five four six three one five, which is this in reverse
Phi Phi for the S.S. when fight.
Next, one major motion, two zeros to advice, you can confirm here you can see pediatrician and then
here my new addition is an excellent also zero referring to two base here.
And the next one will be a name, a 364 here in.
So this name is a name for this year, and the name is following this address a 364, which is this
a three six four?
So you can actually click this and follow this here and now you will see.
And this address is a name, Colonel 9:57 referring to this connected, you can tell that via Zoom enough
now to go back to the previous RV.
Just click on that you go back to the.
Now the next one is this one, so a busy highway is one.
So this refers to this one.
Here is for back to me.
So this one here is telling you that the ordinal starts from one deciding a Saturn one.
So we have a few ordinance.
You have to remember to get to the base one to get the actual arena.
So that's the meaning of this.
These are offsets and this is the base.
So if you if you want to calculate the actual know, you need to take these numbers at the base and
then you get your chance in a.
So there's a meeting on this next one is number of functions.
Assign them no functions as a diva.
So here the normal functions is Hex five seven.
Oh, which in this case vice handle and the number of names also see x y.
So that means that five hundred and seventy functions in Hex.
So you want to know actually how many of these you have to convert into decimal.
You can use their calculator, you can convert Hex.
So they're facing zero in decimal.
It is one thousand three hundred two functions.
So currently through the has gone one thousand three hundred ninety two functions.
Hey, spot that tightens.
So these two are referring to the fi sound.
Really nice.
No function.
Refer to this.
A number of.
Names refer to this is one.
So a number of functions referring to a number of her address here, actually, and my needs us to refer
to this.
So he got that done.
Her next one is to address all functions.
So this is the address where you have an array containing all the functions so you can right click this
folder, Harvey.
And here you go.
So the first address is.
This one, the first function, he said, is address.
He he wants zero, and you can even see here he he won't see zero second function, he said his address.
He even even he he when he when he is here, it is functioning, so this address.
Three zero three three zero.
And you can trace it all the way down.
So this is the original memory which contains the real functions.
So this area of function here is also known as a spot address table, which we have seen before in the
PowerPoint tonight.
This is a spot address table.
And then in the next one is the address of names.
So this is a friendly name for each of these functions.
Here you only see addresses of the aforementioned you don't know what they are, but this this table
here, this array here tells you what they are.
So you can actually click on this now and follow the memory.
So the first first address, which is this one, a few nights.
A three nine, six nine one contestant name the first function correctly likeliness and follow this
and then in memory, you can see the name of the function, which is acquired exclusive and you gave
and you will see acquire licensee.
You can do the same thing for the next one, right click for this information, and you can see the
second one is so long.
Is quite exclusive.
Now you can take a look at this, right click this and go there.
You can see is had had them, he added to me and so on.
So this is a real friendliness, which is human readable strings.
All right, the next one ordinance rectly follow.
And this is very ordinance type.
So ordinance signed to Vice what which is to base the first ordinance zero zero and this one uses zero
one eight one two zero two and zero three and so on.
And they're referring to this column here.
So as you recall from our site, the ordinance is the numbers referring to the location in the address
where they are met, where each of these function needs are met in the address that there is a purpose
of ordinance.
OK, so there's a meeting about this spot, actually.
The only thing you need to be aware of is that some of these effort going forward is now this amazing.
And see for this mean that this addresses contained does not contain the actual code for that function,
but you need to refer to another year for that actual code.
So how do you know that this is not the IP address of your chocolate?
You have to compare the if range how they explained that a tree so your x y data nine FC plus CFC when
we give you the range on the spot territory.
So if you are, if this particular address is false within within this range, then you can be sure
that it is.
It is a forwarding address, so be hit below that we need to go and look up and try to find the functioning
condition for this function.
Some of we don't have this folding, for example, like edit them.
So for those instances you can use and likely follow this, and in here you can see the actual implementation
for that particular function for the rest.
You will need to follow the folder.
So this is basically the practical walkthrough on examining the --, specifically the export
territory.
So these are basic knowledge which you need to have for these costs and to be using this basic foundational
knowledge in the coming lessons.
So that's all for these practical.
Thank you for which he.