P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research)