Skip to content
0:00 / 0:00

#windowsinternals#x64dbg#processinitialization

Windows Internals Crash Course

Duncan Ogilvie

2.9K subscribers • 1 video on Hallway

YouTube

Beginner. No background in the topic needed.

67K views3 years ago1 recommendation

Systems programmingSecurityOperating systemsDebuggingReverse engineering

Duncan Ogilvie introduces Windows internals, process initialization, and debugging basics for beginners.

Guest lecture about Windows Internals (aimed at total beginners), given at the Ruhr-Universität Bochum. Slides: mrexodia.github.io/files/wicc-2023-slides.pdf, Materials: mrexodia.github.io/files/wicc-2023-materials.zip

Why it's here

1 person recommends this

What people say. Recommended as a beginner-friendly introduction to Windows internals and what happens before a program's main function is called.

u/skeetoin r/C_Programming • Recommends

On “What Happens Before the Main Function is Called ?”

Conveniently just a week old: [Windows Internals Crash Course] The short: the operating system does some process initialization, then calls the program entry point (`mainCTStartup` in your case) which is usually defined by the C runtime (CRT). It does some CRT initialization to set up for running a C program, which includes parsing the command line string from the operating system, then finally calls `main` which is defined by your program. When `main` returns, it does some teardown like flushing streams, then either passes control back to the operating system or uses an exit system call. The CRT is optional, and you can define `mainCRTStartup` yourself, though you don't get to use the C s…