重建堆栈指南及其自动化实现

1. 打开windbg x86,打开fulldump,加载符号(必须)

2. !analyze -v

STACK_TEXT:  
0015bc74 75503b5b 00000c64 0015bc8c 0015bc94 ntdll!ZwResumeThread+0x15
0015bc84 6b690419 00000c64 6b6f3ed8 0015bca4 KERNELBASE!ResumeThread+0x12
WARNING: Stack unwind information not available. Following frames may be wrong.
0015bc94 6b698e85 6b6f3ed8 6b6f3ef8 0015bcbc moduleAio!TxCreateExportRegister+0x265e9
0015bca4 6b6a22bf 6b6f3ed8 0dad006c 00000001 moduleAio!filterpluginBuiltinImport+0x4eaa
0015bcbc 6b6aa0ad 00000000 0015bd6c 6b6d0a33 moduleAio!TxCreateEmbedImporter+0x6abd
0015bcc8 6b6d0a33 0015bd14 00000001 e03e54f6 moduleAio!TxCreateClipDrawingImporter+0x6255
0015bd6c 6b6d0b80 0dad005c 08eb3fc0 0e237758 moduleAio!filterpluginFormatCorrect+0xc680
0015bd94 6b6d0bc0 0dad005c 08eb3fc0 0015bdb8 moduleAio!filterpluginFormatCorrect+0xc7cd
0015bda4 015d26f7 0dad0050 08eb3fc0 0e237a00 moduleAio!filterpluginFormatCorrect+0xc80d
0015bdb8 019b2400 08f193a0 e0300748 0e237a00 moduleA!StatisticsManager::getStatus+0x1bf87
0015bdf4 019cd681 0e237a00 0015bef4 003f339c moduleA!StatisticsManager::getInstance+0x54cba
0015be30 015cd8a8 0e237a00 061c0110 0e237b8c moduleA!StatisticsManager::getInstance+0x6ff3b
0015be64 01a0af2d 0e237a64 0015bef4 0e237b8c moduleA!StatisticsManager::getStatus+0x17138
0015be7c 01987133 0e237a64 0015bef4 0e237b8c moduleA!StatisticsManager::getInstance+0xad7e7
0015be98 01ee8210 0e2379cc 0015bef4 0e237b8c moduleA!StatisticsManager::getInstance+0x299ed
0015bec8 01f03bc4 0e237a50 0015bef4 0e237b8c moduleA!StatisticsManager::getInstance+0x58aaca
0015bf8c 01f03d4d 0e2379c8 0015c158 00000048 moduleA!StatisticsManager::getInstance+0x5a647e
0015bfb4 01f04578 0e2379c8 0015c158 00000048 moduleA!StatisticsManager::getInstance+0x5a6607
0015c08c 019d5168 0e237758 0015c0ac e0307b88 moduleA!StatisticsManager::getInstance+0x5a6e32
0015c134 548e2f70 0015c158 00000000 e03e28ad moduleA!StatisticsManager::getInstance+0x77a22
0015c1d4 763d302a 0624f198 0f100898 00000001 moduleB!KAxServer::Save+0x129
0015c204 5498493a 0624f198 0f100898 00000001 ole32!OleSave+0x5b [d:\w7rtm\com\ole32\ole232\base\api.cpp @ 436]
0015c240 548e0386 00000000 0015c2ec 05837eb8 moduleB!KAxOleObjectSite::SaveOleObject+0x8d
0015c254 54c60bc1 0015c2ec 06275f38 06275f38 moduleB!KAxOleObject::_oleObjectSave+0x34
0015c268 012d6cb5 05837eb8 0015c2ec 06275f28 moduleB!KAxOleObject::OnCoreNotify+0x73
0015c288 012d6eee 0015c2ec 00000000 06275f28 moduleA+0xa6cb5
0015c2c0 01f0347e 0015c2ec 0015c30c 01983dee moduleA+0xa6eee
0015c2cc 01983dee 06275f28 0015c2ec e03079b0 moduleA!StatisticsManager::getInstance+0x5a5d38
0015c30c 01b6724d 06275fa4 00000000 e030793c moduleA!StatisticsManager::getInstance+0x266a8
0015c380 01b67658 0015c3f8 08ed2100 06271a74 moduleA!StatisticsManager::getInstance+0x209b07
0015c3cc 01b70f79 0015c3f8 08ed2100 e030795c moduleA!StatisticsManager::getInstance+0x209f12
0015c438 01a439d5 08c39048 08ed2100 e0307e20 moduleA!StatisticsManager::getInstance+0x213833
0015c49c 017117de 08c39048 00000001 0015c4ec moduleA!StatisticsManager::getInstance+0xe628f
0015c4b8 6b6cddbe 058086c0 00000001 0015c4ec moduleA!wdGetApplicationObject+0x46c03
0015c4f8 6b6cde47 0b4f2f68 0a74b4a4 058086c0 moduleAio!filterpluginFormatCorrect+0x9a0b
0015c524 6b6ceb2d 061c5d34 058086c0 08a3f810 moduleAio!filterpluginFormatCorrect+0x9a94
0015c55c 6b6901f8 08a3f7c0 00008ff0 00000002 moduleAio!filterpluginFormatCorrect+0xa77a
0015c570 6b6a2204 08a3f7c0 00008ff0 e03e2c36 moduleAio!TxCreateExportRegister+0x263c8
0015c5ac 6b6a69b6 74702e09 0015c5c0 6b6aa0b2 moduleAio!TxCreateEmbedImporter+0x6a02
0015c5b8 6b6aa0b2 0015c664 6b6d0a33 0015c60c moduleAio!TxCreateClipDrawingImporter+0x2b5e
0015c5c0 6b6d0a33 0015c60c 00000001 e03e2ffe moduleAio!TxCreateClipDrawingImporter+0x625a
0015c664 6b6d0b80 061c30fc 08ed2100 061af650 moduleAio!filterpluginFormatCorrect+0xc680
0015c688 6b6d0bc0 061c30fc 08ed2100 0015c6ac moduleAio!filterpluginFormatCorrect+0xc7cd
0015c698 015d26f7 061c30f0 08ed2100 061af8f8 moduleAio!filterpluginFormatCorrect+0xc80d
0015c6ac 019b2400 08eb8be0 e0307c54 061af8f8 moduleA!StatisticsManager::getStatus+0x1bf87
0015c6e8 019cd681 061af8f8 0015c754 003f316c moduleA!StatisticsManager::getInstance+0x54cba
0015c724 01a0602d 061af8f8 061c0078 061afa84 moduleA!StatisticsManager::getInstance+0x6ff3b
0015d20c 01a0af1f 061af95c 0015d29c 061afa84 moduleA!StatisticsManager::getInstance+0xa88e7
0015d224 01987133 061af95c 0015d29c 061afa84 moduleA!StatisticsManager::getInstance+0xad7d9
0015d240 01ee8210 061af8c4 0015d29c 061afa84 moduleA!StatisticsManager::getInstance+0x299ed
0015d270 01f03bc4 061af948 0015d29c 061afa84 moduleA!StatisticsManager::getInstance+0x58aaca
0015d334 01f03ca3 061af8c0 0015d44c 00000048 moduleA!StatisticsManager::getInstance+0x5a647e
0015d35c 01f04578 061af8c0 0015d44c 00000048 moduleA!StatisticsManager::getInstance+0x5a655d
0015d430 01af6e5a 061af650 0015d460 03e70a10 moduleA!StatisticsManager::getInstance+0x5a6e32
0015d494 015dc211 061af650 03e70a10 601f086a moduleA!StatisticsManager::getInstance+0x199714
0015d4b4 01e6bfb1 061af650 e0306e44 0564d72c moduleA!StatisticsManager::getStatus+0x25aa1
0015d4f8 015c91c8 00537fd8 0214b6a0 0000a413 moduleA!StatisticsManager::getInstance+0x50e86b
0015d518 01723e51 0564d728 02537fd8 0214b6a0 moduleA!StatisticsManager::getStatus+0x12a58
0015d544 01c113d9 05653500 0214b6a0 0000a413 moduleA!wdGetApplicationObject+0x59276
0015d580 0178fbf1 0565f9a0 0214b6a0 0000a413 moduleA!StatisticsManager::getInstance+0x2b3c93
0015d5cc 547c1e5e 0565dfb8 0214b6a0 0000a413 moduleA!wdGetApplicationObject+0xc5016
0015d5ec 60319e37 0e959db0 03eacde0 0e959db0 moduleB!KmoduleAUserInfo::logined+0xbf188
0015d604 6031ae41 03eacde0 0e959db0 0e959db0 QtCore4!QApplicationPrivate::notify_helper+0x98
0015d7f4 546721ee 03eacde0 00959db0 e03e31ed QtCore4!QApplication::notify+0x197
0015d834 60395a9e 03eacde0 0e959db0 0e95b808 moduleB!KxApplication::notify+0xde
0015d870 602d436a 0050d500 0e959db0 0015d8bc QtCore4!QCoreApplication::notifyInternal+0x6b
0015d880 60396f5b 03eacde0 0e959db0 00000401 QtCore4!QCoreApplication::sendEvent+0x26
0015d8bc 60414a8d 00000000 00000000 0050d500 QtCore4!QCoreApplicationPrivate::sendPostedEvents+0x183
0015d91c 752e62fa 00090ab4 00000000 00000000 QtCore4!QMutexPool::QMutexPool+0x263
0015d948 752e6d3a 60414922 00090ab4 00000401 user32!InternalCallWinProc+0x23
0015d9c0 752e77c4 00000000 60414922 00090ab4 user32!UserCallWinProcCheckWow+0x109
0015da20 752e788a 60414922 00000000 0015f7e4 user32!DispatchMessageWorker+0x3bc
0015da30 60415f1f 0015f7b0 0015f848 056fdd38 user32!DispatchMessageW+0xf
0015f7e4 60323119 00000024 0015f800 60416291 QtCore4!QEventDispatcherWin32::processEvents+0x3bf
0015f7f0 60416291 00000024 056fdd38 0015f830 QtCore4!QApplicationPrivate::translateTouchEvent+0x4b2
0015f800 60416503 00000024 5466aee8 0050d500 QtCore4!QEventLoop::processEvents+0x38
0015f830 603981d9 00000000 5466aee8 0015f8e0 QtCore4!QEventLoop::exec+0xa9
0015f860 5466a3ff e03e1175 5466aee8 5466a241 QtCore4!QCoreApplication::exec+0xa2
0015f890 0124bdc6 0253bbe8 00000001 00000000 moduleB!KApplication::exec+0x34
0015fa80 0132f115 00000002 008a0e58 005019b8 moduleA+0x1bdc6
0015fac4 74e2337a 7efde000 0015fb10 771492b2 moduleA!StatisticsManager::~StatisticsManager+0x16cb5
0015fad0 771492b2 7efde000 77752054 00000000 kernel32!BaseThreadInitThunk+0xe
0015fb10 77149285 0132f236 7efde000 00000000 ntdll!__RtlUserThreadStart+0x70
0015fb28 00000000 0132f236 7efde000 00000000 ntdll!_RtlUserThreadStart+0x1b

3. 观察moduleAio!TxCreateExportRegister+0x265e9, 看出它的偏移比较大,实际上调用的可能已经不是这部分的代码了。

用dds把整个dll的地址段输出(结果为下面95行-3185行),加载了部分pdb之后,会有部分函数的调用可以对应上

0:000> dds 016fd7e0 016fffff
016fd7e0  7757f911 ntdll!NtWaitForSingleObject+0x15
016fd7e4  76be14ab KERNELBASE!WaitForSingleObjectEx+0x98
016fd7e8  00000c08
016fd7ec  00000000
016fd7f0  00000000
016fd7f4  05566427
016fd7f8  00001ba4
016fd7fc  00000c08
016fd800  0ae1c570
016fd804  00000024
016fd808  00000001
016fd80c  00000000
016fd810  00000000
016fd814  00000000
016fd818  00000000
016fd81c  00000000
016fd820  00000000
016fd824  00000000
016fd828  00000010
016fd82c  00000003
016fd830  00000000
016fd834  016fd7f4
016fd838  01700160
016fd83c  016fd9c8
016fd840  76c07000 KERNELBASE!_except_handler4
016fd844  72f934c3
016fd848  00000000
016fd84c  016fd864
016fd850  768e1194 kernel32!WaitForSingleObjectExImplementation+0x75
016fd854  00000c08
016fd858  ffffffff
016fd85c  00000000
016fd860  0acfc4c8
016fd864  016fd878
016fd868  768e1148 kernel32!WaitForSingleObject+0x12
016fd86c  00000c08
016fd870  ffffffff
016fd874  00000000
016fd878  016fd888
016fd87c  664a9b6b QtCore4!QMutexPrivate::wait+0x17 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\thread\qmutex_win.cpp @ 63]
016fd880  00000c08
016fd884  ffffffff
016fd888  016fd8a8
016fd88c  664a9985 QtCore4!QMutex::lock+0x42 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\thread\qmutex.cpp @ 172]
016fd890  ffffffff
016fd894  00000014
016fd898  00000012
016fd89c  016fd8a8
016fd8a0  5c61166a QtNetwork4!locking_function+0x12 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket_openssl.cpp @ 154]
016fd8a4  00000012
016fd8a8  00000000
016fd8ac  5bc31d6f libeay32!CRYPTO_lock+0x6f
016fd8b0  00000009
016fd8b4  00000012
016fd8b8  5bd1e258 libeay32!OSSL_DES_version+0xf914
016fd8bc  00000186
016fd8c0  00000010
016fd8c4  5bc77514 libeay32!RAND_SSLeay+0x474
016fd8c8  00000009
016fd8cc  00000012
016fd8d0  5bd1e258 libeay32!OSSL_DES_version+0xf914
016fd8d4  00000186
016fd8d8  016fd8f4
016fd8dc  00000000
016fd8e0  0ae1c468
016fd8e4  5c3c3f48 ssleay32!ssl2_ciphers+0x16f0
016fd8e8  00004000
016fd8ec  07de9878
016fd8f0  07b307d4
016fd8f4  00000000
016fd8f8  00000000
016fd8fc  00000000
016fd900  00000000
016fd904  00000000
016fd908  00000000
016fd90c  00000010
016fd910  5bc31d6f libeay32!CRYPTO_lock+0x6f
016fd914  00000006
016fd918  00000010
016fd91c  5c3c5728 ssleay32!ssl2_ciphers+0x2ed0
016fd920  000001e3
016fd924  0ae1c570
016fd928  05ba691b
016fd92c  5bc77910 libeay32!RAND_SSLeay+0x870
016fd930  00000010
016fd934  00000001
016fd938  5c3b5ea5 ssleay32!SSL_CTX_new+0x2a5
016fd93c  0ae1c570
016fd940  00000010
016fd944  00000000
016fd948  0acfc488
016fd94c  077fe4e0
016fd950  016fd9d4
016fd954  5c612426 QtNetwork4!QSslSocketBackendPrivate::initSslContext+0x88 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket_openssl.cpp @ 253]
016fd958  5c3c3f48 ssleay32!ssl2_ciphers+0x16f0
016fd95c  0acfc488
016fd960  077fe4e0
016fd964  0000000a
016fd968  0000000a
016fd96c  0aed6124
016fd970  0aed6124
016fd974  664ae330 QtCore4!QMetaObject::activate+0x2e5 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 3319]
016fd978  0acfc488
016fd97c  077fe4e0
016fd980  0000000a
016fd984  0000000c
016fd988  00000016
016fd98c  00000001
016fd990  0b3effe0
016fd994  0000000f
016fd998  0b215ca8
016fd99c  0184d500
016fd9a0  016fd960
016fd9a4  016fd9f4
016fd9a8  6670f0c2 QtCore4!_alloca_probe_8+0x2f5ec
016fd9ac  ffffffff
016fd9b0  016fd9d0
016fd9b4  5c60dd6f QtNetwork4!QSslSocket::modeChanged+0x21 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\tmp\moc\release_shared\moc_qsslsocket.cpp @ 156]
016fd9b8  0acfc488
016fd9bc  00000000
016fd9c0  00000003
016fd9c4  016123a8
016fd9c8  016fd9f4
016fd9cc  5c6288ce QtNetwork4!IsDebuggerPresent+0xc948
016fd9d0  ffffffff
016fd9d4  016fda00
016fd9d8  5c6137c5 QtNetwork4!QSslSocketBackendPrivate::startClientEncryption+0x8 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket_openssl.cpp @ 880]
016fd9dc  077fe4e0
016fd9e0  5c60e5f6 QtNetwork4!QSslSocketPrivate::_q_connectedSlot+0xe3 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket.cpp @ 2077]
016fd9e4  0acfc488
016fd9e8  016fda78
016fd9ec  0b223410
016fd9f0  00000000
016fd9f4  016fda84
016fd9f8  5c627fcd QtNetwork4!IsDebuggerPresent+0xc047
016fd9fc  ffffffff
016fda00  016fda14
016fda04  5c60fba8 QtNetwork4!QSslSocket::qt_metacall+0xdc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\tmp\moc\release_shared\moc_qsslsocket.cpp @ 116]
016fda08  0b214f38
016fda0c  0acfc488
016fda10  0b3f0040
016fda14  016fda28
016fda18  66495c9a QtCore4!QMetaObject::metacall+0x28 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qmetaobject.cpp @ 238]
016fda1c  00000000
016fda20  00000020
016fda24  016fda78
016fda28  016fda90
016fda2c  664ae285 QtCore4!QMetaObject::activate+0x23a [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 3292]
016fda30  0acfc488
016fda34  00000000
016fda38  00000020
016fda3c  016fda78
016fda40  6662eb9f QtCore4!QTimer::stop [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qtimer.cpp @ 255]
016fda44  0aee2e30
016fda48  0b3a3148
016fda4c  0b3a3148
016fda50  00000009
016fda54  00000001
016fda58  0b3f0040
016fda5c  0acfc488
016fda60  0b214f38
016fda64  0184d500
016fda68  00000000
016fda6c  00000020
016fda70  00000009
016fda74  00000007
016fda78  00000000
016fda7c  03c4ae00
016fda80  016fda40
016fda84  016fdabc
016fda88  6670f0c2 QtCore4!_alloca_probe_8+0x2f5ec
016fda8c  00000001
016fda90  016fdac8
016fda94  5c5b310f QtNetwork4!QAbstractSocket::connected+0x10 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\tmp\moc\release_shared\moc_qabstractsocket.cpp @ 131]
016fda98  0b3a3148
016fda9c  5c67d1b0 QtNetwork4!QAbstractSocket::staticMetaObject
016fdaa0  01214f38 moduleA!kfc::KComObject<KApiField,kfc::KMultiThreadModel>::`RTTI Complete Object Locator'+0x4
016fdaa4  00000000
016fdaa8  5c5b3703 QtNetwork4!QAbstractSocketPrivate::fetchConnectionParameters+0xf4 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\socket\qabstractsocket.cpp @ 1217]
016fdaac  0aee2e30
016fdab0  00000000
016fdab4  00000000
016fdab8  00000000
016fdabc  016fdce0
016fdac0  5c61c2d5 QtNetwork4!IsDebuggerPresent+0x34f
016fdac4  ffffffff
016fdac8  016fdae4
016fdacc  5c5b6077 QtNetwork4!QAbstractSocketPrivate::_q_testConnection+0x40 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\socket\qabstractsocket.cpp @ 1067]
016fdad0  07de98b8
016fdad4  07de98b8
016fdad8  00000002
016fdadc  5c5dfa45 QtNetwork4!QWriteNotifier::event+0x29 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\socket\qnativesocketengine.cpp @ 1134]
016fdae0  016fddb0
016fdae4  016fdafc
016fdae8  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016fdaec  016fddb0
016fdaf0  07de98b8
016fdaf4  016fddb0
016fdaf8  017b2e90
016fdafc  016fdcec
016fdb00  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016fdb04  07de98b8
016fdb08  016fddb0
016fdb0c  016fddb0
016fdb10  016ffd98
016fdb14  07de98b8
016fdb18  7efdb800
016fdb1c  016fdb3c
016fdb20  76f062d5 user32!CallNextHookEx+0x5b
016fdb24  01ce2b00
016fdb28  00000000
016fdb2c  00030000
016fdb30  7efdb800
016fdb34  016fdc18
016fdb38  016fdcc8
016fdb3c  016fdb54
016fdb40  69a80918 TaobaoProtectSE+0x20918
016fdb44  0f3d61cc moduleB!KMiniToolBarPopupWidget::eventFilter+0x2c [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kminitoolbarpopupwidget.cpp @ 176]
016fdb48  016ffd98
016fdb4c  016fdec0
016fdb50  016fdec0
016fdb54  017ae290
016fdb58  5c3614e0 protecteyes!KNightMode::eventFilter+0x40 [s:\rc_v9_personal_common_20150618\coding\shell2\plugins\protecteyes\widgets.cpp @ 41]
016fdb5c  058a8a8d
016fdb60  00000008
016fdb64  017b2e90
016fdb68  016ffd98
016fdb6c  016fdc08
016fdb70  016fdbb0
016fdb74  76ef80a9 user32!CallHookWithSEH+0x21
016fdb78  0f3dfa09 moduleB!KRbTabWidget::eventFilter+0x49 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\krbtabwidget.cpp @ 437]
016fdb7c  00000000
016fdb80  016fdec0
016fdb84  66494fa9 QtCore4!QMetaObject::cast+0x14 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qmetaobject.cpp @ 268]
016fdb88  016fdec0
016fdb8c  016ffdf0
016fdb90  016fdbf8
016fdb94  0f3df100 moduleB!KxApplication::event+0x230 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1053]
016fdb98  0f3defe3 moduleB!KxApplication::event+0x113 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1138]
016fdb9c  054afd03
016fdba0  016ffd98
016fdba4  016fdec0
016fdba8  00000002
016fdbac  016ffd98
016fdbb0  016fdec0
016fdbb4  054afd4f
016fdbb8  666881a8 QtCore4!QWindowsStyle::eventFilter+0x2a [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\styles\qwindowsstyle.cpp @ 169]
016fdbbc  016ffd98
016fdbc0  016ffc68
016fdbc4  016fdbd8
016fdbc8  0f3d22b5 moduleB!KxApcCompManagerSitePrivate::win32EventFilter+0x1e [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapccomp.cpp @ 77]
016fdbcc  016ffc68
016fdbd0  016fdbd7
016fdbd4  00e4702c moduleA!TypoLib::TextPageRender<TypoLib::TypoWebNotePageUpdateTraits,TypoLib::TypoDocLineUpdateTraits,TypoLib::FootnoteDataTraits>::renderSubLines+0x2f3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\render\page\textpagerender.h @ 931]
016fdbd8  016fdbec
016fdbdc  0f3d2316 moduleB!KxApcCompManagerSitePrivate::eventFilter+0x46 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapccomp.cpp @ 42]
016fdbe0  016ffc68
016fdbe4  0000000d
016fdbe8  017b2e90
016fdbec  016fde08
016fdbf0  0f507ec8 moduleB!_EH_epilog3_GS_align+0x8a5bf
016fdbf4  ffffffff
016fdbf8  016fdc0c
016fdbfc  004aaa16 moduleA!KxmoduleAApplication::event+0x26 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAapplication.cpp @ 223]
016fdc00  016fdec0
016fdc04  016ffd98
016fdc08  016fdec0
016fdc0c  016fdc24
016fdc10  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016fdc14  016fdec0
016fdc18  016ffd98
016fdc1c  016fdec0
016fdc20  017b2e90
016fdc24  016fde14
016fdc28  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016fdc2c  016ffd98
016fdc30  016fdec0
016fdc34  016fdec0
016fdc38  016ffd98
016fdc3c  016ffd98
016fdc40  00000000
016fdc44  00000001
016fdc48  016fdd40
016fdc4c  00000000
016fdc50  00030000
016fdc54  7efdb800
016fdc58  00000000
016fdc5c  017b3000
016fdc60  016fdc7c
016fdc64  66354192 QtCore4!qt_GetMessageHook+0xad [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 548]
016fdc68  00000000
016fdc6c  00000000
016fdc70  00000001
016fdc74  016fdd40
016fdc78  016fdd40
016fdc7c  016fdc98
016fdc80  76f06381 user32!DispatchHookW+0x38
016fdc84  00000000
016fdc88  00000001
016fdc8c  016fdd40
016fdc90  0f6ce25c moduleB!KCacheInfoForFileDialog::instance+0x3e [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\dialog\commondialog\kfiledialogcustom.cpp @ 1198]
016fdc94  054afa13
016fdc98  016fdd94
016fdc9c  0f6ce21e moduleB!KCacheInfoForFileDialog::instance [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\dialog\commondialog\kfiledialogcustom.cpp @ 1195]
016fdca0  016fdd94
016fdca4  016fdd20
016fdca8  0f49950f moduleB!_EH_epilog3_GS_align+0x1bc06
016fdcac  ffffffff
016fdcb0  0f6ce25c moduleB!KCacheInfoForFileDialog::instance+0x3e [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\dialog\commondialog\kfiledialogcustom.cpp @ 1198]
016fdcb4  016ffd98
016fdcb8  016fdd94
016fdcbc  016ffd98
016fdcc0  00000010
016fdcc4  00b31c90 moduleA!KFindFontFormat::get_Shading+0x72 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\property\kformatfindproperty.cpp @ 963]
016fdcc8  0f3df617 moduleB!KxApplication::winEventFilter+0xa7 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 2092]
016fdccc  016fdd94
016fdcd0  016fdde0
016fdcd4  054afb8f
016fdcd8  017b2e90
016fdcdc  6625acb4 QtCore4!QApplication::notify+0xa [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 3798]
016fdce0  016fdd1c
016fdce4  666e5d8f QtCore4!_alloca_probe_8+0x62b9
016fdce8  ffffffff
016fdcec  016fdd2c
016fdcf0  0f3dfb1e moduleB!KxApplication::notify+0xde [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1792]
016fdcf4  07de98b8
016fdcf8  006fddb0 moduleA!KOleCoreObject<oldapi::_OLEControl>::_fixLinkedOleClsid+0x9b [s:\rc_v9_personal_common_20150618\coding\office\include\drawing\drawingcore\olecoreobject.inl @ 1447]
016fdcfc  054afba3
016fdd00  07de98b8
016fdd04  0184d500
016fdd08  016ffd98
016fdd0c  ffffffeb
016fdd10  00000000
016fdd14  0b3a3518
016fdd18  016ffd98
016fdd1c  016fdd5c
016fdd20  0f4d2924 moduleB!_EH_epilog3_GS_align+0x5501b
016fdd24  00000000
016fdd28  ffffffff
016fdd2c  016fdd68
016fdd30  662d5a9e QtCore4!QCoreApplication::notifyInternal+0x6b [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 800]
016fdd34  07de98b8
016fdd38  016fddb0
016fdd3c  00000400
016fdd40  0b3a3518
016fdd44  00000010
016fdd48  07de98b8
016fdd4c  016fddb0
016fdd50  016fdd57
016fdd54  00000400
016fdd58  016fdd3c
016fdd5c  016fddc8
016fdd60  666ed8e6 QtCore4!_alloca_probe_8+0xde10
016fdd64  00000000
016fdd68  016fdd78
016fdd6c  6621436a QtCore4!QCoreApplication::sendEvent+0x26 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.h @ 215]
016fdd70  0184d500
016fdd74  016fddb0
016fdd78  016fddd4
016fdd7c  66354a32 QtCore4!qt_internal_proc+0x110 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 486]
016fdd80  07de98b8
016fdd84  016fddb0
016fdd88  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fdd8c  00000000
016fdd90  00000000
016fdd94  000b072e
016fdd98  00000400
016fdd9c  00000bbc
016fdda0  00000010
016fdda4  76f06381 user32!DispatchHookW+0x38
016fdda8  00000000
016fddac  00000001
016fddb0  66741234 QtCore4!QEvent::`vftable'
016fddb4  00000000
016fddb8  016c0032
016fddbc  017b300c
016fddc0  017b3010
016fddc4  017b3014
016fddc8  016fde68
016fddcc  666f5b2b QtCore4!_alloca_probe_8+0x16055
016fddd0  00000000
016fddd4  016fde00
016fddd8  76ef62fa user32!InternalCallWinProc+0x23
016fdddc  000b072e
016fdde0  00000000
016fdde4  00000bbc
016fdde8  00000010
016fddec  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fddf0  dcbaabcd
016fddf4  00000000
016fddf8  00000000
016fddfc  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fde00  016fde78
016fde04  76ef6d3a user32!UserCallWinProcCheckWow+0x109
016fde08  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fde0c  000b072e
016fde10  00000400
016fde14  00000bbc
016fde18  00000010
016fde1c  054afa12
016fde20  016ffc70
016fde24  016ffc68
016fde28  01e13c40
016fde2c  00000024
016fde30  00000001
016fde34  00000000
016fde38  00000000
016fde3c  00000030
016fde40  ffffffff
016fde44  ffffffff
016fde48  76ef6ce9 user32!UserCallWinProcCheckWow+0x6a
016fde4c  00000000
016fde50  ffffffff
016fde54  00000001
016fde58  00000000
016fde5c  00000000
016fde60  016fde1c
016fde64  00000000
016fde68  016fdec8
016fde6c  76f5a61e user32!_except_handler4
016fde70  72ca4932
016fde74  00000000
016fde78  016fded8
016fde7c  76ef77c4 user32!DispatchMessageWorker+0x3bc
016fde80  00000000
016fde84  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fde88  000b072e
016fde8c  00000400
016fde90  00000bbc
016fde94  00000010
016fde98  01e13c68
016fde9c  00000001
016fdea0  054afab2
016fdea4  00000000
016fdea8  00000000
016fdeac  017b2f90
016fdeb0  054af87f
016fdeb4  00000bbc
016fdeb8  00000000
016fdebc  017b2f90
016fdec0  016fdea0
016fdec4  00000000
016fdec8  016ffc90
016fdecc  76f5a61e user32!_except_handler4
016fded0  72ca5382
016fded4  fffffffe
016fded8  016fdee8
016fdedc  76ef788a user32!DispatchMessageW+0xf
016fdee0  66354922 QtCore4!qt_internal_proc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 432]
016fdee4  00000000
016fdee8  016ffc9c
016fdeec  66355f1f QtCore4!QEventDispatcherWin32::processEvents+0x3bf [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 810]
016fdef0  016ffc68
016fdef4  016ffd00
016fdef8  03bc4448
016fdefc  00000000
016fdf00  00000100
016fdf04  00000000
016fdf08  016fdf10
016fdf0c  00000080
016fdf10  000b072e
016fdf14  00000113
016fdf18  0b000002
016fdf1c  00000000
016fdf20  0125f8e4 moduleA!_TI2?AVruntime_errorstd+0x30d74
016fdf24  000003d3
016fdf28  0000030c
016fdf2c  00080c0c
016fdf30  00000113
016fdf34  00000001
016fdf38  00000000
016fdf3c  0125f8e4 moduleA!_TI2?AVruntime_errorstd+0x30d74
016fdf40  000003d3
016fdf44  0000030c
016fdf48  00080c0c
016fdf4c  00000113
016fdf50  00000001
016fdf54  00000000
016fdf58  0125f829 moduleA!_TI2?AVruntime_errorstd+0x30cb9
016fdf5c  000003d3
016fdf60  0000030c
016fdf64  000b072e
016fdf68  00000113
016fdf6c  00000001
016fdf70  00000000
016fdf74  0125f7eb moduleA!_TI2?AVruntime_errorstd+0x30c7b
016fdf78  000003d3
016fdf7c  0000030c
016fdf80  000b072e
016fdf84  00000113
016fdf88  1200000a
016fdf8c  00000000
016fdf90  0125f7eb moduleA!_TI2?AVruntime_errorstd+0x30c7b
016fdf94  000003d3
016fdf98  0000030c
016fdf9c  000b072e
016fdfa0  00000113
016fdfa4  02000011
016fdfa8  00000000
016fdfac  0125f7eb moduleA!_TI2?AVruntime_errorstd+0x30c7b
016fdfb0  000003d3
016fdfb4  0000030c
016fdfb8  000b072e
016fdfbc  00000113
016fdfc0  fffffffe
016fdfc4  00000000
016fdfc8  0125f7eb moduleA!_TI2?AVruntime_errorstd+0x30c7b
016fdfcc  000003d3
016fdfd0  0000030c
016fdfd4  00110914
016fdfd8  00000113
016fdfdc  00000006
016fdfe0  00000000
016fdfe4  0125f7eb moduleA!_TI2?AVruntime_errorstd+0x30c7b
016fdfe8  000003d3
016fdfec  0000030c
016fdff0  000b072e
016fdff4  00000113
016fdff8  1200000a
016fdffc  00000000
016fe000  0125cc68 moduleA!_TI2?AVruntime_errorstd+0x2e0f8
016fe004  000001e4
016fe008  0000033a
016fe00c  00080c0c
016fe010  00000113
016fe014  00000001
016fe018  00000000
016fe01c  0125cc68 moduleA!_TI2?AVruntime_errorstd+0x2e0f8
016fe020  000001e4
016fe024  0000033a
016fe028  000b072e
016fe02c  00000113
016fe030  14000007
016fe034  00000000
016fe038  0125cc68 moduleA!_TI2?AVruntime_errorstd+0x2e0f8
016fe03c  000001e4
016fe040  0000033a
016fe044  000b072e
016fe048  00000113
016fe04c  13000008
016fe050  00000000
016fe054  0125cc68 moduleA!_TI2?AVruntime_errorstd+0x2e0f8
016fe058  000001e4
016fe05c  0000033a
016fe060  000b072e
016fe064  00000113
016fe068  5400001b
016fe06c  00000000
016fe070  0125cc68 moduleA!_TI2?AVruntime_errorstd+0x2e0f8
016fe074  000001e4
016fe078  0000033a
016fe07c  000b072e
016fe080  00000113
016fe084  5300001a
016fe088  00000000
016fe08c  0125cd23 moduleA!_TI2?AVruntime_errorstd+0x2e1b3
016fe090  000001e4
016fe094  0000033a
016fe098  000b072e
016fe09c  00000113
016fe0a0  51000018
016fe0a4  00000000
016fe0a8  0125cd62 moduleA!_TI2?AVruntime_errorstd+0x2e1f2
016fe0ac  00000286
016fe0b0  00000343
016fe0b4  000b072e
016fe0b8  00000113
016fe0bc  50000017
016fe0c0  00000000
016fe0c4  0125cd62 moduleA!_TI2?AVruntime_errorstd+0x2e1f2
016fe0c8  00000286
016fe0cc  00000343
016fe0d0  000b072e
016fe0d4  00000113
016fe0d8  4f000016
016fe0dc  00000000
016fe0e0  0125cd81 moduleA!_TI2?AVruntime_errorstd+0x2e211
016fe0e4  00000286
016fe0e8  00000343
016fe0ec  000b072e
016fe0f0  00000113
016fe0f4  4e000015
016fe0f8  00000000
016fe0fc  0125cd81 moduleA!_TI2?AVruntime_errorstd+0x2e211
016fe100  00000286
016fe104  00000343
016fe108  000b072e
016fe10c  00000113
016fe110  59000020
016fe114  00000000
016fe118  0125cdb0 moduleA!_TI2?AVruntime_errorstd+0x2e240
016fe11c  00000286
016fe120  00000343
016fe124  000b072e
016fe128  00000113
016fe12c  5800001f kmoduleAassist!sqlite3_open16+0x6e [s:\rc_v9_personal_common_20150618\coding\3rdparty\ksqlite\sqlite\sqlite3.c @ 110267]
016fe130  00000000
016fe134  0125cdbf moduleA!_TI2?AVruntime_errorstd+0x2e24f
016fe138  00000286
016fe13c  00000343
016fe140  000b072e
016fe144  00000113
016fe148  5700001e
016fe14c  00000000
016fe150  0125cdee moduleA!_TI2?AVruntime_errorstd+0x2e27e
016fe154  00000286
016fe158  00000343
016fe15c  000b072e
016fe160  00000113
016fe164  5600001d
016fe168  00000000
016fe16c  0125cdee moduleA!_TI2?AVruntime_errorstd+0x2e27e
016fe170  00000286
016fe174  00000343
016fe178  000b072e
016fe17c  00000113
016fe180  1e00000c
016fe184  00000000
016fe188  0125ce0d moduleA!_TI2?AVruntime_errorstd+0x2e29d
016fe18c  00000286
016fe190  00000343
016fe194  000b072e
016fe198  00000113
016fe19c  4c000013
016fe1a0  00000000
016fe1a4  0125ce0d moduleA!_TI2?AVruntime_errorstd+0x2e29d
016fe1a8  00000286
016fe1ac  00000343
016fe1b0  000b072e
016fe1b4  00000113
016fe1b8  4b000012
016fe1bc  00000000
016fe1c0  0125ce0d moduleA!_TI2?AVruntime_errorstd+0x2e29d
016fe1c4  00000286
016fe1c8  00000343
016fe1cc  665934d3 QtCore4!QString::realloc+0xa [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1329]
016fe1d0  00000003
016fe1d4  662ef818 QtCore4!QCharRef::operator=+0x1f [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.h @ 803]
016fe1d8  07707e28
016fe1dc  00000001
016fe1e0  07715330
016fe1e4  016fe1fc
016fe1e8  7758e013 ntdll!RtlFreeHeap+0x105
016fe1ec  00000001
016fe1f0  016fe6cc
016fe1f4  00000001
016fe1f8  07715330
016fe1fc  016fe210
016fe200  768e14ad kernel32!HeapFree+0x14
016fe204  01840000
016fe208  00000000
016fe20c  07715338
016fe210  016fe224
016fe214  5d3f016a msvcr100!free+0x1c
016fe218  01840000
016fe21c  00000000
016fe220  07715338
016fe224  016fe654
016fe228  6639fcac QtCore4!QFSFileEngine::currentPath+0x234 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\io\qfsfileengine_win.cpp @ 1035]
016fe22c  07715338
016fe230  003a0046
016fe234  0000005c
016fe238  0ba4006f
016fe23c  0000003a
016fe240  077bba20
016fe244  01840000
016fe248  077bbd18
016fe24c  00000000
016fe250  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe254  772c0237
016fe258  000000c6
016fe25c  0184032c
016fe260  01840000
016fe264  0000003a
016fe268  01840000
016fe26c  01aa0008
016fe270  00000076
016fe274  77593386 ntdll!RtlpAllocateHeap+0xab2
016fe278  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe27c  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe280  772c03eb
016fe284  00000018
016fe288  018401d4
016fe28c  01840000
016fe290  775d3145 ntdll!_except_handler4
016fe294  01700358
016fe298  0642002c moduleBapi!`string'+0x24
016fe29c  000001eb
016fe2a0  0184017c
016fe2a4  00000000
016fe2a8  05635130
016fe2ac  01700048
016fe2b0  0638002d moduleBapi!KyApiBase<moduleBapi::Balloon>::KyApiBase<moduleBapi::Balloon>+0x18
016fe2b4  000001eb
016fe2b8  01701480
016fe2bc  016fe2e0
016fe2c0  01703770
016fe2c4  00000005
016fe2c8  00000044
016fe2cc  775d3145 ntdll!_except_handler4
016fe2d0  00000001
016fe2d4  07abbc90
016fe2d8  01700048
016fe2dc  0170017c
016fe2e0  077e18a8
016fe2e4  01703b30
016fe2e8  01a42808
016fe2ec  016fe280
016fe2f0  775b47f4 ntdll!RtlpReferenceCurrentDirectory+0x40
016fe2f4  016fe3d4
016fe2f8  775d3145 ntdll!_except_handler4
016fe2fc  011b3287 moduleA!KPdfExportOptions::`RTTI Base Class Array'+0x1b
016fe300  fffffffe
016fe304  0000005a
016fe308  077bba20
016fe30c  01840000
016fe310  077bbd18
016fe314  00000044
016fe318  016fe3e8
016fe31c  01a42808
016fe320  00000000
016fe324  00000005
016fe328  016fe414
016fe32c  0000005a
016fe330  01840000
016fe334  077bba20
016fe338  016fe414
016fe33c  77593386 ntdll!RtlpAllocateHeap+0xab2
016fe340  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe344  772c04fb
016fe348  00000000
016fe34c  01840454
016fe350  01840000
016fe354  01840150
016fe358  00000000
016fe35c  00000005
016fe360  01840150
016fe364  00000012
016fe368  0184017c
016fe36c  00000000
016fe370  00000005
016fe374  077c0e00
016fe378  01840150
016fe37c  0000005f
016fe380  079300b0
016fe384  00000000
016fe388  0000005f
016fe38c  00000018
016fe390  0000005a
016fe394  00000000
016fe398  016fe3ac
016fe39c  00000001
016fe3a0  00000000
016fe3a4  00000000
016fe3a8  02000002
016fe3ac  077c33e0
016fe3b0  9f00009f
016fe3b4  6665ef81 QtCore4!QUtf16::convertToUnicode+0x142 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\codecs\qutfcodec.cpp @ 373]
016fe3b8  0000000c
016fe3bc  00000000
016fe3c0  00000001
016fe3c4  016fe400
016fe3c8  665958bd QtCore4!QString::replace_helper+0x93 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1846]
016fe3cc  05797a7e
016fe3d0  077d4c2a
016fe3d4  00000002
016fe3d8  00000001
016fe3dc  ffffffff
016fe3e0  00000001
016fe3e4  016ff428
016fe3e8  00000001
016fe3ec  077d4c2a
016fe3f0  016fe3d8
016fe3f4  016ff838
016fe3f8  6671ff8a QtCore4!_alloca_probe_8+0x404b4
016fe3fc  ffffffff
016fe400  016ff844
016fe404  66595b13 QtCore4!QString::replace+0xb2 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1944]
016fe408  016fe428
016fe40c  00000001
016fe410  00000000
016fe414  00000001
016fe418  016fe454
016fe41c  665958bd QtCore4!QString::replace_helper+0x93 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1846]
016fe420  077e195e
016fe424  077d486a
016fe428  00000002
016fe42c  00000001
016fe430  ffffffff
016fe434  00000001
016fe438  016ff47c
016fe43c  00000001
016fe440  077d486a
016fe444  016fe42c
016fe448  016ff88c
016fe44c  6671ff8a QtCore4!_alloca_probe_8+0x404b4
016fe450  ffffffff
016fe454  016ff898
016fe458  66595b13 QtCore4!QString::replace+0xb2 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1944]
016fe45c  016fe47c
016fe460  00000001
016fe464  00000001
016fe468  077d486a
016fe46c  66595b33 QtCore4!QString::replace+0xd2 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qstring.cpp @ 1950]
016fe470  00000001
016fe474  00000001
016fe478  00000001
016fe47c  00000002
016fe480  00000002
016fe484  00000000
016fe488  00000003
016fe48c  00000801
016fe490  00000080
016fe494  0000001f
016fe498  079f94c0
016fe49c  14005b4f
016fe4a0  0000005f
016fe4a4  00000000
016fe4a8  079cba50
016fe4ac  00005b4f
016fe4b0  016fe59c
016fe4b4  00000801
016fe4b8  01842bdc
016fe4bc  00000000
016fe4c0  01842bb8
016fe4c4  77593386 ntdll!RtlpAllocateHeap+0xab2
016fe4c8  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe4cc  077bba28
016fe4d0  077b14b0
016fe4d4  03bc0440
016fe4d8  0000005f
016fe4dc  00000000
016fe4e0  01000004 moduleA!_gradPathDict+0x4
016fe4e4  00000000
016fe4e8  000002f8
016fe4ec  01010e60 moduleA!g_hatchDataTables+0x180
016fe4f0  016fe428
016fe4f4  03bbe908
016fe4f8  016fe904
016fe4fc  775d3145 ntdll!_except_handler4
016fe500  011b288f moduleA!oldapi::System::`RTTI Base Class Descriptor at (0,-1,0,64)'+0x13
016fe504  fffffffe
016fe508  77592f6d ntdll!RtlpFreeHeap+0xb7a
016fe50c  77592b65 ntdll!RtlFreeHeap+0x142
016fe510  00000000
016fe514  077bba28
016fe518  00004000
016fe51c  077bba28
016fe520  03bc0348
016fe524  077bba20
016fe528  016fe53c
016fe52c  768e14ad kernel32!HeapFree+0x14
016fe530  01840000
016fe534  00000000
016fe538  077bba28
016fe53c  016fe550
016fe540  5d3f016a msvcr100!free+0x1c
016fe544  01840000
016fe548  00000000
016fe54c  077bba28
016fe550  016fe820
016fe554  661fff13 QtCore4!png_destroy_struct_2+0x31 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\3rdparty\libpng\pngmem.c @ 470]
016fe558  077bba28
016fe55c  01700048
016fe560  00000002
016fe564  00000008
016fe568  079c7a48
016fe56c  079c7a48
016fe570  079c7a43
016fe574  00000000
016fe578  00840000 moduleA!KxmoduleAPageMarginDataUtil::KxmoduleAPageMarginDataUtil+0x3 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAsecnavutil.cpp @ 2065]
016fe57c  01840000
016fe580  0158e394 moduleA!__dyn_tls_init_callback <PERF> (moduleA+0x11ce394)
016fe584  016fe4cc
016fe588  00000021
016fe58c  00001001
016fe590  079700b0
016fe594  01840000
016fe598  07992510
016fe59c  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe5a0  77592fe3 ntdll!RtlAllocateHeap+0x23a
016fe5a4  00000082
016fe5a8  00000000
016fe5ac  0000348b
016fe5b0  016fe69c
016fe5b4  00001001
016fe5b8  01840000
016fe5bc  079700b0
016fe5c0  016fe69c
016fe5c4  77593386 ntdll!RtlpAllocateHeap+0xab2
016fe5c8  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe5cc  772c0673
016fe5d0  00000040
016fe5d4  00000000
016fe5d8  01840000
016fe5dc  01842bb8
016fe5e0  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe5e4  772c065b
016fe5e8  01842bb8
016fe5ec  000173a0
016fe5f0  01840000
016fe5f4  00000000
016fe5f8  00003bf8
016fe5fc  000007ff
016fe600  07660000
016fe604  079700b8
016fe608  0000077f
016fe60c  079700b8
016fe610  01842bb8
016fe614  000008a8
016fe618  016fe658
016fe61c  775c48ed ntdll!RtlpDeCommitFreeBlock+0x72c
016fe620  01840000
016fe624  009c3500 moduleA!Ui_KxDlgTabs::setupUi+0xb21 [s:\rc_v9_personal_common_20150618\build\release\shell2\moduleA\uic\ui_kxtabsdlg.h @ 169]
016fe628  00000000
016fe62c  01840000
016fe630  00000000
016fe634  079c3500
016fe638  00000000
016fe63c  08010801
016fe640  00000000
016fe644  078955f0
016fe648  079c3508
016fe64c  079700b8
016fe650  00000300
016fe654  01840000
016fe658  00000000
016fe65c  079c3500
016fe660  016fe750
016fe664  77592f91 ntdll!RtlpFreeHeap+0xbb1
016fe668  01840138
016fe66c  77592f6d ntdll!RtlpFreeHeap+0xb7a
016fe670  772c07bf
016fe674  00000000
016fe678  01840000
016fe67c  079c5510
016fe680  01840000
016fe684  07ac5af0
016fe688  01840000
016fe68c  079c3508
016fe690  000001ee
016fe694  011b286f moduleA!KCoreObject<oldapi::System>::`RTTI Base Class Array'+0x1b
016fe698  07ac5af0
016fe69c  01842bb8
016fe6a0  07781820
016fe6a4  01840000
016fe6a8  01842bb8
016fe6ac  01840000
016fe6b0  01842bb8
016fe6b4  01842bb8
016fe6b8  02000002
016fe6bc  01842bb8
016fe6c0  9f00009f
016fe6c4  0000009f
016fe6c8  be0000be
016fe6cc  0000009f
016fe6d0  00000003
016fe6d4  9f00009f
016fe6d8  0000009f
016fe6dc  0000001f
016fe6e0  0000009f
016fe6e4  14005b4f
016fe6e8  0000001f
016fe6ec  14005b4f
016fe6f0  079cba50
016fe6f4  14005b4f
016fe6f8  079cba50
016fe6fc  00000004
016fe700  01842bdc
016fe704  00000000
016fe708  01842bb8
016fe70c  00000000
016fe710  01842bb8
016fe714  077b14b0
016fe718  07ac5af0
016fe71c  07ac5af0
016fe720  000008a8
016fe724  00000000
016fe728  0100009f moduleA!_strokeDashDict+0x37
016fe72c  00000481
016fe730  079c5760
016fe734  01840000
016fe738  079f94c0
016fe73c  01010000 moduleA!g_hatchDataTables+0x60
016fe740  016fe904
016fe744  775d3145 ntdll!_except_handler4
016fe748  00000000
016fe74c  0000632b
016fe750  016fe83c
016fe754  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe758  772c0733
016fe75c  0777c674
016fe760  0184019c
016fe764  01840000
016fe768  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe76c  772c08d3
016fe770  04fa03ac
016fe774  077256ce
016fe778  01840000
016fe77c  01842bb8
016fe780  00003bf8
016fe784  000007ff
016fe788  04f703ad
016fe78c  077256ce
016fe790  01842cc8
016fe794  018400c4
016fe798  01703770
016fe79c  00006b00
016fe7a0  00000010
016fe7a4  00000000
016fe7a8  00000001
016fe7ac  07ab0c20
016fe7b0  01700048
016fe7b4  01700160
016fe7b8  07ac02b0
016fe7bc  01703858
016fe7c0  656d6241
016fe7c4  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe7c8  772c08a3
016fe7cc  00000040
016fe7d0  01842cd4
016fe7d4  01840000
016fe7d8  fffffffe
016fe7dc  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe7e0  0b180009
016fe7e4  0000000c
016fe7e8  66a44dc0 QtCore4!QVectorData::shared_null
016fe7ec  00000010
016fe7f0  00000000
016fe7f4  00000058
016fe7f8  0a97000a
016fe7fc  0000000c
016fe800  0774dec8
016fe804  01700048
016fe808  01700358
016fe80c  0777c660
016fe810  00000400
016fe814  077256cd
016fe818  00000000
016fe81c  057b6a08
016fe820  01700048
016fe824  01700258
016fe828  076ffa78
016fe82c  01701d70
016fe830  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe834  016fe7c8
016fe838  00000040
016fe83c  00000045
016fe840  01aca488
016fe844  01a40000
016fe848  01acdc98
016fe84c  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe850  7758e0e2 ntdll!RtlAllocateHeap+0x206
016fe854  00000040
016fe858  00000000
016fe85c  000006bd
016fe860  016fe94c
016fe864  00000045
016fe868  01a40000
016fe86c  01aca488
016fe870  016fe94c
016fe874  77593386 ntdll!RtlpAllocateHeap+0xab2
016fe878  775933b5 ntdll!RtlpAllocateHeap+0xe68
016fe87c  772c09a3
016fe880  016fecc0
016fe884  01a403ac
016fe888  01a40000
016fe88c  01a40150
016fe890  07ac02b0
016fe894  66a44dc0 QtCore4!QVectorData::shared_null
016fe898  01a43748
016fe89c  0777c674
016fe8a0  01a4383c
016fe8a4  772c09c7
016fe8a8  000006bd
016fe8ac  01840100
016fe8b0  01a43748
016fe8b4  00000682
016fe8b8  04bd0048
016fe8bc  1a830118
016fe8c0  00000702
016fe8c4  00003bf8
016fe8c8  00000080
016fe8cc  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe8d0  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016fe8d4  772c09b7
016fe8d8  03c86a24
016fe8dc  00000000
016fe8e0  02000002
016fe8e4  01a8f928
016fe8e8  fe000ff1
016fe8ec  00000098
016fe8f0  0560715e
016fe8f4  016fea18
016fe8f8  016fe920
016fe8fc  7759ec13 ntdll!RtlIsDosDeviceName_Ustr+0x27b
016fe900  0560715e
016fe904  7759ec44 ntdll!RtlpDosCONDevice
016fe908  71fb5ec4
016fe90c  016fe9f8
016fe910  00000000
016fe914  00a00006 moduleA!KxmoduleADefineWaterMarkDlg::initControInfo+0xe3 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAdefinewatermarkdlg.cpp @ 537]
016fe918  016fe9f8
016fe91c  00000002
016fe920  016fe9c4
016fe924  7758e1a2 ntdll!_SEH_epilog4_GS+0xa
016fe928  7759b1b6 ntdll!RtlGetFullPathName_Ustr+0x14d
016fe92c  772c092b
016fe930  016fecc0
016fe934  00000208
016fe938  01aca490
016fe93c  016ff6a4
016fe940  775d3145 ntdll!_except_handler4
016fe944  016fece8
016fe948  fffffffe
016fe94c  0000004f
016fe950  00a0009e moduleA!KxmoduleADefineWaterMarkDlg::initControInfo+0x17b [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAdefinewatermarkdlg.cpp @ 537]
016fe954  056070c0
016fe958  00000228
016fe95c  00000002
016fe960  00000000
016fe964  0000009e
016fe968  00000000
016fe96c  0000009e
016fe970  016feac0
016fe974  056070c0
016fe978  01060606 moduleA!KTriggerCommand::`local vftable'+0x12
016fe97c  0208009e
016fe980  016fea28
016fe984  016feabe
016fe988  00000000
016fe98c  00000000
016fe990  00000000
016fe994  00060606
016fe998  00000003
016fe99c  0000009e
016fe9a0  06060606
016fe9a4  06060606
016fe9a8  772c092b
016fe9ac  016fe92c
016fe9b0  06060606
016fe9b4  016ff6a4
016fe9b8  775d3145 ntdll!_except_handler4
016fe9bc  00000000
016fe9c0  016fecc0
016fe9c4  016fec38
016fe9c8  7759b396 ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x17d
016fe9cc  01aca498
016fe9d0  00000053
016fe9d4  016fec38
016fe9d8  775b1889 ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x1d0
016fe9dc  016fe9f0
016fe9e0  016feac0
016fe9e4  0fb36458 moduleB!`string'
016fe9e8  00000000
016fe9ec  7759b40e ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x330
016fe9f0  00080006
016fe9f4  016feac0
016fe9f8  00000002
016fe9fc  00000000
016fea00  06060606
016fea04  06060606
016fea08  00000000
016fea0c  00000008
016fea10  016fece8
016fea14  0000009e
016fea18  000a0008
016fea1c  7759b41c ntdll!`string'
016fea20  00000000
016fea24  00060006
016fea28  003a0043
016fea2c  0055005c moduleA!_allmul+0x5373c
016fea30  00650073 moduleA!KSubdocServ::CreateAllSubdoccuments+0x200693 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdatalogic\subdoc_serv\subdoc_serv.cpp @ 67]
016fea34  00730072 moduleA!KListTemplate::QueryInterface+0x5e [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016fea38  0041005c moduleA!_TxConntectImp+0x14c [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\moduleAdrawing\io\import\impsvc.cpp @ 32]
016fea3c  006d0064 moduleA!KApiFormField::QueryInterface+0x4d [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\field\field\kapiformfield.h @ 53]
016fea40  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016fea44  00730069 moduleA!KListTemplate::QueryInterface+0x55 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016fea48  00720074 moduleA!KViewportService::KViewportService+0x3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\framework\viewport_service.cpp @ 16]
016fea4c  00740061 moduleA!KRecentFiles::QueryInterface+0x53 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\recent_file\moduleA_recentfiles.h @ 46]
016fea50  0072006f moduleA!KViewportService::~KViewportService+0x1e [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\framework\viewport_service.cpp @ 26]
016fea54  0041005c moduleA!_TxConntectImp+0x14c [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\moduleAdrawing\io\import\impsvc.cpp @ 32]
016fea58  00700070 moduleA!KDrawingPagelayoutNotify::QueryInterface+0x46 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\moduleAdrawing\event\kpagelayoutnotify.h @ 25]
016fea5c  00610044 moduleA!TypoLib::TextPageRender<DocPageRenderTraits,TypoLib::TypoDocLineRenderTraits,TypoLib::DocDataTraits>::__saveLineMdInfo+0x18cc69 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\render\page\textpagerender.h @ 1953]
016fea60  00610074 moduleA!TypoLib::TextPageRender<DocPageRenderTraits,TypoLib::TypoDocLineRenderTraits,TypoLib::DocDataTraits>::__saveLineMdInfo+0x18cc99 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\render\page\textpagerender.h @ 1976]
016fea64  004c005c moduleA!cr_vi::crFlexLexer::yylex+0x70c [s:\rc_v9_personal_common_20150618\build\release\office\et\compiler\crlex_vi.lex @ 319]
016fea68  0063006f moduleA!TypoLib::TypoCharFlagCalc::_calcFieldFlag+0x1d4dff [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\measure\charflagcal.h @ 565]
016fea6c  006c0061 moduleA!ParaPreviewWidget::qt_metacast+0x2a [s:\rc_v9_personal_common_20150618\build\release\shell2\moduleA\moc\moduleA\_automoc_0_2.cpp @ 3904]
016fea70  004b005c moduleA!KxmoduleACommandLoader::KxmoduleACommandLoader+0x4bcc [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAcommands.cpp @ 275]
016fea74  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016fea78  00730067 moduleA!KListTemplate::QueryInterface+0x53 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016fea7c  0066006f moduleA!__rtl_digest_updateSHA+0x571 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1113]
016fea80  005c0074 moduleA!_allmul+0xc3754
016fea84  00500057 moduleA!_allmul+0x3737
016fea88  00200053
016fea8c  0066004f moduleA!__rtl_digest_updateSHA+0x551 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1112]
016fea90  00690066 moduleA!_ApiColor2ApiColorIndex+0xa3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\moduleAapi\moduleAapitool.h @ 141]
016fea94  00650063 moduleA!KSubdocServ::CreateAllSubdoccuments+0x200683 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdatalogic\subdoc_serv\subdoc_serv.cpp @ 67]
016fea98  0039005c
016fea9c  0031002e
016feaa0  0030002e
016feaa4  0035002e
016feaa8  00310031
016feaac  005c0039 moduleA!_allmul+0xc3719
016feab0  0066006f moduleA!__rtl_digest_updateSHA+0x571 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1113]
016feab4  00690066 moduleA!_ApiColor2ApiColorIndex+0xa3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\moduleAapi\moduleAapitool.h @ 141]
016feab8  00650063 moduleA!KSubdocServ::CreateAllSubdoccuments+0x200683 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdatalogic\subdoc_serv\subdoc_serv.cpp @ 67]
016feabc  005c0036 moduleA!_allmul+0xc3716
016feac0  006f006c moduleA!TypoLib::TypoLineDispIter<TypoLib::AnnotationDataTraits,TypoLib::TypoLineDispAdjustifier,TypoLib::TypoLogicDataIter>::logCLP2cp+0x2 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\calcdrawpos.h @ 695]
016feac4  00000067
016feac8  00000000
016feacc  00000000
016fead0  00000000
016fead4  00000000
016fead8  00000000
016feadc  00000000
016feae0  00000000
016feae4  00000000
016feae8  00000000
016feaec  00000000
016feaf0  00000000
016feaf4  00000000
016feaf8  00000000
016feafc  00000000
016feb00  00000000
016feb04  00000000
016feb08  00000000
016feb0c  00000000
016feb10  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016feb14  772c0b77
016feb18  01aa0044
016feb1c  01a401ac
016feb20  01a40000
016feb24  00000000
016feb28  00000000
016feb2c  00980014 moduleA!Ui_KxDlgBulletsNumbering::setupUi+0x8f0 [s:\rc_v9_personal_common_20150618\build\release\shell2\moduleA\uic\ui_kxbulletsnumberingdlg.h @ 194]
016feb30  006f0118 moduleA!TypoLib::TypoLineDispIter<TypoLib::RevisionDataTraits,TypoLib::TypoLineDispAdjustifier,TypoLib::TypoLogicDataIter>::__addLineMdInfoToClusters+0x23 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\calcdrawpos.h @ 404]
016feb34  00000000
016feb38  00000000
016feb3c  00000000
016feb40  01a40000
016feb44  00930015 moduleA!KxFieldDlg::UpdateState+0x5a [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\dialog\kxfielddlg.cpp @ 858]
016feb48  006f0118 moduleA!TypoLib::TypoLineDispIter<TypoLib::RevisionDataTraits,TypoLib::TypoLineDispAdjustifier,TypoLib::TypoLogicDataIter>::__addLineMdInfoToClusters+0x23 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\calcdrawpos.h @ 404]
016feb4c  bb0006bd
016feb50  00000000
016feb54  01a47778
016feb58  01addca0
016feb5c  00000020
016feb60  000031e8
016feb64  00000000
016feb68  01ac1078
016feb6c  01a47468
016feb70  01a47588
016feb74  01ac3888
016feb78  01a47930
016feb7c  77592f6d ntdll!RtlpFreeHeap+0xb7a
016feb80  016feb14
016feb84  01520015 moduleA!__dyn_tls_init_callback <PERF> (moduleA+0x1160015)
016feb88  016ff6a4
016feb8c  775d3145 ntdll!_except_handler4
016feb90  011b3287 moduleA!KPdfExportOptions::`RTTI Base Class Array'+0x1b
016feb94  fffffffe
016feb98  00000045
016feb9c  01aca488
016feba0  01a40000
016feba4  01acdc98
016feba8  00000000
016febac  01a47778
016febb0  00000045
016febb4  01aca488
016febb8  01a40000
016febbc  01acdc98
016febc0  00000045
016febc4  01a40000
016febc8  01aca488
016febcc  00000000
016febd0  000006bd
016febd4  016fecc0
016febd8  00000045
016febdc  01a40000
016febe0  01aca488
016febe4  016fecc0
016febe8  77593386 ntdll!RtlpAllocateHeap+0xab2
016febec  775933b5 ntdll!RtlpAllocateHeap+0xe68
016febf0  772c0c2f
016febf4  016ff05c
016febf8  01a403ac
016febfc  01a40000
016fec00  01a40150
016fec04  000006bd
016fec08  01ac3800
016fec0c  01a43748
016fec10  00000682
016fec14  01a4383c
016fec18  016fec58
016fec1c  000006bd
016fec20  77662000 ntdll!Kernel32BaseQueryModuleData+0x4
016fec24  01a43748
016fec28  00000682
016fec2c  04bd0048
016fec30  00000702
016fec34  00000702
016fec38  00000000
016fec3c  00000080
016fec40  01a8f928
016fec44  fe000ff1
016fec48  016feb80
016fec4c  016fece8
016fec50  00000000
016fec54  02000002
016fec58  01a8f928
016fec5c  fe000ff1
016fec60  016fec7c
016fec64  7759ae91 ntdll!RtlIsDosDeviceName_Ustr+0x16
016fec68  00000000
016fec6c  000007ff
016fec70  00b600b4 moduleA!KPageLayoutView::OnTextInsert+0x20 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\moduleAlayout\layoutview.h @ 302]
016fec74  00000002
016fec78  016fec94
016fec7c  7759ae91 ntdll!RtlIsDosDeviceName_Ustr+0x16
016fec80  016fed6c
016fec84  00000000
016fec88  00cc00ca moduleA!_KTextSelection::GetParaProps+0xeb [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\document\text_selection.cpp @ 841]
016fec8c  016fed6c
016fec90  00000002
016fec94  016fed38
016fec98  7758e1a2 ntdll!_SEH_epilog4_GS+0xa
016fec9c  7759b1b6 ntdll!RtlGetFullPathName_Ustr+0x14d
016feca0  772c0dd7
016feca4  016ff05c
016feca8  00000208
016fecac  01aca490
016fecb0  016ffb98
016fecb4  775d3145 ntdll!_except_handler4
016fecb8  00000000
016fecbc  fffffffe
016fecc0  00000065
016fecc4  00cc00ca moduleA!_KTextSelection::GetParaProps+0xeb [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\document\text_selection.cpp @ 841]
016fecc8  016ff0a0
016feccc  00000228
016fecd0  00000002
016fecd4  00000000
016fecd8  000000ca
016fecdc  00000000
016fece0  000000ca
016fece4  016fee66
016fece8  016ff0a0
016fecec  01000000 moduleA!_gradPathDict
016fecf0  020800ca
016fecf4  016fed9c
016fecf8  016ff16a
016fecfc  00000000
016fed00  00000000
016fed04  00000000
016fed08  006fec88 moduleA!KOleCoreObject<oldapi::_OLEControl>::GetShape+0x7 [s:\rc_v9_personal_common_20150618\coding\office\include\drawing\drawingcore\olecoreobject.inl @ 690]
016fed0c  00000003
016fed10  000000ca
016fed14  775d3145 ntdll!_except_handler4
016fed18  00000000
016fed1c  772c0dd7
016fed20  016feca0
016fed24  7759b396 ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x17d
016fed28  016ffb98
016fed2c  775d3145 ntdll!_except_handler4
016fed30  00000000
016fed34  016ff05c
016fed38  016fefac
016fed3c  7759b396 ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x17d
016fed40  01aca498
016fed44  016fed9c
016fed48  000000ca
016fed4c  01aca490
016fed50  7759b41c ntdll!`string'
016fed54  00000008
016fed58  016ff344
016fed5c  00000000
016fed60  7759b40e ntdll!RtlpDosPathNameToRelativeNtPathName_Ustr+0x330
016fed64  00000000
016fed68  00000008
016fed6c  00000002
016fed70  00000000
016fed74  000a0008
016fed78  7759b41c ntdll!`string'
016fed7c  00000000
016fed80  00000008
016fed84  00000000
016fed88  000000ca
016fed8c  000a0008
016fed90  7759b41c ntdll!`string'
016fed94  016ff078
016fed98  006d0064 moduleA!KApiFormField::QueryInterface+0x4d [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\field\field\kapiformfield.h @ 53]
016fed9c  003a0043
016feda0  0057005c moduleA!_allmul+0x7373c
016feda4  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016feda8  006f0064 moduleA!TypoLib::TypoGlyphPoolLoader<TypoLib::DocMeasureTraits,TypoLib::DocDataTraits>::__getPrevChAndNextCh+0xc0 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\data\iter\renderiter.h @ 1619]
016fedac  00730077 moduleA!KListTemplate::QueryInterface+0x63 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016fedb0  0057005c moduleA!_allmul+0x7373c
016fedb4  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016fedb8  00780053 moduleA!KxmoduleASplitWindowLine::updateLineGeometry+0x20 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAsplitwindow.cpp @ 104]
016fedbc  005c0053 moduleA!_allmul+0xc3733
016fedc0  00380078
016fedc4  005f0036 moduleA!std::vector<KmoduleAArea *,std::allocator<KmoduleAArea *> >::reserve+0x16409d [c:\program files (x86)\microsoft visual studio 10.0\vc\include\vector @ 751]
016fedc8  0069006d moduleA!_ApiColor2ApiColorIndex+0xaa [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\moduleAapi\moduleAapitool.h @ 179]
016fedcc  00720063 moduleA!KViewportService::~KViewportService+0x12 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\framework\viewport_service.cpp @ 25]
016fedd0  0073006f moduleA!KListTemplate::QueryInterface+0x5b [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016fedd4  0066006f moduleA!__rtl_digest_updateSHA+0x571 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1113]
016fedd8  002e0074
016feddc  00690077 moduleA!_ApiColor2ApiColorIndex+0xb4 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\moduleAapi\moduleAapitool.h @ 146]
016fede0  0064006e moduleA!TypoLib::TypoTextLineHit<TypoLib::DocDataTraits,TypoLib::TypoCharboxHit>::__getCharGlyphIt+0x1ce7ce [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\service\linehit.h @ 162]
016fede4  0077006f moduleA!KxLayoutWidget::saveSetting+0x4b [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\dialog\formatshape\kxlayoutwidget.cpp @ 124]
016fede8  002e0073
016fedec  00640067 moduleA!TypoLib::TypoTextLineHit<TypoLib::DocDataTraits,TypoLib::TypoCharboxHit>::__getCharGlyphIt+0x1ce7c7 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\service\linehit.h @ 162]
016fedf0  00700069 moduleA!KDrawingPagelayoutNotify::QueryInterface+0x3f [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\moduleAdrawing\event\kpagelayoutnotify.h @ 25]
016fedf4  0075006c moduleA!KxFormatShapeApiWrapper::get_TextFrame_MarginBottom+0xc [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\dialog\kxformatshapwrapper.cpp @ 1888]
016fedf8  005f0073 moduleA!KmoduleAAreas::get_MainArea+0x185383 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\range\kareas.cpp @ 129]
016fedfc  00350036
016fee00  00350039
016fee04  00360062
016fee08  00310034
016fee0c  00340034
016fee10  00630063 moduleA!TypoLib::TypoCharFlagCalc::_calcFieldFlag+0x1d4df3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\measure\charflagcal.h @ 565]
016fee14  00310066
016fee18  00660064 moduleA!__rtl_digest_updateSHA+0x566 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1112]
016fee1c  0031005f
016fee20  0031002e
016fee24  0037002e
016fee28  00300036
016fee2c  002e0031
016fee30  00380031
016fee34  00340039
016fee38  005f0034 moduleA!std::vector<KmoduleAArea *,std::allocator<KmoduleAArea *> >::reserve+0x16409b [c:\program files (x86)\microsoft visual studio 10.0\vc\include\vector @ 748]
016fee3c  006f006e moduleA!TypoLib::TypoLineDispIter<TypoLib::AnnotationDataTraits,TypoLib::TypoLineDispAdjustifier,TypoLib::TypoLogicDataIter>::logCLP2cp+0x4 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\calcdrawpos.h @ 695]
016fee40  0065006e moduleA!KSubdocServ::CreateAllSubdoccuments+0x20068e [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdatalogic\subdoc_serv\subdoc_serv.cpp @ 67]
016fee44  0037005f
016fee48  00640032 moduleA!TypoLib::TypoTextLineHit<TypoLib::DocDataTraits,TypoLib::TypoCharboxHit>::__getCharGlyphIt+0x1ce792 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\service\linehit.h @ 159]
016fee4c  00380034
016fee50  00370063
016fee54  00380037
016fee58  00360036
016fee5c  00620036 moduleA!TypoLib::TypoTextLineDrawer<DocLineDisplayTraits,TypoLib::DocDataTraits>::DrawNormalSpan+0x1d4146 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\textlinedrawer.h @ 883]
016fee60  00660036 moduleA!__rtl_digest_updateSHA+0x538 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1112]
016fee64  00000030
016fee68  00000000
016fee6c  00000000
016fee70  00000000
016fee74  00000000
016fee78  00000000
016fee7c  00000000
016fee80  00000000
016fee84  00000000
016fee88  00000000
016fee8c  00000000
016fee90  00000000
016fee94  00000000
016fee98  00000000
016fee9c  00000000
016feea0  00000000
016feea4  00000000
016feea8  00000000
016feeac  00000000
016feeb0  00000000
016feeb4  01a40000
016feeb8  01aca488
016feebc  00000000
016feec0  bb0006bd
016feec4  00000000
016feec8  01aca6b8
016feecc  01addca0
016feed0  01a8f928
016feed4  000031e8
016feed8  01a40000
016feedc  00000004
016feee0  01aca488
016feee4  016fefd4
016feee8  77592f91 ntdll!RtlpFreeHeap+0xbb1
016feeec  01a40138
016feef0  77592f6d ntdll!RtlpFreeHeap+0xb7a
016feef4  772c0f3b
016feef8  00000000
016feefc  01a40000
016fef00  01aca490
016fef04  00000000
016fef08  00000000
016fef0c  00000000
016fef10  00000000
016fef14  00000000
016fef18  00000000
016fef1c  01addca0
016fef20  01a43748
016fef24  00000000
016fef28  01a40000
016fef2c  01a40150
016fef30  00000000
016fef34  00000000
016fef38  01a43748
016fef3c  02000002
016fef40  00000000
016fef44  fe000ff1
016fef48  00000702
016fef4c  00000000
016fef50  00000000
016fef54  00000003
016fef58  00000000
016fef5c  00000702
016fef60  0000077f
016fef64  00000000
016fef68  69009df4
016fef6c  00000682
016fef70  00000000
016fef74  04bd0048
016fef78  00000000
016fef7c  00000000
016fef80  00000000
016fef84  01a43858
016fef88  00000000
016fef8c  01a43748
016fef90  00000000
016fef94  00000000
016fef98  01aca490
016fef9c  01addca0
016fefa0  00000000
016fefa4  00000702
016fefa8  00000000
016fefac  0100efd4 moduleA!g_hatchDataTables+0x46c
016fefb0  00000000
016fefb4  00003410
016fefb8  0101efcc moduleA!qt_resource_data+0x7a74
016fefbc  016feef4
016fefc0  00000000
016fefc4  016ffb98
016fefc8  775d3145 ntdll!_except_handler4
016fefcc  011b288f moduleA!oldapi::System::`RTTI Base Class Descriptor at (0,-1,0,64)'+0x13
016fefd0  fffffffe
016fefd4  77592f6d ntdll!RtlpFreeHeap+0xb7a
016fefd8  77592b65 ntdll!RtlFreeHeap+0x142
016fefdc  00000000
016fefe0  01aca490
016fefe4  000000ca
016fefe8  000000ce
016fefec  00000000
016feff0  01aca488
016feff4  016ff2ac
016feff8  775aea7c ntdll!RtlpProbeAssemblyStorageRootForAssembly+0x441
016feffc  01a40000
016ff000  00000000
016ff004  01aca490
016ff008  00000001
016ff00c  000000a6
016ff010  775aeab3 ntdll!RtlpProbeAssemblyStorageRootForAssembly+0x487
016ff014  e2aabe43
016ff018  01d0d4ad
016ff01c  e2aae553
016ff020  01d0d4ad
016ff024  e2aae553
016ff028  01d0d4ad
016ff02c  e2aae553
016ff030  01d0d4ad
016ff034  00000010
016ff038  016ff578
016ff03c  00000000
016ff040  00000001
016ff044  00000018
016ff048  00000000
016ff04c  016ff078
016ff050  00000040
016ff054  00000000
016ff058  00000001
016ff05c  00000000
016ff060  775ae599 ntdll!RtlpAssemblyStorageMapResolutionDefaultCallback+0x304
016ff064  00000000
016ff068  00000000
016ff06c  016ff36c
016ff070  016ff310
016ff074  000000ce
016ff078  021a00d2
016ff07c  01aca490
016ff080  01aca490
016ff084  016ff364
016ff088  016ff318
016ff08c  016ff358
016ff090  00000000
016ff094  000000ca
016ff098  016ff0a0
016ff09c  00000018
016ff0a0  003a0043
016ff0a4  0057005c moduleA!_allmul+0x7373c
016ff0a8  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016ff0ac  006f0064 moduleA!TypoLib::TypoGlyphPoolLoader<TypoLib::DocMeasureTraits,TypoLib::DocDataTraits>::__getPrevChAndNextCh+0xc0 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\data\iter\renderiter.h @ 1619]
016ff0b0  00730077 moduleA!KListTemplate::QueryInterface+0x63 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016ff0b4  0057005c moduleA!_allmul+0x7373c
016ff0b8  006e0069 moduleA!svx::MSCodec_Xor95::InitKey+0x5c [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\svx\source\mscodec.cxx @ 192]
016ff0bc  00780053 moduleA!KxmoduleASplitWindowLine::updateLineGeometry+0x20 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAsplitwindow.cpp @ 104]
016ff0c0  005c0053 moduleA!_allmul+0xc3733
016ff0c4  00380078
016ff0c8  005f0036 moduleA!std::vector<KmoduleAArea *,std::allocator<KmoduleAArea *> >::reserve+0x16409d [c:\program files (x86)\microsoft visual studio 10.0\vc\include\vector @ 751]
016ff0cc  0069006d moduleA!_ApiColor2ApiColorIndex+0xaa [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\moduleAapi\moduleAapitool.h @ 179]
016ff0d0  00720063 moduleA!KViewportService::~KViewportService+0x12 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\framework\viewport_service.cpp @ 25]
016ff0d4  0073006f moduleA!KListTemplate::QueryInterface+0x5b [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\list\klisttemplate.h @ 34]
016ff0d8  76dd5ff5 gdi32!NtGdiCreateCompatibleBitmap+0x15
016ff0dc  76dd5fd4 gdi32!CreateCompatibleBitmap+0xec
016ff0e0  1801193b
016ff0e4  00000001
016ff0e8  00000001
016ff0ec  00000000
016ff0f0  04f41e08
016ff0f4  1801193b
016ff0f8  0075006c moduleA!KxFormatShapeApiWrapper::get_TextFrame_MarginBottom+0xc [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\dialog\kxformatshapwrapper.cpp @ 1888]
016ff0fc  005f0073 moduleA!KmoduleAAreas::get_MainArea+0x185383 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\service\range\kareas.cpp @ 129]
016ff100  00350036
016ff104  00350039
016ff108  00360062
016ff10c  00310034
016ff110  00340034
016ff114  00630063 moduleA!TypoLib::TypoCharFlagCalc::_calcFieldFlag+0x1d4df3 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\measure\charflagcal.h @ 565]
016ff118  00310066
016ff11c  00660064 moduleA!__rtl_digest_updateSHA+0x566 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1112]
016ff120  0031005f
016ff124  0031002e
016ff128  0037002e
016ff12c  00300036
016ff130  002e0031
016ff134  00380031
016ff138  00340039
016ff13c  005f0034 moduleA!std::vector<KmoduleAArea *,std::allocator<KmoduleAArea *> >::reserve+0x16409b [c:\program files (x86)\microsoft visual studio 10.0\vc\include\vector @ 748]
016ff140  006f006e moduleA!TypoLib::TypoLineDispIter<TypoLib::AnnotationDataTraits,TypoLib::TypoLineDispAdjustifier,TypoLib::TypoLogicDataIter>::logCLP2cp+0x4 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\calcdrawpos.h @ 695]
016ff144  0065006e moduleA!KSubdocServ::CreateAllSubdoccuments+0x20068e [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdatalogic\subdoc_serv\subdoc_serv.cpp @ 67]
016ff148  0037005f
016ff14c  00640032 moduleA!TypoLib::TypoTextLineHit<TypoLib::DocDataTraits,TypoLib::TypoCharboxHit>::__getCharGlyphIt+0x1ce792 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\service\linehit.h @ 159]
016ff150  00380034
016ff154  00370063
016ff158  00380037
016ff15c  00360036
016ff160  00620036 moduleA!TypoLib::TypoTextLineDrawer<DocLineDisplayTraits,TypoLib::DocDataTraits>::DrawNormalSpan+0x1d4146 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\typolib\display\textlinedrawer.h @ 883]
016ff164  00660036 moduleA!__rtl_digest_updateSHA+0x538 [s:\rc_v9_personal_common_20150618\coding\framework\crypt\crypt_win\ooo_1.9.m77_src\sal\rtl\source\digest.c @ 1112]
016ff168  00000030
016ff16c  00000000
016ff170  00000000
016ff174  016ff190
016ff178  7758ec6a ntdll!bsearch+0x70
016ff17c  016ff1b8
016ff180  016ff194
016ff184  7758eba9 ntdll!ARRAY_FITS+0x2d
016ff188  000007a0
016ff18c  0000174c
016ff190  016ff1a0
016ff194  016ff1d0
016ff198  7758e979 ntdll!RtlpLocateActivationContextSection+0x1d9
016ff19c  0000174c
016ff1a0  00001eec
016ff1a4  000007a0
016ff1a8  0000330c
016ff1ac  00050000
016ff1b0  016ff244
016ff1b4  fffffffc
016ff1b8  00000002
016ff1bc  016ff210
016ff1c0  775a3cd2 ntdll!RtlpFindUnicodeStringInSection+0x237
016ff1c4  016ff1e4
016ff1c8  00060b38
016ff1cc  00000000
016ff1d0  016ff200
016ff1d4  7758e9fe ntdll!RtlpFindNextActivationContextSection+0x64
016ff1d8  0005174c
016ff1dc  c0150008
016ff1e0  664ad4c0 QtCore4!QObject::event+0x56 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 1197]
016ff1e4  016ff620
016ff1e8  0546dc88
016ff1ec  03c63698
016ff1f0  016ff620
016ff1f4  00000000
016ff1f8  7efde000
016ff1fc  7efdd000
016ff200  016ff220
016ff204  03c63698
016ff208  016ff1e8
016ff20c  016ff310
016ff210  6670eff7 QtCore4!_alloca_probe_8+0x2f521
016ff214  ffffffff
016ff218  016ff31c
016ff21c  66677162 QtCore4!QWidget::event+0xaa7 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qwidget.cpp @ 8805]
016ff220  016ff620
016ff224  016ff620
016ff228  03c63698
016ff22c  00000002
016ff230  016ff26c
016ff234  016ff264
016ff238  016ff364
016ff23c  016ff390
016ff240  016ff380
016ff244  00000018
016ff248  00000003
016ff24c  00000000
016ff250  00000002
016ff254  00000003
016ff258  00000002
016ff25c  00000001
016ff260  536cd652
016ff264  00000000
016ff268  0005174c
016ff26c  000007a0
016ff270  016ff280
016ff274  016ff330
016ff278  7758f3e7 ntdll!AitFireParentUsageEvent+0x772
016ff27c  00000003
016ff280  00000000
016ff284  00000002
016ff288  016ff2f0
016ff28c  016ff298
016ff290  7758fa94 ntdll!LdrpDefaultExtension
016ff294  7758f44a ntdll!AitFireParentUsageEvent+0x88d
016ff298  00000040
016ff29c  0f3d61cc moduleB!KMiniToolBarPopupWidget::eventFilter+0x2c [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kminitoolbarpopupwidget.cpp @ 176]
016ff2a0  03c63698
016ff2a4  016ff620
016ff2a8  016ff620
016ff2ac  017ae290
016ff2b0  5c3614e0 protecteyes!KNightMode::eventFilter+0x40 [s:\rc_v9_personal_common_20150618\coding\shell2\plugins\protecteyes\widgets.cpp @ 41]
016ff2b4  058aa355
016ff2b8  00000008
016ff2bc  017b2e90
016ff2c0  03c63698
016ff2c4  00000000
016ff2c8  00000000
016ff2cc  00000000
016ff2d0  0f3dfa09 moduleB!KRbTabWidget::eventFilter+0x49 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\krbtabwidget.cpp @ 437]
016ff2d4  00000000
016ff2d8  016ff620
016ff2dc  054ad5e7
016ff2e0  00000003
016ff2e4  017b2e90
016ff2e8  03c63698
016ff2ec  00000000
016ff2f0  001a0018
016ff2f4  5d3f1e78 msvcr100!`string'
016ff2f8  66494fa9 QtCore4!QMetaObject::cast+0x14 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qmetaobject.cpp @ 268]
016ff2fc  00000009
016ff300  0f3dfcad moduleB!KHotKeyEventHandle::eventFilter+0x11d [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\khotkeyassistant.cpp @ 1264]
016ff304  0f3de10a moduleB!KDocTabFloatBar::eventFilter+0x3a [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kdoctabfloatbar.cpp @ 121]
016ff308  03c63698
016ff30c  666766c5 QtCore4!QWidget::event+0xa [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qwidget.cpp @ 8294]
016ff310  016ff358
016ff314  66731026 QtCore4!_alloca_probe_8+0x51550
016ff318  ffffffff
016ff31c  016ff364
016ff320  0f4388b6 moduleB!_EH_epilog3_GS+0xa [f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\i386\ehprolg3.c @ 581]
016ff324  0f39c65f moduleB!KMdiArea::event+0x41 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kmdiarea.cpp @ 897]
016ff328  054ad5c7
016ff32c  03c63698
016ff330  016ff620
016ff334  00000002
016ff338  016ff620
016ff33c  0000000d
016ff340  017b2e90
016ff344  016ff360
016ff348  016ff360
016ff34c  662d5b7a QtCore4!QCoreApplicationPrivate::sendThroughObjectEventFilters+0x52 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 902]
016ff350  03c63698
016ff354  054ad5c7
016ff358  016ff560
016ff35c  0f500255 moduleB!_EH_epilog3_GS_align+0x8294c
016ff360  ffffffff
016ff364  0f39c65f moduleB!KMdiArea::event+0x41 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kmdiarea.cpp @ 897]
016ff368  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016ff36c  016ff620
016ff370  03c63698
016ff374  016ff620
016ff378  017b2e90
016ff37c  016ff56c
016ff380  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016ff384  03c63698
016ff388  016ff620
016ff38c  016ff620
016ff390  016ffd98
016ff394  03c63698
016ff398  00000000
016ff39c  00000000
016ff3a0  00000000
016ff3a4  00000000
016ff3a8  00000000
016ff3ac  00000000
016ff3b0  00000000
016ff3b4  00000000
016ff3b8  00000000
016ff3bc  00000000
016ff3c0  00000000
016ff3c4  00200000
016ff3c8  016ff468
016ff3cc  016ff468
016ff3d0  016ff468
016ff3d4  00000020
016ff3d8  00000020
016ff3dc  00000000
016ff3e0  00000000
016ff3e4  00000000
016ff3e8  00000000
016ff3ec  00000000
016ff3f0  00000000
016ff3f4  00000000
016ff3f8  00000000
016ff3fc  00000000
016ff400  00160014
016ff404  00000000
016ff408  00000000
016ff40c  016ff474
016ff410  016ff440
016ff414  00000000
016ff418  00140012
016ff41c  735d2d00 GdiPlus!`string'
016ff420  00000000
016ff424  016ff48c
016ff428  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ff42c  772c145f
016ff430  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ff434  772c1457
016ff438  00000000
016ff43c  01a4023c
016ff440  01a40000
016ff444  01840000
016ff448  03be2f70
016ff44c  00000000
016ff450  22010023
016ff454  5d3f1e90 msvcr100!`string'+0x18
016ff458  01a42aac
016ff45c  00b60012 moduleA!KPageLayoutView::OnParaFormatChange+0x14 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\typography\moduleAlayout\layoutview.h @ 354]
016ff460  29a1ad21
016ff464  005e0029 moduleA!`dynamic initializer for 'gs_KxmoduleACustomStyleCommand_factory''+0x1e [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAcommands.cpp @ 3298]
016ff468  01840000
016ff46c  01000000 moduleA!_gradPathDict
016ff470  03be2f70
016ff474  016ff564
016ff478  77592f91 ntdll!RtlpFreeHeap+0xbb1
016ff47c  01840138
016ff480  77592f6d ntdll!RtlpFreeHeap+0xb7a
016ff484  772c158b
016ff488  00000000
016ff48c  01840000
016ff490  03be2f78
016ff494  ffffffff
016ff498  016ff558
016ff49c  016ff554
016ff4a0  77592f6d ntdll!RtlpFreeHeap+0xb7a
016ff4a4  772c156b
016ff4a8  00000000
016ff4ac  077e56d8
016ff4b0  01842bb8
016ff4b4  fffffffe
016ff4b8  01840000
016ff4bc  01842bb8
016ff4c0  00000000
016ff4c4  00000000
016ff4c8  01842bb8
016ff4cc  02000002
016ff4d0  00000000
016ff4d4  00000000
016ff4d8  01840000
016ff4dc  017c9730
016ff4e0  016ff5d4
016ff4e4  001e0001
016ff4e8  ffff0000
016ff4ec  0000002c
016ff4f0  01840000
016ff4f4  03bafb20
016ff4f8  03bafa28
016ff4fc  017c8f58
016ff500  00000001
016ff504  017c9728
016ff508  016ff520
016ff50c  7758e013 ntdll!RtlFreeHeap+0x105
016ff510  03b907b8
016ff514  00000000
016ff518  00000000
016ff51c  01840000
016ff520  03bafae0
016ff524  768e14ad kernel32!HeapFree+0x14
016ff528  01840000
016ff52c  001a0002
016ff530  73726609 GdiPlus!UpdateFeatureResults+0x2b
016ff534  016ffd98
016ff538  5d3f016a msvcr100!free+0x1c
016ff53c  00000000
016ff540  00000000
016ff544  01840000
016ff548  00000000
016ff54c  01840000
016ff550  077d48b8
016ff554  01730037
016ff558  017b2e90
016ff55c  006e01c2 moduleA!std::vector<DLCommand,std::allocator<DLCommand> >::_Reserve+0xd [c:\program files (x86)\microsoft visual studio 10.0\vc\include\vector @ 1291]
016ff560  000000e5
016ff564  00000000
016ff568  01840000
016ff56c  077d4958
016ff570  077d4520
016ff574  00000001
016ff578  007e01c4 moduleA!KTxOLEDataImport::Import+0x7c [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\io\exch\component\oledata\oledata.cpp @ 37]
016ff57c  000000e7
016ff580  7758e013 ntdll!RtlFreeHeap+0x105
016ff584  076a7c08
016ff588  00000000
016ff58c  077d4520
016ff590  00000001
016ff594  077d4950
016ff598  016ff5b0
016ff59c  7758e013 ntdll!RtlFreeHeap+0x105
016ff5a0  076a7bc8
016ff5a4  00000000
016ff5a8  017f9ad8
016ff5ac  077d4950
016ff5b0  016ff5c4
016ff5b4  768e14ad kernel32!HeapFree+0x14
016ff5b8  01840000
016ff5bc  00000000
016ff5c0  077d4958
016ff5c4  00000000
016ff5c8  01840000
016ff5cc  076a7b58
016ff5d0  00000000
016ff5d4  077d4958
016ff5d8  0098001d moduleA!Ui_KxDlgBulletsNumbering::setupUi+0x8f9 [s:\rc_v9_personal_common_20150618\build\release\shell2\moduleA\uic\ui_kxbulletsnumberingdlg.h @ 194]
016ff5dc  000000a5
016ff5e0  077d4958
016ff5e4  076a7bc8
016ff5e8  664af1f2 QtCore4!QObjectPrivate::~QObjectPrivate+0x8a [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 170]
016ff5ec  076a7780
016ff5f0  00000001
016ff5f4  076a7b50
016ff5f8  016ff610
016ff5fc  7758e013 ntdll!RtlFreeHeap+0x105
016ff600  076a7b58
016ff604  00000000
016ff608  017f9ad8
016ff60c  076a7b50
016ff610  016ff624
016ff614  768e14ad kernel32!HeapFree+0x14
016ff618  01840000
016ff61c  00000000
016ff620  076a7b58
016ff624  016ff638
016ff628  5d3f016a msvcr100!free+0x1c
016ff62c  01840000
016ff630  00000000
016ff634  076a7b58
016ff638  016ff648
016ff63c  6653a38e QtCore4!QPropertyAnimationPrivate::`scalar deleting destructor'+0x17
016ff640  076a7b58
016ff644  076a7b58
016ff648  016ff68c
016ff64c  664afbdf QtCore4!QObject::~QObject+0x279 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 964]
016ff650  00000000
016ff654  01840000
016ff658  017f9ad8
016ff65c  00000002
016ff660  03c4b081
016ff664  00ae0028 moduleA!KFrames::InitCommon+0x59 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\peripheral\textframe\textframe\api\kframes_core.cpp @ 57]
016ff668  00000073
016ff66c  017f9ad8
016ff670  03c4b080
016ff674  00000003
016ff678  017f95b0
016ff67c  00000001
016ff680  017f9ad0
016ff684  016ff69c
016ff688  7758e013 ntdll!RtlFreeHeap+0x105
016ff68c  017f9ad8
016ff690  017f9ad8
016ff694  00000002
016ff698  017f9ad0
016ff69c  016ff6b0
016ff6a0  768e14ad kernel32!HeapFree+0x14
016ff6a4  01840000
016ff6a8  00000000
016ff6ac  017f9ad8
016ff6b0  016ff6c4
016ff6b4  5d3f016a msvcr100!free+0x1c
016ff6b8  01840000
016ff6bc  00000000
016ff6c0  017f9ad8
016ff6c4  016ff6d4
016ff6c8  66539bd2 QtCore4!QPropertyAnimation::`vector deleting destructor'+0x42
016ff6cc  017f9ad8
016ff6d0  00000034
016ff6d4  016ff6e0
016ff6d8  664ab358 QtCore4!qDeleteInEventHandler+0x11 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 3987]
016ff6dc  00000001
016ff6e0  016ff71c
016ff6e4  664ad4e9 QtCore4!QObject::event+0x7f [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 1200]
016ff6e8  017f9ad8
016ff6ec  017f9ad8
016ff6f0  07ac0148
016ff6f4  00000002
016ff6f8  017b2e90
016ff6fc  016ff718
016ff700  662d5b07 QtCore4!QCoreApplicationPrivate::sendThroughApplicationEventFilters+0x54 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 883]
016ff704  017f9ad8
016ff708  017f9ad8
016ff70c  016ff6ec
016ff710  016ff918
016ff714  6670eff7 QtCore4!_alloca_probe_8+0x2f521
016ff718  ffffffff
016ff71c  016ff734
016ff720  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016ff724  07ac0148
016ff728  017f9ad8
016ff72c  07ac0148
016ff730  017b2e90
016ff734  016ff924
016ff738  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016ff73c  017f9ad8
016ff740  07ac0148
016ff744  07ac0148
016ff748  016ffd98
016ff74c  017f9ad8
016ff750  016ff6e4
016ff754  00000000
016ff758  016ff848
016ff75c  775d3145 ntdll!_except_handler4
016ff760  011b3287 moduleA!KPdfExportOptions::`RTTI Base Class Array'+0x1b
016ff764  fffffffe
016ff768  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ff76c  7758e0e2 ntdll!RtlAllocateHeap+0x206
016ff770  00000004
016ff774  ffffffff
016ff778  0000001c
016ff77c  00000000
016ff780  00000000
016ff784  00000000
016ff788  00000000
016ff78c  00000000
016ff790  00000000
016ff794  00000000
016ff798  00000002
016ff79c  00000000
016ff7a0  00000108
016ff7a4  00000000
016ff7a8  01a40000
016ff7ac  01a85db8
016ff7b0  016ff7d8
016ff7b4  7759b4cf ntdll!RtlpDosPathNameToRelativeNtPathName_U+0x5f
016ff7b8  00300028
016ff7bc  0f3d61cc moduleB!KMiniToolBarPopupWidget::eventFilter+0x2c [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kminitoolbarpopupwidget.cpp @ 176]
016ff7c0  018496d0
016ff7c4  016ffb2c
016ff7c8  016ffb2c
016ff7cc  017ae290
016ff7d0  5c3614e0 protecteyes!KNightMode::eventFilter+0x40 [s:\rc_v9_personal_common_20150618\coding\shell2\plugins\protecteyes\widgets.cpp @ 41]
016ff7d4  058aa635
016ff7d8  00000008
016ff7dc  017b2e90
016ff7e0  018496d0
016ff7e4  00000000
016ff7e8  01840000
016ff7ec  017f8dc8
016ff7f0  0f3dfa09 moduleB!KRbTabWidget::eventFilter+0x49 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\krbtabwidget.cpp @ 437]
016ff7f4  00000000
016ff7f8  016ffb2c
016ff7fc  054adec7
016ff800  00000003
016ff804  017b2e90
016ff808  018496d0
016ff80c  017f8ca8
016ff810  00000001
016ff814  017f8dc0
016ff818  664ad4c0 QtCore4!QObject::event+0x56 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 1197]
016ff81c  00000290
016ff820  00000000
016ff824  016ff848
016ff828  66456607 QtCore4!QListData::remove+0x74 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qlist.cpp @ 364]
016ff82c  0579ac44
016ff830  0579ac44
016ff834  00000000
016ff838  0184d518
016ff83c  0000028e
016ff840  0184d500
016ff844  0184d518
016ff848  016ff860
016ff84c  662d6bac QtCore4!QList<QPostEvent>::erase+0x4b [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qlist.h @ 795]
016ff850  00000290
016ff854  662d6bb3 QtCore4!QList<QPostEvent>::erase+0x52 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\tools\qlist.h @ 795]
016ff858  016ff870
016ff85c  0184d518
016ff860  016ffcb4
016ff864  662d71a1 QtCore4!QCoreApplication::removePostedEvents+0x15e [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1556]
016ff868  016ffcbc
016ff86c  0184d518
016ff870  662d71b6 QtCore4!QCoreApplication::removePostedEvents+0x173 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1557]
016ff874  016ffd00
016ff878  03bc4448
016ff87c  018494b0
016ff880  00000100
016ff884  00000000
016ff888  016ff890
016ff88c  016ffb2c
016ff890  018496d0
016ff894  016ffb2c
016ff898  017b2e90
016ff89c  016ffa8c
016ff8a0  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016ff8a4  018496d0
016ff8a8  016ffb2c
016ff8ac  016ffb2c
016ff8b0  016ffd98
016ff8b4  018496d0
016ff8b8  01700048
016ff8bc  017001d8
016ff8c0  017f8ed0
016ff8c4  01704488
016ff8c8  000933e3
016ff8cc  016ff860
016ff8d0  00000000
016ff8d4  016ff9bc
016ff8d8  775d3145 ntdll!_except_handler4
016ff8dc  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ff8e0  772c198b
016ff8e4  000000ad
016ff8e8  01840254
016ff8ec  016ffd98
016ff8f0  016ff9ec
016ff8f4  00000100
016ff8f8  01060024 moduleA!KxmoduleAFullScreenOnTBCommand::`vftable'+0xd0
016ff8fc  315f3473
016ff900  016ff894
016ff904  00000000
016ff908  016ff9f8
016ff90c  775d3145 ntdll!_except_handler4
016ff910  017b2e90
016ff914  6625acb4 QtCore4!QApplication::notify+0xa [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 3798]
016ff918  016ff954
016ff91c  666e5d8f QtCore4!_alloca_probe_8+0x62b9
016ff920  ffffffff
016ff924  016ff960
016ff928  0f3dfb1e moduleB!KxApplication::notify+0xde [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1792]
016ff92c  00000000
016ff930  01840000
016ff934  07ac0148
016ff938  017f9ad8
016ff93c  0184d500
016ff940  04c70362
016ff944  077256fe
016ff948  00000000
016ff94c  016ffd98
016ff950  016ffd98
016ff954  07abdaf0
016ff958  00000001
016ff95c  07ac0140
016ff960  016ff978
016ff964  7758e013 ntdll!RtlFreeHeap+0x105
016ff968  0184d500
016ff96c  664ad4d7 QtCore4!QObject::event+0x6d [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 1249]
016ff970  016ffd30
016ff974  016ffd30
016ff978  017b2e90
016ff97c  016ffd98
016ff980  01840000
016ff984  00000000
016ff988  07ac0148
016ff98c  016ff9a0
016ff990  016ffd98
016ff994  016ff974
016ff998  016ff9f4
016ff99c  6670eff7 QtCore4!_alloca_probe_8+0x2f521
016ff9a0  ffffffff
016ff9a4  016ff9b0
016ff9a8  662d6444 QtCore4!QCoreApplication::event+0x1c [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1617]
016ff9ac  016ffd30
016ff9b0  016ffa00
016ff9b4  6625977a QtCore4!QApplication::event+0x243 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 2539]
016ff9b8  016ffd30
016ff9bc  016ffd30
016ff9c0  016ffd30
016ff9c4  016ffd98
016ff9c8  0000028e
016ff9cc  07ac0148
016ff9d0  016ff9c8
016ff9d4  0184d529
016ff9d8  016ff9bc
016ff9dc  016ffa5c
016ff9e0  666eda9b QtCore4!_alloca_probe_8+0xdfc5
016ff9e4  016ffd98
016ff9e8  016ff9fc
016ff9ec  662d7766 QtCore4!QCoreApplication::sendPostedEvents+0x14 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1321]
016ff9f0  66259541 QtCore4!QApplication::event+0xa [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 2456]
016ff9f4  016ffa5c
016ff9f8  666e5bdd QtCore4!_alloca_probe_8+0x6107
016ff9fc  ffffffff
016ffa00  016ffa68
016ffa04  0f3deff7 moduleB!KxApplication::event+0x127 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1139]
016ffa08  016ffd30
016ffa0c  054adcb3
016ffa10  016ffd98
016ffa14  016ffd30
016ffa18  00000002
016ffa1c  016ffd98
016ffa20  016ffd30
016ffa24  054adcff
016ffa28  666881a8 QtCore4!QWindowsStyle::eventFilter+0x2a [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\styles\qwindowsstyle.cpp @ 169]
016ffa2c  016ffd98
016ffa30  016ffd30
016ffa34  016ffd98
016ffa38  01748dd8
016ffa3c  00000000
016ffa40  017b2e90
016ffa44  00000000
016ffa48  0f3d2303 moduleB!KxApcCompManagerSitePrivate::eventFilter+0x33 [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapccomp.cpp @ 50]
016ffa4c  016ffd98
016ffa50  016ffd30
016ffa54  0000000d
016ffa58  017b2e90
016ffa5c  016ffc78
016ffa60  0f507ec8 moduleB!_EH_epilog3_GS_align+0x8a5bf
016ffa64  ffffffff
016ffa68  016ffa7c
016ffa6c  004aaa16 moduleA!KxmoduleAApplication::event+0x26 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAapplication.cpp @ 223]
016ffa70  016ffd30
016ffa74  016ffd98
016ffa78  016ffd30
016ffa7c  016ffa94
016ffa80  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016ffa84  016ffd30
016ffa88  016ffd98
016ffa8c  016ffd30
016ffa90  017b2e90
016ffa94  016ffc84
016ffa98  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016ffa9c  016ffd98
016ffaa0  016ffd30
016ffaa4  016ffd30
016ffaa8  016ffd98
016ffaac  016ffd98
016ffab0  00000018
016ffab4  00000002
016ffab8  664addd0 QtCore4!QObjectConnectionListVector::operator[]+0x15 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 283]
016ffabc  077ec328
016ffac0  016ffad4
016ffac4  664ae679 QtCore4!QObjectPrivate::addConnection+0x46 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 351]
016ffac8  016ffad4
016ffacc  664ae695 QtCore4!QObjectPrivate::addConnection+0x62 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 358]
016ffad0  057b25e0
016ffad4  00000002
016ffad8  00000000
016ffadc  00000018
016ffae0  664aeb5c QtCore4!QMetaObjectPrivate::connect+0x121 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 2936]
016ffae4  016ffb04
016ffae8  5d3f0269 msvcr100!malloc+0x4b
016ffaec  01840000
016ffaf0  00000000
016ffaf4  0000000c
016ffaf8  017b3008
016ffafc  017b3008
016ffb00  07689160
016ffb04  016ffb14
016ffb08  00000000
016ffb0c  017000d8
016ffb10  017f8ca8
016ffb14  01700048
016ffb18  016ffb68
016ffb1c  77597e90 ntdll!RtlpFreeUserBlock+0x134
016ffb20  016ffb68
016ffb24  017f8ca8
016ffb28  77597eb2 ntdll!RtlpFreeUserBlock+0x184
016ffb2c  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ffb30  772c1b5b
016ffb34  0184d514
016ffb38  018401a4
016ffb3c  01840000
016ffb40  01700048
016ffb44  00000003
016ffb48  007e01c4 moduleA!KTxOLEDataImport::Import+0x7c [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAcore\io\exch\component\oledata\oledata.cpp @ 37]
016ffb4c  000000e8
016ffb50  016ffb2c
016ffb54  016ffb68
016ffb58  016ffc2c
016ffb5c  775d3145 ntdll!_except_handler4
016ffb60  008601c5 moduleA!_TxCreateCommentData+0x25 [s:\rc_v9_personal_common_20150618\coding\office\moduleA\include\shell\comment\comment_i.h @ 101]
016ffb64  000000e8
016ffb68  000000df
016ffb6c  77597e35 ntdll!RtlpLowFragHeapFree+0x382
016ffb70  01703770
016ffb74  01840000
016ffb78  00000018
016ffb7c  000000df
016ffb80  00000001
016ffb84  07abbd50
016ffb88  01700048
016ffb8c  01700164
016ffb90  077d4958
016ffb94  017038c0
016ffb98  018401e4
016ffb9c  016ffb30
016ffba0  01700048
016ffba4  016ffc94
016ffba8  775d3145 ntdll!_except_handler4
016ffbac  011b3287 moduleA!KPdfExportOptions::`RTTI Base Class Array'+0x1b
016ffbb0  fffffffe
016ffbb4  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ffbb8  7758e0e2 ntdll!RtlAllocateHeap+0x206
016ffbbc  0184d514
016ffbc0  66a44dc0 QtCore4!QVectorData::shared_null
016ffbc4  00000018
016ffbc8  00000000
016ffbcc  017f8ed0
016ffbd0  01700358
016ffbd4  5d3f016a msvcr100!free+0x1c
016ffbd8  00000058
016ffbdc  00000000
016ffbe0  00000000
016ffbe4  017b94f0
016ffbe8  01700048
016ffbec  01700184
016ffbf0  03bc4448
016ffbf4  017007e8
016ffbf8  017f8ed0
016ffbfc  016ffb90
016ffc00  017f8cc0
016ffc04  016ffcdc
016ffc08  775d3145 ntdll!_except_handler4
016ffc0c  011b3287 moduleA!KPdfExportOptions::`RTTI Base Class Array'+0x1b
016ffc10  fffffffe
016ffc14  7758e394 ntdll!RtlpLowFragHeapAllocFromContext+0xaec
016ffc18  00000002
016ffc1c  00000000
016ffc20  00000020
016ffc24  00000058
016ffc28  016ffc48
016ffc2c  5d3f0269 msvcr100!malloc+0x4b
016ffc30  01840000
016ffc34  00000000
016ffc38  00000018
016ffc3c  0184d514
016ffc40  66a44dc0 QtCore4!QVectorData::shared_null
016ffc44  00000002
016ffc48  016ffc54
016ffc4c  000b072e
016ffc50  00000113
016ffc54  0b000002
016ffc58  00000000
016ffc5c  0125f8e4 moduleA!_TI2?AVruntime_errorstd+0x30d74
016ffc60  000003d3
016ffc64  0000030c
016ffc68  000b072e
016ffc6c  00000400
016ffc70  00000bbc
016ffc74  00000010
016ffc78  0125f8f4 moduleA!_TI2?AVruntime_errorstd+0x30d84
016ffc7c  000003d3
016ffc80  0000030c
016ffc84  018496d0
016ffc88  018496d0
016ffc8c  01000000 moduleA!_gradPathDict
016ffc90  016ffcdc
016ffc94  666f5d36 QtCore4!_alloca_probe_8+0x16260
016ffc98  00000000
016ffc9c  016ffca8
016ffca0  66263119 QtCore4!QGuiEventDispatcherWin32::processEvents+0x10 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication_win.cpp @ 1183]
016ffca4  00000024
016ffca8  016ffcb8
016ffcac  66356291 QtCore4!QEventLoop::processEvents+0x38 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventloop.cpp @ 150]
016ffcb0  00000024
016ffcb4  03bc4448
016ffcb8  016ffce8
016ffcbc  66356503 QtCore4!QEventLoop::exec+0xa9 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventloop.cpp @ 201]
016ffcc0  00000024
016ffcc4  0f3d8a50 moduleB!KxApplication::setDispatch [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 2286]
016ffcc8  0184d500
016ffccc  00000000
016ffcd0  03bc4448
016ffcd4  016ffcc0
016ffcd8  016ffcc4
016ffcdc  016ffd0c
016ffce0  666f5d66 QtCore4!_alloca_probe_8+0x16290
016ffce4  00000000
016ffce8  016ffd18
016ffcec  662d81d9 QtCore4!QCoreApplication::exec+0xa2 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1064]
016ffcf0  00000000
016ffcf4  0f3d8a50 moduleB!KxApplication::setDispatch [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 2286]
016ffcf8  016ffd98
016ffcfc  00000000
016ffd00  6675a988 QtCore4!QEventLoop::`vftable'
016ffd04  03bc4448
016ffd08  016ffcf0
016ffd0c  016ffd3c
016ffd10  666edc7a QtCore4!_alloca_probe_8+0xe1a4
016ffd14  00000000
016ffd18  016ffd48
016ffd1c  0f3d7f2b moduleB!KApplication::exec+0x34 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kapplication.cpp @ 754]
016ffd20  054adbeb
016ffd24  0f3d8a50 moduleB!KxApplication::setDispatch [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 2286]
016ffd28  0f3d7d6d moduleB!KxApplication::startupInfo [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 399]
016ffd2c  00000000
016ffd30  66741234 QtCore4!QEvent::`vftable'
016ffd34  00000000
016ffd38  016cffff
016ffd3c  016fff6c
016ffd40  0f482ba9 moduleB!_EH_epilog3_GS_align+0x52a0
016ffd44  00000000
016ffd48  016fff38
016ffd4c  003e07e6 moduleA!main+0x236 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\main.cpp @ 368]
016ffd50  0143d198 moduleA!__native_startup_lock
016ffd54  00000001
016ffd58  00000000
016ffd5c  000001fa
016ffd60  0058e394 moduleA!_allmul+0x91a74
016ffd64  03be3638
016ffd68  01733c50
016ffd6c  00000000
016ffd70  03c03108
016ffd74  00000000
016ffd78  01439618 moduleA!`KmoduleACoreEntry::GetInstance'::`2'::entry
016ffd7c  57a4a9ec moduleAapi!`KyApiEntry::GetInstance'::`2'::entry
016ffd80  00000000
016ffd84  03c69980
016ffd88  00000000
016ffd8c  00000000
016ffd90  00000000
016ffd94  00000000
016ffd98  0104b2ec moduleA!KxmoduleAApplication::`vftable'
016ffd9c  017b2e90
016ffda0  017cb818
016ffda4  00000000
016ffda8  03b84cd0
016ffdac  017c7e18
016ffdb0  017c7dd8
016ffdb4  017c7e28
016ffdb8  0172d640
016ffdbc  017cba88
016ffdc0  0543dcd0
016ffdc4  017ce5d0
016ffdc8  66a43d90 QtCore4!QString::shared_null
016ffdcc  017b1b00
016ffdd0  017b3ca8
016ffdd4  017c7e38
016ffdd8  03bc9a48
016ffddc  00000000
016ffde0  0566ce60
016ffde4  00000000
016ffde8  00000000
016ffdec  7758e000 ntdll!RtlFreeHeap+0xf6
016ffdf0  03cf4990
016ffdf4  66a41874 QtCore4!QListData::shared_null
016ffdf8  03c111b8
016ffdfc  66a41a40 QtCore4!QMapData::shared_null
016ffe00  0104b3ac moduleA!KxmoduleAApplication::`vftable'
016ffe04  0104b474 moduleA!KxmoduleAApplication::`vftable'
016ffe08  055d6488
016ffe0c  055d648c
016ffe10  055d648c
016ffe14  00000001
016ffe18  017cbaa0
016ffe1c  00000003
016ffe20  0104b4d4 moduleA!KxmoduleAApplication::`vftable'
016ffe24  055d6498
016ffe28  055d649c
016ffe2c  055d649c
016ffe30  017a0000
016ffe34  017cbab8
016ffe38  00000003
016ffe3c  0104b52c moduleA!KxmoduleAApplication::`vftable'
016ffe40  055d64b8
016ffe44  055d64bc
016ffe48  055d64bc
016ffe4c  7759a1fe ntdll!RtlEncodePointer+0x17
016ffe50  017cbad0
016ffe54  00000003
016ffe58  0104b584 moduleA!KxmoduleAApplication::`vftable'
016ffe5c  055d64c8
016ffe60  055d64cc
016ffe64  055d64cc
016ffe68  7757fb2a ntdll!NtQueryInformationProcess+0x12
016ffe6c  017cbae8
016ffe70  00000003
016ffe74  0104b5dc moduleA!KxmoduleAApplication::`vftable'
016ffe78  076add08
016ffe7c  076add10
016ffe80  076add10
016ffe84  0143d198 moduleA!__native_startup_lock
016ffe88  017cbb00
016ffe8c  00000003
016ffe90  0104b644 moduleA!KxmoduleAApplication::`vftable'
016ffe94  0172da50
016ffe98  03b910b0
016ffe9c  03b90278
016ffea0  053ed8c0
016ffea4  00000000
016ffea8  5d3fa900 msvcr100!_set_purecall_handler+0x1c
016ffeac  00000000
016ffeb0  054a0101
016ffeb4  05751ac8
016ffeb8  66a43d90 QtCore4!QString::shared_null
016ffebc  66a41a40 QtCore4!QMapData::shared_null
016ffec0  055d61d8
016ffec4  053eda78
016ffec8  0f3d5ef0 moduleB!KAppWinEventFilter::WinEventFilter [s:\rc_v9_personal_common_20150618\coding\shell2\kole\src\kaxserverview.cpp @ 3215]
016ffecc  00000000
016ffed0  66a41874 QtCore4!QListData::shared_null
016ffed4  5bbf91b8 officespace!KLocalPushMessageDispatch::staticMetaObject+0x554c
016ffed8  ffff0001
016ffedc  05671a08
016ffee0  66a41874 QtCore4!QListData::shared_null
016ffee4  00000000
016ffee8  00000000
016ffeec  0125c69e moduleA!_TI2?AVruntime_errorstd+0x2db2e
016ffef0  07e13bc0
016ffef4  6676c784 QtCore4!QLibrary::`vftable'
016ffef8  017bf550
016ffefc  057806c8
016fff00  ffffff01
016fff04  016ffe01
016fff08  03be3638
016fff0c  00000000
016fff10  00000000
016fff14  00000000
016fff18  fffffffe
016fff1c  0104b67c moduleA!KxmoduleAApplication::`vftable'
016fff20  004b0001 moduleA!KxmoduleACommandLoader::KxmoduleACommandLoader+0x4b71 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\kxmoduleAcommands.cpp @ 274]
016fff24  00000000
016fff28  00000000
016fff2c  005eb40f moduleA!KRangeTree::`dynamic initializer for 'NullNode''+0xf [s:\rc_v9_personal_common_20150618\coding\office\moduleA\moduleAdata\range\v2\tree\krangetree_nullnode.cpp @ 129]
016fff30  005eb89e moduleA!KRangeTree::`dynamic atexit destructor for 'NullNode''
016fff34  054bd797
016fff38  **016fff7c**
016fff3c  004bd253 moduleA!__tmainCRTStartup+0x122 [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 555]
016fff40  00000002
016fff44  017317e8
016fff48  018419b8
016fff4c  054bd5b7
016fff50  00000000
016fff54  00000000
016fff58  7efde000
016fff5c  00000000
016fff60  00000000
016fff64  016fff4c
016fff68  30a600f6
016fff6c  016fffb8
016fff70  004bd859 moduleA!_except_handler4
016fff74  0506ff4b
016fff78  00000000
**016fff7c**  **016fff88**
016fff80  768e336a kernel32!BaseThreadInitThunk+0xe
016fff84  7efde000
**016fff88**  **016fffc8**
016fff8c  77599882 ntdll!__RtlUserThreadStart+0x70
016fff90  7efde000
016fff94  772c1f27
016fff98  00000000
016fff9c  00000000
016fffa0  7efde000
016fffa4  00000000
016fffa8  00000000
016fffac  00000000
016fffb0  016fff94
016fffb4  00000000
016fffb8  ffffffff
016fffbc  775d3145 ntdll!_except_handler4
016fffc0  011b25af moduleA!kfc::KComObject<KSystem,kfc::KMultiThreadModel>::`RTTI Base Class Array'+0x2b
016fffc4  00000000
**016fffc8**  016fffe0
016fffcc  77599855 ntdll!_RtlUserThreadStart+0x1b
016fffd0  004bd374 moduleA!mainCRTStartup [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 361]
016fffd4  7efde000
016fffd8  00000000
016fffdc  00000000
016fffe0  00000000
016fffe4  00000000
016fffe8  004bd374 moduleA!mainCRTStartup [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 361]
016fffec  7efde000
016ffff0  00000000
016ffff4  00000000
016ffff8  00000000
016ffffc  00000000

4. 回溯重建

方法介绍:根据调用函数 prologue 和 epilogue 的特点从栈底进行调用堆栈重建(上面的堆栈中,左边的地址是堆栈地址,右边是它的值)
步骤:
观察3中 xxx 部分,我们发现,它们有一种奇怪的规律。如 ntdll!_RtlUserThreadStart+0x1b 左上方的 016fffc8 与 ntdll!__RtlUserThreadStart+0x70 右上方的是一样的!
事实上,这是函数在调用时的一种约定,如果继续找下去,我们会发现这种规律会延续下去,最后我们惊讶地发现,我们找到了一条调用链。这正是我们重建的调用栈。
1> 找到线程开始标志 ntdll!_RtlUserThreadStart+0x1b (3173行)
2> 找到上一行(3172)左边的地址, 查找与该串相同的地址(由于prologue会记录回调地址,可以找到对应),此处找到 3156行 ,查看
他下一行(3157)是否有符号(加载pdb后,若该堆栈与符号对应会显示函数名字和偏移),若有符号,可以认为 ntdll!__RtlUserThreadStart+0x70(3173行) 的下
一个调用是 ntdll!__RtlUserThreadStart+0x70(3157行)
3> 我们会发现,这样找下去,一直能找到该种对应关系,当我们找到栈顶的调用符号时,完整的调用可以确立(除非编译器进行了优化)
4> 此处编译器可能进行了优化,但我们仍能追溯到 QtNetwork4!QSslSocketBackendPrivate::initSslContext+0x88, 这是整个调用堆栈中我们暂时能找到的最后的调用

尝试重建结果如下:

016fd954  5c612426 QtNetwork4!QSslSocketBackendPrivate::initSslContext+0x88 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket_openssl.cpp @ 253]
016fd9d8  5c6137c5 QtNetwork4!QSslSocketBackendPrivate::startClientEncryption+0x8 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\ssl\qsslsocket_openssl.cpp @ 880]
016fda04  5c60fba8 QtNetwork4!QSslSocket::qt_metacall+0xdc [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\tmp\moc\release_shared\moc_qsslsocket.cpp @ 116]
016fda18  66495c9a QtCore4!QMetaObject::metacall+0x28 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qmetaobject.cpp @ 238]
016fda2c  664ae285 QtCore4!QMetaObject::activate+0x23a [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qobject.cpp @ 3292]
016fda94  5c5b310f QtNetwork4!QAbstractSocket::connected+0x10 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\tmp\moc\release_shared\moc_qabstractsocket.cpp @ 131]
016fdacc  5c5b6077 QtNetwork4!QAbstractSocketPrivate::_q_testConnection+0x40 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\network\socket\qabstractsocket.cpp @ 1067]
016fdae8  66259e37 QtCore4!QApplicationPrivate::notify_helper+0x98 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4519]
016fdb00  6625ae41 QtCore4!QApplication::notify+0x197 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication.cpp @ 4477]
016fdcf0  0f3dfb1e moduleB!KxApplication::notify+0xde [s:\rc_v9_personal_common_20150618\coding\shell2\kxshare\src\kxapplication.cpp @ 1792]
016fdd30  662d5a9e QtCore4!QCoreApplication::notifyInternal+0x6b [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 800]
016fdd6c  6621436a QtCore4!QCoreApplication::sendEvent+0x26 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.h @ 215]
016fdd7c  66354a32 QtCore4!qt_internal_proc+0x110 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 486]
016fddd8  76ef62fa user32!InternalCallWinProc+0x23
016fde04  76ef6d3a user32!UserCallWinProcCheckWow+0x109
016fde7c  76ef77c4 user32!DispatchMessageWorker+0x3bc
016fdedc  76ef788a user32!DispatchMessageW+0xf
016fdeec  66355f1f QtCore4!QEventDispatcherWin32::processEvents+0x3bf [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventdispatcher_win.cpp @ 810]
016ffca0  66263119 QtCore4!QGuiEventDispatcherWin32::processEvents+0x10 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\gui\kernel\qapplication_win.cpp @ 1183]
016ffcac  66356291 QtCore4!QEventLoop::processEvents+0x38 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventloop.cpp @ 150]
016ffcbc  66356503 QtCore4!QEventLoop::exec+0xa9 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qeventloop.cpp @ 201]
016ffcec  662d81d9 QtCore4!QCoreApplication::exec+0xa2 [e:\rc_v9_personal_common_20150618\moduleAenv\3rdparty\qt\src\corelib\kernel\qcoreapplication.cpp @ 1064]
016ffd1c  0f3d7f2b moduleB!KApplication::exec+0x34 [s:\rc_v9_personal_common_20150618\coding\shell2\kcomctl\src\kapplication.cpp @ 754]
016ffd4c  003e07e6 moduleA!main+0x236 [s:\rc_v9_personal_common_20150618\coding\shell2\moduleA\src\main.cpp @ 368]
016fff3c  004bd253 moduleA!__tmainCRTStartup+0x122 [f:\dd\vctools\crt_bld\self_x86\crt\src\crtexe.c @ 555]
016fff80  768e336a kernel32!BaseThreadInitThunk+0xe
016fff8c  77599882 ntdll!__RtlUserThreadStart+0x70
016fffcc  77599855 ntdll!_RtlUserThreadStart+0x1b

自动化

由于重建堆栈有较明确的规律,并且在重建堆栈的过程中,容易碰到上层堆栈有多个对应的情况,如果人工去找的话,实在是苦不堪言,也容易出错。只要堆栈中的函数都有完整的prologue和epilogue的过程,这一动作完全可以由程序替我们做,得出所有可能的堆栈。
此处尝试用python实现,在2.7下通过。

#!/usr/bin/python
# -*- coding: UTF-8 -*-
import re

class StackAnalyzer:
	m_len = 0
	m_Ebp = ()
	m_RetAddr = ()
	m_PdbStr = ()

	def __init__(self):
		self.m_file = open("result.txt", "w")

	def __del__(self):
		self.m_file.close()

	def readFileLines(self):
		filePath = raw_input("请输入要分析的windbg堆栈文件(by dds):");
		fo = open(filePath, "r+")
		lines = fo.readlines(0xfffff)
		fo.close()
		return lines

	def readStackInfo(self):
		lines = self.readFileLines()
		for line in lines:
			regexResult = re.search(r'\s*(\w{8})\s*(\w{8})\s*(.*)\s*', line, re.M|re.I)
			if regexResult:
				self.m_Ebp = (regexResult.group(1),) + self.m_Ebp
				self.m_RetAddr = (regexResult.group(2),) + self.m_RetAddr
				self.m_PdbStr = (regexResult.group(3),) + self.m_PdbStr

		self.m_len = len(self.m_Ebp)

	def figureAndPrint(self, indexNow, traceData = ""):
		traceData = self.m_Ebp[indexNow] + "  " + self.m_RetAddr[indexNow] + "  " + self.m_PdbStr[indexNow] + "\n" + traceData
		if indexNow + 2 > self.m_len:
			self.m_file.write(traceData + "\n\n")
			return

		findMatch = False
		for indexSearch in range(indexNow + 2, self.m_len - 1):
			if self.m_Ebp[indexNow + 1] == self.m_RetAddr[indexSearch + 1]:
				self.figureAndPrint(indexSearch, traceData)
				findMatch = True

		if not findMatch:
			self.m_file.write(traceData + "\n\n")

	def doAnalyze(self):
		self.readStackInfo()
		rootStackIndex = ()

		for index in range(self.m_len):
			strData = re.search(r'.*ntdll!_RtlUserThreadStart.*', self.m_PdbStr[index], re.M|re.I)
			if strData:
				for indx in rootStackIndex:
					if self.m_Ebp[indx + 1] == self.m_RetAddr[index + 1]:
						break
				else:
					self.figureAndPrint(index)

analyzer = StackAnalyzer()
analyzer.doAnalyze()
print "==== 分析完成,结果请查看 result.txt ===="

如何判断重建的堆栈是否合理

根据prologue的性质,prologue时,会把eip下一条作为返回地址记录在栈上。因此,判断一次重建是否合理,我们只需要从顶层开始,逐条查看返回地址对应的上一条指令是否为call指令即可。

代码亦可进入查看:
https://github.com/304766663/auto_rebuilt_stack_by_stack_info

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值