When Ghidra Comes to Your Place

[0x00000000]> aaaaaaa [x] Analyze all flags starting with sym. and entry0 (aa) [x] Analyze function calls (aac) [x] Find and analyze function preludes (aap) [x] Analyze len bytes of instructions for references (aar) [x] Check for obj references [x] Check for vtables [x] Type matching analysis for all functions (aaf) [x] Propagate noreturn information [x] Use -AA or aaaa to perform additional experimental analysis. [x] Enable constraint types analysis for variables [0x00000000]> aaaaaaa An r2 developer is coming to your place to manually analyze this program. Please wait for it --press any key--

A terminal screenshot shows an analysis tool running many automated reverse-engineering checks before announcing that an r2 developer is coming over to manually analyze the program. The joke is that the automated analysis has failed or is taking too long, so the absurd solution is to send a developer to the user’s home; it works as a reaction to painfully slow or difficult debugging and reverse engineering. EN: A terminal screenshot shows an analysis tool running many automated reverse-engineering checks before announcing that an r2 developer is coming over to manually analyze the program. The joke is that the automated analysis has failed or is taking too long, so the absurd solution is to send a developer to the user’s home; it works as a reaction to painfully slow or difficult debugging and reverse engineering.

• @infosecmemes / 555 2021-02-16