So you first Cranley bugger to take away the location of the address here.
Interesting, because I CBG
and then attached to the running for the same simple area, go to Symbol's select simpliciter DoubleClick
and then click here and search for string's going on.
You think that this.
And then out the sorry key, sorry string, and you will find it here, this double click to go to that
location and you want to select all the function for the BP.
So they saw it on key showing here, connection here.
So we just look for the push, BP, which will, you know, the start of the formation here to push
up.
So the function starts this address for all three nine three C, so likely and coppice.
Copy the address and put it in
that.
All right, and then the end of the function should be the hurried.
We just had this address so rightly on this, and you copy the address.
OK, so now show you another way to get these interesting addresses using changing.
So this fire everything again and one changing.
By the way, I would give you the links where you can download hastag and changing, so click on this
and attach to symbols here, open the memory of you and go to view for reference strings and guess.
And you say for all the strings.
Now look for click on Search, look for sorry,
and then hit on the button, fine, and there's a hit sorry Ronke and this is the address.
So double click on this.
And there you are.
And you want to go to the starting discussion.
You can just.
Right.
Click and hit and select the information.
And now you can see the start of the function is also pushing TV and it's the address.
And compared to what we found, actually B.G. is the same for all 290 increase and return is should
be this one.
So the Arrietty look for the Harrity scroll down and your heart and that's your function companion piece
is the same.
OK, so these are two ways you can use debuggers to find interesting addresses to be.
So now you have these two.
We are ready to decompiled according to the compiler function.
So we head back to Ghidorah.
We can detach judging from this, by closing, closing this Dagley, now we are Nyjer, so we are ready
to decompiled the interesting addresses and for that, how we show you in the next video.
Thank you for watching.