madshi.net

Code: Select all

library hShutdown;

{$IMAGEBASE $42800000}

uses
  Windows,
  SysUtils,
  madCodeHook,
  madStrings;

{$R *.res}

var
ExitWindowsExNext                     : function (uFlags, Reserved: dword):bool; stdcall;
InitiateSystemShutdownNextA     : function (lpMachineName:LPSTR;lpMessage:LPSTR;dwTimeout:DWORD;bForceAppsClosed,bRebootAfterShutdown:bool):bool; stdcall;
InitiateSystemShutdownNextW    : function (lpMachineName:LPWSTR;lpMessage:LPWSTR;dwTimeout:DWORD;bForceAppsClosed,bRebootAfterShutdown:bool):bool; stdcall;
InitiateSystemShutdownExNext    : function (lpMachineName:LPSTR;lpMessage:LPSTR;dwTimeout:DWORD;bForceAppsClosed,bRebootAfterShutdown:bool;dwReason:DWORD):bool; stdcall;

function ExitWindowsExCallback(flags, reserved: dword): bool; stdcall;
begin
    result := false;
    SetLastError(ERROR_ACCESS_DENIED);
end;

function InitiateSystemShutdownExCallback(lpMachineName:LPSTR; lpMessage:LPSTR;dwTimeout:DWORD; bForceAppsClosed, bRebootAfterShutdown:bool; dwReason:DWORD): bool; stdcall;
begin
    result := false;
    SetLastError(ERROR_ACCESS_DENIED);
end;

function InitiateSystemShutdownACallback(lpMachineName:LPSTR; lpMessage:LPSTR;dwTimeout:DWORD; bForceAppsClosed, bRebootAfterShutdown:bool; dwReason:DWORD): bool; stdcall;
begin
    result := false;
    SetLastError(ERROR_ACCESS_DENIED);
end;

function InitiateSystemShutdownWCallback(lpMachineName:LPWSTR; lpMessage:LPWSTR;dwTimeout:DWORD; bForceAppsClosed, bRebootAfterShutdown:bool; dwReason:DWORD): bool; stdcall;
begin
    result := false;
    SetLastError(ERROR_ACCESS_DENIED);
end;

procedure DLLEntryPoint(Rson: dword);
begin
 Try
   CollectHooks;
   HookAPI(user32, 'ExitWindowsEx', @ExitWindowsExCallback, @ExitWindowsExNext);
   HookAPI(advapi32, 'InitiateSystemShutdownA', @InitiateSystemShutdownACallback, @InitiateSystemShutdownNextA);
   HookAPI(advapi32, 'InitiateSystemShutdownW', @InitiateSystemShutdownWCallback, @InitiateSystemShutdownNextW);
   HookAPI(advapi32, 'InitiateSystemShutdownEx', @InitiateSystemShutdownExCallback, @InitiateSystemShutdownExNext);
   FlushHooks;
 Except
   On E: Exception do;
 end;
end;

begin
  if not Assigned(DllProc) then
   begin
    DLLProc := @DLLEntryPoint;
    DLLEntryPoint(DLL_PROCESS_ATTACH);
   end;
end.

Code: Select all

Program Load
.......
.......
.......
.......

procedure TForm10.Button1Click(Sender: TObject);
begin
if LoadInjectionDriver('hShutdown', 'shutdown_x86.sys', 'shutdown_x64.sys') then
  begin
   InjectLibrary('hShutdown', 'hshutdown.dll', [b]ALL_SESSIONS[/b], true);
  end
else
  begin
     Showmessage('Error while loading the driver....');
     close;
  end;
 Showmessage('Shutdown blocked....');
end;

//Unload driver and unlock shutdown
procedure TForm10.Button2Click(Sender: TObject);
begin
  UninjectLibrary('hShutdown', 'hshutdown.dll', ALL_SESSIONS, true);
  StopInjectionDriver('hShutdown');
  Showmessage('Shutdown unlocked....');
  close;
end;