_________________  18.     625

    ResumeThread,      
  , . .   DLL,      .

-      . -,   
 ExitThread,      . :    -
   StartOfThread (.  4).    
    ,  StartOfThread  .  StartOfThread
  ,       , StartOfThread  -
   . ,       RET
( Intel x86)     ,   . ,  
  ,    ExitThread.

-,       , Load-
Library A  NULL.       NULL     free-
Library. ,         0  
FreeLibrary,      0.       ,   
           . 
, FreeLibrary ,      hinstDll,   
FALSE,    .

-,   StartOfThread ,  SEH-, 
   ,  .  ,    
. ,    .   ,    
 LoadLibraryA, FreeLibrary  ExitThreacP.    12:    
  DllMain (   )   fdwReason, -
 DLL_PROCESS_ATTACH  DLL_PROCESS_DETACH.     -
 ,    ,    -
. ,           
SEH-,     .    SEH   
    .

 ,  ,        -
 .  -        ,  
    .  ,     
     .  ,      MIPS 
   Alpha,     ,  -  
-      -.

,        ,   
        - .  
  (, ,  ),     (-  
)  -  ,    Intel  MIPS.    2.

 2: A/JocProcessMemory  Create Thread

    :

1.        .

2.          
  ( ).

3.         INJ-
LIBINFO,    DLL    .

4.  CreateRemote Thread,       -
    IpStartAddr,    INJLIBINFO  -
 IpvThreadParm.

5.    .

6.  ,    .