Hello and welcome back.
In this lesson we are going to try another crackme.
And this is the website where I originally got it from.
But use the one that I provide instead of the one from here.
So you unzip this and the password to unzip is cracking lessons.com.
And after unzipping it you will find the crackme and the notes where I give credit to the author.
So this crackme
now is a 64-bit crackme, x64.
So in this lesson we are going to learn two things.
We are going to learn how to trace the length of the code,
the secret code.
When you run this you will see also the secret code.
So we are going to use x64dbg to identify the length of the secret code.
And after that we are going to fish out the secret code itself.
So the way we fish out the secret code itself is to trace the place where the string compare is being
done, and read the parameters from the function call.
So let's... first thing you need to do is to scan this with DIE to see what it is built with.
So it is a 64-bit program, PE64, compiled with Visual Studio, language C, C++.
So we need to use x64dbg to open it.
So before we do that we do a behavior analysis.
So we open a command prompt here so we can go here, search for command prompt.
CMD and then you find it here.
Command prompt.
Navigate to this folder where you put your crackme.
Paste your location there.
And there you can see your program there.
So open another file to keep notes so you can say this is the crackme notes.
And then in here you write down whatever you observe.
So to observe it, we will run the crackme.
Before you run, always make a copy.
Okay, so you got a copy.
So now you can run the crackme.
Let me clear the screen before I do that.
CLS is the clear screen.
So I run the crackme again.
It asks you to enter the secret code.
So immediately you will see there's a string.
There's one string there.
If you don't know, you can type anything.
So always type it in a sequence, numeric form: one, two, three, four, five, six onwards so
that it will be very easily noticeable when you are doing debugging later.
So you just type one, two, three, four, five, six and then press enter.
And the bad message says "access denied".
So write it down.
"Access denied".
You can search for these strings later.
So now we're ready to perform the analysis, reverse analysis, reversing with the x64dbg.
For that we will continue in the next lesson.
That's all for this video.
Thank you for watching.