Getting around in ghidra

The main aspect of dealing with gidra is to analyse the code and "reconstruct" the work and action the code does during it's excution. Reverting the funktions, calls and variables to human readable labels helps a lot to complete this target.

function graph view

Windows -> Function graph

Note the different colors of the arrows

green: conditional jump, condition is met

red: conditional jump, condition is not met.

blue: uncondition jump, end of block.

imports

Windows -> Symbol references

instructions

conditional jump "jump if zero"