Reversing Data Structures with Ghidra: Arrays

In this video we’ll take a look at several different arrays in a C program, compile from source and reverse them using Ghidra. Our goals will be to analyze the resulting program flow using both the listing view (disassembly) and the decompiler, identify array usage, overall size and element size. I’ll also discuss some inconsistencies with Ghidra output, how to identify and how to correct.

The source code for the sample program can be found on my Github: