I read the last chapter in 3 mins. He basically get a shell code from metasploit, import that code into python by using ctypes and lastly build shell script into exe. In addition to this, he also develops a http upload mechanism to upload this some antivirus check service. But in the cover, the author says last chapter will be for building a malware that evades antivirus programs etc.. I mean it is misleading at all..