MCPcopy Create free account
hub / github.com/Kudaes/Dumpy / nt_query_information_thread

Function nt_query_information_thread

dumpy/dinvoke/src/lib.rs:735–749  ·  view source on GitHub ↗

Dynamically calls NtQueryInformationThread. It will return the NTSTATUS value returned by the call.

(handle: HANDLE, thread_information_class: u32, thread_information: PVOID, length: u32, return_length: *mut u32)

Source from the content-addressed store, hash-verified

733///
734/// It will return the NTSTATUS value returned by the call.
735pub fn nt_query_information_thread(handle: HANDLE, thread_information_class: u32, thread_information: PVOID, length: u32, return_length: *mut u32) -> i32 {
736
737 unsafe
738 {
739 let ret;
740 let func_ptr: data::NtQueryInformationProcess;
741 let ntdll = get_module_base_address(&lc!("ntdll.dll"));
742 dynamic_invoke!(ntdll,&lc!("NtQueryInformationThread"),func_ptr,ret,handle,thread_information_class,thread_information,length,return_length);
743
744 match ret {
745 Some(x) => return x,
746 None => return -1,
747 }
748 }
749}
750
751/// Dynamically calls NtQueryInformationFile.
752///

Callers 1

force_leakageFunction · 0.85

Calls 1

get_module_base_addressFunction · 0.85

Tested by

no test coverage detected