include 'win32ax.inc'
use32
entry start
start:
invoke getmodule,"ntdll.dll"
invoke getproc,eax,"RtlWalkFrameChain"
mov dword [walk],eax
invoke walk,fuck,100,0
mov dword[stackcount],eax
mov ecx,eax
xor edx,edx
loop_print:
;print:mov eax,dword [fuck+edx*4]
inc edx
loop loop_print
section '.data' data readable writeable
stackcount dd 00
walk dd 00
fuck db 100 dup 00
section '.idata' import data readable
library kernel,'KERNEL32.DLL'
import kernel,getmodule,'GetModuleHandleA',\
getproc,'GetProcAddress'
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
