admin管理员组

文章数量:1289845

_run_svm_vmrun Proc Frame
;backup stack point
mov rax, rsp

;switch to new stack point
mov rsp, r9


;allocate space for KTRAP_FRAME
sub rsp, 190h

.pushframe
.allocstack 190h

.endprolog

...

My code is like this, and when crash the call stack is in the picture.

Windbg can show the call stack bofore the function switch to the new stack point

本文标签: