Added image

Author: Jon the Legendary

ANTfs Driver/dispatchroutines.h

@@ -1,9 +1,7 @@
 #pragma once
-
 #include <ntifs.h>
 #include "typesndefs.h"
 
-_Success_(return >= 0)
 /// <summary>
 /// This locates the lower device of NTFS and directly
 /// overwrites the contents of a file with zeroes, as 
@@ -13,6 +11,7 @@ _Success_(return >= 0)
 /// <param name="WipeInputBuffer"></param>
 /// <returns>Returns STATUS_SUCCESS or the 
 /// appropriate status code.</returns>
+_Success_(return >= 0)
 NTSTATUS 
 OverwriteFileRecord(
 	_In_ PWIPE_INPUT_BUFFER WipeInputBuffer

ANTfs/ANTfs.cpp

@@ -9,7 +9,10 @@
 #include "privileges.h"
 #include "antiforensics.h"
 
-bool GenerateOutputPath(std::wstring& Output)
+bool 
+GenerateOutputPath(
+    _Inout_ std::wstring& Output
+)
 {
     std::wstringstream ss;
     Output.resize(MAX_PATH * 2, '\0');