search

EquiFox / KsDumper

Dumping processes using the power of kernel space !
MIT License
979 stars 217 forks source link

Unload function #1

Closed eXCoreX closed 5 years ago

eXCoreX commented 5 years ago

https://github.com/EquiFox/KsDumper/blob/master/KsDumperDriver/Driver.c#L100

function signature should be with NTSTATUS return val (not required to return something actually).

Also: https://github.com/EquiFox/KsDumper/blob/master/KsDumperDriver/Driver.c#L105

It's better make the symLink global and you are deleting wrong link anyway, it should be the one with "Dos" in the name. If have time, i'll make a pull request.

EquiFox commented 5 years ago

Thanks for spotting this one ! My bad, totally missed it.