Function nt_query_object

dumpy/dinvoke/src/lib.rs:812–826

Dynamically calls NtQueryObject. It will return the NTSTATUS value returned by the call.

(handle: HANDLE, object_information_class: u32, object_information: PVOID, length: u32, return_length: *mut u32)

///
/// It will return the NTSTATUS value returned by the call.
pub fn nt_query_object(handle: HANDLE, object_information_class: u32, object_information: PVOID, length: u32, return_length: *mut u32) -> i32 {
    
    unsafe 
    {
        let ret;
        let func_ptr: data::NtQueryObject;
        let ntdll = get_module_base_address(&lc!("ntdll.dll"));
        dynamic_invoke!(ntdll,&lc!("NtQueryObject"),func_ptr,ret,handle,object_information_class,object_information,length,return_length);

        match ret {
            Some(x) => return x,
            None => return -1,
        }
    } 
}

/// Dynamically calls an exported function from the specified module.
///