File tree Expand file tree Collapse file tree 1 file changed +5
-4
lines changed
RunPE-In-Memory/RunPEinMemory Expand file tree Collapse file tree 1 file changed +5
-4
lines changed Original file line number Diff line number Diff line change 1- #include " stdafx.h"
1+ #include " stdafx.h"
22#include < Windows.h>
33#include " peBase.hpp"
44#include " fixIAT.hpp"
@@ -56,6 +56,10 @@ bool peLoader(const char *exePath, const wchar_t* cmdline)
5656 SectionHeaderArr[i].SizeOfRawData
5757 );
5858 }
59+
60+ // for demo usage:
61+ // masqueradeCmdline(L"C:\\Windows\\RunPE_In_Memory.exe Demo by aaaddress1");
62+ masqueradeCmdline (cmdline);
5963 fixIAT (pImageBase);
6064
6165 if (pImageBase != preferAddr)
@@ -64,9 +68,6 @@ bool peLoader(const char *exePath, const wchar_t* cmdline)
6468 size_t retAddr = (size_t )(pImageBase)+ntHeader->OptionalHeader .AddressOfEntryPoint ;
6569 printf (" Run Exe Module: %s\n " , exePath);
6670
67- // for demo usage:
68- // masqueradeCmdline(L"C:\\Windows\\RunPE_In_Memory.exe Demo by aaaddress1");
69- masqueradeCmdline (cmdline);
7071 ((void (*)())retAddr)();
7172}
7273
You can’t perform that action at this time.
0 commit comments