https://x.com/eversinc33/status/1888577040594411956

get_dll_from_symbol_server.cpp

#include <windows.h>
#include <iostream>
#include <sstream>

std::string 
GetSymbolServerURL(
    const std::string& moduleName
) 
{
    /* Extract timestamp and image size from a module 
       & convert to uppercase hex. Then construct the symbol url */

    HMODULE hModule = GetModuleHandleA(moduleName.c_str());
    PIMAGE_DOS_HEADER pDosHeader = (PIMAGE_DOS_HEADER)hModule;
    PIMAGE_NT_HEADERS pNtHeaders = (PIMAGE_NT_HEADERS)((BYTE*)hModule + pDosHeader->e_lfanew);

    DWORD timestamp = pNtHeaders->FileHeader.TimeDateStamp;
    DWORD imageSize = pNtHeaders->OptionalHeader.SizeOfImage;
    
    std::stringstream ss;
    ss << std::hex << std::uppercase << timestamp << imageSize;

    std::string symbolServerURL = "https://msdl.microsoft.com/download/symbols/" + moduleName + "/" + ss.str() + "/" + moduleName;
    return symbolServerURL;
}

int 
main() 
{
    std::string module = "ntdll.dll"; 
    std::string url = GetSymbolServerURL(module);
    std::cout << "[*] Symbol Server URL: " << url << std::endl;
    return 0;
}