calv004/Crystal-Havoc ? reverse-engineered prompt

Build me a small C project that works as a loader for a Havoc Demon payload and adds the evasion layer outside the implant itself.

I want it to take the raw Demon DLL, link it into position independent shellcode, and route the relevant Windows API calls through callstack spoofing and indirect syscalls. The idea is that the loader handles the spoofing, so the Demon build itself can stay simpler and not rely on Havoc’s built in evasion features. Please include a simple build flow, a helper to extract the raw DLL from the generated shellcode, and a way to output the final shellcode as a binary or C array.

Also make sure the setup notes explain the small source changes needed in Havoc so the DLL resolution goes through GetProcAddress and the loader can hook it cleanly. If you need to check current docs or build details online, go ahead and do that.