Everything that we have covered so far is purely the PE file format on the hard disk, we didn't cover how this PE file changes in memory while getting loaded and the whole execution process of these files. In this section, we will cover how Windows loads a PE file, executes it, and makes it a live program.
PE loading and process creation
Basic terminology
To understand PE loading and process creation, we have to cover some basic terminology, such as process, thread, Thread Environment Block (TEB), Process Environment Block (PEB), and others before we dive into the flow of loading and executing an executable PE file.
