Posted on 2009-03-30 17:51
S.l.e!ep.￠% 閱讀(1431)
評論(0) 編輯 收藏 引用 所屬分類:
WinDbg
ChildEBP?? RetAddr??? MODULE!SYMBOL+0x0ffset
?
Where:
·
????????
ChildEBP
is the 32-bit Base Pointer for that function or subroutine
·
????????
RetAddr
is the 32-bit virtual address the function will return to when it exits
·
????????
MODULE
is the name of the executable module containing the function
·
????????
SYMBOL
is the name of the function called
·
????????
Offset
is the offset, in bytes, from the address of the function to the current instruction being executed and is displayed as a hex number