eax=7c840220 ebx=0013e438 ecx=000000ee edx=00000002 esi=000000d8 edi=00000000
eip=7c95860c esp=0013e41c ebp=0013e70c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
函数: ntdll!KiFastSystemCallRet
7c9585ee e82c000000 call ntdll!RtlRaiseException (7c95861f)
7c9585f3 8b0424 mov eax,[esp]
7c9585f6 8be5 mov esp,ebp
7c9585f8 5d pop ebp
7c9585f9 c3 ret
7c9585fa 8da42400000000 lea esp,[esp]
7c958601 8da42400000000 lea esp,[esp]
ntdll!KiFastSystemCall:
7c958608 8bd4 mov edx,esp
7c95860a 0f34 sysenter
错误 ->ntdll!KiFastSystemCallRet:
7c95860c c3 ret
7c95860d 8da42400000000 lea esp,[esp]
7c958614 8d642400 lea esp,[esp]
ntdll!KiIntSystemCall:
7c958618 8d542408 lea edx,[esp+0x8]
7c95861c cd2e int 2e
7c95861e c3 ret
ntdll!RtlRaiseException:
7c95861f 55 push ebp
7c958620 8bec mov ebp,esp
7c958622 8da42430fdffff lea esp,[esp-0x2d0]
*----> 堆栈反向跟踪 <---*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0DE06ACD\MSVCR80.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
0013e70c 7813ad32 0013e76c 7c88b7c0 40000015 ntdll!KiFastSystemCallRet
0013e79c 0000cccc 000f000e 00010020 00030002 MSVCR80!abort+0xeb