S.l.e!ep.¢%

像打了激速一样,以四倍的速度运转,开心的工作
简单、开放、平等的公司文化;尊重个性、自由与个人价值;
posts - 1098, comments - 335, trackbacks - 0, articles - 1
  C++博客 :: 首页 :: 新随笔 :: 联系 :: 聚合  :: 管理

ChildEBP   RetAddr    MODULE!SYMBOL+0x0ffset

 

Where:

·          ChildEBP is the 32-bit Base Pointer for that function or subroutine

·          RetAddr is the 32-bit virtual address the function will return to when it exits

·          MODULE is the name of the executable module containing the function

·          SYMBOL is the name of the function called

·          Offset is the offset, in bytes, from the address of the function to the current instruction being executed and is displayed as a hex number


只有注册用户登录后才能发表评论。
网站导航: 博客园   IT新闻   BlogJava   知识库   博问   管理