Coff common object file format

breakpoints, continued object-oriented programming,

setting, 357 427–432

this pointer, 428–430 objects creation and
destruction, 437

213, 554 virtual vs. nonvirtual functions,

Buster Sandbox Analyzer, 473 byte array initialization, 680–681

position dependence, 408 for quick analysis, 521–522

Base 64, 277–280 encoded, 636

Caesar cipher, 270
other encoding schemes, 276–277 XOR cipher, 271–276

and COM functionality, 518 comments

classes, in object-oriented code, 428 classtype keyword, in Snort, 304

CLSIDs (class identifiers), 155 Explorer, 49

and COM functionality, 518 compilation, 67

code compression algorithm, packers

in memory, 69 and, 384

flow-oriented disassembly and, 333 conditional breakpoints, 175
in OllyDbg, 188, 189–190

and, 384 conditional jump, 80–81, 113,

COM (Component Object Model), 154–157, 313, 626
related functions, 518
server malware, 157

connect mode, in Netcat, 52 ConnectNamedPipe function, 455 console programs,

INDEX 737