Function nt_duplicate_object

dumpy/dinvoke/src/lib.rs:793–807

Dynamically calls NtDuplicateObject. It will return the NTSTATUS value returned by the call.

(source_phandle: HANDLE, source_handle:HANDLE, target_phandle: HANDLE, target_handle: *mut HANDLE, desired_access: u32, attributes: u32, options: u32)

///
/// It will return the NTSTATUS value returned by the call.
pub fn nt_duplicate_object(source_phandle: HANDLE, source_handle:HANDLE, target_phandle: HANDLE, target_handle: *mut HANDLE, desired_access: u32, attributes: u32, options: u32) -> i32 {
    
    unsafe 
    {
        let ret;
        let func_ptr: data::NtDuplicateObject;
        let ntdll = get_module_base_address(&lc!("ntdll.dll"));
        dynamic_invoke!(ntdll,&lc!("NtDuplicateObject"),func_ptr,ret,source_phandle,source_handle,target_phandle,target_handle,desired_access,attributes,options);

        match ret {
            Some(x) => return x,
            None => return -1,
        }
    } 
}

/// Dynamically calls NtQueryObject.
///