Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
It runs only c/c++/asm based binaries , if you want to run .NET based binaries use my other project : https://github.com/D1rkMtr/ExecRemoteAssembly
添加了重定位功能，由于RemotePE的ImageBase可能与自身PE的模块基址相同，不能调用ZwUnmapViewOfSection来unmap内存，否则会导致unmap 自身exe代码，造成内存访问异常 如果RemotePE的加载地址和它的ImageBase地址不同，则需要重定位
As shown in the Image:
The command line of the Remote PE is exacly the same as this command line.
Run the Loader with the arguments of the Remote PE
The URI of the remote server comes then
I invited u to solve that URI passing as arg
Unfortunately the current version , take URI in this form : https://domain.any/PathToPE
i will improve it to accept this type : [http/https]://IPv4:[port]/PathToPE sooner .
[http/https]://IPv4:[port]/PathToPE improved :
https:/[IPv4]:[port]/PathToPE also works
