公用模块：_GetKernel.asm根据程序被调用的时候堆栈中有个用于 Ret 的地址指向 Kernel32.dll 而从内存中扫描并获取 Kernel32.dll 的基址 -Public modules: _GetKernel.asm according to the procedure is called when there is a stack of address points for Ret and Kernel3