From aff16faeb659fa2c826fb1b57213b595e2a97e75 Mon Sep 17 00:00:00 2001
From: vxunderground <57078196+vxunderground@users.noreply.github.com>
Date: Thu, 14 Jul 2022 23:18:45 -0500
Subject: [PATCH] Create GetPebAlt.cpp

---
 Windows API/GetPebAlt.cpp | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 Windows API/GetPebAlt.cpp

diff --git a/Windows API/GetPebAlt.cpp b/Windows API/GetPebAlt.cpp
new file mode 100644
index 0000000..e062e48
--- /dev/null
+++ b/Windows API/GetPebAlt.cpp	
@@ -0,0 +1,10 @@
+PPEB GetPebAlt(VOID)
+{
+	PTEB Teb;
+#if defined(_WIN64)
+	Teb = (PTEB)__readgsqword(0x30);
+#elif define(_WIN32)
+	Teb = (PTEB)__readfsdword(0x18);
+#endif
+	return (PPEB)Teb->ProcessEnvironmentBlock;
+}