The sole purpose of these lecture notes is to provide an aid to the high school students attending the HSSP course “C-01B Reverse Engineering in Computer Applications” taught during Spring 2001 at the Massachusetts Institute of Technology. The information presented hereby is on an “as-is” basis and the author cannot be possibly held liable for damages caused or initiated using methods or techniques described (or mentioned) in these notes. | BM Eiiqineeriiiii Will e QjiiiLLiiilLCJB1 fíuuLLeailQiis Fotis Fotopoulos Boston 2001 Table of Contents Table of Contents Table of 1. About the Course and Typical Hiding Information from Cell Computer Miscellaneous 2. Programming Programming Processor Memory Unicode 3. Windows Windows File File File Into PE The PE Section Commonly Encountered PE File 2 Table of Contents PE File 4. Basic Concepts of 5. Assembly CMP Compare Two Opcode Instruction J cc Jump if Condition Is Opcode Instruction PUSH Push Word or Doubleword Onto the Opcode Instruction POP Pop a Value from the Opcode Instruction AND Logical Operation and Opcode Instruction NOT One s Complement Operation and Opcode Instruction