Continuing with my preliminary exploration of Ghidra. If we continue with the call to RegOpenKeyExA from last time (yes, I know this code is unreachable as we discussed last time, but let’s keep going anyway).
Article Link: https://isc.sans.edu/diary/rss/24848