参考文章
http://www.sevenforums.com/crash-lockup-debug-how/34871-advanced-principles-debugging.html
- ChildEBP: a pointer to a memory location which stores the address of the previous function on the stack ("stack frame").
- RetAddr: The "return address" where processing will resume once this function returns (finishes what it had to do).