Ghidra: Navigating and Annotating

• Rename a function / variable: L (label).
• Retype a variable: Ctrl+L (set data type).
• Go to an address / symbol: G.
• Cross-references (XREFs): right-click → References → "show references to."
• Who calls this function? Who reads this string?
• XREF a suspicious string back to the code that uses it.
• Symbol Tree lists Imports —- your map to Windows API usage.