Part 1 – Modern Windows Compiler
In this section, you will learn the principles of C++ program execution on Windows systems from a binary perspective and gain the necessary knowledge to analyze Windows programs by hand. This section will cover topics such as how Windows analyzes program files and mounts program files to memory, tampering the mounted program of the benign process, and the basics of API function calling.
This section has the following chapters:
- Chapter 1, From Source to Binaries – The Journey of a C Program
- Chapter 2, Process Memory – File Mapping, PE Parser, tinyLinker, and Hollowing
- Chapter 3, Dynamic API Calling – Thread, Process, and Environment Information