@alegrl: Yes. LoadModule("ntdll") GetProcAddress(hNtDll, "NtQueryInformationFile")
I can't find documentation for the particular call that would check though.
Even if you do find it, you're walking on very thin documentation here.
↧
Channel:
The Old New Thing
X
Are you the publisher?
Claim or
contact us
about this channel.
X
0
Channel Details:
- Title: The Old New Thing
- Channel Number: 1895442
- Language: English
- Registered On: November 27, 2011, 11:50 pm
- Number of Articles: 24428
- Latest Snapshot: January 3, 2020, 5:35 pm
- RSS URL: http://blogs.msdn.com/b/oldnewthing/rsscomments.aspx
- Publisher: https://devblogs.microsoft.com/oldnewthing
- Description:
- Catalog: //verriculate5.rssing.com/catalog.php?indx=1895442
© 2025 //www.rssing.com