Excellent Work。However, how does the original pe file get cmd args,not the interactive exe like mimikatz? For example,
# The scan_raw.exe use cmd Arguments to start
scan_raw.exe -h 127.0.0.1
# after encrypt ,and run
set hagrid=cdll scan_raw.shc.exe.enc
# runing with cmd Arguments doesn't work
PELoader.exe -h 127.0.0.1
ThankYou!