-
Book Overview & Buying
-
Table Of Contents
Ghidra Software Reverse-Engineering for Beginners - Second Edition
By :
Finding patched code is necessary for version tracking of a software project. This tells us what has changed between two different versions of an application. There might be a new addition or some modification to the existing functionality between two different versions of the same application; this can be found out when we start comparing the same function side by side.
We will be using this methodology to achieve our goal of finding the main code in the stripped executable. The strategy here is to first find a similar function in the BSim database to the starting point code (entry) in our stripped binary. Once we have a match with our entry function, we will walk through the code and compare multiple code blocks until we reach the main code.
This is mostly the same process we would use when we want to find patched code. The only difference is that we will already know what the same functions are in both executables and don&...