30#define _WIN32_WINNT_MINVER 0x0001
32#define MAKERANGE(from, to) \
33 { _WIN32_WINNT_ ## from, _WIN32_WINNT_ ## to }
35#define PASS(from, to) \
40 {
L"%systemroot%\\system32\\kernel32.dll",
TRUE,
PASS(MINVER, WIN10) },
41 {
L"%SYSTEMROOT%\\SYSTEM32\\KERNEL32.DLL",
TRUE,
PASS(MINVER, WIN10) },
43 {
L"%systemroot%//system32\\kernel32.dll",
TRUE,
PASS(VISTA, WIN10) },
44 {
L"%systemroot%\\system32\\..\\system32\\kernel32.dll",
TRUE,
PASS(VISTA, WIN10) },
47 {
L"kernel32.dll",
FALSE,
PASS(MINVER, MINVER) },
48 {
L"%systemroot%//system32\\kernel32.dll",
FALSE,
PASS(MINVER, MINVER) },
50 {
L"%systemroot%\\system32\\kernel32.dll",
FALSE,
PASS(MINVER, WS03) },
51 {
L"%SYSTEMROOT%\\SYSTEM32\\KERNEL32.DLL",
FALSE,
PASS(MINVER, WS03) },
54 {
L"%systemroot%\\system32\\user32.dll",
TRUE,
PASS(MINVER, WIN10) },
55 {
L"%systemroot%\\system32\\shell32.dll",
TRUE,
PASS(MINVER, WIN10) },
56 {
L"%systemroot%\\system32\\browseui.dll",
TRUE,
PASS(MINVER, WIN10) },
57 {
L"%systemroot%\\system32\\apphelp.dll",
TRUE,
PASS(MINVER, WIN10) },
58 {
L"%systemroot%\\system32\\sfc.dll",
TRUE,
PASS(MINVER, WIN10) },
59 {
L"%systemroot%\\system32\\sfc_os.dll",
TRUE,
PASS(MINVER, WIN10) },
60 {
L"%systemroot%\\system32\\sdbinst.exe",
TRUE,
PASS(MINVER, WIN10) },
61 {
L"%systemroot%\\AppPatch\\sysmain.sdb",
TRUE,
PASS(MINVER, WIN10) },
62 {
L"%systemroot%\\fonts\\tahoma.ttf",
TRUE,
PASS(MINVER, WIN10) },
63 {
L"%systemroot%\\fonts\\tahomabd.ttf",
TRUE,
PASS(MINVER, WIN10) },
64 {
L"%systemroot%\\system32\\ntoskrnl.exe",
TRUE,
PASS(MINVER, WIN10) },
65 {
L"%systemroot%\\system32\\c_1252.nls",
TRUE,
PASS(MINVER, WIN10) },
66 {
L"%systemroot%\\NOTEPAD.EXE",
TRUE,
PASS(MINVER, WIN10) },
std::map< E_MODULE, HMODULE > mod
PRTL_UNICODE_STRING_BUFFER Path
static void Test_ProtectedFiles()
struct _testdata testdata
static DWORD g_WinVersion
NTSTATUS NTAPI RtlGetVersion(IN OUT PRTL_OSVERSIONINFOW lpVersionInformation)
#define GetProcAddress(x, y)
DWORD WINAPI ExpandEnvironmentStringsW(IN LPCWSTR lpSrc, IN LPWSTR lpDst, IN DWORD nSize)
HINSTANCE WINAPI DECLSPEC_HOTPATCH LoadLibraryA(LPCSTR lpLibFileName)
BOOL WINAPI SfcIsFileProtected(HANDLE RpcHandle, LPCWSTR ProtFileName)
STRSAFEAPI StringCchCopyW(STRSAFE_LPWSTR pszDest, size_t cchDest, STRSAFE_LPCWSTR pszSrc)
DWORD WINAPI GetLastError(void)