1 00:00:00,540 --> 00:00:02,430 Hello and welcome back. 2 00:00:03,330 --> 00:00:09,070 In this video, we are going to reverse inside the windows, we cracked me. 3 00:00:10,410 --> 00:00:19,740 So go ahead, download the GUI, correct me, which is called Autogen Serial, and then create a new 4 00:00:19,740 --> 00:00:22,380 folder in your home directory. 5 00:00:22,800 --> 00:00:26,220 And pretty useful to put it here. 6 00:00:29,220 --> 00:00:33,840 And now we are going to see what he does right. 7 00:00:33,840 --> 00:00:36,390 Click and open terminal here. 8 00:00:39,290 --> 00:00:46,290 And guess who has first tested a file to see what is a. 9 00:00:51,740 --> 00:01:00,390 So it is a be three to executable GWE program, meaning is a Windows program. 10 00:01:01,460 --> 00:01:03,470 So we are going to run it in line. 11 00:01:22,820 --> 00:01:27,670 And this is what it looks like and to first name Serial. 12 00:01:29,120 --> 00:01:30,200 So let's put. 13 00:01:40,090 --> 00:01:44,610 And you get that message wrong, Cyril Key, 14 00:01:48,010 --> 00:01:50,770 so now we can start to reverse this. 15 00:01:53,440 --> 00:01:56,560 Yeah, going to create a new project in Gedera. 16 00:02:00,810 --> 00:02:04,000 So like a fodder for the new project. 17 00:02:11,710 --> 00:02:21,460 And give it the name Nisqually Autogen Dush Cyrille and click on Finish. 18 00:02:23,890 --> 00:02:25,270 More importantly, five. 19 00:02:30,610 --> 00:02:34,600 So it is a drag and drop it into a new Foldit. 20 00:02:36,680 --> 00:02:42,840 And it has correctly detected it is a portable executable. 21 00:02:43,970 --> 00:02:50,690 It is a 32 bit program written Bollon, that's OK. 22 00:02:52,730 --> 00:02:59,560 Now is undergoing the process of importing and you get the results summary. 23 00:03:00,170 --> 00:03:01,040 Click on Key. 24 00:03:03,790 --> 00:03:11,980 And here you can see also he compiler is Bowlin, which says the CDC study to be. 25 00:03:14,530 --> 00:03:18,610 Woollens, C++ compiler Clokey, 26 00:03:21,640 --> 00:03:34,060 and now we are going to start the process of analyzing by opening with browsers or dragging and dropping 27 00:03:34,060 --> 00:03:34,840 on the dragon. 28 00:03:40,520 --> 00:03:42,380 Click on yes to analyze. 29 00:03:44,710 --> 00:03:56,320 Over here, select the compiler parameter I.D. and check PDV Universal, check on Windows, be proper 30 00:03:56,590 --> 00:03:59,110 X10 and click on Analise. 31 00:04:02,060 --> 00:04:03,200 Let's close this. 32 00:04:07,400 --> 00:04:16,570 And keep an eye on the lower right corner to to know when he has finished analyzing. 33 00:04:16,940 --> 00:04:17,360 All right. 34 00:04:17,360 --> 00:04:28,040 After a few minutes, it has finished with the analysis so we can go and look for some strings, which 35 00:04:28,040 --> 00:04:28,940 we saw earlier. 36 00:04:29,480 --> 00:04:31,050 Wrong serial killer. 37 00:04:32,720 --> 00:04:36,960 So head over to search for strings. 38 00:04:37,860 --> 00:04:38,780 Click on Search. 39 00:04:42,140 --> 00:04:47,270 And now he has got a list of strings and we can flat out wrong. 40 00:04:51,590 --> 00:04:58,280 And there you go, is a unique wrong's here, a key, so just don't click on that and you can do this 41 00:04:58,290 --> 00:05:01,180 by dragging the bottom Lubar to the right. 42 00:05:02,660 --> 00:05:08,270 And this is the wrong silky string is found in the listing. 43 00:05:11,780 --> 00:05:20,870 Key, he also had error and you also have correctly and well done and there's something interesting 44 00:05:20,870 --> 00:05:21,100 here. 45 00:05:21,410 --> 00:05:23,380 It looks like a former spitfire. 46 00:05:24,020 --> 00:05:28,570 Could this be the Cedar Key here again? 47 00:05:29,930 --> 00:05:31,580 And you can go there and take a look. 48 00:05:31,820 --> 00:05:38,890 Is a cross reference day to day function, which surfaced this so we can double click on this to go 49 00:05:38,930 --> 00:05:43,420 to the location and you can see more of it. 50 00:05:43,430 --> 00:05:46,580 Here it is contained in this function. 51 00:05:47,120 --> 00:05:50,780 And if you head over to the decompiled, we know we can see here 52 00:05:53,480 --> 00:05:56,980 and you scroll down and take a look. 53 00:05:58,700 --> 00:06:02,930 You get the if Elstein down here and. 54 00:06:04,000 --> 00:06:14,350 The first block will show a good message, correct, Akiva, done, whilst the Hellespont will be showing 55 00:06:14,350 --> 00:06:15,510 a wrong zero key. 56 00:06:16,360 --> 00:06:26,620 So whether you show right or wrong depends on either two to who do the analysis in the next video. 57 00:06:26,950 --> 00:06:28,000 How seeding.