/*  name      ZeroAccess  type      rootkit  cve       —  year      unknown  os        Windows  authors   unknown  source    RamadhanAmizudin/malware  archived  RamadhanAmizudin, krisyotam (2026)  notes     — *//*********************************************************************************  (C) COPYRIGHT AUTHORS, 2016**  TITLE:       GLOBAL.H**  VERSION:     1.01**  DATE:        19 Jan 2016**  Common header file for the program support routines.** THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF* ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED* TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A* PARTICULAR PURPOSE.********************************************************************************/ #pragma once //disable nonmeaningful warnings.#pragma warning(disable: 4005) // macro redefinition#pragma warning(disable: 4055) // %s : from data pointer %s to function pointer %s#pragma warning(disable: 4152) // nonstandard extension, function/data pointer conversion in expression#pragma warning(disable: 4201) // nonstandard extension used : nameless struct/union#pragma warning(disable: 6102) // Using %s from failed function call at line %u#pragma warning(disable: 6320) //exception-filter expression is the constant EXCEPTION_EXECUTE_HANDLER #if !defined UNICODE#error ANSI build is not supported#endif #if (_MSC_VER >= 1900) #ifdef _DEBUG#pragma comment(lib, "vcruntimed.lib")#pragma comment(lib, "ucrtd.lib")#else#pragma comment(lib, "libvcruntime.lib")#endif#endif #include <winsock2.h>#include <Ws2tcpip.h>#include <Windows.h>#include <ntstatus.h>#include <process.h>#include <intrin.h> #include "..\minirtl\minirtl.h"#include "..\minirtl\rtltypes.h"#include "..\minirtl\_filename.h"#include "..\minirtl\cmdline.h" #include "ntos.h"#include "za.h"#include "util.h"#include "md5.h"#include "za_crypto.h"#include "ldr.h"#include "rc4.h"