ChildEBP RetAddr MODULE!SYMBOL+0x0ffset
Where:
· ChildEBP is the 32-bit Base Pointer for that function or subroutine
· RetAddr is the 32-bit virtual address the function will return to when it exits
· MODULE is the name of the executable module containing the function
· SYMBOL is the name of the function called
· Offset is the offset, in bytes, from the address of the function to the current instruction being executed and is displayed as a hex number