Windows

The Windows operating system is a series of software programs that manage the hardware and software resources of a computer. The first version of Windows was released in 1985, and since then, Microsoft has released several updates and versions of the Windows OS. Today, Windows 11 is the latest version of Windows, and it includes many features and improvements over previous versions.

Free Video Course

Welcome to the Windows Internals for Reverse Engineering video course! If you’re passionate about understanding the intricate workings of the Windows operating system and want to explore the fascinating world of reverse engineering, you’ve come to the right place. In this course, we’ll dive deep into the internals of Windows, unraveling its underlying mechanisms and structures to equip you with the essential knowledge and skills for reverse engineering software. Whether you’re a cybersecurity professional, a software developer, or simply a curious learner, this course will empower you to dissect and analyze Windows-based applications, discover vulnerabilities, and gain a comprehensive understanding of how software interacts with the operating system. Get ready to unlock the secrets of Windows Internals and embark on an exciting journey into the realm of reverse engineering. Let’s get started!

Chapter 1: Fundamental Concepts

In the first section, we will explore the core principles of Windows Internals for reverse engineering. We’ll cover key topics such as Windows architecture, kernel mode vs. user mode, memory management, and process/thread management. With a solid understanding of these concepts, you’ll be equipped to navigate the intricate internals of Windows and effectively analyze and reverse engineer software. Join us as we lay the foundation for your journey into the world of Windows Internals and reverse engineering.

• Kernel mode vs. user mode

• Windows Processes

• Windows Threads

• Windows Services

• Access Control Lists

• Users and Groups

• Shared Memory

• Drivers

• Virtual Memory

• Jobs

• Objects and Handles

• Registry

• Elevation

• Access Tokens

• Remote Procedure Calls

• Windows APIs and System Calls

Chapter 2: Windows Programming

In this section of the course, we’ll delve into Low-Level Windows Programming, focusing on Win32 APIs. This will help you understand the basics of how Windows works and how to interact with it using these programming tools. It’s a foundational step if you’re interested in exploring the intricacies of Windows programming.

• What are Windows APIs?

• Categories of Windows APIs

• Writing a C program that interacts with Windows APIs

• Writing a Python program that interacts with Windows APIs

Articles

Software

Windows software refers to a type of computer program that is designed to run on the Windows operating system. This includes both desktop and mobile apps, as well as any other type of software that is designed to run on Windows devices. The Windows operating system is a widely used platform, and as such, there is a large market for software that is designed to run on it. This includes both popular consumer apps as well as more specialized business and industrial applications. Due to the popularity of the Windows platform, many software developers have focused their efforts on creating programs that are designed to run on it.

• The sysinternal command line tools

• Sysinternals graphical tools

OS Internals

The Windows Internals refers to the inner workings of the Microsoft Windows operating system. It includes the kernel, device drivers, memory management, file systems, networking, and security. The Windows Internals is a complex and constantly evolving area, and is critical to the stability and performance of the Windows platform.

• Windows Internals: Introduction to the Windows System Architecture

• Windows Internals: Processes

• Get a Handle on Windows Processes and Services for Better Anomaly Identification

• Run 32-Bit Windows-Based Applications on 64-Bit Windows with WOW64

• Windows Internals: Symmetric Multiprocessing

• Windows Internals: Client and Server. What’s the difference?

• Windows Internals: Subsystems

• Windows Internals: Windows Kernel - Part 1

• Windows Internals: Windows Kernel - Part 2

• Windows Internals: Hardware Abstraction Layer

• Windows Internals: Real Time Processing

• Windows Internals: Software Interrupt Request Levels

• Windows Internals: Processor logic - Part 1

• Windows Internals: Processor logic - Part 2