#include <windows.h> int main() { DWORD dwKernel32 = 0; _asm { mov eax, fs:[0x30] // peb mov eax, [eax+0x0C] // ldr mov eax, [eax+0x1C] // Module List _loop: mov esi, [eax+0x08] // DllBase mov ebx, [eax+0x20] // UNICODE_STRING.Buffer mov eax, [eax] // Next ListEntry cmp dword ptr [ebx+0x0C], 0x00320033 jnz _loop mov dwKernel32, esi } return 0; }