/*
  name      ZeroAccess
  type      rootkit
  cve       —
  year      unknown
  os        Windows
  authors   unknown
  source    RamadhanAmizudin/malware
  archived  RamadhanAmizudin, krisyotam (2026)
  notes     —
 */
/*******************************************************************************
*
*  (C) COPYRIGHT AUTHORS, 2016
*
*  TITLE:       MD5.C
*
*  VERSION:     1.00
*
*  DATE:        15 Jan 2016
*
*  ZeroAccess Fast MD5 support routines.
*
* THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
* ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED
* TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
* PARTICULAR PURPOSE.
*
*******************************************************************************/

#include "global.h"

PMD5Init MD5Init = NULL;
PMD5Update MD5Update = NULL;
PMD5Final MD5Final = NULL;

/*
* SfInitMD5
*
* Purpose:
*
* Load function pointers for quick MD5.
*
*/
BOOLEAN SfInitMD5(
	VOID
	)
{
	HMODULE hLib;
		
	if (
		(MD5Init != NULL) &&
		(MD5Update != NULL) &&
		(MD5Final != NULL)
		)
	{
		return TRUE;
	}
		
	hLib = GetModuleHandle(TEXT("ntdll.dll"));
	if (hLib == NULL)
		return FALSE;

	MD5Init = (PMD5Init)GetProcAddress(hLib, "MD5Init");
	MD5Update = (PMD5Update)GetProcAddress(hLib, "MD5Update");
	MD5Final = (PMD5Final)GetProcAddress(hLib, "MD5Final");
	return TRUE;
}