/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
					-   HLL
					 DLL  
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
	 .

	    -  ,     
    .         
.       ,    
       .    
     -   .
            
 . 
	 -        -
.  tyt :
1)   .      ,
  WinAPI   .    
 .    .  , ,  -
  B     LCC  MSVC.
2)           HLL.   
  --  API    . .
3)     .    
   .
4)
	 ,  Microsoft    . 
      DLL. ,     DLL 
         .  , 
 DLL    . 
	    loader.cpp.      
 MSDN "Inside Win 2000".     DLL. 
       imagebase,    
 --    .     RVA, 
 ,       
DLL.        DllMain. .  
   DLL,    .   DLL  
 ,       GetProcAddress, FreeLibrary  -
  .       kernel32 =)
 UPX  .NET DLL    .
	     ,   worm- 
 ... ,  !

:
	push offset GetProcAddress
	push offset LoadLibraryA
	push offset VirtualFree
	push offset VirtualProtect
	push offset VirtualAlloc
	push offset dll_in_memory
	call dllload
	add esp, 6*4

...
dll_in_memory:
include your_dll.inc
include dllload.inc



/whale                                               
                                                 http://vx.netlux.org/~whale
/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
make this staff
	makeinc	
	dll2inc kkldll.dll kkldll.inc		
	mki sample
