Windows Malware Analysis Essentials

Conventions

In this book, you will find a number of text styles that distinguish between different kinds of information. Here are some examples of these styles and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles are shown as follows: "Insert your data type of choice inside the sizeof() operator."

A block of code is set as follows:

#include <stdio.h>
int main() {
printf("%d",sizeof(double));
return 0;
}

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

mov edi,ds:__imp__printf   ; store address of printf to edi from imports
xor esi, esi ;set value of int i=0 using ...