HackadayU: Reverse Engineering with Ghidra Class 2

[@hackaday]

Hi everyone! I hope that you enjoy the content we put together for these videos. If you have questions, feel free to reach out to the Instructor on twitter twitter.com/wrongbaud. All of the course details can be found here: hackaday.io/project/172292-introduction-to-reverse-engineering-with-ghidra

[@suniliyengar8653]

This class series is the best I have seen so far. I am so impressed by the clarity of the explanation. This course just made me enjoy learning so much! Thank you, you are the best teacher.

[@Mishanya00]

Thanks, you have a very good lesson series of Ghidra

[@ITOzann]

Thank you for the content!

[@redpillcommando]

Thank you for this video.

[@Yocairo]

Good course material, thanks!

[@RevUntoMan]

This course is great! I'm learning a lot! Does anyone have a walkthrough for solving /variables-example ?

[@ahmedadel3301]

If you did it, could you share the solution?!

[@RussellTeapot]

@@ahmedadel3301 I assume you moved on by now :D but for everyone that's stuck, I cheated a bit: I just wrote a C program that prints the correct characters applying the operations found in the decompiled pseudocode provided by Ghidra. Pay attention to the global variables involved ;) I wont disclose anything else tho, good luck :)

[@ivanrubalcava7109]

Thank you very helpful!👍

[@baruchben-david4196]

Thank you for this clear explanation. I appreciate it.

[@kapilk1440]

Any idea about calling convention for Windows userland applications such as IE, Edge, Adobe Reader and Foxit Reader etc? Do they use CDECL, STDCALL or FASTCALL? 🤔

[@skrmnghrd4520]

Hello People! and Matt! I can somewhat get around the ASM code and seeing how it works, but I cannot wrap my head around the passcode on the "variables-example" exercise. I tried RE-ing with the sourcecode and even tried printing the values of the results, but I still do not know what to input in the terminal as the keyword. Anyone have a tip for this?

[@DemoList-hz8ht]

i dont understand this line 52:53 64c: lea rcx,rax*4+0x0 65e: mov DWORD PTR [rcx+rax*1],edx why *4+0x0 and *1, can someone explain to me ? thank guys.

[@TheMateusz535]

Hi, could you please provide any clue to loop-example-1? I know it has to be 15 char long, but I have no clue how to satisfy if statement only 8 times in order to to set local_10 to 8.

[@ahmedadel3301]

check the values at the ascii table

[@drygordspellweaver8761]

Why did the global var have different address offsets?

[@doublepositivezero8329]

I'm sorry, paying to have what competitive edge?

[@JNET_Reloaded]

I just uploaded a new linux related vid check out it and let me know what you think please!

[@xdonvito]

Death by PowerPoint