Hello and welcome to a new lesson in this lesson, I'm going to show you when to use the spy and how
to use spy before you use the spy you need to use in order to to identify whether he said on that application.
So the tool is following the activities folder.
It is called Detect It Easy.
The eyeshot.
Uses to used to scan whether using the net framework for Native or whether Mary Bollon file or whatever
file it is, and also it can detect whether or not a file has been protected or backed.
So the first thing we do is to scan the father.
We want to analyze using the detective.
So we are going to use this in PHARMACEUTICALLY, which is Sidonia, which is this file over here.
So if you have misplace or don't remember where you put it, you can download it from the resource section
for this lesson.
After unzipping it, you find your one phone here and these are all the other files who produce your
licence.
So this is the father you're going to analyze.
So in order to know whether this is a free file and an application, so we need to open this file.
We detected easy click on entry right here and then go and open a file, which is on your desktop.
King Undefiled.
And he shows you that it is a Donnette applications, so now you know, you can use the spy and I semhar
I have the same tools or any Internet tools.
If it is not a done application for, then you cannot use the spy or any of the Internet tools.
Since we know that this is an application, we can use the spy.
So for this particular one, we are not sure whether it's easy for me or that it will be.
This one is not reliable or do certainly to hear you can sometimes be 64.
So to be sure, you're going to use the spy.
We used to be the spy.
So I open my teddy to be densify.
And just clean up all this magnetic sunny move and just remove.
OK, now open.
I found that I want to analyze, just drag it and put it in here.
Click on this and on the left panel here shows you all the Donnette applications on libraries and EMS
call, it is a library for use by the application that can be more sometimes as you run program more
and more of you here.
And that is common.
The domain one should also be in this case.
And we found that you are looking for is here Demo.
And you can see now in the center, apparently some minimal space is disassemble the SFR and shows you
the C shop for that file.
So this is called a decompiled of you know, he doesn't only assemble it also decompensate the seizure
you can convert this into.
We should be Silviu by selecting this and you should do the same thing we should be saying.
So hang on.
We said before a default, a seizure.
There is also, if you can use in Iowa, if you want.
And normally the first thing we do is we will try to look at the program.
The end two point, which is normally in the program class, you can just drill down by clicking on
this and click on the program.
And this is your main function, your method, the entry point.
Another way to find the entry point is to.
Right.
Click on this thing and then go down and say go to entry point and then also to use it to the entry
point.
Which is here on.
So it is an entry point to point is a program here, and as you can see, we have one main function
and a console, right.
So this is the decompiled of you can actually click this to run as a debugger.
So this is a Dibango window debugger button to start.
OK, and then you should be running it.
He's running and he runs for while and close it because this is a console application so he can close
it.
Momeni Phoenicia displaying the Halo demo.
So now if you wanted to pass this line, you need to put a break point.
So to put a break point here, you can click on this.
This ribbon here is trippier and there'll be a great line, he said in red.
So now you're running click OK.
He said, It's a great point.
I think he's showing up now because he's waiting for you now to step over.
So once you break point how these buttons become available, the first one is a step into meaning that
you can step into the function and then the second one, it is Estamira, meaning you can let the function
run without stepping into it.
The third one is how to function if your earlier step into.
So if you didn't step into this function, you're going to have to keep the stigma out of it.
So now we're going to step over and step over and you see this three a.m. move on Sprint because this
line has just been executed.
So it is how you use the debugger in the by.
So now let's stop this program by clicking on the red button here now and also removalist.
Now, what if I want to change these changes into different strings, I will be using ILADS.
So to do that you can do it too.
With the first way we did before was to edit the IO instruction.
Now, I'm going to show you another way.
You can edit the special instruction directly by clicking here and then select.
So he would compile it and here you can just literally just click on this on you and he set you on your
street and so and you think at what he did today and click on.
After that, you have to dump the whole thing out into a separate fire so far.
Click, save more, you can hear the tracks and go to the location where you went and done so I'm going
and as this fire here, but let me remove his on first so it doesn't confuse you dumb here.
And I'm going to call it dumb, maybe washing one.
And then I click save.
Click.
All right, so now you see I have a new file going dumb v one so I can now go to this location and run
copy of.
Opening the from.
I will go to the new bar, frankly, based upon a hinter and you now I desire to see what's in there
and there's is my new version one.
So let me run it down and actually run.
And you see there's a new string ahead of them on Ed.
So this is how you added it.
Now, what if I want to use I outrated.
If I want to edit using it, I admit it, then I will likely use one.
And then here he said, didn't matter.
Zetia, I go down and I am.
So now you open a disassembly of you and show me the high end instructions which was seen before in
the previous lessons.
You have a long string to string here.
The call to call a function.
Do you write a string?
So now you have what it is.
I can just really add here at it again.
I see.
So I've changed in the string and now I can click OK.
And now I have to be done in five saying I do it now I'm going to give you a different name.
I'm going to call to Suvi to.
And we say, OK, so now if you go back to the that I have another the washing machine, Dan wishing
to so let me see what happens when I try to run and do.
And you see, I got a different string hello, this one, a ed again, so this is how you can be use
of the spy.
So it's not a thing.
I want to show you how to step into a step, how to functions.
So let's say and I'm not going to run.
This one has a debugger.
So I go to programs here and I put a breakpoint here and I click click.
OK, so now he stops here.
I we step over to let you run the function.
Let's say I do want to run a function, but I want to enter the information to inspect why the site
is function so I can click this one Semin to so many Stevin to enter the red line function.
See red line function.
And then I can keep on stepping over, stepping over and step out.
So I come back here to this meeting of several.
OK, now we are using a debugger.
You can also enter the function by double clicking function Dyle three one time and you enter the function.
If I want to step out of function, I hit the backspace on the keyboard, backspace and a command function.
So this is how you statically step in, step up to debugging.
So I hope this was useful to you.
So this is how we can use to inspire.
Thank you for watching.
I'll see you in the next one.