DWORD GetKernel32Address()
{
DWORD kernelAddr = 0;

__asm
{
mov ebx, fs:[0x30] // Get PEB
mov ebx, [ebx + 0xC] // Get PEB->Ldr
mov ebx, [ebx + 0x14] // Get 1st Entry
mov ebx, [ebx] // Get 2nd Entry
mov ebx, [ebx] // Get 3rd Entry
mov ebx, [ebx + 0x10] // Get the 3rd entry's base address (kernel32)
mov kernelAddr, ebx
}
return kernelAddr;