1
00:00:00,940 --> 00:00:03,790
In this video we'll get started.

2
00:00:03,790 --> 00:00:09,220
If I win you correct me which is describe me which we downloaded in the last lesson.

3
00:00:10,790 --> 00:00:17,070
Now let us first have study behavior double click on this to run

4
00:00:21,130 --> 00:00:21,720
in here.

5
00:00:21,720 --> 00:00:24,350
Here we see the try.

6
00:00:24,450 --> 00:00:33,280
He ask you to enter the zero key and case a text box and also two buttons.

7
00:00:33,280 --> 00:00:37,900
First button is to check the serial number and the second button.

8
00:00:38,080 --> 00:00:46,450
The advance box which tells you about who wrote this correct me which is code cracking lessons dot com.

9
00:00:46,540 --> 00:00:49,810
Is my cell can click OK to dismiss it.

10
00:00:50,890 --> 00:00:59,340
And if you enter any key and click on J you will find he is around zero.

11
00:00:59,680 --> 00:01:01,750
And another message both pops up.

12
00:01:02,640 --> 00:01:04,270
I see to try again.

13
00:01:04,270 --> 00:01:07,000
You can also dismiss it by clicking.

14
00:01:07,360 --> 00:01:10,540
Okay then let's close this now.

15
00:01:11,440 --> 00:01:20,920
So after you have analyzed the behavior the second step is to check the b file analyze it to the IAEA

16
00:01:20,920 --> 00:01:22,300
program.

17
00:01:22,300 --> 00:01:25,760
Let's close this and opening the FDIC

18
00:01:29,250 --> 00:01:38,230
and here you will see the base image based his head address 0 0 4 0 and 4 zeros.

19
00:01:38,320 --> 00:01:44,280
Any offset to the entry point is 1 3 c.

20
00:01:44,940 --> 00:01:50,520
So to calculate the entry point you should take the image based.

21
00:01:50,670 --> 00:01:51,630
Add to this.

22
00:01:51,630 --> 00:01:59,380
If you get 4 0 1 3 S.F. so we'll do that 9 can confirm he is correct.

23
00:01:59,610 --> 00:02:03,810
So we opened correct me 1 If your excessive for BBG

24
00:02:07,700 --> 00:02:15,810
so the program has started now let us run to the entry point by pressing have 9 0.

25
00:02:15,810 --> 00:02:23,990
Clicking this round button and we are now at the entry point although it isn't right here.

26
00:02:24,060 --> 00:02:28,550
Entry line so let's confirm the entry pi address.

27
00:02:28,560 --> 00:02:30,480
How do we know this entry point.

28
00:02:30,660 --> 00:02:41,870
We can check with the detected easy it easy emission bases for 0 9.

29
00:02:41,920 --> 00:02:48,820
We Agnès to it it becomes 4 0 1 3 S.A. which is this address 4 0 1 3 is here.

30
00:02:48,840 --> 00:02:54,040
So this easy to find and you can see from the detached easy.

31
00:02:54,030 --> 00:03:01,440
The compiler uses Microsoft we shall see 2 0 1 7 and link with Microsoft link.

32
00:03:02,580 --> 00:03:09,480
And if you click on b you can see more information in the different view.

33
00:03:09,870 --> 00:03:12,220
So this is the session.

34
00:03:12,220 --> 00:03:22,150
You can see the sections text data and you can see star offset and other things.

35
00:03:22,460 --> 00:03:32,670
So mostly we just interested to look at the entry point to confirm that is the entry point.

36
00:03:32,730 --> 00:03:37,290
So this is how we check for the entry point using the.

37
00:03:37,770 --> 00:03:40,240
So that's all for this video.

38
00:03:40,290 --> 00:03:41,490
I will see you in the next one.