S.l.e!ep.￠%

ChildEBP?? RetAddr??? MODULE!SYMBOL+0x0ffset

?

Where:

· ???????? ChildEBP is the 32-bit Base Pointer for that function or subroutine

· ???????? RetAddr is the 32-bit virtual address the function will return to when it exits

· ???????? MODULE is the name of the executable module containing the function

· ???????? SYMBOL is the name of the function called

· ???????? Offset is the offset, in bytes, from the address of the function to the current instruction being executed and is displayed as a hex number