MCPcopy Create free account
hub / github.com/bytecode77/r77-rootkit / UninitializeRootkit

Function UninitializeRootkit

r77/Rootkit.c:55–73  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

53 return TRUE;
54}
55VOID UninitializeRootkit()
56{
57 if (RootkitInitialized)
58 {
59 RootkitInitialized = FALSE;
60
61 // Remove the r77 header.
62 RemoveR77Header();
63
64 // Uninitialize configuration system.
65 UninitializeConfig();
66
67 // Detach hooks.
68 UninitializeHooks();
69
70 FREE(RootkitDll32);
71 FREE(RootkitDll64);
72 }
73}
74static VOID DetachRootkit()
75{
76 // A thread was created with a pointer to DetachRootkit(), thus requesting the rootkit to remove itself gracefully.

Callers 2

DetachRootkitFunction · 0.85
DllMainFunction · 0.85

Calls 3

RemoveR77HeaderFunction · 0.85
UninitializeConfigFunction · 0.85
UninitializeHooksFunction · 0.85

Tested by

no test coverage detected