x86-64 Assembly Language and Windows Pattern-Oriented Disassembly Analysis
$69.00
Suggested Price
$59.99
Bundle Price

x86-64 Assembly Language and Windows Pattern-Oriented Disassembly Analysis

Practical Foundations of Windows Debugging, Disassembling, Reversing
Accelerated Disassembly, Reconstruction and Reversing

About the Bundle

Knowing assembly language and corresponding disassembly analysis patterns helps in the root cause analysis of complex software behavior problems of native Windows server and desktop applications, services, and drivers primarily written in C and C++ and compiled for x64 platforms. This training bundle for software technical support and escalation engineers, system administrators, site reliability engineers, software developers, performance engineers, testers, and legacy application maintainers includes an introductory course in basics of code disassembling, and an accelerated training course in more advanced reversing patterns. It is also useful for security and vulnerability researchers, reverse engineers, malware and memory forensics analysts who have never used Microsoft WinDbg debugger for the analysis of computer memory.

  • Share this bundle

About the Books

Practical Foundations of Windows Debugging, Disassembling, Reversing

Practical Foundations of Windows Debugging, Disassembling, Re...

Training Course
  • 350

    Pages

  • 100%

    Complete

  • PDF

This training course is a combined and reformatted version of the two previous books Windows Debugging: Practical Foundations and x64 Windows Debugging: Practical Foundations. The new format makes it easy to switch between and compare x86 and x64 versions. The book also has a larger format similar to other training courses from Software Diagnostics Services, punctuation and code highlighting improvements, the output and screenshots from the latest WinDbg 10, and consistently uses WinDbg (X86) for 32-bit examples and WinDbg (X64) for 64-bit examples.

The book contains two separate sets of chapters and corresponding illustrations. They are named Chapter x86.NN and Chapter x64.NN respectively. There is some repetition of content due to the shared nature of x64 and x86 platforms. Both sets of chapters can be read independently. We included x86 chapters because many Windows applications are still 32-bit and executed in 32-bit compatibility mode on x64 Windows systems. This introductory training course can complement the more advanced course Accelerated Disassembly, Reconstruction and Reversing.

Accelerated Disassembly, Reconstruction and Reversing

Accelerated Disassembly, Reconstruction and Reversing

Training Course Transcript and WinDbg Practice Exercises with Memory Cell Diagrams, Revised Edition
  • 211

    Pages

  • 100%

    Complete

  • PDF

  • EPUB

The book contains the full transcript of Software Diagnostics Services training. Learn disassembly, execution history reconstruction and binary reversing techniques for better software diagnostics, troubleshooting and debugging on x64 Windows platforms. The course uses a unique and innovative pattern-oriented analysis approach to speed up the learning curve. The training consists of practical step-by-step hands-on exercises using WinDbg and memory dumps. Covered more than 25 ADDR patterns, and many concepts are illustrated with Memory Cell Diagrams. The prerequisites for this training are working knowledge of C and C++ programming languages. Operating system internals and assembly language concepts are explained when necessary. The primary audience for this training is software technical support and escalation engineers who analyze memory dumps from complex software environments and need to go deeper in their analysis of abnormal software structure and behavior. The course is also useful for software engineers, quality assurance and software maintenance engineers who debug software running on diverse computer environments, security researchers, malware and memory forensics analysts who have never used WinDbg for analysis of computer memory. The revised edition uses the latest WinDbg 10 version, has three exercises completely redone with Windows 10 memory dumps, improved formatting, and also includes reprinted memory analysis patterns and techniques from Memory Dump Analysis Anthology referenced in the book.

The Leanpub 45-day 100% Happiness Guarantee

Within 45 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks.

See full terms

Free Updates. DRM Free.

If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).

Most Leanpub books are available in PDF (for computers), EPUB (for phones and tablets) and MOBI (for Kindle). The formats that a book includes are shown at the top right corner of this page.

Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.

Learn more about Leanpub's ebook formats and where to read them

Write and Publish on Leanpub

You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses! Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks. Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. It really is that easy.

Learn more about writing on Leanpub