HoShiMin

#include <ntstatus.h>

#define NOMINMAX
#define WIN32_NO_STATUS
#define WIN32_LEAN_AND_MEAN
#include <Windows.h>

#include <winternl.h>
#pragma comment(lib, "ntdll.lib")

HoShiMin

; You should define the 'AMD64' MASM-preprocessor definition
; at the 'General' MASM properties page in the project properties (for the x64 only).

IFNDEF AMD64
    .686P
    .XMM
    .MODEL FLAT, STDCALL
ENDIF

.CODE

HoShiMin

#define WIN32_LEAN_AND_MEAN

#define WIN32_NO_STATUS
#include <windows.h>
#undef WIN32_NO_STATUS

#include <string>
#include <sstream>
#include <iomanip>
#include <algorithm>

HoShiMin

#include <windows.h>
#include <vector>
#include <string>
#include "SymParser.h"

// Using Wide-versions of DbgHelp functions:
#define DBGHELP_TRANSLATE_TCHAR

// Expose additional declarations from DbgHelp.h:
#define _NO_CVCONST_H 

HoShiMin

#pragma once

#include <Windows.h>

void inline pclr(unsigned short attributes) {
	static HANDLE hConsole = NULL;
	if (!hConsole) hConsole = GetStdHandle(STD_OUTPUT_HANDLE);
	SetConsoleTextAttribute(hConsole, attributes);
}

HoShiMin

unit EnjoyTheRing0;

interface

uses
  Windows, SysUtils, DriversAPI;

// Загрузка и выгрузка драйвера:
function  ETR0GetHandlesCount: Integer; // Количество открытых в данный момент дескрипторов драйвера
function  ETR0LoadDriver: Boolean;      // Загрузить и запустить драйвер

HoShiMin

#include "stdafx.h"
#include "DbgHelpWrapper.h"


DbgHelpWrapper::DbgHelpWrapper() {
	hProcess = GetCurrentProcess();
}

DbgHelpWrapper::~DbgHelpWrapper() {
	DeinitializeDbgHelp();

HoShiMin

#include "stdafx.h"
#include "DIAWrapper.h"

// Очистка ресурсов:
VOID DIAWrapper::Cleanup() {
	if (pGlobalSymbol)  pGlobalSymbol  -> Release();
	if (pDiaSession)    pDiaSession    -> Release();
	if (pDiaDataSource) pDiaDataSource -> Release();

	pGlobalSymbol  = NULL;

HoShiMin

unit WinTrust;

interface

uses
  Windows, System.SysUtils;

// Проверить валидность цифровой подписи:
function IsFileTrusted(const FileName: string): Boolean;

HoShiMin

unit HashMaster;

interface

uses
  Windows, Classes, System.SysUtils, System.Threading, cHash, CodepageAPI;

type
  THashTask = record
    Calculate : Boolean;