Posted on 2009-03-30 17:51
S.l.e!ep.￠% 阅读(1387)
评论(0) 编辑 收藏 引用 所属分类:
WinDbg
ChildEBP RetAddr MODULE!SYMBOL+0x0ffset
Where:
·
ChildEBP
is the 32-bit Base Pointer for that function or subroutine
·
RetAddr
is the 32-bit virtual address the function will return to when it exits
·
MODULE
is the name of the executable module containing the function
·
SYMBOL
is the name of the function called
·
Offset
is the offset, in bytes, from the address of the function to the current instruction being executed and is displayed as a hex number