fork download

copy

__declspec(naked) HMODULE GetKernel32(void)
{
	__asm
	{
		push esi
		mov eax, fs:[0x30]			; PEB base
		mov eax, [eax + 0x0C]		; goto PEB_LDR_DATA
		mov eax, [eax + 0x1C]		; first entry in the list of loaded modules
		mov eax, [eax]				; second entry
		mov eax, [eax]				; third entry (kernel32.dll)
		mov eax, [eax + 0x08]		; kernel32 base memory
		pop esi
		ret
	}
}
 
__declspec(naked) DWORD FindGetProcAddr(void)
{
	HMODULE KERNELBASE = GetKernel32();
	__asm
	{
		ret
	}
}
 
int main(int argc, char *argv[])
{
	FindGetProcAddr();
}
 

prog.c:1:1: warning: return type defaults to 'int' [-Wimplicit-int]
 __declspec(naked) HMODULE GetKernel32(void)
 ^
prog.c: In function '__declspec':
prog.c:1:19: error: unknown type name 'HMODULE'
 __declspec(naked) HMODULE GetKernel32(void)
                   ^
prog.c:2:1: error: expected '=', ',', ';', 'asm' or '__attribute__' before '{' token
 {
 ^
prog.c:17:1: error: expected declaration specifiers before '__declspec'
 __declspec(naked) DWORD FindGetProcAddr(void)
 ^
prog.c:27:1: error: expected '=', ',', ';', 'asm' or '__attribute__' before '{' token
 {
 ^
prog.c:1:1: warning: type of 'naked' defaults to 'int' [-Wimplicit-int]
 __declspec(naked) HMODULE GetKernel32(void)
 ^
prog.c:29:1: error: expected '{' at end of input
 }
 ^
prog.c:29:1: warning: control reaches end of non-void function [-Wreturn-type]
 }
 ^

Standard output is empty