├── HandyIndex.pdf ├── README.md ├── book.jpg ├── book.md ├── ch04 └── ch4_example.exe ├── ch05 └── ch05_example1.exe ├── ch06 ├── demo_stackframe_32 └── demo_stackframe_64 ├── ch08 ├── call_vfunc.cpp ├── call_vfunc.exe ├── call_vfunc.h ├── call_vfunc_x86 ├── global_array_demo.c ├── global_array_demo_x64 ├── global_array_demo_x64_stripped ├── global_struct_demo.c ├── global_struct_demo_x64_stripped ├── heap_array_demo.c ├── heap_array_demo_x64_stripped ├── heap_packed_struct_demo_x64_stripped ├── heap_struct_array_demo_x64_stripped ├── heap_struct_demo.c ├── heap_struct_demo_x64_stripped ├── http_get_example_x64 ├── http_get_example_x86 ├── stack_array_demo.c ├── stack_array_demo_x64_stripped └── stack_struct_demo_x64_stripped ├── ch09 ├── simple_flows.c └── simple_flows.exe ├── ch10 ├── call_tree_x64 ├── call_tree_x64_static └── rand_test_x64 ├── ch11 └── installGhidraServer.sh ├── ch13 ├── libc.a ├── upx_demo1_x64_static.upx ├── upx_demo2_x64_static.upx └── upx_demo2_x64_static_stripped ├── ch14 ├── FindStringsByRegex.java ├── FindStringsByRegex.py ├── ch14_1_flat.java ├── ch14_2_flat.java ├── ch14_3_flat.java ├── ch14_4_flat.java └── ch14_5_flat.java ├── ch15 └── SimpleROPAnalyzer.java ├── ch16 ├── CH16_subdirectory │ └── demo_stackframe_32_sub ├── demo_stackframe_32 ├── demo_stackframe_32_canary ├── demo_stackframe_32_stripped ├── demo_stackframe_64 ├── demo_stackframe_64_canary └── demo_stackframe_64_stripped ├── ch16_scripts └── HeadlessSimpleROP.java ├── ch17 ├── SimpleElfShellcodeLoader.java ├── SimpleShellcode.opinion ├── SimpleShellcodeLoader.java ├── SimpleShellcodeSourceLoader.java ├── ch17_pe_raw.exe ├── shellcode_samples.README └── shellcode_samples.zip ├── ch18 ├── ia.sinc.01b_add_vmxplode ├── ia.sinc.02a_set_eax_to_constant ├── ia.sinc.02b_set_reg_to_constant ├── ia.sinc.02c_set_reg_to_immediate ├── ia.sinc.03a_add_vm_registers ├── vmx_test_01a_vmxoff ├── vmx_test_01b_vmxplode ├── vmx_test_02b_set_reg_to_constant ├── vmx_test_02c_set_reg_to_immediate └── vmx_test_03_add_vm_regs ├── ch19 ├── options ├── options.c ├── structs ├── structs.c ├── var_depends └── var_depends.c ├── ch20 ├── functions_linux.c ├── functions_linux_x86 ├── functions_linux_x86_O2 ├── idiom.c ├── idiom_x64 ├── idiom_x64_O2 ├── idiom_x64_Release.exe ├── rtti.cpp ├── rtti_x64 ├── rtti_x64_stripped ├── strange_math.c ├── strange_math_x64 ├── strange_math_x64_Debug.exe ├── strange_math_x64_Release.exe ├── switch_demo_1.c ├── switch_demo_1_Win32_Debug.exe └── switch_demo_1_x86 ├── ch21 ├── SimpleEmulator.java ├── burneye.java └── simplePack ├── ch22 ├── debug_check_x64 ├── patch.java ├── patch_demo ├── patch_demo_64 ├── patch_demo_64.exe ├── patch_file.java └── search ├── ch23 ├── debug_check_x64.patched ├── diff_sample1 ├── diff_sample1a ├── diff_sample2 └── diff_sample3 ├── gzh.jpg └── wechat.jpg /HandyIndex.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/HandyIndex.pdf -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/README.md -------------------------------------------------------------------------------- /book.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/book.jpg -------------------------------------------------------------------------------- /book.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/book.md -------------------------------------------------------------------------------- /ch04/ch4_example.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch04/ch4_example.exe -------------------------------------------------------------------------------- /ch05/ch05_example1.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch05/ch05_example1.exe -------------------------------------------------------------------------------- /ch06/demo_stackframe_32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch06/demo_stackframe_32 -------------------------------------------------------------------------------- /ch06/demo_stackframe_64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch06/demo_stackframe_64 -------------------------------------------------------------------------------- /ch08/call_vfunc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/call_vfunc.cpp -------------------------------------------------------------------------------- /ch08/call_vfunc.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/call_vfunc.exe -------------------------------------------------------------------------------- /ch08/call_vfunc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/call_vfunc.h -------------------------------------------------------------------------------- /ch08/call_vfunc_x86: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/call_vfunc_x86 -------------------------------------------------------------------------------- /ch08/global_array_demo.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/global_array_demo.c -------------------------------------------------------------------------------- /ch08/global_array_demo_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/global_array_demo_x64 -------------------------------------------------------------------------------- /ch08/global_array_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/global_array_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/global_struct_demo.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/global_struct_demo.c -------------------------------------------------------------------------------- /ch08/global_struct_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/global_struct_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/heap_array_demo.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_array_demo.c -------------------------------------------------------------------------------- /ch08/heap_array_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_array_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/heap_packed_struct_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_packed_struct_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/heap_struct_array_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_struct_array_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/heap_struct_demo.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_struct_demo.c -------------------------------------------------------------------------------- /ch08/heap_struct_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/heap_struct_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/http_get_example_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/http_get_example_x64 -------------------------------------------------------------------------------- /ch08/http_get_example_x86: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/http_get_example_x86 -------------------------------------------------------------------------------- /ch08/stack_array_demo.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/stack_array_demo.c -------------------------------------------------------------------------------- /ch08/stack_array_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/stack_array_demo_x64_stripped -------------------------------------------------------------------------------- /ch08/stack_struct_demo_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch08/stack_struct_demo_x64_stripped -------------------------------------------------------------------------------- /ch09/simple_flows.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch09/simple_flows.c -------------------------------------------------------------------------------- /ch09/simple_flows.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch09/simple_flows.exe -------------------------------------------------------------------------------- /ch10/call_tree_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch10/call_tree_x64 -------------------------------------------------------------------------------- /ch10/call_tree_x64_static: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch10/call_tree_x64_static -------------------------------------------------------------------------------- /ch10/rand_test_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch10/rand_test_x64 -------------------------------------------------------------------------------- /ch11/installGhidraServer.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch11/installGhidraServer.sh -------------------------------------------------------------------------------- /ch13/libc.a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch13/libc.a -------------------------------------------------------------------------------- /ch13/upx_demo1_x64_static.upx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch13/upx_demo1_x64_static.upx -------------------------------------------------------------------------------- /ch13/upx_demo2_x64_static.upx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch13/upx_demo2_x64_static.upx -------------------------------------------------------------------------------- /ch13/upx_demo2_x64_static_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch13/upx_demo2_x64_static_stripped -------------------------------------------------------------------------------- /ch14/FindStringsByRegex.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/FindStringsByRegex.java -------------------------------------------------------------------------------- /ch14/FindStringsByRegex.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/FindStringsByRegex.py -------------------------------------------------------------------------------- /ch14/ch14_1_flat.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/ch14_1_flat.java -------------------------------------------------------------------------------- /ch14/ch14_2_flat.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/ch14_2_flat.java -------------------------------------------------------------------------------- /ch14/ch14_3_flat.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/ch14_3_flat.java -------------------------------------------------------------------------------- /ch14/ch14_4_flat.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/ch14_4_flat.java -------------------------------------------------------------------------------- /ch14/ch14_5_flat.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch14/ch14_5_flat.java -------------------------------------------------------------------------------- /ch15/SimpleROPAnalyzer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch15/SimpleROPAnalyzer.java -------------------------------------------------------------------------------- /ch16/CH16_subdirectory/demo_stackframe_32_sub: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/CH16_subdirectory/demo_stackframe_32_sub -------------------------------------------------------------------------------- /ch16/demo_stackframe_32: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_32 -------------------------------------------------------------------------------- /ch16/demo_stackframe_32_canary: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_32_canary -------------------------------------------------------------------------------- /ch16/demo_stackframe_32_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_32_stripped -------------------------------------------------------------------------------- /ch16/demo_stackframe_64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_64 -------------------------------------------------------------------------------- /ch16/demo_stackframe_64_canary: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_64_canary -------------------------------------------------------------------------------- /ch16/demo_stackframe_64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16/demo_stackframe_64_stripped -------------------------------------------------------------------------------- /ch16_scripts/HeadlessSimpleROP.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch16_scripts/HeadlessSimpleROP.java -------------------------------------------------------------------------------- /ch17/SimpleElfShellcodeLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/SimpleElfShellcodeLoader.java -------------------------------------------------------------------------------- /ch17/SimpleShellcode.opinion: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/SimpleShellcode.opinion -------------------------------------------------------------------------------- /ch17/SimpleShellcodeLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/SimpleShellcodeLoader.java -------------------------------------------------------------------------------- /ch17/SimpleShellcodeSourceLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/SimpleShellcodeSourceLoader.java -------------------------------------------------------------------------------- /ch17/ch17_pe_raw.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/ch17_pe_raw.exe -------------------------------------------------------------------------------- /ch17/shellcode_samples.README: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/shellcode_samples.README -------------------------------------------------------------------------------- /ch17/shellcode_samples.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch17/shellcode_samples.zip -------------------------------------------------------------------------------- /ch18/ia.sinc.01b_add_vmxplode: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/ia.sinc.01b_add_vmxplode -------------------------------------------------------------------------------- /ch18/ia.sinc.02a_set_eax_to_constant: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/ia.sinc.02a_set_eax_to_constant -------------------------------------------------------------------------------- /ch18/ia.sinc.02b_set_reg_to_constant: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/ia.sinc.02b_set_reg_to_constant -------------------------------------------------------------------------------- /ch18/ia.sinc.02c_set_reg_to_immediate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/ia.sinc.02c_set_reg_to_immediate -------------------------------------------------------------------------------- /ch18/ia.sinc.03a_add_vm_registers: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/ia.sinc.03a_add_vm_registers -------------------------------------------------------------------------------- /ch18/vmx_test_01a_vmxoff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/vmx_test_01a_vmxoff -------------------------------------------------------------------------------- /ch18/vmx_test_01b_vmxplode: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/vmx_test_01b_vmxplode -------------------------------------------------------------------------------- /ch18/vmx_test_02b_set_reg_to_constant: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/vmx_test_02b_set_reg_to_constant -------------------------------------------------------------------------------- /ch18/vmx_test_02c_set_reg_to_immediate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/vmx_test_02c_set_reg_to_immediate -------------------------------------------------------------------------------- /ch18/vmx_test_03_add_vm_regs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch18/vmx_test_03_add_vm_regs -------------------------------------------------------------------------------- /ch19/options: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/options -------------------------------------------------------------------------------- /ch19/options.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/options.c -------------------------------------------------------------------------------- /ch19/structs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/structs -------------------------------------------------------------------------------- /ch19/structs.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/structs.c -------------------------------------------------------------------------------- /ch19/var_depends: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/var_depends -------------------------------------------------------------------------------- /ch19/var_depends.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch19/var_depends.c -------------------------------------------------------------------------------- /ch20/functions_linux.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/functions_linux.c -------------------------------------------------------------------------------- /ch20/functions_linux_x86: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/functions_linux_x86 -------------------------------------------------------------------------------- /ch20/functions_linux_x86_O2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/functions_linux_x86_O2 -------------------------------------------------------------------------------- /ch20/idiom.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/idiom.c -------------------------------------------------------------------------------- /ch20/idiom_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/idiom_x64 -------------------------------------------------------------------------------- /ch20/idiom_x64_O2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/idiom_x64_O2 -------------------------------------------------------------------------------- /ch20/idiom_x64_Release.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/idiom_x64_Release.exe -------------------------------------------------------------------------------- /ch20/rtti.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/rtti.cpp -------------------------------------------------------------------------------- /ch20/rtti_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/rtti_x64 -------------------------------------------------------------------------------- /ch20/rtti_x64_stripped: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/rtti_x64_stripped -------------------------------------------------------------------------------- /ch20/strange_math.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/strange_math.c -------------------------------------------------------------------------------- /ch20/strange_math_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/strange_math_x64 -------------------------------------------------------------------------------- /ch20/strange_math_x64_Debug.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/strange_math_x64_Debug.exe -------------------------------------------------------------------------------- /ch20/strange_math_x64_Release.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/strange_math_x64_Release.exe -------------------------------------------------------------------------------- /ch20/switch_demo_1.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/switch_demo_1.c -------------------------------------------------------------------------------- /ch20/switch_demo_1_Win32_Debug.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/switch_demo_1_Win32_Debug.exe -------------------------------------------------------------------------------- /ch20/switch_demo_1_x86: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch20/switch_demo_1_x86 -------------------------------------------------------------------------------- /ch21/SimpleEmulator.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch21/SimpleEmulator.java -------------------------------------------------------------------------------- /ch21/burneye.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch21/burneye.java -------------------------------------------------------------------------------- /ch21/simplePack: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch21/simplePack -------------------------------------------------------------------------------- /ch22/debug_check_x64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/debug_check_x64 -------------------------------------------------------------------------------- /ch22/patch.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/patch.java -------------------------------------------------------------------------------- /ch22/patch_demo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/patch_demo -------------------------------------------------------------------------------- /ch22/patch_demo_64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/patch_demo_64 -------------------------------------------------------------------------------- /ch22/patch_demo_64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/patch_demo_64.exe -------------------------------------------------------------------------------- /ch22/patch_file.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/patch_file.java -------------------------------------------------------------------------------- /ch22/search: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch22/search -------------------------------------------------------------------------------- /ch23/debug_check_x64.patched: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch23/debug_check_x64.patched -------------------------------------------------------------------------------- /ch23/diff_sample1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch23/diff_sample1 -------------------------------------------------------------------------------- /ch23/diff_sample1a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch23/diff_sample1a -------------------------------------------------------------------------------- /ch23/diff_sample2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch23/diff_sample2 -------------------------------------------------------------------------------- /ch23/diff_sample3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/ch23/diff_sample3 -------------------------------------------------------------------------------- /gzh.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/gzh.jpg -------------------------------------------------------------------------------- /wechat.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/firmianay/ghidra-book/HEAD/wechat.jpg --------------------------------------------------------------------------------