Author Description

Software Reverse Engineering: Navigating x86 Windows Applications with Ghidra Unlock the secrets of x86 Windows applications with this hands-on guide to software reverse engineering using Ghidra, the industry-leading reverse engineering tool. Through a series of practical examples and in-depth explanations, you'll gain a deep understanding of how to deconstruct and analyze 32-bit Windows applications written in C and C++. Mastering Assembly Code and Decompilation Patterns Starting with the basics of decompilation and interpretation of simple functions, you'll progress to more advanced topics such as loops, C-style strings, floating-point numbers, and the corresponding assembly instructions and decompiled code patterns in Ghidra. You'll learn how to: Use Ghidra's decompiler and other essential tools for reverse engineering Windows applications. Analyze 32-bit x86 & x87 assembly code, decompile it with Ghidra, and re-engineer the functionality when needed. Understand and interpret C and C++ constructs in assembly and in the decompiled C-like pseudo-code in Ghidra. Work with floating-point numbers using the x87 assembly instruction set, as well as peek into SIMD programming. Reverse engineer C++ classes with and without virtual methods, handle inheritance, including multiple inheritance, and deal with operator overloading. Practical Application: Creating a DLL Wrapper Take your skills to the next level with a step-by-step guide to creating a dynamically linked library (DLL) wrapper in C and C++ to intercept and modify the behavior of an example application in the runtime. You'll learn how to: Create a DLL wrapper to proxy valid function calls to the original DLL. Use the wrapper to modify the program behavior and data to unlock the example program secrets. Advanced Topics and Hands-on Learning With its focus on hands-on examples and practical applications, this book is an essential resource for software reverse engineers, securit