Possible wrong callstack with KERNELBASE!_EH4_GlobalUnwind

_From [zhao...@google.com](https://code.google.com/u/106321947286816917100/) on November 15, 2013 17:01:42_

Some callstack has KERNELBASE!_EH4_GlobalUnwind

#0 system call NtGdiSelectBitmap ^M
#1 GDI32.dll!SelectObject^M
#2 USER32.dll!BitmapFromDIB^M
#3 USER32.dll!ConvertDIBBitmap^M
#4 USER32.dll!CopyBmp ^M
#5 USER32.dll!CopyIcoCur^M
#6 USER32.dll!InternalCopyImage^M
#7 USER32.dll!__ClientCopyImage^M
#8 KERNELBASE.dll!_EH4_GlobalUnwind^M
#9 USER32.dll!VerNtUserCreateWindowEx^M
#10 USER32.dll!_CreateWindowEx^M
#11 USER32.dll!CreateWindowExW^M
#12 USER32.dll!CreateIMEUI^M

The KERNELBASE.dll!_EH4_GlobalUnwind is likely to be wrong.
From the asm code
KERNELBASE!_EH4_GlobalUnwind:
755b72da 55 push ebp
755b72db 8bec mov ebp,esp
755b72dd 53 push ebx
755b72de 56 push esi
755b72df 57 push edi
755b72e0 6a00 push 0x0
755b72e2 6a00 push 0x0
755b72e4 68ef725b75 push 0x755b72ef
755b72e9 51 push ecx
755b72ea e891020000 call KERNELBASE!RtlUnwind (755b7580)
755b72ef 5f pop edi
755b72f0 5e pop esi
755b72f1 5b pop ebx
755b72f2 5d pop ebp
755b72f3 c3 ret
It may caused by this "push 0x755b72ef".

_Original issue: http://code.google.com/p/drmemory/issues/detail?id=1385_