And lo and behold, come back in this video, I'm going to show you how to reverse C two and also how
to configure Ghidorah to highlight all similar selected labels.
I have my guitar open, so I'm going to try Seeta into the second one.
It has detected the format to be AV file and also a 64 bit program.
That's OK.
And this is the result summary.
Compiler, geeky little engine.
And I say 64 bit less click, OK?
I'm now going to analyze it.
Jason Seeta into the browser Angliss.
Deja vu ask Seeta has not been analyzed, would you like to analyze it?
Now click on.
Yes.
Drug abuse, all the listed scripts.
To analyze, click, analyze.
No need to change anything.
And the bottom right corner shows you the status of the analysis and it has completed.
Now go over to the small tree panel.
And look for the functions, Holder expand on the functions for the.
And scroll down to look for the main function.
Click on the main function and Ghidorah, we showed you this, a similar view in the center panel.
And in the right panel, he said decompiled view in C language.
The barometer for the main function is from.
The signature is wrong.
We are now going to correct it correctly on the main function and select edit function signature.
Change the Barum one signature to Occy.
For argument count and for Paramatta.
Let's change it to.
And free of strings, cha star, star, ARGT, the.
OK.
Now, notice the changes propagate to the parameters, yes.
Over here.
In this line, we see that it is comparing.
The program come on line.
To see whether or not there are two parameters, so let us try to run it first and see what he does.
Click on the terminal to open one.
Close to.
We will use the.
Fund manager over here, right, click on this, you can reach this folder by clicking on the home button
on the home icon and then selecting your section one for the.
The book going to open a terminal in this location, right, click and select open terminal here.
We can now runcie to.
We don't any parameter.
He will display a message saying, please apply the password.
We are now going to play.
A barometer three days and you get a different message, see, we never used a password that shot,
so let's give it a longer password hit enter and he now sees wrong answer.
Try again.
So let's head back to Brazil.
You can select the browser from here and scroll down and select a browser, as you can see.
Oxy is testing right now to Parramatta's.
In this example here, there is only one perimeter, so oxes one, so in this case, because acces not
do it will not execute this, but instead he will go to the spot and put a string.
Beauty is a function to print a string.
It is also known as boot string and boots for boot string.
You put a string principly, please apply the password, which you see here in the second run re-supply
password, eh?
So this time Oxys two, because there are two arguments.
So you enter the if block here instead of the L spot here, if we don't use the string length to function
to calculate the length of the input.
The energy input is starting up the one.
I'm the one is referring to a movie zero, he's referring to the name of the program itself, which
is Setu.
So if you wanted to extract the one they use a in, you must specify ACRI one which is here.
Arkley one.
So that is the meaning of the second parameter to the main function.
So you calculate the length of the perimeter and started in this variable is one two, so we know that
as far to is a variable that starts the length.
Therefore, we can rename it.
Yes, right, click on this variable and select rename variable.
Alternatively, you can also press the handle key on your keyboard.
The key is a shortcut for renaming variables.
Just click on this and now you can rename it to something meaningful length.
Now, when reading this line, it is easier to understand.
Could.
Now, when you click on Link.
This part is not highlighted.
It will be nice if all the lines were highlighted.
So that is easier for us to do analysis.
You can normally highlight all the similar variables by the middle mouse button, but sometimes it doesn't
work.
So in order to fix that, we want it to highlight all the variables that we selected.
By using the left click instead of the middle mouse click to do that, hit over to the edit menu and
click on it and then select two options.
Over here, scroll down to.
Listing feels.
Foda and expen.
Down here, scroll down and look for the property, call those tax highlight and click on it on the
right, you will see that.
There is a.
A few settings that you can set.
The first one is to Aniba because the attacks highlight and the color that you want to use.
And it took nine shochu, which most important to use currently it is set to middle to on the listbox
here and select left.
And then click apply, you can also restore the default settings if you saw the site now click OK.
This time.
When you click on a variable or label, you will highlight all the similar variables inside a listing.
So this is how you can set the Ghidorah to highlight Unsimilar selected LeBeau's.
So that is how we do this and I will stop here for this video and continue with the analysis of this
call in the next video.
Thank you for watching.