Ejemplo n.º 1
0
        unsafe string GetNtdllName()
        {
            var  sb = new StringBuilder(64);
            uint srcSize, dstSize;

            Control.GetTextReplacementWide("$ntdllsym", 0, null, 0, &srcSize, sb, 128, &dstSize);
            string ntdll = sb.ToString();

            if (ntdll.StartsWith("nt"))
            {
                return(ntdll);
            }

            return("ntdll");
        }