From 7284840665f91efee77d51b0f239fe3430134cd7 Mon Sep 17 00:00:00 2001 From: Paolo 'VoidSec' Stagno Date: Mon, 12 Jul 2021 18:02:41 +0200 Subject: [PATCH] cleaning --- .../CUR Crash Samples/1_test_crash.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/2_test_crash_eip.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/CUR Crash Samples.zip | Bin 0 -> 147030 bytes .../CUR Crash Samples/test_10083.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_10365.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_10563.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_10624.cur | Bin 338 -> 0 bytes .../CUR Crash Samples/test_10665.cur | Bin 1610 -> 0 bytes .../CUR Crash Samples/test_11010.cur | Bin 816 -> 0 bytes .../CUR Crash Samples/test_11655.cur | Bin 183 -> 0 bytes .../CUR Crash Samples/test_11849.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_11958.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_12079.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_12254.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_12642.cur | Bin 1740 -> 0 bytes .../CUR Crash Samples/test_13226.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_13605.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_13760.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_14180.cur | Bin 170 -> 0 bytes .../CUR Crash Samples/test_14348.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_14412.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_14786.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_15040.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_15228.cur | Bin 867 -> 0 bytes .../CUR Crash Samples/test_15660.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_15718.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_15880.cur | Bin 1467 -> 0 bytes .../CUR Crash Samples/test_16249.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_16416.cur | Bin 1114 -> 0 bytes .../CUR Crash Samples/test_16450.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_16566.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_16574.cur | Bin 283 -> 0 bytes .../CUR Crash Samples/test_1755.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_17789.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_17952.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_18125.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_18162.cur | Bin 919 -> 0 bytes .../CUR Crash Samples/test_1849.cur | Bin 1703 -> 0 bytes .../CUR Crash Samples/test_18495.cur | Bin 1568 -> 0 bytes .../CUR Crash Samples/test_18634.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_18652.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19266.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19411.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19480.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19488.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19852.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_19928.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_20056.cur | Bin 1753 -> 0 bytes .../CUR Crash Samples/test_2015.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_2021607.cur | Bin 45464 -> 0 bytes .../CUR Crash Samples/test_2022832.cur | Bin 136606 -> 0 bytes .../CUR Crash Samples/test_20394.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_20722.cur | Bin 1551 -> 0 bytes .../CUR Crash Samples/test_20920.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_20989.cur | Bin 1686 -> 0 bytes .../CUR Crash Samples/test_21332.cur | Bin 1797 -> 0 bytes .../CUR Crash Samples/test_21550.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_21803.cur | Bin 1642 -> 0 bytes .../CUR Crash Samples/test_21991.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_22022.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_22260.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_22512.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_22837.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_23060.cur | Bin 196 -> 0 bytes .../CUR Crash Samples/test_23367.cur | Bin 177 -> 0 bytes .../CUR Crash Samples/test_23849.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_24310.cur | Bin 1691 -> 0 bytes .../CUR Crash Samples/test_24618.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_25142.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_25147.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_25396.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_25903.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_2595.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_2623.cur | Bin 1722 -> 0 bytes .../CUR Crash Samples/test_26614.cur | Bin 1702 -> 0 bytes .../CUR Crash Samples/test_27102.cur | Bin 1751 -> 0 bytes .../CUR Crash Samples/test_27116.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_27387.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_27794.cur | Bin 161 -> 0 bytes .../CUR Crash Samples/test_2781.cur | Bin 1804 -> 0 bytes .../CUR Crash Samples/test_28527.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_28687.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_2894.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_29083.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_29254.cur | Bin 500 -> 0 bytes .../CUR Crash Samples/test_2930.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_29415.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_29811.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_30181.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_30331.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3089.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_31521.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_31724.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_31937.cur | Bin 1810 -> 0 bytes .../CUR Crash Samples/test_32031.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_32032.cur | Bin 690 -> 0 bytes .../CUR Crash Samples/test_32304.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_32513.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3264.cur | Bin 1683 -> 0 bytes .../CUR Crash Samples/test_32704.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3306.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_33306.cur | Bin 1374 -> 0 bytes .../CUR Crash Samples/test_33773.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3384.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3403.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3422.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_34479.cur | Bin 1843 -> 0 bytes .../CUR Crash Samples/test_34574.cur | Bin 673 -> 0 bytes .../CUR Crash Samples/test_35711.cur | Bin 230 -> 0 bytes .../CUR Crash Samples/test_35877.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_36074.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_36259.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_36262.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_36850.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_37329.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_37345.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_37672.cur | Bin 616 -> 0 bytes .../CUR Crash Samples/test_38066.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_3814.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_39621.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_41221.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_41618.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_41664.cur | Bin 177 -> 0 bytes .../CUR Crash Samples/test_42112.cur | Bin 1052 -> 0 bytes .../CUR Crash Samples/test_42799.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_42935.cur | Bin 313 -> 0 bytes .../CUR Crash Samples/test_42944.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_43368.cur | Bin 294 -> 0 bytes .../CUR Crash Samples/test_4404.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_44518.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_44546.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_44712.cur | Bin 1635 -> 0 bytes .../CUR Crash Samples/test_45316.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_45348.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_45480.cur | Bin 1732 -> 0 bytes .../CUR Crash Samples/test_45672.cur | Bin 457 -> 0 bytes .../CUR Crash Samples/test_457.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_46226.cur | Bin 1607 -> 0 bytes .../CUR Crash Samples/test_46544.cur | Bin 1803 -> 0 bytes .../CUR Crash Samples/test_47003.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_47287.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_47308.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_48494.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_48637.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_49032.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_491.cur | Bin 1687 -> 0 bytes .../CUR Crash Samples/test_49136.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_49386.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_49829.cur | Bin 148 -> 0 bytes .../CUR Crash Samples/test_50273.cur | Bin 1623 -> 0 bytes .../CUR Crash Samples/test_50339.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_506.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_50623.cur | Bin 841 -> 0 bytes .../CUR Crash Samples/test_527.cur | Bin 804 -> 0 bytes .../CUR Crash Samples/test_53026.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_53608.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_54155.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_54259.cur | Bin 513 -> 0 bytes .../CUR Crash Samples/test_54619.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_54660.cur | Bin 621 -> 0 bytes .../CUR Crash Samples/test_54749.cur | Bin 583 -> 0 bytes .../CUR Crash Samples/test_54858.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_55013.cur | Bin 336 -> 0 bytes .../CUR Crash Samples/test_55136.cur | Bin 473 -> 0 bytes .../CUR Crash Samples/test_55199.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_5552.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_56024.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_56596.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_56801.cur | Bin 827 -> 0 bytes .../CUR Crash Samples/test_57060.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_57342.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_57725.cur | Bin 1656 -> 0 bytes .../CUR Crash Samples/test_57855.cur | Bin 1748 -> 0 bytes .../CUR Crash Samples/test_58.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_58193.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_58308.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_58381.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_59280.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_59416.cur | Bin 1723 -> 0 bytes .../CUR Crash Samples/test_59510.cur | Bin 1760 -> 0 bytes .../CUR Crash Samples/test_59948.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_60149.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_60524.cur | Bin 158 -> 0 bytes .../CUR Crash Samples/test_60783.cur | Bin 1016 -> 0 bytes .../CUR Crash Samples/test_60826.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_60844.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_60852.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_61199.cur | Bin 1719 -> 0 bytes .../CUR Crash Samples/test_62365.cur | Bin 362 -> 0 bytes .../CUR Crash Samples/test_63158.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_63313.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_63372.cur | Bin 1626 -> 0 bytes .../CUR Crash Samples/test_63869.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_65698.cur | Bin 1726 -> 0 bytes .../CUR Crash Samples/test_65850.cur | Bin 454 -> 0 bytes .../CUR Crash Samples/test_66004.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_66952.cur | Bin 389 -> 0 bytes .../CUR Crash Samples/test_66995.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_67172.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_67286.cur | Bin 1724 -> 0 bytes .../CUR Crash Samples/test_68110.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_68554.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_68834.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_69188.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_69360.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_69818.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_7015.cur | Bin 1745 -> 0 bytes .../CUR Crash Samples/test_75112.cur | Bin 136606 -> 0 bytes .../CUR Crash Samples/test_7774.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_7907.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_7962.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_7998.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_826.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_8354.cur | Bin 1668 -> 0 bytes .../CUR Crash Samples/test_850.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_8890.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_92196.cur | Bin 136606 -> 0 bytes .../CUR Crash Samples/test_9347.cur | Bin 1598 -> 0 bytes .../CUR Crash Samples/test_9913.cur | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../16450/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../16450/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 338 -> 0 bytes .../10624/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../10624/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 338 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../11849/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../11849/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../32304/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../32304/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Exploitable Crash Triage.zip | Bin 0 -> 2001389 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 170 -> 0 bytes .../14180/WindowsDebugEngine_StackTrace.txt | 171 -------------- .../14180/WindowsDebugEngine_description.txt | 171 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 170 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../17952/WindowsDebugEngine_StackTrace.txt | 171 -------------- .../17952/WindowsDebugEngine_description.txt | 171 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../18125/WindowsDebugEngine_StackTrace.txt | 172 -------------- .../18125/WindowsDebugEngine_description.txt | 172 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1568 -> 0 bytes .../18495/WindowsDebugEngine_StackTrace.txt | 172 -------------- .../18495/WindowsDebugEngine_description.txt | 172 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 1568 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19852/WindowsDebugEngine_StackTrace.txt | 172 -------------- .../19852/WindowsDebugEngine_description.txt | 172 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../2930/WindowsDebugEngine_StackTrace.txt | 172 -------------- .../2930/WindowsDebugEngine_description.txt | 172 -------------- .../2930/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 148 -> 0 bytes .../49829/WindowsDebugEngine_StackTrace.txt | 172 -------------- .../49829/WindowsDebugEngine_description.txt | 172 -------------- .../action_1_Output_Unknown Action 1.txt | Bin 148 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../10083/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../10083/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../10365/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../10365/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 816 -> 0 bytes .../11010/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../11010/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 816 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../12079/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../12079/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../12254/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../12254/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../13226/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../13226/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../13760/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../13760/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../14348/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../14348/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../14786/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../14786/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../15040/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../15040/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 867 -> 0 bytes .../15228/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../15228/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 867 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../15718/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../15718/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1114 -> 0 bytes .../16416/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../16416/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1114 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../16566/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../16566/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../1755/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../1755/WindowsDebugEngine_description.txt | 174 --------------- .../1755/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../17789/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../17789/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 919 -> 0 bytes .../18162/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../18162/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 919 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19411/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../19411/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19480/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../19480/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1753 -> 0 bytes .../20056/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../20056/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1753 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../20920/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../20920/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../21550/WindowsDebugEngine_StackTrace.txt | 175 --------------- .../21550/WindowsDebugEngine_description.txt | 175 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../21991/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../21991/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../22022/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../22022/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../22260/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../22260/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../22512/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../22512/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 177 -> 0 bytes .../23367/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../23367/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 177 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../25396/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../25396/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../27116/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../27116/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../27387/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../27387/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 161 -> 0 bytes .../27794/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../27794/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 161 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../28527/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../28527/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../29083/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../29083/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../30181/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../30181/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../31521/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../31521/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../31724/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../31724/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../32031/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../32031/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../32704/WindowsDebugEngine_StackTrace.txt | 175 --------------- .../32704/WindowsDebugEngine_description.txt | 175 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3306/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../3306/WindowsDebugEngine_description.txt | 191 ---------------- .../3306/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../33773/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../33773/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3384/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../3384/WindowsDebugEngine_description.txt | 191 ---------------- .../3384/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3403/WindowsDebugEngine_StackTrace.txt | 190 ---------------- .../3403/WindowsDebugEngine_description.txt | 190 ---------------- .../3403/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3422/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../3422/WindowsDebugEngine_description.txt | 174 --------------- .../3422/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../36074/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../36074/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../36259/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../36259/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../36262/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../36262/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../36850/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../36850/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../37329/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../37329/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../37345/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../37345/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3814/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../3814/WindowsDebugEngine_description.txt | 173 --------------- .../3814/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../41618/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../41618/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 177 -> 0 bytes .../41664/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../41664/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 177 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1052 -> 0 bytes .../42112/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../42112/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1052 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../45316/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../45316/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../45348/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../45348/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 457 -> 0 bytes .../45672/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../45672/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 457 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../457/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../457/WindowsDebugEngine_description.txt | 174 --------------- .../457/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../47287/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../47287/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../48637/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../48637/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../49032/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../49032/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../49136/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../49136/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../50339/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../50339/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 841 -> 0 bytes .../50623/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../50623/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 841 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.cur | Bin 804 -> 0 bytes .../527/WindowsDebugEngine_StackTrace.txt | 190 ---------------- .../527/WindowsDebugEngine_description.txt | 190 ---------------- .../527/action_1_Output_Unknown Action 1.txt | Bin 804 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../53026/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../53026/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../53608/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../53608/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 513 -> 0 bytes .../54259/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../54259/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 513 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../54858/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../54858/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 473 -> 0 bytes .../55136/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../55136/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 473 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 827 -> 0 bytes .../56801/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../56801/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 827 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../57060/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../57060/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../57342/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../57342/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../59280/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../59280/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../60149/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../60149/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 158 -> 0 bytes .../60524/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../60524/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 158 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1016 -> 0 bytes .../60783/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../60783/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1016 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../60826/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../60826/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../63313/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../63313/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../66004/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../66004/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1724 -> 0 bytes .../67286/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../67286/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1724 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../68110/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../68110/WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../68834/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../68834/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../69188/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../69188/WindowsDebugEngine_description.txt | 174 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../7907/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../7907/WindowsDebugEngine_description.txt | 173 --------------- .../7907/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../7962/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../7962/WindowsDebugEngine_description.txt | 174 --------------- .../7962/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../7998/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../7998/WindowsDebugEngine_description.txt | 174 --------------- .../7998/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../826/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../826/WindowsDebugEngine_description.txt | 173 --------------- .../826/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../850/WindowsDebugEngine_StackTrace.txt | 190 ---------------- .../850/WindowsDebugEngine_description.txt | 190 ---------------- .../850/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../8890/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../8890/WindowsDebugEngine_description.txt | 173 --------------- .../8890/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../9347/WindowsDebugEngine_StackTrace.txt | 174 --------------- .../9347/WindowsDebugEngine_description.txt | 174 --------------- .../9347/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../2022832/WindowsDebugEngine_StackTrace.txt | 175 --------------- .../WindowsDebugEngine_description.txt | 175 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 45464 -> 0 bytes .../2021607/WindowsDebugEngine_StackTrace.txt | 173 --------------- .../WindowsDebugEngine_description.txt | 173 --------------- .../action_1_Output_Unknown Action 1.txt | Bin 45464 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1467 -> 0 bytes .../15880/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../15880/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1467 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../18634/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../18634/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../20394/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../20394/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1551 -> 0 bytes .../20722/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../20722/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1551 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../24618/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../24618/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 500 -> 0 bytes .../29254/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../29254/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 500 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../29811/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../29811/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../30331/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../30331/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1810 -> 0 bytes .../31937/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../31937/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1810 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../32513/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../32513/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1374 -> 0 bytes .../33306/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../33306/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1374 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 616 -> 0 bytes .../37672/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../37672/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 616 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../39621/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../39621/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../4404/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../4404/WindowsDebugEngine_description.txt | 192 ---------------- .../4404/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../44518/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../44518/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1635 -> 0 bytes .../44712/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../44712/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1635 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1607 -> 0 bytes .../46226/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../46226/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1607 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../48494/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../48494/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../54619/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../54619/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../5552/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../5552/WindowsDebugEngine_description.txt | 192 ---------------- .../5552/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../58193/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../58193/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../59948/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../59948/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../60852/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../60852/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../67172/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../67172/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../68554/WindowsDebugEngine_StackTrace.txt | 191 ---------------- .../68554/WindowsDebugEngine_description.txt | 191 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../69818/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../69818/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1610 -> 0 bytes .../10665/WindowsDebugEngine_StackTrace.txt | 195 ---------------- .../10665/WindowsDebugEngine_description.txt | 195 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1610 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../15660/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../15660/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../22837/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../22837/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../25142/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../25142/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1722 -> 0 bytes .../2623/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../2623/WindowsDebugEngine_description.txt | 194 ---------------- .../2623/action_1_Output_Unknown Action 1.txt | Bin 1722 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1702 -> 0 bytes .../26614/WindowsDebugEngine_StackTrace.txt | 192 ---------------- .../26614/WindowsDebugEngine_description.txt | 192 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1702 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1843 -> 0 bytes .../34479/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../34479/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1843 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../41221/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../41221/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1803 -> 0 bytes .../46544/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../46544/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1803 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1760 -> 0 bytes .../59510/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../59510/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1760 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../66995/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../66995/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../10563/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../10563/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 183 -> 0 bytes .../11655/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../11655/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 183 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1740 -> 0 bytes .../12642/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../12642/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1740 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../14412/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../14412/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../16249/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../16249/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 283 -> 0 bytes .../16574/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../16574/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 283 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1703 -> 0 bytes .../1849/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../1849/WindowsDebugEngine_description.txt | 194 ---------------- .../1849/action_1_Output_Unknown Action 1.txt | Bin 1703 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../18652/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../18652/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19266/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../19266/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19488/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../19488/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../19928/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../19928/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../2015/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../2015/WindowsDebugEngine_description.txt | 194 ---------------- .../2015/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1686 -> 0 bytes .../20989/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../20989/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1686 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1797 -> 0 bytes .../21332/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../21332/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1797 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1642 -> 0 bytes .../21803/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../21803/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1642 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 196 -> 0 bytes .../23060/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../23060/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 196 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../23849/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../23849/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1691 -> 0 bytes .../24310/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../24310/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1691 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../25147/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../25147/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../2595/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../2595/WindowsDebugEngine_description.txt | 194 ---------------- .../2595/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1751 -> 0 bytes .../27102/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../27102/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1751 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1804 -> 0 bytes .../2781/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../2781/WindowsDebugEngine_description.txt | 193 ---------------- .../2781/action_1_Output_Unknown Action 1.txt | Bin 1804 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../28687/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../28687/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../2894/WindowsDebugEngine_StackTrace.txt | 210 ------------------ .../2894/WindowsDebugEngine_description.txt | 210 ------------------ .../2894/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../29415/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../29415/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../3089/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../3089/WindowsDebugEngine_description.txt | 194 ---------------- .../3089/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 690 -> 0 bytes .../32032/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../32032/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 690 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1683 -> 0 bytes .../3264/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../3264/WindowsDebugEngine_description.txt | 193 ---------------- .../3264/action_1_Output_Unknown Action 1.txt | Bin 1683 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 673 -> 0 bytes .../34574/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../34574/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 673 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 230 -> 0 bytes .../35711/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../35711/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 230 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../35877/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../35877/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../38066/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../38066/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../42799/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../42799/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 313 -> 0 bytes .../42935/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../42935/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 313 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../42944/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../42944/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 294 -> 0 bytes .../43368/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../43368/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 294 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../44546/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../44546/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1732 -> 0 bytes .../45480/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../45480/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1732 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../47003/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../47003/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../47308/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../47308/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1687 -> 0 bytes .../491/WindowsDebugEngine_StackTrace.txt | 209 ----------------- .../491/WindowsDebugEngine_description.txt | 209 ----------------- .../491/action_1_Output_Unknown Action 1.txt | Bin 1687 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1623 -> 0 bytes .../50273/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../50273/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1623 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../506/WindowsDebugEngine_StackTrace.txt | 210 ------------------ .../506/WindowsDebugEngine_description.txt | 210 ------------------ .../506/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../54155/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../54155/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 621 -> 0 bytes .../54660/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../54660/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 621 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 583 -> 0 bytes .../54749/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../54749/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 583 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 336 -> 0 bytes .../55013/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../55013/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 336 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../55199/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../55199/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../56596/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../56596/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1656 -> 0 bytes .../57725/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../57725/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1656 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1748 -> 0 bytes .../57855/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../57855/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1748 -> 0 bytes .../58/Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../58/WindowsDebugEngine_StackTrace.txt | 210 ------------------ .../58/WindowsDebugEngine_description.txt | 210 ------------------ .../58/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../58381/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../58381/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1723 -> 0 bytes .../59416/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../59416/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1723 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../60844/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../60844/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1719 -> 0 bytes .../61199/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../61199/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1719 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 362 -> 0 bytes .../62365/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../62365/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 362 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../63158/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../63158/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1626 -> 0 bytes .../63372/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../63372/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1626 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../63869/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../63869/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1726 -> 0 bytes .../65698/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../65698/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1726 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 454 -> 0 bytes .../65850/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../65850/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 454 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 389 -> 0 bytes .../66952/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../66952/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 389 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../69360/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../69360/WindowsDebugEngine_description.txt | 194 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1745 -> 0 bytes .../7015/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../7015/WindowsDebugEngine_description.txt | 194 ---------------- .../7015/action_1_Output_Unknown Action 1.txt | Bin 1745 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../7774/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../7774/WindowsDebugEngine_description.txt | 194 ---------------- .../7774/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1668 -> 0 bytes .../8354/WindowsDebugEngine_StackTrace.txt | 194 ---------------- .../8354/WindowsDebugEngine_description.txt | 194 ---------------- .../8354/action_1_Output_Unknown Action 1.txt | Bin 1668 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../9913/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../9913/WindowsDebugEngine_description.txt | 193 ---------------- .../9913/action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../75112/WindowsDebugEngine_StackTrace.txt | 193 ---------------- .../75112/WindowsDebugEngine_description.txt | 193 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../92196/WindowsDebugEngine_StackTrace.txt | 195 ---------------- .../92196/WindowsDebugEngine_description.txt | 195 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 136606 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../13605/WindowsDebugEngine_StackTrace.txt | 195 ---------------- .../13605/WindowsDebugEngine_description.txt | 195 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../49386/WindowsDebugEngine_StackTrace.txt | 196 ---------------- .../49386/WindowsDebugEngine_description.txt | 196 ---------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../11958/WindowsDebugEngine_StackTrace.txt | 154 ------------- .../11958/WindowsDebugEngine_description.txt | 154 ------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../25903/WindowsDebugEngine_StackTrace.txt | 154 ------------- .../25903/WindowsDebugEngine_description.txt | 154 ------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../56024/WindowsDebugEngine_StackTrace.txt | 153 ------------- .../56024/WindowsDebugEngine_description.txt | 153 ------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../Initial/SystemDebugger_description.txt | 2 - .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes .../58308/WindowsDebugEngine_StackTrace.txt | 153 ------------- .../58308/WindowsDebugEngine_description.txt | 153 ------------- .../action_1_Output_Unknown Action 1.txt | Bin 1598 -> 0 bytes 1300 files changed, 79848 deletions(-) delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/1_test_crash.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/2_test_crash_eip.cur create mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/CUR Crash Samples.zip delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10083.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10365.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10563.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10624.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10665.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11010.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11655.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11849.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11958.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12079.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12254.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12642.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13226.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13605.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13760.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14180.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14348.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14412.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14786.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15040.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15228.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15660.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15718.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15880.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16249.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16416.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16450.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16566.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16574.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_1755.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17789.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17952.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18125.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18162.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_1849.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18495.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18634.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18652.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19266.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19411.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19480.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19488.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19852.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19928.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20056.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2015.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2021607.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2022832.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20394.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20722.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20920.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20989.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21332.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21550.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21803.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21991.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22022.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22260.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22512.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22837.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23060.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23367.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23849.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_24310.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_24618.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25142.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25147.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25396.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25903.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2595.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2623.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_26614.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27102.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27116.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27387.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27794.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2781.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28527.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28687.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2894.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29083.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29254.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2930.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29415.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29811.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_30181.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_30331.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3089.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31521.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31724.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31937.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32031.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32032.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32304.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32513.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3264.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32704.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3306.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33306.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33773.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3384.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3403.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3422.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_34479.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_34574.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35711.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35877.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36074.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36259.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36262.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36850.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37329.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37345.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37672.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_38066.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3814.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_39621.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_41221.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_41618.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_41664.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42112.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42799.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42935.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42944.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_43368.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_4404.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_44518.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_44546.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_44712.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45316.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45348.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45480.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45672.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_457.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46226.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46544.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_47003.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_47287.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_47308.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_48494.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_48637.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49032.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_491.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49136.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49386.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49829.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_50273.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_50339.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_506.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_50623.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_527.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53026.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53608.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54155.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54259.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54619.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54660.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54749.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54858.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55013.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55136.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55199.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_5552.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_56024.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_56596.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_56801.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57060.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57342.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57725.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57855.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58193.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58308.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58381.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59280.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59416.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59510.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59948.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60149.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60524.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60783.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60826.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60844.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60852.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_61199.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_62365.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63158.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63313.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63372.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63869.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_65698.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_65850.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66004.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66952.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66995.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67172.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67286.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68110.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68554.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68834.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69188.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69360.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69818.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7015.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_75112.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7774.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7907.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7962.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7998.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_826.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_8354.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_850.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_8890.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_92196.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_9347.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_9913.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/action_1_Output_Unknown Action 1.txt create mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/Exploitable Crash Triage.zip delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16566/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16566/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16566/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16566/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16566/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/action_1_Output_Unknown Action 1.cur delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54259/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54259/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54259/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54259/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54259/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60783/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60783/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60783/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60783/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60783/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60826/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60826/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60826/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60826/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60826/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7907/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7907/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7907/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7907/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7907/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x4620527c/2021607/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x4620527c/2021607/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x4620527c/2021607/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x4620527c/2021607/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x4620527c/2021607/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/15880/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/15880/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/15880/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/15880/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/15880/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/18634/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/18634/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/18634/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/18634/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/18634/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20394/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20394/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20394/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20394/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20394/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20722/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20722/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20722/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20722/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/20722/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/24618/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/24618/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/24618/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/24618/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/24618/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29254/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29254/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29254/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29254/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29254/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29811/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29811/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29811/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29811/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/29811/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/30331/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/30331/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/30331/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/30331/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/30331/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/31937/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/31937/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/31937/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/31937/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/31937/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/32513/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/32513/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/32513/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/32513/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/32513/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/39621/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/39621/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/39621/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/39621/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/39621/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/4404/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/4404/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/4404/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/4404/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/4404/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44518/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44518/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44518/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44518/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44518/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/54619/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/54619/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/54619/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/54619/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/54619/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/5552/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/5552/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/5552/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/5552/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/5552/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/58193/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/58193/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/58193/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/58193/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/58193/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/59948/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/59948/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/59948/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/59948/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/59948/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/60852/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/60852/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/60852/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/60852/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/60852/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/69818/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/69818/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/69818/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/69818/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/69818/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/10665/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/10665/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/10665/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/10665/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/10665/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/46544/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/46544/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/46544/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/46544/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/46544/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23060/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23060/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23060/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23060/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23060/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23849/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23849/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23849/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23849/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/23849/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47003/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47003/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47003/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47003/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47003/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/50273/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/50273/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/50273/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/50273/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/50273/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55199/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55199/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55199/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55199/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55199/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/56596/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/56596/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/56596/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/56596/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/56596/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/61199/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/61199/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/61199/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/61199/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/61199/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63869/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63869/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63869/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63869/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63869/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x306e2077/92196/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x306e2077/92196/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x306e2077/92196/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x306e2077/92196/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x306e2077/92196/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/SystemDebugger_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/action_1_Output_Unknown Action 1.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_StackTrace.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_description.txt delete mode 100644 windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/action_1_Output_Unknown Action 1.txt diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/1_test_crash.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/1_test_crash.cur deleted file mode 100644 index 2f3b540d7ed6f196b9cfda08e8015c4eef9ccf79..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!SqIX>tKMIijKa4oT)eH+#}=$Vx0zUwj3cxp%b7TbA%Yk(vjLU z1Y!U0@yUn{cnL!L@yGxB;Flz#8Gh?EkzrOupNXh#396=lGoo+seSr@t^c`mChKFZc z&iQQY-2od*>7qSmvnhIF8;Vwj3-auV7t}@YZd-V}E&iJtPPFT~=kP#C4XbG)CbCY)ct^Q+ZNDIKpw+~aqP-`$scpC{)w?K@!0Qsyas*9u>-r1g9p7Sbf);{RhGP2RWw;8 z8L1zY(6>RdS!)|t4f$whG~?Q(kfjdiTjZxzk9)w$nRfC=F6FQeuGnB zh@3*JbV{%6l)X}bI{sc-*al`uUowo(wtz?oBtVZL#TY^MU_$%}8xo-ByM2gT+Cj^~hUFWLhmQ5j z{QR*H4Y<{kAlh+uNf0g7*b#Qf8r2e?H1_;f%jt4*vHtKMIijKa4?5Q{C+#}=$Vx0zUwj3cxpeS!}u^c804mWLNx z&iP{O%>f%r>7qSlvnhIF8;VwjEqV6DEp-vR-xc2NivPBT6YZuhdbcPH?nUYX)yjnn z$P3iSP6D;nLGCpzb_MiZ`BQnP zyjMnLP)@)zkjL*Vj=z@{wt*Samki^JEg%vC3D9FmF-DL*m=J%$h6Lz&Z&-_#Z)rZC zRwWuv9B0~-L%2DvRkX{7i-zS=(wm$UYfN3rHJ*l&KGi3udWw^-cGPmPVfjkqp=13r zKYuJl18%h>h<2P^5=2Wic7z?WMzzEzjXl5CTQn3qSpfM6bAptko)6E*C%J&LyIH0Z zmK^TVa2(3u?5g>`-m{hWP5UQsuXa7=e4YA7d^Qg@^?%%$f4S6052GvC*hN$OSj}Cu ca~mDZ!@A%ivSL1TJk@X5U)Tfe5q94G17!xrv;Y7A diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/CUR Crash Samples.zip b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/CUR Crash Samples.zip new file mode 100644 index 0000000000000000000000000000000000000000..46fcd67baa7f2fdcbf1a6eabfc88db307ebb0e02 GIT binary patch literal 147030 zcmeFZRan(~+b&9Xr_v!M-QChDNOyNgNOvkN-3@}IbeGaF=uVODmR^6<`M%TXyS{I) zYoF|EukT=X%l;xwSz44aRU0$EKEmR3cj| zi_kIfN$*(992=Cuaw2J!9yo;H>Q$lOa;5^72?X8IoHZEIC`2=aZ&~g!j5h<=($^U) zf_eQ`$P=B_{kGgV2s6~gz>j67O{KG6-W@|gEaoF_6?F~CySBt0e-z)##2amjXS$Xk zW$TZ}tz}^5_0VsfHQU&{d%L4#fTD&xj@UiEM!du6E zw;g)!8>ah7iBG#3u^P7b6zj0ZpZ09jcalEa3M2{ zcqdv{jm0OSApT9z&zGTDiiXqz3cr62%5}SH<%=U(oTk~6heAl#Tbt~u)+ZRbbMs0p z+nw%Zn=yN*w|g2OXSAD=t1sOerxJy*-!!7?KN|KbiTefT5{bo2De2M7w5{2j*2qok=HJjg?Fvi|;pO9~V?bTLd)0c)m*)$gn53L3 zi}_yX`db2n+o12PMCM5Rk&tq#U6LS^9rIy-<}sq;Z-~gQXXE?}5sx@w`5PkiOf2kw zqJq~JpBXJULphN7i~hR~Y#ntKJNT)tGG5kmBX5@Q@WkvdXp}-|^eu zAAxD3QYoBAl+8a+AEOQUq=qu--RG4p=p>`u;c=EHb`KAAwjv=7FGa7exIx)2(c_N` zs#LU0H@MA2Svg)5DfME0CXQ?;)0c<1+aMT)C9r7*azB8D&tzw`PGcwLL5?=#|5_$3 zlwgbX#C|N-9HDnXXSZ^SmreE}#V18R<~nI;yr;SCAl?b&UUI%xnsCSSF}~+bh_~Vc zQ}*U6PWe#8K$nYPe7OKBO;#85^#s*;pmCx=L%s|Vf7azFRk*ZkcF`c`8Sxh9R^7V7 z4fOA*@S2BR|N3iApa7`&F(sIpn7CN~3p}X(8xMK^2@kXz29Uv~%s2a>rzmdp}?H zBvKLzkvS_;D1h%{@N$qzcB2Vwh@{jwqa!x@;b>t3%@3yef*^zgsSJeu>F1(_A9%OGXD{tu=P$x?* zx<-JR7T}zc#AbjXoCU_{p{N8)N{D;U?5R|iO2K(Uk?P%XpF)<}B zxle348B+5JHTJ#b8V@z60DS7sGf&6C&ZwT4?c3wGZYCuWR%_jY2&u)PK8NoH4~y*E z>fSWLu6e9ct(6`RQ#XIasw$on5SOh)adWIe@|1@n%O$B{f zB|oJ(Casd?I+jJ>#BGH!z`pLhGu4J-P^-tOyMHU0B|Y%z6zYJLSCS@C8&NEm^Xr<*!F|B2q;oDji^G3~qV%Q^ zKe@%JG(VTCx_icbC&8q|JTT2{~(Y#cH;co#XW7!7C*riJetLx`y=+`ir78>vOc`M6m^MM+CVk#NQ{q5 zL|^K5y4l1yziCSxzKq9S7GQ?lf-hdXpe!%X}(G2d$XbhGm2s6GEw~{V?q&SgM6D=i}`zx z47s*-jYS5{Zo>f#KGT=#37%3V^^k_Sg`qC)McHeY;=#}bJ#;KG_mq`iE&I#4Q@VSy zpk_;+~8=;UHV_7{V>r(FlXR)UXGP)_$ zmUDxiwmeE+VbUoOtia-8^*XW;E=lk*{J4jqGRy3g#4yg8wPT4A2B067qw4P76bmlLaBzmtEVC1xCQ zZhK&*d1NvELI!h!9j1kA3#A(DfI?Z?~-7e?q5LK0JsA7SW~WenKM60PNPj3?w&Fu zcX`!73SH{gw&s=d-FzV#qol8Bbo}+-Bj_z)x1nSvHb%BvO^|IAg9*dURJDr~Dq9=6 zs0dcJ9-6^_|GN{I$U{$nzgZe!>3{#b|C+ZlkrPa4!2{_Z7WvY_ap*K1R6|XcN%(1P z+f&E~kqzSJF39TQB z-A)T;uC-IXI*qhKf6>z2iha%N3yVt3?|m}CP6f(n0}I$^7~t+29TH#7p`R_0sm<2s zf>y9Q#^NcquSCzV%X_e*-_EogO$}nI*CL(h55nZ&V41h<@vM>?1kJ~o?_C6QDNpqW zeX5)utnE*0<4Ep-?ftQgb03#6pPDXpF3T;jj3vI!z{fH+>`HfggLIf+1Jnx{U&0mBk^iD>-%{MAbNN}qyNwTmA71yAlj|qVsk7~bKL_Yd{ zk5f-1pRt3le^H_IjGGL@LyQzBI-v#6;q~LPMrl6(^L{svwlu3)c zXF`yj*%fA^c!rYb&NYFxu_NDeSQwix5JUssbLUw8jBh)8B1DV+#`)Di$eV~(l?SGr z!h3}Bp?tYJRL%`MhV#+fuBX>CV#+t_Lps%t_=JrThyGzn*vG%NG2>|Y$sgOe+WuS* z4nPMJr4OyQ~!yzd* z*S08_$|pjKU1RJ^2pUAyL8$KB0*0C!ZrMGC?i4|cw;^iJ4Y<{tG3q=+!O#~becHRs zMJ*Xo434E;d-11H`TcnEdT6v%@{>rT{ZM!eY2lM-j&4I1eVW6II@~^21eN!is*oTr zURqi;c`Mz>xsCI3(gD}PjCVw4&m#*j_z32?S{pSobO-_pkA#Lq&EE)EUouqRaB%f2 zcYTA<5grbxb<1A*K<@m${22cCU({;$cL5t<64U|z{reZi%)$PH!8i|gzy~s+L600Z zCaqOqe;&`+C!wDehQi0kJ~M|$;D|P|J%;6j`$|j%*>&WHT4>=*c8KvE^24s@LkrcS zIdog{VkzZ!4MRK%*P6hDobj(#H6<_POkVZA-+ghFZ{gBlniHftH^xf!`yUpT zw3K%E2eo46V&ndg)GCca#&%`!-R>Z=H3Zzu5c&o+VYEKCM3SVV-^FlPOqiNrjFAvY zN1V$2wTg;b-8{!Ab{QI%EGb&m(vvj{GO~X%XPsmxM zaG};C5k7DG(3!5e*L^c>`&On`(N-WXewCuRZSTUgL_~MrP|hWGO13 zD;CKszP4wRju|DMQ`h=kCFl7A5GGTQ@{0}=7x7QA{h74y`6kGJ7q3?mp23w4z%#DWS;BTt~fyw&lBuWs(p-G zd%gi>w_=mYQq1CQZgGlzPw0*6v!b^T`#UtWdS=WV{@_#0-0WOGq0wfA^~k4|h>|fU zW}V2WJl;t|`K0;y?m;6$`(U{TvfWD>6y=3RsO`CnzsC{@)z3!rmlJxmM~9WJJR-tG z0+%BqPe$#}qD8G17;d-JY-IPAT5{>=qH5XAZs~T0&=;cC61%La`*uLQI@(#i2{@bP^&)Xr-37_MZ%%hK@A0KPUGha*gDsfIpag`jmXpp zvU};IdW5JAzt~}-*0889bEF6_9bn^pFuzYQ8(GUv0diF85iXm03hh zKZiSRt{;TmiCVp(agDmSfWL!6sa*|ILa^|t$kIxMYY})?8Q6!m|T37!V zTr5nSzXsQT=OfnrM;{RxgX9P^!~6P_U%>k<7@{W!KA31Vm>pQw?uQmXK}6rnnG2kG zjxAy^1UxDjYhy)C6#5ERLFCw6Y&T{m0jT#rA|OpZHVX4U5n)h!fWUe>7UTGATp%Xd-5gf%CO$eW+m!{`_Ivh9=p`fWPNda@+9%FcDuzpJ|+S z0w!YiIGEcM`9bkBV|ajT116%f$cBAskFuOW*+I?2YaX#3q2;b)H+uiTWuomtD@T@H%V|phS5TSWXfkvXMOZKCtKhxQ33|4orrQK z-Z>BAZNhEz5A%Azk1Dp0=H4cMj4Bou_Mb#Mmf!s6sLDw0GF3&Z=9(?_e*%GCJs~F~ z`vPqpkDe_n3kTHpP#=C-;SK`*P^aMBv!t`ljAF@{728p3LlEOfxYFL-SJzZ{g z>scy(0_WB>zkI*h;&xie3r1lrDhig7k2-=1_R{!f;3yXgl!)SU=X|T~Y_;FfIT4R| zb2GWpAsVF?iR4LuD5#xkH#lURc$jG!0Z>1|l61FY>-^Vm4zH+STbuEGPVdJWKw9Fk zR%*El9^Ec!NO*`*re%o??jf|=feZ_76kTA6A$z*d>qoKdNSCFXgXOA)MF*Z6BQr>Vz;3iVE1z3 z^&55$F5JPWMg-7UHk?)qpVBFoer}0hu=BphCDBOR3%?dnewk+Loejh98ZSRAy4e&b z>uQPHeOlhj+BHTmmy_B0R=StuR)mS2(*@;DrK-#Q$~*H_jso>tqMV+hS4sItBJ(We zqs!TKBe+96*0BhXHLo`Q_bb(hC*S1N_$mHw;P9-x81}>zRWja;VsurjA48OR7`z?(@ zpS@ajr)r*)de{^n6J*PAp*1)|6)}&aWwh2Yd~?z6Spyo3x_N89aGz1H$k8AF$=PLa z7-x7nrE~4k)mBYxQf^iAR{F!${tr>dSX*__>Azg6%Z#W6F`>nb%Zv#p@~0tusHqU33=}j8B0t^*dii<dp6CD7lxod>5PF@hQ< zO|_MiK)28#?QiyT#I_R}B45CtfkGQuBwxt27V=`+>)M2LW*hUS(~mbHdb2fIEb zyq0N2|DgC$z&cJeDP9quQ+W3KGwYABN0ZEmf<#mWr#%uI{p$Ff-Q9w4^9cFghl*3E zz6*z?Ee9Rnm%jJ88a1=`7xkXXh*na4o1k%|bK8+FxF1wj*n^cNti-nu{k#>|Vd1Hh zJyH66awTFVJbpAY&M$+`=ldzif=$bjyB7TE6mxndi+cebtU;R4PLo9R`5n?&6bI-o zy~V}ktXn_4dw2$SGygKEZG_)0=wMXPCOS%}BY={If=uE=_JN#mR|YibzK1M zA?b)6WIoE4dbsKmiRl!zd*5cvK;k)fsP0MDdRPK3J}$ivk01%7d!F*7e~AUgEBmQj zONQR}4Ck&z-1Lh9rGj>_HG+i=zEgL{C2TEQl@o~)rJLt@!HE|_-fTXcF`M@pWkczp zyE>-T#ONEWzSR`Zo%bJ&il<1gY83qV-n)oOzKY)xaZD}$w%m8vdwA?}^AF`nPjI@V z^(SaJn0|TR%%Om*8N9sIovKY53yIDRnJOAhO9w&rE+|#sfFiUs%RgNc3bAs&#Wlp` zodd$fv^s4D90yCElwk#&Www4yuZksW7#uq2k%3oeV2d@>HQ!xi0+#0BypAt?bH51~ zXbg4+5iCET2^Vu_{7&8L;;wIhZKUz+&BMabaNNVnb*ggaCE<>CE9ZP!#zEBR`fP3>#L;cfRN<^)lRUgp!W zN)oKfZzslCmU@fLstsZ0c(jiBm0W^iI!bPl$IF-Q(_YBpbDjP z&=e?zbY28SM1s(G7PactXy_f>(=Xydy-XaheUbP8!hI~Ythf|-$OcF0Dw|1j9f_e< zfZHmAF(4*ff(;OE_n(A21?96oSRAn}#86bQ(7F9-ZEMfwMY2ClGB~TTxZt_fu($sf zb`y4QhaP=FRC|Z+_bgzeq0?<$Z201qLytcg`Sn>M_hmYPVH`sDS^|U{L!R+TZYf9J zc)h%}JCB~sm<55hd-1luRPlEHJhW3W=H4&DEza}$k#L(ivy?p&?hL`XUxd4P`Jz8a zIos&6@4-A*H0zGR`D1lMKW4SSq!^c;X;RZLofMP?&bpn^Te z9zX1uhG?hR>zHIhZM|v$2r6Wo@u7D!Hc5~6;QL7H%a}D}FWyxJ|o4ql- zA8FJ8S_}`GvVwj=7T?M8U!)MxnNOSgJqp9rN}z4-j%c&rm4Ipv! z5As9w2>l@Ut$IX#KRqIUCNwD2kcM>Hg1m{_G0AB<6r4R63mm^g1Rrq|=`$OK;;ZmL zUM~2#p`1<;k#0`ArOLV|SkLTSZ{{DGIqd}Az>G+a^DKezq^LY+{YkzJv zno$#;F86K~oNHilzF3=D=$_j8dej%w_jV%}k#Xk`L1vjsf$#Rr%GT@tYUagj_qBnU zwJFzqQIFHPooUfjSX%*g?fchFHxAz?O1%`s56cPKJP&uykIgtYK;^CJ=?&Gb6Stm? zoDLh?1~Wr^78=xM8YQM0ku2esE2*3s0qw8U&DCr1YJE8D##7xs;zJKe?x~ApXrLvC zDPRoPCc2iDhPuqZ&0ediLv|eGt7@ln=Qo_4jMH;wi-;0Rbysd)gmFya?y_da{gG8q zvCR^(z|+NNnsD|i1$(^_HGX38lq5h>LSW40F{=&%vTAN1t4?~%s;6syWYq!w>NIYj z-TNqt-y3ZKADc;b`E5}NU3GAbe7A>vbSx%ZT$dTfjSvbzNJ$18&3j(VKIW5j(1)Xf z^f{UBoot>lN@Q}VIMr5F?cI(Y_Ycf^W;Oob?dD+pKxD>`z+^7Ot$75dh4vRpenJ44 zYydDPt1G!Ce*klm`7dBz^VB{9)6ALg!w+CC>-_~x9RQfhgl6X}kHAzO5110Qt6G*C zQJLwms@f>B7khSHqnLd*njM(|HP&}CMu;(nf08G3IT|1-Ir!c+TQ1oI$f~Wj2!X5` z=J)MsYElIW`3ErBnb>|2Jl@E8V5f&9=r`t$IexW9 z?g*4^@Qv1p18sudx4BTS!3vdK4(nd(-|F95H#0BcnW!1xk16gw<#z5TkjZF#UnF=s zfq4V2EU^beK*r2tVvnb%M(y@dn%$M0%gE%6$|Ng!J)jM#b8!l>ye^)}j&S@bZLV3r zJz6*Xvo;T?r^_IcbMs^E} z!=9+2+4|J5@u!uGMVGJFDAD`M;sK>DS42HQ%d{oAVh}-LFX24cHF`L)uiQ!t# zdhRKd+bH>dF{SZ7r7*l1fAK~j-C{lwBfE>tx&9hxK)4jNm?pG#U#~XzLzZfl-kg{G zlBI%=vNZBhmR>TgPXBLYX ziY1-XM}~ZvyM(cb@p5_hK0$!<1?o&w*OJhEnEDZ=2+9&1#1hWoJIB{*o^%IcGALGa zqL+#R1NT5EoV?vB0|#ElYi_=58mw}V1DIZYDdhQWGw5p#h3r*q2t{#+VmY6T%dV2D zn=_))8aDd+X*Y>wWV&b0{nfb*idE6*k%c;vV=Hk!r|CLsekyQuVb}y^l27T4Yx+92 z4fl`5kEbN&*1GAi8$Tr;aU2~-67$)UU&{`=k1%sv-3kcULQm-#vDPtnA!yXWec~{} z^;$?Jdi;ZpZnn!77~#5^=RY*n_o-Eo*`Gf-j(=&YU#_*SZFy=HrbC6+Td{YL0iie^ z;HxjJ=_c%F;5ZCp?LP#4DZ>qbc_FHa?tj6NqXOZGjv*KgCxVdLgoe&*_O=&C>gOu> z4o&*ERge`}stfyb6`%zJbtO9r->?}Mtec&2Mk2Y$OuO_2*NR&1jK%x=HRDoTM#Ugb|LlDqd5>r?8l0sS(sGL>#?6EjFa@@olOi|EN!u0VThuMjJos&Rr z4RfSmiEzm_#4XV+lN+RMJXSPvD>iNn+e`Q9m2k}62g#?XGf^?Gb4&umG18%W+bgjm z_Zgc~PNd5wS6Dj?8fDw;XzWd|S3;mGbx+?avnPJA{2M(1Uzgw&T3h4Ka<6w)US9QT z0$hP4a8|?apwmy6Uv9IJs{r5np(fB90&)CEO!_Swzxqho5ClF5I^@F0kHHdpyUhs< zB2$IhGMkWGNxs~&G<+)Wv|d`yT|gIp%#Fa>z0AVMqHH@i75-J3GM@@CzMeo+A~{*s zNGW15>^P~XGO6J5c~=nF?50*owZHb^qs1R~)|}{)umSA~$)V2UxF>p1imJUvEgxzu z|EdzRjh$`yG^-2C9Y+eFCt5gTj5m*srI%#C8cSAZ>}Sqr8TX6c|47yTbMKa&llhm1 z`j0*A|LNWS|Fn1OH~+-pGce?vp#R=lVdwg(^Gjo8fLjfK6BOvXOE^ylfxFM<+XjJjm9(M<$&?t`w@n9w75 z7cg=AgP>47(l3ve`f5kG0xeKS?MogS1cHC)ix*?HIl5o1AtpPOk`g zvmF~RA*R?BG*tu0tcJ(}>f7s~Tis&m;pBoEK09z!-m#jbdbe0RE7gR5Nuh{KRx!{x zea38m^ZAV$x}6iNXwNPRlFT4WRey=w$ItDPam!ACCJ|0`S95KGKg9!7$v~RXuWf|i zOIQ8MJLaxJ@+tCcRP@UdlTaih!W+ru$8A(z|8pBLKW?M)pWDdDf98Y7XZb~n;>Le# z5;LKzRWNhUYM583xOO|d&31{~%+TXz!Gl|Mr*lT$!e<4KV%eF#;7?7G0B9228virB zM@@o<^{7c`3a5XFWjF17N`7KMlkfqWWEv=WO#jd%(?H4Nr&tc=sd>~SxXwJqKgF{4 zUz(&XBOZB^hkj=?w|288yFkJQyJf(eT~uupK{r)QLG18FfgU2Z6fq&smIihDC&tBh z(Yjw^Ar>W2jYyegz6NoaEM>Jx=)KSz{Ub1|>slYN2Ih|@)Zgb12OIM*vCJ$F$&4n} z^BOA=g;4BSp$N?-%mz?3B;`Dk)*keQGKq|qWQ%)K2i)P$pa2>Cza9(~SyLf%VDP3?lIUt6{Hm9Z=c8*D^3GazT!QHZ^CvdJ@TzxLd8;w!TVSU#qy2 zurl@(iL4Pug{wngh$qLyT0V`I$W})Oc-oPFA`>uYIECXEh22tbjYR!@P9ztu@$CTL z%i|T_zuSx)Z0x_Z;*c%S5ANwnHE-bz!4HXVmWXT?uBFl~v_q@%_0=NIj`|7>AL$iX zHi2tz%l+!V{aCWLjj8o_{-%hp^8gX`v%swtD zur!)(6TYuRlHXu3U>V}k*s0GwLRbXB9ojB0>S5O; z)^OJ%j;E*#$#$oM4HDkS~Vgq+mQAH{!YLZe4b7{4CW zhSFK5#n`;W(fP?)*33FQgJxX#303sNO=NxV#{1!p zdkC8Cu-q(vTP&)kmCusD9GAVh8uldjD&%c5(&gFw!WGLc9Huv-NpB26Szn<*6UT-r z;U~Qtf?jgBOp$_OSwXhCEBX7_+sIp@hw6WnaH6&d#KHdD9_$>yeyxH4TfpijrvLr2 zbGi>XuaSPv_9t85-GF0`&L^+2fIGXsf66kS1MaWreSf@m^Ih^KM*F+6MU-}CT3=4E zky<|8u5#=wQ7F#wwlmY#G)FEF8v<98TZYu@6xO%`hV#$;w$i7lge3XBk}@w> zSp*k7m2BtU549TeViA;)I56r6_h8$i_NN9!`jk%I7pZ#9P=^3e;Q*j=EH$G_wc2Ea z<1HXByBQTV7+=X@8y?|3Iu5&OX*N=ozV_zbzNIZ1KoC$hSi_) zD;ESX$&=h4pc{J&2221@@iM#AdHMq?tQS6M(^}rpG#Aa-*O3|40nJbdtsi2Q$W8$N zpat*`YE~v4H9spoUVV~7UE5_%JYr=J+0Zm1C()B=wsjCBeD)r;hEdbjTDzLhN%u#p zts*+b2G5dq{vicfW9-pBD9m@SxZ2#$n%ZQ;H(wG2NsosS$#}U+-wH z4f5|3gi*@zc>s_e;R93TZxe)_^JigekQV`h87pX&6_wJY7l9>S-4u2D^>*sOf)(Kq6X|}anUpAg)*k@tnZ?`xFV6#4{{6<4mdKABfvCFB}IR2vQ{^B3z z*xzLlGVo{rJV)gG+1@UV{U25Ic(MF{%QYeyKMBmAbB>df>o1lJT*m<2E~-&io{&gG zfR@BL1`Mido7qJ(`TE*MRY)BBLah@SNX!L~Z7Y@By6WZ1f`Mz6mL_ICcoV-NfYlfC zs)Mv2L|DNFtELA{ALU}H5sV=rZ>?60d;rTLe~Cu$)*sp;<9TmjE_X=W3qr&ObqvY( zpqFIP49!_ct3D|T{c=slRX}$K2bgjv)c=}t!#-u~x1y!MLPW`?{@avG1*RO|Kc}4Z z?Nau)$0_%Z?#}f<@K{ESa^c|XKIJ;&9T4C7XYck2^d|5S$;XSt;d0uzdX;> z&0B&OAn%bQje)R;s)VRvMBupHsTePMQqCV@*!|TIxWdU zj}q$qKkC(fVzt&^e}URrAaZ<2(ElB(_fBAb_aH(qLNJ`OTg!-} zpwNTlwJ=KQr_bC``)Lil$1~_nfejS3@XF7`3z6gx8ELVWbCi&m;DFtB_wwmh->22X z0Q;un&RsbQI{aVPsRV(q!H(;qNYr{__U8j0{(j~sa%v(5ql@+W;-Y1c@ z62Rav{GwG9+1VC>XHVnkfFAvI8R8k^Hk{wERno3+q?p|WyP-iuPNDnutUv^#@YyTa z8U;<=lFVvr9>FZx#zGYp(NPv)<2jY5AdB@oE@oOW$Xx2LDU1v6gG@L^>dmI52VxI4 zuRV*LTNvKlSX<4I4Lv_ zw+f4ZgV%WldST%{<2oR>&i4Y}Oz7(G@>D4T_j^+lE9-L)3h#+b1*6-V+Xo}40(XUE z6L*q_3x(De&YH(o+bSRlp$4(%gE?eVTD+o`F?gN}xBkr6iQFMUT(N#Nc93e_Qp>TW zyn*ofW6>|}-$g$?E&7LvVu6x4QEF-Ph>uy?H_sM0expP|mF#8VRsehE_`#liz`l7O z?!QLuj_PLY#$PLaDK9ovj{HS88WE!a8aET&0y@B{y^y7Ci`c?FM zc%y4~h5c;#R5dH;VUC2+&z})5FD{fIJGhY(TBjDL**#LM#5wp_k4GeHnSFvM%ZOR? z3hyyeaTJKs761X1C=HfAvxW~ia=#jP1KOc6@+yd*3ZxV}G@^n-!fQK;jh-xyX!|-(HAg@MmyIy46cwAc_cpmr!!nXx26iT8@e^XA> z##gRF>SOdm_!iTQFOpOIg809n&qpGapBMpzB>tADa4~cI92GJAk7sp3J*kt8XJh1U zv@eqJlav)5p=_fiAGI#9P}Fj=tDCSwS0nfzGnK$MC5ee3*89Fd^Ptho7vjz2jbu5C z@*C41Q;rWqwFC!OE=j_P8O$9a~( z2gkSWF@#Q#PqmLgPsEJapSr$f?lghHpK4O+8UZA$;Hq2S+Y`IJzSV|&3SJHfje)vB zsU*ZY&wiz)DJr%4^`Zn$2I2%WIv+U{$q3d)O++O*NJaav+8PK-QjFXnjWH9K!d->w z)yB5Ge6U^bJrz05VVR7&M&J#Bj#JkFA{A83xZnW(;1;>Au+;B;`K0cl2iY_)sxB($ z>&-biczQ(*oX}NbqJ(SRf_1a`omLKy{}EPgkatH~0m`Hh(5wHZZ~wY+lX4t?T-a-} zX{ntNqNc{RN*5J}Tn4l^^0V1{yn$XlwsT7L=j3O()J%{)-hrkCxREDAA@W~h&sZY; zXjo-4Hm)|?md0c0G{Cs6;}Lvww;|5Jd=HHTFE@wuD(qi^zAjP7B+~0uI;fbOr_}6D z+0E2joFuZvwQFh2tgs{cHjH{HnvdyGLzfm;5H~MkwNciz5D)k zL~5Pwa)Za=eLzSQ(R3!C*TwCZ0k!hwX0OZpt{x^lYb4|-PrM+$+d=TNwQnt4ZqQy} ziya)PH2GP(8}I`;nI=Uk`NSqqCVh7~Uj_)NJ+V`dWVe1uY?dSL(^{m~6u0iiIQdLg zMd#Kz;-VGoC1=4kC(A}y&Rv>JzVTMfurHP6OvmKpV4o}W(7vc0o7a?)}nYfEPcBDNpmwnO{;Y;0UKhp3oG3_5ED>!?vq-15{ zgqK(;uh1i7>VyZInqhfr@Va;?dl%lg*l0l|mBa?fTB@C`YviLT(*3nO>oe-;yh)7{RIpuL63(wrJ7*h&E zKnbj#jc2;>{q1~-_~-eO529!cmN2&T9%i8%AosuVvBqM5#z8TN84+GVBEgohi zuj|CmY$?L;h2bI`)`LoA28W4~GB1*^yadrB=9dApUA#f5_8@Y0w)09$x!xyG^Vaxulz1@7&?e=>K)GeeR{15NlKGtd1c}~9Y8dGTP(wt;)L@c5FTgG#0ryAZ z{`vjCr-Ik_n|_0+ABwY7&_Jhcqj}MkkUGJnBa~I>2_6G{Zusw(jD^m76~1VXg3dK*RSB8Pu}G9EYh}7x6ziz zO-mmjlrL+Vc!yg7)7J*+^vf#9sxqT@LQg zF*8mlXiNp0$Ej|I@)0H(KnzD+wx2#;fYbvI*_e8}b{_w9H&>KS~_p*ihHM^(ai zaMQoh?j%f(n*IGhUZ!9IlQ?8LykMr}@-S%dDM0naoBIGyL(e#u6Gg;M9vHw~Q5>uzS&D*rg0-{hZr{K~D* z-9F~)m0O-K9E_muWKx~6EPSZA)j7@P!k#60c9(<; zvH}0Vd)PaeyV`p@pMQMi6g8HDI)7MXTpWMNfnTje)5KKKum&`=pnydzbVw@g+#no} zqA_ShUP!5IF$B^YVHbX%U@UPcbVv-u4rw%avd}@X2^Jp_d5GulxU3Xw;eM79RbIw4 zukV|+oh~&eyEP#)1*%oSuV`F@!Ge>#+jF(Q*|?ZL{rWjV!K}4~Yu*!gU{yJ@oPpje z-D6Juilvs{rS7j{-Ir%{tf`H@PR0hpq}gvFN=(6FiGl#JiZ+mSbp7-6O{w z*RX*$fAn8%{>Gneem#s-XW_K+n-@Blbo@ZuFoBIQ)Bq)p_z-MJ!Tq;3KPjszrQrE) z^c~cw)*D*1c0Kz1Kim9W4@TKER>-rNPH-59?9`9vvn=xEPaoU-VfDk-?#w`&UkqsT zXK(9kWdCUMXS4p*=D+4~d~EY4I&*yZ(dJ)X{(GArF+KiVA87NxnHM0+V@P^7N@`UaIQB%z_|)T$!>LHg_2{^?EJ*!&Q9 z6=-k8+U3J$@?Rz^GpQ2-|1YMCgj#dZpXwvQ&x^@x`1hR6cl$m|shq@3kcyqE<&a## z4DHXr0<(dnF9f4qYA@A)zlylc`zcZjY-!5( zTwP2L_ZCB%P(c)R2bn>Fsf_fr1~HT3F$PNdV}b3>eUw1=L}}h3+vbKBNc&2yotq4k zLy={uS!p{z?Z_BzUAzrxeCOJd`jp4p#a!JmAsO3rQjaRQtl%~{*TNHGZX$JUzcyJd znKKD-kb*KDVMvcnuJ-L9nG818Y}C8Bq@3X=(s zGH!D1CFA#a(oGtAo}yqqshv~I9sKxlFdIRrFiadVvR`)(K7h&Ng4V8^H_5=&BqVUs z?ZZ<}bBdV5IjD3*bT^K14NoWAg-b&*cBU`f#DQqdhiiRDjOg@|R`Q_$67745$V9lYFs(aT{qWS4wQq4yxG^7wJ#gbAriFo&`q^;Uzi$g+EZh3!Y*H}*}i)2P0Dg7 z`#~LMYeWP@wjBq#?Jjbi!3gc{OGF`JnD80Vrk_tjPwX(eeEX001{Rf`z5D*hKICR& zX8w5|2fXt2NYhh491I)u>wXhorR+ejvf*TVkm1P0HCpwo14a`~3j z;_=YJ#ZMQe_3i;*Ee%Rv%;=}DhWzNOkq^VMjY7EV^NSODD&Jc z430;>>qTool%g?msEvL8Qi1ii-l1pwzf|&O+f>T`@3r~VZuZ=LLKe?Ny)O@O`UfpdAxm{dEPfsCmH$e7ki z!Z9ViFX5Dc-r=43>B91?*I&KEJG;&E1U=ysemiK(@8!rR7}TyKKuM{W^+(2JVAb() zQ~gJ7kpJ)8U=08BAdoQ~^Eq5A0lh;Cl$2KUhRWBYCnIit&0By-#{3j4rPv9GWNuQK z`UyZJ18;o&FZSL7s>-bK+Xm?pBt^PAq#IEYrAt~mq@^1KX`}=J=|-emx&`TwjzdUu z=sq0IccVDZj6Tov{@1(K_pSB4>qS{}yyrM`mUGYE_ul*WyDl{VNnzo0+u_z2^th0x z;a3|j^JnZ3#(5n(6iX6LgHRZ>*;1V{y=&(^|3;_YrCRjpz%uQY8|`jj6eG(pO22he z42-s!rnyTTO!Uufl%6#NOp8CqEuLSAl)qyAA20|VsQn+@@^~U@^gs|%qI5DWJSQC0 z(7+%oidz2;j^l)IXTrmgU}t({41_BLc!PmpKgu$k`lvUr8Sf@nX?_3vBcZ@{bqh!+ zc%KLZ358$dmTR2Y11z{t&u1uF)^J6+P4wt4!X7iFPgA`D@v}1{hPqeL{uGytbA9*&!WgiNBKGGTe zGNLmoRfD&#ljr)0U7{X%s9WFqW}cMJr1Nbfz1rXtyPKzv;Fqx)gQVBX-X3b~$y=2l zQ6i^PCW;e@E3J?CJXju0>=WuHVPz~&aB*|wL_80^U9qm2-9V{&6{TwU^t$aW6>`(| z-deXE;vcF3%5lFnj|h#=EdLC03i1ftq~_#;M<3vK=_QV+KF;;SC|1Q4Sx?PQrwmSD zCr32cFW;1C2%#WiQnh_(_*_*{N5QY4G&4P&e{j&JrXz!r+$5i_DUsV%gIKP%7qD3S41e4 zouo$3?pEfzMAXa}>gwy74sfphLeHTC=(+c4W*h)|?$OC#=((FXzf5s%gP$d@tL!U) zF}J0OehnaSmneKLYM8Z&`+V#NdX5_a5FDuh=s7qZF|EI$=MwxjxPPGMcnagJLug=l2EBb4(W_Y-k(rMVN-XjyMT%D`<6J0>{NyxL)vHN-*>0-yZPt zmU0aL&15R@Yo(!ZJ(+&_F`1eGlWF~bolI%O=bM>%DTm&E+1MIP1Fe~LJ%b~31Or9$ zDYypsO`;&w*BUK?e#`K25#EX~Uke?rb@w6!)CHszQ$|~h+}1(D$iZL`7?k`P`OQQ6 z@LBEjxX!MnO;Bh%!Q-7Ami5nVUZS3D1!kfHV(&qVb2v732LwG*m5Z>J1Z8>3J z^6uXc;q@MD4zJcWRX}Xs&fk4IJV^`z4Q#PB`{8@cqgU>M__~3^sW2g+S{|t=F_+}W zu8pB9n)la^GwkP%bD~#xf@apbV476*;GqMK=$Zt$B94T_j14=52-twwP#ufnmGi>{ zGW@2G;(q2e@_*(vjs^RXf7@{8Yp}w`mkPtilibuPcSg36@GT`+JLah+4c}9D7UxlgNTLp_VdkP|0;>SK0a9TibEP`!ez-sjTZ*ZppxNEo*!kIGM=bh$M@21+lGw;3ScKv!@eyT{l zm%0$QEzQ01Mjjz2bCddgL$l9<)k5{oR!bdw3q4)n*wm& z5tw6jk@8q%?gx7i4Mzv)UTxJ(DJw%#Qd%nerMq|qrib=N((7(ql?cnTh_9$muc0aB z1cX}=hX6E%I+4(Dfz z82S?4Y!7p^TWNINmIl{ICypO$(u&XW*6w_|7$cg%nlu;4p6704&7e8v0@?HU^cTQx z*pcIArQ8tyz*eQ+%yss>sfKiUbEZ_T#SSLILNwr*I02Oc4{SZ?KLWDnZ=g0PFS^(o z_((D$K%o(CG>(O|LT|GGq!W_zIl{vLgbZ9@dso^YsF)K?$7xFX1U322bNS5J{`1*R z$WU6l1h^fi{=Of|#mUKglOK|@{RYgUX%hvmwiUAij}OQx{hN*=_$!BmGajvzJ=~p~ zqNU9UoToaP_ZVY+`l?T=Te|jDrL9LWR|8Y@#A`qQlkilZD@dc;s0bXD)xN;%FZl@g za1U6Khcb*L^4bPo)Hws7DzgUlT`@1nF$L$Vp#`c(L0C1ok~B{u?uq8QZhzj#qnA$< zG1;u#;5Hp#{vc|$({PSK$gZVRXS`9q!lG8J)o2Q?J0{_?VV-F)*{TK$JMT<4n(a10 zQLOSrG?g@+O6zh@h8Ah0BFRdG?GC7jM>M8z7ORMbqYNWRUJNuV*0N{5zCD5zLC|I zP_BP(PGTFgAF030U=hO zL>li~X!Cmk%Aw!&O4E~*5czlsDc<{vQ{u}{dp6yI?d zncLmP&43DYJL-i6xHS<54WPX80xuT#AgTu{=|3zu$zDY(Mn$QLFLKjRW%%T?<(N=7 z*e(JO0XF)LCnt0j&1|b?OOo&PR?{EF9)x1nS@JJcnRDtuguj-SbX4Vs+%{P!4znv;2=Y~wTPG1MiSDN@7JRFBuP!x9rcN)m(?;~w*M}yw=0n~M1@~;CZF3$TmJN>`N z#Eh<~&oMO@R6}2Z5 zTykfV`F25u-s=~6;x%;~T3@qP;={np?M4;-k?$85q+Wflf_+6VN=!$O7M-!iC_15cfVD#4nJ2;7YIGrc|5fZY zpV;f2Mggi}!4jTRXT?#1n2H84;0Ds9U%o_m>DhpGov+^VXs`vkKJSRRXiSrZIb8I% zDTIu!PoSFPh7=a`NtzgQqN-6a>Z$~<`NV_HtUPW-RM7a_5=-2#8{)oHP_G=d+_kQv zO6hd67_HdXdN;7NFv1ONxNrj-F7oNzz=lg5BDf9Ma4A&Dv-Zn*A4&V|(-TUIJQ5+&O$x;d!C@&0K&8SZG&Ij3Fr+Kfmob#0eTYLC zJb8zjnmi=fEb2>^>dXAyIx}}5Sm1b(V7E4qtY_~aFKj&sgYAA(PjQBGPv^i#U*M`r zLn?5a`&{OI-f`!(=w)4JSmy~HTuh`Er$_aq7@Gcy3WkR9_EbgCzQkt>&!WJi)<&tj zuka4eJ*O)s;+i=iyivMW9#^rAO_xj_Ugs(&7YBLU$14g`TfJ%J*tF%BOpv%>TA!XK zlZS(#c&HZTmG)Jv*NlIhPljUp_6$QT@P>#DA>a)xbvlamwUHwR;@(++E7~T(@NK*uCZ} zbEC@Pg)EkRc@2xM?Q=>PWLQSJ8LuI~;ywAd`3osqSXP&eZkm$2)JBDLn#x7Ph)3iG zmNUit7Ps^+qnFx-gLE49$w&9EjEz}GnmL0^Ub-9a&AutSYj1G-h;8|7V+rP{pWazV|NBP^&VDYl^P3#R5LA~Ac>Glc5rxZkk zDZ*XOyYv07daGNUdPY=avL8g;xME^^O`I26;QKOqCQzS>1!0p3b*S2an!>LJ{c4kK z_G=wp`KD4(hUFadN`dy?Q@`^1u3s>8M=FhC7gkAQUPFt-e!-zQixJu96Jz-Z+ zWSDlfRV&0AsX~H9f|#`(s*|I^x&#hGbLDvL?8o)lb+zw9Gt|aWJOO*!Jg&6^4Ue8@ zHdn3S>uz-f@}Y!GKbL^#-a>02xGR#P3(P=CoStJ!99uAE(O!*&LAX#I5QRC}{85#8 z$3sMX2h{hyW!hw>+Iqct?75$7d*;Giy~{eZ0K(hh+TQkLU+m5jHU{2eqebwkB9vrZ zlm`}i`b?j&P#g1Pz6y4_3rYeKY%mHjvl*R`eciVX@#6$apUl)Kgt*xA0(yM~$- zy?rsPcL@y+fW@1@Q6B6tqP5Z)=gIaNp#%lQgm zyLP#$M6;*rw_t~BgXYJ@sd*-R*?4h=yREj~av7{J*WSc}2{TQlt$2rtOdUUpQ<{veU!$f_V1(-g7U4(L_KjI)huo zADS?(CQVz5i461;3}cWuE6oryw>t$4@YDf%vcUO$yhdD%Ql|eAt2QYm=(9s zRkahAQPoz3Et^R82OP59zf2t$Xd)~Cjo!n&{sX^b`Q)^!OMp=1dlymU{_+cl1##}| zE+N=@D?%V78u-YKI%MO!= z%bC$+X)WghQe!R9rTgTk4p#G0?p9I*>byE)J_C(?X-U0G?zYLh=1~hxi`p3!k#~)e zeB|lVFkT#n*@EgSq)xD4utySyy*bLp6>nByAJwQ+$T-ChrtF)F|KoScRcc9GLCLV^ z@iNANpkNDH} zw498p(%qJQv&`*)zU<(KpPt_-M)xE1ed>iw!|1MwIL05`=J!&`+L}0)BrKFNm^v68 zt)B-^4@Yt?I7zKmIaE+|jW3U$Wvvrpzmo#PP9nwK*GQRRX zVLnap@Noal?PzDw@o6pBtKjbWdcmn?kQmo_!`GG0^`bjpWpsT8HhhysGY2QLzDx>> zQo0%WjB7)*ypl(g8py}+jxj}91T;a*Yr^Y~Aj&{m{D1P*vHej#EM3iOkAB9$7#oL)N<4KfttEHA#Q$tv*hUL zI}TTuZYp|udJVT%9g8=3(8`x`tv!}H&<;5c4-a#*vf6q0`H4#2VEcXMl|CEa@+_0{ zaCetw@;KSHgDRjcohao=v^fo&h&ZlCG3C_P3%}IU;IKrpt7wKaMNPD%dx0RQyGhE^ z)6+VzEkD}NARmRNmXwo+)}W?2R(5vw8E@M-B@mU^7pOk{c>frg=FYuW>CZGKbbCSmof1`^7C$fKj9rfUN!#a+TF zSjx59HiPOtjUK17RbpuG@EuEYb8}@?RAROcs@r%Khf{Z3d=Ykp@{pdP3kk%;#B^FN zI3Zc4Z;PfCM=pti+$G+jLw%AG5;%pOw_kJqBtBBIlPoXVz&Py^nNVNjTkFJF^Mdj~Db$jDgQ zwM?DnRoqD3U1)u?b6IgqFLn%ckCc>E7a`J#9e7`3IYb))0U@`nY`E&uW>;8PSdIyp zyIj_0an7CwcZUR=6%sQw&UG(SIIe&Q(! zqNzgnRB?jYFwY7o+pq(WiNh6VzY@k6lUNjrlmwe5UiBtONfX=8Tg( zuTB5!i}=#O#qm(csMwg=H{jRmPCnCS51#{XA|?R-J-MpD#SbdZz(r+E;G!lS@Xk>y zmFWrgnfE7Ez12Bh;EUGzIsYE~Ksz{}+~{Y+!5v@Jn?kJosSPDGC%aGE0s&l(!IQ_* zOsuTWsCw4g0w=$=P52>^P?#)2vK|L^9rl2{))GEAn6ADx8aRh-<{z#OKxWrq1C1`T zy`mPK6@%-WNK6j( zlCYIz_iW0st%mPoG`Mx_{)J&wmfQ@b>`3FjHG@dw=Ph+O8bk<|yKqC~|L%tlgnlsV zBY7pt|K!K8#Y^n-CuusE)9rgv3i8X6#^GaFE<;=olMn7tQU8~(3w1sXEJEov9hRyK z3#T57xS?jpFVYB3AdAN5dKvQfOpl9PcIVx<#@Xh8|9@_ii%g0KovH;D(W5%GiLtz> zwa;mrDA7Cq{xwF(V0`}PeP(M+sUg?S97C3iN7k&a-x_DwyQ=H;Kyv8+^WTr zBIZ>$Ug5H<``zc+M?&jm%pHx5GNZ1_IO&|sM?tqGuQ2>Aly))Wq#YfK9J`~an#Dj9 z_P{u}4ee%TPz|egMK&vP?1~`M8oWF|EZa5B2t1FM&M_TW7_=N9;?RA`hD|Oqq{F^; z0x=%b`)F{L`+JHS zcLxTXPzNC@{O8%1cF4!N4&LVnk|?)HgD=fcB?$y!Pi9XS9@9pAdVB_PN$hwBt27_w zd05@EEga)huwA7ZSE0ZILj`Sh`#nBznW{OjNUJskGeiCbc9nC_q#*fil-?@ZoxgoS*=)z8$}OYEND5Na5NJJ$b(%b<<|1)UUkh6C z%9b0%#A-)S@FZGI$pIwlNx$dQ30P7_1YBS^9mQF_nOWj(%637n;WA+jw$0L7i z6!lbbw$g6-$?;sH$AsvKuOq+L$+o5jvRgsd&b)e4mE}ZTS5eGPE4cCPTL zPGo`chbQqvUY^6ulf4J8s$@(fovzrEMXS#nr@EfH3_CmRZv(6T)&3-#)W)K7P?J~K zRM)f95jEF}$oQSye(B+Dxk1>@Ts=?!{I|>bZ9FQ^Rz=P?np%@-m?&s%poiT04*G1zewci>k9=Qyh0p~ctE zKpl_cL(J|(9^s+ya`+-BP&=~v=B)$AECuO+c5k35FTiA-Lu(r75zPW?>l1%(yr|Xf;xEx#3|mv!-_HtiHKBJvU|q1_tKh^a4Y?yi(Wp~I z4K8>?HFVaLhBV3Yz1#&>D<@%M?L@G=*Cdnb4i^Z#5oBKDCadk}4T^>~^c#V8PnFK< zsydr%ZX>r|MZc`kQf{{sM`hf5OA7hy(}+xN_O`6%5ZJScgiKg!c-Q#b9l-I9 ze$hSTII2Y^YZ@3te;P6bOV~Re0y{^GH@8nzT3_V^rhvgi9%nu*bo9rd$vL?>NcNQv zPtp_Dv<}$d8w8_<$Sqj5gH`OQ-Q}sg&=)s~DW4Lv>{BIZ(xw+ajNXF?R_*@ZzRfs0 z{I;d09^Fc(Sg}+ROM7%npT1|olGsnho~efsWQY$zrs=r=u~4_Vqz%+}5W+7AbwbY| zm8&g3{)n@fj2n^kTIq{8nzE0JllIbTqmN*!gFMVE zgjQBcinCb{E68XcjgI{7mmVX7hfwsZ$G%IXNU@oFMoQUHGdN00uK0rJX_-&&C|>^7 zU&V^m!_xfyq>qb}Tkyt@aQ_`71M$^tnyuZR1|Zc;UdBPq&e$aTOuX!;n7s!|aJL80F8dWz_NOE9nhrvV z4g3tcR;0C@74FAVu25&lgEP;K*&vDuTQ>H%<_IqeZ`WSzKxZ1D`F^W|u{2f>FK#tY|3xFjbC%vALU8aJF?gLh zeHmv(F%>2%r(w*`uFT-&jA#5#i;QOZTP_tBeya4@zP&z^E#uxjT0BH<{hs2yw)YzW z6v`bTO3$p`B0uJ4CPm`bmzDwu(xoUrGpEkJn~SS2yjs_8C%nr~xXzq5A8q+V5Qi;o zSQPzyw4^C~gX;GrEW;gXG=_Hj5jb=)o}3tFuvs8XfgDlMcLBDPNdO*ko_Z0ly!MFO ztTDT2nk_y+^AHoAa4cn=I2xI|ML$98JjQUB;)ySsSBe`L7c(GCh~yi)>=?n|u5H)F z1^YJct9c5Km3F|1;9fe`qzAEZ9vUAO-mVaJj452St)P}WP&(fBFu^6ue1yHShVnR5vAt;$5I$BtqxBf3xA~=u$kp&bwp(^L&q=>!u6&TZ{U6 z?l&w(_1XyA(zov@pRLiHF{<98&56{9Z-T3tY2)PPFpv}uhJW;^&l}f(e;^yfmeJr-&eA>g&v)ewpX ziR$gafh~k1HY3v=46-_(eH$ele;hAi~3LX<`!S{NHW z?h*0PBWwGe6{*XV8x^bJ;T5Ygd1yU_QX9vKl0}v1xA?pX{mu0al_45Z3EE28vtU@(BPshIdwjP60S2IT-aOT%_=m^$ z{IB*Sp5ac)turX(HjYxglO#!&R zFJqJ+0vx5-Dzv>3kJhlY$Bb12oMO5E3)gompy`pxBl(}Wz6XDEeUsg|zO_a8_}Q_= zFIAh)|C{T3H$nWqEhpgd-T%$wOI!TJU=_F>;{G`T2>xu&SN(57Tb3 z=XoRg?){hO`{(!o@mScu29D_fz_E)z%+6Zq^MkN|C{fD!;Q3N8bVWKJ<^!eI`#>S4 zB0vjbcwLBzd-sfJ+(9HVRxEPxrV!)v!|a^+pUut@;_N@o&Jq8wnVpRW;*=JF2NNWe zzjffa?sNa#^(~4~SN!(iZWn(%iM_2L$Wx#G^!u4>$vElBd}r}wz2PoBDW!hrJb}k< z5X`(iAmAyi=Y76=3XW&f^w$}>^!BHfCeC0+rAmuDsaJ|F z&^o@yYdJQKVCS?sUI0or$oe9e$Y(j9X;Lt5JzZ@{0m?AS`$W{5{ z)gp;9=c%{86%*{6kM)K51jYM22pjv@+`#FqNu7G1~+GLj17 zC=xeP1!7tHIfR(A-~muRmvP`K6b=bj4#Y|~z%4{@ib=Sq7$fjJ5l6CPoVHRzUJT_B2qC)e^A0ocoQHZpt<`n)kl`)E~p=8}&e1I4h zB=O*3esygw8X<;o)eE&z&Vu65{hU#%1~IHr#Ji^xjZ2Fkt5fQ>)efPb6lqL~a71WD z1aH|8BfYXdAn5IWPD86*g<0sE^>{Bhg03cT~NykEiteyuYwogO)!9){ppx+Os7?gId@%Bt=%lCskQD8=puDu4M4iv1?dy;-gAxo;v+8XciqK~-A?v*lER>7C~DZG zdStWwdspDRTC*->P(KJ(F5tM<(UWyC4F*NeDv5iQIc+I=u1Z|^vFOn z=M&J(!JPh9-!Ws&$-$kMFxp3a-ONejm8%Zl_K)isEGIK%%3`0n!xdVE8EsH#M6n?p z*H#8aQdiL(sJbUYFCZJgQN@NdAWPwyN2%6BZrAXa$ofZ`7|@w53JsmTMEDI3{z2*Q zaB!c01LBi_sr5~07EzwZU#E!?HUBQMz6Xe`6}kYCb@&@O1wd!^4A7Zz`${|gC9*F5 znI_guIr^C|kWVH*pGsMcz z$JGFN-6cW266fYJC$J^5J^ow)n@y4fsB8)as3Z&J3Ve>@&-+ zp%tFh{JMnwcd>)27UDc(SF~GE*PO z>02{s8M21{j1?T_@GZbxRh)H&?9C20uMd*ho=I=^I;IFbNB&>A%;Eu;8Q-5Sv&O+b zh5zg_lLuU8-iqF8|6jSxb_jpE%xeFw%giG*KzR#u*+}Shml;OYNoUku-bOaM81}+7 zS8^sV@-)#c!Q1b|EOmcO+!qg0kAv%((KLbd(Bem_;n*laovnRUm4pHhGM{Am=nMQ@ zL{eb9dbbDAD$;DKwt+h?d7A7(7Yg-H4bpD7ev|`2Rhuq=N4eYa>ndroc<)|Ze2-&y zJ9<4YmBz`k7?8^a8uCd8rGw)BDB@7&V&NnIIaUb@-juaOZLY(bpu(aQ@E1pXmMMbF zSrS(jJA{E~l1Wy|^xix6v6@loeRs;0@AcTNQ6KF2P_UFpA}Yt4iNh|_P8atlA62%M z&D;?*l{g9vP7LglxoD(zj|7AUGp%`O<~Fw&_-m8%WCgfsF@hL(NKI&|B3SN3Y03#O zWK)My7cWQ@2OxeAZOiMITFKQcpXQi4!Z=Y^J$%uS8TXS8NCs20xL8v@Hptp;&(0qC zjMmd5WuTJmzZ>!FY(;=8MO=(a{maPb`)XGbllYnkr|dFb3LhX|r4yoe#fh8m*}koL zqDkO(HBt^#x2)dh>mGb#C$8sKAe%fEtk$1dYeKdJ2sm96l5q{sGZGu3lgl_SVz?H* z0yHF)pERV03DprBZv%$8bCUg!pS}Z$z5C{Z_e@;&2LY#TJ-k(eMBAuFgJX{4GHAz* zc@h9j>w4cpqWBzg-%rFZP>3Jtwg+LOd&C&vD8zz|@FMB3Xl+K3g|&_pB;#$dx<};s zj;>wcKOVFjIRaovSl2Kl?57pvrJoX`crbnaE67zH9=_XC#*R;H9}(4nx(R7Q91`#p zPrqxKyN#QJay8poI5~u!>>b{z8{H$pedxB6!>5Q zz+YraA|PhGy4d$|5mClRE6p_fSKkw2dDeK#RiUZo`%HAdK$gRy?9`F{(G#fzvh!A@ zpj)vIY7>@f^W9&!ctWM}=G8SGTMSE=@LI&HTgw>|buY)VN5#KXWXO4JjQvA1 zQC9nROr$%%;^ym!&X*fMF_Eq}nu#BE&+}5C?m6n_2h=^C|4rRf6`Sv>f%Mx2=_=yA z)4|4(z059UJ)5eXiLmR6im_BhB%UTvQJJ1SpM_!Kd1KcqL}M0z&1J6@%C#VSrw76B zrq<;5f2~Ex zt?`wayX)r2919KhxE{6_v{Xq<$g`Ml@Q6{NtLMCOPXJFQ>D~qp>2< zyahcu#x8qR;~ZV%Si%H8fSvIPzO0B7h^cUIJrGx($Jn?Gyk|5`IHg5X;2OchbX zYgav2b@bR{#{M-iXK!Dq2F^Es7wvUx{lf8Up=MO>z)$(X5n>DDPE+xhU{lg$*mdu z9%D_2W%Ej{-W&YsgSR$dO48fS+%hKcNg~LIp_}66$d*?Pz8$kZr{N~?@$#K&CT;9v z?BQiq=04@KM>AYu>m0-CL+bs1s4%6C1A^>E9j66u-ZKw}rD#+T}et zIHuf448O|L%U&R=sGC9*mzHfrEQ#C8Sg-t8q!#|s{4Khsy`GY{xz>wf;+L5p;v5Hm zL(EKF9WputpA5+K|NYZ(1CRSaq~8SibZ;K~_;fac-w`d}Pm^r3*+ggEl(!n!wag>=*+k)yuqO?Ycv7bv{h5T} zh0LA>nr*0j*tEr1aN?JbQFNzwR^I1!uJDV7^9(2NO#Su=B}{Nn{^;;?asP#5`^6s7 zwTWcxLw<~qx=npIQ;t0#rJM+dwU8Cpk56q{gOo7$j`I{tHof< zf2hS~e^03uwSuwy=}mS&6qTsH1BeoL?`a z&Ig?_)ALGAA@}k$2T!zSSbX-$ys$n!4~k)NN!7Ix;^-Re_wuQ>uXI?wf*5fKrF}_- zoe6p@3~5O3h<|H@w2dS>+;Umsf8rdAdPN?wFh zw`aE)qu)BD&!glbAk>b-V4LwNuo_+KRjc_F7qYJT@Pj5nToXe`#tdDm70Xh%vnkM+ zW^2c-=qu#%vVC*6F7bdQB6lC{rOGa|ZB1vxK*LuZeRi%5)t6V9=H+C@gqokyyKPjn z-$J&(bPEh~J$w=(f6I751HJ1+9T1?={U$(Dk|>-IF|1g{ecu09V;YkSD8pd9^qfWb z6comPOg3NBdz9cu%t>RaBf#OI*GDnUdEGu#0NRJ8oLG9Po7(v|2;U4p zIn?E%Zo@CHBT_eg@v4?(jl)rWkdM5Py;19fYxO~OquJ)UENrxYtI?K2fw$vB2m-@# z+gd?|fNzjB!>CsKWcaf#W!^!1(Lsx3BN42&hOg#;0>gRKu59Ci0+}7EyWm*y{qCW) z6lyTtj)v(-`6f2&piAruRNi8}Y#`3S_b!f12iHtx;l=dogs62_SGrsy(#0(OKKnkr zUGyZqwBh9%u?7jv=#Wx~2+FlD(jMoRFOu--qM-fYF_D+`A$rqjOYp)SFKQA2`{XI| zGYK2b0?yvrP}_Xw)C{SkkiMbYC^FH0{n#}v5s}rcCdg#4^4W*gKyHTKL!_O;yCvpc>zb)tME;GNoMYcLL zs_5<;a359SocW7IC^kT(mY!lwjtl#nO|wBOQzu7L-?ygQWp+!NJSuox%Dli|S1|N! zWSylvz%S;?pjGi8o3#3?BgjnjlcK77$qC+N^NF(})urd_eMRHLQ~M#)9TjiVLK(2Z zf|qtz-_BPA&(sgIP0HSx8NM0*QQOLX{18pSxl>8X?|2b9CM?)}LuYdl469 zMi^l7HKrqUh9-4~aS1AKxbB)_-A>9q$jT)%Pk5uNU6lexA7LP}b4c#sTidN;psfB9 zT6jGv;%YF9_v%LFV4`dT!uJub2guP8p4q#=q!>Z;4=ZQ|{%5Yny+%I`Hjj=Ej{(Z58a9B#;fZa1n znYtg9u+pQVC2YcP_{IvV02p{qac``kKXtV~te`2ste}pifE9G4{}%JuedjTHMiL;s zfk38hjf)>pAw)h-FFS@bNMR*4^JDaxxAib-&yT2Z|2$T$Cv4$9Sv@4Y?Skh>;JjZm zwWs=-9v3S8QSoA(^UY5yC>!bq!4HfGB`z@hTn**+SpqgVtfS(qKR9tul``ZUqicK-5b_ zEDIwlhaS3={K_yvOh2WtDSbQXzMuCZo!@sXTOUZ;>1u!14~y~^oUaio=PkIZ#4V1t zyjv|BuRvXp$hg7Tlykn*gO2Uxwul#pS%=u2d-;1Ui!N&%{nglD_C}~6PZo*C*ck%v z)w071v_D#uDAL=NyTRFmQ$TFbYQKBpjf?YbEY_MChBP0L&u-iIc!nBjg~6hd61HTv z21QO3?WCd96|L0wPg1LByNoeoJw}aiYSBmK2J>@wo0X0>CPH=jds9PZkNg2ys!&+^y#l z$sYqBt6-5Ln0Dhw0F1a#z}m|iEKpM?#deRP$+#MDvSvn_Dp(_zE`}GSL+G>kQeU5O@N}kkLi%vfX6JX7vVpg1A#w zonT6k!)dh&D43)yiZ!VvN35 z!K3?9eUT9*B_QzE?#cI8%D$pBW~-TjJVm?4t-d-=%|zZcUBqM zpOz-m$mUFyIy!5oPP1)hSCeQ^WwNzTK)!~MmzS}OWp)VBi(vvU> zj?Nh;e=y`EBjaIH4Ygs^$9!TRC@bNpf|Ll~eK$uqa9>`$Fh{vhaw4W(axu4HYRA&q zsB<6vR{s*g(YM7D$_Bw;m<-JZ1<7zw_^TsLfUmn8P!!fTkeXl{5pupEfEO+-hN}+n zb(N}je6RVs9x9)`{U1W-H`erJO``&eVF6&1dGCCv#aIT)^KtJpx?sJ_TZ*Oraj`e)pzmNdZtd0>~qcPj{U z7MouI8ZLGdJ}V*h7A~1MLeB)7vz(EM3O?~h19Wz@UxI0|`C=P^xKY(YC+w}FMT-7K zJV4l;e^}&opOzjV>^{rJ*rH3Nm)6^iF>CCQ7$NG%=3`5QIcia|xwomj_ooG(>R*k= zyp(=QT72x7&(t^9IG$Fck}V#<1iy9Vu7<07q`K9c6?f=9uEgGjFs%fJzKsj?xU|~Q zxz_}#^*lBYhQ}%%UKLBEe_VeuT=e4TC43QuS4Uwm1y9v^;0XfwHn{0h@OSP4Vz%t3 zKX;6H1%I7eiU$8YQID5JG{_tyi0%&wHtA_MbbR#Gb4v%)Xq zeD4Rp&w?J*`B+dvLf|n@JqCF&VO~WzE3S>_;c7ttC&r$}m7j#0Yu>72Tfs2gHFlvN zE(+Ycs_QhaCw%dJnT%UoSZx1d=0yJVAVaRAzE^!s+()SDux0XF??~cG$!Q&4jj*2c zoYy6lw@WkB%WBVia8duVd-~!y+%^L13-o(WI~GIQZRZ4QTM9DI((SqR)X#!0=DS5u z?L|FV#xCi`Zi|X;cV&GpvC9>y44##oX`(G+&#GdNcG=#i~zFb<^&E4Y0P1w;>v;l`kv!$%nhU`HK(t@dqF7 z>Xq&QPuA+*#HB^G4z^8C$M*e3FndmWjBy2eYsFaHBu@aNe5C zN`%sxL4Z}2z?A7S!}`P8`r$gpdf2Ku~bvw29X?30D-ZLUGZ8A~fAEn2+s~l0v;u}ixFob>Aza^>> z8l)+5H^cGgU8uq6)jl)mz1HY8&ZwD-1pRnpYJ*wz1a#-K)g=W0~rl*y&bVW4jE4a2`c*nwP4uQiG6S#Wcj(XX{XM zzs$*`xZHHr2j8J2k)t|HPjCD(F9swW<}#?x7g|)i^G2rP&_&-Cucu6Lpj@@LoYd^@ z1XZc+r`s7tr6aF&Y(8JjxW#*O?>c5J-0giK)y<7DQbvnkwv8QZHk~+Wh0P{9JYUv# z|FG{?1ub8Q2}seqpPNSv*=Xy<8kjGEKcOa}w~ydwl;e@}Ytq07p>BH|)BMakC_t1W z96--oEx{4H0^naLUQ6O@(<>RO3K17=0`T(59Ws&!}3q&N7i4=k2Qe# z@hPSdfULUcqF9*D@(s^yhdpv6JKmpm42Tf2e>wk@EFX@Ha40C_;K28QAsZJDV1B@f zzP%>@0+1!Qu&djRVe|ZdEGV%^Wm^J)Td@w<=J?mG$j5aPow)GxayCd)QDA zzA^17**<{80-E&Dl=h^lxjT$Pz6gkk zoqNm8+`_YMNKf^9P2pK3N%TqKjJZCEqc!8g;gy!a>yLbAQpuA`yYDc*E$9Fk5{4RH z4KLjY62>-pEho+;WQwbbyu75$CIZ8g_-v=98?7M`KRgNbH=2a66r#?T9bZ-Q29rfy zuG%_f;!AWIouOa)wQF`~8(m|k1yo*!S$yUV%`^*D_b?Y z;@%Gl*Ld#CweclBW6D@vebuf?Kj3JT{DJaII-1V$m!uXIf&;BOUx?BUv2 zgO)%ns%NtI+bi37xt*UmcuKr<#_tJ@Q@N`wixbmZ@sNzB!IG%=;TMrW1P zO64b686y8RYBB!UH_{|=%3Z3Wc77cHI4%>o9+63YJJE*Nv56niy+Itaj$B@Mtmfq$ z-!K(drp!_BRWQ^-v6<36D-nHu(MK!Y=N7`)UVuY{DuCAP>xU!p!uWC-S<6+7+CMfmPMMLdDq@LRbz|7IwK8H!e}txpi13LPMcu{gV8`Hk3tWG+tQP;! z+u>?x4}+G43dflX3%Kv;eTd*Wey#xo$eVZGqe%(9-P$bTgFIJ>8RHB7f7pAgurAkj z>zhvLl13Wo?gr^DNohnH=d`cT`ZRiek zm=Sg-VsZCT=4lqrAna1w$#0%vAqpo9d*Hz4{-Voqa4`QGU6~=8r1jSnZZR|%ZyhH2 zn!pwk*Z^lpwk}I1iBR|=N+3{|F(kwnyb43sD9=!cL7fGMx#b~ACU|I3Hd>)(Ay$8w zjp;7@gVRWqysve~w7biJr)OX4++_->G*%ib6^PxBeA9STYuMbZZ7wT{16Y9> z(Riu5l5N^4I?**LC8hz7DaL|R>rC$RbT4rxuq;l#=PrbTmt;m7A5i6xH<09Qb5tBxQ;1L z!+pk@L2-bWp3xU%62K8uLKPLzZ>wSDTM1H)hZ9D5gcEHw&91b9k zklq4RTK7TPJ(Ft(|C7KzOmfYumZh+zs&K2!E?n7u?o~~E%knPVdVSw6vP`hW45|;6 z5Z$Uu(<;RZHx3FGzAz+#^eHe*P;xKyz@nsIUUOA;f&nQT*n0$QE}uRdwDmj+BVc#y zop`=TC7aCV+O0ZHJD{qnE>~ERpCVwiQZ#A5vC^N^q`#2)Q6`o_yU}pDVD#8xtVFxX zU@^B(`@QvaqtR-~tozB%wD*@U8Ep~~M7&;KmuM2Lp7MF-=AUiV9O5wO)y~*0Z&Yn^ zTF=#buI@Bkpb!Z>>*Mzt0yLpRoNdM@4PJ*Qv+gV2-@dIM#+9}J-&r0nC%YGOT$5~W zf)0?{&K=xAzDeR(82QxE6iT`Ea1F}uKH}3uOQ^mbpdK?(^|sQ<(fIhLpB$5aC?D>5 zAC!`;mMV+M3i*X`g0Uk9DqE3dkiINyNy2AYEvwfw(LI;wem(m{wo0WsjGS4T`I=dp zd77nC><#k+LR#RsTp_&?EURKtvkWUb*_+QdNC+d{IfgheUuK+#$}$`p<__tb`(~Iw z)8ZEQeG&^h7cH3^O5as(sPY;M-#0Kf-yFVsfy5k^vS z_35%zy*ShIH*w7Dbe0P$JSU|C1m`EG(gC8|5{}pEg;x*X?t55>4m>M``92Y1=4__YB1v-zwKMJ>U>SHw`#^pzSdd1L>cko`y!z%;cI{|%dEQG_-d9FKLH^bp(E~TVTU%~c81zg|yrfh`!Fp&)!;&6Sf;eI}Xhy3n zCUJzO|ANG|dRjHPfjFi22B18a~ zYiq!Ba~*unYvD=NqGR_?o+heTuiY&tln#`Rfm?E!g7|nEejz_u=X<76`_w6JBj=TT z$huS`#P|HC?2qeOzeszim5tFCWOm_qfoQH+FhxZumnMn;&DFJ`IL3U_A0XZ}DCR|% z6G?4OOAMXqQf>$J$#{RKxmp-mY=H*t1BBMoax4#^1Y7TkF9hy~U}j%*;kNQ>hm&FoiIPWi(w*|QnOY-K|s% z#$iXgt3S+KoUB|wR6^j$0A|p3b;{ZJ2-2YsA~7{S6bH1|1Z?vtGGZAAX;VR!&1IB%duIio1vioM)2$l(OU-M;wD0l zwOT%m4HQt*f1Q2L!R+kselEZP`UY@-68b-f$loOrKEHrqiR2hKOyPGn`GL55{sVEh z#_Ki&;|h=IF-V#twgiWCOZ|1fZST+NXS!C9fIFIQR)%$;dqiu4%4&hhzk2v-+1?vD zbCvJuSGOSW5nG=3kCz8q9pG^+oFJZe!Gzep#7-rp>6Ie`Yzxg^fE*O1b zzNctci%fk`@&f0@`##U`EGU7kx%F=Ot8HSMZ=;sh%q_$e!V4 ziNww*#AqaP#Lb7X4U1T~tw8;{1J>dzdAkFA`tAW~q`!tEPOk5s=6M-Rpbc?%i>_Y) zs$xtOdaNiOJ+NF1SDkB$F`!pS1iicH`bAL?1dW-FH|*>9T&1#D;Umnkr0f|vNji}y z4^i9XvXq&2s9Oy~tL?o%@nFF$)FhwvI``MCUMGe|!D=xDN435sjqyQ6fI>}VL`m~( zvUz4CF$pQdAjAKHowO6tUWtrE&o^6I)WCqT>no7MS#c}=1`FRO)x zQRrz{)0Mr_a}GJ)8D8GOotc5N#K!o;4+lo+BHRsK!$}%fB}|7a?JoP#NRWOK*7pKE zd3Wv+OwXrgesjaNHSe6A&S{%3ueNF$aXUC0KFB>!h|?%PFHLjf7}dd{TBr%!U`9E} z+$Hkw)(_w{2oTX^n?{1U+-KT8H~iw-Pa`WzH6yMKd5ZN?%*j!)8C^ z2&VM&gS7NwMnuxmYz3Sni+I-bN8E^H{uMOnMyi#P$%AC;Z;qtStIYdfNV|G9inw~? zE2)>NGjNh?GEUM>QcjY+q}ZMxcrnexVv2y?*7tUu^1b@~su!_xW$S)c{}O==VI__ zbu3ybY_!=iR*kiqa`XrVl9bAj-FDmu#x0aSGZi1e7Ey7gK+=p?uOH^Kg@}o1kMV-C zQ>5$02*%OEH@T|P$HC?NmG-8pLF=n^FKPJUm`$-{EGA_p~i%HDxT6f_%As@KD)M>`Zzm_LT)Y?jmRj0#u~ zsbCTP()K0mOZ3qnZvs4`Jua(1-UL9I{Pz#M+|xT9)rcdLOG(iVZs)5o0x49BpUZ?Q zR4GxxT1%)F8m74rs(EdIpghv_ZfGfZf31 z2z{b>9$4LUHQ;`@0%%wW6B~|Tou8p6kidlX&qMdBz-$RF0^gMiOj@Np+i8M4k z%y0A@u5+*%P^~&C;;}nlD_%MM7;r(HI6W6mT&Kld$8}?Lap<(Wuo4;6NN;(5X}&zu z;VG(-%gD#&vM+nwQ?*Yhc-rXg@vUpSMuNHw1=?L|{O6@8B|XdNUB zxFha0x<t9h$tamu}qkQJ3#UY&$Lj8RHUfy4c%75Is1tSs_~5I_c9zb>RH{i20L zgh7zobHo!1stnh|YIo}+i};BQaswfQybxlDPhNCL6#j(_B2r=UH2oB2w+f73XQKF~ zpmmT1^A!|!?m}n`x;d~8(oKQ})eMFwDH>ibMEcM+T zfu3E#HE|?6-0@m=Sb`Jdtt^#G0f+G9EqJ5-S#&ye@_1J|2LRr10l*tmW1I%jFBY#| z0MpJoc_{$iNFA>QOgjv2Nmp(mC7CAm95SgPdM{O*P#?Y);0epf%Ww#3bdV8oqfkI_ zAm$GXXs3ILGZo|d@*2+*-c$3&`ghF1i{p-wKlhVd96w(kKU_PL77h$=u&La!&BQR} zW#~_oCEJITF(Jz^9w4au)}@Ao^o_QVk{AlT6od2i?G)~*gK zBcU6eZ$z77aSGiFRpv^FXXQ#G=6UVDZbClp@i5mcTGA|7)qH6mCh>sD#tu_N#h}(; z(sJT@GgYqXt0n;T?8r2OC#s;PlW8PZpFw_JloPC>ou9E-T^k6U+X?K;uOEKjmv?~N zI-&KmFo!IMcokjArnimC!^ZfZ*eX?pQ&X4}aE~WnMkxUc&U;3Lu%DXCFeA2!?bw&G zbP8L{eA^rnygHS?^d7ZTBN!HMVNmrjD7_&R4O(aM6vabsCxPxpsS{evB2whnsn6ft zYt#jRYrQXUS+WHCE%MHw2RA_na;!4m3j%R?4?q*K0diGI9|S;xY1=FlTCMV3^5y~a z89-mE`W%4nT(l?8P&)0zpGW_*pGKjg z=viqB1*M{%a2S}?n2v2k)CIs(8?MH3yl&{8^KO=YhlWz3Dj60cDD*)Z5wR3!P%`$5Hvmwb4qfXA<1`2#ElnBp-<>+0IPNj$b0$H!^fe_|>$YiJ&Y)FfO zL?w<4-e=cm>v=Lw3_6~B*Lu&-w^kAkm+j7m=ycupFQ+#)7E?ldENDvwE_uy!dlDaz%JKm1 zgsq~KjyasF-QGx|p1%Z=j9mb33l76TVM61go$Vw>Fodsl;#4W9~+vA1m9dZ|FWauSh_zdyirCX6MKm) zqlY*~5Ty9b{dO_VU^J%IdTWmP5J?ZcU(;A{I%5sDEJvR?l);wv63 zz=okTfk1Bi7V8L&sWkv)Ow0Iwi*G$Aj9xi50dENI{1|eSm(`$Q#jXfwjZv*kSRC7yZa({dQL5N1Kr~hWWO6Q;nL-;*u+iZ99w429OQ? zmNED7ovYMzP1tLN2N0~7d%mI&cGn97T!hfZ)tmS8zrISFzRB>4LcLZGEMLPC=dR_SXUq2R5)-J(Cx%jL{%zg_Jp?V*@X<7yaNnV9r;x;iGBTQ zRQbn4C%u*N-KR4)WmrsR&X?PiFZVkP2DG-Z3Yw%x|iN`{##Yh$5$(HKhj};eMY%izk6~2 z%Ot?G8!uw{-$;O^<1hLjMDKUZiWDH|88X>Y|}~8VHo)HQfgVO1ZHno7gbj zh2>LNI$!6N7;g;l9k+WmkD%3o2T6v><0hBf8%vT>@v|DrNRBIl<|>oRIU``RED$5{2Skx)cBdq#aQ#l@o3|@zoe83kJyvGJu>g zFO(0-gPoPb8Jxf#qW9Hx=_p44c2I_Z&2!MsXfbm+;}FJmkSwKu(ikZ^9SD@F*^9*5 z=6A~U8LSf(U3+l9z2feLS3MoCxJ!o-Ri%!H;^|F6o(*2MiKSk+pIh#D?0EabHwDb( zNg|Igsl@3Js#GC&m3ks9y{g9-$t)5hW~)AvzmC3)xFou%eDdpu@kX?==uf940F3;O z)%a;nOCak@&Zk2@EohTwOukPZ)u8_>cp@YKE>qwA&C{yQ{QE7WsQ7jIbWkn&=A1Ym zB}r>U9NqAq5 zz29hBL$pTI6L{MS!xyk3SH#?lBnHcc5qfMvfvs!+rm>|7f@!?e z#I9>Eu%T{R$HgP|D?8pfaGLJD=!IS(wNH@B6FFS%iy|ZioZ7IiCvALcY{r5jkIIxD zu!PAGkU$P7xs`bLa>i)vrNFd6MXs}o&ntZeo_>*1h7F{_#UTnKSOY@lh&1>3>GzPZD`Wzg@j{(+Wg zc^b0N*NS_t^x@1|2K? z#&c;Mj`VU(OV>yj zv2^@-OLH;bibwx_PVK!%eI^UfhRf%xX0ijdVup3)i| zpopx+&@yi6np$tYI@?!_pGU?R{Lse#JYy?{)?{}l9$%Z=+w9?hf@1z075|RjnfRHm zYfinoorcTR*u!aByO36NEh3{HzGN4IDA59LQlkPI5S0p_`M}28`cyo#R^LnK9d)ONbuXlO zd8R9%dP->fAg5NfgW9Y-K5>(oLm_t0LAk7J?d?!tKPyBGQ&=xk#zNX`yD9BT>95tbr}cTRb#hzRS5dCMZjR3=5OVQ-pFmbkhj?GaQ*F* z4z9&w$HX^S1MQ5ZT|((AuuoTWliNgL#9?W-N#^8`BG6s+2y|CbD9paj7d#xnxByp? z*n%M-W#%!la(T|`O2DZW!@r};O7_?1Q62-@8M|vzcUKjlR=hHMo3R62Rb#$5 zH%4f2JZ;|?2_Jm+hLj=vTy~$nLAbX_>4;!}EN|eLJ2-VQef?L~9{U4}cqj^x@{LjM z4^qAfVs~0L0Ofmoz(78|wkh>Z;1A`Szwl1^o>%y(e7nc*S$y&g`6uPO8&JOOlWdj* zKY^6*KNPfo405nCv9kU*e;%;sa%<>xth7$*Vv|OgbcNFMJiuQ))Y%QtaL2tFlsX@m zKk}lGy%vT`v0Dyk=;;mTXAvYqIGi>h#dH2Z#SoKXm$NlXXm3Qjx+}YU2LEvMBD-^z zwu!olwlrp3dIzC&UdzN?Twdw1NRN?aLJ&qIq@5(Ygt06;v@w&2jj@M0?ds3AI|-2e zG@$9UcYBJNaXeOYEbwWJ`g$-QVY~rEf8=TNVG!&Ww-2rbHb*n+{}%>1tkMZ$eo$e5 zK4Mv!?#k|pqh$bT3N_HeDYlnXq?Gf`MrZEltI`LH)uP84+jcGsV~f$#@`7vp z&)=2Sx(_^k%*D!Xd)fT48nRBG8!^U+rnf?;hgH^2_FQ<1a}?!OF_XG8L4MtJ-5u_$ zVJSYC0>FLAw3ZQ28?IFcU*IRY)D6Br^6khp0YPEom-Qp=p9daTq-N~H-`BPY1_2iJ z=L{m4I`5#c_a+~f6LLRGFr)2O`AGQQ&^Y-%)`P5ea&#JgiG`YLqIpHV7H2#NN*92n zSV?eOLCK&KRdU{zw^GL{uS>lBkKq6YZm1F`?8<%i}w%UeeDPU z-oL_Uxzj73@weKn90&okiYzQoDy9|d0}x>GUS>7fGFHxkyFY>(1jT0xw-~tZPZWeJ zq;od6;mbeFD*sr)!ph9f@_oVeTLbIAD_DT<6BqD(a`>Zr5%AY#QPCeLkfg&3DoaZ~ zYw=~_1Q+1Ju6K#}S>fdTXNA+wuN6*s|GIneL{R>&d-3Fdtb6faoCZ#o@6Nh^p9Ua8 zA-03u%LKl9dfI#ix~=~2Jq^B6clf=2oMP6Q}HqpkA6+h62(Zr#qg z8>M@on|8U1g=TTrtl8<2d;?QZVo;+gUIgF0PY+^8$Sxim3c-*aJ!)jMTBr}eLXwAn zWd3G{hjDGbdXU2<>EsxG2q@V$VkIW0r=8hxfgPszGgQ@86&`>H6F;%Oy1^a9s&88 zE+9X{ohl)nc40Q)7U7pYkch+4pNNtI1K2g5YfwCp0hqi5$JB}FEI}6hsm~DX9ZRnw zhiR14T4P>ZUDs-$ryf7v94?N%;wgNiQYSiJ*p&A9&^B~@rDJ)aF0ET5EeP}T0=nl$ zw7E#ROxny4MI_PZi!}^Wiu%v0EBNOqNBBq62YFY&$#DPJzQYRi#(%#r{%4hEFa$h4 z6HLM1PQ$;IXL4hZ7dwkcTt#HXwzyM8&Y)zc>gG9*_=ZY6`n&locZvng$SQ%^XOpEB zTHIB_k$L|$k4mwT>~;Dii=c>)QP+TPRKPnUjPmhqU`%9|$79vfkP0?ladbFwC)A5%ML zfnm|B3dWYNu1&T}TPh)D5jcnm#S;P~36MN75U(x4AjpE+v7??2aLZ0^x$vM|bj}Yt zG)`hSH%2x{JFPISnir}xU2E|aQ#s%|>^#VyE-y?}-rzlTGs$o8TZ21(!>HcRIKI{6 zxQ=V5=x7)jGhR||Wc?ZPS-SfC=5Ovuo>?T{)8AztRu)#K@0X?=&}fbt5Crs=NjQ%O zfV)oS*pQfwZZ5$n&th9SbBjcXR14Mhq8XClq&sOrB{$+mJSYU}s6N4EMMfTqhP)2O z{s6K@8cS>uU?@5D;u^)FLBOM{v`ez2p^q`GSZGu^0k@Lw6Xx1-de&4Z^c6d&bM&iM!ospCe)Skk+l z;#s(qU?2^w2SV&v+_@pwEpFYA`)rcus%gF(H1ZUlL+AQ!*~d9O5avUW@>S&7=z&75 znkeEjB13yRC~;b?Q=pzhUY&E9$LK)Mq2`;t?4X)Pz70D)n`a*8D0^9Ft7xgU?w1_S z0**~>p9DoW3?cI@zD+#R;4IS$T#FNcae=hCKz)U^FDjGtWKVF9_Z$C>jrVVs@P8il zfzb5rzV5$I3H3UH!utt+unU?Nw$@r`4yZ0N0~ zy;sQ*0D`8g{8O~>18$bbu7x>IN&(El&JWDNR~!4qzhMqu{s))?n5*~KfBchU8d#>R z0$+vbzo)8LSvYP#3RTg9Ks_#IN7|xNazDs2t@5CIM!y`3Gkpcl-H#a@%E8^AKLipz zX8N-YV1ebI#VlmseZt0^E-o_3>2|h!cyZaWhzm)#H}zLP?mnm=7l0hd5KQYgf*)MD zgfQ(rj#2)yweZ?@bkwq%z3wryo>00sP;9?(TWoK9X-{^7623MoegDc26>qs4Q9CX^ zg`erkHtXS{7b#wK6CnPC+vQl!5>`|MTxqMg+=h=g7I$KH-=xK8bX%Axcg)X&cj9s% zw-P)fI!`p`I$$CRdaN9|W%LppH|#S$?vtt3#=kwCT+F-{2KenOoO=IOY_9+UUtC@B z?_Dl{e;{T^J;(R7E_9GCz1OYBt$INb6xH~do*o)yRgmmJf+QXBCOamI%@@hU3Zni< zZ*R++G)BwpKJhR(-}QS%izoM9Ds5ZQBsduGj~_~&xO$xwt?~qWj$Ph~!$=235;JPd z#xz+%ZAy`uT~Rf+{kREr?kV0n@~^H{DIxnWHua=j$Bc>CIQjh3{hUw3CVBGi~0=QdpCANzd=o=-mY+5|;64$5CrAdt5Lb+Q%z7r7Vz#-RK!#h^?NCjzrD7?>XP-(S+K zKaYcqd>a#LV5g(1^XfYzr7qp_Eu`LvOcf$4q>8%cCawv-Lduq)$RnGF$QKFr#3!q zvz5MDD!l4z68V@ncDY5fy!Hl&t7(a?$Ml#R&ftc$fH6niwbVnAvUcyT9eGXayG+qID;BK z^pNmXj}NZfm&?)5Vnaf4&0vHuYmnV~zLGQ*y_1jE4e_Q3nWfP>v@nh`y4n`>nuk!t{Cb zSVh6kE~wrO%v%mrpnr~GtM4r~lLP7RN0+cEN#(4rY`7)r5;22e}^fzIZB&s8vBaNf#gIR&! zUVbd`UyR}Y*a!l2<{wV2h`ZsypeAcLhlxZ@SbAP)?jaDaK7mnAhLQrU1Owz>WY3Tl z`B*6{r-TGh+IZd5{6q?lEn|3j_Ixf1lLDRovomid30?3Us*-Ncx7S{b!E;7i^c_xc zL@yr^ar+Ay=|enV;)8J@j|vFIMVI##@1-8jd~UoS{L;@&F$)0#8&`N1qgb}Xk$=@x z&}_DELRX36W(bR&rER;##s1yCjZB5NUZOxzxGq6>r9(;9a}`Px-Q<|v2+gx)E;vzF z4@`z+nboNp8sZqomW_GXvGa(>D;HlP-EF<>yd3AaY*O4F)?U|_y~kPleBYjZH9vv1 z$}Cmu-8L7y{_t}RA2p^9{l!Ax(Q0a0mG$f|bjizI_shx~_r{fKrenJ|tulJ2N$&Nx zY9dr6$BYVX*nk35uN(v{^;S@>X96l59+@p$CU0-mZ#90xsf{cCLUdK_c#d{Idr?6e zJ_b$psXJ@>h1Ssqck$Pn{*fCQ4b1(zjG71nu_NnwCbPjJx9(NFEfvp*f;_$i(714Q zJ1)2m@yn0in;b%AN_Mo-x~Dm8Kl|jF)aKUU=D@T;(vu-Wq1k9NlXa<6dr#L9Cq2fg zZ{_?X5k$nWV%EFQt#-O+uEQX`BWvWad`r+oqg%_RKR(R0Q_Bs0izOVHvGmtjFYSt+QrtYxq1QwwQUJvo&{qjDZ zR|(kM&_o#W=Y_Dh&YaOOo#_G)d1j&Zp*^!A%SC=d&zN>b>S z(=MNkvkdZW!xG!cp5=D+Bd}Y4sZ> z8^U2Ad}r3}0PK+4=lOkmcg>>QDqTx zYhY6oU++C^NY=-Tm!zksN7FzVwl@lf7ZOm04N*e#w=!&MQgNURyF^S7D8qiV@Aoz0 zE76VR?`C(kFgQWPKaL99&oZ0uegh@SS^o&q*Sf%z(L5P~uW0Yz;3EeHK1*Z}$pSDq z_*)-M1=`KjJa+xo6!{6)M@VbiKGplWiE$bOWe}p%T4E_4Ymk=o8D0eA`nc~Jy6~`s==|QQAF*zOq&YP7i zyV;nTEg25a79gG32&6L){HOg6R?_!NW$14zRXrcmUNF&^o9nOQ_6@{#JrvqR}NEniD zbtBKWA(lF?dudEWl)B36zT5pByP#1Nw}W#na(YR9i(L=^VHW^7f}lmnlLH#L4yVB- zWVB}FWuW(ZB1Av_L&r}MAN7}$Zm|pfc|JX>*8q0Gb?D#@yC9fi6J^S;uU183jt2p4 z#{YK3mwX+BT^MHJe|&THyu5#v4JUoK)FNkH6D6ln=b3J)S=F5!5d@MWER%TCYKaYc z=S4OQk#6OP>LQ~mguzmedwY0uCl4|o8j1p$yS+3(j_|x5_JaKN12g6WmxA!;sri9j zXaG(PYNweIZIZQ|1e!T;YU+LLv229;$YyTinX_awS(ZY+2Sf{`x}r5ZI>~&!8cRi7 zKK|CpT{btY6^qAHi0?8j?wa8?>V4}WnXzivbJK=D9Ai!?V{yxs1z9UM0Bhyh)xDueY`|LiS5gz_ zB4;(A=`%lLK>whiRaB%<3l5U9v{;0qsBV%kBQGuEbth>op!{>*+EsFp*B*zd&ykpp zQM+}mzUuk@saXz^J%)0dczzlxej~8}S8>l3v>?B#}$AsOV}G zJOHbM_e|k{_rU$~k3&8Gskq)y%yIOZq{vMO`9)_O)!b#!u}FZ7Wv*XskP-@Z}c>IYg?K`@CS?tz0P2A3e-p5RQ}R6d#zIxrbf=a3e&xpHH5((RyHqLO>%UoEu8x-0qc1c4W9sDJ%8d@ zhrjH+%(z^0AOcv=7YN@Gz7nPFHR#smHQ6|sas0#(J3>1BeI0bZ`rdY~Hv}dR3UIbn zW4I+Jfc$PHu@SECD|_qN?)+{G&G#T}z1$J`8tWiSfcdxYUt%4!<*h|Cd~tTmx2pX&<4Qq(u@0c17JH7 zZAP)6bgJU%GGeDEQDygZd`SKZ2;KVIq%*oQOwq@La5?R z;0t!2;A0<3cOiL%CX;d6X6sl+OGp;5Pryp~+!t`k6i(IOanlabBcsl7##cOEjOzH-A)7*Pf6VS$e^O{% zB4Ag~a`UlQ*@ST)=jn2LK+Fs5q~_)X6$6x~?^ly^x13TLjBd{Ci+Y`>A-C#k3k@~o z?Ndu?w>C3OhR?GEBs}lMoCKXrY-?|O8^2>56o5gn8Tky9w12guFVn47dMo6(i=GhT zwB^yuc`UP?@25Kk|Ld=#YMejC75H_m0Du1ab+7|X384QYIlncnV=24&HHZWFBTEvT zB=Yne3B`A1Gj?^y^pD|Uf6X)V-sYLBpi;Mpsx72C>5gVSNudQ3Cc`Pe=^36&0cGoq zzm%}2TIbMf4{7}zuuIEJwSbow0j zn<Nu%Q`qB=9ZNJ^&3xvXZ;dsJ%rsxJgylAK+SnmL zsASAmTC!W+EY{0;$5+>Cz6)z_MnCBFeMjf^`tkFN_D33M#EuxEotr!OEAg(TKAK1G zgRwMJyk-a41R$(7W`P2-1jJr()6mJ=gq-HEvBW3xcdA~oS0pmH$df3q46;pL+#@AC zlbpXz$l0?mF9QiVBTzz4Z~itRM+H@;eiCeN68E+{A_Mqw>H{R$%rvlN*bAY>Ht@d^ za-EofZ;7c*u)pw`7tkoH2^dapw8R8`0?fYw@&803x~Jo&KH;mrLk71fIRVKFl08lT zBJ3$<(v_pkvF@jGJmG~C*?Eg^NK!gla`O^7u=5fHfIjOSo(`2N`0hYZpLM5t5|sEt zQG`SlyozJXVo=ZE`$qUAP+?9*`GRVvCcoRrNqxk~(Oatw=SgDnwTCn978N`Bdw!Bf ziHaFVg9ga_@Y&I)IlPqFoGT!d9PF#8c#3_IBo_Xo$hFP2r1L*20193S(?b7oAUT-6 ze?+3cyJn4xWNVoT#j~FWP}@VA(ONeHGcw1WRNf6mPJIf8Z;lUu!wi>yxMl}j&-#A2 zW=m#~o0<7Ru35a)(%TA8=ND|8a&TM^(9i7Hz%jTu_a_D`MLVCz6PT1|>wM9YXnNVf z_NB6mJ6&E?`ogrXB2Y2~EW?L}z+IEbJN!*#k-Rx?51 zsr6y_CF~jD8UMBU?^91H$)lv3KQ^u$EbO;Wkz&A@GQtF~2a}#Qq=-tCy#|&mo_5k?*8tWjFO6TWHZv^paEGW@J!1D3GVYcWy0mbY41dY5oFQY)HWDF1%wMU zm{rd<`{iTs%p@~dN#uL&u8-o)NRm<(VIkNRF$r^q{GOn-D8*YNDC5%57>I{2sY-BS z-9(;c&s0(*d3HHbgX%@99iRzMZ*ftTSN6s0#Lq^9!tLNHeluBj{!5c}L)8HP{ds&r z+&jV??oX5TKL&!{{~ieX1mL1z?f`QDE~-5178e!c$0Sd3HcKYyDd=}35xshy;`vt~ zs9dkq6%jZq4;><|&HXGPpr0JQRwhMuGj^~B24p&yeaz6u8}}CH9sGp`V5I+MvPK6? z){KD3TJLN6dT1;P@M;xIf&COpWUls$$y$bA?-{bpE?}}A7T!*4OBQnU)}ckZeYGlY zy8U>y&dY&J*0--#df9Ij|KinZ0(!OfX&me>IWL`ltGoKGzk_+4eDFtX?61p?gN5UJ z8COfhFi2QUdb`uN+>!CxUWDKRW9_x|JXf_@v|lpA=Xp{yc0;_Z_nPx(2osjRlW4OMdAqBL3c2R8bt` z`m?WyB_jKH8)N;_nshrTDDJv{u8zgci0KjNn=(~8ZU?pC&VRsuHR{F>1#P!LnFA#a zh164l^`*RO4fv!i<@B>%N=YEx=d2v@NeOQ0=IqsED@;9fjXH4kLM~Y4dvl<<34jR4 zA{h{uG*Ko-m7`>CCt^%`Xw6|6ew}Ah7N`1$1CebxP1!kMhhB9W6#Sb8`Ha=ITjLdY zPo~H&pI%%0ukL_1^)(F4Rx=&MMb%+0I6x9lgQgobNv~y<7ZNVhLH-5)#9C7x0p3CL zZN%UHsAJ`w-=(|$^NYgugR?6G8i@l7JJpkQg9t+Yy~bB51zuFQ7(<79UC;7}9GyVGt;B&w&aGHG?{2$fK=#Y%(UnllMNr&0!z`NMu~ z_7O5f05?K)d7;1;(ERSjb1``Fuy*|Q^;8|S9vw=@#>?>|vDs{#i{d|u4dChg8sJ3q|rB!3oEHO<~=$@0I5)5l!YcG7tc57QSi*S(pFy zO0`1v@vPVsN@(15%Y2=!djDEcN^!-7d6Qlbn*Xi|jq1>o;&D;^C`1$*3dKjCKaZI< zFWV1>-jpTA@eJ=#>8iAQipmgj2jA!OY)cle*x*hD7W$j^s{EZ@LuSQ{9KBkCwX#uW z{Q4U7547(?0GCgEtbY;c@~QH#az8phw41oIa!far?-d2*G|oJmE;VCstd#gRcr^<* zFbnCGbn(!6{_CeFhC9kgdHCNZauvt&AAeLWF2G!1uirKjQEx?|w`y!{YTI2vxh%Z; z4L|qKTU<_7mhX4Zzqh#mFKu!E*$&Cc%Jw5~3V6RTJBj65jvhH~>c2<~iD>jm&gWd4 zAzOkm1nghc1P>%Kw9^Ug{qKJodNsucWiTK2pyJ;!!vB>){CAHXbO(UR|LHGc2qy>U zUv@~Ld*Y#Zn(7KnB|7$yB}+(5`-WNHgZTXsx>qSa_rw;vU!%C5HJRj!(ekN@t4=t} zIgn?z3B(RxW%{==I<>p(KJ6+B5Wc_2tHwO`X);cKe}<8O`vP+@;km3D5@3S#0!)xQ zZ*EPH7`G-!M(*CpEv}T#>vgWgl_V?hBhOj2a@HV<0gaTCsj{PtHI=nwah@2-v+CDcKu0Jc#WvS+W?-cqTf(i7w@MeZT}eI zxR^M;+ZlfLnRBigWWt3&afs9HljM50P(q`LDWZn>J`E+}lM?nPX)PK2TIvVQum1KZ zT>}mC_zU?p1R4Sbj?zjoTv@veNkB)Ozl`VijGUG>P#JAbi#hJ-B97U-Kur7>c3MTP831p;bwY~ zGtjfDFv~lo>(oChu>WOxk*dk7my^M3y>Bih^}2DY#Kx6V3HL^8a@I9vW_OohcdNq4NBi^*|m>-ogf)JnRT3c9g!ItkoIjsU5?NL2qJ9UJ{>;`!NvyCiB20%Va{`C_$-kPNS(c^?qNEy+&^3@@aRDBmp)Z%D|@MIHlp|%y_%$xVhVOcu$iEeqX9? zW%$-|K`@!S`~n%Z^elBMJseU=7~QgUM_&}R zkyC#uk{Bh3GWh`7sv6`I(cOR$!+gEqF{ev<>;D2VJn{d77*=|T{2w8P|Jkm~&2bls z`?p>9|H5SMK5zB|(7i42_tI`QW|kj0$e+a_ldP1zIWlMyRt(vP4-s3o#8L6_k=h@< zWPbY?7Y$Qv=9ul}Be?uxWt~N;$1ZQ8xS@;5!_#$PTLsm=i%_+8jd^G)eACEVX+cZ^EAG-mY*_M4-gFtT4=yUEI;hgmw z*GSj2npPbXP;VTdio1VudYXSpmt+vjvQduv1M_(Ds?mrB=nP$b*4; z<}@d)`=KBjy0(+`hkp=b|N7Ux1w?agVV`=8fd8F7y3Pu;hfKSMCjeLu!&u+bwKVKu z1$_g&MoF4ixv+>+Rhs&XHTrAbx3c);-|nr2pR#!S-(~UG?C-L8%Xe8^M1$&17MFLs zySM6o-dp3Kdy7hQ)*ZOFPDUI`tAJ>(^Yq%osb-KYzLxTIlT$=|NFs>)$cZ|oo^e*- zL4&}rO@^V@L_m?e=*=H8=R!rm#`*7}1RL{r(qnP-_s%0KrP-982=N@_fX62=>qQ^> zXGk($yqG00i1_LY)x+JYnh5d*KH|7JRRT#@;aPEMH@iI%(Wtr$Q`^A=6{K$BVpcs~ zaWc=vCQW7tRUavvno&Mn(oaCpDQQkv@WDs!WrwFA$m+FX@)1IHm7mVIBo2z~cB}(Q zSD*rAm9`2OIYQ?Tywo-*8#g)@=RsP>2E_y->dIDkW)AH;Gsiv`GoV~C|4^qw6wv35?!h)(rAY%Y!K+2?SVRgJHfsaaBAspQG_z0R}lnn-iqXz`*hgRINAhcv-u zV!QD~P5hwb;pkHM63~^L76VS(gLu~?F=t6@F!iHH0-Xax%Ij22dEV@`*96cb@grLT zc!2V5JwTQ~k3`}%56l@HriTH#5!9q#U@a#!1E^_x;Ayuq72ZuYKEel^r}?7K=^n|< z$Gm=wGic8jo-8n)N8%O{ojagKWSLx5@1RH0=hmM8Ok{`&3ccS=wGUpZ^-khE)jwX{ z#su|92+i6INVioG#ho9#J+4o6jOp2j<4tTx($Dv9wz1z;xuKU`mXY+d)OUbPs$JWl z{NA)}p+AdCT2AT(sNq;Agia{#)J+k@zdmo6dkgm+fvMvcx-)P}?ve)or*voi3=rMf zz~%3B=XncDiaj@-*ZrF7&fgv(cyWX#$?o~JAH{tcMW4e=!LAxDKw}SAdLXky*3Bpv z+Qa_OaA)qXe(aBdV@v?`x1}f>3p4X~36@_Tk{LC?Y?7LRkS9b^9@y^qElbw;XnZw< zA*Z(Y7yAm~6bHdvfA*4t7F80iRIib5ATs4;>>9#=lgtRbd!{z&l%=t^FeEF+{-EYT zLg&4eS3O|JWRdW)Da=mqo3=C$OWY1I!?=1TdD{l>TPT-UXWG>vchA;pj5$(mB{#6b z0lva@u|&c8=&@ClA+Ha7=VTJt-6<`&DP7!L711fq{~vpA8P(O=_G^>Uji8buNO!lC zlr++vN=kQ#ASET;-3?Eei7&QO z%xPAnvSSKs5fy!B7e(oFTi;{=i?#juNuqo4(XvCe=`zs)y_Iie7f9IXZ}1&CM0qjm z1JQ*{2nBvI0U&J50t_k7;ey|MweYU(YOT6mXS26 zq0of%w!`SA&mSS_zq{|Jg7=-;!~VmZAdmVC(rN?DiTHAWIWcvI#Y#?W_!Em&3}CVR zR0OJSu~-j;Kv=AfHRf9^7XE0qL~k2_#R>wjSj?tW-ORUGEE~U{Sga7qcn}s#C_d2m z7K;@W@hcXqQqte?@(zn-0bsF;Y4uh)rW=h*NvvyV7!PFDl|WdmUZSON$R))z^oPmB zj_&v*vf2?%2&SFR{5KwTUjGJ*HHZ|y-~+s{*nxM#FV7-7H(xqBxZ*Pl zgAk;)!nWZ3CKz9`SCo3khkOl27fq+FFDjqIyUOIozTTCJ-&cpBjd+)_n6{R0{Q--a ztY5EP{mVP?{q>G$nA$fPBsVL6fSs&xQ@Z}jOfWI9Gu>x$|Cw(*htZdn!uP=8^J}|= zHsgm5cVs5=@peQH!ID8G-eysma4fb%!GhPwt4Ai%(35?NMY}aFPQ*<%udP5vm2P`G z+tB%awgGK&#NlqZ2Kfo{MZUp>|8725UsGM^n4+*7^|a}E+QeL4D>>G} z8++SrODk>5Z}oPLE1S8^iIM@D_7j?kZY4bI&==9tf%n=|wzjWu?_K01U`@T20vBZ4 zj%cye&(-?ZB**C^oC2lwBGPq*$aK01PzJZVlnsHt7po$Nw1&hAZ6>DT%-$+69Yht*rW2p@D%a;paub|+u@n23n?CC~ z`;IU0OZ5D=Um`|E7Pi}vIFK{~f>+S9kpv}645T6y#XoR1sq?r!Sd|+61K?GbVd2J< z%&N9VDzvnVx^Z|O;5UOYx3MQtR0HJdkI9GB)6DO*DhyXveJn|dEJ9wFtZ zKic?A_OZRom5H9qq=Oab!?7m@N#W~B<3VNSco}i-v(ncZZxdV`tTIUhn3isw|Ja@U z3dH+o62ruFSAhHPyH@{)hxfk=5AWX&Qka;S|KqCv|1IK-Pa+iB=&wNv6EoA#V&gr2 zpDLQtvvN$3xCAEv9d+)>x0fd=9$tPEO5|BeWavJksGbdGJv-tUv6vpH{;)dc+?iS7 zP*DEv!5^3uw9EJXf&nRn-6pjk=%9Ih%nKYegQmc&ue_MtXL} zj&t3aV#e5E5=Om7Y6kf-265q00RoHDhit?JO|pYl$!iyh-aJ1R|mc~G3QW-dRp3%*KVUjMYY5VA-=#^R4|QeUeWH{;@qmHMMJ+P z|K_?x8Iabq?lH+k$EUrDKOPeed23+f@rof<=sVf2{QDgO)QEkGCgWhh5$-|GnE($+ zA?k$DHkv=Pu~YdNu)RYB{xjZNHq=xaY1a}sCY~t>V3uNc1UX%yC6=M{vdc3%qNj5P z`^1~&hwLu?)hNR`9G6-%c0TjKkrrP)3yKLBHlkS@k?P2UeYZ7OOdezDk&XwFi*XvI zBW$Lk*cPGHhdMPfY5r`dhx~)B`}~8#b{J9oEA}}&ji(?f#M%$zNG&q85r=wP?VJL8 zXLI(EQ9JEOKnmfgz@xTWlXnp`kvJL{vsGbp$a2w4QzbgOJCP?6>Z+iA!51wryh`Ug zEn$uNQU#HW8YWF)70vN8d4Td0+Aov`Xjcg5@PGpEukgAh`>W9f;8Usl+jx(O^`ATF z|EoPM^#I}Svjo@k0~enZL3ilD?gtI1)Lh*f$#!@TS$B=Wcd-yO7k)gr!mDcBiwXy- z_{+al@vE)Dxoy5q!xh>x+?0hJO8s5MpV?$QIQXlIe^8O}&IRNF-`Lm=BM8^Luj2F8 zgHQg?tN77C72g4Y@<|-}rvZv7zSX_<%SKJdWrMA#NaM~fV*w`6+MWhf#Xq=knmzxg zif{f)6@SI+8dSya1?apW&e?lbauVWhEdk|NFmE0N4X!r+Y@3gJ^mq*mWnL;5IsiUu zI^we^_J|c%P#DkXPl}Ny0B3Nsc6^a=egE*f*^%R^(iJ@5juzl_HQ!ZGB@BFeP)^U&bS;T!R?5o-BXzc-Lw5ALit)T#;wUvKHYf->xt&T6@$X$KdGfx|q zIPNIv4$=Dc9?{xKJ^`c$-K%D{L5SA-&dUZ_u^7P8K>Z49jDoooN z66cpxn2-{X3d{2ZY(UOlF5Xkk_#K4{Fu#x1{%zI=cubh?4%wmq$@=`?l=V@T3mb?9 zPBtySeM6X;*zOes_bZ|w_|eTxl~GWi1Z{!c&|FK?%OB#&ED`9$GM_Y))TR3fzZXP8 z1q6_L1PDTqhZ%p7hhWHjl>dnzo}M3B5(PuhKxhFj@{>7F({zqtuv7Eo%r&5G=Oo|+ zBR8qU1(UG`vjuZs$-ZWC7UNqRN`W9e*&JMY)K_}K)M^2mK9s3KNuNz`E z+db7tGpg|i7_~taxa<}uUB~e84s=Smk1Dy&s~nGKPxpJTd-ino?2a%uHq`TeI3Kz` zJDlyZo$s<-y;_BubbOxfnSrzP@iA??36Ci4E4s}GinV)YyRW_4J?4}e4}&r!&P66x z`CIAqaz6%_chNOdEyX0rjd01M$Bc?I3-OEFd<)Z`V9k_oNwbMiZWE? z#g_!z_j8O0qTR$YL?vs=&sTsu5<@kneI6k@N8a@t?!CPn6<4EG5Y zxsMt|_-TC{UX*(dv7OQk=GeVLyk(i`Wii3eE@0Px6>QNpZ=d`++HjS&&#)gGuxI}< z%DP_BD5?M^2kpO24w!$YlmfVso9Ga|rU;l*_uwYr=#L*%La)p|5SrHkCw}DQsi33% zs@$wq(!E?~NhmQT@?;Zi(Q*QdaIhL|4C2M$suNrwSZ3kP)HsN*bGr>A>3Cb}hP0CBskA-y?3R~ZA0FSV_I!|X z`?29`7Kj(+VE5)G+wjT-g|tDRv7xoyEg8 zDX9qj_{j>htK|-_lS%JHH(vI0`)2A>&4V<3W~zZg?8nccpMOA&B4vjS$)=ksiZdG9 z!_kj*EiEw?-3p}Y39NxI!<609wcr5Mu1(AtY1K8unvL4~_RCFFjdEAb> z#p}zXrBG|l$|3YmGf587l%fy_(!xX-J)pOysdnefk_?%#R#Oy$uO(mzcee#(5VjtL zSXLF5F{p(0EKo47ojH?;tXLGSRc3rhugr)v!;-F)EY7_b(yb1Ggmh{{Z!2zvbgqV+ zcS5>@>oH249vhXRsr>RQ6}iEwa-V6v`ncp=dvLc{2dQtRM1zH%e){gn3#-b+@s@;B ze!&{wLIM9*5IV^Jg<{(ArB5@pHnB5dQ76!NS0Be<9`tT|HX= zOA%3C0RtSMHY?0^br?dBNG1lQq%{eEz|aDMF*BGf<))Ov=fK zy)X3^Z+fj*IyJJX^UWUo{q_L#A)tsLt(g$LIeEFM`J}%(obDXvDN{!{b~z0_r;}FQ zq~Y@Dl^~Ouo0J+E&XU-86{mqA!bL^K?j@|(y35e$6ge+tJvo4Y?@0S};|dwbXu0mi zKE!p%Jos)=`vr1w8vb}2IwZrRWY&TDFJ3NxUOk-txOyajpt={p)#I!g@*TGt*D&k( z^c@1e)-vl@ya(YbSycr-A=U61=<4wiboBtPqrlZ87PxxU65n1u$p3ZqFuDV%I&cN) zC9VKh4}6&7-k9I69v`Wi$@<<6rM_X%!!J0p&v_e_dq)8~XL|J@?qpS?eK)U7CDE*G zb5uDst`%=t<6zJ;+FO;2g_Q=S{!-rclq=00E;33k@fF5r_4CCD8iy|TapARh?nuRvzC)-jJ^ zzbt&e-*egZDIwhEwQhLrm0WGEnI%> zLIT(4v7uj|@T%5UK;$dJTqr>Ko8gND8P<2@j9pNW?#!;i2ABk_2=y{mV6x=ToW1+9 z@>1d|1aGgEV8_nQK@0jIvbAl1vgdrpfIF9<@-R7XZLy&|D5w;n+D*kS1H}e+@{rj8 z8GDOYLEH56xwfqrF+W1UgM*zo z&m%k~fvnP!eirwXxltM4ifvLy^reu0H{Ch$)n{{Y<-?XcX$L~}HpG)wy?J{UPisrFDr%Kb8(;-H4P_&An3)~6aweb5 z7YYRu$D(_1)I}562lhPf8D_(=d@V_;s4Y+YS~MU81xE529M?=7IL~wpv<3=k?>eRB zR8HFSZ1E?bGt!pEX)Vsiu~nKfJlx=Km}1?aAoAuQpF#nizNDyFFqShKrDI+L=|bBE zbrGDT1#{FIl}vbyf>$WA>vR&8lHc$m(=%H+IYzVDd=A5w5v=552soVHhYrwe=ZL%$ z1gOGYZx!D}%H(0n$QKCt{9nD=aFB>ZqV&<56-mg2* zOWKcT3{fbdW|jApTNK8ojpzXfQxd5}$|+Jx#+sn`piiJ#Qf#>-o&T(tfqp^?N@`m_ z>FQqx6RCGcNDD&{l2UDX~oSoR``;V-#XnS4-m^oh_=3Q)9 z?OwL`WAH|1uufWa?@ulb!^})pj7s5G9_klcIINw93y(@Bx+psw&FxiKjV69HoTkm| zIM_L7jE^@sS@&Q#Fq@&5lh16qMA`3zf^hfop2!JUL@=BYi{`CZEl!{+NaD%9D}NLIe>r%3kE z#@MY$c6cxC_Pc#)|Bp!40T9Wqv*nV4M6$^-31840gKFcGa^C^x*zhX?z>L6h{^I5@GeW@BcFJERQzll1e>}2xBSY%ns~w~5NNIntF494) zi_`NuL}k-{FusJ{!@_r+vi{UVHCo8ARF*Sm)GB#%afq5s(#8&&dBlqXfF;Ghh8L zOYEj7eL~f{^E?rt1E(={{|quuGHuszzzIyT`+ zUa|7of;wo@@*X!Y3Q+Ur%_KjdA$%xC{o=!d6%s~1^ntzmn^=KtUe_84y3Sl)+E*e2 zARd6{l$(OO|FI(Rss}J(w{3%A7QM~|OGrm~hY3dUaFU=w0bC2>B2ZWJp$qzyv5RxD zrDQK|-LaO#*<8o57fxhrf`m&V&dmVN8L-?<2;sWf zpA8*|d&NHMGQbbiWy|=Oczvr{aGpAvfm1s-nY9MVUATo|qe$kIkRKM$+xh59NYqSi zDm!Xhjg~YZMv)k>Z=zEI5dpN`zEh}A`K-;8`HbfDD^UksLU$@`0bBP?p+J@8ao>G; zi^TXxk4aww3lDlX(SPiOFGlf6P(oCeEFRZ|f|i};B{lNu~Qh5Z$z!X5xr z*cBM7uQKg(X!xpcRoFvsW0T0^M%R+c?^W2X!xh@Gw_6XIxHTq_3Oj!EeavG(g&lfj zfTG^EVQ)H-95^c2TZ6@+fR1OhS}Wr4UfxwEtLPEMdz$`KL9#Ac`()E-)>ZTV$<>YJ z|24rB6C2Z=dicL@-~J!!^#3;0>5rdfUS9&2&EI3}Y%F)m4gf2A4}?>AJ{9#ZAl$|# zk_iOt>M^WS7@UaoHX6$SOV~osw~po;7r{VqaFs2b+RJ6$9o^@;v2VPJC(+mq_zwMi zVm^+FpVLb?Sh90=I1qLDv=PHMK=F+&!t%5uLUt3*W+lW4tP>k6@#Aw4dV7T~-p~_- z#~QR7-SypNx=ZbafXxOsnK^RRb>$FHV_t853EFI=TVRBR2Q_7|!Oh@??k-s9akx3_ z6?{s!(9OI2P()s`xT79%p1^S8WbAey8U_e(OA2~7KM8QPi`nW7wuT8DMH^Nojpe;A zNF%qRRDUXmTz+PUXY9J#064G#Buc&KBJf9n5E@?njOlTnMu=VTkhLCR}W& z23Uf?fu_J_gZAVoMw9O}A;@EAHF2a68Mcn zu>P37!5HYf`{encfHoUI-@S3?VCNX)_giS8>pB6{UtcWtpXP?2&&hucxuQb+x2O<* z_8}M(Qm^8!74+^%vnP|cI~#igT%W{jmU||ixaV8TMGP>}B&IZQHPZ1wSCMR!Km)ii zK`TLF3*rx?)V~o|PAN3`I`80bJ#N`dSGwuvMKZ@0vi$l#1oiPsiuOS8H#Ap{z*pFT zAov@D*(V!&R2F;^w;kzqrx)8NJ!SwgQ0vkJL<|Il%+r&{7%ff0NvIu+BD(-$VBpwM zl&a38ZlX^+dFtRA0S6q1w#} z_|~i8(g;iwE;y^rL2IyAts`Sswi<KhC-eGk>#?488@)ex(sRl$;Ya{Zkmdzo;D&nLzdi zAEJpX6WAp0G?Xd|srfpiN`)|@PaK&K8a>S>aJE@SF^$RwwK_?TN#EVw&JLgvsw&yF zQj4`#Zld~x@(HKJ5N1#F_+_lRKZ%gn<^WSw)%dp8Mgs@ee!#yprmsxUP<5AaTQjmq8e3U;2-tcpiT&s27xIo(@i7{fW`ugo~gcT0z_5OU@3ucAE)DhvG z;9kR3itYI_Wd!-l_lAz)xk~WXQ9`{$?aohY86x@EgK^c9gn_x*Ei-DTk2j?-+3x7C zVF6MIU%<~&=f95J?DUNHQ&mp0NdVYkD8!#@7Ea^kuK)1s5E7YUC11}RPOuC*@tQLf zfqpoc=-M+S_t>z`K(EI38YrWKBJgGbMBZ!88>&cgbS=I%TLh456$gMu;TO)0Ld@a? zs5f}Ry88rL61_queTR%Y;01|K)XXHYIFB$(zmg?L${_PiRN9v#%bUYJMyWJ9{{|&7 zEH`7(QL$tV;W!fYj6$8ilkvx9_^1=!jY=+XOLMH3J=T`xH&ugPnjqDd!}BsnQ9eDR zV~FSFqQh>T_{valRa=xTeaY!PFax>oyt8F-(i+rC+iJWJAY&`Et@%K#hOkW`TDM(S zmBEG-pHpX4*T~m2$c6Z2CZc3pDmnd}GVP$24Q7NWJG!yHiStln$Nl_2TDxu>22 zwN8)INtobkGl*!Q)_K6`v<;%3J_^V$zR<0wImJl(u_wFA>&V~;D$4W;0dDYTOvwcj zeBM(C8r-BHg5_>hAnIz(M_CvE8&z6}#t2}eMh_Z}D|uo1t?-6;j2()!NA?HK9yp9Z zZsj~Fi4YB*OM@9U`7TRy^sb#m8SIl`E{kDO2U!!`a%B4m1BRy!PiVK zCD%vfR(8Vm-TA#!L3HyKz%rkF&d<^$G*>q#;^|qs)O!Zmau<{f!JRsrvmgy8)Nm6Uy886r<*KFWj3Skn7w(RE>crVhlp8!wT4tXaC_-bFi9BS<&o zYQXGLxwwad(fK$<*14!9o)=ji4o9}`3+mzr&O~8&SE%4z&84;14LB9~)^{NJTYWIhJjw!Mp8TdNym)#+vpn>j@64r&~8WOV+)Vin<#IId4apH2D2bsBLT zoB;{XCfJa-OHSz7@iRS4oQFisV=dqeySV8qt>SgbH6A-mu+IVECi!_Fx?%>l>nrq) z*L-mW=Yr}-RNNW8m=R2PK78E)2JNr1m1~2 zizCyq=d(4u#~ogb@ry_Hx$5=ELtS4@Q%}Zr(pNbqT4oF+R#)R+b^8s4!1rlC;YJEq zL=4mXEEe`JCAixgRfC6D+~-fuGtQ=5|L~_NCA*^O0V~Nc;GbXKTWoju7=57p;7*4L zHG2RfSBEyBT+OFo`2m*ZSiWxn4e{%X4(mM#53iF``)-RD-8c`DDC)r-!Ol7*I*lbU zuk<}QB@V08YQzqW;GU6WzBVpf6O=HN|Nc2vaC`t)EqZ)4DYW3S_YV~C#x%PmBJfM0 z`0I9xnU3KnpT6E7v@D%5Y3d>RzBmi-?&!+N&X=_OL7jk~4S1 zG+$qVuk!-o5UZd#j_LFK*S#y1680sian>5={rHn-p`s78Jat(h=~@tHS-`?bx>t6s zpx*gdIf3oCO^x4Jf33eTvs>AliVZSzb~`<8ZX-QOymo(##r1-ft)Mgv-DJuHRkGu$ z|5>m;qm~s|!gdq5{Lq}4l1gI@RHY9OrWqJCsX0@M zI}zqZqA5u`ni3d0sVuI45Eqye%G4X4S0OAREEz8q?+ZQ->mD|5C>OE?)?iN+hl7(f ztX@CccQjp!4rd0pUDZJLSe4~|Cf(NTr%&`V zz5oHbj2-ubT!h*4bM$+c&CaX0Ao6Q?NnMGi(;-4i?^|;FhU>RTH&75y>@oOX3?Q&i?H?9<5PW~;%X8=`rPo}YnDE;Qh4Ll8uresa`byuCoUR=bRC?9@#V zkB{m!H4o^G!azZS4Fx6=L1Yx0>TL3^srZq?$j~%iKyS1G@&Inza1O-+3A(b^;<2`Y zb@Fc0$!+I|LEYH_M~b8Ay)+|@sm*APiqN4K!2#+;x;VI1!i7(;=_qI4XRv7Y)h8#W zB&Pq>Kd1+LA2avoMUxqjSKk-P{-Oc@w}Nl_5T0;pWAgmR19+%>(A27YkUR+HF!F3W z=l>%Q;E9;ZBZK=d>p!;x=6_T+_j{Xy=s|-Xejn5^Xuc0*8buF}Wj)hGsQn1S{fInY zH1Id7_nMpNgmMH(z~fZEc-JE$h+04gg~P{1&-3SGka>$6^nO30w6C&fS69pmiT=QlY@V2YHJTxE@els((p#Cd@9~R_-fHAZwx-l1O{!`6JF*n?%3|o6GJmq8_(+&ICLE|0ugs% zrNBJJM(e<{&QTcqv16%HwHDXKLt{HHGCD>+dnYVVK7@qVEDQtVDR%wD$PNa(JB{D)=EyM@8`Lp#OC72xo(N`c|D(m zrf1AvW2Vk(=IWajF4ke0O{+xeGQEuxHL^QHAslNbr+=K|{%tgvnUU^is^>q^;QyPV z!EkwQl7EfenHgDrE&%yJ_)sALAIedU%!w7U`A{bshplv;!wNDM48qpRlU)pkSg8l? z`G8td?SanFx1Ah6Tu2DdjJ$myETC>y0q{dXg#yYv9}P5_Np$+k%_v_yLxUbcFj)1M zG9O@u(BQ4%{n+;~O$>2Dk354Q9|D7CJiD{8L zu+%$X0&(YEi3NFA&T;@6@i~9AWRn5Wo}Co&!Nscq6o1;E4h@q}@x=faMI%xQwUSmG zV0AqC;0)zwIZMU0Eh$vGTA9$Q zlehw~ItoH345?9AdQ>zVEBRuMeAHhH3@|_;8gl2*d?a2<$EUR+2gdFPy`9=ynjPQV z9qOkjse2vO);mEnh>_V&dqI5a8Hw*hyt5URC)qbx&w;T!0S@sLVJ1ygmG3ZxVEsNl zA&wraC#+%%iu#1JkgM?YGlJ96KVPs!uon-09+dvM{V_AqGvDJPe=dp(qWvE%V7*a##y4R5iRF?ITgbn=(!U?;ly z!zkwi%%^K~&981xO5;1gNy&8+`33mo*dtJl92eSM?AtNSZaNs9m&>!=!`=1aSc38d zmz;WhXC`*GFI>caksrnhx`U3IEFF5Q+rx1f&Ea=qu}5+k4Kxo9M)KvXPztSc{pHHm zw6?bnU`PuHqRpIR^Aos(5fceqxN7N~*Jh*3{57QraHgD0_fAj3NlE8+o`>lce>Qx} zb-N-4Pj->RKplq{XKs7heKZOg=}P;qO2PV--Y6P`fec54Cy~M>%buDz2DS>GxYU<& zYJ@I#Wxa@&=f(3l9Rw%9NvUDXvBII6d0Bng#o$9_3kbzuaMw?la<*Xtj; zoG)8_WzZPJUZE2S^vXCExHbIJA{UyxZIPph&MPUSu5|LqL~@G*n`18$Bp97B@Q$GJ z_pNQ}z&OGl7)Q9=jw6B}(=TZD7`I$|tS;D++Xr16!(Blkm(Tgj!oPJYN>Yu5WJy3c z-f7_v9epz3wuVX!gj_}kZdb$%zpRKO{^u*=wfhzE+j`K7*a0ZU{ag{-E8MP#fnr?z zXhF`nMqm~J4jkWqc_M$J)C1{}J%BeCuTdHUj_G=rPz?Yjaw~%AJ0JC$oF)Pg-I5#;tQ;k-)IwAQUZ|Kp?mYybS0zbp&=?WOg+A&62R6}R3X-~uoXtTctC&XPEMhqY*77M#_&Z?3i3Nh8BQ4oQZZpmxv%&V$_Y*rN z6zk$d?Y&h^+TX!F1uGgqJ%xyTy!)+KDzNM@Mz-Zhz4yn9Q;oThZxr5aBZ>y=CcfeY z{TupqV)LJ$4I@}d8DJq)x40#FJwu5^h|z^WU=56}O(J()WYZ5CTxaO1H*MQL$9I|= zR$uzMOWboJ6SlLFUy|K(II}wQe&kvyu}UESO7g)4_LhLaLM(ojG<6J}rdU>_4Qf?# zH36InG^b5nSH$!n%=w$%sy`lne{VtdS>Q(@{QHlBmFaF`6U+^$dN4iP+~1weV?K(vWm|dvXb7<^mIzK-geB~kuG{*-y}UJ{@=T@miRw(xW)Qa0-Wmt+vv^_;Q#5&Y z`k>k3{P1MmHeov1n(`;6QNr`IC6Y=>#jBXcPE+G^;DWhy;h1fbO?kz7W|wBe zHX3;?zws`(|60hqZ{ReejYmF~C9eW~-4xH$Z0%YYLbZ{mmbNrA=+KvEvUL0R3*x_@ zUNNyT-v_q-Grdwte`aZ?^%0J(z8+?qmkVsPxn0gBb)#G?^ROdnGhCod(^7L4Wokfv z7oXcW#0>(R`!qzB|NlsA^GBaT=|JEYLmIgG{_Cs2Ohk z(q`hVjDXzL_@)POQ8X=JyeQG7Aw_bKkR3q1;x4?_*w_Fo5GyR|ZGTd>2{z`X09j!uCB*8^N zSegD>Ol;FHMIyS%usU-ON6AEj)oJ~BL$tJ)f-tepNzG=@T8d+1gNoDt)8EFV^=g(EmOA1lJr_q_lm{oav=i*rUldq z_)_Y&=!lJaRqM41KgkNQz+yEkPoh#{yv{lz1;I%BlziWc$?Wu%3Ps@XOjO!Jbs^s3 zM|V4B1g-K|?W?JmC4ey_qE!TF%(w!K83_mbWMCWs74+*NT~_{=#WGJBK1tvbLf#&p zUp(rdgw1R;^Z+bW^&4as2IsS!B*h$y7_kB#S>9aYLF7?&pu=-8#FBUJi-lC?pND6J zjNZFl-b|127;t!IuEwkpzWEa63IQ{@D@5+~gQ+>}mNEa-UkDab=A%_@dT6JR%Y? zO&STEr6QtAx4xx<>>pR$IG9g&)l5M@YP{bkyMRgOs;}D2$WKe<^Ex=sZdFoB z?c{YAGCNJK(C(a-ym<&Zv8W(%e2?n;5$M<>czJ+1#lI zm-lFI6M!_J1meZMQLIKW(2U!*HlLbQj^^Ayf0GX9?@e>Q3%bQ+M;KOy7*hAp<9jvm zWXk|MWv>X`>ZMk5EVXm_#x;d@`iR&-X|0GfU1fj;wu8~e8N)UuO3mFrUWBWS1q6MS z^U&{EV6FfQth%Gkl)jMBoNlrU`niqQNN?=ZN&Z_F*rqqY0&8&nodx#8zMnOWb^hnP zyDqgQe9dboqQ&twDrqi{jN<(*PU7xC#CdU$D)HA+Iq|$~23RU10ZZiu&40I44!+HgrfA81 z$FIW$nyN+yV+#G8o1?PUc=@yDrNkf>*qRt#HW=RX{y}L6uNP-R*@7};zW7Pr#qv?< zyWZvc8Y%Vsn*5sd^%H;iqUD{-^Zr8aFtgAx+{5X9vWscPHVTlErNT~2G(Fqc;E%`W$j3<{qd{_WNfq)`(cN5Kw-KQ93S*<#*u{@KI~d(`o@oYQYpVn4b7qQC1zJWi@mFnp6Rgb0 z#rbrj)^Vm)*J};wnkaE*3V3qG%dp_36u8F8L@!;v?Thk#<+gqdAWU+1!ZT_qM3)tb ze{vQ$vjM{An4j|PyecO3G<2u6dKgxstSOk>#u3LKFa+V1QI%puW`E}4gkum5@C&gp zlJyNsNZnPt2?lmBz%%(2gDayKkuwkigxnEA75*qNzgQ$S)O-u5O9tMKDP8aP7x4Q| z^^mggX{JX`>}Plw_24t~TD#J$HMZ-s8(JW^J zH{m6t#jj~7ISC~(SJLyK3<+fQyXd4Zs6(2B!mZd=u6&nVT7u7IWT$~+WYAZ&YI>Z@ zUL_f^H$mma;XrA5Ahs$fY8@rmtGfg(dnUl|C6J81iq0+Rb+?0Y2)IUefpZzZd|Us= zGNI`Mj*iY>pKKOp_CMk_G|{EO><@+LiWG(5e1yf&ShF{wWQvQ6WIG}GIPI*Sq|OV| zC3#^zjVF9m4D0tT&Mzg!8=dkSF0q$SlgTsEA5*8x-JHh?LL`gS=580aCG1IccLSr~~jj9!VB z>w0|uic}RUClbb69{&V%A%ePpb|FN45V?idD)+!=q%|7toMaLqGnTaL(1REPyZ7sJ%fL#o_kJbV^2u#&l;r|0C1@i51=!6O zPaX&ur@0Tnpi8(YX)+d4qXsKa)z=Hug>V~uDpC_kSO}~HMc8ZgZdZcy9A#_c&eWoY zz)CP0XkkYKEo|(*XrP6C--Y;N(B*2*c{k_+wXm^!tYb#6@@=nFUNc^mdukZ+4)Txg z5nZz&B`+A3=;Mpy<)Y%{tmcb2@MT?sXScWmyhOnubPz8Q#k7-)&nU_OfT62T5j1Y#twAeot2j{hj8EH5Tj!=67p3FkA=S>+oGA; zZCeP(c>jX`6R_P%*b!xD_-Opd{pA7H*9UzkRrSqn556u;Bb_{0$6v=lYKY{DpknX( zAy;8!5UQywD-mJ6_tdi?k258brK08av{!DuAgOVn2(JZ9+Xc9>?EqPt4zG`(e!JQR zeRgd^5RFxS^Je%#PxSCT`y)=Qzsk<+_d6=qcOipONT(Gd^ zq+TvUsPpw`Ox8%718c7K(bGTldAXu^dw-SSm|5xW=O>}}<#kXA&hB4+qyKpc?i#LS zA_d%oYi_MAXy=)b3{it$!4-Z3J*7J~Y*1wBU{$iH;!oAxV}=5(pMg1K z;jC#0f=^~OGC%ngxDn_l*T^o+$`YIb&-IvxoVEM&Wb-X72|7e|4PGT-?l`N4-RNdi zWh>EWxGkUrMF_48s1&GzU`beYocePsg8(e)@VnY$V72k}2&E~5e~$pS;}k!5#mT(T ziOH48l^!JJETP=L)K6+b03zb-G!ABwuclh804e7ykd!m1Wi_nv?M)T`UOvU}Y``oC zLmvJs=fo`xvStjfIUU9Md>wlH@n#M7{kH0D2~O*n`nCk;h(E>?1eD;^ zV9I&{YerO=v$ZS0)Ot~!^D$2!T`%e|DF#Wo17y&n>D+8=mFnb+PwX^FvbgyHT5TxZ ztv31_I_;CVlyBpeQfqrc<3p+WryZl45Le8s>{#SjM8Bk&Uc^qb`5QR?mYFL)-7l)hHAC!|nB&=O;{GfyO zMH-4$e>5tEztLm9atIYw-VcV{gF%!JEkvmw-!zE`AIcDA9zJ~`mX+2-K}hKQV@3T{ zFHnNhwFCQD^qK-JFd3l;8>~ZrF!94PZ-t21MA`zDkrTV=c+GRmUDb^SuZfE?ZbSG; zTVCg3vuU;1+?qG9rZ^mHj@ATEc2C(LWeR|u5v^wVk#V9{fTpLkXOo6r5Q54 zIf|1=>{M2#ReGs2iEerC6t;D0QBg%JEC-yz#^#Ta>8-jTN>@$MI}0){b5h?rLrn}- zcLCiuoG#-o=w+gx)*rq*>kqVYM^UfFAJ!kY>ESTe#h=z6$Gi3}kx%$%;W(N~!Pl0* zw|60)5SaaC{kdGLIR@Dij6n8;LahG3?FpxM_Jr%uW4_r^SY_%jx`JJ6LiyqSG1gBM zi$$f{DET-7K1fJ0n^H*vkZH#EVm6;LjWEKHQX4$$0`pnm{F;>UP>e7#);-!zB2!IW zFj(N&wkr(vo3jH;9e1;~9JaF7_$CF-OEpFNUVnW*nz50+8!cijoF#p}N*9m-HPC)G z(2cOR#7*Aka!81dUP`R-Mh*yCvO8h}@&qH^KUlM+8DvE(zzg60w_qbHE5m=$%m#S~ zK_7fu;ccp;6);e}=WeVxInR5;7B!TQgFQ-t20XFq!dFO_8elbLyBp&V3X3Ohsei}+ zhWb|lQ2$=vQvU}2tJJ^UQvkhDJG%5M^{>9yed|-4qc$=#ic2>WuEV2X0jg}_*>NVpAAUh^$sbPdHNA7|f5j;>Zn`s}`8ab&Kjd zc;`R5+`2U9o!G&e=#AMohwic-`j)>$Jn_c>Nf3VD#VUpYNll;pGUvI}ACC_E?Nu8-cGhPJkh+aUZu|t!h1(6oN{}&gKQ-K2YYWF z)m7Vf`+{^y3P?+*lyo4bl?Q4blzL-OX7))cd*he%^id9_QU- zyyJ|=F&z9@@Z%4>TL z1E+55b_T01M4yF0epP(cvlq4K#@)eDmx?iNS%k1_&l>q5ACHv1$jiRQHBUc6s~+b^ zY+e~3J?GSE9oJ@QTT82k?!ARG ztfc;9LyRYgx04>5>a_Pm4jfM!=I$%`Zy|BYmk{(3sQ?W(B@vqSnC{ILp{=lnE$qbT zV;Q%cXT^D?S+J5WYOv3%WH^J4Wpcz;I21X9e5ArF)l{%e>^F`exJRDtnCB`rAob}`BMECTXw$1^leOl-Oawlj(tQ|W5Tj(zN9YUQew7y?0Q2An-qkNHx+$-zPqJY- z5a{^vJvb@`$H<$HN?hw1?o#R$ zD1nNL7D>S%y*BAvYaV^E-{AsEi{DnCOLQAccjj2pdsw8VxHD8SUm2c$JB-IA3FjNI z>?@hw8K9$ABnXv!%+}1;P}=aK>Mp~6d3i5>Z@6gfqwVP+GhcvX>W=yCXY_64sFv-I zq53PzoeR(BagurOkEW;V*Ne_mpSO6ez3i2XFs_X;Mp?&}erGkm3hA38Sg%_k>06YhW@;;;mBT)b8??EI&wpgF!RLSiH?^BbWbj2{`+|Aq1WM#~hs& zo{#Fo1M>n9oPNih(eq6|?Jqce>kGF?Ibum<%u2J0FCDfmk@t++>s8*XR?{$EpvmY^ z7%DIstx^&-116(n2)$ESn~!1f?84NygZ ze6$hVqb&aO;WicVz7J06l0fo&dn0jU=1Te+>34nY-*UfM*cmwB4|*> zj3U@41#?f-CQPu7vVEenZ$tFyuDBJ_DMeBQkt^$%O|(4smv*Thw<`yCQ6%X4u1$l4 z*9SQ)4Q{6`vwAKYcVV>3g3XE5N70$xB(MyeHZ0v+$boL8jq(kZIrnnI;pEX^Q;yE0(T|gP*(SY}jS4 zV)qsUfh)3270e)&L#}pt3xI+l1q{dMD`^>m`_O>;(DzRkWIX1WfqRku_T1_&D~RJ0 zCutP?OQj+Cq0+R1R2qsuRhr){PMr@HCm6CaR?s))ScRy682|u5CulAbH%g5p(14vvE&~A*cy$fCUo>TuZ9M}H8r_vMw zDh>Wml?JJ#KWJ#U{B=J9NTq4RaKWK2!KU=&r)DII{<}&OyHPTvJT%ewkEEzy>_E>y zJ$LNP>_5ZHzn+hlOcVX8fw_1)ifHv_m8I77im-yTkh1J37VUd_CH0P`FErur-_ZyU zw+5!A5%*DH%Rcj_^cD{j9uiH4dWPU1@?g3<#1aRVWyJ!Z(%ekqzeB4Qg#gXQ9U%A{ zEw3RiG#;^gyQ5D|I8{`*y67!z;oDrBozBHhosOR)r{)j>@f^GvkCNjwM>q1lK|an2 zKI@g0mh%$t`rKFD6++iogOyqr`V`^2acZxPkeeH8*X_;L?!H+`*i!VJgf}WL*6r;j z)Z14#dK8VT6!8Y|fii$DkspmBPqV%lpaJ;=@@M5wTr@lVinmjdHLkvX*|eNuj7$te zVdxzxBgQD(Lk^U8muwgtq~#f201A*GjN(;M&D!gL0;J6!1xTC?bI*?-9W&W_P3eQG z{Y01z)VpZkj_F4Fd=h_x%n=xAqo?2-f)?f5HDnu|vQ2pYw*n+a>xTlQd{S0Z@5$mz zVa?-z#S@^T2`#`v!`XmYF4vHr{%p!lr6M$Ld zuXsY$-{T1Y5%M9PAa(dNp1?4c_amM#D*Gdzu=H0v;S3Z{Fp&)>c!(!3o0@I7pB+D~ z3sXLrrbWQ#`xx&`3o_lk$uy2U@|L+=k$Z0g6d(ouRe;1T0H`&hAid^~ctRZ)xC4j? z`TMPsgXu4j@DH-o|6yr3AsosD+#uim<(*pwC900sgb{>JASQrcu)`1i0i*BKTA74C z#*Zk``QqslWQ-i^TTpCNUo`bK=ZQL?XQ{jE3)(t}6AxdSf z$-4HP9j{BH)cDkM^x@C9JT~d((KLqJdvVEhI|~V|$0QhA=URl0xi_C~G8*KxXrh?z zE+4ZGbmd{K$s7+&yl#sO0Ox4`;9@{1f!L+vJKuFNf_X+)_{RDb17H(}N$=!3M)2H> zPps0{DyCyDK^mqk8bNjDWN3rj+28kCM@If~YkfGjuwkp7E$?C|bJmkSP0vAp;%5nD z>43pm7opd?=QmMuf+Mh?EZxC~YfJFDFlE&M18)w5(~ZTCbLsSq9Mfj2OYwT-&hgET z>YzQ!b>U?Tke-sr#a&em|6HKgB`50TpGhDR^~|<*d?hc3$?=@?{&N!XZ61gSIoSB& z=uaYK+h0UTz8i(6%l`!tGI2kS?|}&Uk6be3z~Wb5;K^D4+p&}bsPOwik5aY;%;TNP zF%(BL@oWT4Bz%m{Cu}lD?QDzj;Sp9uOQfXf{`1dH=3V(HB8G(aQG_VdQ$IZl32&@F z?Sg+Dr`y0*ka`Ck6lpl$VN|;je37dJCkN+$o_jUQknkwZ+g);Ke4eqfqQJGIPqkvb zZ#SOJv!zueIF?qk+U;wPV!^~ov1W}&TZd#~jrm-)d*^^={rS#Z&Ha}ap@48a9*3Lu zZuwm2vXcA0DX$jWb$X2kyUU)TZ)Ou#vkmsw19PtDgxqc?PM=R!H@hm<>9xX|TyEEP z>(2>=FAhi7>9w0h7Cdig@AJjqaZ8y}*ZEm+1OJk9{Y(Dw8XuMy_@oN1FpFl$IfX^--V+QHR%lCZVF_C)$+t+{NF$s`>!jf{Sr0_!!yqKo zKGn&zYVo~iR3@)_XU)C)sLdGjL&8gm_Yor%a`4&N<2D+;)I0?AapN|4uU!gHTU%AO zg_H?V${yP&OL{W^;VPML=|2F{0aYM?wCGB~Xk<K9hYDS*d;9@)C;0+9E+R^LaRj_NlQOqH9 zM{$RBSGoI#uy?W0{<0icuZzF0R~E*f9CR`Hhc3Y#b4J(g(>1UBsi^NZ%`IQLtrle& zjlU)(>w<%mtQE%D4%A{{^u<+_2Z0}l*eGPV+r<~>&fvu65qTx@uEN^_@N0Cd% zbM`v~$$cfu9_{U+G3rZVaUGcLaX!YP)u?pp9x?1yF4U-Uk^DAozs+VoTj|_8ZZYGy zGh5|4IPZRqjK^(v(KW2!DV@Y^pO8~vHjq?Q#N~L``c)#fWK6r!;kKh+y=H&5(eb{e zO)MOjNjim<*Y$4MaI|2;YQD+!zU7qHCgJz67}X4`lqV+YZ; zkxaJ=ai5b`92|u(1>x&E(c_loC;4(8K2l9-qki1Xmd%rAd>K$FE~vmLO1c95#Pox3)GY@mx-+V#DFcRp{MeJw5YiUqL_@gfV@~z z(vDL2oGxEPGJhS#bQL=~Epa18h|);5VW{CXk_)~Ij|;^0Kbm6x{n3?!<45Pie~zyI zKkWV%XJBahN0yzHf$^s^I_m$f8yE~8huaW??>|}g{~1|!!Xj)AJ79*I0{s2U4a~~G z^21C80(AUpCp{94D2R~5eG}XliGCxn_MEWf-J z%q&=le!uGu-GPpSF(xbXb<(`wTeVpnJLa&{&Zrm6qSovj(GedL|Z4PDFf#zDmMH^*Ke;?Cz z4m+-k4bRp3+mQ_zmc`*JJY(l1&Rp40ZkmR+t6_~z&s>gTjwFeBNYOA{RdTd0anU}X z_;rBvh;yIs<)=vg`e6|A)pbS3AoM6leM2hD8~1`)bXbK5L0c~*ZAV9kLmfPZC%E_y z-D{m!_O2i1=t5(3*447zfJU2{;;^u3O+MymI8!E7tM!CRF?j;f{(U-_~pSnz!C+VHmRCA&zCPJesd2y9*$L*EZ#?(2+KzQ>oaU*rI$4RIF1n5lyK!@Nznp08 zX&1b24b9chU1$BUACPnA(e&2M(0=7+`XZog^E5G-dBPz{h4*S@S^Ri0s&f#RqTqBQ z+@U!6YPzoOotSH)b- zyOS2SH-rAYVU1AI8|vjbqrsuWME5qlQGLufk!A_n`h=r`u$)82H}d)1_4TBw27 zgl-BbG-Rpls&C)tuRgR)-~y~yXr8p2QsfuB(~tn`6=<252U;fLftCp&qi7C#SM5GR zH5L%-RXTX{AGB(QBRZz1M1Bk|Hn#(2*gNzTxM_N?5Mk3`8GEjhV> z-7X8T+r{%|bGFD=0TeV@omPGdr9?=Pr9vtHDmakc4yJdwx(O~3u-koCowCl4DkR`F zb=8_Nb(yT&kUZn!v3pW=I9=)Xr11&Qt>`ClXi&o)LiP$2Nbg>Ery7DdVZi*UccZ$) zHTunudrn*Zep`qY5ZL&KK^|C_zY2!;7Ecvs10pGje@#L2sN-jC>+c5Aa?qo2T)CP z4A?K=C#j!+bq+yIB7h0#Tm>`Gf+e*yxlgivuHxl7Uz8_fZ`f{|i~4pp>au^dda2(Q z%(YJVe0D*b>+MqSPByw&bCarjgRwhcBJ)TqJNQ&_Q)lCFvA4T>bW@u>SadarpSyCd zyw`_B9e|nJtgKWb?dev2v^yV8%EL0s?Syw{lu}6xlbtyrtC5gqauvR22IfPDQnU*+n<53;H}O38+Bzx<6GQTojNB^zDZVM0ez% z4mdDy`&cX59>S$L-PMsMZ}M)quXR(HaLNduWvcX|Jni5-i);d#PiFX*OnYcPEBSOn z25d4lHf4kO!~2-+J<($3QnkV?-+wlrSQA}Q$#{GQ|9wryd2ccUYm)14Yf}5)t;yOa z$M#w@;&<8ZC>OLsTA=0=YZp~B!%FhxuZnsj6^E}P29|Y3nI&;0m?R13UZ*i7FXl}{ z8n#g~=w_i8NP1^jYf-FB`{vax9%g=jqrTuP`6%pq1z3|gQ4IuqKi1?d^oHhH0aaa) zi<8AT_mf79JdfuJr0#ZaGIG=Hf|~3od{4-^K^}}>Yw|&tWI0K>oBLCj{I_{aU{U^X z$p824rT>$+{GXDywCPkH4FMjHHGiKCurmIY(~&g85J2%Sa2!vD8lHcLf{f6pC45r; zA()sQE`$6I3`zi%G?35>N}mWa-X=2+8<``I?HHlm2Sp}wUK|aT6y|I28_c&1fdK@8 zOmAMR&uQv9C=mM=<*dcm6x8ML<$%AP%vS_6+5q2y214#9>$B*W?LUuG=>i6vzz84we?l;kSJWnFn;2WFbt1iD)xwI79 z9X+0>sYQ3!?r;d4r}IJg$#n?b-;XZ||I}Fpkr@!X?s4}CDT%%iiKm{^ZS|_^`V>oh z5YL^(mi}D#IgB+LMFk9nya->wK&gd+n%SHB%aJmb?((r@L$V%*EpPxPiVT_4sxW6$ zzIWAm{QOpFe$!=`aoH>^f&#NvzdJVONr{PbLprS$8=BA>n-Y?3J9n8l?WIJ_6X}^7 z%beW{*vdRdpBQzDdD1XciudxuFGKFQAYo#j)9>v%GxSA_)-19gp>XF-B>O+38T;=P)I=OdWW0{{#80*LbT15qA#1Ws0c zLE|cKClb1MD;1Ec{VdGHIVT^0r>BMePq&z*Jr2;OZdzZ;{_Sk2A4VZxe^xOzO#?Xh z7j93QM5URt7py2*06dD^!|l=G;)lm4FoJ!%q|m84SNF}bdD^t@Tg(vdY9?GAJQmM^uVptmj?PNwT8-{ZFBu<=9piV??Yi|EAFT&n^ zib()={HDOp`d_<#CT7+jZn2OSB%l;c1V1Pta~p0NecdwR<7ApREhfLWzStWwOlzyg z_f(lt?yF0wKnHdU2@E$(VHjdloMxCPSoKeR-hpUkfeJb1)Ljz02%mUdcM+V{ ziYJ9oMId3pIb9?khAnE<0ZjR+YHmA&tzpNm?Hm5=qH7~73#?2v7kqL-12z)KQ z#ihNmvQJh8gtNp0wYa;A^D+Qst5Fp}NyKU%qeoaE9fsxt96GzjWhl5WB?OzZ$@#d| zND(9JZ#fX6fFe0?5Q+;QOy>E_9k<&6I9^**@}#l=U)UbqKoa``y~hqg(f(8QyQ55( zwU!>Y_3N{9dHrm*?2^pf@L4|Px`Ve4C-&Z?wHO{x(RD zu5(NQ4HiMNQ)%>6ySM(N*Eu&4s#663a;2z7go&gF8a7KLnVKzsbQl~#-)%Asi#G;# zr)5&K*ZxNZDd~rd*y{VlK>u<>dqa;oBi2J0WE^pdyc~;ji>TK!E;|SsWC&rU1`HwZ zAq*BdUJagxU-%!rZ5kztTVw<@U(Q!a@w^w9FAHD8>bbX4Y{3nV=wH3oec9%Pee&+8 zjTbP4K>QU3k!K)d*75J7wEYnVF?|SwV2=JX407U0%b;5H>@x8&|1!vp8EP!jx+$Vx z`OV)BXX3r2bf?)%z>O&Za$~*(+?ZTmQuf}tTWFOaTCbN>QZ-yct7JH;>Je&PCSL27&U(YrwhG; z7O%`*pn{(8zamP4GfdLMshK4iCGr0#K?4_-XNUdg%4GhTu?2YJGYlwx0WmstnIqW@ zM2Z5h7Wn6>*}6E+pyiSvU)J%o68K5I%bF!A^s{n1(_0jr7?B(oAEhXOS`1cp5}|m zN5(ZIBq#gWAt|H83!k`5>Sp`8Rk|~B^X4$JmMNwqwCo7*lXopI)YBfj_B70Mfy#G% z4l52joXmjo-EDgHm@`oMZhkCxl|;v0pFE6%dl=p1S#3$nG?mZjO*yVyMPIZ>qqFK>29x^FCrRgu{Sw*g*nE5Pej!By9M z?W{A^ULT~2nAia<@d|>{0#k7{|94A;0IyeEPHSsP&Q?_knf2a{OLbzM3726%+%@~V zDzb!o?YBDZ!RaGISAIOY`S8H8xs^!}qaIoR4hLY=Lu!(A{EJafWGXxp0Kjs*)(o4T zc@XWPoL`>*SyV}fs+R-}tQoc6_7cp@Y(EX<5|(2C;<=!6{A6c(>8VayKaFpvp5$$!qqX%7iAL%@8wjS9Y!oGcc$M`gU-9n7Q8D&<2^w2Bu^$YP z5n>YJU3u0Wo<}&?yzT<;S^v-i#Lnzz=k2rP`ug)dzBpdD)!t6&6kgY+bG`fTz^wm^ zPJN%;t5W+40d}eY+BKn={&)T0PA&*AGO~Uveg|)!-7dU+d7l)l_1ZVI9!0P?iCtG0 zqM}c!uco)_rhF%`$0Q)h9dKM>?+ zaf5qClm~;*GYdI+qF!o?e{AxJq%zh7`Ee=~VwHryaKWa?t4KS&xlVnF&D)C&m2;bj z6RqRcX)ORl38Pn{KCAdL5KYtz&TK9y$G2-K-I9&PueNUVaC?(9Pg?iY7n}Pz8o2X1 z{H=b#;5(h4Ey*RMo$t9br0*Uy0pt^}a<@kuv9=e7mrxoDyu01II-XCKAw8bUR1QUm zdvYKsA5XZ^JS06NJ=%QsM_+Tjyi_@eQvaK<&I$mYe?duqk|+sk0;ty71zXxUGC!q# z&GXZ#z#=X~nR%C-><3@QpjNwWazp8hA~38XEVH8r|2`B5oe^Ui(-1piM`pqHDNPX@ z{3zlgiJC6({pOk`CQZ8db_hFR$Z$I zu_@k#7Fm;kuYO(4)%pG$3w<+cV0K-^`TNPz)a4S1#NA3GOimoxO%2X9_LK+&8 zsSp8;x|c{m3=$iNK_&w+$a#Z#T`4BxhbJGvdnN~X&sBXDxNCVC1ogmNCKNtW*Ie&M z4AQgv0kGu%4uqnF))ez%9)($W7IF^iR7ShR2eXb@RikQ& zr;*Jgi+7G>km>|6!0o-je>B~}I=qTVzMgbkh{QUzim1iVvWhDE?r?~CR9y|+FkfRv zzDWAsPTI^Hn#iX}2CNjr;@wNIh{1xp(%Q+9Y1YQZOxvHbe!`!!zFo=xhOD2Ld)_zI zboWcv|MCx6zw~Bxa|k5sKW_dd>!19P^}hnLKHen@H9qzL*z2zxk{ujRhH}%@Cp(y^ z$i`+hEaUofsWCNG|dP9fwN`-du6vN6oKcYxd#zn~$O3>BT%<(@ii6=lPVUXKLsPo;Q7J~D3!Hv^bXB2o;yXh*e;C6Z&yLZM?}F^9?P42Ar)$6<;T>6K-WP9(JqV|Zk~`pK{UogLA2FyokfNO=$M4=Gv*P0opCn=?XHb? zQSy&|=;0cjR;Ruw6FMRs3D++N@jjJCBXYzUCrQzQCVBQ~Sdp)!I}md0(O{xd-ZYj{ z4qpv@gAvXknN^G;dJQaC1v`VvS16oG`ac_ppXfSKI3aCkE z+RHEk%lgoyl*hip4?vO56cA8k97lC~jthO)x-RU~P(3LpitNmmt4Im{JROGk*YQ0v zT3%v9sy2 z>Zyg%eDSC83SdDo{0z!VhK({{bfzYL+8faA%=l0tNbBljr=($Q86m^}#WIXR%tpZb zJDx6eKU9(?CJEoX@<(Wt5Ygk2b?rM3LWfyM9gzu3n4gUi>R^z{X+tkEAU>SfLYaJ7 zenTq2B3ze_fFO+l%|W)^<)`w>24fYHYS|?v*HW4#H9FCu+o;)qisalo8deC8Lp>;LRUT6cRvhhiC||;=Hq2j23jH*S?>fUl_)P=1LXL? z-Zr0~eTG>PTftfhJshXZCElh-`l=NnpW9~xVl-|6jK+44FJq|n-~r+xKr_-n2~Bi^ zVm3|#DhS3H#Wd7&6wv&*b#5G?q~;@o6;O3UlWF{l19k=S!vc@@*g4dXs+(Ue5dflb zw_*N>M!adgh#%>`NY6pBP^&)=z6c>>K?Av$c! z9iGHHu})-FU z_0P)jlj;!yFm?D5g_Fa}zjsiGQwzuA?$CYWc*F*ahNaH$%_JsHit{R0!ngyRO1QFb zs~cyq@V#6^&a+qMM#8wn`DQcgC$HZ-Oj?wgeMu?oq>Uq~n8;F)G}@1^RXC(Z<7s)S=5dl zd`v$n@v%ed^DD?i6*v=G41Q7#0{&n7b$bnHiYojyj%J?fKeT=u9jd7RBw!%EVo; z1fOGbKVQ|#x4n+Kgw?@8fCYUlG10`Qy0vfBe8Z%AakJg|P5syKh}-dc34z zpba~5F(R#vt&9`2sr7~``nVsGu6*cwn+?ilbatFnuj5mKE(h1vfL5_qx}~rPDZjOn z1QIS0Ot?`|#jp?5lAPZuMRMYq;h4HLFrQ_<%Y)cUMZo|5O>jKT7X?-*9fy$xq(}*% z&(MiznE46Mz;i?BQYxgpzzdWGk50t{Al%`gosau1{~12~M;QbXUE?Of>Si<`k zz|MzroaqV>6()o)ya`)8iy9(`gkg)2j`SN9tR6(jU=j0{}rvVZG4ZJKI`uy<$2buP)|r^gDa; zej6|F962sz*Vt;vHx5r2+*auCpT>44YSK!Zu|qEDmzg?gd_JpgA&;KkhT{?$mqrk8 zErrXH8zLG$6!jXnkI5GGHa42BIbp*xAqMFpOb|gLx(E%ORG?p@13`@14$hM&w2vlKx&=z>I(lB|W}tDjBw;SM zz+u&n7%9)!_WVP({^kVdiM5)hD?~Vj)H9`Gj)L;}raRw`HfYrWG5j z6#~pQe2F74Gs$ooqf!~ zeIIH>3qL0unT6$Cq5|3|G+|9k!`Fshb3h#(d!oi?mS7GM4;j-lSdL{t)%MI4U^G=C zMhIk)5N>h-+UN?@4{enDK^r}#g(`kc@0LiU)JtGfy@RGW#b_7ze3UtBlm7%g?IsQR z1s@*Rx3>PotH-G`hAyvLPU69tZ?d&r`zQjnnAN?wZ$^o)U}^jOkmX)wJ#F!Ju)=gY zRAZeO(m(nay4w&==mJlbt+H zcg$jkd-*Bdk)iQ?egclvZnT#wrQ2_1YfXr}cV=!q5(==`-n@|JyFG7opQ!|cb1PQ` zlNg4^h5(BXF_mr|g#6-UjvH*DdP05zhfX1BnZRT}ee#sqxIcy2asCDh0gHuRtK4qt z=n0K-kyeGn+!d0?&<8UMvxUjwsVbA>n4+0#$NkA#v-6b3>oY=jr;UTi%+8|+d*W5! z)US>CpZoHQZh5VZP4}~glKZc{$|Va8?#gcWODnm9+D#tUcWtfCVFq%qKGkx}GJJf` zJcnXT9?19xQrZ1b^gzMSZJ?CPc)I=rc_WXB-E%|iQe7c&H2FS;UF-f3%@I6hlmvXg z@{I2o{ut=(q>Li3xqK3ys&CyuOKjbNiz}A+#UzqcqjJ5UYv+zc2ZcJ-kyOtR{cu5{ z&g&c zg`ejFfJEeD(!NCZL-BwD5^bDa)Mem`d&yNeL;J3Fzu9R~~B;B7V!A7e z*8Y1LuHY+iUk?Qfm>M^3H$+arFaH4-!!kN+2SIs%pJlK!{&Ly=jl5yMt;3%X^iZ(! zUy(Q3J@&(&70}@j!G2#STLf@svjov>FhH|e{;hl-sGU()PR?W&((rp`DV0>KV<+j28(#bXAz?g?zR4^$%{`HM z5ba%KFH>`F-|76!ENJSGk*9S8RN>S!OXE+Ta#ZWgtT#cM zfxzMuBA5&LG7n&J?Aw=5OUt?cDxgNm0Toc|p1cOQ;x43zHQ}Vk_3yI?SO-s&=NxrU zI&=y_)n+T8O>5xfvC;uP&yNV6@{6*R0a6)owHIx%4z9X ztXR?dX$Bo2ytNN6w*`vN@$do#)OCcqeG7tHdZB4%?USO)<7FxV8xy?H!l7@jQI>)( z(rWu0+ojv_mwE5!{+u%WThl5l5Nv-q*!=ei?f=PJ{*TF9b}Da2?fv5{%g)aH|KThv zp4oJA8r!@OfKLIfGF&wS&Ta&C01Y-B(`iQe4#WC|pcdYyT#yhB^$AHRthmz9lO8Il zJZ}s$rq!T=IO!hAdV>n>a(qlYOQIvqI~c? z7J=>tv^Q=^aRY>@z}>)N7901T)SM>zrco%55Uh5=6(pQw9tIx{I9UP0$z`m+p7Q@m z8-2sio5Ais+USiVu70)A5B}9g-@FU7(L?@dqX$l~ygyH{N3bkF$-qW=?cz5H+GROo z?E7pI$SW(IJP1zA%xt#6c$T1)73bBHT3(>%5buTi_>s;^;rHxgNT7{rH=o=9DJspk zfnr< zC2AOLeG-)@viO=x-Q}pm+F7NIf#U~v_u#g-6zV&~Fco&=EDOx7fsrBAi3BYh0JoM_fm)Zl-_o z`gk$1mH+8%x{qE%B` zM8prGrGp$(O*0)9lXZaV0u`x@ks6lcEo@M~`7>Il*`Fv0!7kkSyEDH1{=~nbBy`}x zyuX}aExCfHdAVPgmcVbOZ+w|s56vw=M?i2T2yMRPP&VC>T)2WUmLf=TIk0K8K5j2T z;EHXsRM)zCq4b$P?0JopyR+l|%wBE$Sp_mzSpOY6kHdC%TTAk0XY(MTNr{8eU~T7h z<2e?^bZW1$<$g)3<^mLMA_ZNqK*~q86oDjt4VZ<7Zcg8vR=v^kZ=)-#Y{Lmq>kEUhMKw|_+_ki89QYR1heCo*wkn^FMW7fKcn zgk{NP;-wB0ejVQ4KOEjlqJA9SE|%W@IJ|XQI4Q9vZIYIVg-@qU#3T?@5x4~0z6~nQ zU}<2bNeR+=uh5J_{ehRWFY||qP(sj!Od8&fkSD~io%TJ}bhPvPI~;c?cgcGT&p$v; z|K3E%!Or+_JNxh3+x*8w_&>!&2(953lma}!hJo|?UtDE22F9P0%K!4X&a4dv+eq^D zrMMtcqtHgL zFrtrWw>BH0;D{YfUX!r|oaRpbfxl-8w_K{?>#qDwLL~t<1SnG|)jRt~rm)Vw|Nk{p zC{kgun>%P{m%{TSQ&?ZD@kgd`uC`O!1uz=iWt@Y220*58@CKQX&;9O*<>KsC?9SM0 zrP4nQck+s9fFpX2Ha|{WB)%|+>AT2=q7U8t8y5BqK{L@ZvdpW*73#)k#dhTB8vIEqf_aRqt+Z}>qni4uHk}*61+z2AO zG<0Zjh+y5wt1nCSvI_cLO)CP!wVL{2cy~H&K<&jr47PTi#7pjclHJM*Z!d;WINPl z82~Fd<;kOexeD1>7#SZNEIZTcfv;`wz8vxu*=y=E3*%mAy|C)Z)~Ke-K1drQrisnc zNF_DEts#wF)unosKKrtp4poh|O=U)<)?mVil`M#RvTNbqvro6McXlA@n9sNg09)_w z^d%+iH(Pj&!VW9iq2sc`_8t&uwj-X}-rW#36P92R=UWyOD>a*|qieBL*steAxxW(I z6@R_?_E5d|opkT_+2G#xE%igmYa>4O3v=ZXWf+IhIqh=dk(K^oNA(yfYIK@hJ97;W z_p=Qk;rX$Ed}nsfb@*Z;F~~ZdIgISY&zF8>LybmCMis`A+@Xh7%gPyEldi z6X&fjro5Z!@jG_OcP>a|Wo7NL^GCupI!~optiCoCY*h`m8)Ve)=(5AX!6`iJJ|5Bh zVsTX!&fx}~aB@t*X(yf|FE6iuzCgPOb$x1Ow}Gg_wU8#@V<0Bh={eKvajO;+9lc@Z zxzw0yY|t~SBu{>1tH!7N0_Wpqp?b|g(;ggni3$=m4b3hllCzuW`OLsMUn-wx%@o^;%gD#Z%PDz$V;j`))E^SU2WP-|)Q<*OkN-(?Mdt=KpGFtcElJqi1 zd>dfXYlpq&JcevAurF+^*tWDb(%Z$^E|5C zPTQp6bJb>###43&UhOiM8wm-CV8nnnhYEx%#MQdvyn7_RLG%SUCjW0Mo@nodx1O?3 zY$EOq)eOcni!FRi9`qbJn@C7Zl;Z3g=33~AB-!nxM_~{Vy{*d0$r)p|R_m8@ z;9cnb+>9CCY3S@+J9kuY=X`OX8$VE}TCvk_;->9z{^O>}wOUcGc^;_s?!#ti;y zK#9@wX1$=GK!2TCS?ac`-f`ck@;KWqOo2`(A?ezfxc2zTTg!q?nur4Lvx#~EXe3+w z>GhJd+vKtF@to#dL099;48C22j*GiWddke}(Wb?aU1?Wk?5WhVV#Z>=T}?v;&*}Ps zxVy@8U({QZ{ilQ1qx149XSt2*+}qNwBu*o#XC2m!e7m8`rk>NdomF?0Y#(TDO{@yN z&vP4x;irKw)2Mh(UkeIcjn1>-?Mu6A+f?%Hx_6cVKaxxgxL9+v2VCqe04~z6-&G>} zCS8s4GL-L0U-Nh8^X)=VtN<6YLV$~qNRQLtY^K|f3mxE!W#;g&~V9C zhFG6qu;7|~AJ2F#DV}46ef`GsbnN==dIQh>dL8qgb$C3zQL3g4e-KHfHLu#BX`IOkH?>DtsXE4JURK9|=lMoU%Jm{QH4MV7 zU9he%_1AY{@@P4S-ETL-{{9^&PT$={$NqeKd+3SNN2}Yfe)yIOh!@K*`~q3U=U9Dm z$_y03(EnFAurJN!BBrDQc$lxs#vJo1u?#&c``x_wuHAUdlzmPtBv3Ic(RgnPDE|4c(NWT`WB}vepigPT}tMFs;G~C*V;# z))rh0D0*6$b%6Qm@RMw&hiBut?dAwsE4a0;MM-$yXR zy7gav@5LfuG6>W%<`met5$Yp4U|Ao|6gxevf&Dah17UO^6C|C?`PF0VloR-3Utudk5-Ls~NNT{+^tMdJ$#?;D- z^-GfLizBhK!|&lcE4_qMow0o7;q;ycgrAIougJK3;44R_JG$YSDj~lBU8xp{@ywPJ zINJ>-^)y&0D?S!G)7+#6URH$xFC#Z7fw#t2gI=1_055BYfcK=per%?=W`UH2>+{^7 zZ|rJvRDqxB49Jdfcl%$w*x8vtyD{tH)#~CEMWi};r+Gc8NOer8P&xkioMvLqUVH8~ zE~Co9bgxb(lXoxney!McVPjBLp=z8f@JWC9xIu}nSP7%JDX63m1c%6As zEukt*lzp7m{7^5hi?a~DRa`I3`I~dO(($nR>JG!_C4JvN-sVneXvO!^P*2KR9Zd}x z7wryWJA9u6z6ihbc2dzGwzeT*-A4;#0&a$I_t)JW^x92`Jzu!jd6>_e$}MI;4|7|h zli>!ZA;u&O+Rh}hS@m@`zicrB#}s&~(d>3vzHpB_C*9qdp$LuM5l*<@c%OAQGcFtL zMyqCMy>qbCX3l&r{z02hZ1W57E!qv|qzPP(#g~oF(T`~p=3U#k7hG>W23{juPOSAO zaqpT}$YeT!48Q{K=KpSF$t z#+dSXq0`jmd5CLi=Y7$*`BAqL*E9JdrHY~Y;r#Qb(H`d4C!6vyE^Ie0sV}D@zt1Dx z-CWu#xw2KBt42#EEzNsYIkIv|3d`d0)d(>^k8YtSr3I?iLY|L(eyYvCf{vYe2<7H= zM7kGBLn4eR4$Bqt{+TetGjd``ade1C^6arQrvWGFBrS+r@qk*k+UC_&M7o3fxf#r! z*|U+`?h+cj9(t=yxE!}|``qyN29cbo^hy!$bMnyB_gY@$P)6Jmgb-{zmSJ@1yh8`` z+DqSy+_UM_LO=Olml}b-MPR>20seBG7wxSOwf=tK&?GZ4>se6Th~r&uygPA@CQsD* zp%XVjc<0K)hjoSGkm$YeM}1nrI7)i!*E`hu?#ZFIEpp8aUa+C3TCelt?=0jZTF{|zm<Dcpb< z@iza8rik~T{-{l{8P|tY`?yr+0K_@gW9P8BJ}eloeOyr_cOE?jdp>FM8WGvcZ;g#F zTpPG=ngi;-6B6L9#>~+*PqFu~)Ju5mO?}W-s9weTNOvh>DB&Ud_fL_pJen4|7ZTDq z#h{*O%I4@%*FHvlqR9V5PDFuGQSkH+e|SdcdY#VC$@sqp3v6t^_v9Fb&ye(+m!fjd z6$u~u9A}o!AW$oRrJSA=FRef+Mm0B>kY{9l3BOBQT!xB@ilMin@d%!(K@f#eqFF_T!!b{(RFX)^T*(lk3@KyL zpg|NRib9bP63Q%d84@955i(~c;oaxl_U)YeKJ@&a>;31w-rx6oxtu3)^^xK zTJn#=mUP|6)h@q&|E~Jp{=4m6clGE;jVH2BT<^Dx==VP}+{F7idil!DOq)X%KHMU{ z;BNRQ3(ev;og=B>-Gsxhla9n5$PV4)^KjXTHivsFlB7?Dgt*&D`UN%F5?QZ<7n`oO zIeg6i^ua(#&F=Du_#vE z9Ho&O8|h`~i~ItYY|=h)n~zzYFRZdVu>EXL-K z@$A@pwpOuf{}@9t-}U>~U2+dUr)QkswX3Woy>&SI+>+q!I^e)cjI7B2D0e@uuo@Xfi)T*jzSu|DM5VtKLK*=+Mp?U8sh8ulypEX9-I z`8;}ux2);@=W610p~-hUhS+UOuiJiKXtnN3t}RdP$P4ob@4h0zt+H#k1oh`_`F=l^ z_{wAT+T<7pyJ-2Tx^}&8^j({N*eEuExH(C_ybWYKeq_;lNJa zgCC6658A0b>liyw&Hl)DqBt;F$lgGJm|I*mX`>h2ylhvu;r5X`;K}ebMkcEh3k?_z z=dyjQUvTy-^^@Ut3QB9LZjhf057r#iQ3~Ic+ zZHDt#6x;J^vF`h*B&}z<)ol29M@h~1&-x!uW+XKP9@$EMGCX8Q>tJN2Z?C(QR@x)4 zaF+~Y>z>1tdT=F1Wl}+uD zgCmqFq*4wKz2pE?}+TU!|`yAFQ{xY!fRGW7Nd&ib2S>4U~ z-rcbg54`wTFJFo4R#w_s@k?jeSL?l&^zV^=tEzUTV~Yhqrr+@UzF}){uQoxy#MJRL z`>&9(>-2#&4myvLg%V{OGa61>9A*kL8~OAsCQ>c-X1LD%t?##AD9gDLd4+|~FfGgF zeb2YyKjqlNVmV!J23tVrafLFyCPqNcibYXWyHh(Q4@nJkE7KsYjh-(Ro2BHP*~W3}4fctP_e^qM+4HXNeZ?jtWA?(t zvBE#EpSb6C_1s`F4AI%DZI{<+{{2tX)>_$}LH1lW?FpsLm)sDh z_fVloL7%{;xOVQ3g-Y#rop=Sg-4@wz=u*-avplie?Xat=)^o}E(sv5yO?)7Tn&qYF zXdCIR4hG-->jT&w$OG6!nbR~Lz;3qY_0ck3!Bs{tm8Sh7p8s0*i?%ac{cKK1=k@Px zvz`P6h{3&C&HneG0C7+m9XK%5{c__eW^g|r6d*plv*m15-eKhvue#$W&q?fVKm2fU zOoPkt{`YZf&76|Hyw*34w=%W+=`iTI#D1+sZ*}cksXqgUN4xvI7$kIpRh)#B_nvR_ z)=v6SI>(;N>3!st<^CW3$W2~#c5~LAh?k{4FvM_ai5h%9WZI2PUHI}w&wYURLtZTm z=IlJVF0*~Xy7l>bG4mOj-MNpw;LetK5$j#2)3{~tdLEv27oMpzF5@#lb#V7~aY>fa z$Y=XP3SED`TnFCm0#`$1<@+e!?b=_pij7=2>K{_!sE;vP3}Wt13ZLqeg?k6bs-h}= zj~d@eNfERkF738fdh!puzNOBNfDx&*=DG^@lC_;Fc7}?td#dwd!_Rm9=p{7uT}szq zv)b8luqC2e-MTF3aGYhUMY>De1>rMYUlU?3c7Jce`)3O#-jr$HE11?NQ{)QDsQwDCK@oISM@1(jpaCM5-KhE3|;KWUXx0r%b;d|_2k3oTUzqJMZ4TGjF(LMe<`%FPG9FnRXy zDc1bnY`*wxttEIr#5#b(b`rcFQhlgwJi)d8#FK(gN8a2fJ>K>6UH-t5p!IDbSsU#+ z_J?&U*~#s-%pjlGHz1wZze+R=3{IEp3Fhz6@4_t9_nfu6&x~EDi;0O(9Yy+YC)ijR zKey#dj`cSX)=C~^jR{Ub&Nq@yu;rPJ#4}t_GKfBHt~l|J7=LnS#=3DK+eMnq2Nnsb zd6ljkd`rJ`v(eK_O^gBC*ZAyOm4EL_`MUj1tF}@fVC&A={`1}YF8PbrpTGgO(0_e^ ztpFTg8{NQN>0s$OeSpns+iT}p53se3B<(EFKJqeibtY+{v~^C@bh(Hqq+G;GP%gqP zCP2P#OwnspVQ#qMqt@S33#EkIdaZ1G(?ddV&w9^8@^z0~ z{iB%p15ffjkjNb1uiN=_a_;^$pJE^Krph0PR2^8XvLuYZ|M0@pZ27X~eC$L%EjKB=7ZL3?J)lSDVICs~i>`X}s<)>jITocbV8%7)qEfx*I<=$ESc(iu z#~#x+r02Ix`awQnI~4r{&()+{Ju}%M~25Om`RX z`lcKT=8VdJp5NusXR5g&_*d?&b^BvQ=Wn&zS73O$(5S+1ks!a3-i39CUxRe}q!@di zPO)LhMT^$4aQ)=R0sZA^lNF-@2bE7faUmIREZS!pTHmciy(byZgLP>MwV9TqP_Q+Ex;Ez3{GLp0BQRvQu$&%bA|A2ez!d z=6X6B&L-pU{O?pMvd8a`90+RvnHi<);K}=_HI;gyAc+@C$;xtezqEImpKz_|KX|H~_^JiIRd zsOJEWw5s%@!P^T@-P&K4R^s@{`j|>McW1F*%a<=-+6UUoUIqsT_h`O-z9rZ=hTDAe z&(V929z`T2C*O}sP1QY9{bpZtb92rUx9+O+2wsjWInHJ0n?Kxdx3ssnSJ%}I*v7}_ zAv=$q(PI13R<^SKV&OC9=IS?me0-|LHCSqg4ymMxnYp!rgx7)ldleMizQ~-{yEebp z$az@#pC^}(_P-4~7@&4z*ZM`tlWQ+8?`&`hQ83P^9?iY8Cc@sqVX`JIB0`C6m2ke! z7)!~xR7hh>V4zgnlm3=iQ!}$8>m|>3#zZ?D{kAM3GyBF8kc}U|;L)8J(BmTGG7-7Q zbL|;@>jY9ZUL#sBytgT@M!Ngw${pd7$9o)aJeIonIjv&DW#7nuazFa=A31j}wyyd7 zO=Iro0nw3>g=xjBNIyzg&aapKoQ4_YdiMdXGq_d>>_khQh#%6VBlR>8^bs0U)k=N zJna6IHYrryurDAWpv7t18@r?2AkA&y*zja%Wpl^Gn-Z}GkZIrUNXo|d>Vic42Mv&e zmuMIWOWopF`eZ1uH$}Efy7{zAwL@_n$fq-@kdo{=FmNUq*%{dxd-#nyw}+1!+BpaI#7#&}d~_*v6ddamB7pq+E#p_nGduyA~YNID-9y%qQ7+RT2xA3`8^0KPucl#p?#;-^$(~jI;+p6U&-El8c zsguX5D1JwNbv=IxzfQ;F$nBlnX-#?>QXPG3PO{v8*=-x!-tN2LhhFQ}5{}>u+jYlv zS&!X%ZLHfHDeYNuvEpJ$(l^cJ(q?9KNvWT^?ps9LI6SY}UZ>YKv_DaU{HO!I~o zshj4dq#sMwOb%*Z!Tza(KbZRA$wbcNW^I>q-`6MKXGjxMUKh-!W>@(1H1EnU zOBiSKU%#Tw@2=Xn@cLCX-Y@*N2Tf%%({1E$N)H}0jVnLys<&#xpwqXE%Z@$u()ICX z%RM>8KL;u(x4$h{chv(qZg9fL@JmBOiE&9_GZPC(m9@zqdr!LPBjxYp)q0+dbk`+! zwpK)G`%kimpJUV;++h@>db73AFRO@C>cXM^^gZ9MCqK-bvsK2ned$~RBL^JR&yyj;MK9#J=e z%EzLX_2sQ84_3*^1+?@K+``mS?0WPpj7IyKe~;8Lo?xusQsGaZnAGAp+P8^)g}}GU zR=N@1&2KXPbghikPY--V@x^6aM&HR2rfXnt4hqJqu z?*5|iXIxTweSynR=U2}4+Ixml3(^l;@!fCkG$@kI9+r5`{os%CkgoHPH^-zD$e8O- z2NrN${P9g#5nfqY?ROPIrHJc1l**PUNR; z*9D3EH;E!r&NPk=|0shUBpuXW#>DRcoT^{YJNo4;z{EyPQv5}ai zuRYmk{)1=0xR$F6+t)mnuX*n4uC9G;AS?ND*@WBvigR~eB7`3|S!G>3P$03RBA{t! zz=uEDX(i&tgQZVWUl^_F;XW$-QDXC$Smh6~h96a$cX^KG?e2JcYK?D{!FbVEm$muT z4a`{$S~mFSr7LH~(}DcF zh0Z&xoSsRKwNHN-lx}llZp!lPDI>!00f;xG0a{d2B_DQeYt!`tQc=`NP`lbhqcCM-Ec zB8Hg zFwdPQH9_GlCw{Rovvk}GD80H$w28&Uk-hF9_#m`_|66l7a;!2QPj z%b_sc7@977pW|x3 zr%C(UiXTqB*6}wj_0r!jFL~0~q{!a;;n?@NVi{jfo-pD(zCtMCaI^4l^85&sXVG7$jp_z^u@g6%uRG-QAXaaZ{#b7*N7Jz1ddrG-g;jd#W#^+ z8#8~%b5~rc*D8yTwJyJ7uCabO-dww7{E^5nDFfHkfS!sXr_bq{S$)Y@2W;76PSw<| zp18WB^7#AVQB8XBMPpnG)3~a;h<#&rBZ23O(#vDwQr9?mx>z)4$4r~W7_`SB-j?nL#;xK9@E`zX=lG}dDiIZz+%qMbV2)L_)p*l=XlFV80 zM3povEZT3)yBy87VNV*DV32*Zcfq@SrF6ZBoa)0lrIXU-N|Qf-2@tyUes@)z3$2zO zAXIXUr@YxM%YUY{L`i#~|1*W?P&M2?esdyQI7fWJi=XqCsD^swEmT!yT)OF|SMY&F zs@O;4)9Ehz!>2dU?3Oq|cq$G0-|`u3i@AR-33UG5FD>JIgO0_KxSCGk4V@+3(~cLZ zmt|Ql4Ob0u)DS`83YJw;Czi_0vJGjuaa;+%4QU6qA(Lj_hO`CSkjBlTQ`?XY|Kn}Q z>i^+3q&~6@xmMbY#x^9lw@BKCeDeAK-Zo^2!=~?=p7AnureCAuw8Y~j2U35BF-x;2 zUN~c+v(|Yu{Lin8d+FEgC=HYG+q^M(pny-e?X=cXtzF!g@Q;>}4qUO;|W;fN{^<--b0=3lmv9#(iv zcZpkIeD}yvy0@-QTVkVc%6K|kv=ps+ob=9Sc%=E=h4mMHIS%*VJW$LlrRg|6@a1cK zcyrx5k78dgNu^4yp3p><%6VNZEFD>^`|SryhssOZl)ex88H}rq8#I|^Iwe@!oEz$G z$-2c~Z7EyiZ0T|=DkY^_QkXuS*6p*MVW+>ER!@xWew3#3CP_2lcFw28pnP9U)2XI^ z&%E!))Ip7fbQ`C_DekHN3hI+{ZU$B-tW8KKHx|$#KcS~vL3hnZ>ZpiaC4J_0zA+;B zFO&}{QGY_vTVYZ72}`LyVKLaM5u*46eZ$jdXZn;9wb?(#sb*et%{UgB|X-a=_q*6L9e*Od2KcrC%KM!kv>PN&V?Y|#56NE1$ zAWE)8ON(DHk9}6YaD<7oAx-@?I8eS2lEkIOAB|8Zx9?2)SJCb3Xan{y#P!dgD^NaB zn0)MrlAkMp*dOwtjI~dEQ;rx+=}_B$d==yqgpg;HXz>Sg7m@8V6Q7T>zh0ZBeT3Ga zeDIDJ)_+3Y-}I-9RH^lU$A$7mk<0S5^q20LU4J)M_fk_ZwqD}KSMEB<7ZyaG2&UwJ z)j;fDcLix*C}ZtEbN|#?kMaq~D~GiB_k5R;?LQNrHS0jnbol_v{(l+>NdFfWMs7aR z;`5g;ot4k9_|(zq_vI=1^jlEAC{ogk7JvP<+4)9>adYO->_7fnAzws5n4E#6>msf%)Uku;>p}v39 z|2EO{>?xY<8%ThBFumja^TczceZ`)ulkEd#tbG!*nm?HX{k0ge`tKm3{HZscDeVJ! zf8+awHA%GtK2i^ivVC(!r}@aC4O)DU!rArr{K>h8j;4KT#ZkTpkz6v57N7IpA@ckJ ze;=%U`1e_Fa|6C@HTWH<{pWnCX+Clk|G)4l`zIS!e4B{!Me*Uu+#;lTzqIp{!&@k0 z)n6~oJ(sq5vSpz9qM~BB?gM!{-XZ3JGM1k}G~%eE*}T8xQ2taAT1xXk-lGqyWb;EA z%hx>dsCS4ae{?70iwO$hrbo#88~@kN*w_4k?~8M9t9MWHkyFc*`Y#?p?Eg1@%ZA)L zW}th9kq@m=cK`ExP(FV2Lj0$ zpSnOBrTVN&D4&Sb?xJNLuMnhpXX0;)H+)+J{pOKBWAQ`--@FYeBA6Vz7w&}OR?GcVU5pE(zefOO_V?Nt{!Fk zLO!$)l(F_n5sj5JplKfuZImyLk4_-Z(GlsNP{#5lPVU!^2K=wM@x`e(#TOC~5W&qZ zkoPzK$Lth+l6xS{j?~_N_&CZ(3dm5JNA)yfe(3$-$6?jKYteO87oZ=;($P_G0(lsq zcp*XX3@^5W!cWK-bSC>}C}Tgt*25rK5G>S5rdh~g6k+>TpTwA zK;HeMy5#nSGL}ynAX4|Au^W(28e-THe6b#B-;s|9AIez%qYEdmjRE`M^=AhAiirKe z{syjpLY~og9kTvV#`0%gzzf_#`6BoQHsqP8>Ceg^+_=St_6CZy7s?kS;5;1U_a3`C zD}Vo~tJkf-0w5cFQQJTJ9^?}QX134Y_+KabdCmhiaM2k4NpF--Ama3QW0EC@D3A|j zto`K;7Z1@6AsBs7K8+1Z$h)6^oopW{WBIGCKDd(jk8tD5{{iF+6Yv|jke3lWJAdX7 zRKO4A6Y&dp$p4%Er;{S1PtY8{8y-Qvh#-Cg5%R}3+?v%sdsTxfX)oYo0x0;n_Pxi8 zv~S(S%~|;;Ziwa4-T;z&it-7_X=2Lx5zB`%wtX3&9e7E5d|3vgd~v-0guHpmN5~Nb zl(GC2`nJaD%k7l@f9TmXAGd;8tB#l_{VuXXnhDRwc_8B&Xx=2yJ*gwC%V7{t6vBCb zEFQ{O?d3L|Ut$gLp}5{J1a?Fb?@1&I;-VACgVupEmLKTn$r}pzl{kKBB;<<<3gEmy zz3wbmz99o`t#>**QQN%fB?3TTa{g97;m@ zM7;SS51Jp!SbinPv7W6{-G|yd-%?OM-ue&+2QQSd_?eRz!s!q%P9ymXd3rl$H;-^b zpeL{c-2mvJ)N{LhCd#LgoT|=8nm0@IDA~6`8LNNJ-45%X^ehz=c*22h9Uz zEPhhqO(gB9OBqBfNbeCB#xEZsZw;p>x%WUB%cm}3OX-@cb5TBc+5sDSLf+rZ^E~z& zH$6?~Q~vL z!RCcB7C&?3?_2`$f+9jQs(-&!Ft87P?#--1`2^&VKg!4r^8Uu3x%>YBzZTg&5QIdK zb87#Ezx0H8Kr7JS8y8wt)}nkOF7#oRL7F$(6p7rRj5W{9-M_6K#f#$219{i{Uz3{` z%2+<-#til79sUOSU}1-KZV)#aE=10}KpBg#Df4%U0@l&PB?g(AQ2Z=>rZf%m+%gki z=;60h(@&FAI_LTyC|^_*7uhZ|oHGAU#5_>O>Q8Ur?+Y_W)aF^-it@#9tqXCD+K73e zjKv?hJzo~S_CSr7Zi9GX{Hg-tve;(FS6rSSuz+S@V%>q_@tYN~Q1 zpp3Q8%e(U1nP^513fGR?=Q9d}kE_Wv7SvZ03;mg%DAU;T~pr{2b;bp2R9l(F`o**8c3fqYSd z5Y9f3xBAXovVEY8<kzAkk|4tV^)65F&kYFL(!3PgVgr%)XCA*6**U|{!|FelP`&po&HkA~5BXvO_`IV!y*xSeVV2LFRsRi^c|CC1PVGHU zFrs|?t^>qNj#iT08J zpJ6^?{+amSl`$8FOpE9<9 zCU;;Taqv4(^LrPed~pJ9_ccDG|+N_0q5dwbG(>DOI|6OD4S?xdb?D&X#nvXxT3i-hT z$m|7Wtp1vZeLg<|vr9J4KH=+8zA*k&2;@Qip^W8EwCcrx?MJ!-T=ze_3FXt69UE%L)^azE;fX;wJe9oXQH5trR%>W$dh`HBF;MBcp#lf zP(DEb=R6^Av}AVu zXZCJdB9IUAnK>Z$tOEC>$xP#$88!y8c_%t zT~Nl-+3w1Fz{r!jb%`?5bOO%zL*7lgCUWnDGM3LBCapsIxX)=hluy8)mxsK2UmIuT z9}99`bPD)3ko(4jCfz$xz8HSxlCyXxIWmX(Lm8`oN4@w#Qf*5OocD27nBt2F2;sM7 zAn*Nf3t4|CWBD_uL=twRd;$R%xo#<~tuo`80M-AW!HaqCb?e ze9Ewyns26#@`-}Dz7Kg)RO^546yK6w&!O?==}Wq|TU@F$5NFLi%6xp|?C<#RPDn3FI+Z&CZY5x2BhNU>jfz`JyyV>akZK%?tTZ#_GRSR(CP&z&!sn z$|vAYia{RHzMX6zC}a6?p*%69eA)$E=%4{^Xd%N_R1|;L1@ivJ*DOuk69wA09LG1c zK>1>L_Ye6?d1u!@JO0ugxU0uPwX9P(2l=?DAHrcB04QUPGjr5mZjHhP#c}Db*m0zB ziHU7w<3kzCUw3Q40@^2W@@!E)ja3We{f&RsxA+6?x%c>mX+Hj}1LU{TA-);PSp6xp znbf|m&mQu@MF`wk6UY;&K%4`Vv3$njZ#h>$=SjwO9(pH~Pvf2-QNB2SPX^0}GFJbYGZwB_ruakwLHyhf zdFn%~HIy%ccm9w!UmdYOl(GB{zj0F#q|uGwoHPG* zlrM^}v$0{;V6&Bssfu~yXffihPAb9owNw?Y3;#P$CoPskS(#K$I(2kj4K zEPwvQiwFLo@0j9ZtE=}QUx-GX6Uh4;|Hiiyp|r1YD0xFZK@cB%LjDiYC1m?U8LL12 zuES!qk2^HqNBIPN?0LoyvA?VG;#v88i%veC3+%6jv;WG6(|mkJ5c2zYk?{p(tp3S| z556Yt%HV@5C4ZDJM#QaMAn$MdHh=5YR{=i_r+@up$QL0Z53W#-uYb$`klAPu1Nu)c zuK##GLHRT?%Kw({qPH}C1hDb;F?$O6L;-wGge?HRRu>Urp|xP{!(iRf<7dpC-TZIpm89;`=A$ z$^V+&K7tRrvTp!>3aWcECv0OdTqVUryg{q^v)2swRjKNI#9;qsh{Pe z#1DOd_^C(w{tKRRaY1c-t|AnVKdqFigBWLRg literal 0 HcmV?d00001 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10083.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10083.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10365.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10365.cur deleted file mode 100644 index a35f6883ba08d3d2f148906c1e29660d7c91f3b2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GL2lbH5JiWUVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n ze}*F?Hc%8OLVNu9Xa0~9EfFp7+3kp&up)X-L~Tn@NRi`-ott;KQNt z{!sGYmq=oKSr&a*7e+s6U!G zK62{7E^-WDaE0EL{HkL0EvllaHj>jmqRLof2e~_sD-bsCymGg#mABhUnYVcG@E{s1 zV{P;qj~(h^B=vVM*b=&*NY`T~S>NF=XIqy}pXD3a=W~26oIg7^9 zrQPazDE7HOd((5BY`3%48yhySH2!q#U)GnGg=oO37K3Up?qX1_-MAuLp=fk#eb%_< z*IMt6v)2vaM_CNoj(#c2?UNqB)!A%vDXT|*@^GH&SU>(h~J1u#1rCr`~kCA B@DBh0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10563.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10563.cur deleted file mode 100644 index c45ab50b5450e1c56405aaf46616152ae3acb98b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9;EC9a@AC*sU}c;t8S_!sf8JCJ;pkA_x|yixNR>6n1inUtPdI z;L=z`R1gI1oQt4^MG6ZMgd9l|MPyDv77Q7md1o%<4z!TW-8;W|=KYwD-6bmFSE~^P zmLbtWB1%(&ifFS$G!>5gUTfSa8uiYB^;`9sg~fC2UmvGuC!Y;Zer{ZTGPe>y+3TRi{jWOHIecrkj5dVG`|5 z=>&FQSs510+Gxz29Sxa!G_VXjL(kY#Xkvd- z5XWa*SQ7F1HgP>;$kq>V3JekB7<&rO#542EJsHRwL&+324hzV?WElUoNqD3r26_xh zDFxaY6vQ77(*eER8`h%g|Fp#PXKCv8O$_LS1l*OKwVW0vuu0u&mBTB>Xsc1$rF*~b zy6|4U7GC%K>`b1q|FxRXaDw*iLtMhCCR!YI|RM+1&f)`wg(|ZN4yOUgvB0 zY*u5PzZHd95js~1jAmg)rh+I@;gC@AP^<(jfn`!CL@CqBY^gV}cd%918f>ur0STG( AXaE2J diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10624.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10624.cur deleted file mode 100644 index 4152816382946cc0607daa0ebce4f33f8f5fec25..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 338 zcmb7;%MHRn3`8A3*`sjWzOMQy@)D1kq07g*G0<5ig AfB*mh diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10665.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_10665.cur deleted file mode 100644 index 289c3531bfdfa6e51ff82402f700bd6352f7577c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1610 zcmb`GJ8s)R5Qb+(LR6khCMi+~SXMzw-GFwL8>G$=d;@Oe1W7s{!ADsoKvMb$7T_l3 zvSVR*{m<-Bumq?vywdEq|2+0Zl4yqCYDHw21Hm!AGkhQ6LkfK%diMOq z%U7>$-Mo4G4mAee<1M9hJowm16>{aG-DiE0^~Ba^t@Nkl*b`2v3*hBC^J1O-ze+gK zzL#0A7n$DPNu8%sxv(C2o@&{Nr?%LN{VG?naXQ z?iNcTzrQ1yFD2sn4Nid}axyEWRXSy-?3Du4@wd~$PGE-gCByh=^N4s)0`wSC2mxdd zCd8kxApv^c8`h%cG0mm@sz}40<3KyI2-mx{vbM=^(a#{xj`j2W{IL)XxYe8>+H!VI5G~c%5q8KL)e@gH_WV%G=~A?^0P+#$ z1Sv;7hxzy<7jSSlP0V4*;Vurlp$rbLn(yl=TYlfPzX3OD=VMCevA@P=b5+IuuN~8G q8~fm3bOsx{U`iK?xee943Kr&Iowos5A#FRJ>JRK6>b>!3_K@6Jj!~3Jry1E1NRl3`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlKc4 z6LsWKln4VG{tgGAQojWr0CXM5cKF@^&x}1XMhRYkqy`MdnkGRe&)RMEw|Stan^u( zrd43&tk<+YA2xv1Y`o;OX>^geY;Cg|wa)85Eq`xiz0$uG9H*3yGMwv6f2w8pbW?hF pGK7}ED>3z<+O=W3ccI?b!4WOdk1kLZ(xumkM4XAW{Qv}(;MM>D diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11655.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11655.cur deleted file mode 100644 index 9cb0572c84018166efd4299f09295d1c6218e67f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 183 zcmZ|HK?;LF3t3C5LcZ!lNt4W{75qC&g$2nt?cma~gr=%NVz@CYA5fCs1V zf$H22=m4}W*qZy;e|DDfXDDVvPOIPI;&b{)u}N~$KzLD!T0MihTGZEGg#yL5D6iDE Nc)ptHOAD=Z%>h;hU5)?% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11849.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_11849.cur deleted file mode 100644 index fcd7934b61d922fb1761e15765fa50aa770c2de3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO>WyT5QT@9VR=V+*M$Lk*=27aXVvTE24bBSZFf0BjzYIUyUY<{AQzx^S_GWF z8IFwDKsP~Xj6S~kBSq0f3;dj8SDYheeK6*w5D^!IAP|PZ<%(oLvO}1PV;J1bNM?c; zA@ric%tf6A-3t7Y|K`!ATDsm{vfEcZa~G>N#v2OaNjKCd@ZnH-f2jVSOE@vUEvr7P zE2A%37ino+`-r?qo$e&kt~sgxe9X%4$4Thg`XKFt|$Z zs(;n6<}I44sWp<*I-C5fD|F}6mZaaR!!6KQ_` zf+eAcLfVg+q(APkzDHwhjouiHy>T!qQ2!Avcd$LokzF#(|2rZgF_HpLOev)ViU$p4 zkJy_6PfX?8(&jBA@MTq|@xpPX19^nI^IBDVc2YEMHk#fsXVGX~%PpSAnm*TOZ+ecC zt#;P>V&mqO#z)8cwZHsXh(?@hO;GJ6yC$gCYU~I*6pd<)&l-Dvt@Z6VdtCte2up&N zqh7-D`lJVNbvBz^!wym`be`zhnZfCS@4w@%@vpNF((34mQ)9EG(|4{P9)5gu z^zxO97luBbTevybvu}9p*p3?~-`}6wpzpr<@O13U&W*1hnSpHc?CniI-oCqcVD9+- zhm(7wTTgavKQwXh(?E6T^R};-_AHctVx^828Sf}n+8OtG-C{+1E!6##IFIS4)PVC< z&zY+CPZ!}tyH@nNTJqHD57%ib3QI~OPgBf0(NqcRtdG=k=47qu7(}%d$AYjZED7Ui znd6nva(-W6xn7g4qwXrqwWI6&zPZfB7S7v zvuQ-MCI)&8$ruAV4<^JP57Ps^+Z)!R^8d8NwpZoUXmfPvgcQQ@>RMha8@QrIxyU+H|dwb zn%H>L+VMPF!e_G><=IQsw9i$ZnFK~7ux4t4Vq(HBWumUgC|CkZwKB*uww}7FUcg?# K7GX=U&h{76;_(## diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12079.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12079.cur deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12254.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12254.cur deleted file mode 100644 index e58cdfec6ef0c748e3845ad88e83a556d6a00f67..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4r1@_CV0$WVZ@p2t?3QHvusbL6kIFXh1lJc{3Ms2O>!3?#*xh^FHQdcZo{)4Ga(k zmLX9u5v3_XmFZ`RUMwH^_WQ)~+V;_hi<4I`9_Us5hYmkkJ=*taB>8xKes*rUxbooi z!tnR_%%jn>FQ2c@p4)ff>A|nB$KHOpeE!R};r`KU>F2#;J5R;4i;t&omM%pj_jfP< z*l%t;JJvV%>(z}NC$Zu`TBKY+CGBK9=yaQ@blOu6QDSG*5M>ISsXI>9-TY)3lW2F! zPS-1rQmk{Hq_Ss4NW@8sc_)(6u*rJ3p_z9ZEz2NktXY;k%bpd_I9g$U8XArt3=HQ> zGEL;&g4tGgpxd7JJf}QoJe8;PY{PIP+A_8>ltMk7bh7E^+f=#ptGt;bK9@#iU?z=B zz$9=Kft&9M4ab#2rz!HJfb)n#&j>5n(+TXrGTtSa1GR`bUJIGJ7FY(Jp=abNG_gNv z5yxk1SQ7F1I&nQ?$kq>V3JekB7^d~|7nTo%+geJOmyjl1l;k)T22cS*rcLb+ZG#)zEclGVZLR8>ZT>xugqg?=N&c=?gL#vU^{=7#JiIjjPuuKYtC}o3vJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12642.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_12642.cur deleted file mode 100644 index 01101a935e9b267b7f69d81d42c86293564a465e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1740 zcmd6mJ#O1D6vrPe!SqIX>tKMIij2O2oT)eH+#}=$Vx0zUwj3dc=mF>!XvZ8O2C{Ud zHVr}8|9gBgVgt<(WGL;&AOG)zUy_Js_^sDOhFKB4C!)3`sG9!Fh(5x11|L$s|5uGZ zVOIvfms-yGrSR)wHkP_Yd(382^u#t4tqkYn*%QyHi{S0H@Mc^5*EO7IS9Q_bMPYDH zQWvOJE?hufphk8QsIB&*KkSn5>uzKkyL)8Ll(ll9Z0v)?+bT=`#$>4vl=rCn4CA&f zpfAdA${XdaGAe^|0-k|9hBxEbmHCoC=3f01V_)L2-}iV8`jBG>b|D83dQ<33@z1L) zd9$i$vPv>iM^q^-R^Zb)?10(4bHeq?3NKcbFs%&JC@ZB^x9n8bJ;3BeO-gi9JPuOqR9qb-<+WrDgpeZ2$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13226.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13226.cur deleted file mode 100644 index b12087eefc2834f1033fb74e444a9cd1c130536f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|VR@sxbub`JMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&}vUH?2 z4FRv;9Zx}Qpi2?TrysxjM~aq+7PxjhA}6ef-V#yQ5!90YEQmh9_YOX!&_|ea%sD%~ zm??91&cW+4!JkFrBAMole3mdIxy&pxmKKh(L$SoNIAPih&5;FlKI&NXx;tmHFM4Jd ziZ+HTYQ+<;sE^>?q44%l{NI;wVtiQ^eOMO;pS3Q~(zx~kd4U?;NuaJeseXS<%CE;s z=<4H>aA8~;*T$xP)Oc61=Inuf&Xf6P#-YUHa2k+51dct}2M#URxjiqRLof1$jD;9SEB@ zUb)-W%Ij^VOk2EGcu9?wu{Qcd8gD1k{Qe0`B7exF{g_Gm>sts`cpA8nQ|OJYu{RDz z1@h&4>0o=9BYVj(|K|vZgg^@1F{KzIC>}J#PreTY?y@JWMVtQ_EuU8<8qXXTx+RZr z^SoBko}Cnpn~kP7%t^spAz2Op6Y S`P56RpRnJsd)Nc)a{L8>pP{B?uf`!=a6HOdV*Uk{wChxyqOCefx#!LOGCwc6r5 zO(kJjY3MXncqf{wag+U14a>aQXnRIUW7D%wSQ3_nm1KkC)!4CqEOMN$$u*HT0rRaM zKvTjQ;hb<@XoOnWf#XK>-`LJk3iWK(&8EzEXo?UwMYDju(9YywuAR=nEDBUnnD37r z>-ys0QzE2@^N3<$f))Jf6n5ZQ*{7JJLkV+yC}!HB$TJeg!bGSnaXf1i>+?-434O6e zT+cc3^&^}DLudjMp%P}oTv!Mh$Qwb)Dr^iEk-TIW|FLOAv?d0649OS+`WY0&9}hDC zz26(wqV!){=DM>iwYnyH{EQUBmF=~HuUzDlT4~DiigVWcC>_!zZd*a#$+t@UPMl=5 zZJ!U;N_Y5p=vY70_a6&U3%42s>?^Mh0`@r@JHigVk8F;2eC&Cr&!=-%@dD5z>;;^T zd>{75C%%B5yGd;bv&MI}wLRoP&sF>T`kyVlZ_;mo4YA3#bCb4M$7i#a*kW0=-J-IE p$zU`NYv(2^WhU-dCh1R%f@QE=D+85r&D@t-f~~;TVC%5n_8VF3^27iD diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13760.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_13760.cur deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14180.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14180.cur deleted file mode 100644 index 4829aeb6efbe9d40819995fb40793a4c9c9a4072..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 170 zcmZ9^K?;K~5Cza5EoM3N1j)*^H^`N|K?+`Mw9qa+f`S*wGQ05$T@?TD_zVmKG@M}o z+|@161BemNd+a|4m-%O^W>d+V-_z<#{z$b&O4dLasU~%gplv7WJFh~4(o2+AYJ0j~ Lz3EFUZFJ8G5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14412.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14412.cur deleted file mode 100644 index b94611301cde5b12910b98eee22415cf26685e06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9#8BT_L78-Bp7M7a{+_UPM#^f`u4NVJy^6j31rCju$^6MKEZQ z#uVBlHo;bKPC*+XAlQhIBe9Sax>pFR#2cS^XYRm~$9(NBQ31b^5hBmf zC)!U$aZFGFeJv23hVLMJNTGAV%*3}RpD&C}4pk52zb-93e{ptbUwU%y*mX_7C$@4$fZtPfW|E?UrqCS3_IQnzt{aAJH<%c_OZd@Ba zRSmA+tzMj3TRL%gcz$j%IkSj${%WDJu43HFQqAfPV`;Uc9Hq#3)F>qiT&P>l)~)|R z04Lg=!0LL@Qi?X$NeUc`LLyI6iFYC?_M5DaH8SSCMsDbZjZMRXW8heHEQRYFkA2Pg zHBWQBB;7>aEtqL_3%c!i-*MJ)!BII%#||_%qHSZIU@FX)MZIh~e}^iyag{bxK8IZ_FkQx%_?RXjt_(RU0T zMMfNta^n1C6H6jLZ4=L@HJSN6oB~7SScZ*{CQ%45s%=Z$*YA}!7ONQ}3n?yuP zVxY&6lv1GaU_$)yFfGuVy1(1)hN#JtSo3J@P@dfnVO*yk+&M{rq>JE9(ch%;;wzJvy&GqYG!`XDM z^>mi5;ad diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14786.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_14786.cur deleted file mode 100644 index ecb707f95fea5cb3382e7529ddeb03b3a976e461..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@&E+vj-Li5_S<$n@F_KSZ!isDK=suqF72uI&EYpmjsh8jTlg4 zND;6REVQw3&Ol5f0Y$|~$U!7%H-`!b2^s(MW-jC|*huE?&2RqiW4?BmsDNKzA5mZ# z5*;U^G$p7a{U{J!f$t=INFnp)_s0|K*GDgW-kMq4>Y496(=|La@#ONWkq@PXpTnmg zfB7@BI{UJBC>~$?*86n2fACXv^XBsRqnn5CJeptpb+7ii^X%P2&w3s%ox1km#;yJr zw`VUczn_}Cy1Fp&_1s3+`RB*5%>EWB=PRYHj0c=_cZ7!X3Zc^!c~Zc2M4@Md73}E*c3>GF5zM~sh&j?7GIe)g8F+@C zk*Cna@uWeVpKW7F4K>j7e_@7N8 zA|)}g6)0$Hr)@ zF|{lAab0)m&3Y}oZpO*4wyXJI_3|E#hmQ5#{PtrZs^eB&0&8KjT>@*a#*VNg zhB0G0U&m*&66t(NG|XF}bCtko1lGt@P)t%4NsG z;N;EhP_P8J3B1zq+c$r^T#`f!{I**nCoG6Q5>eX{R7rmqL|@?h1Rpa^j@{(kL`=9q zO$@gKMKh*o;~Zs;OiUR`G85o0>C*(ilYVeXFG-V1tn$XFVh*g@bJn}8XSN}0W4NM5 zJn@RU2;S{8Z}-{%tArEddztlql^Oh`b%9Fb$_L~Hs&yxU+Ty7C^C2mJ97dt54llxm zu{5rXb@id_>(>n2db}eKY1-&uI9(D$#J}xX=xGgzM8v z-HgmPsei&}^H`<+!H@jgr#?0?x`vHibY&BZrH|FJiXPU$y5J+SA|E?xbr1UkdxSl~ GF2_GYrSyIP diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15228.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15228.cur deleted file mode 100644 index 07ac61a090fcd8c2f3a4bcbb8d0da0a3400b75d3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 867 zcmb_ayKTcT6g*jmRZ^OOu7Z@_K$#+QWCIECVoU-grAM#@j8cIX=3gXFE!@MccztccY;Vv^js|9Du~BW(U(wy|aU9i)Kgc zP&K2?K5O=TtL=3XofV)z&FWy`j90ThA2xv1Y`U1u=A&Co%h3+2QR}?^bLH=?>{s$@ z!Eq8f#^Kyt`co5!4>!r1i$m}PUWlm=)z*i4=R&hHUS|bHWq3KHiC`VBm}jv*zsb}K+up@ zgrL2RXqCWRgv1Xdf{?-{7b0TkED_lv$@rf)b0K$VBbmE5zxlt9`PyBg5`K*aQD7Mo z9VenBA*eF_C=p$O?*x2}$yZOthAxet*_d0~8Y=Gne7|@4@@BGp^YQ5S3w@tXi7($i zPrek(J2zg)g{hsH-?#6c{na=Abo%*dBfhxsdS$79_Tw|T_w~(qU~XNLQ|J2n?`$lc z|1emY+B*5}>gx4;Y!K`GwMELgt4TL&!%laYNT)sJ2*uW;MkrO_V$*TH>HM>0IMHUx zPB*KLQtWe`q_SsKNaRVX@lGTqVVm`6OEVv~3d&FQSvw|}je&?cF%UBKKwueohMtk9(8Te$ zAkI&Bu_W@ded76yAv=G7Q(%Z3$H-H7#-6EX=E*>v{azB-Ff1Vdl41PMCJ~X680ax1 zr4(pAm=J$FOb7IKZ&-`!|I=dAU8O1Sa`fn!1j4n0wVW0vutj;j&gnH{wAGl}mHW8P zU3#Zp3$HtI@~a(aK3HBqr18+PzMJ2EEJQhO)g`bNHrpkz=4$K+JG2_r9PeoC`LO2G z87+7L!WT0X=t9*DlOCw$u5+kOw_iZSU(Sn|t4UzYVs$O&7*Y>ueLB z&3dG>RZ*A~p)(c3XaZKGDk#S)tOylVA|+rkER{kbOPO|Rr+N!pgRR3hVZH4SlP~p> diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15718.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15718.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15880.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_15880.cur deleted file mode 100644 index 91725f30071141e63621781fee59c4c536e95dbb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1467 zcmb`GJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|9l_|VRU81>h84~gmwX%~$o8~C?mqQW$IE+l^4=>D_ac*21TmLNaO;aU* z=c?2vsz=m)g|h4w^v(Fwcx${fW@9o=s3Jrk#<4>y^ege4NApk2y~cBY?2+H6nme#d zHAOHwWpL_WG*$9ujoRdmMsEy-BpyeS z{O$!yBENqn=~pXpe}_|GiX5dk24ggK#@;AE-DkAiKzC3__L5=#UrC6hL;{SMQqCD< z4;tc+hpE8Gd&63^dXL0bTSEww{+Tr{j!lHS%@*hXtDw|E&eeX1|P z>?uyR+R2uK4XZac9y-?7{`|2J4Y*ZJ5IbN(8EC%J%&yIBuq?ab{jM-NWy9NqSC`_k28qxT*kIC1uT zb;s1Bi_^=^Vm=&LdVQ^UvNwEw{PIZi>DMD~hA#!rmVb?XpIfZF7(4Xf!s*h__g6mM zU%Yeo<=pN)G=6UB6;}L5i zbhGLx#X9FnDtlIiM4Y6UcOoeb+pHTc&AinrEQ6@EW?AwqdsaQ;XqEkGXgIze7|xeu z+Q_>Ov#sesH$102XFO*;m8bOV!f+$nG8P$1p`K29+4l2Ys@(Zi-p&!9OQSL{lSU?B z5;%&$%~wLhai!2{iaaUcJfhGu!V30u0z0sb2Ly9yFk+4mhD<#eSO%VjyXmhKO;DJcVcCnR(`(4CL)c$rM(H1>|2cjQ`psJW>(^J%*%| z0__Y6;*W>vfZpy6Yf#m>tY8#pl)~RjMc<5N))wdrDQ3to`0$2+h?E+YHHg<#^T8(V>cQy9BS@Y?P z7Q6uB;kE&sj(qF3$0xpkzPqVu=jIsO>CVQG2YpvMyTF@aZBpMH*~$6A?q97f{)Y`ww1QhRr<tH}0JN5>0rd}sE5bLyPyX6Qu3f%(jm?OkME0=@p< zhm6=jmo|i-e*C{LQWQ)j=rz3G{|WZIc-s1;AXp)P|D2jl(0{NI;wVtiSeKCF!?PFj~} z>0HNzyhM%eB+;%qss4B@%CE;!80zDTaN%4!*UqMX*7&Ys&EE&s`b2y}-6xoggMmIf zzd7%n56EG_jnmBeXcLj^&BT(?X301hRrLD zkB;@Nzx-K<2ArxTsE(3t397XkJHie{qgvy$#-3kmeLF5u7eGG3lAz_Nm$1A(=>c4w z&8ApbbL3Hm^He8SM=j^|mc#CwKcB&)+ug`~SNbRXZ652=|B563h^5ahjBa6Lm&3Bn f)hgzCRp$t6VO@$DS(#6rwE7AA4SR$=!LG+2mWJ{M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16566.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_16566.cur deleted file mode 100644 index 69ca0dd4ef76c19a0be8fa0190ccb9f2d8f8c0b7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fozq+=c-2C{UdHVuKU z{~b?8Y@jGmgwpZj@%}qflti?^wcQdqVL|kfh}xFmmGpZ-?3l?-=yfy^F6SIi6K07g zH%$mm5|#+U7-GaC#ElLTH?bo|2trv(Y9Ya4Er|c!s+cva_MG)D`!m~+ePg(yMrPs_ zbrHPZXWs4e{ErfoXy3~0?^l_@Pns8~G_HJrE>NvI3Dg!x^*N&QIR_IZn3P$=3%P)^B{gbgZB2%g;hI;8e3feJ|=PP+zmLBkWLoWNUo( zvFEqGJ{>2o3qX&s2s9n}5|+m&J%Ed|S*ILUjdW=^4RvsF)N)?$+4A>h{R?<7yBV2p zQvZzK=BY~kqaXRFPkn4)bPXH3=*lJ*OCPIc6+Nthb-_odA|E>`^#J*#ihjwoC;Cq2EGL~N5~C~l#4AOL75{Y5)Gy4+-=4Zg_V|BJ?+eD zv_Q=n2B6Bj0geFr9!xDhHE`zb#2YKP;7~{lpY3;-|BPDd&2alMCDkd0#jJidF+6S3 lyNy8{!AO#qs&&$IR!nEa5=Z>i3R|M9&#xZjMP{;)y*517W~%@I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_1755.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_1755.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17789.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17789.cur deleted file mode 100644 index 02ea87c91addb5f773da226ef5638561886084c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&@VR@sxbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yKgzY@jGmg!bvj@BUGwB%&+)wp$`6tcczdQP&aFf_~@hvSWBK!NqaLEEBPV$V?6* zb7uI_K^+c0$0)*&vxKCK88SNz$^?ykX^1Hb|2^tha#r0rn_bZ}yHK<-TvIEacujo- zANGa!`{Mt$fD_}(qUimqF!-!>ffmM<56BDD=$!=Ws-xUGXm~*1W5#XsV6mw2r7U)>uJy=Wz$Z=ABn=H?{I+Qz_F% z-zaCSjJ46H^2W6jX@38LCDCrkr2Uvl`aA3bQ{)uZMsIA5y>T!qQ1<~XJJ=59$X+tc z|2hI9A&>%BOew|)iU$qx$HOep4@)G|`hP~t=T(WuGslH)$s^pH)+*YwlcI6G*7Sxs ziAL*EZt*mh^tnEH({r3`wUgG3jq6t$4;|~5{_?R9jX2ekpxR4zNl>lTxFg)5XjE%_ z*0|@_T6f3E>jKC}SQ4}x^%9otlODju*{o9uYmQvfc$(_u;;7}k-g1=p&92Yj!R&To zzD>guKAXon4L|+F-+dZl3!@v@)JL~yW3}|LUe?jWT38=^L{{WuFRgySe!(7LPq54J E2j{r;=>Px# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17952.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_17952.cur deleted file mode 100644 index 01c8f768fb77b11ea15d8c9045bfc67cf8be645b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}5VR}b-*M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y#^J$w1*#m&Vvt0L^t?tw?s}@5q%`0*12hN#BOptO*Anx1cQ@whz!@kV_TwoII+oI_GsxXF0^CB&bs}KWe@1#~!aiA31ek7dbXy;|hZ-^UI1g?xrf5ypf#d5miQy z736dQI}p|%f^xg@%DYXa%o`_k#>(i8A(Q%>ku<)0#gd5cC(?S%B=sFmfgxfFy)hUY zV`uD*3gmr4$riSQIkJ}w<9AzxCq`1B$B z&(g3A2X>M)tk)V|GiT8#UDC~;hY~*L=U{sFldX2rdaz;rM&qGl{Zd~(7NP;S zS^`uDi7o-EH5)s^4n-qd{jY<>55c z!Npa}eO@VyI_6)mh{{U3w*Z%+j diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18125.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18125.cur deleted file mode 100644 index fee77bdb94d4b1168edfea8fe2a41267fd4b31df..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+>L91@5E`@+q6{OS+C|9|TZ@`V5AW7#V_$aFcNJ<~U0(^mG$HL&` zpV^^d2}qH^D-FMS?}JOCEBtmlA}4H!-V=0Y=aj@ek(-$Ccaxj&cQ8ap8f2P?rJx3( zO^AxyF>(=82bwTT-UN*hfc`JT=bF9Rp0nLod*(J(+nBB?iYH%Fm%;l(<=vtBzc1j# z__C<>VO5#Jq;-iF##KnjOVsL05^bB4+8>Wa`Smyooj*PcuZ#=h%GmlRjc*&){JmqX zPsAtGeS*k1RM2PRH{+f0-k6QaI0I*`$Ngp;yV|eBbDqpUGxs%~`%{ls+$YW**dR&djc~?!f$s5UO9Z_TSm_c?IumWNGE+}^!ue{kb%Cf=r#62@MMsExSR~7L% zlIC~Mm=bnBk@jOI>5u!b`)G{b7>v=_8GEAw^&il33)w>)*(HPi*O3rOi4=H3rJOS; z9yF9SVr>dMq3ZXv{+|)~ysFS}=D4sU1%z9gbE+NKiDOu=HN9mnVxx5}w|E(9`dnXv z*>jw1wijDBHmqOScn%sUZ}xlwk0!Sx^KI!L@!351(*Fu0 s{|Kee5kfbRvCD1|bF&QDFMSS>2CxZGTi+os^Fmkf6*H5{ZV=*Ij`yvuh_xu0cXL z8IQ+1Yp+)aEcn}Q0jJymw*WR9P%ZJf03Nt^$30r`2$ybL=BlaeD@%gyhY5|wyDxa< z{u`p4GXmLV9Zaw6D@)~2xvSh)He#L@vLWsX#{z#H10BNvBhFkR#z@v39>~AeX2e-* z<6UU~GD5!2N*J#;W;#F^UZ3wOTC&rmv2D%1&N->((Ivgc(^%}M{3KPM;;6TswLNTX zFEq4(bvZw=55UN-7K3R~cQKf@Y*xeyRWsY-C(W8KwY@GUu?y&DSPhoWd=2aKVGWq| zrcEVm9-Y#7UfN>TYVFs5j`F?L`Gfpiv72(L8*hBFco(;w4L$E$>*- zxpLL&HEY+cFK*blY4et?+qUo6xoh{Hy>Y2)-~Iy!4|N|ta`f2o6DLod?m2Vz-1*)M z7cX7Da`oEv8+|u#-M(}8-u(v;A3c8Z^x5BJqFxm5L~-ne`d}V@b2Y8?T<-b#0%h}ZQ8V);s~e1@)sC`@LNlYfC|2ND*>bdO z=YM1|i8h?Ix}39=Vw&?LWgT-uB2H4CcOohBtE{^#DRZP!H}rzalwrm(>zH%Q2b1iN ze9iGCPjkK`T}9pi%(Suv4LN>y9CaLXRF2ZI0XzeK3=773Y}ZS}W>(#NgDSCpl~fbF z28q-v24ksZ2!@`e@a%k>uQ@K`TTOu@d7MY&I|is=PA9Mf!~7z_EVc*C{&t_4wtI%2 zqwg3vij>$N)`{ceDU?KfGEKam)@0WAa0(0&V;MLK$Ivl$OdJ`=Gv7-DE5ST+FB!)F zZ4w?SiGdzNQc8hl1`Fa(*boD~*&Aw6VLmO?%~>hcnkHIwNCNKsOf9R0_DoW(P~h;q z)~V50+NL{yTC?Ge{8TvI@RO@HqxoR9!Yqx4j{0_e^RW=saH}?ewJ^~(fHh}hN7$j! z$Yy^-W6!fSpH8QO3m_hD6Ts=nH*Rx$;tOcGn?h>c9Amn)HZ$Zw%T=5ETF7SKH`h;s z6=#EWtq0R&0-w!zkS4!HUH=qmqCyz;!|Ji}vZ3emO>#)>1u42`UU#~ K8;4E6TH8MpGv`GB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18495.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18495.cur deleted file mode 100644 index c062402c84846514022f5b98110f5ae694b04f7d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1568 zcmb`GJ8s)R5Qb+(LaT16E`?BfG9YudUWZ~Dt z#B~1f$Xpm}cKvi*n+K72B-dIRU~gwsU~kECv`-X(PITZUBC{Q&ATAn zZoKevQwj6NF`cn8dSl2W@pdA~?;o)w@`opqex(ricQ^&6$WeM@Ft*0tI2Z+}`+$}m zYzK2>9~tI<9TAZjNq{G&lu`oOgNFDgY)F77?+t6w`d>y{POCDFCyq1SQb4$QUQ2Z- zj*G_iTGE?RGHbNfa*O9t)93meOwVz$)t5XvD2*g6P26njl)L zu_Nq|HL4{(YwY=@meZ9SWC7$O%n4GCdJgmPNiN{*Zq`}DlEaTYK2K$GcGY}eZ#ndP zv*!bNFuR&cxyr*mel~YL4?n|HzK1-d7Dkt_sZXwMQ?(4qFMSHI7S_j*kd?}@=T<*p MzhHN;d)WE-16ysxCjbBd diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18634.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_18634.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO4JrwfuztPg^=2yJ6`-1QWz0L z3`i^lD?ucPATk$G%lrvB38*OIoI$xFWc<#XcOiEmh&Xp|KJ%UTV}9%|(Ext+I#J{q z6CEX@YL%c0_wHH6_Y`NYg2GkW6fl~Z(gc;(3C=<~JV#Vl{0tv#O1rXSg<;{5|J zU!8w=dJ3!kMN3QwDph+~9t*n5st#JH$0_wQW}Gqut~LUf8)1I2fJwCLg`gXyK&^H; zPg6lyQW|lZ%DfXz)wsoaqG_2on;p+6Y3_Iq2n)iJu$*kMzZyG^AB!C4YjQ2*U4{A9 z2%u}iTf$}Gs?Z3vunWhH=)bX(p%m)bw3jWJ@6zPKZ}L`-_*^@afthwX1=A={MPa@e zJB}NOgQi4C5$6%b!UQY$(<$u0vwT=F>q7~1ZYXBjp~y25#==CXEU`cB5XWabSQ7F1 zE^$5Q$k&f>3JehwmB#qPe|+K#=)0SW4Q`I{oo(+8dC+&&{=WWa3-6osTVPXcq2t_w%{TGcY$P^+r#fz3 r+1#WsnuB#R6BSYu7nMnhiBYf=mT6@WWn3%srQX2a!!}@>u>STN)M)PJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19266.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19266.cur deleted file mode 100644 index 91d21a147f8657c4f546c49951ff16a8904ad4de..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=BIHcL*YQuxpACgkS{0!eTEVh=^DyRziY>U}aFj&YfHo4FL^U zh{Pgbr$y}2sLUxCtb$-6SmZDWiWYld$%#)12=2qKM($yOFu3woqn-#?eEIj z!{;{M7ry>@vV8yi)!}1DyB`)lU%#<@{LG$Ld2-^@=tOH`wmx)gcxm=xy83c&Deaan zJsKVQa{0*Q zz;eDO+d|$n%(aFG-4@;x&I=cXMyQ27SZ+kS#!iY-sF%n6Y{`6&Ci8xiwKBwK+L{zh zwbd~g2c9bM^QF*oTp{$DA|VBwM-&Pptl&4g_)3nyb+X4V0BnP@{(b^W7F_xO$_uH zk}(E!Gbo5Z9;OF+w>PXs)&FU+?a#`o-8V6yV^VNew$}1m*}x^Wt5puKSerYI(mq}M zdE1Bg@^dA+=O|#-6up zKAp`KFMxQsT>z&e-?`oKi7#N_ZmPL=bBycq_STRG16S?tYd4#J-=tp$n_@E^YiIIo z4WG?wlxOc$$G%Z{W?~pk!8)l4im?ex%0#8eC|C?jwK9k@ww1b4Z(%F2RoEJAu>Aui CJ@a`0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19411.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19411.cur deleted file mode 100644 index cf8b867ed9b4d785aa5799eda251e13606525356..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(K~%R=mqGwp1u1m{%2lr88*n2hNYeQTKFTTqlF~=80AFC)u`oFK z=OMuo5FiM=)a$2#wJu{3II0EoGQYt3>@X=l2jMm+h3x(q(-jrV)= zf1ksN_GNB*zci*eX0x#@mWD ze-~Km6Y&vspJ3AV2Kwy$=Dc@4II}Z3Pmo(@w%dObj-Aa{noAzte`4+}p8I2u_4~xR z1G~hj0h?fq!TgJgHE&j#rrJqC>xe36jTPi{5jzmB-bLkhQ!8&bm9lJtFgPn`?Tm#q z-i)OA-3yjPem{}U$4oMRz$q|9j^eL|7i_hRuvj999O!bi16yXmg&eriiY)C(^t$zG^Vz4kC(yH zPxU3bKE=sbJ8M1IuzscSr(=DaUp^M10k>)is-t9Ef@-bCj<7?~sMh#NW6!U(o{me@ z1(1)hBxpJ6B`n7$y@0E`Sr-dyj&x->4|Q;L)pB2N+3bDu{uw;D-Hpt5rGLU_^H`Vu vR~-3AEPZZZbPF519Og}~7BSb0I!9Oo>r%|f%6#l(s-Ljmut(Sv?7IB{51IM( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19480.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19480.cur deleted file mode 100644 index 94120c18cf4f00667c431903e852a09dbd14dc06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9uM}<_;kQ64*8B83W282!h34Y%Fa=5DN<%g%kmcfS^0xDaI6% zMzk|ASQzjh2ncgV6a{ww~O&F#MylJvDRa=$XpMjj7{{OW)TU`ufR<<(<_p2VYz(uAEqW`eAJI!1~hQ z$fvpS%I{Zi>GSQStBq$L2eHmyTdbVBnD(+%bGpk^I_)VZDX|_kNtpr{>W=eu=YJT% ziFQA7x?XgYVu$M_MV>_=kteCdJCT%zE!O9on)#sFu?*towq?OH@+^9m;!TdHq2c^m zV7OkAX`${e%(l7%-SeFFocCPtRG!ka3&V|Q-`L4873R}PFI(Q3D#-746@ytAPPX_Aj_maYDuz>tahVeg}L_|tr zpvRDuQlRxJnHBo9z-+IH9E#L zbiRSlW-ZqFJJB(3gw9n0qiI+tQ$duda6qVdAXWmFz%nTmvXp6McB)m_d)OLm1J>XE E0BVWwhX4Qo diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19488.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19488.cur deleted file mode 100644 index f2c7ee1ec0c09c9d35428cc1bd33a71bca9aee03..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YLpCBZ30SZa*~NqQBmo6M#7*%a2*pd)gLo4^E>fu8gdI~w1;u(2 ztU^UWL2sVbNefy;=v7aR7DW7F7C|DEj{kWxDNUdk=_GG{^Pl%IAG=Fbz^`5>3M@mS z9YmBQ1XZN31)^h^8yf#$W;Tz^JvgxM?`Zw}$D=>*oZI;O;oT|uXKHEB?CH4+t-)aD zz|$j*&#&&?3{MV@ZhCop@Z$FS?;npOCqA7j9UR;C;>+Bv!{0VM+JAif^^@v+aikL*Z zT6DTuc9de7^CT5L%R(YfQiXRSDGA%G54AM&TB~CjM6D&uf@jgQ>{*Ex*`I`l;~RnD zd`YH_yvs1#nhtcu^SbAx=d`Etl%8D}Zba+GPKr{fr{i9>{d|`ybAFYzGsI`os1!`4 zkuewtjv{dLrO5LY<0OH}c0i2F}>$b-yzJR{FscPru7~AQ5WypiRtG4&Gp3S{)zF!1e-X=Q6Oz3O@ zpUr%vvp1q+W`xdE45KkvCsjc)R$)n~s1zvyi(#o03Q@|mQ(I~l_7*k|TY&Yqf8n+A Aod5s; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19852.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_19852.cur deleted file mode 100644 index 8315df2973c0e12f48e160dd639d416f0d7ae89d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8l~>5Qc|ZL933tT?zqI6{OS+R<3d#-(VRzL6Xi#@KLA)NJ<~U0(=2(w}r8j ze}=PyB_Kc$c%grAZt-VQ|P5$Al@A z*iA@~FT;NR93!(zZIO{qdNUUyq~E)yEg%!nic9jZOWm@omML zzjv(lk@$qVPf(FV0ev=pGu|5?jL8^{Ggw9LTI3BlcBM}ampqw&X6j2k^`{=|_K{Nu zc9CNMgDdo|_*WHc-l8ft)kbn!M^qVWtRScJ*nzNl=asunt-Re-%Dllt#ltgJ#@gsJ z-X!8-B+c($uq5n$BJIaa(jV_u&rum`qc;X)XY7p%)PF$BEp!icWRDE2rPdX3uf5)y}paY-nHE_|dU`=`Vj4q5-#B64dsRT@uvRYU~I*6dTnVpKa{~#U;BP>TcRx!kQyP9?nypTwS%?*IPLgN|9p6iy?_c2+>vy zrV64(z)o?_1V4f#*rv%z8i^uvVDONT@jq|oLhe8d$=tp9&41pxakss=JTR^c{Kn=*Mt=d+q3j)w{Hq zj;(Bbem3{}!_*=c{a1^X^OmztR;o_7nMtQTyLh@7sK z9i`agJV}vfSxCf5s_;%EWnqK$wYp|b)?1cAT;H`Uc}AXP&q}<-{wy>cUkwcBOEL}Q z-GkXybD;a4Q=YS)^Pb96dbVM>5gi&^IZC0PPCMD~^KGia`Bl*<5MM~6axj-hreGR4 zionhHgofivq0fXRI@C-d;PoatZX^S{M z-^G%MFZPJ*8AG;yfKy)0w5I*)h?jQxb4j_SbS+n7}4AlZ3-7#%QZi+NFEHZo2Sx zz7}4${p45M*L<*MazNvuV|`cOek?>y+^P#;Eo`(4V9nXs5q4-bvf1C(*z-Znr!!jc z0*Hs(25>s^t=k@-_yW4_CehB#F}Bmq{UHy!uG-$$VK(=^`F;zmdmC>VGp>tGd^YQ` xF5Zcjc`J0GQW%ZETDc0MRE0f4#XYeSuoRX{p%A4^Be$iNVeetJz3vm-#BDu_W&Vu(>v?XLhpnQp?3(qvx<|Dgc^E>(0lK7WSD_t z{)Bjj3&-`%hfKs%aVGW*IbC;c|J?Tli3lP9xGzwq{ng9g=;5Y!CyA*US?AEC^uF#dd%2yDJs2L&@<0yn>B@`SpDRptem#j{t1r00FBpA>P zYKAn!)*tD2OfKVN2ABC1coOr<(L{?YK&57lW}RleCex&v8Q?RJkD3h#=A|pCB}QrAlKs@#QFxF0*4r*XlW8nThrC_G$k-k zd@l}K49x)jlHvHjjiQHAkiZ^?z!*b{8C($mfCWilFKWZRAkv;@^Xx1iQdtu@+6IE| zaLZmw6K;s4R3sw9!<_p<x>`tZY^3KEEQ>`@uB1XYJKss0Hp9% zRe;n)M5_R)Wj0oX6$*{n(x1^-b89V6$9*CY!Yz&u@&a=1CgLl%j1irm zY8lEw&Q**1>d2=2F5iit(f?mimeI8?6DY5iPg<0}>etv;Y7A diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2015.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2015.cur deleted file mode 100644 index 1ca80aa95b07918064f18e1c40ccf64abc515e62..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9=9h#X0H*!lf6PDjSxW)wAe(DR5k|0!oo(dusG1pV&^XYNWj9v zA__u`{sB=iB3jHT#6sm7Nt-)UC3P(}J$AUX%%IDANIedwg!@Q?=W<)A;zk_25Zi z-^uIq2Y>v!@@;wS*vz9-Q_t_07GAG3;;Z8`-6Qdbg|YV8=-JO(2Tm^?UHh|o&+dJC zt-jWN_<3yl^7Nti%NJgBf1fv(u+V6WjQ5ml!;B}r9^dK|7nRGuF9!5H!9Ce0;4*tpPHbUn6RWwREms(C9qU0gDhh^shjF8>>aEPTZfId EzZ$Lf3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2021607.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2021607.cur deleted file mode 100644 index e83b3247167ee1df16af6add8dfd02611fd0b126..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 45464 zcmeI5PiPcZ9LL`zhFEBgwY3c%T#GhJOIzDRoA$Dy7loqq)PIK}l@!4qN{=40D=nS` z5BA!EH%p-?QS_i9-Yk_MC0dZu8bu`-U9+KP&AP9@-<$Vle>1x~e|C3vXLf%BFYh;R z-kra=Y`s~t+vD`5bfDx?;rnBh$$$Wn6US^eJI4(PnOueT_1l{ zh~58KLdLdDO-)G{3sV^qitD#c`Hu~-Psh1juHV_?TI&jb5BpF1ZP63I9p}&N3H=VQ ze`fDuk2@V(|IEIIeaHAS`?~Bq!k^hUWFI?!X79^BR{qRBkbP|YnSChsvGDh>|17kU z{;b&6zdxCMTpF+Ya8uD1{>(lc>^ikt=FjZwPz_(y5`ShN9(046 zP4j2=4Twf7Zi+v%j|SPNc4Yp{-iK!NLy`D1`{;lJT7>4$>;p(PcQ_P(5BtxX8;V=i zArQ#_;K75c4z$JpYngo=h%FTP@@MufkPX+gA%A8c4q%J5>hfpyEm95NyoNus4-c;m zHC_CfeH(~I>%!sB?4yBeQ*Fhc*|&*i^llV?XofleeIK1)t1S$FWdB90opJlf1kAc; z_L0%Gr2((|wqR_o6Q7T#@S)Tam?6r)CviSk-4PiQkC-@D5l)<~RO@6&JW{Tf50^#O zv>jZo#@4dPnQ~De@we3vvx)5_hQB||CWK`|cyFfhAStJ@5M~cw1;e@)#>NcB8B(4l zagM|~#NP?dz!016vD|czvFRS;3~8GsagM|$g!)eR5IfyN>~s&Y(>=r)(l$%t9EqJ! zlI|txUXt!5>0XlVWpx&%tj-+7)$V0gy_8k;QdZSVSyeA(hP2I+cpHG5fRu-1iB0em zHuw}IZ%lv*FaajO1egF5U;<2l2`~XBzyz286JP>NfC(@GCcp%k025#WH3SBs&o5HBS(%n{xP_6v$rP)6e0&`Jzn>O^0XkjY=+5%; zvh@DG$K%i+re4{oeTwy z*WU5}!8CYptN#>wZ<~MO9ll#7Rh#d64s$TY-dmpkg@pxtpU2mG+UDIX(lAq8x6XqH z4~+M%rn400b-e`@67Tp?gEVhJR%?#;kawK78h?HT4<9}>Yd-DsZq}@yUDq+<{Wa6L z2XdFkMmyR&p7ZD>?>K#pEIZ{r>^;zbk9+s^PrSd56?=4Z);SFdg#y0MxVMHno$i&t{R%>Pnc&9%rhlKM%T;g zJg0LzbDkezo*ki^JI{>B=z3Y5<3I7Z`1e3E&xy#V^-Lak;Ef3|0Vco%m;e)C0!)Aj zFaajO1egF5XiVV6RRbTa5#sc^0c$VB?=-HN%p;)v?CjO6^5n0-$nPedbAG_c`0A+GCFG7`^6UpRYKLfKV!&F<|1-}9j7&gk&axL3s*OPsoV>5`GJ zax8mc(Awp#+pT@jez)}aF*03(_5GgFfiaX_uT(0I{=aYBz`|xD@AZJ3m3aN*&aJt`vG?ky9xj|YP322?ot#V3x<~D}QT|$R z1=o^y!`HcAvU}_N&pP_O(rfnd^{}$CBJuM(_?kvvomXy;*o=NOgdT3)ys5O)_pMI* zXjcEd+qb)}9a%M_e*r$@iEE~t+|4{k)xQY$X(mN`RQ^v&%Zbt+MgP+$rNn6ut^euM zL~0MKKS}EyHPbEV^_yhv=)+Hc(zW~PPlNVG`qQGlp8hmx_v%lZcB(&(+Kv9SYB&0m z@OLC?X=bzkxpMAOGIuK_FIQiV13J|WP(oC6zES7TsvDw&Sfz9OzA7N1+u8SJA)zc- zrg={9Lx$z*i+Ui}{o3FE1N)|*jINi}c~0k;L3{gqe!|}+hWBZ0f;0iixld~??C{0} zm;e)C0!$#m1V)DjH;h=~I$U4;8LoG|-D#=M4_K%Ex^_+d_FZdPf5bKZ+5rpCpD(>M zRK3Q8F?z?rQNxI3#dci}uKnD_^ZHZ+dNpC&q3xey7H+H-0C__Kx4_vFZ5T7~72B zt+CDcalN--|3MplzX=y!r_VEY&g_}lx%bY@ zo!2}6NzOgznS0K8p6B;J_wJp!cV{$hf;Lg>?bVEJ-etOWC$-kDt=P|O)U+Pj*VR?A z=iRDlbN`}i3m392%4MOKsS>)-w6a#FwoW^AV~<|uy+UwBJG8RkHa}8dvUPf(G4zDS zBQ)I@OmkFbAk*ktag0Y0009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X z009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5CDO=2rMH znj`g0Wicg!XfLNZKc*t~?%iwC-OZRYXO3J0cSR5jrmRiizw~rR?JmBbT}LCt;>C;I zTN^Y3*jLSg}It|8S#;V0<6~lK);B z9mX2yqIpDTXQvn$8F7=`+IQ;IDbd>6%Kk4>!Dl~$kiaJO=lVZX+8d1F?=)WY^z>Ld zS8F`*zys3vvkm&h@Zbat4GM*V)M5`!74#gP>oK33{=>t=V(QeX(&u-AhmVmB5->D) z_uY5JtXZ?99{;8}zZ78JKhT(}$9(EK*tBVr^u_0gu_Z^q(1Eo%e*CzYIdi7eWjBT7 zXASr|=3BIAk@WME zJ$h7JbImnUqkmCoUfu`ZqJB8$OHRk2p2z9WYv9O{BgQctYf5DYmCI^4=%VL59rN*b z0sNf+_2*+g{=A4SSpu&5^BOpO_^_BheY){Hg}9x{q$;8QgZ7J3sl>x-ZaC(vLNK}A zRrO~f2L=Yjv}x1i8hC}mbglu<$9#M~NLf!ylS>(%6#_N&=QVKX&>?jVyyRE|exdwb4^WAjQP4a!@r|C&Q_mOzgpVvTNU!S@L z_&o0~sd)OH5666|U1y&4=QVKf;6X8E$`tuJ9%cQXdg>{Ds^+$G7I!G&^{V51I!w`{?I;vO3@98 zRexw7osa=%j!l1PA5fuahsB~lw2xNA24;_3e`w!;I?)e}RDWn6y?_mRh)jQI-=H$_ z439*AXdjPwA$SR0e`p_qD)CJbs{YVEKH)<06q^3fJ|sorohB6hp?$ofh3Kte{h@t` zYQ#TPL;6Ge_yr5uV_^NEeaK2AGhHD4p?xx9Mc~!9{?I-G6_T6Mm;TT`IiVu*>{)+k zACUsdPU}g3XrHV|5qhtyKeUgKe)3b-)F0X>FHpo0RMj8aM@&8))4S>q?b9Jn3{i~J zAKJ%2Jv}aL`a}El2oqBzmj0~$?Afyon|$N?dNB!*up2{fXrHhO$+bnI=j+hyHh zYxV)7T8FKJ-7bk?+w(<-T_C%ljPDRbHoJ{%)nAKv-)8G%mz43E*lo8<4!gKpQ@RVS z&}+9ldTse?ZJOO~(OPWdwYs*AC%u0Yi=YJ=>~# zwpI6R7aa2y9d^lKt0s-NxhLD^o@|?YvTg3kE;!~ZI_#3ewwc1=UO3zfhkN00Pp=2Z zd_{*{a@clL*s~YHp1lzE?1ivrFGRsHU(sRDBZ1aZ*-b^)uA@gy>)mKncmM$q009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5C8!X009sH0T2KI5CDNV2;5ChX2jtLKE@H~qCNCK+1dz|EmXcs z1zUUso+DSxUoHJ)cT>573byD7%%-U?PMS1H?Ay0b+<*W5V#bUast!Z+{F7AXM;Ah_ zXZ}59FIKHuWnBSbWMo7<{q)n~mRoL7btqFm{u_bKPT)s&)0cHQ_5PTO*t>VH#b0gg z+Otw{l$Y1KIn$t*tcxiGCB9J@&wdpt_Gu0sU%r>(ZKr5IXF1z%70*BKTYmnh(0uUlmLm_S=bh`)(|1e-o zc^c-*pTWAk7j-fFTAw+0?%XNae?Wa(^8_+ru2uQFXmFVM_w@9PTlaFu9e3Oz`ELjq zPu_;rOvR_uebl{@=X0 zMlT}ZiNDmK+Ii05;bAd#>Qu>p3CMaT;F=Whha(uz@?7w7_BGi@${+0OvX6{E*n46h34aIsm7XKXXU9-K ze}cX5MHCwU-ringE{cH9rD5HBlOh!UVDAmKORt9cgS`t?@4Fh}5BATh=-{$TG9a*f`;`Gb88n*N{i#UJeb1Fkc|Gk>tJLo(RYp7=Z1|2UW{jB+7Rm;XZ# zJ!JHuv3y($_AU?`*j1B1*f&7d+t8}~!QLCd279^k2m1!8dLKTHKiGSR7eY@Pf3OdM zsJ|&J{$TG9Tu8kQ{$L*xP5;vv{An21_)8`Ml(WSa%lir)vc8juKZEKpe_*Kwm_TsiohT8>Ye^F_d zl(yOAzX_IOYRl<)znq@ia(ZqTl(9vnT~gYzN&T(qsclV9ZEJdJThmj!po}dl?UK^A znnIagDANmNdZA1&l*4S$waA zyl&s4#LrOap>kCYA#C5aZJTjFLdu=*0mJto(;H~alhb6GQ1fn)nRZOuXA-fefl)# zews?wKMPoC)nKswg%@71`ftD)O+lZL|Jyz@SoOO`C*{J*76lHs;Yd0fr+-f;fC z=T4L>muA_<5mw z4zE@!zMnI5=i|XFGBJ*=KUiXI*!> zWHZ-Ta$4_qzEvdG0myS8{LWd)>RP|DmBFexK*p zdo$-Z4+f2tFVE>W&?P_VwF)CT9`fT@=q?XWPUj&M2@fak2 zPKa~(;KT_dcJ+NL?mU9V|Iw*aiO0^Yg2aD@{>PKoOp@HC&VJ)RN59idOYDC6e=#zg zs@VO+f9Z>n)Wz;O{!5oq8N1i`)3n|>W_7Fg`b~4}oJXzr(;j=R__GjuwfM6VyIcHO zirpE1)?!!V&tmK{{;b9><4?oqNRB1QRynw`ex)RTt(3mnxH%5RY5V|6)5>N&+pMoJ zeh{T;t!7>MT@?{A$5nop#e|BKvRao+n=0OK+^C0YbKc7Rf5?{e6wH1_vo4u6S2VtI zpC9kP664=#T}P#hiuF6K$z)&y0T2KI5CDM`6X=}Sa&3pMy+hwG{*}J(S`>GvQzqyy zA31#3`0G1a*AGPHfAR#K&!1nIK5^_jCT?@??3`oh(Dlf^*Q4)#KIHTIY7Csa{CQwc!?Mr2|@%x zB#2eeQi$E0K`mpER&p2;QiVAzydq}&=FPj1I}k*iyEngi^S<}y&+ZZp;5Rx-6nVx( z!$g#2RNK0}c5nOX{e`Q==^w?3o%+QO_4&EO+asIf&#q11I(fdm(z^0(#-7c_9?V9s zHjiDJUc3HcWa{q1q4eeQg-^e3-dS2Ie;@ui_-^XP*X6C}Z|F?)_T2HY!DQ!sa&)}; zdf_rw`pcG>AgpA)tWE^K%S;Dfs3$4)GiH)<11>fK=Nn=ENePo^k4nLBR06fy<2+3z zVMS@^G*x*gnzFdX{#4U4A2&OmQPSM?91xa-6=5~m;CL20)=xx^^EJ5^@*cu`YXs1& za85WcTof9i7Ixvd5&buIa+E?noA$CL^Ie)E#7)sEpf9vDIhbpwQ!tGJRTSpSv18pp z9DGWI6mcF=EKIP1Kb^u3JgY|(b95+S)`w!I9f~|7VJu99$`Z%Z4zWJp#gfn$d&Kpe zBVRwlDKLa4FcB(YD$Iq2kb%5YD4D?~U=hhnhVdVpMnr33pvRDmF`%D8LHzMB1JL`u zVJ)itOG{mEmZf&jM4z9MLb$rWR`8XJd{VnsV|mp%>wT0C=@Pf?An)c|C4M(fvf94S z2W!_3_;~18Kh*ah3sD=l8U*YsuMPtCIU75|4!w_Tj(2_R`Jm6Ib5`*J&?D>xoQ`}S z_Qxl_fWEt_*$`%p?`(U2$b-JC_V@KaTX^53-vFCpGact5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5hM?U>Hk z7`-tRl6V|R^1CN2iTwVVq+hMX{T)t$DRPwF7>v=_8GEAubsy1k1KYtI*++)?KSx3& zB@*C?Ddn6&_MjpD2^$jN$$P_EwECYB>v>h7;mmQNBL#%p(^{%SbzC&8R+8SkOh#BFegYk>N(8EC%J%&yIB3@f@{tTth5k}XrvCD2AbF&E9FMJNL2g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20989.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_20989.cur deleted file mode 100644 index c61f816cbb6a8a7c565bc3a22d8e6da5c00d6cdd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1686 zcmcJOv2NQi5QdMIV0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEudjwd5F&Eb%*&B|lIekoO73ZC^m2 zmEV-t${S@=2IUMq19=Ru#;GgoC4b66=V!*g_+vlxcn$iHV+VF22M>Bv=uDYkR$1Z} zRncUXWF(KMQd(5t(>d&b*}QSW?Zyf(Has*2|fA zeS=eAh?qjFbV{%6l)X}bJpNu<*bZh$UowpU*#bNvkN`b~6k`N=1`Fa(*pL7{?+vwR z{gUSMX;z}~Wa3PFa&R}tT1C5TIB8t3CA`TwvBuIRUHxe+;d6d+s%JlGwWF4Ujq4{G z4;}T(`uwpFjkwhkAlh+s2@oyW*b#Qf8rkBXHTL{e%jt4*QULLAbAY5HpWS?Xk_$My zn{_H~iQz7d$Ds_)uA1-bHCuV#w7&-rYFAUvSE;|lXLD;)|I1DJhf96*FuH_IT{N|i f)zU?~w9&yltP3t8D(0c%rGCPG!){@Bu=Dm8Mn=kF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21332.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21332.cur deleted file mode 100644 index 78a800ee409cd5953c5a50bddd081a7b67a7db07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1797 zcmb`GS8xgW6s_+A)x$F7npYEQSp4|mVz+XxVfFWoC)B}KE z5K#HxVZxUU8a8URwS+N^ntuhPG6*{XG$w(Z(?=-8=qm#!Jzy7%bWt9PHi{WALx z7&vI~kZ*<#8$ROOk)uXujTt*`{Dki&PMSPr>a^)IT$&xq$(=bXFTY^+obTt(n_swK z;iAP$mM&YqV&$sUYkv5#XzjZ7KW*5!Y4gv&Z29%Kt=qQm`2CMR|Ju20_ny7`_8&NS zh=mUyIeM(PRJbd){$^|H3|SOXEDWjn0v}Fdo9Rgh@@yBAjAEfdqU&VDqZ`%s0xqgdqnHFAM|cjS{4=!RMYs- zaeuYG_*ejn|j}LUyclG%ZYKGQh$EIdf>wf7idKeJyL|-qx;~8n diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21550.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21550.cur deleted file mode 100644 index 8beab90da82cfb9407e023d341e7920561a733c2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`G&1(}u7{=ethHjvTNs1H?gGQ8e)y0=qeQ>&-Cr2$zL504nEEpJWbdt|()pgXLnqgI5A=L^_j&&L ziQe}M556w--#xYZcy#^FpG@reP73eVUx^~^jOsI%Wo0vmt@fnx-anreYY4!e)uH- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21803.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_21803.cur deleted file mode 100644 index 7c4f3374b43be8d2d4fae95af26fb4c016d946a5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1642 zcmb`Gy>8nu5XX;}V0xpxbud6pMMh6uV{>+Fz!FL89Qt0!C|7gfJ z_`TF}&M$>u7qhX{E!tx?o1!PSp=f0|C(oXEPF)0Vw}m&`;=iupMEhD7yh<2P^5=2Wic7z?WMzzEzjXgita=M(HEP#B3IYG)%&tX13$pxI; z%`%m+%4NsG z;N+j#p;G6iJ0Rr4|y<9)*8zRm}cXd(L{7^~^S8Z46h` zh$miA7s0!I=IuWFf0S^deJ!)zuQG$5v@TF-T={^!K(+29P+J^Te>^1Rx5FrO)!{|B zFqX!Zv96vq-WII+JI7idh>xiI43oCcpfASn##`f^F&cw$25Tc+wX`?j*yVXrbIzmr zXU0CqV}I7(vVB<2q%l>7-nztyjrpic8>xc?tg%#v<9y<`$@4Rxmsg&27 zLYX#rZg|Yb!dMx7B8@jAX@2*DC6V7xr1LS8%#YWs=O~Po(Hk3MXY7p%)XVqM!ger6 z_Q){)XA6jgKnnC2Qj8H44;GvDpI0Rs&KwuIA&+o6I6T2&Iziu8au)c zMWb5dv&NoZYdsw&uL~d_VM)+()Js^7PkI3tce748tU1!9;WX62#Z}9Fy=BYq&H88X zV0JSy-=zKtpUq>H`UgMqPoMhOz~~w_cF~nhES5f2%PM+U1M7m1$clXIWU71EFW4jO I33l230M|VBoB#j- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22022.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22022.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22260.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22260.cur deleted file mode 100644 index 237fb331580750fea7c4affeb1d3121b57dd72b1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p?=d5>G&ul~1#&AWAc;Xdx5xm=H-tM#i zR|zND_cH7KDl_;=>jIU=l@G`ZRO?OxwZ&2O=R;EdIE+G99bSYBV`*F&>*`tKZNZwq zbFB4&_=vi%FlqY?`eyuTyfxk#qcIp~ur|U2koFE7yF5>7&UrNd%-H96?2kRx?E}XS z>;i`dY+R;y*}p7U^A<(cR2j)>9Z_Mdu!5Yrkq}6M z9z%*Tg5tr1_~T(_pqIU2En2^&HGE!`XgG6R=!QJP^=YlFJv%8H)@x0#nUiQtoy#qr zhMYdvCvSR=ldX2rdaz;rO5>qp{XD;XEJOotH7BU{lARM&Yc+O+9g0S^#%GN^zt(y> zPF@#4KEjfq<*1ji9G~<8F79TXa#(YuOT%fXgNv({`+Coo-#6=@!Gqb&$b6IfCww-K xRq7x7$iIE+V*{gW*w{r^HnCXxSS_pQVGXPcJ|Zjfv6HFpVSiwcuqW7M`v(Dt-NXO@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22512.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22512.cur deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22837.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_22837.cur deleted file mode 100644 index 0e9cb80bb1d9ef5fc6dafdc5a11d7a0971699123..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GKWG#|6vp3XkL)3u*=vH5!(BmwRXo(rVw1+yf>tW&RIE}4Q|x###8gJG(14iQ zGFXY|oPpQ`1A-tHW;Gxw49sDWBgTy1yqOER13@Hn_vSZm-uK@8*5uE@xB6<2FPHY0r6I+Mhojfyn zd;8D@EcI_KQchP+I~flYJ{A>x6XwxO<*UOGl>~fx@ zl4n^+=p@Cw6G>@Uus_<+%$Y{ZGKd;GmOY*&&$4G6t#dpL4eN&k!}*d-fxJ5~+v*N< z*Ylp|oach4@|2!!7;Z!d##V+>sHc-o7Jj}>mAkmgiyZn~8kK>WG%^8`z)=KlzBe?i z>j|AtktYS5M-+NSSizo7Ud2ng=gZKdFGxBk+8GqY9}m+3 zz1ZxNbUmJ6{X$x8vkj z+w=Kg&B{I>4;|~f`u1ZXYT{O%fPG=rPQX5AV@KGb^^wi-wvRpU_xW^23tj+vgsp(n zk#EEH_{0~`bvG65!mP2KZte|v&~?@Jz7Ddv_s#d~V8h!~%a|#hui>*&TIP+= qxk_L(4r^s9C?zWF6)NhDlz=6$ObP{+GDT)fEy3QxR$*(f?)C>8xAE%$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23060.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23060.cur deleted file mode 100644 index 4781cd8630c968d49da177b405fd2b5e50375a27..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 196 zcma*fJqm+B5C!1p4{kZ+1Z$Pr8|;<5!3Mn8sGy}sP)K9B<#v-NScFu0!^iMo7@*{I z9Z+1m0-gZc7Hl=n^6^LPJ8zcpHe|CQ#oZlYb15#8ZITq#6MD))i`r||h`Pq9kf-nx R<(1kIu2(ayw9!t#`2bxuUljlV diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23367.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23367.cur deleted file mode 100644 index 98ffecb6438ac825db2a4538657b967434f2283c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^O$viR3R diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23849.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_23849.cur deleted file mode 100644 index aac3eeabd7cbb3bf72d3ba8c353af9d578dd8c78..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*Ub06N<_<&yp6ntRqD?M^ow5lC7FHGsK^rS=EDj6P2s>U3YGn`v zL5ra2{J>5Gi@5}pR3WVvIgO}bggF#hBxL;0o4JrXw2{o+o8SE3$9(NBQ31bNjVQ1T ziH3+MNeHS)UkgN&@D0OPyMJKhQ~vJEy@hKV#Xd~#*=_u;-$a&V;deecCb zqsw=nU9AVNhA&M2c)omm@!W$CCtfao9(wWf*VLgStJOUlM^8;0d*8Qj>s$75VYG5~ zcJlJmrH2FR+7`y2C^|?J378wjMQ3sRHL4j&lv?zg>hA zZMNuiqvR;X7S~BCdX|Jlo}@DGL{bvASf6fc=FMhq8AQ!Z%YtXov*cNh);XSphV#b) z!}XF(3w76Fwly5+hUYEMInQ}dj7e_@7N8A|)}< zV@OIV(0VW-{&<)U=Gr>2byxwG+uz^-7#LP$VuB(jN(7N)U?;uk5cBvsm-oQfYPNnvLb zO(BRDb|GM#%Ry465Ya9NLC`|j6N?o>#{ax|7jg%t2${P#zxlt9`PyBg5`IHNM1f;S zbdrdYgrLgwqeL_g-zoTzLdVK8^XDcG{<*pEdvN*1uV>A>gRgHtw->LjP8BQP{~n)t zKYwW9Q!#w>%g5{Y#!g>3u{87fTGLEjZZ2IId-|^Oc5&e4;)l5d!>`8IzTUaD^7GBv zvH1MJ;WKvn+l>h<5a734v)1kw-dij(zOIsVvpV8+hl%!Ds7EPw9y3a*0q5$Tvvu!( zQic=lVcF|?#Z#*-uG3T&R+L7brYi45QxdjVUuxvcM~%WUh#H%YC1F`u5muuOjwhkz z{E@(Ny(Zg2-89U#x(7WFJ{Haj=Y&S6g&p7-@MG9F7O9^vkGt6te}^XXag((&yat)J zCIwS%bqvOVrwY8kFSMLj3caRCNCDRog~A9cxYH@@z_EHnF^Bpi=45}!%=-h!Ko|-m zp~{KlaY3A)ZemH~XIsScSxavI0H?qZIi8VF31eX@%!CZoxsNe{jlcqumki_oHjRkZ z#6XWB8Dl`_!G!n|HpD>h_J*~nwwD&$?y8*HU5*|dlR~(30sA&!Pa5D F?H`wj^r-*< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_24618.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_24618.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO#?>Ep zhZ~jV%DzV5;i0#`9$dcj^7qHy@u8*V z9XS4V=KPg~DJ=DGEiztLs&=wG;{7(O+WSI1O0kVQ=ACG&hE4V_)HCMedhQrR^)1JOuqZ4E%h4vstD$B6NMJc%lWijJ zAL%@i*H zJ;F}F>Bx6scYNXt=(?Lq=EJOUUDnze@}TRg-F@w4^Y5GVn_yjRI=6N@OB?uX)}t(4 vRk?kqved*dntid`rzqx~C`!X7>l2NFd85&`45G${Wy!PbS@n#gRraT$;rLo$IA4)z zBJV29wz>md^StRf={e=8J(Xt%h8xk2v7Mn5>J_q^O+VkE&YfT9%^dN$GCBh@Wt0SE z;3xt&UkMGzl|rW}@}z+Ch(gZ@E7;Qs?7%Ya6U>o;h&etGGK+!0GVlyNBTrEf`(>Lr zKHI>Oh|f2P>ls6~et=V8h#1GnQ+P_x%rp07Aa58YQ&BQMalm(X}YrtYIRNYXh{O@cxx@Eg$Zm@D@iy!Hm0x|rCqxB7cCdw z$uET09Y6Wiwlp8Cm2A^^=vd#?w;u~p3%BY5SPL8N0$6i4c7z>TjcoRJH1@n*^XW_> zcmc%2Z38$R`POZZPkaGAcas#(%`vtsT3bUN^jx*Qubph}ee?Y)*zh*dHfEy8SMb>^ yMMb_K+UAWYaxGyr4r^yRC`%nygpMka7BC6Rl+cLMrkUANZ()nDCD;nAxBUSDV(~!$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25396.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25396.cur deleted file mode 100644 index 4f4b64a7a2fdcdbb5555d26868b956fdbb766648..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT+cn=g1p~by~FD@(6hpx&hKLj}QY{I#Qd4 zK-d3{CnGjc6ez;v`0?)kJCc%2w7}nXOXP$F(R(6lTY^{8?*-AP!nw&2Pm|1U!pgCO z906Iflp;(_&LJ~R1R-Vwb>SQls?ZiQgviK0Pf`l4)c$K!F)LQ>IqO~aXSN~x#&AWA zMB){75xm=H-tKe!M~NWD*E0M2Rc7#$)&(k!D<7Z>RO?9swZ&2WkB6lEb{K`OI=l!M z#?rVl*44A-+k#cUbFB4&_=vjCFd6#{`eOWUyfxk#qcIp~unxSEx8m5L6Z)m*oJWh# zjD60>{@6p`2aX-s1r80^xJ>VId|9yS7De`{GLq9eqQY2V2f3Zc354}KuiS1b<@Kge zri~LiV_~d}K9S~|kyPKkU`y!xiL@UxNq>CRdXK_b8NIPFcE;YQK>Y`_Y+*Z?Bm2m( z{_6{0*# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25903.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_25903.cur deleted file mode 100644 index 3bc269a2aaf9c122aacaec29cce97be6f56e8b91..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YLpFjiiKiYSn~I3X9*dW4@lX-*=t&Xu;7KVcqKNF6Dk>hV7ezeS zlY#~Ds|v-#M5$E}iU{JZ!Gh?ay1B?Aq2qtvyo4qoh;))Szj^ci@6E^V5*6?p86gTB zL!uo-lpoF)-py{gb?U{}2X?-8X7v59J+pJyk8htpP`bJJ{oDC{M~5cf7B;Q^d^9(D zfA+`zhtI#HpB~Tr9_oBPc%nFba&!ImwhyN}!=b+MbnCg7oxOJV$7jc$tOj@H&fZ

RP%==x|wfBX3oMJa)#wju2Ov7`!;peXwF^P7m=>107Q>!)3 z(^M3em4;4Jg?FN<9=6z@XlBgI&D=4FnjOc2uqZ4GE71za>!D@+SYSC{lWigI0?f6B z2VE3i5l#zdghr@^U07~J8^%0ADb&m2ezs)3OOyJzNn0uOskSBo6K!=2#(}2_{Cp|2 ztSf}xr$|Tv=Mja%2rIbLDeSsd>#et=V82#seXRKi%82vZ>gc{@?E4jY37Brh4pe{C8Ot%-piLo&vIZUzPM$HVkM z@AihZsQN!Gw*6TdwfiOp{FoHNmEKz3S2l1-?P`_f6>Br+qqI+#c-HpvZhof3@5V`1 z>-l`Jc6FVPhmQ4qefO~twQ;Lnz`k;7FJPauu_Nrz`N-yY*TD8?o%DHD|fPi zYLD|Ym4y|h5vQrfJJFPc9oA>sIdit%bqu2Ru47497FL9{Xp8+xXgR(aSkBjEJIK2Z zbFJk;H-xu@^TI`;5o%!%mK)K3V>d-9)XU?3c4WRslX<_%IvL_KZA}WM+UgjL15XwB z`JvEqTq*RLA|VBwM-&Pptl&yLt z&rh=2zUG4!^#d9Y9qar0?qeY;aH~FmwQ|uufHh}hN7$j$$Yy^}W6uXQpU&or7eGAR zE`ZaK@7(VA#1}AdH}%}RImUH)u|MR&z*W2Z`k&3eZ_;mpZLyiIwKI9PiO*&&%Ci;K uwQp3OnHWaXux@ICa%{pOWul?TC|C?jwK9k@wv)P2Z(;9XYp_k&VEYYaru3-* diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2623.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2623.cur deleted file mode 100644 index 0482af4be5ed0abb1d93f7e6f1d48945a0ce4719..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1722 zcmb`GM^76;6vyAP7VF#Cw;Yhxrzl6h!NMuuAm{X6NblLfkOWdm?+NL>_dZVVq<0BR zx#YOM`GA=G=gk;_rEoxu{pL6SSElVQQ4N0e^+cYbPc)K`o>=QPcoH-EvxMT?g#UABD1%2ly!&bPF#UbD8Xeck#E8#it4*s^uo z_8mKS?cTF@-~Iy!4|N_sa`f2o6DLodK6Ccm`3n~>UA}Vl+VvYZZ{5Cg_ul;n4^`pO z<0ns_J%91?)$2EJ-*vtJ@bS~1iu%@*hEIhPWpln?_H;|bI zt1HY&s~u${g~p>ADNW^Plw;a46a3+L&expZ;AyUxq>HF)hMAVPpjO8=#}3C%N98CTE5I}0 z$1rRxM|Qp>9LS>cSEyneS8*}MYY%CtMzFxNagf2{Em4*&oF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_26614.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_26614.cur deleted file mode 100644 index 1f6fe99dd99b5c3cb2e9a425f65e6e01abb81100..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1702 zcmb`GF=$gk7{|ZM3w;@cOF+RP@Zw;#h*;Z2(ehG3T%?;_1nJ;Z5W3g$&QwuRu%K>& zUEEYGNb4k*iY-nB5iK}0(nXvuP7z|y|9y8UO~4MNmwflT|9#(g-`&0Uh;sN14iX8+ zh^U{4Diwmt)6b=$;b+Gd$HeE;GmRhp(*u83FMl1IEWe_qUtgX~WDokUe=_UEZ$~~p zTv$1?JoA0=+{ve}<=LaTtHT!$jlVe&{kbrG{>JR%k%J>w2696O-d_8CQ$BjJ{_fP` z`^km2cv&vDpEpdFBN|8TUD<|<#nJMrNqtX zQA#y9U-O)+`T6^KOrqV%dtEDdD!IjZit>R4sSu~A$U9L~i5jdg)eZA*z2zw4dfPD< zm=7!j7UNC!S0c;tRbe?_k!>LF7R(WMP5@JNP_c-qQDpx-038C;8;8?nS?t7`g zsxU#}CByi?O~IoSG0BBquMh4ySQ>eDB`C!e`4vmM7`hI=)u@E(Jt3H6WbkRP5 zHD_Z-*rC(NW`9Rx&pS1r&Kk)D5D&Kt;B@3Ww>v)Z1@zoa$#^%%xXv`Uhdk)HYIk4z z+5Gz!`c1GNY_?_XtjRX;*{sDTTahihEKQ~p7)`-isTTP}M}1PqeX*9X1ePkP5v6S- QbxVDKt-{t|8?fH?4=afE$p8QV diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27102.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27102.cur deleted file mode 100644 index 1b7da8c7e33afbda01bef1a7bfb5338f58065e35..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1751 zcmb`GM|Tr35XWb|ep%mS-#FyG-4l;vzQHCZz5!=$bO^n(ij$Cp8hVG&d+%LNAap|S z5JM=Tuc-z?#Aqbv#eNSCyvQE?^w-QtBke9g1b-zZ0G6T+&>H|e4^Ty+Jp$0r9x!mw z;2}eY4IfcHa@6QCW5bj ze8tLDtJgHFUAKP2#!Z{IY~8kf$Ie~5_w3!b|G>dRhmRaRcKpQ2Q>R6$vFXg&=5yyS zT)cGo%GH)@*Kgdsb^FfUd-oqaeDwH9Yx?Q4w&yQizG{E{=Iy)pA3lbePoKYh{q{Zk zqg1F8&b4eJdX422;#%mJSPJ%%1**4OKWZa&jyK1UH~zX;L+ zz6Jr8!bkdCau?}Zn#|JkMYg24h^;j^hG0=1fNkjD4(fCaD^QI0V#JbShge>06T@Ol z(K56R9YYoZ`Q0o~yx)OaVtmjEw4Rip*0=B!IK&uD$B-GihQ487NWeVxy?AJ)Xcm~4 z499b`oi z>G#d_ZOD|d%B+-?VbF@7O^Xu-%`7V$Sr`Zx4a(87zObUMu#1>*iX6evTr{6Efl)%H ReYI2*+Bviqv{tmj_6G#KFhl?V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27116.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27116.cur deleted file mode 100644 index 3ea70a50e6d2aebb82c42237aa0a0a01988a59ec..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3N`R#F5iGz>%4NsG z*vUV$Bf}Dq6oFS9e*4d3UtAF_@Y`;QoUkH#OGJH7P&NHt5Pg7;oy(M6c6hPiCj)lv2PLsEV@%tF^3o`efy zZCn}K=27E)#hSl!to4ETh`Nt3Y5M~DWc+HpHQpJcF&Iz4L8IZjy%y)8jF-A|9?gGZ z97{Zo#}V_7f#U!UfkOv&uF$*UUskMni>hd9jO4VAs4_N~L3Zb{0%7~cE4Q0QdA+HW zX@iS}%WSNSjnOAuM#Q_BG=F%)l+a@)9gmr0e1~12i=4v7=#8CmFpfqA>fT|<9=3xy zvP*{kUt2&V1XAFQF2xu@@nAqa_?QKF%i1s(t^cQWd|s7kI&)m;jy%Hc^IS!Hc2YF0 z*P7lkC(#(Xlv_MaCH+*Nyy;V%Y_?~u8=KZIG(I}!FXPLfg=oU5mIT#avP*($t;UM5 zLeZ$!_(@~UFSYKDlh+B5kFX?YIqD@W+b2DMi?dm$64o4frRlk=or|NE^Louz?wh?I z!Gqb&%zTr^2mEdBn>7CPGk^DKj2(=wVe=4O-NkC@W3z0chjp+a_=v2?$3cer0s95J Jhdsb9+aKgX@LT`@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27387.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27387.cur deleted file mode 100644 index ee55c3fb10e696a28ff972e1a9f6de008d610003..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g#RB$R)=g?~@;Z_yL9}h|S^)L%vb9fdmjJ0uPY?~*I z_Z4gY&au`9;v?!lK}Gfj^x1f8yffY#qcIpyU=_JrkvHHxls>6D=h6Hp#<9fXcpS0r z7&s2#5IA&T=L)?m{$<6Qx2TFujgg$z5mm+pE6C|Qb|7rudF6J~D6cn_GHvj#@V<CzDrWu@FtT)smpLm+X?DwpL?D*rC{{*7(WB zo?qK~I!;~}Kt95fpyjBSupFQC0xs@mol019WJuG?R3{f#E%)`7Qr?@5PvF7yW@f%g z<0C$shbE0b{mkEe8e<2gYv?>gS9h^m`q(U+=%F2S2tFb!@^O$>KcK&$570;GrThW9 CF6#&Y diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27794.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_27794.cur deleted file mode 100644 index 19cffbbd942a0848c76ffe816d238da495d56360..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 161 zcmZ9^y$ypv3oqht;L{k!+KssGiVM4qDV+t47o{PK7*$ Sw~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2781.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2781.cur deleted file mode 100644 index 4ade6941214172061ce924d32715a6fd39cd5a31..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1804 zcmb`G-%C_M6vxlqyLk5@nB97)z`84zgrP{3VTD)wrH~m!NJ2lX{(!890;%r!TLVe# zhed^!LG%>XTa=6miACf~1yZzWR0_tdA}l6NXMU`xkPp)Ap83po&N(x4=H3esz+X-d zfF)@IWB@=k3NTULarFJx;pNxL?(&;6R|Y?9nJ7AE<(1yPc|EUVbZXDew4sf!%Qt7( z$L=?DKW%A0Q*x^N^RJdmS*<4qBJC%CZyGqhWB9KG3Ru0xj(uy!)%bRD6scvktEabmdpQ zEy}$7X{hAkvKKwOFZOhV*4=oqcUxPk73!R12d~|_da(aT_L{Y)TMj&VRNh!O`uuFx zvkQkF4>#4$@Q(5Ns=)vR;b#D#3@hA#6=K0qfo9=vu_lCA%)K<9!*pIKI-lVJt&@yW ztqo}*xN?RSg2#}ZHJYt8dcHY`li2EmTGxa$Dfy%FCGzE8HSw^<&WAz#TQsYzb%&SI|twsat44VvF4Lc2)AvH__pMiP| z|BVSxugBf_jG6f)nXmoKkNNl-_*5_t=}|#lq-$vsOV6j+Ld6Aat-&z_OXUIBh7Rr^ zt0Q;<$?z(on3L)#R;JpDJk^r43~fWlkZ@3bHvuZ%o53wH-v0w?Jt07@Z($WU#28J- zkQlm#o}q83fO+zJiJ}#tSzul=9RIUX^iT>4*y9iwV@NrJ3*sN}KnmE)v*BJ4SxR%o z{45Ufc@qn?3k2Qa*}b$T!jehxNJNE)h2T=-(mLJvd0dAl^Eoj(=?AmhtX74^BXcx9 zblhLBFFzK5INqubP@2eS9iX(z#uMQQrN(UKPij2#T&=1ToTv>j9^EoPrDMKy%kn{8 zz=FGpaP3wxvg7gDp&Bf>YI$G(v+4KE^drb#W3>q(YPtUfKbv(=L37bON*G2l5%c6yeQ5n?@6f)WEo^@QAOI}l diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28527.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28527.cur deleted file mode 100644 index 0e06587b4eb25b93dfeed31e285d1d52ff6d57a2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YV>hBWiJ;^V+{J?wL3UXp2`ZX9M?&4DI8Z+p&o&Uz|O>DhtdMzm>crI-ry>A0H>@9$7$F0QghhWtz# zm4c}>G6v(oQ3TH47aGpXg-%oCNdeapg`N>su%{E)fn~8QnAJ+e9I1p%T?s4$&(JgS z6q-05w}|u8HkL$wwnjXkF=Xcta0(2O;~04g&)75d%sd&Wv)@Ys8-NAmUowpU*(4%T z5(7Pkq?7`!2NU9thv|Uc?hR{E>3>>mx~nubyBs|_CV_BqeJ!Vj32afbRO0laG1_WO z?aF;zH(h$CUJI`~aq_FJYd%=Bv_a#cV|_Qj{aA>axK)?HTG(utz?!SEBka&>RCBze zvFDANPiM5?1(1)hP2h6W+ps-8@dfnUO-Z{j=h#j+*M~glxoUe~o7vp^=KB?}?roxF z%!JOC@!2dzI(s8p=9SQyieWSYYo#j4$13a-D(Z`rfW@#>3WY3X8mXP?HS8^H3APOD GZGQmD5b?bL diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28687.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_28687.cur deleted file mode 100644 index 5a2b5498aacfc0948159943378798936fc1b76a6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*F4=2z?kX)#b}eE=6r!aTdnqJhX(@_<*ohDYE5RKvii%C@U=a{8 zphO}BK|$ssnnsK^YGKHk;8!8cHFD^g@jq|oLhe8d$=tp9&41pCAfEfBq*-8(RP_tE^Vog>Q+%2ax_@6F8d(=#8Aw!cgq{{D1sWo_=>lMD5? zCl208mMW9CFHMh(&VGD%leRuTJ8<#*p&i2qrmH_b|JwHW+?kjCpH`0iURvni-#;1c z`Pts``sDp%r@lSJlK*b8a{gl4%~I9r4pZs0ryQch&Zr^E6gX9LoT$0^8xbbau0~GR zijGpOah{~evnV9uB$aq4lG3ojdbqBc*Xk|HAg;G93!af@(X$kRfubVEs zldpx>9Y6Wi)-@ljS>B-W(6PR&Z$B2ICT`UQuogDj1+eC9>=brjglF&tMC%Mc6W|xBUUo1NMpl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2894.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_2894.cur deleted file mode 100644 index 72d42ca57e782efa81c39cbbc846618082db294c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzl#$=6vy9YLpEG9Np;6vU>6jzGo_7euCn(Zuo7&C9zw_p8xCCq@lf3!NcixZrvAaYq{DwoK$TKE7Lqu6d zP`@5;w61;o`StmitA8%vc=YjsK6hdJ{H1cWe4Vb`eD(6j`ufxTE2|r8Z$ABg^7+NX zQ`@Iku1~)|+t0hGvDB8BP_CQJvo{L5VWxu?>P<@hjM=2zfO}=&ZW-q9w=s!!ryX?J z4b*DNd79e7uF{Cp)Z?9K%Hj#@i(|{YJFY#WWPI$|61Ih1VJ|sie-=BAA4QJyHMt4$ zZozyj1L(H!o^V&VCp1DWY~Z*NEsb@KQmALsc}`@$p(%pj6q5q+g?1(fbM15rrct1Z z!h9!o9M_72rbI{)=Mlxi1S|N{DeS`@LZ;>ik|bVwJ!twMN{ZuzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29254.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29254.cur deleted file mode 100644 index 73107e6771b9749de73a0009d03bd85329f0fb49..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 500 zcmb7UPy>Ad`Q}4m z?k7bDO@Lv*P&xD`l0PZQc8FHE_In~HEQsC{QQH!{lGr(hOEY6O&$F8y=C}}dtO0^( zo|zDv(E}Gsgfy!L1y1`&34*9c5_(xtL$biXMisMS(_XSZWPf2BvTqDG)JP=WP#3|6 zW9I!a$G?{dVtgsHf81mSKWkl}(zx*fxVG^X<=4|Bbk*raxH6W;jj^tt zHQyGj`h#Pw55xoNKEY%hGw8GNoAKWGV2s9KT);Z;YTk-dhfe61noABAUl{wGkNwa? z-v^Ez*aZ#^*tksZa(rE|>Q+VesWOt&I-)Sm%U*v+WyaI__8X|coDer8}dlk=e4r$*-6p3-KxB1PU53= zF1LIdvwW#f-uxv`w%Xa(gN@r)K3+Q3&;8}kLNwy3W`X)%)LEduR%1ulq4=oQ{NiKJ zuYEloC$9@YkF*H19QBfxL36B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29415.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29415.cur deleted file mode 100644 index 5962a074ed9744ab564e99331271f63e744d103e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4lVK+@-QO+^vF@CY%@~kiB4$h}epS2%=znm1wo&MNz>b5F5K- zECj(|X*U1XZLT1){5%8(Et8K0G?}?%wV7g^T;kf40ut_;vIBsc%!)YcD3Zw=TcF5H_Om zak^8TSb6hz`w3e=3yVaO|b@%s1 z;bZu9bn5>4&$C$e=oT68D<%Cb*S+pB(OwJnG{tVlOjByW#ir+c)6YLGViN69(d%Z( zQ>%T>(^M3elt!GUGVerF61G{-v~uR-R@X6zT6>NKVNqBTmZM$vC!yu|dSE$UlWimK z0nD|g2R#%%5zY%2g+{1_Jy>o;$Hs1oQmB{5{cOv8k0$eeleII%XWE(+OtsZ97zdsz z@bg2V<+wuVHAO-SIFBe4Mp(g}PGJX*<&%mzR*jgAYRJs1fny*Hg^^I@#QwNT9G~uC zNyKOS#PzHtS3kfhFhq=JBvis!mr@VDJanw@>${JIsDoSe0j!ma_5rLp8#}@doklkMdm4K_tod{{SG)k? z;dTL>j(q2K$0xpkfxD^X-pw(t%R2`{9t>QyyRYMH{(X~v7i@{mb*-JtvmJakn^B&9 vQeC^E^323AYQVaw35u}^hm?tiBBNk2EY->&%Gh@5N_~K>!Zu+$u)+2ZZWQkS diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29811.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_29811.cur deleted file mode 100644 index fabbafaa8e5ec93b8ed2da43023dedb0274e5844..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU%4NsG z*vUV$Bf}Dq6oE&Y{dS)FAW5{qZ@VRO!iwlE5%oR6s_FNF=!45SGedKB?3jqjxy%F~ zW@2S_lu;(5!{24pIEiUNh8rCSEeI3%wSl#gDtP`aO)T+Mf6jJS>=XM?Y-6~hPCW67 zh6vv63vc(u|E-1-^0_YdepMKJ*1ABoapeQ@0=2r6Kz(&o`~4v)zZ_a{oz=!AZ$JLl2-C&sbF z<9HmAKL(BiI0OzI*ttUQiho(L<}IpXQ)48jbwri1!3uIZj~xixH(t5jG|KBurA!-n zt;iWGV`KD*G~Ugm`NI>IME;mb`!SRBcQ^&6$SG`$-q;xj<7iZ%?j2h8&>hr~y=0jG zRRSU*kOCv76k`O%gNFFyVHRMNy&|lDd=mYdp F{s0Kp?@|B& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_30331.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_30331.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOo~SR(u>(*lFSu6?&<7 zELAU_1@ShiSS<(zMWmM|+8#W3n4r*zrQ?6TnUp4=2k9i={N_L3V;;Lpl*6xFCJHP= zqOC-fBm|YGZ#kk}*RI#D%)NMddF=V@ku5(S@2`K@{Q1kr>E9do&HkEPys`7#&vl!Q zO`V>2|LXq2`t<3=;}dg_-aP1k)^~N`=!LK63-PD#hbtpH;_Bk9nUDq}a}=K}r=kUU3|)xcPf|OrqV& zJ6$O_O0mp&lJcGfArU93$UBjggbmgQYMObc*0Kzu+LC3?Gw)gOEJpL}PeQ}-1A*au zNv46k5twZi2fFEb*K^c!+*5f<&o&Gol)5xDuD&~RKXbebYh3OJ7_^o+2AJ)OV~EQ=civ)mgohkHY&?hPyh&(JgS6q?u{ zw}|7@B`k^fY?-*8F=XopI0c4?ag02LXY84JW}Xb>Z9~ZfHUJCAzhoHywMlrSBnEm6 zNht-|85G1H57Pm?-5b`T(*LyBbY^L4c1(2Xm;~I#m9?A}Ca_7(Qi;Qh#%QZi+NFEH zZo2Sxz7}4${p43$(R{FGX_dx9$NH|m{aA>axK$UxTG(h8z?!qMBka&>WV64mvFFvA zPiM5?1rQIn4d8U-Tem$v@db30R$-4&QBR}!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31724.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31724.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31937.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_31937.cur deleted file mode 100644 index c058592342357dd82c52567bbd4c67bc6b9d6eae..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1810 zcmds$v2NQi5QdMIV0xpxbud6pMMh6u#4A{#V|X);U0E;rWA1f+V(g1Q_WK^MK_7DLz%JzAL2nA3Df9Cx zOWdp~nyiwHeU15~h`58fB%lN|#9dek6(S96M+bR|=5F-%AVIzzpe2hVegJfF}eJpvRD6j3CcoLHr2^5}@a^ zVJ}*~rulrFm1sDcIMJRQ+|6OHqFpweG%S}A-sGHEW9gEv{xp>EDL*;Ylb>|AgOR|PzEPg&G+?|t-NpAKY%;6%Q5H6)ZgQ?xwEPN<;MKOr9OHXUBJdJ in%c)|?xLOB=wKe!1s4$&^S5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32032.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32032.cur deleted file mode 100644 index c9bd8476e543b1123dd5a175e519f8fad690de1c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 690 zcmb_YF>b>!3_K@AJkolBGj+}n{H6ZD1@bYq1==xBNPvET+Ptwx%61cvMQNPGGw&pd zz>eSP1T?mAl`npknJ;zBx2-%LR?;1ZH_+Adm2&_JCsYN&#nn|1JlyPv9Xh8w>I-Mj_dH%_ zDschzEW04=^n2N#j~KvaHc4waG`?tA(?~X>_Idqhu*={0X8JbcJei$!ytcRD((3pr rlf8?MxhL>KOhay-`n*3#ZVzo1q9=w|$y8;#4Sv)I@kLySE3u6q5qQNM diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32304.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32304.cur deleted file mode 100644 index 41e0475d5071d3f6262b07a33b1298afeab1fc2c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqNg*OsN}Cu5umUfEzhMlFmo)QC10%ls#h@s06@f<)2{bqRbp6y6_7{6~!- z+Sj`HhgD(pljYnRMnWD& z()#WNQ^M~j((#x{#>Yk1eN@KA=#9bH8GEAw`i~fL3){mS*(F2&pDiL2BPsAimr_cg zL@=PN5o=T6iLSg`TEC?QzEouzE&^A6Adhr=o~!ttors3@TFYDJEIx)Va?9tTl+XI? z&7bpRvz>k2*sy-(6sYf|x)i9dYODw=6d!8M&py`t+SlE2_BsLT zk(L6LLoaFBKIs8moy|IzwARQY59h9Su8vyH>pfe!Z}xl!k7jox^Ih(r@Yy^zx&Q4) s{^@g{0*r29W0zbVQnmD{SvJYT0<4QZp(^pIlc9dW{=gn#Pq6Fu7v-exr2qf` diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32513.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32513.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO8nu5XX;}V0xpxbud6pMMl4YoT+cnxsQ-H5bLyPyX6t`D0B+6W0vkQkfkHF zX$Zpp?|3p|173oZ_VLI6eeg>X(G0)!n#eFKqW479wggqv-x<+I_%7f>3VnhZ`tv`U z!PMtl&iQ=swGkUj<)S@ivnhIF8;VwjOY-cAm()e@c3XI}E&d-hoM>O`qPL5};GU%} zP_10JfV@DB>?BZI?L~jsCE>T-$TW8M#GEN>y;H=ttw$!8KzNIN~?5(kZ>NQ}#*$>i8pUVH=nseaSFB+X5mXkN`b~6k`P0g9-5`Y)F8f_lC7- z`I_eQaaE$>$Z?`QIfR?TT1C5TxM)}|CB4ZxvBuP;T;pjd=~I1js;4;VY6mR`8zE1rEKAU@+`d@C$cP{nO!{`b&cG1*6 fR&y8a+(rlUur9cWteE#5PxTY_8+H$SfStB~Bftx- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32704.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_32704.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3306.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3306.cur deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33306.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33306.cur deleted file mode 100644 index b53b971e60e67ec6efc995361ad45b169245e42a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1374 zcmb`GO>WyT5QT@9V0uSs*M$Lk*`;s5?0TKtK&;as?Jh^iQRoIpmpMWNeU;4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33773.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_33773.cur deleted file mode 100644 index 1dd1aed5684993d95270b5eef1190c93f04a4c01..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$&LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N;EhP_Trg3B1zqwM->Dt(uKaij4I~jsy%1D%X(%TvNnb* zY9te{sEgp;KJ#{;^FK-?F}{{r?^l_@Pudr#G_HJrFHo&J3Dg!x)gKQ@`Ry)S%p~(WTm??y$*hdt*cdxwZ&aX9zLyrU zLpZXR4CntG0hJI)fg?^S#t2FV6XK80Dg#H^8`h%r|BQyuyAlm&i3{D3N4Y+&m9=Ll zO~ZPv_L@0~#?-mp>S@UKxj%W+bDeCplhz9x)~_@kI@Ztg%f~`A;I3waYA^0=P_5nA z5q2mV-CCbD_WWAw)p7E=0Q@M6LEF(UWx0IP8*p)N)+v|OBZoAcPW9yCR?Gc*%aPwV zJ3fO4i<^=8CiPGFY#yuBKlqV<`qak;LDz_}i>_>9vGlQ8R?#CGL>GL7EAp|EsqPWK L5RZr_#O3${h@1GK diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3384.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3384.cur deleted file mode 100644 index 53428ad7df0a5f88a39ec165b6df011da191b519..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8l~>5Qc|ZL932ZmqNg96{OS+R<3e`oWnO*Moy5V^AUU$DglzxN3Z}lDXDG? zV<-PS*02P)2~2zV@#j4F5SM6%zwMSN2rHuZMAWtfHK)HbqEDC`IS>aPnXL~aGzCQ% z89w3>M1X__j3ky(%0?qeCj1r@q|6uqDTGQqO6cpY&gNUT=UnYfPi&KEXS$+BX7Uwv z8NAyYZ}&F;V~$C*uXEG;r7^`(^AgRS%a{W zxvC%4-&U;gyTF>Ch>yto43oAu&===-=dJV3nVrcwLGE5||IIjbRNL)?+5AA8-l`5o4^K(b+gVXYW)X?*mG%??i!K_J*}+{XebY^Q=Orvxy7cP=tH+yq4+6L6T1EwT7>l zi)fU#boZB&g-`h E1E{M0L;wH) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3403.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3403.cur deleted file mode 100644 index c7d5c404f7039eb2240a5f7b8b791fe6ada894c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVI!EvgxRDbi>3jqqWt9L)=_6Qxo0Q9r zg~7=`vqM1=kS6fjv)}&n*q4?>3;b=jL{3-`y(OZyC8(1AEQmh9_YOX!&_|e~iD;S} zF}jIh@;^iDV?Ir77 z)-&6XwK3dKBc6CeT?8NYnfLqb|6an0_NB~vzsd}L(z-yUapeQ@0@b>cKy7hU{r-@Y zUk{_uRfiYh!dMzt#=3gecw4aM?;LA=AU>k*6HMAZgFYL-8Sjk`#%K)28FKNsfBgYo zg=3fJOU)&Z=ARk+9FP66$NGKX*nwT((14B0^e+3C1#8}-$eJo6Ijtiqj1^Xp(|PPb zSikYg?WR)RZVF}E;IZM68Vh4(^ocayjHLP93zkHFKatMIOfo+nrJkcORz`1ZjGeJJ zDo`)qOAFh<9N8no_@6Bx5&|jEV@NSZP&}AW_K3YHqjNG=6lfpXZm4g=oO7<^>TcF4hc!pKG@OPyxVmb& zuh(q(y;=VZ9?b4W=DXBC;j?+HQvb`3{KKa{HZZz{ja_tQ6N{yf)v}5n*1)>pBeEhN RJDKVy>^JNY_5{0be*tU0`}Y6< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3422.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3422.cur deleted file mode 100644 index d97913afe2833ec1878fd8ac8c6db7d71dd3f1c7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT+cnxsQ-H5bHE(yX6t`D0B<7V;&&}vUH?2 z4S}xzJD!Z#MVBJ9kH7omk(5NVz;C-Ha>9b>EfKXX!7AzZg6IQ$@8ClUeWZ!?KM_yP zIRN6=5%UBG^hu|QB|uE@K?R^VMix6p6(}l6F%%F^{_+wtasU-*@kQz z!xc5+iC5G`@P40px6l4>C7c+yWw!UL%-|=j3sf3cJ|Hhptvd_xU;;ySz?n z&UrNd%-H96?2kSA_km*vc7a0!HZIe<>|YkFd5a?3R2j)>9Z_Md&_Pb;u>)cK#w)j* zN_o90lxgFH&R7^LqfdC@5N}4({O%boVfPd1ddwv2%bN-nIhmEw8yjP1?2QW4$@kJi zb`VGQl0pCH2#AD03d~R`#t4cB3*wK5nSojMhF-M(pV9DnRifd{abY*)5w1_YvhCSP z(Xd`?dd-}~#?ram;%Ug~bA9q=&vCMDCtD9TtY6r8=;)u*+XoZGe1)B|*zkFJU=8=>=Te%{t|<=E#(Wld8(aRm*+7=E(1x z%}?OL5Qc}^g{Y3JE`e-Mi9Y;~ z4VPnZ{PQj6d_MTvh>fLk(H^te6g{yGMJvN4dG^Fh>LPfzExg?p|4j`i+PAvs?V>Qa zXQ>NRD;F*xFHj>p3Dj15(I0n7_be)?8Ky~#PT#?+-;<7p`AQ+;x(r#R_q2Q3F1 zmM=6OI@T}q^N)pSz^#@9(T=lAf@rD6j<7@4sFwJovFDdsPM4FD1(1(0CrCN!In2i= zxqy?qS*8+}9PZL^7|P(}s`F9f4edNbg7RXMpv-0 ji>CImn!9M{HaeJxb-_hs#k}u$s$Z}_uzT18?6my@*5>YE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_34574.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_34574.cur deleted file mode 100644 index d06cf59fae747b8fc8ee1131d06a11ad88f1187c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 673 zcmb_YF>b>!3_K@6JkolBG8G;31OKA$=nq^VA5&YP9rJ_)=+cqeys<~gb`wt>O5mh_UG3DuVxdp%EjZ0=4D$pt5N&B{xjI+Z+vn4I^i^$opiXg x*Z$n<@FAnUi4G|ecqYa^HM^L$dr9rSO+rMXf00C2vTN_9-ic4*Ok9X{`~WnUy7~YB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35711.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35711.cur deleted file mode 100644 index 238e1ff733396b2850b12111eeaed1f716917341..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 230 zcmZQzU;;t|0|o|05Y5cMpvJ(!prF720EmCsA7EsWKfuh!e}J8h{Qy4@%LB1}1OEY_ YsssNY*n^BZ48+HQ_&gBb2V!&p06?8#VE_OC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35877.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_35877.cur deleted file mode 100644 index 8a9619cdc429fd18e203eb9a930a7a7bbf7d2339..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@#6DxeW?I0(+GNYyw6t_fo}5k$_?>Y=l%|ENrvmC1MnWU}Iqu z1sel`1R+hxTmmWx#wK-60+L49laL$|Zv4-icOiF>MlyGAe)FIAF(122RKRa|m?&@z ziOv&Ir9x0e+9?p-#N5!C*Zu1GqaCw;ZRLh~@nh`m-|?mEpYD9zoL=akU)^6`8PfaT zzMp+_`N8kq`*vb>Z}rsG$t&+J{rYqJ!q@fo2R;2NUQ2F`#}7vamhbH@Uflfo{^iod z-My95W^uAzof{iDhjou_k@2olrJLod*Bw^0*Frr?iJLK_lp1iM<~d*U^UsQyM0-;7 zx>oYks?B+tio%l8h|^T&ooK3r4c24zocXlgatxySfnz~f6qbbLXq)|&&~kh=u$-^S zHjwui=332zW`%RYdEtW42(_>S%Z=#7*h*0f_41^f4VmxIWZrMGMuzxITa$vRwmJcm zz*7Z&zAv;KR|vhPNJs(a5rx7CE4b4s?7*=+pqRsh5p!xVWafi`V;~HLkx=Et{-i}5 zpB`XI#Aj{dde)MwAK(-iBE~ZkDq$i_g_)3nydjjVz^br-64+JWLPtZf{tN;{R!h?as=n*)`Fl6H;)O57+Wq*}x?=?tz5JZV9nXs5q9V_vf1C!*z-}%r?a`@ z1rQIn3*dC*JGVPN@dfnUO`Ll-$G9$U9u9fXbJgy?PO|y;P5N!HE;iG$b|%lZ@Y!rc xdG=Yg?3&6mlfY;S)=EuKOib9POw<<{1xsM5Rt8bVHd0q=9rgvb0o#K0wtq~m_HY0I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36074.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36074.cur deleted file mode 100644 index ad061632f6f1a336138f7f8791be9171465b7a15..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|V0ojwbub`JMMuAZoT+cn=g1p~by~FD@(6hpx&hKLj}QY{I#Qd4 zK-ce%CnGk{4n=4mfBNnpDVio);IrKlIblKco`~9(pi26^Ao^4|V)&+si6>@IJ`N6= z$T?_74sOSonQ3y!6p37PWdsSX2}?+|o17zbLMdhp1kwKAql!7cYR_5kvYy$7tc~G{ z8u7#{>LPfz&%E7d|Bn(*jIU+Z`&DM}lhy?)jVm9J7pT^q1Zs<;>W_z{{B{_Ht~$I3 z7sk@KGS=0z#@m85f9F{11Mv}cpJ6ig8T7^Y-FR!fGe%=D&cM-Q;FRBrW0(7-=A1|K z&y0PJ$Nt!3{XTH)z%FoTz{X{Im;K9vHE&U5O_hx&KRR~kP$*3bRr&q6fdRC9uAFWEUkwN_(C z*r8}tYkbz&^J}ed$I0sg$VXTbv>f#kme(gefQz$PrySNCnbL52)Q5|smh*bck?)($ z&)~uAW@Nre{S*E+k5%d){K!9j>SF_=YuMODS2nR&`dBTi=wS`43qB$%^0AXv_po2E KN7xhWa{K`nmH9vb diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36259.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36259.cur deleted file mode 100644 index abe8862804aa17db577a436797a370bac19aa30e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yP3EY@k3~eO*Fr;v1&Y3A^WKni- zX2%2vqU?~0hfJBtAuJh8D1*`xQR2)9p(msGUq%y4)~Y{eyDR#{J``;XSJa6oUeOT2 z`+ecvzWBe@aAJI^i{7sagU?zQs5Y*AKwh9$cM_3ISn<(#Q(){5WOG1yCv>!7`f4RSyBB!u1dShoCjH6M3x({gC!*(!7cF8dR z>j;R1KngrDr5Gb99yG*1K4t-)vNx;D-YpI0TC&KwuIBad+VvR2WaofJ*$wWhbs zNiqro zKWXgwwbr-eysY9#o4S=32Tl#()2Rb$;DC2dA;Q*_syP9;KA%> zX1+<|BYrjyO&WjtnZNrq#tuf;uz85C?qap{u~|0J!#dayd_-2{;~=emz<$9VV2`lN F@ds$E>jMA) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36262.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_36262.cur deleted file mode 100644 index 25a185590f49becd4dbd2206c8f4588d88d23fac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k3{%pq>L{;Aceq^;XaHv6Jywy|hqyrCeTbVFSN9}b20 zhvNUfgcI${vgpIQF#1XBA}x(;ACVWS(VawUtCQ-F$E^H%9EGkvz6ck_rEzU+>Sv9& z6>I+9vDQc86Y4&}q#X+Av+N}zZ!q3jWRQ=rFCzAbJ3rv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;QdsWyj423zCVR<+5t_uUBRnetyAZOL<f?N!;r#+*fAzd#N-@ea4>;Q zJUPc04sm1&MbMB$k(3-nZkk}y4-b^0nS=Jmlk8_8)MQDv;Lf}GA{2g2r^SMIj8@^)J(^Hx79 zXRM61(dY8fg^^U>ynGBF%q0EwYX&Qv1|et)y)hU&V{cSI{{byq*dFG{J~GVz zIwCSLk^)amDWwET1P$?zmsx

QF+6h z#YgK>ZuvYE`COm9`E#CZwX?4W8#b?eymYKz`pb`nXuz!&f%;z5MWDV`V@KGb_^8(W z>|@WbeLWp#uM0qrv}fYB{%?2=oCRIPlfS9S8R0PCVpP$fQf(&{JdH|!Di1iK!8 E00h?a3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37329.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37329.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37345.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37345.cur deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37672.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_37672.cur deleted file mode 100644 index ebbf12c61065153f64b4d430cc3521aee6b61ded..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 616 zcmb_YF>b>!3_LeQJkolBJ9W+v{H6TB1@bYa1==xBNPvET+Ptwx%1Q#yrEn5YJW3>i z7p}tr==|IP?*QIX*l6`^yP`BV&J7Sn=ZZ1-?G@J=$uCaM`D?B h_d4d?UUI+hvk)UOeMqJ%+imivzK9>l#f!!d6Scu7Aut`7!5fp@=Aex|sl>|fxBJ6lE_*EFt zGD0MUwjwBM;avOz5dz^FQOHROQ&`Mdm@UGM&%84iatAh&xqIg~&-*c7yGvBSZ*Y(( zundX%i6}`3sz_@EqA~ae;6n z`MB@M^Ygo|eqFwF_Q8q9a&YnP=|?}FKKt`)ZtBXn)tUPf6F=7$M|OM|9T@sPu&@3$ zf7seHR6lh6%(2(I`wo77b$I;vg;Q9lyG6=*N=YZn!%nxENT)sJ2*uW;MkrO_eARKb z>il<#aH7o=ovxM~rD$=Tq@rg@NaRT>^G+lsVT1M2nr7ar<(5HI+psKn7ClRz5LY<0P+#G30#hP8@9(MzJRW~sc0AG9NX#U=8y+nS8eZWJDYpoe7_3T zyiMoEOzUg~pUqOFvyUP-i$Z5AhS4M}PgPKiRoEj`)DtNIi(#o03R%iDQajZ<*eBQ$ JYz5Zc{sKq|_bvbc diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3814.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_3814.cur deleted file mode 100644 index 5f83f8421f9a1a6dd40190503f28be993afb8899..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!SY6V>tH~dijKa4oT)eHIdTKBPK&l%j*z3!4UmpGLJVZ-NNpMd zvH$lWBR1Nl2&Km#-zPsr5iRg+w?vLv5WOd&wk2pK{az4#g6#ur2qEXD$?q(S#$Q?$)wpWUS?^Sz*#^~(;fflz z#4G9|c(+&H?$!RIgc0p)srr7U41SWlK&5fz1L6YJvXVe;aTNXIAql@7My9I{FU*Cp zG_H(w^(_9j$P&MES@HwrBl12&xa}46#rWNLYrHc?V=&IZ*`wja--=_W^-^=rquFQ1 zUj4B@_L#p9Id)(da%jNDDZNwsvd9v*C{(A)NKW#I3S)&Ccy}HvVAk)vaJ#95*PB9^ zHn?NBa>l|~8GYhAh=q(K@!boigx*gi^>QYz@30FD5u>b(-q;vBV{a57kN=kzvV%CX zONQ}3TYx775}?PBVvHbLP!KOZrUE^$4Rg`@e_E5zvl0zwh6}wR4|jchcG6{I!}^tukB<4ZKL0F415Q-~ME4x60isJbR)iI@ zj%@MII@bJJm)+&$Wdg**%>j~*e0KBpNe zlbbQ;o76wyw|T5m|KP{`)2BW*5W0qpU36s=i=~g%vWgzkK)T=~qGCRFT5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO zrAXr^SeQ!4oPt)8M$j$?L9|eqi$#tQGXCeyT*w`0A(^{3zxmJmn2+5h%HcOSNEBFx zMEyjRBm|YGA337Ykmk?r9(#W3#Z}RD=kSxQOP!mqo~@oZx_$lS$mWrap|^*Uvu9Q> zbZ>q8IyS!0e{X)J=hN)?$oaXxD?#>CD{lT#9+PM@ zd8aD{M=5qWPg35qASB`>6?rF;lCZ}5bX7CwstwB^s_t0kJoBCf&tkN}{vIoTUBb#Gu9c!r*lr_jXy zxIrAB?qEs8XS>Apj3HY;z$q|9jAP^}JY&z)GxKC1ZvZ6|SQ!?Of5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wrT=NMY0c79Z<%P*F$uVfduur@Okk7hr4ol1jnP)4v`hDX zU3cNld@a0g`pK`hr}<#@(msucj`dxA`>_z!ajPzXwXo4HfHh}hN7$j&$Yy_2W6%3F zpU!B(3m_hD8^Gzvw{ClU;tOcIo04{JjtH~dijKa4oT=Bz4a7Pv+HN^QjzYIUJLU*6kPA?ohJft< zeaMIn6ex-?dHnJJzDUs$(E@+F9g$;JMDK~H>j=u_QXEls8MA}RNXqQYL+X`xUiHi_s5XWhYS|NSsE^>oL3w{r z|Mw-F7+;pE4{K%cS?U5UjcXr}7pRew1nR1j=#R%F{Cb?2u0Fmn7sjP=ZEWgiiFZ|z z{JkquAE=yA_X)=1prFsjZ^nD$gE1O|aRx4#@0s3=Q?LC}d&!geXU0L}aX1awe+VV^ zU>{0o!PY6gQ~#5P@JHu{A3 z5b<^*$?spVCG?O<`jtZ5pWjj}k)y1Q-q;#@<6sn^?gLtOuszI?y<}Mbbp%90AOU79 zDaHu02MzI$A5+2K7`rfS{%5r1vMSMd;keQ*d4!wuUaEa@Tr_SrlHQb(SfjO;TRe@L zKG!F2dXAIrcGmJ>=P*A$$pu{9%_eDBa(GJPc`1vltLFQ9%c1X^&ClS`>~1RME)7rkY#!@0 w{PI)z;nNUX7~R6AKDuQatCf%Ss*WDk!usGNvSK;)-0COnH|!Di1iK!80JK%}2><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_41664.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_41664.cur deleted file mode 100644 index 21777a12ddafa35368cd0c320fb8bff0ff0611e8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^Jqm+B5C!1p4{kZ+1Z$Pr8|*D|4sWmlFE)vwrAJUmlXA=LCQq=?yy0VbFbq&~ zx(+DzT>*ChZ40&<-x7G-F0peyEU&|m&4v_Lw}r)}I7zm*q^O?IQx00xUaLmbHBN;* Tg{LU5)V8p{8fm75R{GBmhz(u! diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42112.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42112.cur deleted file mode 100644 index 36b2940a3a2868d94920c8af0acab1162a519a7f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1052 zcmb_bF>b>!3_Qg_JSyHg1W=};V}9U1DL;^bd`xYDcFYqJpdXMo4@KD%#RQ3$0!3w0 zrxTB)#KgdY&u#~}f(`HpV7mp`61|83ayCq{@)XaJ`*D!e6Z=7iKn$*;cXfZ&i0T$i zj$s6+q8=NO{17MuAnn)3|m8=q5d#I_5Bx1QXjve`9x6i zJKlmzYAUvd-Y^*UhS5-gaZgOSr9IOeyY%ZAs2Bz)aOM&zC1TlOLcZXE6gZc&u@<_& zj3D<>8ROl?j0bqS*VkH=dvPUb>^haNMRMUxUBk_v$11sV??|zb3pJNI%>}gY<+%lwQ4E1VH1c77AG2P6e4yuJGn%BYl5Yq zgdBbVF^v+;oJx#E$QOv@AWbUS6@)`V#{WF?T*w`0A(^{pe)FH_WnOldsD$76I8opj z5}hWZBq69W?Usn9LR!9kj@rN1){mW>THagP-TFS({CR3)CfZ-V_4e1*)yo_0=ErA0 zP9)8-_1Epm`PR$m!PcAfnwtC2e0RP3s`vcG((F|A?zgtOar6Gl>g4pr;_S%r>Gu~Z zExOaV^6=jIFH2bUA1yN8Sxp96Yk1vfqP-UC35wl}nV{5wi!INEmY;uG#w6OKve&Ju zr&jx%r>QKgDvdZzHQtG)Bg+j|gk@n>Sc`VppM;j<8-e9~O}2}? zS(s}r51JP~5iST9g+{1_eOPWpN5)=?QmB{5gY3$DpCa$G6&nj#?uoJSN2Bdp*~r?3OZ+K6I~k4DUy(U6&s29AL+6h=ao6Z_*HaeTUm zB@v(P6W6nrT>Sv2zz{K>kx&U^VJggo4CI|b$pqGb1tc#S#(!-Z9<7Oi9z!z5fNll_ z@yEmTK=1a3wW$6-Ew+PMITZsFLpmk}ckN&;uaym4Qceo|za%Gq7H2f^uxaiZW3pG71*MQmqW4jP0hb)MwaN*d}ZnHr)OI5jyg( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42935.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42935.cur deleted file mode 100644 index cb630bcca192389de30c16cca03a0b8f2bdaf903..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 313 zcmb7+I}XAy5JV>*#pTK;a4JNZ8~7HSgButr7h6DrGDk=x8cNf-GZTrzNyn_7Rx`6& zpymt%P_4TG4gmTdbS>UBaAJ037V)vAqLj|sxUFs8)^=C#+P`fs^`g1{7*oz;46|AM rWMX(o$~TEY9l@C-uT|@`=|oLuREQ(~BFZbxi(g;e$&*ZECVPDWpqp&T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42944.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_42944.cur deleted file mode 100644 index e6960968fb4c750f4ecf2ffca861d5802d49b858..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@#6DxwEo3+!G{N<}YwBL{N#X5kV|sB_au;AV}QF#gN3t^cDsJ zHpX9th>greh`}bQZE})A5sNt?aDc?h+O78yFypJY%AM zBC6F0sz~1pL?iH>h7T$9CV9Vp$9#GG;q8!J9=oD0kEJWu7w;c=GE|+2X{3H_^3{v& z-!Hemj!fK`dpGgu)VFr4acuqW$zUygzwR;=~bV>^0^4?lOD;N2qcBR7UW#_Edm^ze8+_pn{ zx85qz-8ji=dzuf{uI$rz=vY6@?>`ozHf}W}uvR`hB(Uac>T= zcmd=i>=U>g^*-#6PkaFf?xtcxm~(t*+j~PE9Jp$KUx(Sk`zHM+*c6-UI5%bU4SY6h yiOpA3$1N+Hn-oUluuf*8Vrt?(Ws<(cC|C;1v@*ytu9f+zKEgi1)?gd3gY6H(w)Bet diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_43368.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_43368.cur deleted file mode 100644 index f7b5af65e7f55a4572abb91484871eb1f4255b3c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 294 zcmbu%u?@m75CzchB#KMR6F3#3%m&_qni1H*NLlOv3CfI+NHmmA=gxdf6joZ!diMR( z$w0$1j({p}3mgCp1DHB|8sNm)ku$E~ObXW8xbdngSAA)>UH&uXy50=8pDE=$#jxnr r&pL*uN%?MK5J$LB@}fE?ZEr;PS`0bzS0mh#y!!IhgI+Y#Li_pxZir~& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_4404.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_4404.cur deleted file mode 100644 index fabbafaa8e5ec93b8ed2da43023dedb0274e5844..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOh4$@eKxyma-#{ayT3%LUu$=tp9&HsJO*X|OP@EaQ=5{?nk z5hBVmf{N*PiRc=9qwpbxZo&jT7(8)(_3F&QSF;<7&t6|VaC-Xf!{myJj&2-!)HpYM z{MN+a_x<-woYiN}mM5Z-+Ul9Z_dk3*_4Cc2jgk2~m!>XXSgtP5tWP%{pDfQGyL;nD zv^Y9-`~5FDytnai;oX-~V-FVE*%IwlIqPMm=5?2u@;XqBQ|df=oN^5=)jb#L-v2U& z6YXj2b-nDV&iF zuw1Xmwoo?AE(9(G>Od9Ph2=)HYwYBh3iFw?m#yIMQWrk1i&laBLRp=I zxw0w+Q{gFv_YXvt^GcD|lmwFCI-)2r!3yql5<76L?32u~p@ca(6fw<^a1?=2U=k<| zaXjr1=jWSP68Xgz@qE^jn_u7*7$V0r36z0pU>;ZmGEnEfmkd^e2?{S6#{X;z5v7QM z9z)VvgU*8q@yEmTK=1a3wW#_(Ew#N>hT1)jKAn<8xU#*L*U}1C)UH-Jy<)9#8dLl7 z5I1d~-mNz>=x&_CYTKF*)~@c*c<5N)&+k4KqBd^TC$N?-+b6K*YU~I*bQ;wh?`rIM zr{>dHBY6SjBkU5m9Q7{jj!%36eRoqeKFm3;Gwtmm5Bjd!-Pdk5|GtHO9c%`h>sUKy ziZy&TD~Tz-%8vacO`%g5O~N|47ICVh0jZOLL`zr-%azo~(zcbmsXoKL!B${vu>STJ Dn)>R| diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_44712.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_44712.cur deleted file mode 100644 index f0a7ca5d8ad7cbbdaf1355cdaaab692e342a76db..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1635 zcmb`Gy>8nu5XX;}V0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEud9ZyDVpg|Gj?BkF3$qz|H3;ecQBEzic|Ku&w+LlmK)1L*=2Nb@84}It()Zq7= z5*ACmCvVPYD4cwjD+wQ{9w?7hU>Dog&(WT_972h@Fnvg`}!v+|qr zT6v?4%AlNqXCRN^)i`yfU-G9M)IT%!B_8{s$7|4s96PWJIe5^ULT8G9S!KyvRK+H% zBqMc1mC|AbKApo3n9Um}+-|J!a#IP@#xRYtQd*@;Bym5Hj)#5P)&a*e04q|f!qsXfO@S3BBruyOsw#zV*Y zr9XcxL?dpsB#7-eyCjG$)z}es$Tq4aKHJ#yQ(I1#lamFIk1!`lIqEsg$0xafv%6WR z5|$hu(s-Q88Xa=uFa9X^{|oBCgF%0FD{qleNZbn2q1eXN!) c+NF&S>Y-h55m_-09k==k{SCc^-a*ghFEz@=IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45316.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45316.cur deleted file mode 100644 index 4f119f7ad9fc1ee8d125a0bf1b1a6bab6ab8bfdf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR}b-*M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k34hpfG7+Ex_0wThA;X*ay z2v1O)lYFSm?C>HaF=Rs(1trok{Quf~Dw*r{lJ&mWGuv2fW4xh8Jn4qI1U?)J?+?ZQ zeF-Ppmu0aJ>%tf&t&6lYu0up#q*_-JsjW_Ge>`U8*W)O3{`ewX7?;MivG&gzZ!6aP zy<@G9#3$5!f=D|Q&}ZW}ea>mN&jUmfT z#X?5X{O$!)!tN*1@t8@*$34}3R7P(M#>Utgd!qvNA24JK*+U%JC4>Ig77>Y&6zHK+ zN(mGX29z~oZ3_7n#f5J3Kds@*s!YR$u_CNcY*cG}wz1~dw(gE| z&Lo1OCq00xv)SYl)*R{ba8^~hI%+wuw`}FUS^o?kP3}hKyWBtFw|Vrr v{}o355ptgz2;D-)F1clss#QpSOVti-2IhWZKl4S9q-L9W{$SA6Xg diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45348.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45348.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45480.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_45480.cur deleted file mode 100644 index a826fe34c7f22ce3799d07e77b1dc9b98e434fcc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1732 zcmb`GO=uHA6vy9YLpOME65E26%B~3FMW}f2B5r$7FCL{xt60B4Z$&|iAUmclS}*oc zyhx?cgOZCLm4ZwZt0$|_gIJ+~Xs|_OBU&S*9sl!@(gf_Gbdoo}`OkZA=FRLbQ3Ah? z4kAavDUsX(4CM{EzX|JgLfh%=xO$VJR%RWes=+`Y~)8E1_90_Ul=&^EHad_(fER@ESy1iVzIB zGh-}wZ4N>V2Bt)&yrdCmZ4>2sewH8y#%mMm_zm@!}!0A!^1gg zpvRDe5TKgDg7^~((m=0j!(NoxNb_ZVR!rr(i3aTxgFC&tm(ff*Dyf{w=%D zq+5SnHsQ7Wm|0!(lih7q>w}duYcw7@_BZRRkA0`Y!IX@W8Mu>^#1JNgUz zHN%$a93Ma)wgkdFUu*<0M|PKNX=Ax$FQ}dWwy_Co)Ej%_{*CzMuU=@cv$`pS&b5OY uO|M-0;3?eLwYG-n3{A#nWo?U!t*Vq|sD{jiEmAg&Mn>JCC)7g&w5<C%oT?iH`!A&F*B#oj%ny4ru2trU0l)z3diXR}v zMk^(vSXkM`LUGPOBvru5Ld;1ZD5B0;T@f?>=gnNm9S9w{P=Ix~` zpLP$u`gL~X*_OLl>fc(VoUWXY+JryQWf&Zq&(6gXXVoT|F{+eJ*G-6%T0 zT6UCTmGdMOJJ*MrB|ojZDBK za1?=?FNKD6h0ysFc~Zc6M4@Md73}E*c3>HA6U?5jh&k33GIdvA8F+@Ck*Cna@uW$t z&sMM`^!X}rJ!8n$4{!<$p>d2ng=gZKdFGxBk z+8GqY9}m+3z1ZxNbOk zD_;xmx8meiTl4u~jmkP74;|~f`u1ZXYT#C#fPG=rPQX5AV@KGb^^wi-mXAHJ_xW^2 z3tj+vgsp(nk#EEH_{0~`aW@t1!mP2KZmbP?&~erFzBaPC_s#c9V9ncP)0jz}FXFRV yh;%+Dn&z$0xk_L(25V+2C?+Z_2^EzhC143GlR`nIOg*!uW?}DO3$R64XZr&Qf$z`& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46226.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46226.cur deleted file mode 100644 index 94f71f22950c098b639966e732453e02651c12e2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1607 zcmb`GJ#O1D6vrPe!SqIH>tKMIijKa4oT)eH+#}=$Vx0zUw;UlypUl+5n)UCQxHrt|ScA;oxxFFA-ctL#xZ+C?^yW;;*!-;lX7rk2*2KOX&fokQ- z1>^;4WG8{T>LB{#J_*0=C#JFcN9ICVD_6?KK1jT)vgB_~mij>XfVwX*Zo2~ds{F3J zQQj(}GAL)@8OURJGfsV(FZoj*)IT#0B_4;vfY)FMIrd;5a`2!xh0YZJvdWUTsEQ`5 zBqMc1mC|AbKApo3n9VyU+^ntea$O12+Axi>Qd*@;Bym5Hd_rP{-d(2iw97=}U(3e_KE#1QMXfkYbD=doUsXgbfMM^WLx)wXbPD zpH?LrPaJ33lS8;Uu2rN(8EC%J&LyJ=Gi zOAdEwJPu`WcGY}eZ`sQGru_rBSG$^WzDmPAKASt6hTm?=KV2H4htVZ$>Z7TBtd=g? crHu~eVSR8BSur1ap6VCu59|(h4?A!F03^G`IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46544.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_46544.cur deleted file mode 100644 index c9a8e3d8bffaedf88ad7ac3c41e30891e7b795a7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1803 zcmb`GOGs2v7{|ZsoxGE%XU0Xen7UVptO&GhQBhn?%B)2X(@juHizp*1p@o$9G%02% z8G&G6x~r&!T4akJXN;1FoUm0cYNAaKs5{YPGV%1C$A}K(LOL_w`JMmwIInvzKoZP3!)vh>t3v^x%<`Yy%B7^Jk+-+RC;|+PQ2h{e$~!b z3k&z2jPmHlcwzsk=9c27Ra@_m^jxcJIItz&`1|AbZ}+@V(fs&mPSxqayZk2&&o6wc zXgWT)>GQ*a;_g4*t?_*whu40Oxx=Nqk5oL^JkJ_Ha&Q^4KdRUjRsQw>I$0DYrA29?CO;gj-BtFQvodTKfPT-Q5?@fZ7k8=?78+ZyFVveGvNi=Ou zSJTs!z&i2qJ7{HS2I!Xz$Ny{;Bb0&!_BaH_7*cp}Li_`6NCJDYH(U$Cb7?l8S>;1= zh9g7UKrkGdT1#od4N;T~hh=(*b6;qjT9xa#pH%7TdY@>Wj)PupO3Q;K!_zcAbX;G} zFFqE4B;Kk@keY~Wl_0gO#vS1fg~ng`QB5K;zPvun2iR<&{8fl j0yZhR=)3*}QJm$ve!Adq+kB3@oZzi@EE^L@%v^0BhbZF9!5 zw&&NbzHCiyKKhA8|J5Sny_K||)hVxgOtsfSJxz(5G1HV8aJBBaT=(<$%9uo3Dtle8 zcxtuBd78??iqeSFROOv$O2anmnP$Pf)9gA1QFGU^BrFRn!fLd`{xq~4KNVQc*JRts zy9slx?m@SNcZJKsRiP1TVGouY(V?-Mp%m&BNk7{%-=oRB-{kEa@wv7p12b)P0w#f{ z3jF+VXgRJFdQFj#0?s1}g%MV8r&HL0V|7F^$7>ODu@*9mTHqK6Lt!LT1+hQr631t| zSQ7F19&tTu$<+^V3JekB83~mz5oW?%$Uxp0N~W+WSU~cUVf@#o;nA8H=rJT?4CrQ1 z5Pv*O5A<$tSc~HSX^HL6DyY*pF`yGta98)&@>iU7PNTF>7k|<5;l2Dq ziSGGHR@>KnuugnH=6!4`8iav=3m-+1L?w=rpp~-_zLhLCvSLh2jMe z54Q{8bmTj?J3jFR4BSmzcsIwmuITI!c`$I*?!FGQ`S(rw9k40Z=vvz-@)kaut*FR1 vRoAYoA~y+)7Gd4Y1m(np!^%X%kx{S&mT6@WWo$chr8Z!1VOy{kY_R8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g!iJp?&=EKKUu41%BHtkrP%#?}@1I30h6R7sSlu*f}E3IlG)ea+xU;IYU9cW#06?~C4u_tsQSl4Qhq(mLf0Igg$rYCTp8Qu zN&S7r8ozU_`GNR|yiX8m`vUrGyfxk#?~TzIj3?mIZIVXC#^@7X9{k-*8b3T^O6X%It;bAK-(eRRBBro0dShoCjH6M3ybmbZLv|2H_Q){) zYYXs%KnnC2Qj8H43ku?o%Pc@IYr|Z${-4(Ic~+w7%y6N1G&Gw?}#-{Zv9hZ*zOMUrRh$ftB2~gcjbO}&hv#}zqP;_Lg z|DYrRim;gNvh<^Loox-kbGL;KAf( zX1+<|BR-plCXGM+%-?+)V+WyY$UH<>cd=Uf*esjqAsu80J|Zgeagb6!Aip3FkVnX6 F`vdZ@?*ae- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_47308.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_47308.cur deleted file mode 100644 index c26ec41192bb7e155ee0359eeef2f08a780e00cd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy-yTD7{=edz1&_mcbx@sHx_EFs7$nQp`tPd3lfbQ;y=I@CRVt^ArWIC5epM7 z(8dBoNugdcr+}5YN@FFbfFW2oYbdTj#%JD{Bito6hPiv^H_!VqU%N|Gz;AGnD6kBP zP7+a)5LA)23q)h^orVu7G!6?^zr0?)q^FMGdc3ssWO?Vxoogd6Cw|S2es7)qwDD*$ zAHQC>DoQs#$E|a=jT4Yy;=M5d<*OJv`9HwPI_4xa=ObzI_)WkDYhOpOsN7F>W*`D=f7Ws z6K$sGbiM2-#Xi?bDteZMM4qGy??h4(wpoufHS=DxV;MxvJkx^OdEAmFx%=5bk}p%bIxoO_3)BTt^goMp(g~PGAR?m1BZAI1n*w10hon1eSqk=oxtm zO&pIq#QEtSmPCHGPduM7WakfX3Jj6s76XK7D>44tu4Qo;Le_CvMt2E_3jy@feK)7?eU2(pzm&~+J!mCb~-;8@}Tdk?R_0(bMKq)H^8R1>5ehe zI$OtQ(~5MqCOYPw(3y&1RD*R=6%=C?mV}B*krJ>NmP(STJ D1*ZE; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_48494.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_48494.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOtH~dijKa4oT=Bz4a7Pvnr=BljzYIUJLU*6kfkHFX$Z*v z--nFYKvAFw?WZ5#H%U=MSNLtWM2=Yzy(glsBWMfyopZ^q6i20G!i@NrMFTK_6C)!a zyDT#h#h^ftot-1fS!^&Njw?9Sau^bfhW{FM)QDAg&St0j%r2;I4A<1MC0!H2!_ zey{d#3m7rJEL7jGl)-1o3$!q83qrcYYkA-N&scL}eo})EDbjikwutL_6E&f@@ znqTX(yOO*#Ks?+WAnC|wH*cTh04~mEozyKc{7BIdW(%4NsG z;N;EhP_P6fMc}n(znz&k`==$*0)N{rkrNg~?}?~w30_IR7et>5niw%A=E)IH#BPF` zoP;rC$21``O%oAZNE~8NK%i>p5P?)0bSz4A4n`18jD{8d(W;n}tM;7rF8edvkbPsg zqDCU|in<8i?K5xpIsT(W5bbN3{rxI4_(|&mmBy71&;_b>CxP1HsQ$-8Qhqy(LRTGL zgbQP7Tp8=?S@Uhds^2-*`apa{-DjAzeFl9oemCA4?~KtHj5FjyT5N2 zgdK{HYR%6+_Wat{({b{;0Q5+UK+91tX*oXW1zgeXN#M^solj1s|b`eC%YZd)P17 KBkT!w+5P}OH26RO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_491.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_491.cur deleted file mode 100644 index 20cf21eeeca150a6c39d1c3737b7c5c0e7bc3a13..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1687 zcmb`GKWG#|6vp4)p4qdIxdTCk$SxMaMvP4m3pcS)(89`KY*f@rgjlQD@nZbbMS>{U z1jH_&V4;#`E~0{kDMUz@gCJPR9HclfWc=pMyO29DMabN}`OP=)y?HaUyF?}Y1_y~E z&zNX{h_a06)YSv87M{Mi^KfWj>D`_iFKtvh^!eHGj~AZ5S^abK-u3zAxux?zMkXir zoj&sR{n-<@?WJ?KevZyxT=}&+^3!iv&}(^Tc1Xv*Ry>oX0@eAH-rMoDAMvm`7FE5d5B!u~9F z96ua6&e!Cc$h!~otsX!RgpY;O!damaYGDU>2K*RyjO{$EXVY#rWxhjG1ivYo1zv+f zJClRCb~**qC{RUVzAtthSBitCL`V_m5yip;75wQGcHmjvub6}V33I$ZX4?M9GZMza zM5rvWKW!7o=W8g5_+p)SJ?F@;AK?@jA|@~qDq$+jg@urTJpa99uwht4@{(cv-=^Ww zni%LYBx4NdXRsjtgbgv!`@NwS)wa`8*PUgl)iu$hQ&MnOH);i~T;!8lwHk+4owHtJ z>5wjd+X~^Ge5*uv{3O*jG#{*0+obW(Q9rEjKNg}EZZ!n3Rz5leu;y&+2s`u|+3fFV z?0K{1(>bfS0OH~H0i2F}@Ak(hzJQ*)soCJ>7~k2}#*ha+SMBd>CtG;mq+bCWVv}v> zCT+2d&t@^P#TV6f3(6KIh0!>yotvnfnz&Dyq%ScFmcnwa45Ex{=6tH~dii~~(IaA-D&yhFK)oGD-%Om7b&MnZ6d4w3q(($xu z2*m#6QATVaOOdmw?@0dSolX+b0>AB+$O#Lgk3`hA1h1sO3!=}6UD3o$#LNzcxtknM zx!UXLmc91~?twYA?kQ6!~#*U;&q!5er?NP;?Teat`ciErWhU^=| zH8m26*VIMuVV`-w&+#86f*9Y*?C)2Z!B1Kjs5Gv8fG$w2I|KlXU(?-tA6KL>jUu-bzfjI_8Iim_}zGKd@x31FwVe3!q5lyJ{-H;CpG6h zT6|{gb3XRR9_#mkV+VGDLjyK0)4LpB7Oc8Ok$tL+YBBM&3hm#==+`eZt#^d^3{jyB918zn@6^F_ZL{w;WSwGApAuHpb4_8x^R#LdzDm zgE_L74D&ZfKqdrI;EE~57(t1kA^!4RDR7m&VJ%w!&uI9(D$#HjxbPeDNY|&evhUeR z(Xd{tyk<_~qjfH~d>XQRu20_lIZw9Q$=4ej)~|d#bgZBI%f~`A;8e3feJ|=PP+zOD zBkWLoRBL|rvFF#m-W?~e3qX&w2(%pal9t;iJ%Ed|S*M&~>_nP5l!-o5w2kzx~KRed=QaqZ`=RMOQYlSo&BktLR}3tP4Iu75Ugnt6#7` Lut(Sv>~j1A7XiD7(_4_b_>ZBN5=oWc^7gAf=K4>&2Qek|9kVXyF^3yRjWjS zV@Pz4h`PFU{pXjBiO;*I-hQvGjMV1n%-z}O`z?zb=$t)oxi+!Q>W5y^k;Bv!rzTxMe6flX_EO@_B^wjEr^E4HN zMWvzBRN|dzs)TL!ueLJgY^&oKM6Islkgy;u3QN%r$19;_eLb+8ugSKNHwAO8;XyOP z$HIBxvd{>%um{VH=-AjvPzv?3xSwsA@6n__ZqjxNeX6ZVz(iXegK^-g0zW?-TGkDP z-ls@N0p}5g!U!w4(<$u0v2xqw3gIm8B+z n(Il*sn4l1wa9EjWI5G+r!xF6wRK~UwS85IR3APT~f(^DmBDMIE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49829.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_49829.cur deleted file mode 100644 index 83b51d87a0c8688f0bec7a5c5024fdf157cced31..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 148 zcmZ9^y$OIo3&qvvP6@U26sGXIu7wb;3*RhOxKuZ(H(Ab; z9$4F?g?5ij^te509C*A)JX$3Gha66{w|UZwNut%4TxTg4PP9dyrIL4Ism@lcA1^)g z-Lj8V#quI@B+P{qVOgAWyv_pW&sE@hOJRk&*Ra?Y3G_zzUU(!t7CNC74!|?u$8c-x zn>3#{n_P*1plegywW}7dL2H9+z{Un^K%)}1O8#*cIB%3CO@)vY*AZpH0xQJRY3v}f zyr-G7X~8_0W=ua-kxG~e3!(PJanlp$Hy2nE`Ryg~d?8SrU*QxOA}6sBYM~J}!dA#Y z9X=$gVRM)wdC4&TZ?lM4OAPcFl5-A>9!!WoVM7e`ac@|Qs+%+uHmf{!8;&h)NF!XX z*GgIk6^pv6;`A~EA2p^<QfAK77}{bp}QUu)c9BH!d4%SBwj%VFuP%?U3cd Rs)uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_506.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_506.cur deleted file mode 100644 index cfa3e5dcfa041071534b6f0dd1d394c240e5ad9f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ7^R^7{|Z8U9+dn+!aEEz%B?HMDc>Hu$LkvMQTxeR4R%P0s#vJcf70}nV9=|b8O$OXU`WGM(-bfwQy~7eD2-*qlc=Y`1^J7 z)SZbJ%V(!992>b(IXQH7DQdjk*ni;T;97dR@nkCgGCunI&1z-5|Igze`OxaO@@9<6KUgL>OCi0k$kvfvqc7ClSx2K&>{aC|i| zoG-~Vk#`qnTg`!HJRf?_dd_<)PwCl#;YPG)Y-cEidOGQ5)6aLPa_3ihGe>+bjmp4G z8kvAe;3xt&-xnH=D}+u{>`4LV5rv*HR`VtWa@#yGVlyNV^5)p z{YjfRKHJ2Sh|jl(>ls6~et=V8h#1G%Q+OtxnP=|FK;9rqrm!k3ApeqKyla#2NJ$Lz z7?M&7v@BQMdkl#iRsSL)ash((FqB-OWSKXElgmOTIDi_myFR?qqIx+ ze%*56oqR34?)b^CwypVKt?~|yhmQ4KefzNxwQ#F0fVHsEE`T*>V@KGb)yQUlM`O=B zHJ{FC!3!WBZX3Yq$hU5LeBuk}xtp?fZjP~?Zfy^F&~w%HzV@=Y_s#bkVBOnv+n8yc zuj8|6#5!LQZSzv-TqQ7?gtapjM2QOfgo^uOC143GlR_a%nPz57EyG^J8nAU(Z~F&V CmGgQ4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_50623.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_50623.cur deleted file mode 100644 index 4332f889c4bc09aaab8dd9eeead12da021d4b313..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 841 zcmb_aF>b>!3_Qm{Jj#B7G8G;31NRkuM}A-f`Iy=Q?U*MdK$nix=1n84JbdurHT>En) t!>60lyOSY!0!L!%L$&px-nr21n&1de^rH(@g>>z;)CciJoQVsuwi~pH^?(2X diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_527.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_527.cur deleted file mode 100644 index 342baa22906afa6383612d5c15396d011c8e2371..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 804 zcmb_aF>b>!3_K@6Jj#B7G8G;31N9YsM}J@g`Iy=Q?U*MdK$nix=1o0PvXOWxP?YwO zI`b$>gnY;7U;P|jFC~l za6`UeBMbD}QycexF`w_N1nKU>ihDSwyQNp*E;m|~`rhPS&Z3-Km-3pIROEBLxXR}| zYPW^k#ZrI6p$F*7{=zu`iBl~C<4)B@VBD&CBA!q=t1Ulsp81yB?Xoy)Kt0ncuyWRG zTCWcqz-l(Vl(cEoNm`b+SdCie^`BP$x9YzbUn@>i&LOJ9D&}j@t=@@G;!IqKwfz8bjo?}U diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53026.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53026.cur deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53608.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_53608.cur deleted file mode 100644 index b3abcb15f639ba9a8f7f609df6415e2d707d9aa5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GL2lbH5JiWUVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n ze}*F?Hc+4_LVNf)Gk-{mqKFpw?RG>?SP{J^qP8Vsa+6~wc04ijL?pl%K}3-g4ZCSV z>4YByVG_D<=5jVboKE?xG*k_YhzPC zYrd^m^?S!!ABj(>`vjAAD4@^AZ^nD$gE1MSaR$yD4e#fzICf>e94>jX_{`LoeCkg< z*6$;y4(uYw00vj+U5T$MR^6g1KGjBYT1QkFYpfto=dlA}^Uf=G+gf?Mt(1AIx5^nS zV{P;qR}|%8B-M8>SQ36ekR+)J34aR%1ulq4=oQ{On`T zuYG+w&R!RQ9%&J1IqD@Xk5764S7)=yC9N9i@^BvN;OeO5yxy{v`)2(!cr?2kneTG{ zgwN)&&iyYx@(-W;6kv1<8@uF|Ayq4%>Q$XQEWo_Z( z6cJUc1QpSb0?`=e2I%F9wOjYTY`^+8|GxLxXm8(gUtGKqP5xQ=I$v0>9Qri6dUxVO z;q%JX^_dBKWaazz{qs{#Z|=@4jMc`YsgJLpoV{~$eDT-h%%!8c|H|O=@wxu%$1bj4 z`+4E?;NjZ~XMV4~IERJzYq9a3VzrZ{VXxb)YOjTQgc3JnMkqDlQq6O*=I7@lOrkxC zysi~Jwc6!8O_8vuG~zUscqf{wVT1MMdd{4yw;Y4GzT;RBM#7@76mPM=8d{DY4lL(u zvJK=tfVo!lpohZ8!bRbd&_YN^loohi^~7g65E-TQ?p~DODCk@F72)5wX%UrYL?3!Ua~fK8l`=@`17U@ zZ|CPqblXp|+MecvHOv2KJanw@>${JIsEJ$k0j!ma_5rLp8#}@doklkM+ZucRSM%v? zu6O~&!|eh%9r@1fj!%36U3XK?y_;iPmpAu@Jm|V=cV7qD{QD;T7FZXXZCN{;XPfwJ zHsU;6Q!V>O<(WxfG!1K|CWsOf_9zqg#74mqSgMsll(CJ}m3j+%2it&c!n)gElUnYr diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54259.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54259.cur deleted file mode 100644 index 2475fffc328e39adf812434f60d584f0bddbe228..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 513 zcmb7{2~)?P~OPBPd*v`Y5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiUb>!3`M__ARg(Qz?q7Uxq)xdbMyu-kc+7;(2hAm0(9v}ZQj^VN_LX~ol4_d zdg7-<30Uzv9Dv5hHShpnzXxf9?-lUGwMVYef*nJVeOTg-dk9lqSlv@ttZ~S-yfag0 zo42cZ&BZ>~t5lxzsHZIqm|5OkF}#7U?62$@$h=%J1dF?iAvmhp5j%8db>wGe&(|Ec zGnF`iex}_J<*fI#U;mG{D(Ud}PxCU33E$%;@(ukP*yV40ar#Z##H5?#qIgKzateNrdtOx?#1BVx9B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54749.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54749.cur deleted file mode 100644 index d1f1f3278f24cee90e77eb66a56bc2956206ac13..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 583 zcmbtQF>b>!3_K@6JkolBGX)*<1OK9PpU@w;Kt856Ksx3L3DBh@wRvNYlI%8FOXDn_ zct_F(R(uWzpz(7J>;dd{Alu-31w8ZaiFcIXg+Qp$Lzsy*&Qk~qzB)5?Zk5k`W4x}^ivKpv$XhqvJdP^f3E|HYnKL@i>r$u^X%qE+|W7Qxju8Q`!kU q_8~gPp1>LBre32c#Iz^0kF9M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54858.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_54858.cur deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55013.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55013.cur deleted file mode 100644 index 4f4ca280aa747062a52894bb8c4e44fd07162bc1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 336 zcmb7;O%8%U426prW?6dzSh?l~b0uzo2^XuH=#nEq;swf%U3~-oM0R%a<-M2JG()t* zt81bxX-;$`qN*Y?b`udJnjpgNo-LVElmph1+FB>OjIH%MicKH882^p3sW;by=@B%sv0OU3@y{X}=$y^Z&fEWI z09f#BHb7!`3akKB6-XIg3t-E)HQyM)PPKEQiDLyaAkGyUe%x`<5Qx55dI&_0(}mgw zV@^kZxe_>#h&>T925rB9dQ^JVUZDyjM)o++=7+E$&ZD|Msp)V$tK C)tAZu diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55199.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_55199.cur deleted file mode 100644 index 81080fc2160fe7d107c18a21c773420aaed3099e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@#_DxdRo&z+NF5h)6^TQPE9`i#A$Vq_I#0u`op%1qrg_Me!#R zEUf&I!b1Oq6v~`p0u}}=EX`pWO|?fr76}=@^X6U19cUq$yEmWt&igSxc9*Dt-@pJ- z;209^C!%VVpo;XPKr|MT9U3n^KX`g?W9s42XX6+4yjs3qtDXJ5bMkZliD2Kig^6op zAKyF~nj4*6KKb_Wi^|oPD?0|~zl7fp)s7uFe*V#x+S9)6wKJpP%9X*_diKGu@vUDk z?wb6Rzq`?Y>D-Zw3vkt2NHkR1}t!Mx3TH??h8IY_dMp$e4EIXOlhKTWugi06-6JaW3Ag>Q4tFU2MK=P7d{MV-8(V7_O zF(hLQ=w?t5e>_YN^loohiz@%qV%wROQLAI3OUI<(F0ZfUwX%UrYE>#6UbZ%K8l`=@ z__LM|Z|7%9blXp|+Pdb0wJIAl9y-?d_1(up)WWU$0M^Py`vBIQjU8c!P9vNBZH+x| z)Oiy<12L@Z1Y zB!wT1V4=2Q?u2L;)JBk)gBUBpJw!M{$oQW(??UcC5Xs!V`OTa6e{Vi^m#7cFfdQhx zF(f)fL}_|;vGF1PJhA@b`H_#8Z@zr6Hn%pmxO?u#z8?!;9`0Jd|7~RWlU-hZ7VVju zJ$rp>=<#tnH+}GXYiu(3edXz|0~gPn|9a`?tJg<|PLIq~8&9U+T&OqhJ=z=3o_v2Q z9;1b0*Ra+#tR z(^L|cm4;4Jg?FMU4V&x_*9+!kz3mu8^$o{9VM$mPR-#por=ey2U|>04lWijJ7RimOaf08`1$_O zvaT=mK1D(bIFBe4Mp(g}PGJX*mHmo2P>q${JIsD)eg0``?tdjb2LjU8c!&PO)KJ3jWj-RINULh%C7BkTm6 zj(it($0xpkp1X+)A7+i~iq_VU2R&Eq?rSHTf8V5E1?yttZEMGidx7jZ{CI6p^aqj-u&kOKIUt8iAwkl3=jp5 zA<=dsN>hT0Xt_jm622YqA!RUWT#inRP7Lk5+oqA3naQW$M_-&-Svgo={`hU*#XHB} z?)rQ>JO7;Ymk;6m?a4hO4{!aNdG`4J{-eRUmvhIyZaXqE)I62n+q+sDoSXge;M31X z7t%|Imv*1sa%KF$tJ&XA=CRUWT5PXRBBe`S}|0eAbeiKfoz4M2=@HRKi4<33DL>b?$pfVKrDl@{(cv&!!R4ni%LY zBx4NdJeUxFJWLPtZf{tNs{hjx+g(*qtIN@&6H*9Q*4Oe{*}xUGs#Q*}SX(%aseQS` ziXnN|i_#x^rI)f?D**aB=3*4zF7 DO&j$B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_56596.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_56596.cur deleted file mode 100644 index f9e386815c3063630837bc07a7482be993eb070d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*F4?n?xlBAL54zxmJmn2+5hD&SYG5(SPS zQ6CXiDg+h1{{865{d=Fb&-E|fO3w9v`LX-Mz^>~nGk5m&ZQT5QVtMK3n+D1t}i(jgpsf)EX51#uY{K42LsFbnrs7k zBQV!$9&}!KNjNT?6dIuxwqdyuts7e@N}*n!bh07yZJNycP1eW|pJ{7SFx6HkU=nz$ zz|Z%Dmg5Sc*AxpW;5?#G7-I!@I)xoLmbNKowKrxC_lC^8H*gGup)eMzoY=2vcDuWFT)RN>*Tluz=(x!}zaF!=p7Z&|^r(7|_k2 zApUrm9_ZcPuojj7rzN&CE2n11M3+uT!ChKi%WGu=m((nmIlN?T?lemKbn)j+AKuQ- zmFTvgWVKbz2WytsXgqYR@9Vpdg{X;J^#QDvi}nGmIU75|4xL6e``a3OUaR?ZHdnj= z;^B4yoQ{0wcE=~afUdhK=ibdRuFIRNLmqTpwY#tNZ2ob>!3_K@6Jj#B7Jry1E1N9Z1`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlO}k z6LsW~ln4VG{tgGAQo98n0Q5b`cKF@^&-6XgM+sht3P~5>iyewJL%)i9;)$qO5%jS)EL*>l2_{@3dTW+sQ z;;aGn46DG>nXh4eK5PK1*|d_wrqNB}as;5empl;K=o{Hd1V t(@p8!$q+gMuf*g-wd=xm??Sz=gCjb^k1kLZ(#31358{hB5ocn(egN=&<`Dn@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57060.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57060.cur deleted file mode 100644 index 7f9d67e20d575707c69915de96222731dbde90b6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(K~%R?mqGwp1u1m{%2lr88*n2hh|~E9KFTTqlF~=805>U@9SdV8 z|I7{zOMsieE6slU&tqRCi5B?nc0^8C5q%`0t|O=={auh_qMS3a%b7W6=nMzL&FBD> zGTe+lt0GCmNMn@QNgU-aN$Be1vv6Tt8rR0A ze$seXvF7g`YkeR-q3#Pz+M$5H8gGqv#(QHl2ICAo8F@JJgx-f!U*<{eIZx)F8HW;& z!)d_!L*Uqhec;f7tt<4d_*WHc-l8g+Y9l$VBdUxwR*=(q>_FIj@XFn`R$gx_W!lOM zOU_ssYoky4LQ^}D=J(H768S?WosXGhe!R_kj>=dYy|Fd+#=)pS{U=P>!S*mm_L5=z zW($afKnnC2Qj8H449F8gZ*7LA96clAv0vu_NqIG^#Z| zYwY>8*3)tFx&ZPKmIN(Fy@ciXq!(~;H=9(#nj>8rUxqrkxN5nt_iW{Tv;GM@n%zvy zH)(jpXY){};kTdor%yv{VRQ|f`skKztX4kOt2%mE3+scA$clXGWvXAWKd=YbBkZ#M E1C%rE`2YX_ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57342.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57342.cur deleted file mode 100644 index 01a146f9c3948a2583a35640e1fe3c33dffebd55..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GPe@cj9LImpxB2!qyFs8JyuBE8k)?Y)Jy}tQ@LGosMG}-CK^J+`x>A9lP;?d( zA*hfJAwe;#P(*|oiRH!K-(UKNs{`-HM<0F| zFD_i3ez9@p=MyaV?-m&!lP|TiFz9uQCGE9P4^ix9%n&68oU3@wR{Z>(9467Ga$Z;R zo?7j2o~E2IuQcK`6?i9_N@1P#a4lorsx=*hsJ89cCCmx)!a}sg{!(Z;elW0{ugTVt zcN6AX#e=HC+rnAloX`lhum#JFXy4dOPzv?3xSe&GZ_%XQZ_;{-_*7eyfQhy`2IIg} z1%AFev>ewJdQFj#0?s1}g%MV8r&HL0W1&Ye%Y6}ZtS@9{eSu>j426+UWyJotNgSVS zV@brPJH+*@C09SdDKJEgXCzd@SeOV?Ap?0wP_hIYgasro8ODEY8Xm2QfgVFL#(-`H z1@Xtj^g!?ShP9~pKP|THSs69jCOULX3hu)0T3#y~xTHq0$l(QRGpAA7r;9&p`0!SK zrbM^=B&+ReK3Jo;N8_PmeP7>wEJO|5st;hTT(l2h&Dq!ycIY&++27LG^IpxTvzg)r z5D&Kt;B@3Ww>v)Z1$5j^G4pPYab4Ef9rB>#s@;9 x^p$Gb6_uqXhS3$W7Q+&)45Ey!C$7{g>@{o+wh8NOe*m1p_2K{k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57725.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57725.cur deleted file mode 100644 index e63e93d2d45287a1dabd0df5aa0c3e5014ce0c45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1656 zcmb`GJ#O1D6vrPe!SqIX>tKMIijKa4oT)eH+#}=$Vx1Okw;Ulyp%b7T1M~thkfkHF zX$Zpp-{X@J8)yb2v>$)`^L_9`644C5^_s{qE28&A)V2gw)884D>>-@yn7k}*cJzj%8?Z)Hg<#^vPQP}CyhP7)N;CCs)n)^_H!?Z`wbCJGHAZ=d08|;Ip~6ssH81eCtvlJ&Z14V;4>B gV>Nft&TVus59@-9h>CgNaj84lZ`eKT0e0H{0ZxJR&Hw-a diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57855.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_57855.cur deleted file mode 100644 index f7e6ab9427472e70a445009c5ce858cf95751fd1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1748 zcmb`G-%C_M6vxlqyLcCTm|cp9TDmt1jUZ6`1FnW(fe=9i5utBE5J)|l!kt$8s82*}? z031yhpaB4a08qu@XAIyZ`VOEEQ=l7;-#(nbG&b*!&CNewT~7CR&1C^3DNfCmf85y{uDpIS+CDWgxb2&F`u?%2k2`0Yr(W#8 z^&8$DZ0YZ7T@1P7<%>N}7(BD{ICq zL{w`pbA)b8BMp00SsDRw;Z<2S_(^USphx+dJJ2}QfTIrel-i$ zU!jOhTttNkUxSD%5h6pbxR3N5L*^KNovSD><{Ay2B{)0rgwI*kt<*EjR)j|HHJw`vkd zGo5V`NK-ZL2zRJ8R#Uv9anI{DolZ$c3t&Embpn-Ry$)`}~++@B0!J@ayj<3M@mS zGendm1XZN(1)^KR@- z3wL`*FTJ|C_Ws4}htF5B(qCGnoU@d)vpnc@i-~mFQw~vVJ!*(j1uoSb=WEVCTZ9ws zLDA`2$x(^}u9H;sED4D`NoC%Nq$JE)U#n~8!+O&)i0b>61<#^q$+H~oa6AbO=MM&k z>m`{Sb(1jLY7R8*IpaC+x#X!lrDqF<8_}_`nPMu;r{i|!-ru6iTwG;&hWtz#m4c}> zG6v(oQ3TH46&lVfgicfBNdeapg`N>su%{E)fn~WzF#D?!bD|nDbv3XIJVVdOQ)uFN z+$7FV_pv1MvjgJ!j3GOJfKyi(dOvTF$sjrhif@4Okj%|l?tbqjnP(PYFF;# zy5Z7W^;&q{ij!aMQ1ihWl_MGt9qYUK?Z-mYz^%Fj*1~4H1lC-Q9bt!7qnhI_jXfXL zd^)2AFMxc6Z3360-iGb*i7%kzZYtV^ImdRoaX92b$5q?=I?m?aH{b7ob#GHmW2SVr zjn8H?(%G75npL4Q6~kx()=X7Uj8)hrRMZtI0gGX&6bf0&dO3EPHswm+Pi B_TK;i diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58193.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58193.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOyLC8T0E$0Mv3E{^7yqOER0~^WQz4^`meazSH5*6?p9wrJb zL!v4XB?&nXS>vXk9Iax}&Ssrn^!$dmmDMu-`9yLm-0_!!$xtjCO z7U4vjDLP#%IZDyyI!Q&(l90%gROX#XO2Q`VvklF>*T^k{sIg^P@GN?kJj>Ar$CJ=- z{zzcBUXp2|?heehngiYSyze>ZS@%?)(z64@jcC`HrA0Is@9$7$F0Qg>hWtz# zm4c}>G6v(oQ3TH47aGnhgicfBNdeapg`N>su%{E)fn~X0Foy>s=F~vQ)B}NK;2C;G zo6kp z)UMpeb<3r9>b3B?6DPmgw&sJiDmyeDI@Wjd+mD5)gmZvHx#wzR+D(Z`rfW@#>3WY3XnyH=Y4eTv!6}ArR GZGQn$T=eb$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58381.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_58381.cur deleted file mode 100644 index aaf81b6f62224d15734beb9636001b12d0a0faef..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*Ub5HCT_Hv}*sCOV*Jxqk#wr9M7J?`QL>sY7>~$v>jiyWCACN*6 zEsO{XD#DzC5fvhcB8cQj1Z~tg5OQG1_?x14Z~M|zo&72_~7dOXAy=*G{b*)wkJ_krtl z%Qp7T-n}@vezRI%9eRaz{@M}~+@)GC%OgQ|S<^ua^$|+F#~h)|fD4Vl`9|>172!m? zQVhCL3e;+o>ogUGC8d$4smwdkREt}zN1K*;wb}8ElIDhIL0A-)gym$724>pn z6ilN)6$Srb>^QFw2Th5PBCaEfg$Y*hr&HL0XL(35>(zugS&f;t8hJ*-SeOWvC61>Z z;{0p_OCmqtB%aSX^7BVH1%}88OoU393Nv9YWT4J}FE!W*EFyWyF#c!Lh-gg=^ca#c z2J{|Gh(8`?0D8YStVNaoX{qb2vefQz^y!oo!sV^Cf>ti_MeRz3)633TuQ7Efm$+?* z^lrUXqPuaD)wVPrtXiBYf=mT6^>Wn3%sQ$2?*!Iohwu>ST3>CE+~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59280.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59280.cur deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59416.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59416.cur deleted file mode 100644 index d580012339afe5f21a8c23589cfa76dd8ba5e7e9..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1723 zcmb`GM^h9*6vy8%Tg={i_vV4B*^|YQZ!mE38+i63@C~LV2pBPE#hi1_y`W&moRw7! zm}iZvBJICl_fjlXda&r-*T4Sv3ms;Ls0zQjIwH@|Cz?z|xg0^IXsC*4D&}gbxutbR zTYJaMS+nQNo!2>k!NNt0mn>bje8tLDtJkdUTDN|~#!Z{IY~8kf$Ie~5_w3!b|G>dR zhmRaRcKpQ2Q>V|Ue0R^;bG?1%FI>EI`O4M)Yu9hwymkA|-Fx>RJbd){$w1-hv%%*t zUcMT7{pRhv_a8nc#ZRBVeEs&l^yBBR;ol>g2>YXHFb}_fHLVdm(JfH6VmepJOuf}* z=A_k*vVlS~qZ%kuU{{l6XOo@pNMRDKHDz^E+ER)U&XbgKObdxPNg3XWq?})1Jtdzo z+wvttFUSuYRyn2|(~g;7ko`Gdb9}w0IbV`4Aa6R%v?dE`acp<&bnJ3ej?%FVJOh3V z6UI_x>m^|&3vRwl6B-L(fupcD~xz99QLAO@SkMoJZt423WzI zPGARynMs0KR}(NBYkX!>;~9F6zGL7h5@LT?B94!Su_WT-5#oAUld13F6c{4LGH?`* zp=0D2J2H@0i;_85JKdnT!v&2o4~>%?f3w&~8F6m57pKM_us{p3~~)qJpGc8tbD$NILu z`B;dGxK$g#T9{}Xz?!qMBka&X3m_hD6Ts=nH*Rx$;tLpeH`&Cx zImUEJadgOoaaV2bYa*L{-&{Wk=AAW{v~Et~0em+7K@#_hlI|8stU?$y!b*|yQlavz eg$k+zC14>el0qR$=|W^m^}zaI{jdSp`1S{|Z6k&N diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59510.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59510.cur deleted file mode 100644 index fec656543340db0afbd68114a7a6e2236bcf9cc2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1760 zcmb`GM^h9*6vyA}Y%zQ5-J1uhW>1z!zQMrBZ{SfeXT_YIW&r^s=B$`=&bb#9%$T#X ziUD)4aaE*!9hPFZN)8mg`})`a7dp)hKmdPvc>tEA4bU9`qESEfyj zQ+xhGUH!#Nm#=o&0Dwc+`V`I!NW(7pFDlmn0Wr8>E)}}Z<^n}d;j6%r_Vh3 z`zwR!#8wv6Iu_ETq*c{X2pWb6#XJgOwG#?aJE3&XI9Du>rz9;W-Xa+= z3>t0u$b)Ht;+H*ucS>FIh-j84bFtk$O0!IF`78Xr2YujiK^3qTTY zRVOG-WVTLFT2yWL>qqudZzReKUO%GH$FSB}57L8}YMgaJXMbQlf@%pSfsIgqHG{6?B=MLzt7} bFoNcyd6Y2BVj|(mscO;c(HhVi(X!h=V|p{T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59948.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_59948.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60524.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_60524.cur deleted file mode 100644 index e28c3ad9876453e8eddb67386107c4785efb394d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 158 zcmZ9^Jr08~3b>!3_Qg_JSyHg1W=};qkrJOqVLELY#<*~Tc92Dgaqi)QQkZhRgV-CBwh*> zl}(*aJdzTf01G~C3pl|FxCgM^f^3P;1@OeZ2kx~)$bfe_cEnYcPd#x_6^_~vPW?b- zSf51C$RzQ=`pzr1n_6+VsT9-32|B~dur~Aw>JJlC-+i$p_5C+AU(S&HF3Vtb!`jdr z2E)#&Blxe zc)Hh@T7~=UBxr0Jm9KM7!kM~+n?H?3evVJx_}LGucHw%lvAN>>=&WDzC-wmt+0`OY z?nPY$$~BrN;t7Q_TK#9vGhcJPT~1yLP*1lAG@S9`mg_?sFzZc|id!`@rSY=V#jMrR zum2q7_h$14@!4!Y<-AY*k$;;*o%%OFe1X3ICy`l zRMLr}SO_9>1`G&E1i{LXlOv!QW!5GqgpB`rGZ%7)Hj=q}^PB(sn6KR>D&RLbNEBFx zL<2-rsSs2|UkgMR;5!5#QkD%j*|c2R`ADvkk+IXvf$}F%{<1NhcfL-=@l3TxE?6`I$5- z1ygBc0w#f@2%NtsG@Mrmou=560&k-m_r`vS|rGxUr- zg(i+CE#mxi14|-5+a#XP7_##RI0c5tag05MXX2T9W}Xbx+3%$StHJ{EFB!)FY!VSE ziGdzNQc8i=g9-7+!*oDz_lC8o{68%*omHCh4o8^Mq7=k zUAd3z+@-hcweY$fC%@X3=7Z(sZ5j_9>$~~w$3m3jR$T&XVY6KVYp%wQutTd+&GELz zp0{g0oza39Kt94Yfy+^E!}j>Z7tnP#W$nV8V>_L14SCRY)%L!2vbp!o_f4?wZLDR? zn9f%4*(}96dna1vtG%lNs~q}Q3TOuCl`|_Hi=(_ zCG~CH(4jqQEjF zI!HuGLQrMeC=p$N?+|>QJ8NU(kG|BCoiY?rU@O_n!0elB&EDNlDmdJ<`(5g;rr1M6FHBl4seo;#rM498W^S`HjGE zy(H5{-3-jOrUTvdyydy*x$LPtrDqq08_}+@NHG=W({V4`-ruFlTwG=C4EdQfDg{$% zWDLfEqX?XTAT*p;3Z16NlLD?I3OysNU{5Eo1Iy}u!K@EP%;~|9sRskgz%%rWJcTBX z#|3eIx``!`pKTG(XAIf-1Dpawg@NDz#6cC{7Z)MKbu5EN@AeL zkd#uO^dQ^yvNa}V-g5gx7Tu7n7|h0wHl{ajnP(PYFF;# zI(O;adM&)}#>ua?t@&ViZHLA~$NFx5`>_z^xK)?HTG(utz?!SEBka&>RCBzmvFDwd zPiM5?1(1)hP2h6W+ps-8@dfnVO-;Kn=h#l?+e04oUA4Wh-E8iC^L+5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiUTc<2?+HN*mx1qOQjb@a9c!e{R0#PMUW!?C9TkD-n%fJ{rGcsXyWnnCo9uK(;c6$q<@}`>|c6+ z;BDX4?dNMBek^{?ogL^u($PP*vhzggezEf9W$(4jslIPxyTaaWgA;>i_KY9wnXir{ zPb-H;k1o&s{#6;cm|GiqaeesM%^MG^ufCr<{$}Pu=F?n;=roGihhk70U4VJ`{jX`Q z|L5MEFHklwUv6cg+v+CE(rQQ9L!p^bJrpT$s%kk|we#ayOrqV%T3yXsO0mXylCq9@ zArU93z?DcU`*qeQYYFpiEj9Fl+Nxp3G3%IjECfsJFZ-I~yFJbMl5`z;w_v7KE$Fu6 znB%15l%sN#j!obh@MG9ArjcDQ30qlr^G&MQ`c+(y@fyTZs|bvwmLV8=mcq01IbU;J z#ej4;8Z8rTIwS#iVSO*Fh4xHRqgdqdg4T)ASlXsLf6}nw&HO|--Sm^& zZC&%h8pRD74;}m4_07jZ)WEIU0M^1p+W^*_jfzmA(a2_hQ={gMnop+_!5bhRZWF-i z$Tx0teBujeyPINS-5g`Oq_IBaLEBZE``XH8-#6DUfi-8Nsn(-Oyok?cAxPpmk?I+d q#43bQ1(rt2%ZAF&2^Hi5C14>el0qR$>3U?AdJUV0Ex;CG?d>m&L&L6uN z`;D@xH|^gMzx?U}dw$U;vtGN=Phs%d-8k8WwTm^NBS;~-eI1LEqc44AP=j#dh^=T- O$WL9t9SmRuTRj0@dVCxJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63158.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63158.cur deleted file mode 100644 index d71d943fcc472643454d416631649a9e7a9bf8ba..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@*<=x057hR}itVh=^JU*$X161REu!vJepo5~7WT?08XB5J{QN z7%(c@*(roM1%(tw@B=)Q9L7Q$nX5c8Wc<&YxsW@sk<8tj-~8XleC;k#3BTcCqQEjF z+CxNHMo?w?ULraL-(L8TLZ@ND!o-=&>+#p-$*BYVOF#ZpFFaYEYy95*d8~iv!_d#< z{E5exhOWGwOx`z+KOcGeY5dWV#?HluM}M80zW;9Dz_IAt_{7;=i+8He?oRI?)dRQZ z4nO!fvv6?w%c16**^BpM3*;Bl zs2t3tktvu4jv{dWzR+-9DRi15PYSq>DD;f5f<2wU4lLsxf;l`GF{cJYrXCC|1JBSi z@)Vjlp0FHH;PF2_^RMZzK0ZU=I6bf0&G;=%EOW14J3TzeD G+x`NcarCPI diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63313.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63313.cur deleted file mode 100644 index 0f457411f7f07d4b668e1088b5ebee048d40873b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p%98#o%1i0XrTtpoP`g^Nl_OIG=*1N1{wjpa{ zxS~cp@rt?#-t9AQ_u2oWgcI#+ne~2^8T_PmflA}b2jm5+btQq?;;8!LAt}EdMxmV9nn-*7`tvMBQhYw0#DBF@87R8t;tJ7>qOUV$kqb-il+F$4kvQ zkLI5l`y7w`vB&&<;Mjp(;Lw1L%k(b$mj!FyqR5&mBRQ=jDvT9okllH#Kv=)?%I&67 zUT+Fz+TcRsvKk9xW%LPm4)JCr&F@|?C3HWLj>k+gJ}#{8qcB!RZ)}X6u{SDEFW*ZG z+rb>!B}4z8Eg%vCDey#>VvL}8FrcgvYg6EfuDn}X|4(c9yeiRf=D5%ed4%iJTv>Z| zQZ%gBnqD&}(HJ_HTRaUpeXdX5^c*Lf?WA>M!}^uROUL|qeEC?22Apb6Q0*lc4v%{t|<=Ex%rr>=G`j#|#^EnB{C z_Iw5pW;Y}AP3oWU**sRMfAAy!^r?>xjILp07hT!JV(DYGtfGfCurBzBtjNbshPsFS Lf<3~XV3+L=LpAe% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63372.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_63372.cur deleted file mode 100644 index 5c2759df648f5f6ee09a45d60139c888d5ecff90..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1626 zcmb`HOLEgd5Qcj!mF3+?JOda;yh2D=_y%%T+<-Ml$PF|&P{1xn$Wg{n1EuF8hx zXs1Og!#_Q(RO~8mQt71i>F>w9B$;T0zuAmPMP@|1L{!%VmD9fw(I>?A5JL%lCaUh; zfAH|pcSwx`PZx?T7AWRmU7`lThv)9c_o(WY{mNH(lfs=`$$zR zFC$07TsRSy#RccsA*!(3F|#!Oi6^3<&bHnbs)ba_2j(mJTv z)KwLimm&D5F?4E|yzf%^(C@YAAx|>fwdRd=)eVh@j``F0@na$CaH^?*wT{)PfHikx zMOb0f=;r*OvF4kacNe_o2~dx8EZ}zZ$8_92eidOGXH)r<0bK<5JCh+ zV-Z2Iizy^F7IP|!Sj1LDau|`M2+UR4B4qr}o4JrX&_XhIZ+`Qi_c0&4OH{zGRwD{5 zL!yI3lq3XIq~!w9a7aVDdP}vPC$HXkc>Cv(S36#>^}U^X5+A)bdSU;~h1EkpUQXms z7w5h#$Jfsto1Gs#z7n3A>$@`hedYe>)O@M;`H7*m^Lros8XSJK@4)5Lzu$cR@J$Em z;*0w9p0o9@)#+!emmXu)f3!$BXDR7qx!>tF6X~?49H7|Fr~yh9I8%3=th@PpMNFbi z6rHY@9HrRcJV`~*l8}g#ROX#XO2Q`VGY!qW)5tA@sIhKY@GN?kJj>A%`;*Xce1Bj# zUy^Ae?-tCqx&w`S-u0aHobgni(z6Z2jcD7LrznMbI__lC&$p>E=T})XLwqKUO2Jeb z8G~`)C;~U%6B>>ygicfBNde~(g`N>su%{E)fn|BOVAiS;bEFzFbv3XIJVVdOQ)ps; zoD;{V>sS);*#>bvW60JIa0(0&;~04g&)75d%sd&$JB*SEtREJTf5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wmH%n6>CDp9>X_)#F$uWKn`=2OOkk5*l?sQKjnP)4v`hDX z-E!gWd@a0g`^m4isrg{7$`*}>j`dxA`>_zUaH}qWwXo4HfHh}hN7$j&$Yy_AW6xVP zpU!B(3m_hD8^Gzvw{ClU;tS}yn~HXBj*^ByGxY7uda^B)AWg^5>YlwP`oME+|oL$t-WLR zoVoMnFX&vjXz`Mz%a*TLxoY*Awd>Y*ZP>VJ^OmjKw(r=vYxkbL`}Q9=c3q+^P4#BoZSN;qZx zg3;6S(y%RG()5D-ux7$B>6mg%2ZP3+^_7XQ_ms)!qzcGug6WpCpccn=$4mnmZF7jYrRYY=lKA~52LhhXSgGSAM}_{zj3e5)yNB+uj# z`Hlg0(5GXlKr=ms8P?SXhK;qpp{(^ZJxAX$aAcBnTNgeGjL= z5HXg4BXbNLBgfd$0D1a*$-?Sk9=Vqczu6JHIU2@N&LnPM7`Ub{o~^V8zTB zjfal??fUv-Au8flZGh2CN813SO*Se*g<2!q_{$nKkJaXMN;0zn;^Ec-CLQ_Ot&dOU z0;=vNBdy!S=uQ?#hh|W9)%w0Bv)T8}^@CvES#wFLW*HCQv*{0H+{;R;o5@&&FlvOA kBH<-N;ny$`)C7XTLRiF^K$K90NH5g`>x1>f24L0gA8}G82><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_65850.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_65850.cur deleted file mode 100644 index 422adcab0dc87954fc9cbb711632826a238191f8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 454 zcmb7;I}U>|5JZ=caJlgbpi0dRe5KrgNLL+D*Ms>uw>bx)qd oon2>Zh%V4vofd(n z{|rY)Y@k3$!1^l%r+Knj5id-lWwR>;KQNt{!ski zmvEweSr&a*7e+s6U8JRP?IZFcHM)~XZFN%p@tBogkE77l#~0zkxHPVfP5rF#wqniS zJJ$M0d_vtPn6yIyeKvkG-Wwl`$rz0@Sex9jv^U_`m3eZw)S%p~*Ut=4l?#@gtO!PpslqXP9GFl7td!yMU5hVfrpL?lL1pvRC> zN}zZ!q3jWRQ=rFCo-J+urv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;QGE(M>fq|C<-XpsmG{m1XYgotH!|Pl{t2JWW1ah7 ue&ioM_bI^W7B+UtEkmkSKGmx_d02pT(I;djK6NtHPuOqRBkT!w-TnaQkn;xs diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66952.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66952.cur deleted file mode 100644 index 85490246bb48231ba2f48714cb567d938eb9ac76..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 389 zcmb7;Jr08~422y)Fb1Chrm7=1$Spee2)zN7xLDds?Z^>8>eA6{Z0<|wkIGg@pZuPm z6NMI#4P9&vsF{7n&>Svmnv2T0y*Na5M%fd zV*&RTth5lMz#jEshi(h{04taXf&8nTWLovF(koIb4JzHsg1?T`~ g=S^1mG`GIU3vWRM+|hb$c^zGN>H=<{2Lo8w6Qk3AE&u=k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66995.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_66995.cur deleted file mode 100644 index 389ebadd92623dbb776ec0498c1bbad9f08c4713..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9+|V6yA%>6uv>{S7Uy5ENtMPepl8M{b@1$R1;o1HlStd2>v^?KBuMx@cloM)&mY-ocxLrva^p*-!gUg|pLMt2aH zsP0i2{yg;@zmRy&H{|=sdkhP$6G2aePlcPp9ibH(;Rv1^(YbL@pcLx4 zY@B_WAJLZ4Z_9p(_|kY=fQ9iU1G6MjCvko%^&D4Aqb4P!g!70}p~4E`bQ(JdY|dzA zdsZ=5XH%w|O#%~PDpW%4i2d1sIKDW-l87&liR*b!p?-o>V2GGVCDg)9SO`lY19?|a zGKVd|5|Wn;7M(LO?epkitQNGinM}CskPBb5^YMs(}=vY724<8Frg5~8e diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67172.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67172.cur deleted file mode 100644 index 878c312d3c038fd9160c81223d52005440dc7d9f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL-cq?4?k_kX=E=C`iB$6b+k*qLmgAVqveH!BUGIFNz8l2WhM% z5UkQzSt-n^L?W1IAqFC3C8f=rS{xc~{Lh=YBX=N(WbWSl=FR)RHy^u8)Q8{52vJ}e z6746VG^NGSnM>8yiQC`59$q>!QG4^{(7S<|3#WE&+kNcj^UL$YOUJL%>f)zj$LA}L z_s(7W`C@owa&`3R#er{UPM0V5JS($IrOB-T{{7Z)MUz6j{(k|V{b;HTq`C53t z9Vfq9$LE7JDw}*fbgb{{+mD5)fm?L~_JvhD0sEYd9bt#oM>faXKK8uX=hGQ2cme1U zwgOH^z75;s6JJ2j-Bh#-v&MG1(HZif=c?^}ZDn)soA1}by0_`3G1EF3l&n t%`2gEmB45U*348;N>tb{RMa0S0ZU++6bdS3ip-XJ4SNe)hONPR+aDuk@vr~@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67286.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_67286.cur deleted file mode 100644 index 801295a75dbe43d98f532f4cc000142b0e74cb70..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1724 zcmb`GH&Yuy7>2*oX*hK&buO5>t2{3G2M3k^fhz}`vyF51EdmTU;+$=qbIy5%ZE(gp zRA`3A<*8G_uzoj)L7FiI!%E*i`+i~5-4P}5tEnM!6kVe6L=*%Bm88E3qDk;gfDb8D z51Tw?>a_alGiJ`3J!kH``3n{!xvrP5UU&DrdHe4DhmW6nKY#i9?fZ|PzkdI5u+Nd2lyao-=whBQb*Z47 z=~|;p47kyjypDY35p@&_urq7ekv0DIB%Ek1Nu#qVL(T?u9jByaigDy|O6#3)3f#Qb z6LYaxf)S z4=bqCG3-DwJ&tMCRC}5Y)vjh-?I=2yuBB(mV$yNHNIE|pz>>(121(B+C8_xxoB~7S z7(zgsPBTEg`sjoGF)xsRIFB!)FZ5$EKNdrBGB!mE!2NU8?*pLQ#wKuFqnb9;~ zmRH48D05V3pBTdFp|y-=(osc)Oh%`trHqxv)TZ3VCAh(3+`ilc2S(#*VN-?nu{aVwj2d9Y kP&i3nxK&JeRi0ol9~N>ZkR@b3R8zf#^}u>zeXz>*5881NQ~&?~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68110.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68110.cur deleted file mode 100644 index 50748c6a7d62bc5a380180b33ec2b1b24ba9bb0c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fozq+=c-2C{UdHVuKU z{~b?8Y@jGmg!bv<&-;(0Xqsq&&vr}Xgay$@B5GTLD(Uxvh$lz*qVdFzoq(o^9HWn? zBj=oqIHbhjCI>M=fnI|0;8}&VCjFgDrU#3J!iekdS)B4Hij!|WF%fu z7s2~|=G{Jz|0pqt_N~l%zsd}L(z-yUapePifok1Jptd-w{(MNv?}t(7s>7>rVJwX+ zV_m&yzAae&JI7idh>xiIf{?b)ps&VT&U=180qfU+ld&c6q+kobzboGh?6g zu|M`$zYiQcunQa-uyL8*RS|9Q)MKlbwq`+!V2W!iY`2vmC+j;V`uD*3e|AFE{*J)%K$!AH0vA3K@q0r3m*gm^|= Fwm)-e@&Et; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68554.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_68554.cur deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO zW_Bc40@4H;Y548inb}{G=mx*dhR6vkqK`z>_XJf_CPu)a2c8{t&e<`#vivDC6T>pQ zjGUYq6;PsKEEQL=CYE8A{W;rh(MR^7Xk)mgPI}@k4H10W6+Z4t|Bo7-uy1wIyJcbU zS?dDT#-$I)3)JdL0`=8F_2+$3e&5eR*X-YfH^$nyG`7vF#`}sjf9qK51MvZMU*KZ9 z0{UuvFg_ZejL{g3N64MvYV>Zd!g(m;rS6;u>pwD%B_7Aai229BaR7(Fp#wWt=w0bw zRIGV7RngQK$!Q%?Wo$5m?9O8a!uEq#Zq|+RZe1zU8m}i_MPp@bj6RXZyO}h9c*B&) zA2aEA%p~JG>;g^X6gEb0?2LnPG%8T{2}AbqE!>g4WN81>0wN)h0#7t4#t2Fe2E-qi zS%9ak4Rg`zf2`y4szlRS$A#|5Bix?mD%!J?qG`3#^p-h^#?YnQ;%O@B$NJ<=ALC@R zowROjTD{Y_bj)AImyd;L!l{-7)n2kof@-bCim*b_sMh#VW6kfi?v9h!36PJlBxpJ6 zB`n(~J%Ed|S)~%z9C@Va)YQhsQOkK<)5`m1&sT77em^tcr||`!&2y8+-+tzwK8>-1 n(;a*sqN}@DEqrViP4w^%J_H|;75Om8P`}`R;Lq?E_@(^?LOA3V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69188.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69188.cur deleted file mode 100644 index 61a94030f1a6dfb8f93c2515eb2c9828ed53073a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#HH@5QQJLf>#}-E`@>JDoE)YtX<^>sdEJ1U>P||e z_Ni)Tx^mUW+K+SV2L?EL1ub>2C%GdT~?1LX(8t8qWn z`AT=pt@{tmV~yu=J97OoNgl`{N$SWhRK`&KXN_3itf?BU6T#|$#@TWOeY?mVD3@=d z@#4HSUY|F{a<114!Pz)lXDoL8(CuOQ!xNWe{y4$r6M@dp+imaBI9q3QcFw^$It{GX z|D~s0(gOUFas1Dg7)c2R_8cPTOsaK?f_1A7kj+hX-Ut&`)bg58nhM0bb`FQ3<{ zI!e%@-D+j&OOc|QQ`d5jmt9Ri)R*Y`5Qne!tnI~is~4Ido$J^6^=AQgJk^?DI%;-J zFm2V`5qGGX)fPW!?)jy*x04cW0p>HT30BT}4eRT}4&dZ$R;7k5N4v6n9@^mKsP(*F zv(@|N{UfO`Jf^a$Ba;7z`2I!Y{UC+ z6yZd>TJ*Y6_S9;F>ogUGWu=j)slq$aR0~_IN1GY*S~GVHqUO3|L0A-)g_UTH^=Y&S6g&kOKMBBzZ!Bm(pi@Vtpe}^XZag(-Ew^(Yh00PB!)OYYCnhMyCM+ovl_H~HF)Y!_Aj{ZR;--2DdktHHt-yNQ EAErR^_W%F@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69818.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_69818.cur deleted file mode 100644 index fabbafaa8e5ec93b8ed2da43023dedb0274e5844..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiUQ3_;%@^reOk zA5k@O)aWr|$Bmybanj@|Q>TS|db+x%c1B%&!^~N;=gghgIDf&yMT?g#UABD1%2lh^ ztZiDie#6F1o40J;wtdIWUAy<}-M9b1!9$0S96fgY#K}{q&xlNO%h_|SZRamsyma}> z)%I)GZ`{0f`_A2a_a8ib^!Q0f_UW_E=PzEq>U#a=?Ys9MKFZvu&tJZN`=0;t^H=xp z9);T)iss<&Uri~U+0V@rX2MvqnDGju3rupOEqNvQ+9N6<5Xh#qVPo3(8=~mMRvR@s z9W&&thw3;)En|#h9)~#XghSHJk{+Cq#JWsg)A2Ihni0#WWy~_}by7U(D$1{L6xDN3 zS*)9mrd!$oYAow58!ekGg(bHv0G|OphJIr{F!M>jm|5#DP=qEf!fc4ILCBQ|kO5cR zNBWK-bBw>tRg@QTjRwyW9I69wEj?U8pN`=UG~)vpF;(sntIA!XEO#^=OV`q~WD+Ru z=YjHrZd?-c!ycgdlmb1!gQvhD<`{aG%+j|EEJI5I*6B|;iB^H;fPKku{MW`Y!Z{GI z#~}zIklKS2;vaBB1nl+Ra4ksuPxDoAm4sZ8qeT0_FdXk)%V?$?U6e~CC_S!})EcKY zj=oR!stFrn5}~X{yE@;SRONYKj*$ z?zyj~(<#Yl0nEp+PM~tE*I|8ppbIFun}jrB%F&(7^$uxJa@G32`m>q$&GwzhjJ4{# zQq?l-z|W@LlVK~%t7axc;iEwnT0Rg?)E90U6JD7o7@Ch3a3(NIsBEC8YC&s5Ye(xq HD{X%O!gDRl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_75112.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_75112.cur deleted file mode 100644 index 8d85b40c1a012f676ba21a3bdc3304345434116c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 136606 zcmeI54~!Jm9mi+6;|?w7fgqd`SQ|x!rmZw0)CzkkNwFGB(-fsZEUlqIp=r~`h>Ev| zR*jWtqu8`f+JH^LKW$M#Aq^;%wg}}sFL;O$K#-gSMUOwJcXHh8?>9Sd@6Fuo?#%4` z+neu8-o5vmeeeB#zt8vW-p=elO&g>Q)|#6&y<9aUrQJfk1q*Wavnw^NiHYq*= za%|0shwl7Vo%YKcyO%F{eeSh8Z~7>G*R&PC`NG2MoBpzNAK#&pl%8+O=Z(^y%t8;Qs4WXHy+a6=h%%7)R-xt*NOI9UUD)mUrHH zM=V;jNYvHUse7S=#x_$OLltFU5O|c*5cB5ElhT{oQ>RXel`B_@i4!NP`(VewNWG%6 z7#={h=h2!UQ5D;_Z#U^~XN(^|UhaY00*D1m7ANpuy1Bmi5ZAXZq#0t$lqq&{n~rVU zwoPi!`=!>kCrl`p0Q28T)z3Z9O6!T$t5=(}wlikWo-Or%u-rs2-xC4Je>=_gV-Gaa zI-;SWL3DR_+ew~3cJ$~`QC(fl{?Agyb3cL*L6Q1%`){gsWybJVnlGA~n({gq>fCqV zebV=HW%|T)?*w!W(&@C+VjC^x^%|Y+IiH>WU0q#b#E22n=Qq5EkC|l>&^0)C@Sqqw zcC6InpS0%r9@hOe%_(@!r|yGQt5!*0e0>-tIs&>5tj&P~2gH~$W27!yDI_<0z|}e5 zq)C&cpC3k-Iy@7By#Blg_V3@X?tv{X_JHGaKE5Vk_~mmx-Zv=G5ise`dtl$bed6Ma zFP0kpgF2H({dNj*Bh{J$q5h4Ii)=Q_(~1_H^A#W%-Qj}zvykoW z?PBD}k#Y~bLSb6>fa7yMz8<9Pr|Hq949^OIqWbe5*u8tVx(8mi?19I~7W3!N=b=Rl z&iNGT@#&V-pG9qJYg4b+tTXn2t8>0NJ^kkI(ocLup7pnCZD%Xzd~y%?-ST@DE=atJ-T?%vKfec%LJO)wd+)l- znSttW_n6@I*r7v*gz`QWXfG8kudN9Ep?!HG7nvP<{h@sk^~%2~*7`&H@&zujLTvSi z_9c|_=jK@I5AFRC*TE{W(;wP9P|d#~vC<#f`zNf!m13hmw0EeOzr$joKeYE(R2Qp7 zu0OPQp_czcBh??;`!A@=6(iFh+PhRLnBkG=5AA~y)5EHv>ksWcs1)3kQ1yrQ!3pVc z<xAKHg2nvdSf)*ssYs7Clpm8Czl z4_`2!J$lw3+WV|TG|PF?AKFJFRsddI>ksV%P$9Y{UFi?)qZ2A1&yMwn_5mpn?Xr&a zhxXBm6rlH#`a}Bw=|{hGQT?HP^a2GOK|%eYeZb`7vAnJR&^{jGgb+nP{h@sb)Z^pA zq(8Kek1!!clGmTLA2)8CZj*0(zg|cJMC?Y_8`?*#LUitR{c*pKPJoC#%g1|e@t7a6 z7!kOa`a}B&;K#rv?)NbeA;J)FzmE`p)ULgL7dz&G00`I;$XJfnn(f|{#n#LddbE1e z0JEJHU8dVJ7CTLLTA5!jI!$&h*{Z)P@xIAUk)2iMYhtU}&RXouR!tc$v~;uCu5UKw ztJP{|yGpAv&DToWCZ6>8X|+xG=yt13hcbDWxyRqE#m<}j+(=U+)@>zX-Bu#dZN;N* zr!DJcEOypn_nEqX6&SClxYuu2-0QaDUboYh^)ePaYq1rR=d147R^79$x@TK;&vx3f zUdCc)Ew*aXe3N^!P43AyxhLD?p6s+`y^O`qT5OXkEbfKHy|B0!7WZ_2u&kG{*jbBh zHibERA2jo7hchq(9Nd&TI{qg5R`>Gr3nP6#f9M6dh^WiRH= zotys#gzoNcv1ZL0F>Ts3Rfk?0$NwWx%mi*Vo35<$X!J)^#rEyn^ZeD$mMvSP2Ipwp z7hSEMjKMvWrdJIX(p)iR$`lp3ssHf94@>?pCj+PJESZm24c=n@t5&TtF_%V9PmdTo zcC6$-({*IYm>~JE2Di9Kxsk?-hK2^gkN0+E-MV#h?R_*h;6_&)ghnQ1UtF>C>l0U0t2z|0NGGC25L@ zzXJ_QKIeS$$tNZI*OLU&W3K)9m(bvC@*`HSUd_Y$mEPW7F=4_4$^ZKvV@lFATmB5z z=CP=e*%y1xxq0(u$^HWxTb(439&;_o-$sKy%)hCrso%br2WHKhCHXJ&7*Eos73FWy zK=5_WLeDu5A3iLqtE+iEejNa>#W>qZCHbow%%4ABZuNfc(xpq~-v6^R*BC_v9PyVL z6uQpY)zu|Nj2I#LPX$@W1RV44x8aood<{-&S!V0x{M&JI6)?~j{*xz9_Je=Y*z@-A zg}-uFaMk7KQbr6(WFIMioAV2fCut>;{cmCK_4T)bpjGJn!QQlOLgf$kCiZNE#vkna zu@8+u*xRxXg+JIAWFI(xurJC!Q2tBB*q1@p+0=sk!QL6bGDq3+2m3OqI-lN;KiE5m=fg-7f3Wv~sJkWd{K4KG zIG;xA{K4KQn(mj;`O`FR@%-LBzj9|t{>*-Exr<@GYXWlLgS~5XzD&Tr_XVT3MO=MY z2!ktxK&ukxgG#?S+h=HLrC%@m*{u+Xkn`t#3wO^$iSNobKExs4j8l$)`li_|^Ii6AaS*34u`F}#* zG4!!!T^u=bq!a`GpSPcX`${bf7cS&^KjB3xxacXBU~mKPbF~~lew=eZPPNjX z3*^%(!eHZzFTR)`#~tHyqra+P-DT*eylfa;e%WQ0na1$%Pts(5e`SMQq=H*hZfsZ> zJhfuQ3ey<=jU>wV*$U2C4c(NRG!zD>t-pggb?Q{k|Lf`^72KC8_iOpLH?05fc@X8w zb)b}fd6zn{Xwf3cz)8!$Qy%A1DqT;vfBf;s%;tYo8{?cj#pWr$Vw05IFOPZd9A2?h zT;FEo&gX-bkh`z>S77eG<*(#Eo)@j4;(Cu;Csc6mER!`ISN4e$C-`xm@9&kSJLk^D zRle%rPd@oX=6+>vsfzrorsTM<dgce)_50^Odf<+_R4I z=0QsC6XoOq&^pTB$epiw45ZvyzLNP5;M_~*KfrS@n!l3!K>n?J+x_3!*~yRde19Lv zx!dZm6-U&;L|16*@8Jw5+~=C131>eMN@=aZzn+ygTA ztL1@&wVZ!abMJfb%RdTMXh*&+rPGMNGn4DQpElZ@o!Ode(_6Fp@%rXmTWhpc&H7=H zGRVm9d&sxOmom_v(I+acK2d)Eg#7La`MneJJ16A#O=!lKK^V)>9?bde=g0Ws2l<^6 zTG|+wG1{!r=9>KXN67DvFsA3fGa_w_%NQ-6#PjA~KvjNEM02HH$)g-lKmY_l00ck) z1V8`;KmY_l00ck)1PT)vSv}~w3pDMO3kRicr~cOpkBsLn6#J(3wl?w73(tvPEc~&! z?YrL*7gZ1XYCNMgM>TrzpiAmB?Oo%NjNt3huWi~S=vbS1WONqs-9qtnG}I2BYK`K8 zl(u2V8*j+)^_Gu~s7l>z9UGNRv47b8*=Nl34DIhJG7j$3v3GlWd-L%h*uS60?UrNW z&~p47;Adyf$Q-WaxR`V6&K-K}GKaXa=Qw5j)*P6#9=!3V2&z=?h`5nGbb6(*`p7ZD> zeolyU_~7tiJ$ChRE9^YH#((VS(a2+GR$k&iL7(yDJrgB&sk7VoPtp4{;}W}D{-1Yu z#VU3;@t^y=J9e=Ln*6m*08DJaX$eb!_ej<(t=){?!;ZZ&=T!AZ<1WnY-1$j6rvv^S_1n zhg$t+q2@3B+O@0&#}S49+z!__1fFv69ePJ<>_b158YT>+kfZ4p7_|=pI4_2AHBUXa=f~6er|F7 z^7WgqUVKXFE0+4V7AdDIr`?Qe&hIdl&i9lk-|ObdB; zVYbyB=$_}K=Zt5=Q+Z0y4h%P;SW(&G0*1xgPyCl_qChNy>Gr>0h`_?+Qv-id>Nn3Vx;r; vqHX4c&Q$`VaacQ3K`BvTzfe(sqy#L1Wl|`plxbzQ)I971Y!S8$>urAkd}8x? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7907.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7907.cur deleted file mode 100644 index 891a1e1bb06d64e94f2329963797308b7c26d56f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO>WyT5QT@9V0lM**M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~?aofZM7 zZ-yfyHc+4_LVNV_%^xY6CR*UL-4Z!rMf9GC`ktU_a+!(PIR+hNa+tD^vV)(XMCP2C z9lId_>(Rn2db^eKvkG-Wwl`(HM*~aM&1f%5TJJKqK@^-6fCapBcvzkK=Jf z{unq8;1D=;VCM?GEBxe32gB9fMJa!;#-+ASB(VKAUQX&J(){5COCo>Fr2Uvl`pdn>6gh>B(HlGCU>uDK)O|q99=3xyvP*{fUq?VB z1XAFMDa9B;@t`5T_%RFcl)YgsTK~`J__8X|>B4cPJMsv(=e3IV?4;GoJ6B_ zDYtk!mGrqjdDC;8Y_+r27dx$AY5eF|zx0Bc0Auom?HYoYz~9a^LLv3?9txCg!^| zKH+ck*rf57pZJGQW9(pb3!8@M>MmAGADd+pJ*g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7998.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_7998.cur deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_826.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_826.cur deleted file mode 100644 index 8e233754ef271d692ff9d90e8e33c779e2fd96cb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#HH@5QQJLf>#}-E`@>JDoE)YtX<^>sdEJ1U>P|{-MSv;S&suC7IY%;ja(2llCI zXSzbCo_vKNlXvUN+jaGSozuzoXH+yAh zH&4o$bM9O?m+hm)`$jDPGKkeD$d+{U&eW0E|OLz2{yU8szq`p+7%yjfEGQ50VtLi90 zi*~D(r7uN_YEE6tJzjP-{ZL<`>q8vA+OxI?+pYf4eCb@j&aWQ}u;Z!L1k+KoYl3O3 z=8m{S)vUJoL37W4YI`~<(H3An!m^&g zZ{9zW8@HRi$W0j^_}SdIW&9EM@-3DzcQjnn_CpTyE;nZ}w`XmRw2n5Un3Ya+v}h&~We+Y(ewe`iFW;JbhiDfAik?kvq< zz1LdK`L*!dVm6k#MSILlx zKa{u1J7rV`N`KjvQj6JuZEvETQ24f>E{2X-L`4|-GRO!3dFEP1o4 zXtGK&Qb$xNEmq*uIqZPhym!L&$_lSml`yRg(d!+z%{MEIv4a|_fWElUq1w=w10eTE6#t5(Xd=fdXsZvjj2ny#?w&Jr~2enPjS-K4q6U2EMI6m zbgW4CPW=Nun|qu3-)_u5UFxHU(G_g$qN#nX f<}TW~jSl8vU2qXuG4DH`>KE(}>>l<2J8k~}@Dj+# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_850.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_850.cur deleted file mode 100644 index 440aa0c8f8838c0f943a83000b73c65086a471af..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4sc>wh*EO_OOs(b%hWSWG`3*f&@emEL0F;9n{##PA>5iBoP#p z5Ij;Uf{GS4GN+=I#LhxACu!0svmknE$oQW(b0K$-MlyGAe)FIAF(122RKTxVB?>G< zqP;{^sSs3=RtrSOF*it!!;9m;|BgQRcw=??)cboQk6#?TviRfV(B10I!nvPgyT0uH z_U76CC%5*sj@W@aw0A(|P^Sp81`# z&oBP!pITUYI^H_)=+AtNg|}*va-LG9o8_9*9af~%o^qHHJEMjvRbZp;I9GS`*Nd1$ zyIgd-UUHOTo%19WJxf9&PEwh7BB>I#SdTO{^J=qg8AQ!B%YtXov*cNhR@h$&4ae64 z!}*d-3wcv8+v*N9<9W?<&a>gEJf&v`h8xkgv7Mq6>glALEkEC(%A8+itqk#*G%5vC zX=DN>fujiAd|zldt`Is+ktYS5M-+NSSizo7Uj#pq)WM{P8dy(A&LXEsFoAC8j$|Q{FYvqZ1Nvmp9gOTA08l<#Ej6Wn;9}DDBd{ zU*|5oldpx>9Y6WiHZ&hBk2h&Nbgb{{+mD4P$E~^m*1|@+0M?w19bt!7Bb)sljXiJH zd^)2AFMxQsZ2+eu-@5Jbi7%k%Zes1+9Ai73Zwz_RbJg~~wzIkS&G#!{)7y00m}#9Y zRMZzK0ZU-16bezwv{GB@HS8U13APODZT|p* C>Gl5r diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_8890.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_8890.cur deleted file mode 100644 index 9d02d232b01bd87cb2c146b5d14fb17a656b21ff..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GF^=0X5JiWUV7a5*r7$2>K}z31-YPdpog?fG#CQ`V>GlYF6gmNta*wbEwn<5K zDi)gj8IBCwK$>7_j~+kg4@pTB(E`8imdFVUqPIlUwggqup9RqejJ?AcEc6lKXmXPy z$M{d^GK-ofWYC~!V#nyoj~H%t6TA$UL#4R2gA^PXnA8LpN|BWL84I1aDrU86FIn%h zp4o=1jp2qG8HqR4Met#tdB4x&-%AXleJQivuQG$5v@TF-T=@WBpjvkls4b4F-yf3l z>tPhS>hL057)#^ISXa-QZwprc&au`9;v?!lA*Agy=(F*g@!t4gjK*M`!PhE5#By>NK&c{qLKTfOOM`5gt-q;vBV{cTT zUcQ$Wu|qhrLx%o8TRu!Gy9$>`j3yy7F#m{XebY%c?}f#lV$r$Rk~! z*2>zmlcHh0R(s8yL}Th)ZuvB1`&^&A={Zlf+DYq;4eK+FmyY%G{PM974S1^ApxTQ& z8&qpGc7z>@Mz!W=jXj@hy*o}`7l0pWF=#pJB`vp4`T(w;%{t|@dgPLZQ&&4zk6NDB zYqose?D`BIEbd0;yVO77vw5si|I3g3!>2wr2)ad#U36s=i=~g%vWgzjAiCfqT#=8R PO!X7-8}W#ELR`1MPWtf~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_92196.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_92196.cur deleted file mode 100644 index 38c685e881b94ef057cbc2f1fd1fc857c9a940b6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 136606 zcmeI5e~eVs702J~F03}Jy9mN6fx##UG_BBJp+8_Yr41&=Ux`=>MClJ&EF?AcA5q*{ zwc1!sG)imRqz%wSw6sM<3o)Q5X;vt>ZkAmL1QDdGL6K#b;I1rtd(NA8XYYIaX6C&& z@7L^nZ*uqE^XA@r&iQ=r%+7oBOVcW}5n5A|rk81#B(yuJw|sfVesP_qHPW$$hKxP! zdzv=&F9~htOyl+`ns&>vgf@AyVb^Ke`Kk(S8ktReD51Ug=i9e_eBZp~`|dq+-K>tv z(fe*%H~X2NZC=~);q%Y5-2Tkj#m_&v>f~d8`2PGyPQJ7Kz}iuluc_Yh_>=#8e?r?M z=i3qs-~Lm>g7ep3J!=1=&L4=!#vbfhliGY+U-!T7yZeqeHvVGnqSk@twyW6_3J8Dz z2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?x zfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9 z00@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9fIkEl z&@%J=SqiI^Ac6NNWOE9PQAH^a0u7WVYp>R`WdEM(45}!@o4{sDPpnz9Mr_)& zNz9)=U)=}Xe~aoOsw1eP3@-wcD4h!l`B_@nwlDQFLct_CaM#t zq6`lLPf!|S>C&ZAdQ;oo-7VIwTPJ4Bn4#{2J;NjQlFDLq0MTAbYko>qG&eV!bhk66 zOqnA0z+C~vf+h14_%GdDn}3MwTUXEwF=x&kJGo8AcJJOTwdeg(?b;J26ia~l@1^SJ z9%!NU#D)zUOj_F+ixw@C`afE1BAD-qfaKpyv;Eiu4YZD^udf$U31&bc}dKKP*Y{Zf%WG2J@>U4vvYDYe*5 zOL@IUXM4_Pr+;s6uNX6CjP&^(@8M%+kpy%NKKS4RF>&HVsmI&2=2twd`#YMG^PErJ z2kY0bm%jM=FiLa;bRAfmqeqX52@@trU3O7OZuWqybG})#W=TJHN0&N06M?M$ya$dP zIil`?oi6r(<8wZ~CSdsGb3WcTDA5rx>Cb!M@ZrPa$}6vw8ofcGIe8p-pT^;wFFGB) zdLE)b?}0;y4(aD`tSQy)R4>Wnpn-04bk4`G1@LPEG@j4-`1vAAv;=JR=RMHT(ILi- z8>in+A#S5OGDoQYq~ju;PV=<91?PM@2u61}r~WKtdwaVWJ9ezx1Fut<);-|(oR6;u zDf?-DbScBLLLjgHya(Fa+SEPps$~y6Nw!$FY#9&DTX4>&P>)Zyp#CgsYip}|y=IHC z2V9-=&7M75K92l2KIxZzB#!jwJw=QCC-|&vWuRAI|w=y|G;D&wF6+ z-o2u>w${-(-`cfn<$WKo^Tlr~c+#Kuz`O6hYkF@dAF~!d=i|o+N}Fp#{L(M`h&=0W z)!NQh&iUjX@Vn*rEL>LhDtZSHsQ&yOKng9W3hlk?E@uX+zujYk*JH+6OOSksbomAKDkGOgPg6(I47}Bc2aleAge^`=CmAOZcikv=2`> zpFH`dKeYErk#LvsMSo}?u4q1bD_VbO@1q*wFIANO&^~;@eD>&Be`xQs645N@Nq=Y` zjaUJAb*(?N4?u`k@ z)nu#wD#eE;J3)3@nXidmW;<=MQ@b=}xX_YKX1lh@l&@B;ne9rg(llQyXq$M__uK(`f-x}CJFm$KMti#=%S{#9VSp5k7= zU2(75ihJEoTGmTh?6k#JOrEd0XIpj8w(6d3)jiuu%X%q`ownGjN%Kwa$u_ws+vJ{X zlY6q0mi1B=J8iK|rm(md7Wcy9URd1I{lT(c%3`N2w%HWs?1eCAFN8UJA93|Wtg7tQXNGVB{%|;Xz2?h zM~)PG_UsW4Jn(=RKYqNbLl@ot9M$Q;g;3Tj|CX{BOO`Cjegi^ZU!Qp4g%`xUdGk~q z2521rk3caK_@UW!WnD_6Kcy;~o13%z)y~eHJEaB}Y24MWRxgji{gkFx4OY-xF=x&k z6}hSZ_~VaD{;!q?PS;s7AFmp`$Nbl?UvFYAjsE_AF>&HV$$z2i$jW1ajgjF+m$U_w#c;))7XTIwaaO!WW=o-4K~ww@z6sL*`e2uEm*KXuKlZW0_rkX zol!cSmaLp;kbTbC+1Y8!zrDR(BoYZ;vxjP(%b3b(xXzs+y3pVW0wk6$U24mo53XLl zTI%`7a)Rk0*DQbL=0Jmj&pCT~dPGf4jpYAT4>6U~6cc|38Weoa`RudLO7?G+6G)G_ z4&h%wgZIgg*sx&(4;xYj1_s3R>C+|uJ3PizPSb4pGgzC)q6TK4?>Xm=9XllZk7#UF zIf3+;Yfk<)8gwxK#>U1W`(7Tn_10S@|Fs_DDYt2P`CBv)e4R7bbI#+(kBh3RDqfFY z2f%AF&UR8k{;CGcmMxQ8eMo!%{rAhg|2Jo@F^UK{;x9GGb)B=fw^xiAGe+{C3$l(0 zIOacO!z%~)8l2R!$kxgEx8vkWV4yGjZ@A$GKlqm$d)^+t@K^2%uDbkO%7~#H*+}}bH!XNB&vJad; z*ym**D1Wdo$UZRsVDE^1Ap9-t7dwumJO}#v{1fb5ZzA9LH#IfsYf%JzEe-qLnH0Y8 z2YY9*ZAKN%AM9$)Q{J}m4QFn(u@dtZ%kn@ao%^&RZ&~$&3EB;{b z9&mvfj`@Rq0g~QscEsPp{zu+iVU`Vng8UzT_+fnv&E@l2u(yF&#G$erjNFOj7CB_75Jf?$=UsZe{OaKhdkD<#DY`>EEl#!$O;>^y&GBEc8`f zvP+N6YQIuBuJ$!eT6{04Hb!w@Cd2)tay+H<(@Njy^8bXaW9rN0`M6x3`*L~iCzZJ= zrJq*%vPr^^?lnl+sTt{cKk#%L`?Bp)49t%PzdH&NoJsWwu*ybK|1+q!kD{(FR! zJO2g@{{|udZcI6p>!wbfnthd#e-Fg?9W?%4@+-;!z;jPO{d6{e?(E;cpI$@OUMb<+ z|K(7-S{g@^_n7iuxNsroe`5*f&+#9pTIe?vSFc*N%9MLcOAF6!FX7xdbaCRui9!tc zf8G)P?JKpcSh0fV{hSvm;i9KhfWeKt&((73)G5yW6xC9HE|5(t4})zlzx;A`9CwV* zjsB*Db(f)=^0HxY?KRh2V;aN1KS`7M{gw4{krHlAxv^nk@Z3{RJ!KlhzmY`wzF5LJ ztD&26lZL{e$ND>%bLYT-m2jpXSGTzQ326?wmUpSNW=gKmYu5nfrB_rAqRz znv&zbk~@FYpp=W_oaMk_lsoGt({j|FIdewt`BK+i?pa59^B^Vn8FKP4XdUHmf*z&a{n3+80N*K|Jk!= zrS9dBJ4>6*U&;OJ!(4MUJw5+2&0W{OySrQN`Et@-?g5$mOnIQpTF$>*b02*0%RUO0 zXh*&+rOSxFE0yVdm^9jqo!XUYle^OT@!F9?bY1;>Y;n2l<^6TGAMoGTOA!W}58xN67Dv zFs5g}Ga_k>OBpSn#PjA~PE~$SL{q6=$)g-lKmY_l00ck)1V8`;KmY_l00ck)1acD? zTUGJx%QWrv%PSH;rT#Z^kBsLn6#Mq})>iS#=9k2;SNufWb=xiCimHn1;~A|vs_`Q# zuBy?rgT^Hp!PleT+`e7Vu~zfQ=q%#9lj7;DuO2bi8pUM^?X^Acyd%TcTRt|XGI6tY zY*aSI{&C+IUog{iw7=)bIJi&84h{?qWaB@2m(edMY?CRrI*m-!3 z|C5s^BafX~d5Qltea4gbOqATE&TixHruS*aC3d&`zwGOcRqSr!zxZWe>|%Eu|HX^3 zjNNJcaoX=3vswz>f8!iG=aDb|xW}F^{!)lNSNx?CyIuUH6uUM4Qj1-UzZ7Ga@t11s zGX6L`kK|aql+4Lh_FYQy-AeIm^&iKfIQ2I`Y1)9%PBPk2`WvD&t;%RK@2esr#=Ok? zvY1ecQdZlvVN=7$^&je?)>t?5`#)sMb&|%ol+mV*mK&O%`JErgbBZYlk{I^#8tfiNwC3{MS_^ z`1<*|aU%v_W8yyN&dxc8+C(C-*Y)VNpO5*vz8VAPE?=MHKD{n_b5QxSf6h~lf%4T~ z(Sy^r`6N1^uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_9913.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/CUR Crash Samples/test_9913.cur deleted file mode 100644 index f1d2af4ad58386aa40fea661912d555ee5d67039..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=8V;bJqmHz^;-QL5RU#HfN)qLeR=0MG!-pR2DWnUW`VxND&c5 zBp`yO73?H)2^bJDU@tik#3IEm!FXWE_@6iLLhisuGIwu&^M4=nwYx+m{Km$J0>_Z( zG!Z2UL6zxeiRe0fXW&B$O~NjYyj!KScV_ONx;CK)l1DFhzb=^K{M57Qx6j{PSRI<* zomgM~_IqdM=HiFp?Q@Ox(&eeO{o9jv<;nKYpW&i`7n|PyunZ^K zeA(+})l;i|uG3T&R+UDcrW)@=QxdjWUuxyd2d$1{5ViIkOTx0SDy&7{Ii7@;^Tz|r z^_pxOb$4N|H9hE_a6z~zToxLk7ItB|5gi#jDW<}FdECpk_`5WjkDIKWAwSdBq+qJ8 zj=?zaRDt(bLd$uj&})i>6mT6;D2%XzJDtJ~9BaoFb8IkT&JKpmd@yhfgrP7Js+>3; zcZl=TJuHd*Y@c{OYst+Y;1n1l$1@TtVJu9AnUH}x_q`;raacg|l41PMrV-Ja80ax1 zV+`m#m=J$FOb_&KZ&-`!|I=dITa{DMy z@af(9T#4?+Nme`1e6XT^NaLYneLuhZScnSTs!w38T((bO&DGcucIY&!Io{RS^I^@W zv$^60kdLrS;BwTvusc5S1@zrbJ@;YGaa~><40+IZ)$YEIvibK-`tM*%Y_4PNT%K*= zv)PRD?4#<~HI-*3hS4mnlbWC$o3NrxREdm&#jsQ>gDhj)shesYwgKCOZNd86UuMAc Ap#T5? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/SystemDebugger_description.txt deleted file mode 100644 index 6d532b1..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000012cadf9d \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1ab7bae10675f481341f8d1201b16f2c2a191b18..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!}3OX>tH}0JN5>0rd}sE5bLyPyX6Qu3f%(jm?OkME0=@p< zhm6=jmo|i-e*C{LQWQ)j=rz3G{|WZIc-s1;AXp)P|D2jl(0{NI;wVtiSeKCF!?PFj~} z>0HNzyhM%eB+;%qss4B@%CE;!80zDTaN%4!*UqMX*7&Ys&EE&s`b2y}-6xoggMmIf zzd7%n56EG_jnmBeXcLj^&BT(?X301hRrLD zkB;@Nzx-K<2ArxTsE(3t397XkJHie{qgvy$#-3kmeLF5u7eGG3lAz_Nm$1A(=>c4w z&8ApbbL3Hm^He8SM=j^|mc#CwKcB&)+ug`~SNbRXZ652=|B563h^5ahjBa6Lm&3Bn f)hgzCRp$t6VO@$DS(#6rwE7AA4SR$=!LG+2mWJ{M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 94b54c3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19E8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19E8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19e8.18d8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000021 ebx=00008000 ecx=00000008 edx=12cadf80 esi=0bc788ad edi=12cadf9d -eip=00402d7d esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210602 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.531839279422802959510e-0003 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.64815e+017 -7.81995e+030 0.0759724 0.0192409 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d7d -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d9000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d9000 3dbce464 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ad 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d9000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x12cadf9d -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05711968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d7d -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d7d -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d7d (Hash=0x67613208.0x05711968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_description.txt deleted file mode 100644 index 94b54c3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19E8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19E8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19e8.18d8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000021 ebx=00008000 ecx=00000008 edx=12cadf80 esi=0bc788ad edi=12cadf9d -eip=00402d7d esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210602 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.531839279422802959510e-0003 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.64815e+017 -7.81995e+030 0.0759724 0.0192409 -image00000000_00400000+0x2d7d: -00402d7d f3a5 rep movs dword ptr es:[edi],dword ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d7d -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d9000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d9000 3dbce464 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ad 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d9000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x12cadf9d -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05711968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d7d -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d7d -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d7d (Hash=0x67613208.0x05711968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x05711968/16450/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1ab7bae10675f481341f8d1201b16f2c2a191b18..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!}3OX>tH}0JN5>0rd}sE5bLyPyX6Qu3f%(jm?OkME0=@p< zhm6=jmo|i-e*C{LQWQ)j=rz3G{|WZIc-s1;AXp)P|D2jl(0{NI;wVtiSeKCF!?PFj~} z>0HNzyhM%eB+;%qss4B@%CE;!80zDTaN%4!*UqMX*7&Ys&EE&s`b2y}-6xoggMmIf zzd7%n56EG_jnmBeXcLj^&BT(?X301hRrLD zkB;@Nzx-K<2ArxTsE(3t397XkJHie{qgvy$#-3kmeLF5u7eGG3lAz_Nm$1A(=>c4w z&8ApbbL3Hm^He8SM=j^|mc#CwKcB&)+ug`~SNbRXZ652=|B563h^5ahjBa6Lm&3Bn f)hgzCRp$t6VO@$DS(#6rwE7AA4SR$=!LG+2mWJ{M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/SystemDebugger_description.txt deleted file mode 100644 index 1153de7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000011593f7c \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4152816382946cc0607daa0ebce4f33f8f5fec25..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 338 zcmb7;%MHRn3`8A3*`sjWzOMQy@)D1kq07g*G0<5ig AfB*mh diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 04da651..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1694: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1694: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1694.1d68): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000001 ebx=00008000 ecx=00000001 edx=0fd4bf7c esi=07fac2b8 edi=0fd4bf7c -eip=00402d8a esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210602 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.743861801539748960000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.530737203036982610860e-0003 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.48991e+011 5.19701e+006 1.77155e-024 2.94675e+010 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d8a -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fc8130 07f45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00221000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00221000 d38faeac 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00221000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0xfd4bf7c -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x057b1968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d8a -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d8a -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d8a (Hash=0x67613208.0x057b1968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_description.txt deleted file mode 100644 index 04da651..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1694: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1694: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1694.1d68): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000001 ebx=00008000 ecx=00000001 edx=0fd4bf7c esi=07fac2b8 edi=0fd4bf7c -eip=00402d8a esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210602 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.743861801539748960000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.530737203036982610860e-0003 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.48991e+011 5.19701e+006 1.77155e-024 2.94675e+010 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d8a -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fc8130 07f45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00221000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00221000 d38faeac 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00221000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0xfd4bf7c -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x057b1968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d8a -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d8a -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d8a (Hash=0x67613208.0x057b1968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/10624/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4152816382946cc0607daa0ebce4f33f8f5fec25..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 338 zcmb7;%MHRn3`8A3*`sjWzOMQy@)D1kq07g*G0<5ig AfB*mh diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/SystemDebugger_description.txt deleted file mode 100644 index 54a965a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000011575000 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/11849/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index fcd7934b61d922fb1761e15765fa50aa770c2de3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO>WyT5QT@9VR=V+*M$Lk*=27aXVvTE24bBSZFf0BjzYIUyUY<{AQzx^S_GWF z8IFwDKsP~Xj6S~kBSq0f3;dj8SDYheeK6*w5D^!IAP|PZ<%(oLvO}1PV;J1bNM?c; zA@ric%tf6A-3t7Y|K`!ATDsm{vfEcZa~G>N#v2OaNjKCd@ZnH-f2jVSOE@vUEvr7P zE2A%37ino+`-r?qo$e&kt~sgxe9X%4$4Thg`XKFt|$Z zs(;n6<}I44sWp<*I-C5fD|F}6mZaaR!!6KQ_` zf+eAcLfVg+q(APkzDHwhjouiHy>T!qQ2!Avcd$LokzF#(|2rZgF_HpLOev)ViU$p4 zkJy_6PfX?8(&jBA@MTq|@xpPX19^nI^IBDVc2YEMHk#fsXVGX~%PpSAnm*TOZ+ecC zt#;P>V&mqO#z)8cwZHsXh(?@hO;GJ6yC$gCYU~I*6pd<)&l-Dvt@Z6VdtCte2up&N zqh7-D`lJVNbvBz^!WyT5QT@9VR=V+*M$Lk*=27aXVvTE24bBSZFf0BjzYIUyUY<{AQzx^S_GWF z8IFwDKsP~Xj6S~kBSq0f3;dj8SDYheeK6*w5D^!IAP|PZ<%(oLvO}1PV;J1bNM?c; zA@ric%tf6A-3t7Y|K`!ATDsm{vfEcZa~G>N#v2OaNjKCd@ZnH-f2jVSOE@vUEvr7P zE2A%37ino+`-r?qo$e&kt~sgxe9X%4$4Thg`XKFt|$Z zs(;n6<}I44sWp<*I-C5fD|F}6mZaaR!!6KQ_` zf+eAcLfVg+q(APkzDHwhjouiHy>T!qQ2!Avcd$LokzF#(|2rZgF_HpLOev)ViU$p4 zkJy_6PfX?8(&jBA@MTq|@xpPX19^nI^IBDVc2YEMHk#fsXVGX~%PpSAnm*TOZ+ecC zt#;P>V&mqO#z)8cwZHsXh(?@hO;GJ6yC$gCYU~I*6pd<)&l-Dvt@Z6VdtCte2up&N zqh7-D`lJVNbvBz^!#h@s06@f<)2{bqRbp6y6_7{6~!- z+Sj`HhgD(pljYnRMnWD& z()#WNQ^M~j((#x{#>Yk1eN@KA=#9bH8GEAw`i~fL3){mS*(F2&pDiL2BPsAimr_cg zL@=PN5o=T6iLSg`TEC?QzEouzE&^A6Adhr=o~!ttors3@TFYDJEIx)Va?9tTl+XI? z&7bpRvz>k2*sy-(6sYf|x)i9dYODw=6d!8M&py`t+SlE2_BsLT zk(L6LLoaFBKIs8moy|IzwARQY59h9Su8vyH>pfe!Z}xl!k7jox^Ih(r@Yy^zx&Q4) s{^@g{0*r29W0zbVQnmD{SvJYT0<4QZp(^pIlc9dW{=gn#Pq6Fu7v-exr2qf` diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8898509..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D0C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D0C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d0c.1284): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000001 ebx=1276ff2f ecx=00000001 edx=115742c0 esi=07f3c2b8 edi=115742c0 -eip=00402d8a esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210616 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.530737203036982610860e-0003 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=117.848 9.75089e-017 6.99624e+033 -1.44756e+036 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d8a -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002be000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002be000 96eb576f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002be000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x115742c0 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x057b1968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d8a -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d8a -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d8a (Hash=0x67613208.0x057b1968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_description.txt deleted file mode 100644 index 8898509..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D0C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D0C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d0c.1284): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=00000001 ebx=1276ff2f ecx=00000001 edx=115742c0 esi=07f3c2b8 edi=115742c0 -eip=00402d8a esp=0019f8e4 ebp=0019f94c iopl=0 nv dn ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210616 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:005901bd fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 1.530737203036982610860e-0003 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=117.848 9.75089e-017 6.99624e+033 -1.44756e+036 -image00000000_00400000+0x2d8a: -00402d8a f3a4 rep movs byte ptr es:[edi],byte ptr [esi] - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 006017e8 00000000 0019f9b8 00000000 image00000000_00400000+0x2d8a -0019f9c4 005ff973 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x2017e8 -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff973 -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002be000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002be000 96eb576f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002be000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x115742c0 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x057b1968 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x2d8a -STACK_FRAME:image00000000_00400000+0x2017e8 -STACK_FRAME:image00000000_00400000+0x1ff973 -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x0000000000402d8a -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:EXPLOITABLE -BUG_TITLE:Exploitable - User Mode Write AV starting at image00000000_00400000+0x0000000000002d8a (Hash=0x67613208.0x057b1968) -EXPLANATION:User mode write access violations that are not near NULL are exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/EXPLOITABLE_0x67613208_0x057b1968/32304/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 41e0475d5071d3f6262b07a33b1298afeab1fc2c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqNg*OsN}Cu5umUfEzhMlFmo)QC10%ls#h@s06@f<)2{bqRbp6y6_7{6~!- z+Sj`HhgD(pljYnRMnWD& z()#WNQ^M~j((#x{#>Yk1eN@KA=#9bH8GEAw`i~fL3){mS*(F2&pDiL2BPsAimr_cg zL@=PN5o=T6iLSg`TEC?QzEouzE&^A6Adhr=o~!ttors3@TFYDJEIx)Va?9tTl+XI? z&7bpRvz>k2*sy-(6sYf|x)i9dYODw=6d!8M&py`t+SlE2_BsLT zk(L6LLoaFBKIs8moy|IzwARQY59h9Su8vyH>pfe!Z}xl!k7jox^Ih(r@Yy^zx&Q4) s{^@g{0*r29W0zbVQnmD{SvJYT0<4QZp(^pIlc9dW{=gn#Pq6Fu7v-exr2qf` diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/Exploitable Crash Triage.zip b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/Exploitable Crash Triage.zip new file mode 100644 index 0000000000000000000000000000000000000000..097b2d4d3b9422999a28dbd5c9c478201ef828c9 GIT binary patch literal 2001389 zcmeFaWl$Y^*7l7D2<{dfLXhC@?iSqL-Q5Z9Zo!@4?(PJa;O-$&Z68GJ-NlgdPKXgHV~|A@DD7RJ0mlZe$QA_BtM~B;lAh@|pO?Ow zI^Lx;%hPJ`ZppU!rn4{M#xcJN_p+$Hmn*rgkjLnGh4!7f5Km4B)f16q~iv*ZNIu~c(p0KiM|W?+q_#Z2ZXsFzt||u!BlEEI zcT>C=Z=-G>5%nKw{C?zovGXz-TgGUm#mK2-hHL*chy4gPc-4YxyxyL$MI>_~=$A$x zO*AcYm7h60>#HPP8C3h8=22W2(*8Je7Whr*#1MN=7nUIP4V~=`T|3x>IBt#m#F_SH z_IBPmh`|KWr(!e|$=FQaYFq_7-e~*Me(^6R`?%(hF6@O5tY5$xj?0bm_5~wr+c-=) z%h4HIYF?e?+yn-jxQ#M$@)y%YG_@+wh4rhSKC4(=&Sc03O z{zmFC_CDes_o+tf-*+a>U+5`OOA~t&9rOR8L*@UAYA>Do(y4#!)L(Z$$l)h`89-0T z0luaFi{6rRv9mX@5HQenFfuZ*)zUYx)3Y_Pe!eq4-~XtF*rB~?5CkVQt>LYpWGlv{ z1eEYq14XBSMTzMJ6OLa=yB+t4qIBzkx`ZX)=i%_biXC)MsoD!}fkcZa@Svz5RfJ>T zxenV=n$cgLZNmQBRrYJ`p>m2vBCmmfLf!!ZiT#DOE16j8TRGYNT(qF2k%^_jKd*aP zRn6{@0l{-j;?WO7lZD6cIC10$!COgb(EX3Z7CL0e<{C(L?%j?Haav zG6khIsvfGMC1YlT4=agxP|Gg85S(s0JS~JGx^Y%H1H+mViLZ)QQ>Qp2H`21pYG4RM z+JerUvKhoHIu5ViljW!gL9tO$?Z9hUh7i8-JeQ1%wMGDE5kK=s1x*uJjoKoCLymNh zZ5Q%H+Ii4ychWG+q~19m*F*685b?gSU8CG20M|I-+^1-W2eYtDw-9ugc4F_gi|)47 zCZ^4>(-k!Qlzo~fJeE?Dj@BO->mvb@80(O+RJD;9#5g@eKx4=tWzarCc%ZbCO4Vo! zqy_}RmkD(Ce%CAe{q5dt5#5md==%IUf=p@#wqN+Q^?*Zl1K&R;1J{)%aa2>wCOh(p)1cs`em^wGSn4Ie@>Ffv0S~u7 z+D|qFer>D>vSNe2C`0`wn*m>BzUX_8k2{qR!%nrxxH!;xKcCenzZkCTsdcr0(bun# z`j42lNn9$!HhmZ^B#$t@{P-cA*$QTJg_9`mM0Uyr95iL|Hj}rc$ck8k{t4#f^m2mk z@lz2sJCnu50Lqk)*Qb1U=Hyig!zQMNq%V&+A7r1%(=%bpqTfpfH}sP=n2v1v{t;Kc#sg)WK7#l$P@UM-K%(au0Sx;|v>%4a zvD<`-C0z8YveaKD2z99sYNO|zUYu$#%Fg%* z#IN13xJiaup4(5-MPe*lGa_#Z#_*<*bz0bzL=a8YL=HIV@c zYTF}MMWWj$G2bHJRM_nfNxV1XY`d8<$d}MLztJD$2o2m7X$VWpv*D2@5uA?63_JlX z-r94o+ojhk21-E{IfUd8b~tvY+=V%PLDeRn^#cb)bUE0V@%o^#j;K?wE@;qc6SAC9 zI5K0adyJ_yAK7TL?5d*_QD-sFL+C4YO6l$+wjfmT$z+$MWQMo~4C!)V=6>qNS6^n( zG6_yWS>(_6;H+AdyIR>0bM2?Y!Q|f-FNE)G>M>+vA~6IxOC_q zGF$C%@pA@s_lBjmMpqP?pd#WI~1?b8m7zhl0SD&F7sRLznu`av*>WCA`BPlb} z0Ji4)BhAmOC!jbDT|SX@8t7Z`8Wsk)C{{W}q0}ioA#FCW7(dEWgf4s@RESM`pq+8f zKIAsxCXv7aOeuYsk;J%)Qp|&Z%D~4HxDw-sl}_T%2cp+v^EP&Y4=btL5?3Q0Nn!b9 zV(E4QnlWLSH3OMX>(Vrr8SRz=+?_r5Ft6?Ak1J8y(@L5=SOrwVC_(cUx15l?YfT<) z;abV~m5WezfHv(apTC+p;P6-WhwPWJgeaKFsxtgN_Xtb4NJ-Q5X6L`thwm;f> z=EHGmErnUei zpcq$~NjR}v-a!_!!;rZbUVL>+6xm*yr9z;ItLW@^pG> zCr>-_NS+n zzj{NE>XnryBBU#dx_?$cLKUy@$MjY-Nw82DDy|EV6-`nTwTDU}hbfw{kJypQX#oR z?rZXIg%dc&W)y9uEJA+y-Rd8@>9ER6s2RB3;Ekk)C51TY!u@m`=lk$(9D$lXyOo_t zfL4;*KvgnCwyeh|elNMze5`gs^aNTEpQ6QSb31tuasrbLg4jJ@-L(AlLPnx7Tq;_gq|8=$PEYshH*t=_ytUx1hC;f>wo>kdsLg*fukw zk!(A2Ytj;B!7yH+l69{GEPf04*lKqz#gf#RRex;nh9lQ~XQlVOQBJR}b9>UrUF-3& zaP|JSJstYCLLL;J1_#i_iSF6sW4G9rQY>CyZ1eVyO9=AAZwI#a+-hC1I*d&XN&MYe zRc0V#LKg0Bv_8c)sLaPoUw}NATGB?*hi9%$?dj9M&As<(Nrgclo;dTY#0qaTDGA&^ zGPgJH-*{}5@kox7A!lEk6R2r_6e*;2*AZ>+J2{QMs*vtpxq<^*aJOVXBAlsyyne~v zc6fE?-*Kf|g)vs3D-6eao@w@2cb^0fE|~L*=Jdd^P5sC$n5~eU6)MP>1LDbvzr?e@_NS#` zqGR|c_(d=at`r7%Soi=ywEqdu{=Ukef?i>~&|N$*f^zYrbUR?Jd{#6{XAnfrm4%tZ zxLM%TQS)EkKNj&(S>AOKxqCuRz)f8VNG`7gVIYPMOoT7%kE#GQ=LnTKaN=h-S(KrF zlcQ!WuO3dJOxY`6}mGI_NRCO*A0zTaj5YatWxCd^1ty-2#U zt+D$p&f4Bn3-I3_mHv3{{}Vv`{ZapGfcX1!_@4mczpD2C>bd-diTG*LFaIp!`d3H) zpAeTgv^PGA(7MYw?js2qfoyeMAa~cz|<0us@rtfEt=ZXiRL3>G0Z?=IM$@{CnqKf za)|b)Dz`k3OCDY=H}_(-Ht4K13r6*jtqMe^wq}*XrF&WloiPO4`8K5sA|U>FKeT$j z#L$UTzS>M2r;m9$VKU}^c|FraHo0EED%6Mvmknejnm(@U9lNK-?GoPIbJ6}~m5>_h z+!L@z5#xCCyxR|yp3Jx$@eK<_ikK|nnC;JcRSZ!ORa7Qt9ToOlOX^sv?aX46^_0q` zS#+L}ScS4Nd7^#IG(1umgk^C#VOzv*1dl+f0YhsgUo#+RF|#L5Zn(r1ld-c(@QGPn z>ubZV#*{2IM?#57jgcBDd~rd~#Hw~nT#_-OsCezq_oslYsyvUMnAq&nd01`eTZG;n zN=Csy(TzBZpX6J&M%83$-y?fLFYps9jFrdap7yl$T#ylGz6Qn)NH{9z)H=ceyqAo)acNkXR}RR|TZp*O`@YaT0EY3j;7wtD6(P<(dJSLF>s zOaXj6kD`Xm41ioG(KYd~YJT=qLd1reKPJq89&@sqhj>Nb+?!m%N*W}C1{*k~o~5*4 zE!gy@G&R|VSZ=AkX82C8gy?;x%Db~jlb#2MKFa$6E(Gm*U z|3eKf%ok3f=}KY@_%zh?RAismU-WoFzb<>1J#FNVTk&R;>hVbCb#eKHFI$Vfmdf(I zNI`CqI^(0sa@pY7fP!#wFOP%0qau(StHOy~%oEi$cUUSDb!4t~eI zI+{U%q|QV;YNj%v`-v=g%o+(D)1OtGzusYNTwk&~X^2Y$t2szPvk!sqeGzq0l{n*a zto~poG`6m~e>STgUStTbgItBsEHTW-hcc&AA>A9kgn$7CVB8T+wxn9YyXovM(WAgF zo6C#Y&zB!L`$S2ViA|3>ga`?fZ!UfeHfBKLkk#Ulxq*D}@WJ3`Ax!sz*^|w~J|XqW zmFDB9{}|YNXN}^J1N@aXg=%ejmDy6!{UD(FaDGyxkZSMS66P|FQ{5YdHzNAL>4DYt zH3&(8YCAV=U!C|O0#+wn{W5N)5hNuqRGC~=nRUM?x&R+{Qy{*-+V<%|{YEOCm4WNS z3#%DVBH<&NYEelVjc=VLbohlwL7-Z{rs3dw(qxJqbnVAQ{S=aH)ckLX=0u1xE5b3o z#5fHm3x>sxHTBfA`uB~E?it{+GGNri=rWn}**r=-Dmf+a%y@>`l7qRW9h3MVqwt(8 z<<}Z(GDX`mlo(bR=?q@O&8J(lLBrEX8?r&};LfVA$IwTP!ROJ=8S(o{q$J{*Vhc^S ztA{b(a&@{eA6RZPAW_;)w>x(To--_c_En|>3*YY#hti83p4jSZuPkuq|_nc;p0!^z`}>`5r`dYNgd$ zb0>7t2O44SVe#T+EL636u!ciPu){ayf>9hcWH#Wum^gSLqqy=VniApuLm(|T5BdzB z?4<>U&DM1$Qj4(HX%Lc(>etlOwA1bAKdD2mIkGztA)dHMgh(R#fBLM`;0gOxgzQH6 zbC#2u)nvj&KB2jJk5-M?#QAqlm~At3skRKi>rFevTtTT}rqxQnW}k1^vv&lxG^8#O zn!d!8(raS~IWqpkeGWe&AXGH*g$R>cj<4uE{Ug)U=8v{6yAe2h?!PvPAaK8T2bJ{Y z?qcQ27M*p$kX$-)A&Eyk9fHxK2Rlx@j>_T!yC)SQh96zmpXm)T;uWo+0B*qNG+GO> zYRv4XtCFP326l|EWDN5qh8-i3=RSRXrY8Ur7eMytuZs=FOJkEfZ(l1DQ*n&)FICV|B6QtpSIP z-5hYUi;sQnmJd<-?&K}{feG9>0+nX9i{AhHLd>@tiJdt*=OI-Wf=?NPe$>15qowvg zqRPcTw?u)nF-F*eM7T!$0De6PJ0GL3Q7g&P$ZYy%UY})wHRe@|CUXQF%NsT$a|k+| zO&m;6!Q)9;jEKPn-)ZgAIs5aexzfo8aCkG33IS!@@x)r~FuD@pz*-HV{A&UGICQ+FAquVqATBf)H>4~*Q_9c0;GaG$ z%8NrP6%peC*i{&~@)8VB3Bzy`U6z7|WC`(f8F4X?VVtitMF7+zHWAybUcqhfs=3dJ5a? z;N-lWcURSx_@t}okLP_kX%7~7{NBAidKpCc#%aY04EH$j zyxMhM>~B^bZBE+jX3(0-+;e#4TLz{$<(ap3VCc#h;CJZysR5!gp2#+67jCh`r$@R~ z*Cx)eO6tr&U8WU3K-HVOj(&WzWJn)7Htfcu0v+%=7}@O(ym6jAemGf^c&ik98n&Al zPwH-e3K`TreA?R`NFq($&mGZs6*{;~g)%$19e+-v(J@+K|DM`N#)izo$;K#$v8fq{ zf3Ofb^(r(Ui0h4}q~Uq5t^LtbMBiOrXvX*c?wc+Zj*-OCAeB1zv?a+;dh|Q+=;{|H zOe#Pf;pfZC<}ODgl zD@`tEok5w`l|M2E`5QlB_}WZtIkqKnhFyo4&e|=1VY}CNjdWVA7HnT71*=HhyfJ24 zr?4FedbM1UxLrW$jWO*4hFpGZ7`oktM(vj!6XP8y1eX};)snFyi8k7cqDY^Ek6*v< z%(7CzIc*8D!ng(!EcnTCqLoDSi(KE-aoMuF$8UVAz^IO;UTUf&i1B79)jkpq65m&o zf6BV519Ss}ONqZ8e(GJ~x9H2Y|3Rz&C%p9^wE7?M){9hsk?Jo}{Y9$3Nc9(~{vy?1 zr230gf061hQr-D4OZ7kEmH*@%{7tIUvM{jz6PgN5T1h+plg`24SNT&oB~~(GiU;9i zNxvdnGaNfwbQ+1c<=RNd;Rvib2;|o@}7nvqd%Me&32oS1QFg8sH3Dcu|d9b*6B|jiypm*kXoInAS`VtLc5YdUEgKbAZ z_w0L78g9DQZyC04m1$M9=L-qlq^Ry&JJGD*Qa(1;ox#`ccQ1S`7!;|s`xKU%6yJQ1 z>uyIm6xlC}v2iNuy#4u;*)Ay;xf80{16Rf9ad6(Mn%9!wdFy%X`K-(CwA{o+VxQ^Q zKqX^>;hrKdnmUK2*5u7}=8=ZJK{tmfpP(Mkfm8Dm6$jpV zxcp4Xd8kuF9l0=is1iqeYh!*b0Y6mJpdfK;g@Zj*cm z%xcXdgRYp))7a!3_3@1-yw{r6(W}2vpFg(epQL|3+w))3zu&j%pQL~PQ0=8%U)uHG zwCgWO>3}lVC=EdLf5t=j`}^SE+VwvG))3lf4|DUuF{(k9yj<0Sop?DevJY`C0IW7j=dg=tc;u{D^h(ZyWl$y$_qx5NR zn_+^Q*IFf-@AEdJvMBH$ck;t zDv$V3Pybd0Nf?vY!el=Xto3#ERSQEnZU3QT86=5`7>B*4>Ih!@!j{YA)8!(~xv%El zCc~(1%9S;a=V5QTECTyV{k+;7t6UCdz{hppydnW7YkrkxS|7^i_mP#TgEql;-nD1XJt zua{IZka~-_pCkKp!xcVPgq&^0jgRSCUk%`^b5aS^XDo!qNNi@lxE^O>le>q4(fiSF zc0NREO(#k*j}geV%mIY;f2Bu&$xKztHLKtPD|blnc5F}R?rI`#PRz|qLa=$ zG8+vjbTnWYRQ&uGV12pMH}NUyU!Vh#OijQg;@o)0{Z=zDwNqk7=>n0G$&G5j_)m-W z%T#|1s(-dW-tAROh?P-D*Ah99%g6;^IK;uf<;iQ6<|Q+GdtWYh@Arpf|* zT7>nY_IG@h{z9<7>0L%rw%SSgOx$t*`83%#71dtyrBy5NP7(X42Z6n~9tV-e z2Y$y$ z6BfIa+(!uL&r^^YZF<23s_NY8uTPgC(#@d0HUyn72&>`z5Jp05zSAMAf?NDD!8Ggp zp!E%H3<0X_0AshdP`^?NLl~VU;tZuLEk0|p$;`MaUq`|qvMkJ_hrFB+l0a!XR(?J! z<-1swzRX7|+ELKxv9ATy#xlz&-=blmK-L>dq6XQK{ZFJP3cet;MLwQKTMpt5hXIGlX&J)qYhs8V059{w94@$k{@~3 z&l7ndZLq>}P;v!!SG3+t_WSCe z$TY^Csa0X`XiS=inTb)r-cK8IU>1f9hzkuLUi!R)&5$dk;vkJ>Ks%x_Xa}hk;Bmnd z#fr|{B^He>N|{*6>WMntb-&@d;OD;55+Tjxspj>G@U9Y?!?WZb5e$qG#rDbL1xv$g zu+}!m9q36$%xgGm+AAlHY>g-#N74tXglp$PTZ>EZsw&;qEzlJSGG~#> z{8sfVxv+cOUF9hM3@%+_~>2`gfP4&%)3=+Vs$!I5FK8?zpgYC8}Ur zuWe+OI<)YGvLMkv9qzrkn4%O86QFTfJ<7d@#^Z$DtseZwkH;x+zrYrW*!~+`<>bn? zS#ZUaOk2*38wzS@_W8^s&!45|3vb3z80`?-j5c`hqc3{mzoRO%iOvX~mH~s&u%QCC zSLtgm7i#RSfo2X%#4Y9P<6n%@icihgBP{BjEj`dlMnKlJ3^$q?o=q5c8WtL*WFQis zMVaF_+7yRF$_Gm7Z=^iG=NLh%qafKeHyM$Mj8}ZtI=> z>Jw(b<1n+^;1~^6dq>ORtMS0;KnF2x2pZgz zWiOj(^@<+(GbOHLAmq0r;LgDc6^$RK1J?n7)m36gflfrQgfbBV-S&96*PJC*3hAb) zW5`w|Q*NEiXsr-5_e!FU%DlG@bzUA;oQeD=Uj-WETq%1a{3;FY)9W1{n0^fWoPs?I zHt23z6|JW1#frTI3yiufAK4}g6t)AeEii6J_GX$m?TX3lg7B-7mZe-6asUKR!SDi);<{`eO(ns*VMGU@4(ht z$zdG~Oiv_akeI_HBG>c-yn9x^tr7gb1~3p-dL!K+Rwyge=%MTmxY*o#BWl8H^z$P4 zO=8JD8wkf;_}}xEo51K;)K?q55vA(@&{ZRQdHKdyNb5cF%F2EaYXb2G>#MD2> zAz{9*XaE=pP0=h2_=f9J6vYZP#N>ffMqrD^5ur4)4;4gyMP4XSx~(psSJ+i*jkUxyn;wP@Q=_ z$Rnwvu)sARV(V)qRI_A@V&V=r<`vmfh5#GIkPq<7;zz1Vl|=O$;~JE```f)nBPrU3{)7Nd@ZcWv0)dZAwNYsfe@iqiXm@^!w@4uWPxPP0on8%V@W79 zkeeYViHk#$t0-x}1X6t0HO$v=R*|&mr{yE{&Zn49xFK^X0{V+@UH(=|Ox}!fI?QP} z@zla$F?x!YdY8tmZ7foMs(@$Pl6g*~Ir~>{rAzgVeXMK)U8FG?9J@%R7C>yy@pgOC zZs)7aR$|P~?Pkzbt6cguvg6T*@U=7#dteWQ(gVL6i{xuc-+B?Z%_mvB_dhxxUB9`# zLTe)h!*x$DiBzg0WR92}zi0JFSDtx&Nj>l$O1J%*bc67lBdOBnylvHekr!xrgC($k zt@h0;=ObvVf?cPaQ(YV8<0oTGp2w+m-3c${u-)ZRc=+!9Emykq^Rwb<|H${az?EK% zZSL0<8#go8{S()otc|I>2Jspi@Ob&+ESQSjB_*s3-^82QPCm~FIVtHCV#V8>>&&2x z7d#vex>u@)TLx55Tvs^WOg%KTE5jwiht62{NT_j2eb4WfV@HEe1mIOJ6_Adjlji1| z1H*;}A5GY)CzrdHB_M~X#PDKwPP~KGwGu_WP)22vYM|`8-;jRB>a`Wzj z0P+o&Z!ojd`SyWK=p3&?rznp=4#97DHKBX>-8aKN-VVzt8!z_(x59aF4)YFdVl+oK zm%C)*nIg!-)n%4>Lm7I(a>G~7g+_HSM%}LR1cztwPWx$qj)!dZDO)%75$-{BFAp$$ z#;Z6Lj>rFmS3`d%)&C@3{rMRCFQob(@#>3Ge^Kh~FG~GIslO=o7p4B9)L)ePi&B44 z>Mu(DuPXIF;;TPLSLx~KY5v*x$F>aXd-a#->aQw)5?5I+(ja^cOwe`}cAEPL>@uHc zg>N)-xCQZH8O_3pl`n#?o~L;PQ5PRQ(@_;Htqn7Rpad2Pe*iKkGV+{1Bqj*0!I7Qt zt-kO#9AsI?5lp>AL=Y$>xgL=os^&Dr!4xQAEK;2JhWdJxrB!jZLJkQ?5;`%OI$UUF zb#`S}c9wUTcNC`jDCLFmaP@&*sr<=LvWY*+9VP-5bnt8mX8IJ!)b9$H6yI+5>wWNK zkKo&ljO_YY$y63*_LRA#`1!`IUv(8(yj}V^q7{A9={cgcups+zEPQ4qN>42*g;n|} zt&;tG+DBuo5_~cJ4#Her$J)SCrE-U=IC~I#5R)Q@8x`X7XX<+oneR-RF0DmzCOKN= z^ol~%)3zU&h)g{1L{wJ|COyBl{BXKlil4yttE8>#`<`)ri=Tn-POX-eqFJNK?F-UK z6GZDv=NDjL1>Rsz<$8r>=3IshJGLJH^4%=uutTaxd*5t_I7LDFltJWHKEwCmofL`3 zBmlDJK0{WMNl>X;;#{Nvo-P%5L2aeB$=x%mH3m~z{WO? z16xfiQ+E^ilboAf#PlY&dnP9?hxYCPZvF#Z&;qmTuR==9m8t=IiChrQpjLMX(Ws~V z;;C9E+$ZeUoKIF>|7(xsuLk=Yw)#hs^!s-GbCmTTtG%@COWXd3w*7@H_lsO&|C*ik z9~;I8YN%)o6svaMl?61mAP6xP+T zyTd6IKUlUcoRHZ~Q0q;urn2V=y&``c%Wljv3Jr0lg!T5UiCvJr>jng-YIVFIJLJkO`*d`-l z9ZV1A_D;{D9Z~ou?Uw{IVSH_$NOCw5KCXZegVVaG(sx%t!Ay-Nh=j}#yu`>059~rP zKQ)s*0y7YS-}Laq#JgUl{mM)26ZlwWS_9@vW?VSwK%f_AzQOyqelzq!!5~mmVX2ZOl`JbQ00{HK1W1A~V?pM=$w3+XUGC*6b z(Kbi-C(WcSh?UWKEPYrN@~}sDo6mUoN-bHeVHNf@CA!&gD|CiI4!P8&1p4B`Z17K) zEo*A=3Za*wF}h@2c6fAMmxE*tmtBU|;jEDZ2+4_!(vfF#r*o0zLxR9zoo=QGUmEGK^~Bdi|z zoxMSe;O8^)00dh>57Bsy;{9}DaR`O4NSlNxH(?$v-?U1Vc@*@$z&ia+ul+!0%K!7gva6iY6`I)z-@XRCs z%xvvKJ-yfCi6me4X1)RSK-p-ddgiUaWw!p}t<@WH%xM~K;zZB9^|g_`9miKkc?bMx zaA(|6&8h4~jv1@uU9cuA|BCfe-XzD_CDi^p(I`Jkep(YtIcWk2qxGZ zyE)T96W~SUh*jtDF$@LK05%9O<63f03WXzytpgGFgJj|UvDUWX)afr)3f1d-5wIRx7ruA{h8TH z^2}S8o_Q;dq-EOtDgSp~yGHOrsC%IIGwM~{*vx3wLdb%f|0Hh0Zx9yqyj+u}3Ut+kB28C_3^wez{pyf4W&yEx_*HSP4XN*!^^~s^f)x z2e?^Rez{qDm!I9N?AhD3Clz~x)8W<_kR#P<)@4*QV~xpD@4>9C-u~uhwfHw~)^FxL zcmOx+)FOblGQS7#R`ApQ0zwf$lCDQvtOpdle(&T8e6%0!pxqA~VjUMyuKmc!t9>R*gomLq&721g0vWQlx`3@@jNHN4EMw?jCA9Z?~S8?q_l6$9l-2y5RLx;XbqS(2EHi-~m zCSJ8mpR6^EA76UL$HpD|O6$Ghs05qX)*%uFwZ4y3cutykPCAi?HhIctwWhM60612S zA_x80b>m$T+!M!T7Pd9}y);^QeU?5}I*5>!yc`;w*bDH)?g}^521iBM#SbtlRbd~5 zA0pG99j)ksNS^_YR+5{{T%5RRzZgfENqDh7-a-FXBRI-0e3w9$z*N{m?^0nzBy zB+82kl?5c}9sJ@Sb0j++xm-_HY>}VstZ-jMf3vgN^~ttC0Ny{3!-vtH?W`6fx}qpO zJle9NA*nw9HCN;L=&jMJyCW;H`v_K1(F6dV=nhPUM`)@V=wMj=~q=2T!2nPTNzBge!E7 zYBKfosSqCiR@)2ovIsO(T@GZ7L;Avr!X+8I-^}K6So0;au793Ery)2LGw3S{ddTebc4=s=F27l9%kW)6`T* zIce<$#fPKrN58^TowV!>LadRtFl__?}-V%M|DKUQa3U2`;RU1oui)+mRmsTGHR zrVu*$swCh0+0VKYx@~HIG$OS5u&^!dw7IUkPkD?^Ve|}KB`ga@E8m3Py)L_D$)E&Y z>$~|52yAskn;S3D!J=DwP{B_h!K%znO*hBJhq#}(DiQZ?!W|OQXiH&d-po4r#;OpH zNA;FG@ooS9kTng!*n0LjIK*>UkRn@k89bC0C(Y<*_q}K+?Su3z<6cp>p1;j7Z?5~B_mA}V)g^S8>ES>eQzHU5Jy!US-mkHOYT{N_ zOi?wB5f_OX@H~89_`;`_~H5GSIU8^KeZ+-=GOo zK$&8|x59r@?$2N`gON(802+jV^|4hvIb10O3Nz*bF-wHbUMX;@H@uzTAM!&pvd%e(VDTtqxhJN-VOY8q>9jI*DuMD$ND_k5q{_*671GQ?4 zO;*!nVfn%^`=jE*WIgiVXvQDU73+U696)|LOgEads!Y6SutSEsL7|u3swTuf7^wFK9QL;E1 zbg}yCA#WM7``bFq;22D%Sqe|ouk`H0J_@U}(@lT3=>A&&n}FLfdH~5n1dy!fWB3af z+^_58&mb)mt8)Q_N8EQ$I*3{gSnhbygj@Ohi#*Rnix&mlEwZPjt>P2zy{neEbmbA!Xu6a13x5%%@Hz#N->qH`%8rr%d6@ zMcCQm+?klS-+Jk|yjtw5-IMzf1*gWBW$cfqj8eEX-wzLYx5@N4J`W*mt^o`o6f{zi zml0YM9zS;uRt97}s?q_;*rJ5{Hw5DQ1RvW;o)6Ws4!Z zdvoJ{WV73YA=;Gh#mAYPce3@7!_WDwP5}SlA=tF>_N`DC%EK5Co+U2K(W;FHYlY>I zaQ+_J{UO74^PnzQa?#M5F4LVIPxu?ql$cxGwZ`f+`zG;nB~zl#CLr5aBSqxP*169! z2n`*&J11r0ziVU7p8CV8q5YgeNcVFFp-uAyQ;!mA9Wsr77Fs-L@V*04z&x_lZ1#h; z@pszn2ohcn>l8OjA@KLlJj)cov$h5$wO4#u)%v|thWzayu$$N8(9*iV?ih2Nv5gwF zdC>t?-a?*jIJPL8Jo7A0zzo71?Duem&BKD5z_apy@+>*$ARFAE*)R_rRKNXv z?MQPI1jt>DRRGTt^rwVPHi6+t;&Pxd3%yM4^$$$}>taD}tt}3=?qiVxPZcPA^HoHE zxVj~UlciqH2Q)7M)Igf2SUO4%l4t{vw-EVm*?VrD(+%M#&T4}X)M3W*ev>l~BK2Ug zn}2h>Z0*>piUm~-9;?B&dAK=PS6vJmOxba6eVekiyi=5GfIHE&Zb~|E#`2Lv)_ZY7 z5jECHcXH>^?@{sf1giBDKTix1&7Q3NHmV%W;IepIUKairZ6S(CB~)37{*vME!S6~@ zvuV_v<-{kIYw+UglbDczc|CGX1pItbi7hlub`9^4`1_7aTNbC`AC|nblf5fO&~zF> zd@-LV4^|*7^GVE#fx?n&?{)Z1eOv{Di&ur~^>yZVj`_xT*cYpYn3zn`qZd^GeNuy# zZj4;MC*HOMqFb}yBd<~&lp?!A0)c}ZQf)b1|7l93LOt`bcatoEq|*i3hSrT~CqMM)Dc8|P;Jq*&z9+m;N8 zZ*pAHjk~C^+W{0y_j&T*c15msc-wO(Ye-0`8pzVod;f=sdcuKhTL8s+hk|n%ECv0G zVhw_{Y#-Tkq&ian%4D_6#s29U{4JA}Gd2D7+RAspbc=lBR>oLDg9^^l+ zThXTixCU9iHaJs~3r1Q=OOh=%SxY_a3FG0}aSzffM%-X>8)DOtdTO$Kt)( zwzvd;)q7iVCwdqUiFJxJC1D6cp?#g1< zwOMenl~_)UCLUy(;sBLBHqcjK3({@S{jmH)A6phAyq+SteGY$|hG5W80F;H>N4!ZG z#iopu0-o46%3AVS1acAl+HD@#CZ_VokE%|b7|Sc z(i75aAE`U3w8*)=K7uxY(l};2&1RF~kr~HVTXfUr}vm=Hb@V_$7Fb z)4{3kh~V--Qi9_Ub{9{+B4?mXYBDFVz{iYgwdGFYz)#2?8khO;)bsX!H|JG3Nxdfz z>2AF-uU%ji3c=fD{j`}7ioMJqZdTvwM>Oscj|kJ<3AsUrUW;ReZ{Rdam*H7E;$#l9 zKKtc>N_FU^RxqhSxhTBvkE zqWF%MsyePA1ptyz0Kuq5Di`rkrMD>`NOT-YXu*tabwt7qtrRSXd0T2ght76rPJw%mjPTawcXpm6w~Lk8!x$$inoib>8JQ>Uja3QsIg zlnd>1P#xv9CCFVn?l6}5@&o|kt}>><+NWrMwAH);B2ysgLIWk5vKSgwQHdh#&orPN zrh?861syBv;^NyyE>u3^c@Z?3AD^L>$8XR|e~hF8KG$$&rW~D{HIP1UhAHoTvXE!n z!uRY*ci=^DrEvB2eJovtbtGM~ug={RT0Z56^;;Q~XKSD`3Nc~pWJ@2*-%YZfKsTOx z=CSN%@N{6vm-J`CW}s;L&k(j^K1KGOXu~|xuW8|({9wpB(LPu95{rqi6|M349!bz5 zRjlRY#itd6e>qHzGTP;7Y(t+;naCWv4xa$* z&uN!1yuNH(wRhFlZf7_(yss}?GY1G^1+jq->JA;eSq^lN)sptakhWBsN@Z35TyiMB zYgq@vq{WVo{(6rE>|n8-tF1A~+g#nC=PuC@h#gx~3NT~P)qQ)UKlY)d1kdVi_x6y= zGS%E@(qc_p#>z;V9%zEo?#F{}-6jxkv)#qi-rFG+&CbFAlL6~0BOhlrtDcYoz7)ME zPx$8{gVcZ_gJg#eced;5(gDXSWKtjAAA`OnM`!RNw;kL7&?{n(Y}>(3z!ns@;zMW% zPK8GNfmjEhC#jk3ACB3UgPMUuZ=)(=Qkf?V}Et zSKa%sP9Bq@!ZjrlHhXKn8uE`4?WJ%papiL529I)vtPPVfv~LFD440(#nzoi}8M9uY z&H;6Xed2?=xBZ?r<_X5s_-R=}NhVNZSQKKIa)f05{aLZbf> zq5M_c#LUV__jh{r>r?qUCPTF4-#mkV6*v7X_h*nvX{_Wwng>l4?Dw$;R4&*WeU$43 z7d0ZHa>l8~-`n|P41gDYLi5Q#HyRN01B2w~+MAlm_qC8%?48mdvegX`HwcGc9 z*n8`sEEl~E7o-8?$*FSinrVca60hEI=rrr-zV^l*YPB>Kd<%f zRzHK++_A1xpWXU)J*c@oXZHCbn$=GUuEOSilzFP3oCBu&L(GMfwr2b5y>2ZW^QGSE zW0ck$;r(5L-c!i#EB>j?oevv)n7mB7~qY`-du zWT_4b2$F*({KGAc zy&Xn0oA(Gu%p0&?1Lkp?o}pq^#~k|4LNaolHzxQ)n1zm1VJZ|fbqZ6$RInHD{7J(OXg&5!xO!- z8NzU5XQQg-F#7@n`trVXEIFl?3bMsZhrZ9O22DpiisHSTezNan1=y?3; z!aV-(2;c2J{W;rU>iibw3U7O!!~=2!%( z3&O%FOl>VKb#-+eM?R;%n#I0=o2fa2=Bx8kn4S(JkFsbRlA9aChRK^t9AOB`e3S9M z{7B?AKSJ4H@F(_8D4nKPQn+#|(nF@E4?IrwBiDNNHjCTdK>7@InI?5G5YKa8CbTmv zq1G*LZZRG$l5C!wHzaC8xN+VP@SUU47_LV+Pkl?sS@+7pCH@mj@MkHjfCSPgjeI0G zqdzcuiJB%%D?;0EaxU8g=Iq}&Ul1sJ6^MLm33hIdA`M3q47=RkV}1!WoRU*ORGOM=RrJgF}Zs+XJo8oa0^uxTP40jRrhSi#9OG!a`PbG z`xsS9?OZIPoD8H1LgV6i59Z!#f~>38t+M)ut&P4Kns68^6tK{H7sk+WIa!B&jiN@q zaEvXAt}kkHW84lXA2aUe0FsVX zsMJ&Pf+3IJTT#dk-yrVo9}f>*6ORAJ62$+tCHMto3GRaHa0lDu)*U%#bN*7wiX`z` z+ll1aV=e*)z!FUPqa{cRj9w<3=C@Yf^Jf_)v%4L=WO3>IUdnnqdKm|lvZf>|eILD? zobhCGdWnHkrPnw1AT5V=A+DvM*l@ja2REV66o)PTLv%^- zlNB{c(&g8`qN=BuOT4H>xEGF(5pxo~`AXA;NC;kCVOmjOp_Q_W<~-QbJD+YTWSlg{ z!eBB(hh2+bFH)29CGWJM11!Psqn91uj)rRz|7Y~l9~iwPC*pxViu;7*7|HiRf;45S zwQX_D8t3INqnDMI2{*Gy#^VLq;Ve&CzWA}#@({gvl>hK;_dQ;eTq~(ri&@JOc68a< zeeJ|dl*!03&!Dl8Cw4M1Z5s}ZtreOvwfA;B5G8FPp&4K2@IHr^oormi$AfQ0G%88Tfk>=>vq6J!kPf-JXNm#Y~Pfjyef(uAN82_3EL_7a=Zl|QCGVVPs$lRA!ZSn4Ul zy~V1iKd|aY#trkvFJSuRJKwRY&g@JlHx;Jw%)7duSalPGRbOrcSan@iU`G~5N-LC# zYhdeC(s@YB65Pz&0Zd(w$*lvQ3wyJ~}h=c-ye4PI0o#0z7DCEVNf4|8@lYkqRoZ`1kqs2z&WS*s_) zEkxlkUvk7Zsgo#v;ONl1<*IZu>z@*}(QC<>|`p_T_i3+WDQU#@fj#XOYT2y@%X#T2JCr zR<`_x`h7$b<^XgY_X2$e%|85&ndDF^Y0DO_mbe*iR;gNy%$o7R{76S%yp%+cyN14D z4Z~2LO%#Ups9hGyy!+T=2kltZkxvdXpzX`$+wDuSI!gjV>xcFO^I?59Z|n>ZF&ktg z7Pwb=l%d>cZ~7BX)8|}}MBu3EPidtOgrsp)3S)8-uOiH7|T{*;wNiBR9msh z?!AGhv;$KySf7UwgOPapu-(4?YtsZd2&?W=aJdV1V!twx|Bh9)jgy97BA_N90?L>LF{q=X zAPhNHc|JCeu|Ucp>xnRsS$)nGUo`c0p?_ZX7pkh+{P9nys`03&Ib4NVzGk%Vu(ZDP zjGiCRzDnO}C*;-878}#6P*VY!FHN}Mi}iBU1go5baxjXaNGOs~mN(d`Kfhp((cKmt zTkWHqv^HzdrEATEIPuxN${#9Vdwx4*yW)%5Hu^b_;;-tq@w4Va)CtQH4 zegjd}IRQap)q;zkRCW8!jf9)y5X=qko&t*Fiv&gP&%B@K!VL^935wFsRA6@_zP_4C z9U7+yygE4aE&DK+s1<7bvFD&`fur7{794ffdu?|CiKd<=WiGTcxMSP()W;C)nL=`h zzGD*(@aKAWH+f^(j5P&&MJ*d{PJkC|anIJ(=H{8&vicIS_)^`<@=NGwhnEg3(+aW8 ztMqFJw#Y~Uf^HYzGN(R1=oVLFuh->(`m(WS#;VJpo@s8(iMKn>be`0+> zIM;UJCQRWBvH&CX6Onkr((v6sxXHS~VkE<0wiqj!yd1RR#u~3WTrtya8nPv#dk^l7 z%i~9Iy3$$`cMbc(ma8F|ffS`KCK7RI+@9BWqy~Vh{+%GGI@4wYt~0;4H`HI3D$@Vq z<5e(!-OI9mr|(cTYM|fFNS^KZ?W=2L`yC>}Gt$u+!EtN#Asn@+2xk@-d%jbMpD&5O zzsC4=M*q7|^ ze-2f-AFy)#4ytNAOWZ&HhfwwQaes|c^@onIpmuf1sh+IbE-Ci#k%qeY*elczGztlW zgIBrvx?y5daPN@6$aVu?i)rg^b5+X&_j*|oDeG}P_@*l~5sYDdavO}G4BQcdUEE$C zHV{fnC~fM#`g#sY0L>srHkfTXm8mL?%rm-7*cA#-dve7v!`|q#WjR< z$m*z0QSZ~1kgH%;`h}KspEBNz=JOXuiO@)!gcPJ{T~JJOQZLj!$8zVFmjxPG`}|5c zK#i;<)0{NlTmo1StmYNOpR+0Ol@PNy zv|BclqGzf==k6Q&C|8-N`fz!(af*8=Lu+bW?~MypPdP4p%RyTWdH(SE^CQ`KepECG)*{e$=V=rgPxS%}X7tv-=cthmX_zZYD{Xy}X(6vZ4YB(*0|> zptLKo>YYQy3LX6Sbsq|+&2fxAOnd%7^9=7nnfS0Bf0!2k;Gob^5)5N%1@9Mb^Rp2r zFW${?c{PO694W;Xjj;S05}DeurR>#mdlb%_dcx7`q}6)~C*x(GjtaXpb%`oc#)I*6 zCLzv-FWW>@E?mxE?6~fD_`)^$P3KA?k1wmlYT>JtA@(r4!7qo`;|pixixLC0RsK5i zGW3$@rd;>uOUpmr?cen&Zx8LyY3r}=_wUly-#qs2j_>aH-{0|nj$wauaQ`I?yPn{c z3L3?H{tqzh?dSi0hG8uUn^KmvVk${>z)2~1Ey}{eh>3}(6hf1aTy(dn?blZEkG7!s zZR`X>6)TZMxZK2a2|#77WfY;TuWLVjLZLlp=;LRW9>KwOyqcvnWS65A%FXV$TnLs+ zp>8W~LS{op6eiBK!76k0T-q~7ZxR*SiYP7{9}4y<{883AacOt7E|C_MF7wr5+&m!z zCc(&6uax~QbSb0hLGuUujJfR%s8e2{;rpx#bqiaazH6ggoK15wqDd zH`pj4)^YKCipf~Nkv|m8To}>DD^}qWRd*L;JDL~(+}2v#GS_gxZH*k#Rympwu){my|fVNilZ}AEv zKwB$w36eu3skEziRtJ<@t-~u>i;XH5Sbhz~6_?8SPCz1VEiO9b` zLGOc+w;Sw#*X+0YAWdxBQZSac4(`oU7NboZMU{B#KE3B$NuRt`;`Hi_Fs&9Duo>0? zmb(ub$=ihAAFEmAWOM~-LNU7T9}Mx;(k}d>w=W!~7JNa9E=iXVzlbn5PZ$Df%ye`q z9`IQcZl^I{Z*WIFxyQ6gYjwf~gU(UFlF%Gk=3!*MZUQRY27Wg0NXX zAuP#nA?!X@ac=?az3%(u5p;F3BYaXZh&g+-olYd0Y{&bBII>(&E(Rh#g4{djq_dI? zWCo^zGSBB*j%s`~o|X?XP-%@)JV8h$cQ#kUSO~O9g69mK=?V zBTR3Kr)nx`JL*87L?}34jy=Sz0m_z=?^-_4)vDJr2V$>Gp5`IrYVBd)ShmE=Ha~xo zjAO*vYQ>!)K&d2DBa}1%PYD4gZ4bIPja8K&7nn@5?0(8O z*|k@2JC$iRu@0X?6$UO9+MFgf9Azx)HC0*XDk35@-}+{(MNmz&z@WVTD^c7hO*{B9 zzpx&P5V1$HPERRAK--w6c*A=0R8om~lf$!(z&56f`56;v8#C1uw2dj|^&Z&9R42CN z?-N6zjI02cy`^KzeRl)#QX)X|fC}ezYW8C^>*_OS= z#;7Y`+Go`kK@p=6qFUK*1KDa?vbiBYAWSIe`!r_lu;ih=#T%@&JkglCVXc>MR-JCA zF}dPq`rIJqkYd^*ygAO9nDbtmKYlTTK5tn`y7j6aO$ZCPBYN20`2$7!lQhk5MrIVU zSo4fKRGAxDE~J_|2q?kwIhKJCx_T)y-gXvVP6Pe+wxpgeF3Mc!;HeVqbF1z{J$U{y zX3gTQ>jL^n4O7mM6@^^)pBZN^rm4M7nH_jWGgWQ9d$lYBq%lII5l zx?AFmaGj5r((2s>M3RKim@dYKjr$bJ2yBpBjtgweJb-$VC*M(CPboR7b^h962$xhV>$jgj73^p`Uzv_z5i1fD=QZ1ATzEuF+`e6 zUlIDkmSCHp$0tLZD-@ZV@S*XZ#46C*stjFgMoevo(#0z=DLBk7b2ZXqEBBbRz7KUkO(mc$l{vMB>nu=X4}hy z7QeoWGSQ?=uZ}>S4#~j=sj(X66|#>rALPZTKBvwI&-Wt*5Uenv==%tb3d#!682X?9 zD3ki9f(0BOE1^}wA#Fie7PN@DXJpNyT00E?h>nHoKI1%Lm}R%d zY-Y_fzPAmnttONYvMoQfB7zm%UvNmf=Muoo*x_d<$mo@?EWw?AYrFoeXf=rSwuzW6 ztUZrjp~ki@D4)(6rHt$zj7_vS3TM{C-^)*-=hYS|l-3eP>@YV;bIohapR4m=9rQsF zRFh)$-gLlj9F#O}re7Yrh+a(cPz85WEZXtm6!gP>Rv~HCd6UV{yY6#?czS}!D=0@p zV3G1QOr@0db`q1;S6%fR{*l5uXcF^sb%9~)gevxS64S;JiMhlQ%(rU(%*C+;zBqNQ z3N(rNi1=C$SMZC9aS6^WbLXM^?uCo-!77w2>;#xnHdx+ai`K-N)Efmji$Kus)#=kX_d&<3ljc~H>ym3Jq$mE`)YRG6NewNLVvy@v1-P!P z=78&(@2?MXT_xszewXxvr5D`aDg<_itTSmQCxon|#ym zfa~g>iW;U9ik*3u_1$&#C$=J1A#N320~gyXx}Pv}Xdc?}ZQHeGa-6w5Dd4rar=GYx zDU5rKHB*kjy~JrbD{7hUw)ZO(5Jwz@C<}o*-~|mC`}}RBN+;GPo>j8Ey!MAXYl>`J zwl^7r?`K}v&Ax3QxC8|518 z=WFNhuQ`65+5aw<{a2a&A7RPDBb_YM;f4B=qHi)qqOq9wh(5(MakmUiTm{ z1XoUcFp+XFVz9K$cMV=12#%f7wAL@}q^iG~RZb;n7veCJ45`<8rqF5a`l>%Ny_t|a zuM$79q05bLkc>A!?neQB_}`2obL|4$Gr==1+8h}FVs^B2?gsl==={RXbOf109UrC(Gy>ZewsjxoQ z!?oT6=Q`MP#VtI+iI{u@<>mlrJ5W6l+`X`0rDX&t*0tjrn5D~ZAuCimg+Uz$aqksykyD7JeUz3Z-R9Ex(cBA{l@Ynl~&eo4fkxby?EYJ7*R6yzHi z`_Myd?9jSmvwdORs38GiRi^dw$*9`r;5|ci$>|M1fpF>cz*1nE>3Sht?MV-t6fyHQ zD;vop@Ac!6T=3bPtJxcims?~$tczKWKIoiy0{GV!aXq2)7CY78ra~>3U9*Vg0g~@N zS$U^n0z;Qe%H7SVuAE4WpUH8OmDjlPU8v}{WZtDmu_*08wSc+b^nz()tHw;k2C6Jm6+OvdVK{VkZB4-FA`I`rpy)!Qy5RyRf~eHl43)t zOCZUci*K=g2B2F4_n~C~j}FgRwzIgj_PnklWbfb+S1oCd2UOShk!Ya^-<}Kl#Laky zo-9+aSPsO6JQozpnSS6CGGncbAfJ)6oq$#!RF+hh77PqxuE^dN2-D51ZhV6S1~JC~ z)wO+MmG`IWD%G2;d*2*@tle4=JY%%&hVdeB#y9-YO1Ln^aX^7^=To3ScoirRjuUvh z*FA$GGHX&YQTd(&d#kCTjF=Qzivw-IPNRn`nI&|@bDfdJ29~y_fkVLia(k5OEY2T}6K(hIt z0^vNNn&3%<>cg$PBDHNBi8o78Wm3zNULn2`tjC|XT56MR324d*Xle+z{w-^zE$O7DS8_Qat4g*|s} zkH|cwgx*kwNiXZeE{iGcMp9C0>vYY{7Qq$qVo5P=HbXE#L}TeA$~ZAry@*t9QL{2R z!2pU@bGzgv zh{`crDI_(t;~?erN!oS)CS$^_^6K5WAal1Eet$=oNlKRW5Xmec@DVt_S*@)H-yL)3iktWqWTj&6 zF*1KF`+5EcWL>z0tZi@rWPSVUgajW1Syh+kC#pvFUraWjB31bXI4R`F2STJiPnqzx zlMQtm`}V?lz{`a%4<9aIkUYZ5PGH>tsed1UtinCUCH|8Z4f0RNHqoofZ1w@jN~D|G zrdVk+KYKA8#?Qa%9${R*bw~(6R?&Fa-GJ`aI0IbggYS^_4G6M69)9#SS0fZBK<}V& zPA2%ms}#!wi1?Xp>jG!*Bt?1pN|?X&)_QWFXOGaZB8rBtg}NLv(tk`<*>% zi(;lqH66N~C@)R@n8CG9i_g7p6amig&1Z0`dG94k5S*p_wrM=I@5@4w3&?widw#_f zNN1eZJg3pjT*t6wk%oP3-4wuPLf!*wDAp;~UBH$#pctbhWUMW9jFAqG@!I>j+10EU z#^VZ%My!|m&-Omdxm3)s%s-RD$ikz6#MiLZwe^nR6>IXuZiKFKWxP5^LQaF0#V@^H zPzcW&el^#^pndGZ-ZDt8G{zi26Y@4E%>duyz?FrsCq)9jy-Osn5|Y4s|J`@UN|_TO zfDJNUp8>{e3H&O^c%^FIGL>EZ%qnSEz<@1oyf`o8V%hJPDcZxm)JLTHT1MJAQB#y=P` zPPjog02M90G zEXc9kfG*(y1Q{ZrOPEI?l$gc&N0+cBIs7tGJK;m-Zc0#>F!aue4$o@~dWFoldFXTn zTG_og@Xl>Om#~qXD!kCUrxoAcC}-e1)7oHW;>*zieyVbr8NG9sSph<{Z$h-_Qd*E7 zDMv!*5TfuxX|Z@)bbHZ|R%F0qpbI#fiv0oQ$X?W>)nWmJE+xpB1?Z~bm?+nRwUQF8 zQq=AKr8QRqs5m&UlQoM4uZ`A7#lF#$qx34?MQ24>r zD0^@$#|ck)$&(?99l3UPA=kDN;n#g=9Eh_PB3pw$X!@!z2^64UpX&)g9P>Z~D`4DH z;0*g#MXM2?C<+W<;j$KBAdt7<6uX*deUp*PW9l#{4SNE$L z3{Ko{ue8EyOGQM2bupSa-Wy0^IBy`{Eu1*AeW-zXYrU#YLoDv;+q$2Ctk=lY&d8~i zBO_#x^=dlP9|Ksgn~VD3->uiB#9+AYPBlrudWHBhv1eQRA+}&YnuA#3*gRHXPTv3c zljiIMy?NgY%^3wNqp=e3;~A&)^AB-M;PaE`*G46^rCaptY9kzI?~f5t71lzY*cxg? zvKP-mT<)V3Ab8f|y*ATs)Os==xsV9cA=SIWW1V3ubeKyP%ix}2EATlLVyKA{We-+{Y&FU6wpsK$Ea-1<)j{@x4j72-GBO znLOwYecL1)`xa;tmi*o%j8ThFco5_X(vV}q#2(qBlAeDy=E-*&jbF$0zfD*FMO^2~f zyR?3n*6-5#U0T0O>vw7WF0DiVt+f81gH;~xKa>jRE@tbW{zL!u_Hlm=St$ViD`sbE z;=7#z!>){oI$;JEAN$8z#+Gjt1)D8HStM+PyjKXG(e*{uMg_*7Hd-kM|OIOsKn}iRZ(kweF7)ezktd?@7Wfc#*ZB z5V8@dxd+91!bV-B52b1*$Fz3MEdyS+-51@-reCja-4=4P8`>`}niQzWN1v%U;FjrhGw(d#KMfj~X;g>oWovu!~RG^IPy+aPcz*Xd#Li zP%a%%cQ|z%8%%wjmf{A!;P9#B_^`;6T<@S6xa$gj9bTFaRI()gm7_c|r4cG*?kT?xsqA69Pa`4a& zm2XXGyDSDD-*k*a>#ij8uR5FiNx3!b;Zn2u&%^sZA&S9ie>R?#(v*L4w5sBv^m1T`VE=Ojmp{%VYmW zZpo|Jq-9g|HAshSLsYaQjVO-+nGr}kVBj@EF~YE2;)evQlm$qzp|%19qTmA&yy+ca z)WhTM2j~Gon;ywcVmj!nAU>;No;J9en%M;iKLpz7R&_d&hN_YY;lGN*~V(g4p=_$`mz{ z6b~tNr_><12CWueI3jaUhjHmJm!69mOAH-@J!qOk2nF1UbYkRlMjv7~y^#II#V$mB z|9QjB)E0vy^h$gG9(48#b|L=Dk1R{--c^2^epygZhpDG3LqueG(oK>PoopBA*}F2q<rb{VOi>D`V2yiSmfwz%;)QrU^l}<+G}Z9$k+C#{yC+s zUhSoIa!yh@h}({Oa!<8+#7DHh5thf2>>S(hI0T@d5DF$)J_6@Zu4xQc6uV(-?wXPi zxp<|e`?4_cAe^=q%HyHjnI&&(NNzrBb&~uIfnsKtXHHfljN<}BXY$Uc&FD$V4@{oZ z_w4eexsnE7t$6ur&RBn7SIu@|McQ<1_Gd&Wys+j$!&PVP^lE=qH$3K^MrTj22P?7? ze>?Fie#R!R{>#K`i|c&h-gFYImI)DrX8R7b{gpA7pAACi3qlApy8EHHFSh(uG_B$9 zZ;dC-%SB*&L-n)4pewNS9M%m3P5X()V}qXJ!f!0ADJXU-QEQ6(2%OUJQB$&8&pww7 zPue8Vu`B8&i}S|tMB!xgAZ1jbhADKVx1)cs!Ci9*t8^VAmK5D05)C(D+FBaMQ{{p( zw-RYpWY>IAB{7xo^!U|&t)q9h?dNt`W<$#0#DzDG*ALPpqAi;fFTMC* z@4aOBB8j+laS<-KdvM0P)r8hxlq$ zGc;a{X8y7Vfg7b*topI}*86$W1Dx{>G@SBzIgL)txNn(xfJ8QbiOQXMDmSl~x1z`pXBC&i?(wm1e|hZ9$5He}r9f9G zM@`+UF3zqI#3g zBoT>k{L;0X&xEN8jHBhDrwm7I{bC3{f}`BGy$A1#LAAt+pDfv%oQOEZ5r$NCK_V=` zXaNzn>AjC7OI`d0bR&MDCnc2mk+zQV_E_PUTFT~`7vx`d9m&0ye~7T>zlgA^e-vST z+XR0r!cGBLMDgMx-aj2_V|32}=#@C#=BO>+1;P>v0!) zSm|KID@dJF^y!1_gF|(0Upy9z?(={fN9BR0GialY{JBh8cb-_aL$knA99%rmuI zd8J7ML*U4zSc#&=_mEg80!6x4NQ#ff6o&FD&43`P&(2PdE~c<~TvXz=WE_`Xr zG`);YNhU8NJ5OHyE)WQp1Sq*QO!U1sbbG?3B41Q%RQ%Hj~2fiiLnO|Ech~ z4C{S~@(_)!Aa5KTW;zXadH7}iI-%}v8&6>ER94V5ghr8T=;d-FX;@k;gBNV|+|&ci zDb+?HQWZ+o$4;8jCG1C`sb=hb3G0}`ip6G|PqW+0`;-^W9&;tMB7G;c7g=WJ($T(? z(e0>dJ=1UT`t?k((yckvGZ&;6)l5?YEn(Bt66%W#KjDQ)S7hPUG2`X+0zVN5(7uT7%P-QEF{p`feB${7 z(3&gWm!c|UbaZQHEwvQ!=kQTU{}j@>{jT|4`_pCwqF;}_+JgL71Hgan`0l?7OM(1X z7E5T)&#(8G6utIKva|DtGGYYP^2n1EEhR#Xgr2G#$o71~W7l}h`_$p&vG!HtK_o(T zzNRJX;&~)DO-!Q2WjNz6`fItg>>@rq=PSpRN8i-0Ca)r$(A>fDrAN@F{p$9d#5o~! z_N^Lp;h4T~-5-J({>m@eMm-&@msieqP5f;^hrmArF(S6crrv*5 z0j)kYe=gNSSZ9O08uJ{%+80(%7q8o1ul==FV!{8dmDuQ4t;E)! zyUq;Yz_c~EYbUJ01~V80svuwPw4_G|hN z`&HjFR+xd;KKNJmtLsnu^&Q)H`&B==X>VXAQ$@hH7JnVj5&baXw&UW#I-sWYuS5<7DMDU}oiEWBFY>aYy)S z?8Of{tNIU~_ScY>90<;K-NM;t0GuuRw{SL-cUCLc1#olZ}KE<3BoV-!m#sFyrTvm z9ee^c6z4EbY{^uLv@F1r4Su?BKfQ3AR?oA3KCU?;@Hrm^e+AWua8>MMoo ztG?F3uAq&}{qP#rvCfc^eU#Qp;hwoiQRm=qFB+<*_;3X9nsBV%REhK4pJ-yobP&4^=jF8^=L^Ytml!eLjwoRx-bitn||X{ z(s5M>oe!TI9?886ZWb`IZr>*$Ky3=K+BB*#=SJwJXoNE1o_$RZv6mUPhPlUuq~ORH;Dj zDgN0|T=iF0a+M)9DxN@>}MdA*=v zbhlqBg~~==QC$-nO=vgcl8;#qqi_Gb!A@8z292077VEICm{Tkqx#^0t_sSX-id*Ku z7Yiaubnd)Ig@Ee)jm0&(lT_S^%hjw}k=JbhT;>Ic&n9Es^4Xd2-}Bk8)8F~5!7ZP4 z85InPV31?w_XW3YMYYK$Fr=WKAm4|%^=CV-*#mn}L;O*=G)f1iVYMMidxqwU z6eF_8Ng2m$2gyd0YkH@j4%sU(UKq#}YR;kr$JUdC=kxMLFr}13#bAWx9r^;>gp#)#vw1rmngRY%7my`}H7W?3q z6mJW~pq2Px_LxPAh5!T}+=JSMh_}^K!pn`UcJp4Af{ropYwBI%=3S=wLxNroc>7O) z8t5-gVTM{%%}XOC%nw9^DFeqc7`6D&e$t{iOkXJ%aou^=8g-v|yZ@HP0-jm?}Alj{#Rfqgf`79YG`m^Bd zJTX7>A(Zh}ukmL>E??y9^R2GYE6)0f&}sekhD0Sc=Zw<@5F|?Ykk7?y0Z8O%P2>*mGye^#!`OO!1PKzixHU z+=@NX@(&b)9r_S~`?VM<+5Kc@&Q6hL){7WPuQD5VfTm)@&~q;4YLgWIDF;*;|1`F% z4{Xm69rzQpc*@#Dc697&px(iafotX0EaO^DKLIrrqX@Z)VR#C6N50HFOIkz*H5E59 zyvnROLhU~kg>ct_nbCX6c7o)}^#oi7er!FlK5Mc_qr^eRvu;BC!`!|&WDoGJ3w6|} zmT&3nJ3_X|WrdFxA#=J)WG{z`AN7V>-nix&8U^Awr}N$C=< z1}7V`qk685r(8+Z*EVGz^+-Vn)=Y+n4o{?Yx1Hy3mZ;6^ZNJ^!&4? z6SF$Q7So=$QFt`cL}$9Y*(5ZKtValr3+C1z$9s$C=21brv75x#OHw>nJCEYBgWbb& zPB&B^_Xm^q>KmBQ%uuCXg2^fzQd?J(Aw8Q^wubG@O+u8H|AY|}C%xaEjKm_<`xuh> zheQjSjg?&;2T8Q`Z{-!1TVjLb*&>nA&uZIy5j4_NmS`mA-{ndY$K}88$$3xz+RVg1 zzy51CRok$9IPZMv_tjYWd4c!^oLouV^?bLuK0<;+%slVLC{Ri9=q{f`I3&h^hojUi zJ*^9+Lvhx2^ie}Zi8`x-LZKIfM#Q~LH97lx{LzLGTJL)1AIbSA>OIaRi_@5@v`prbO{O0ioNE?O<+u^|Ie z!$K||QW@1lKbp~k$@9mw4;ag$suMnkD( zh|!=r{?bt#f`4n#mfW8@r~o>Ozgx6;Tv@_xbmsb#jXyeyNvk7Hf$i8e5YX+J(xfUH zey1vvUvdF-6i=f9b;Rk&Wa>SIljlD>iVJ^q6sv_Bv`%_+NivXcavD5gZ#Sr&# zh@Wb*JW5lMO3NQblc%Z56fa9FqIJqKFhxq}C4S_~S@7Q7@T>!OnvRhR*XBx!0P|x% z=XE#M2P8+e!TTxiNi`{{_K`X)TAL3l0EhPQx}zRe08A}=1NMEJ_Ng#=B6#uX`0Oqu z_Es6-(3*f8T8tgBCydG#muo*5ZKH`ExS904$)Tc0$`3}1f>xiAubb{6lmcS3#YFNT zM#~Rkw5b8Hd+3|+w~W>gyI}9y$(;{iwBv^h3Nhfmd>}@<4PvzJ^$t0a!9N%+e?c`w z`@-4j*6}T)O%-2CTv>L$U5;ItmcLz&y>z`@j;;Haxp@d$j+Lx`db=E}f4dwj16qz9 zWAbRky$EMhPz5p>=^?{S|!_V1e)xNikHs<$?R-kYI{Hraf zqF8@NDT{-;E$VUwiN|~6-jls4aLZ@5KT!u#v`d-a+W#ck(A5N##tl4&l5retVK^e zKkE!R#xA^l=fcg_>_Un~R4aC3_YU`EjmL1E4A)!|C&dGkK=9D7eZ0o2?9aoVtSQvn zoyv#QrGYo7&%t|KA_? zSKyXmUjv*c3nt|JA&g2R+9!=Vp~tp9uuR9QL!ZzPs|9=Q_wRZ8ot!%M+X(jKL#NR- zfjfhpeU$rXE{}O-=>16Us4lBs`p689oHAFPJ&LL zx*#l^!qnE%Qdd{kapZIAnE~tzxS6^$yoPEoh3V-q@+gbeA-TCBY?!>M_+f^i%r_a8 z<$EHp`4P$ngFjJpLg`eoWxdIvrChIPPvvtj892k{nE{I;FaAWg(3DHqC|35YS)+;!TIVd&P8cc~zC7xw2&xlA8Hs`I zp`qGjp``lkYcr(pYGAu5dTs}*b2r>QRT@K@Y+N~Anhl}BAspBH;X%a1{CG#HyCaU# zwWPJj5DDpnl`;EghZTt{hrFRQcmX@FGbBliuP%b-nNUb~=JeX?A;;e2!m zbhm!ZaSTD{#}nARF^n6IS(Mvx2IuqgJ`3xCEWeP<|HK@Tbsy+%-FyJ*ZskX!2C0G1 zcbNMqIGML(;*{|#a8GG6!R@_Uua0v(~I<5CC~1nvZ59u5gwq9yh%uPZ0HablcWh zUm{`9jVjt&dKIIOYuF2yevl_?2G;k>!4PmZQ^Swj)$doL?fIl*fyBTHa{mbg`IwAt zJ(HaW8KIPb7|4Dy{RaM43>>wDvF`~^Y_5iSUKt9`5e?Uc$XVG&OKlC0@nZbVqC?V( zHKRe zMSwgp8>&(@)8{NH>IY&46TcUITJ72gn1RbX0qG{?U-&C_446)D&R$+4+RT>*S?he1 zCfe||vG-b{Q6TNsz^g5C@uxD!>y)K>VY;=b=7cK*R%0NlY#3`=OWhOEg2@kbw~Cr~ z@~7PQ*~rlgD>Oxg?a~%##}5+o{n6dpSkAHux6Kv|hs^=!dnkJpsV3)3-f2Vkg~DvR z83dlr`j>lZh!F^AlDQR+A+yf!k@{PU^V%Y=KgcHB<8(1l5avCB1c9e#UqYevxx&k>wSoC##}B!n@>Z;QCvG>HgO`UdgR{f+$c~fWW-gqVG_@3; zE1|t#1UZX|68j3Siry!q#9~t#Sgkl4TNcIp z!*sX|@26mLk_vhJCIIjh(FuU3Eu*w>SejjOIdZ(CX$l_0{1KqM6#!2S6|SkE@>XVc z48=4jVbDS*^f+~7%&4Fy%|^oZo$*aFW@PTp*e9b3?|a%0sv1K zybKTHYe|t^y_}BWlFSkM>@2C5=)tFVq-G=`U5SQWBQJ#L&2gCW0PvJ~6UcG&a#QZ5 zenTGYBYaGlBITp{M*-S7GYvbJ=FJaYe4ohN2er303I1Us z(~=rAkr~OB7@A9bzE1jcA`?&pe@tXP1x;i&ME#h^v|#=*k@+l#dMXedFaudViUrg3 z3SwFVp{?ETsnts00A^s`Pcv}2OUjxSFaw!QAgW^cUq7ZfC#=Dt#1yNZYQY6@r&6*d zQqix7MQm@30q&$0aV4tJ>{q%xDPCna?`yd2%bZ=Lg)_bT^5t(QG8zADB9niY_!?8H z=5iH3E_>55fb#U4^5gzZera-mJ597VVGzqIl#a_FE$;BkKD~$Ba#}j?9UQ#uP5nNi z2@BNTx&XAd?!)hZ+FL>3NlV-eqz1;w#A4g-j+~9gOG^Z~Yv>!++^T_W)}u06C$dtU z>{8Z8w>@yurJKJ0wDcRb zTl`Ib!fE={gnv3DhR!7>R2Fn^4D zj%(f5Z5L-Pcw=vMaA;%e*8uFT!~~9jy|ofi5(cohR?`&|TIp_OZnDGa%BenpsX&gs zUt{?(dyOUR!Iy0Zhpjd?Oa>giLccCb*&@bx|CxP-Fn{MesRC!~O6EaI5>nmNWW@&W zvLAuwZ%m$=>kAfD<|&FNYKS9&C#wVQ)pz7l9Qszhzjp(v0QsuKo#csNbMznG!0^1g z{)$G=mZha$Qhe_Q22;T|ZyUMjfVzPqYTbG)xG^T;EDprD1t6j8JMs~MkCaJDYVtq2 zfwedCR#SSQ8%Ty#$GLD%qv}EH%jO_CV==0&{H8?33a@6-!n>wZH8rU#RvwqK#wbi*h^?IhF`js%?J~oLsWv7Y*e=lv$Peqk+sRuPtV6$4ksKVp2`|H?}6u2 zio;ly?6d^jTgP;IG3DGSpK@68CJTm{ymws#3x_vFQCUwLh_ z5pUzmW6x3~qOBmN^i#r>Y?Z3RD_^F2S`lL9S#__O=S_pf__t8Slu-%eMLamZ=+M__ zh3@9bsTd}V_qFPQn>E<^x87skf;`?HN8Rx!i9{~cc4{<%D2=&3c4F0{hGpxsqyJo@ zap}aj(U0A?pwnOnGnKczcxJJHk4NwMo>DR0U=bQ@igR|RH=eEU62^r^O30tR9b(_< zbKqTBCFBo8(}KUD49H)7mQaL}g}0<;6~0PR3ipdE;Sn;k4Kk7^K6?CSZacHqx({XhJ! z*uRbIe`Zg&Y5g{>-=_83w0@h`Z`1m1TE9)}w`u)0t>32g|17Ql6{-A(#gzZKNl4Ga z#=^kC%KRIh`s+3S!v@xWa7_k!dUmGYuKW#!xKF|^FMO{rdi`f8^UE64~p4s+Tg@fc?l!QwemFnwe{uIo^@uT3$x;*RU)@wgkVT zVuRW@pFRZdLqNFaBCZv*9LqSpi#aI?%keZ3-hJA#M(8&{p{zMk)3&wceQuDRlzw_= z@ck8!b*5P?mHy^VVk%8aBg=~mF$%@qdRoUeD6)gi?1(yV(sEfb*iK9^?d~xZVg_Cn z-a+Z12VXrsZMq78opWJ#F0{0pe!3p3c`vr!CjUfo2k|OXEg4}Z`ytJNEKvq5pS;9l zlV%@AHgH}}tU9Og7xJ4(i_bZ|Ivf$-oqUMIVX3Dfi=lnJ>O}C!eJ7n~lLIB1*Hm+Y z-IUi3m#E*RO(V{aS_d=HY9!l8;v;_Xu~Xrrp3(XfKABgK-4PTZPA*n8#hu2Uzmcs{ zJ=uKyRAw8+z2sU)u)mc?^CezF0HFuvtQ&zme}LpsfovXpC#}1UWCFJf|8BNyV%(mf zLelOU-=O7yW%uj}-oFQ!AU^v)-&DVqasTIk`rB#ycIW?~c0b<1Ur#{bKlBc6Pr~g< z`28gO6-xX3L-*l-iC-HEjAkkW{CXPT*B-z4qyBGExBc&^`@09%{?a8pRnHi2;VznB z%P{N3+1Y+s#MM%pOylVX4?#zuX4(I9&9Y=I#P^Ri%XE?R)jDQr`i{+0T6i)QQ8znP z)gHoz2}}{r%P*T0r>z2*bJU%8RFSMO+_xXnStq`~9zQo-BGZ}KJ$7Y#2lK`3n!^Q2 zSFUT2Y`=1orE>tX(}tB^1@|%Jr+8*(?Pr`e7PQE3X7R|@O|f3H4d8f& z27#E58h4J+BC(@+G-$edytd%7CTBefzx6EZ%IEII-eGISi+wu?b-qW}8tMpTi8ziZ zj)-viFEzM5H#?;<@~7A)Usypqr2y-;o)4G@c1nA|hGXr3ozjnr9N%_IPe;D*lvX(P zB4QMD4KsB@;6}cNs(UVJCNyOiIMgIIv?CEkq$Y_T^obO(;CiiRXV&%!h~2+jUqhDG ze*qb!@2GYVU5E2||9x_0jZJ7??FN?-oxl{&hul>ZvK=lj_Gt$QlbqypP|dO*jL?!0 zd0Q*#C)jP=>9}}q#;p|BylnSn)eDyghMDY`rwP%JVJC&AUh`EL)F#A7n!UV2yVi3z z&`{|pXsA@F#@+Z?2PCVRiuQCschJZ8(R3)J4U=J&Cy+{+YT$f0l>PXRrAqJ^y3(y{ zFw9|vY$MR^so^ib)hrVQ4{-*F9oRB9`D!19s?i&4;>al!SoLT>XGU4gQU zu0x|XO5=!hf_T`!`=e$F{(H@m*^d{{Bl8)B1rp{yrUxYRSf zJ73DHW7?YH_nPGjDk-rIP_tY@yl|?38I^ASJQ+!k*?Uv7JdeN9+QO1WQ!Y*pT+e;2 z7o`x}X2>2Cg5;AImpNHuX!JHuM@m1vIJD|aS@Q#0WN|)S!COg|=@`Av3fc=gT;c9CW*eONi`DVfWJQyY{%owt{o^8v9E|oEo z%>U_5k=DWJy37m%HghujoCXa@f3y3)RU;nae?R+A>o@3T)cZOUNp zzV_q~*6k`CVsWV0sGnA1-#W_0Mi-5=APjC1qNW5$afz2a#G_3m@!-!N25Lu*z8$>F zElnWA#{=PuRrjbn(Z_glCm1;h${UeIl@6wmSd}b$S?RPXb}U&TpTGnNq#l&aKA13!I~7`jueiNMmRZJ-_{u!uv9t)F#@#- z7Cxd5ES0ihS(R+q%5!drf)##wI~BGv|D0KC5XuN`H)q<2mPhoEd(g{qGXt;3!fm$6 z(f4j?j&@i>w`Ae;LGT+jh^byypQ~^-;>T$mvG08{kWf%X3{eY}Eb~MK^}%NrEEtnz zYOu4G-|dyI^^SyD;lTBjt63G((Dzp-$N6E|pfRE8Nm3xr2yj zLc5hSIW(KnA`_ni8*$>YUR9lv$6BhhpL!rHM97LnVsX%1T!vC^v2?!W{ob+U06Lau zS4a#nBJa1<#L@?ex)IyhpO<3Kv&9T~U-s}K4Z8RAzYc-gZ*5T?AUz|&Um!`= zOMN)lHk~TOZ=lf2gtqUn`ZU)U&L21CJqUH5$vG8u`qulPLT|Lzrj~%KM+(O6oMXCX zBs`rchM7=m9-~KyX68ppqp7lc9KUd*89%N2MPcT&LP^CCk3Kh#sp@TRkMqdPy-I_7x6!X!l1q zlzVnkBnk>;m9OsSjZ%S5c8a7`tFK1Sf>C_qlyZ=WEQYBQ?|%?A+~8ND9`>VD5;N@L zFT+&Q5B}oG_-Jc28}>BiCDBm_wxf{@LdPkSUy4~OljDlMxcy2wq#zQTcEGjUup78UFlqtEx8@g+vdG_GZ9}hsu?*uwNH+o@w*(?f<^wd zah%_r!~){VpL&;+jc1iW!_x-zL;X16e96j9Hpekkib)BuGRiE#-;7aD;$qf;jeo>a z7b^?RnT*uwoug4$7hQBv)K*-enQM7m!YzLHd+`#EEgNQWbB1*;L+DL%;Zw5AoajV( zHXNXiX(IAoO;P*dTYXeZw(rGD&e+K(*(w8LvD^x8D`0vLrL`%;n2U-VzFsatgy+Y< z41Ir1iW0nRfaj?<*$h)xxQZY-qAEDRTkR6oaCav36 zRIgX=rP{8t58}xSm?MFT8q}fEJLy34a_Hs$*L+meoApv_s1OGQh+T2n;{;mgB)kq_ zy%e+AUD^HqSNKo4IvBBpaw#HLGfOtyYBKSBC?)fvTi@-tYO3$M(`LilLq2S~o%!m6 zUCE|?&~<9W0nYpGZtD7y31iyfLE(@e9Ww!#wG&6f`>&-7=c8u@?3)oXZGEIQt2#ynG^aqYxLKpWq8 z;8A8H+LJfhy5z8dk5~G>ajr1puoDB!BE`~jwaC=a8o3@f??J0TCiFt*Yjnw)f^OD} zXK;IBvu|j@H(V(2?9WYhra}XDc^zZ`08R-EmZF9Y$LZS?+K8V&q+$}~ds0oh1sHM( z(@kJrO)A83yi9v-I-n5HQN1TT9le1PC#(I|{kTzpSoop?Ei{0<{DX}L--2u5r|x6= z&Bw9pJX0PWtd}0?Xz*I$*xBcPyPXe6?%TC$z9uXOBUW4m|F9Q_ojhF*8UNvU+pYTZ z_^N83kcd>1C`mxKcPMR2$a(}nkK^!UC&oePhkGR8 zc#p7>fcB+O5zxN;G-x<((ZFGeqd!mzmx4k62SY9iY~WkA0Tz5EX3>3lRe*s{!v2|o z{~Y<<|M|%OcX0V_;=fJ&w~7BY@!ux?+r)pH_-_;cZQ{R8{I`k!f06kAS*Fdz%JL_s z{dFnK?#n;Gv_V(?dn6Cg_wu8?DC&61S&PDj74?~_jgigD;Dh}N3@bR))(V_$EXw23 z6cVYNYJS(%4_644O_*n5MV^9JOLMXwwGO-XuC*k_R6lFd{VG|~!`h%6 zLfW(ouG-zMwXkNKus3BF#*LbXRDo07Y)^)@vJ(>cn_*?-C5V&<0C}%>>sS`{*E?m@ z_IdNNobpXy{o^??J9OzU@?v{x0@FGUn@*fPP_kC7#C?k* z)MPd0Yr?8`Pjh2l{;<>zmG!F|hsebtJs$mTm1}NmIYImvnrh2kgBFoh5Dv9|O%UBIhK|GOBx(mmHUP4l*xse_x6D z>xuZ4tQ&M+{%h9#^U3&?to!G8aC<^-Pssm#LjG9>{`39$Ut-`wXk9&u00STV#S9$u zQU4DNeELP@BtKGITiN7~y7ynUU@s;jWK)h@wYDDG?P8f8E&SMmz4O}^Z0PqbSdo9d z1$(}=A7cNnw_tJqx&>>Hp8e|k7Hqj{6cSJLpIyVhZ^8a3eE($&7W>;4tnJ;4VIp!N zW?bG`!%j+D61%&8q+;pjz!vN(um!vFZ436UKm@om*{8$NI$#Sno~Y*h>J)rN?`r02 zFPCka0EabGo#-Px=}6SCj6F`0dwEv%krf$DUxWCdw;x0o9)*w^bC=Uu^B~;A5p0?Q zT*E#f*Kj7tHQex%Yq0;4= z!Z$I)OJTx#79cZ<_?SY>ZJ^Sm?G2cO>Y~Kr64eQzIybbY9<2z{AA^XiG zztWm$6RLj~FycDADH?i!okA-z**q}yT=>2ugy**@*t`L5n2Nw@vvrNzw>_dK%2cm517#NNUfqB3b zY%f0>QA&>B*Nq9IZFcFqxD=%_Bm~{~5>OYXxuIQ9PE+>-FoY_e`52LXZdqpVBtnmJ zMH9&y)U7qw=*HgKb>s5%XSez!%w7VFzuNs6e_f(R{%QR6Tj5&>tUBkX@zU5)8WYFOr&q7V4($(GR3&R;@p^qrLP~S``ws^`{yY(L?KI`GpjWfG@4Jn zKC1^z!^)C3reRw{J6mqRG;B|FV;Y|M$u!JzXGtVlAcdmI+`1^(y-e0`3bj$}0>@+2 z(+3Vqg$7Tf+4unS_a#`VNdvXl;-qlu`GYRs3g0xvHL!UVV=02>^9)G_K}G?OYL$i_ zL&cs(=`p~=S|nE{72e<8mPESOSQWopPJ|FV_hJbGfmsc64S~Yc?s$HsRmzScsp9T4 zT;ZnkOxUWsjqv1(CejpGXLwUFE0)e|X;TM(5)Bhg>Ndc%IgJJt3>l!a)YnO}u18Lb5d#66#_iWJ?Jx4^Q zo0snplY4-9{qTVeJ-KtZrVlB#?WA&%KMc+Ncq>UHgiD@e(^z*^YP*u6~4{*|LDcQLs z`=9AjexOP>^AeY@Bz6i?DlPDby1Iwq)UVCh7%xDnw*11*gB+DNb(XVg=n1h_{4?hV zh;}CU%TV~o`0J1gQA$`@MTN*wSteU{dNK1xtB(n+RM^5%*za>1?xlkecn*@?D6h;4 zLAY~xg}3g)%1R=)VEsJQktzWnQ9vc>-)%!q4%InUFLu7 zl)71hom7VfEy0R0eP4ntO0mB8Z3)(TrVg|O8>G?(EWrlSQg$){ORx>^1wOL>Sb}{) zfyNqXf3pNTPVN1^YIYL+&ZOiYmSFq1M~xC$1|PjsQmwR)lUUHnjs6JefagIvV3o=^ z@vuAqRez2XzI(F+E3I#Y)m&MuY%X08{Y;dML6}4z_=j&gC*?oLcUPvFkCwhKJgB!| z2C0Xo)zr#pw2JD9cBjf>;0E45xQqK#<<9WQ-74HiV*pgQBHM>P%(Deh_t26#P0W~) zVj)?amfPfps6sVRH8&N!@7EBm^6uC)h*}u~6>;EM74TxbIWmGKeStxz*%o5m2u+OjxQ7Mb3*Zp*1|!;T(~~gj7Ju~)@7}pP5mdVM=`PEfB1S%? zy&uZ5!-x@91q)e!EcF|Ka^zW`yQVCFd3g1_6Ixx8X6&1JIOLf8`eUWSIyYjdmzFSQpk|G_NBXCpQU6o`ze1V-H0~|Z z@Z5Mj<62cq`WE;l8Rxc8yYDxY_tGQHamfYF2isIecBN@MszN#!I_6pGpliX=#(b6u z=X$B@8q=o3+7HjC&AtQhbGI{k!u~JyyM!q>0DS-8?T}vyBLO%FfIFR)E}buf0JsN3 zb?u8T&e}Q~f;>caym$bBBYg+pjyC{2-{l7Y2O8jF<9*vkby~G&`ySjWbSWQN-PS`B zrMo*ir$;zgwXdz3mC_AjfKCZJr~y9ScZmx$zypObJ0bR$D!&78eh>hsq5A>AS3m%q zfa~F-gjZcbUCWu)HE*S4lxQD))zfcZ1BkevdluvBqC)SSoogYZ;c$#SvdhLEJ9b*W zn*4O;0lZXY$u-+!KclZWKKlbp4h@Msp=W6(CpJ7ioEZ8p5stHE$c?iP{TdS%&y85; zU2Q%-hMg{bwf>6Q3vSd|n8EGS3k$-D+^)+nHzjaen$)@6QC?7k02Vi{={ z>(hGR&JzovQC^#Qix1S{ocO&hjp}3r9*^*FXE&))+yL;*QKZ_bt+jGfHm!8FP)4I? zP{lBb&V6r&LwSIS*aM&h?g|t5c6@+EUH0Dt@SpSkuLR)#Chz}E0Dc?yZ{z-L+`on(bS^&V!xzNWFY1LpnW4DzYV1_2tfHnoaPVs^Ggf&W9# zFmV=@p$`FQ5am08nxCgIl%27QuQ4>o@S{9*Q9CZcO&x|Pa&-9uh4nktHyH}*(;{eX z-?VPU9Y*AK;mT;CQ9YCyMH=ja!lg|K9YwQs?ltaI?VHx%@I1#ayH=4nH7aQu_`a|9_U*ujzFE6i$n_KwRg!Rz2TUq)* zz1r)+5ImR$H7N1W18L0aPk3Jzi0rwTqF;%p+!=|-5)d9Rd~(e}CymjwUz198Gs2ph zuu|SZHzpEw(s<3;bybS}ZG@F4MOf>i(-btqYJZIdjIcWXWWx5riM6p4sp~ZnVLW>L zHU(KK-bG%vl1zH%UVM1UB$d#ngTMHfc<3S)=Jxb#7?VUj72A4MI&H$c(Kb<*IASLRn2aN+t+5nz$r|gHJNDl#)Lg5J@4{>!`tWV;q`AO?ERjG zwqpuCZ8&hm)}RgaQ1OBbL>Bj#cTdPhh9nZ-@3ofxFkyECChWqWOxQ1VM~?s#_A+#k zB4EPS14n-R6k?|QQ6;&>XEEbB5@W7d=8t3Y!n!LUFgnMJTT_H@H!_nRJ~N>Bls)p9 zLoHcJXHn+;h$7=6st%)?q6Xg++_r66S`tSJ>sj!&^}M@sByp>F@JdH~kZv`uj1`_A z4)q&r9ucZ!sqK}FM(>K2uN!4i))#dy^@FpxAQ?$)xOye@xs7bl)Tezb2O|UJ;0mA| zEDb6Lqrfr=DSdwadpWqM>_<5`yz&4j2jl%#4!+OOrDauvN%Nx|yztuwD-y85dVk

iiKCNdrP5L^%9^}~f*|!}`3vc++R#MX4kN&M3M(LIRw9nX{i>cfi)IC$ z&QoAy6g(W$0o8-8fqJk5du`gcdT?Lr{Pw=KtgI3&hKkqf{1y$(=iW)_cu^nsvRyxX zsGan|fQt+HB4US4VJ2s(X3V&k>|Pn}x6hLBV31 zq;TWp2OGsBVUKS^D#)yW&?qYijlOtP3&;GU9-Q_v@0FCj%jd}i97YdI+F3&ZOw4A) zPH0S{G`S3_jMwwW0h6dqgL!&GF}}bEYYHKRA!Z{yK4mI9CgK9}yg2Yh06>Ku^bL*1 zd{bf5R6~El0#w-TAQd)i3`m8oA9^Q!uI|2ll?^U@JO@aHo#l*c@l=5Ny9(PdrfB|b zEQx?`iGVpl7L28t+lz`N!EFC?7<65p%NfpyGBY?uirkO`bK@seyliNrLb~qlAN}B} zqKx}J7P_-dRlaxWbG5@k{a|;DA8d5tyGdJXqCa0bY<-|8se>U?MYpb-tdrhK z>qI`8?W8s9ovg&Xm<}w?rOJDm{KyKK4KP*$2ud}p3R~Wqsyel}+RD&strU-ktcWr> z$p960LOgh|GQ~BZ!Uj#SPB#CG309B_8<=4IqYAqRdB>59Ymx>rEe=V%z?--?Tmr+G=M?u4#>t$EM{D=#p?x|f60a1N7YH@!W8*@&VyTDOx;E$Z(-Bz;gz=(TQq z%{eePF&$8vJBJnun}R?~JA??DVC}k@U^V!Cf>q!MiTuzMWWv^b?2A}^y6(0im76Wx zKwWkqh_yDt-gS?C18ki~q0;Vye

`KPx!qc`nf@MzaM4K4tU(r{w$i5alBgWcm1 zu^fJa6VAb3m_fJPm~@BFj%$)4nrQAaAYsWj+D1+uRpPUNI3LA5STb8HofE)z5#rp& zk6kkq!!j+(dC6qA0)Z$Xr}Rl)iK6qf=K|`<;h-;D$|li~Si-51==WZ59Fr)h7i`bP zwek`h7++;&;Bo|d!8IWg2%ugt9ncFl04&%yz2FB3APaW2CD03Ik(@i4+}>IXdPDJt zUT}vj3$B5*orHN@ytzhhw9~T!Qbr3gh4%oNG>$jdm(Mm<1x>F$fxekuRk)WdQu=07 zNll@UH2#S=(%|DH5W+mDR4f~L`^Hd>g}S)Vt>nJ+B0x)r$6&7a-fL40j*-yI~#Lg)PNYf zG5(_sP*(;Evqv;~XYgq(0}VQ+FuteV0z(!MV<$Hs<_?9oZ|67Vx2ZK15!VNkDp`>+ z#Htb}5>18ThW5KodQpX&cz9XI`9(|UN^EOSA%PX$oqv-BK@}zKI_fW^LgQU1FNPy$ z@v|3O#Mb=vZVdm`%3+M;`y|gj6tH6W;8xzUtr& z(O#X3ZMrjLdle?Bxgxrckjy8xmsjM04zz;vfL3t2jJoi2-HP3~f)vJJWqp@wbuX9rEa5QKUufm=UNo!PoG8FXUyR>kImSc1Ol;1thwCXV8={U(DSv{rHr%1~d zb_leBi-A_KA*dCs0JMUcK&@a?pcQNjY6ZVB9k2zpf~9U+!To<|1-B2M>z>drnHH*m zTEQ_C!>)A~;WTGgyz^*oEXk;b&l|`uLhS}6P@&3bwjx<4A>_Wh!{W-OKr2PPzsQ`ASJJ9fs=*fe=4G7Y4#6~Q(<4`8jaD*| z=a_W4$J!_F>rY{SJOzJys`)wU|3WDG@1p+y2t{v`{%z8~P5QS<|2FC0CjHx_f1C7g zlm2bezfJo8SFFEhe|;PH=E{GIZ^iIfOwwa^5K1>6iP~>! zdnE^lH+ZKMu&qszEWzkbW0_asKM>1Q%eZgrhx2hL>N7Kx&TPVia%2pmy*p_hUk-VA zJ%Ydx-B|I!get%+!7?`U>%I99y-p`iuqIj82*D6=x%DymYO6`r?O7(xdugABVxz55 zY4FS5Ep}`vO0Dp;B)yU(ajC)({YvB~T7A$mMrL4$+T(c9b6Jxf*uK3Rgs7jb{z%QS zW6Ny*^39_uKEX^ELi=j2Wy58*<+uaYq}csgCT%W~SDJ}Jy+T?{$YKOAOK6fCQSQ_X zM84=QB-@f|?3Owrz6w51RCBrDc*1*NuRk-fnRe8vs~KqGWdW~}*f?tY!?QOw!tU^K zgN?U#D!6BFR!Y1&>dM%P6MCm*qqT-QJ*2otz+)Qa2?5S?79}qzkBAjp4Zk;7Ha99s z9jj`HlRgB_-Jq8Lj?TX=f8G31lAR7u$Km63+pk+H{nn93Du*rYDuUIuxXJig(_9wdNGrP)Nimoy~S7n^%c=$2)EEsia($;~m#g{g+qp zJg8Mp<`(J%9_Iy@d(Mx+@6!&x;!Pqatv%|b(KuKGuaDr>dD?;~t?!ZbRkTr{k>=~9 z){jTrzux%25cJ;Me*YTu{(Jy_A?W?XJGeavw+G?3gYb_M>_6Ow|0ROmPMJm{2N3L; zUrVrWKI;F8U?<;9IsfFhwl)6j{}aL9dd|mdJ+$j?oj6b*V>u9V=PWJe!rJexIS%JK zK(Hx}T@j1-eSc2P5^DTCSme~RKJ&!BVW;t@=YNWpA^1q>QRm|?f_30W zNMSm~#Fi^!dV%e&s~60guVey?ue|iu%2PAluiduws#81A1%?My?i{VfC`a>ZP3jx) zJ3tL??>3_Dv2LGUTh5e)Aaw=CEFeov7+sp3CFqcI`BYUe!sI|hUq{s6GeV7$%hiGs zcm(XecH~BSKR5&Vt?%HZ%CBMk;8i|4s1D>lT|*DVH6J9eW1fuh6y6r#H>LCF2_1wjOJc54Mf3u za=J)IsmwptO`MLeYcEN*;VjO3Lz$XY5PpgBxroqS)_T4AdC(yWkxXT(7eawSLzJBO z6;soz+K1BT$_5Qv%A+6dNGd{J+p8W->oKJF=owqFyu9Mb5R?VC7w|yc8+!XNwLEuh zvm#164ze10CN|fCy<{Rr48z0@sP;zYT4Fz zd@E|Qx?VVG&14vk0Uf)_ex+|7`>Q}oEcWXr;~ma>^HP}}2u5h-cmw;IDNyab_sXpi z@;}CM8I+dc$(S^Y$Chg_`LJ2X+hW;8aYVnze@M5}5t2J(o~8*Jb2gd=#+*~k`(8FM z+A=~;ds#)>ToviQdAEp}WJ=V*`QkmbE%p4?Yyu?~1K<%7hnb zc=*&0_ewvto1XhzRXLt8wRsnjw>Z;KspQ;gAA}Ci=6*qBm|KvyVG^8Afuk^(O=V74 z5?lla@$v34l!{$`R*esZk)kebyK|Eo(@KFdbKyn`&)WwAP4^w$1KBWI7vD0syy zjpnFkhx^v7NV(Isph$ij+Q(pA+s#J01VyW8%7gO}!!j;3VSE}gM%7d%i~KZE zYACU)HK!gH7e3&CH=3Eaxk)^lRpDKBy-*PO!s*z7`$mArPGe-Kkhe<+#C;U~uoAv0 zk7s)*WT}-9l3`Ztd|)tLo{LiX1Icnd`)uzYcFw%D;4WLXj>1*vMu?(=l{KEUwL10J{p26Jt4i+<3b z$1}pXM5oO+*QXw4!#HT^N)4y{=(Tj4z=hO{s@#g-}K*Niyl`%DVnVU;Uo{W_QP=rP1 zW$593-8t8GiLMXF46F^9tAqmV)=!$Dv9UX$C8fwbX~^-k7yRA?X0=gHC<^&pGlSQ? zVn|Z%CW?FWRvkwp&{uZ5ngv_t#%^sBm94P&*l_M6Ne;?f%XqAk(p|l2IVGV{llxB$ z*}LF^e6uvz!V!ROF95Lh*gwM=LyB(?Md5_=3NpT;TW?gk!*}FbOOM$!|3UT%Muf!B z6LDV3M`C2h`8oIFj-nXo=c2`4GzW7+oQliQYr6>h#z~1JR20e(QV^5o#~gpvdpglC zhOKF5aoO}zeI^^alcrx1{q2x_yVIL|0kMMF$;0$it}~L)qSTkd9#A>h@xr(tIBYcW z`Lr+D`Nyr%+A=CcF(>d6x$I^lB?nA#h0vyUx5b0EsbsTn#MbJ$T{sBe#n$<;$&56U zobqJWWs2g$Q(@$HzZHA$0>xg6IKSjL;gyV_7Y|sHdj^nvq?O)$-Vh{XsF29o7wrO8 zoK?$>B*}zmCu{Pav@R5O+13umwxIEweol@yc9PhJw%!e|_w#*<0}$*amO*J*o5Cnv zkpd9Gj$pDh`M&Hd^oj-du8H_Ec0Y5?;1clPi&!#I7PJLQKD)dV#-s`g;V^ow2E5o^ zi3?4KQ#vWa>X4dT2oE%S37B#%Dq6x3LJ>p|ou21BP0PV3CQVk9WJk=Q&xWBIt1oDl z4p3)_3zHBOCmVcWQQC5YuwO@k%+_>eAt|a5O1UWGnJ@0MB!ipVH;+OK84pM)WhFWp zly7WcXQZpQOpn{dV063`^=Ozf%Z@PPO7v1bR-Z3G$Wqe9kd0Ayj!p7hqw`5>~+cNyl&6#o{ugC z>@Rt6)V~x0nXT1O%gIuZsWvxEz>x#^a{`VRYm4ANwk!F$KVyNM__XIzQ<_k;AI3r` zi(;ChnBp zgEC{TMBs=V%(dsZK+j+GaA4CAB&cM6PC8ffNe`|Hl2&dGFByO6!Gb+%Kh>U3h)ABy zjJpv_D=iz>m#y|r)@=VLFvuZIEZ|K2$!fh5LSyHqgVnY+t6)z~U~2qpgWL17fCYDs zxsztXAJ6yS9&3Ki`o9oi|GTXJw-NSj)W41Tw^9E#>fc8F+o*pV^>3s8ZPdSw`nOU4 zZ$|yUqP$G^5ovxYVYFpj8s>})EUYI{m{_%G!Ff@NqGnPw_*e)6G$|qZ8FN7|M9^#> zz(BoJF)N0G=iE9ud%arkd|1W>MrI}?1eTVII)DoHMDL<|FB_^q0mbvm z{_>f<>2`C=NF3tD#pqnKP=sDvV#)5$P*>1ylb!-K5ReEr{u6+)h#nl6<(lj>&IA5d>=A1Flv@OoRwu? zru_MO&`P0xkcz?6MDJ(hq79jsI{gD@n4xbReXG?oN%2a!IJzrDk? zQTowAJx8L(?BPdJ7E00f0&yX|H4cgXt~r8)EbNL>8q`;-G`ddT?%v@>I;PP4oU^khtW?LA8oho8+o1&(xTG3&%O zRVDbmea+9ZVg)}FP_K=xc!jO{nB$cVV7~L;^5ldH>IVx}#qAFc9fo{fG3sweFrFmc z-(f1w8R0A0&tgv9&Ejsy<=toR|7ruH0ug}d#eFH2@X0MAsmCUGc^lCkfJ{u?9j_9e zeJ9;;xuv=HGf6=3<3znJBNKI-3L`I|PI%xKr?Np-$B*H)%`SJ6o*i+StD zMADMcmGrUjmDFS_Xa3tqEyLx}+w4JQxY{@dR{h4gqZ`8}%3tc@r+3}UJTtkfCNd1! zkld=^qH&fdDQwEwjy^Px?)HkOkz32ijlV-8_TddV=yx_x)(#)v)xeN=8+x`@Vanin zrmKLtzPDMDJ%tMU#H*ZC)`+1={ODbJU7OCr7p+yxs02Uf#_`?h5!|)%^VKzmK!HbM z32l?ba7ejLoz%Ipv98-OxInRdI@shhJVKKUQSeMD187dZoSlsQGaikqb9S1ah-cNSu zul=-EZR1Xo8GLQ%6;T!8f3o|&0sk4>GKqp6;)@ zs-agD<1ETNw_{5{Iyg z#Ol!ch=%{A z__-F)H*m75a>*#XfI)aY9N2*nfYE&IPJ74*PJr5x*@i|FPox@BY2}>F7a2Ig6G%L0 zRyJK(d>8S=algjNN6Kn+iJeZLq}%?xxi50%HPTO_Zv8FBr_OhU5UR6&5_MCzeG_$u ze-m}H0;2B2;@yR?wu2Yc$VtW!+=)Dn^rj&v1tKp(KBK;{J~1o{YO;MJ z>i%$iG+6!8j%y&B2DVFrZASW@2`vsjP~p3+*-+-1lFrvLF?7esDbtBvdzyNpS^{#=A7AGC4u#7 z2g#Bs?XRhiEAD;GXq-(hEwLvVlZwOMqpri6SEZ5EP(q6zkd0`{fZgpv$ZN{kHZ6M) zMP!^Qx>>-lB+PK1rljU!Ud7Wupp;I-*o!f^BkzE2L<&)J@%U|`A0(UfB=u)tv8 zKh3E9wpoobqJ9v}2Kc&JMq4{F07p0f11|B}K{pv|F;T<;MXmTBzHa!&VqXjT+8}qx zS>&fp(LO9+Xz2b!8LxssU#;TGRH16NdjB)>T-4@wVRxD@DK#n}>;_T&vLC|k z8>-)Zw$9^Xw^H7@)rvOVaoJY$7>)0d8>F-kUkf^KmiU-6iuBaD?MD;yLT4D_nN1GU zxpHzGRjKskG&7O~A^q`aSl7FRlp_i7$1Glm@AI*#LkN?jV6}x4xS|5l{;L>; zC1>}{=i3 zL6s6`WfmW|hf6Kw&mD`B_Rmfwac;V>UtIGV&a{PT)boFyLh?LgO@kAmm7zb15=Zjf za;y#YYQ_{(9L?&w)$~9>nj^memSsC5k8mW^H`&?4pwws$m*e^5T8~dMEfu|^h>+n1 zShC&Is3=A`DG^oy+0pAeuWo$Z%TrJwU$>C$cVG8r${?<#0IYIjRd%Du{6d5gUisD? zXa*}y#RH=h%#ZF4zLA5AU>amPiC#mvPlzmuc0Rfb5eU$!KyU!7N{bYgZ`^zZGi&5N zEg35{4-Ig66b{mFW+|8yRcvii#eImUNvprHkAd7!jHY`%kRE!_wT-LCH0?t-FP|8(JIHk`MM`cLB4KxWP~U5L6*%$ z6i)~2@ep3)aqCk~8%+UJU!o4Sj(Vu*u{^XghEM^S4|Gd!e)CyP6*BvpTv2hMk~l>H zY2FBOdoNh2D*6l+W$B$yZqM@sk!R=)ny==g444#%C4v)_i~CkCAvPL}@*^WjQZv%*th7fO#HG zZ(w8;2fTeUUb52H>vXnbzDl}$P;8TB<2=l+p+f$OG9lLUE#vc}J8_aNyibx2_X`ZH zYIu~A%GWz{~~9WBT|pyRF+-Umj7sg(emO7~u1GR372dBS6ZYt*&OEkv2uxfMCJ57m~N zB*chtt;_p}&Aih<>+O966lFB$_~ML3lq%TeUV+7QQ<|@GMZ9LQLWyy5cx(cn&PdIQ zV)jNE5cvom<{fs3t#m!ZV{32cgPTOi_1KjgL-m^4eN(^Fd^U5|>GZsgrK{lMp`=jR z!=;f&w$#oW5_#7>3bI?UQuoX7tODECVw;WKG%`otP>#-p&4tDdrpJ1xQG1>p5>1)c z@42YKAC57kmNB~IQN!w_@Nd+LMIK)v4Mni_U!~SN>L0ahhqm`kV6Wz$zGxiav3#*J z$Y&lI!Qbpl{)miNEI)HcTA(!zy8pU^IG(fhjP3q|0ZYhSl(lD}PiKe>#wc7mSEITU zjyVD~4>FcR;<53tX*@aki0E8$6h?hs8)GP1jb)qAevGC)b}HbYnf86dX9@d`?^U(e z*wy}P=K8g=kp!_ftH(M12`Bs>%${sftJi78y{Y|IRrK=-kr$Yq^T}=-(M8V-#~z%& zllA6~b`*N77`G;9`?6$dwsZI6?!M#2e@9w=bDRDk;D3BB|M{T&LI(ebcW`@PZV$|V zd|>`jPX346^}oc)5dwt>LDu$&U(3mFKI-4$876AG%Ef}mm^|h z+Vh7h|FZKASli#InGMGLu(oRe)^;ku+79Zx-&ot@p8l}5_X5`TFZGDutnKmfAs2L& zB2g$e)^;njZ`O9m8*97mH)}gCU~NBjy_&IqOSH5&F z_6}RCTI}0FsPjF#Rw+%mnY+c<(O8&geEWtOJi_vE9#N!Wh9_jjVhWiZvG>+dStk14KHV+SA(GN5-Ccro35aw{cPb&Jbc1w*Al)e)f^>>> zmo&cj13Kf(?0xpU=ltCJUBAPBF4ru9<#UhUhl}g_^hA$GSFNFCdWU6TSIm>>1fd5` z(4MVwdYz`ft?d$&B)nMLMV2)HAhLmD!hRwT{^VX$d_|2-a8~U)xAB1BH1CJZjqjA) z9>O#u{!C2h?&Sa&u_Y1G)?D0K>9d*0Fqt8`lQENS$B1?}X2q!HcJr?*UU&Sm_+)K(?Za~Y8U18;K!?i4{F3Ui4I{g&}(5Ila-=OS!`%D=zfb~ z=n)Tq8j}q^&{8Q?qm=s0lGr8+^R$0*&|-##RehK-t5j~RL$i&#_!%6@*hq}hL}vW9 zWU0RV%W53#x5j|GR)SWi^CMauMU(G@B5YZOaf*ggRnDa~ zDUbLeh?0}uP;y@H5D^jPp8N@4Tkg9usUz_M6L(&(-)X}U3Uj(*N)?Z?Y}&X;=7Zat z#v;N>X?;v4P^MvAL04kA7F;YkI+5|x2!Z3QGAZG1BjUUUNy^sw4pN0|-WJD}zBrGkz|PJXdNZhrc2bfDMa3ah_jIfGTxH4F?!PX1!Dz6 zR0xWx)5w{%pE#h(n9!lUoNN)M1Bm!5#o4c_r08fP;^FON1XU)J%TW&I6%0)J7qeW| zeLhrFK9u2za6RVe(KPpB_m=!OP!WgF^**ZL7^8s;`x8ymUr@x#=d!(3o42x-i*H<> zakA-IWG;Wu29Lte>GuKu##{t_Xk8mDwlYg_cyCjY%O9dkYtnw6V&9r|;~I6R5lI+!(Wm=y*6! zdu_Vc1f7!GzPaa7eT)zf<@rL>Q6!?^U_G{qfmAa5hKcud=7CK2XBaa#8`f6eL+wmM zIsa_Knm{t=QP-WxX7XoVpOOE|4eN*BH>_!^D~5ImWm;;I0VduM0b=5_=9RQg6-;EA zFt3`#qU*+dQr~wD$}uA9w7hrAy|}oG@)kx0zw~MWRjzwA!Kz6*=8{Nu??6JOujl)Q zHTlhk^#G}?LIz0{-Anjpr?#$ZCLWlJIp9`$!^Fu|nzQgQ4vi${Z7Kl6ru5U(tT0zA4>e~duz2wW+-fW&9rBTX zKkmgF+)yT=ZUNP;Mg8rCSkeq+Oih;e{9DrBZpgSarsO<8#-;ZKB{`{bVac~rGl(OD zeZx7qhGDRH+9wz_)WyCE4AXY$3s(-tvB}f6Mm`lXplTKkLBLfxp4-H{Znj5E-8-aQ zsWcY+-fWLx(FQf!k6f)TDrvPY(6{ukJb`BW#~`Wupk})q&}{c0NbLbN+b8cK93qbp zRu==!c24Pg2;0ZA5`gmlhi1D`vMFnC{A%PRHQiK=6c9&Okkp?J$+8AbOw&$vXNV00 zv(sBrX$XV*mJ%UZ%&bAWnq&DDSxS<$>ESqOZztsTIQQKmc3T<`XnrJSrpqV9T0io;NJay;0r%=)7C5e}Uej zyf0uwZZTEO!f{W$g3!Dv-=%2R4ta>0DbR|l=+aNMK~ZO{c!pmca{*A^SqWQbY7kS5 z^a17lTgQ3SypOvgpu87?l=n6xbd{h(Ly+?Bd#$|pH+`OoY>N2!?9xI?dzoSnCZ1nx z*CWrv^9tTsvXzXA-oT0tslP{ z%;2|Pb$Wltp02dH^Q-ol5eK!XX308o9yoHAs>2DKN~04; znYQej%@ZXK^z>MR)^H*n%6eGBq8}9-7s=SkXwTFR=o$55#EKvgoHa z4~UwGJu4f)a`NArk1X}PwB^NZaNSJI&`PETrmOus*1DNFm8&x@BBF59Q*yL0z6N$D zhRLz{4sYdlC(6o=vaRN}E^0ZYSxVabcT+M>G@Q-dLr=SW2G=1xd}>o(g@3^NX>-XX z)}E~UaNDZk8NNrO9NbF=ik>~a?&B}7-=NeO%8jC`gQ4fyhUuNqBlhi#-|g97H+-kD zvjJ>bH-NUR-+{KQSNcykfi3H)i9S2%?_1V}5hPluz?OBfap}#Lb#W6u@gKIVY1rpN z@x*XhX(7g-dU=etS)YZetqj!J9i9#dJ-LQ5i3S8CSlUufDzXZ!i7ZOaJ!LzrFPT?=Jm+ zFA-;d_~#YtMlkRAe?zsM1@w{s9^m`6)%HO|Jf5eRe7Dv1|5erY>zCg@Cfz?j0KbxS zgC2k%pTX^ea9eHv&s5w0@F4t$2=>dn#P*86-t@lyQvX{7J6?X&VF%#}`{bXi?MZ*! z9lxoz|2KBWN#2t61cdcVA51J_Z=^|_>v$3_d5i}^B$7J|1ra?;E57`~hH_`@8<%HL z9a(Q}lI2Rps6a{|pSYYLk`yN%hE>3&{vqzf95<2V>)z{(F*h zrMl&Q9VfOU0?6UCvdnxhh-_NWo@WvmkWo$`?zs-Ku=-WMx|BqV;KMsi*(uYHsz$Ft z5eiQqsEFP>Jt$AWKDZwUk0-wUD)oa`UHImyi?*SQzBJm*#g!|nRjK95x8)?x0g&gd zogNuN(RmJd-tWns6sxo)9;G&Y3*-mi;tS6^3?eh(DPwrfi-3zG)HH3K_Pgi(@;A?W zvw0^4S2sSqpZOdkj@sxwl6Dyk*rVSbUcX!7XwOqF4KQ}-I49n7_isi*wktq#*L)u;2?i##` zieotcBzxM4G2`P|812R$FDrgWc@3E|f**Edl_~W>?hd#%=fUF*^R*)`3oREY>q8_CLo*H!sHvW zW!(**Cjz2u_K*00vC6*BRLL~CW`29Fv`F0!j<~KKPPd^Up z2@#HB1M(odG_r;!NiBV}KktrzR(8e}2CL5a$@A`Qzwx}k-gw@lfakqfgt{lDcPbR^ zSH%iW)T^x#d-URm=k4+JC_;G)Q9L+8rbKeY1p+@XK!2G%f^x-!HdbIwAL4p<98C|7 z_w(roFCyhhaH|9HGqN^Yx!sZzg3vSvRxoa{GU&v!sgAx^b5jeOF6FEkrid`yjxd!U ze0f9iP{>Nb23jXHHQpy=pHVKKYH(}yK{>zCN25frma9^3Zy2W(+V-DIcSmYm=NE(u zD!7CHq#4MzpRJ+eyq}j<@4%FqGSn=PB!kn+dA_fkN}Z<6tfp0oD#NL6i%|aZgMK`D z8e!I^iXa_T3=d+NLG0dA!#$Q?U#(%@|cOQS2q4l6%Sx=OQ@}&z#V+TBjqeyY&#%*j6m+Lp@O7>Vy_m9<4$A za#y^nRh+d;gCQ-jwmy<``Oo+3bpf1R{9oei zrI*v^c6|0(A0OY>iB@waL9{a^SVAH=!T^THKe0`W*o!_!?vsy70^#f}j4ob!vkyby z*`g~DSDi>7szk)(hNkQ={hn#xS00SnpDPF?u1T`^Cm`DyzL@x~u!?TUtI#I*(llI{ zNF_qI)Sht5QXixUeaS3?mbM39J((#tSJGjvIL8E6!-}?tf-ysPjNmvYsErCb%mxM5 z9UL~<832xLp@-!PaP00NDZC%s;|{-XkB=a~|FJ!O4`SQF0khp9%1XXd2|h|WS;c@B zxt`@0ZjY;&_l%h`baFdxl0mRqO1$(_9&LNSkdY_$imfmlO-s_Pxo!=FtXZ8kdotMY zqCn;Lxr)glB}=%}Px11wf+hMY7MB|LdjRzuf_0P*_)P;%Umt84wcK6iR|fhsen@68 z1F=%vc$Mi8=@?ev#X*PN5lYQbZStmpy580-ri=~S7LY}pBYC-|${14Afe*@kpR<4! zsJvhgLI@6{b5-_Et&0{=&Ly>@s!SIvOD%lhoTYDqj8{%#y=z|%VC<;@xuSU=(|7#= z8({#(E?@^?Y%ku8-^a&a6>jZzA0PCb-MykLyMF=J7Lx^8mFu{m7-o(@yENzAh@n-o z!;*@c_R0OVU(yL}i|HGOj&JFFJgdH!hvV7kw4<`{JmkD%bJbrAEHR5yPi>*BYS&}- zQeIo&Q3#%%wuz2x1^cJ3>D8UQ^Mu@KwFG}ru6qjWB#vlRYUJoU}V&IR#}sW-Cuiy~>`h zA^HCpAD>1RzlX21cjWO2N|*9-W6!)n4aG8XP4~S{?a7|UND4z@d#l?TQmkyxhrO9L z&WE~J*6qqEhKtZ((_C}2ebMaw7ceetGQxgMoe+CYlK~4nqXr4?)KDkBJJG^kHETU$ zPa2XrE7PxPKlH12FXh@~**F^~7Sl%9MoD+`YsN91#dVWEP08&&J<(#}m`Tp>odCk^ zzRBD?{V$Eyqm>+U++ZTM^1mTtkWBLX>GH59_hXm&gU>1UX&3pci>Jx#>}_*bEF7P| z5OCs%M>TxbKzXx0UIc892goOhW45wu8=o~5sV=iSmbKgHq?mDr-DLvDM<$?$Wv;O) zqTq)(nwHz{KVU`5+W)tbY*rRljz78GKhH0Ffq{X^E65263dyMJh^ooU z$Vn;zzZTVDbb84CkcowvkpuW8vmOh}L*|G24FCE+Wn^P#W8!?s%D{B}k^f%+c(?oG z{~PzmuU~#YIPxFgX#e~G{6dobhtJ^lLAWK^{~40~hnL}hh-72pW0Fb$B-{Vjy4crW z>Oc6_mcD`QGaD0YI}9q?EgZtuU+i#`{UL}4P{|r#KbAj_@8ec zy6S9F+O1&WA8z`2?_ddHq`TpZT7LCw;E=eSP5felu>xhEX@G`)s2=IrFFg!pTj#M8 zE+1~tCZ3(yez6cF`#7VuxG~g*pFjk>Kb+@nI~e8An8!Ybf8d5^QlqFg#`2|hqobl( z>cDbJ`iFZknFLQTtZKC*ka%BTqik>1*8s|f1)=QakAr9RkHZ@bnq446_EvJd@yONV z_1)kgzq}y%EXCO^@u<}3Gis`lF;c^;OB1vR5wpn}Ab zOT=WJbWORTMC^5Odq7)n5T6TtlP9a)7$5}t@)I_^%`LFL_ioctQ9B%4n43s#SVc8- z$WGNAc8ffq)?Lf*JIl79OckRZW5>u_^@KTbIyW}{7P`?BYOl!0ELu4)m;GQaWTk9R zNf{<)cr69e^blt-a^x5c_$GJN@DmqaMSS>C=+~OMkCfN^4o>rUUd!j>qh$Hz*})E% zguG>sW1ey-5B=J8}(FzhxrQbv2AO zNTZi4%Odl?%hmb zTM9TuBP@bs?9YFYv73?8%F)97Z)EK075lIXw?P19ZvrU0lgqra(5&6(@<|Rop}PQ`1Qb?LlK1=(XVb>^HF zq2M5SR-?_u92_NfXfu7`7I}{Cv+p)`35%>3Y}pEmp~Vnid5*Qh`GUp?!H{OzBz7nc zWt{GtoN`DI%f=cT7GJTvZ=E_~le!5nafJI7rzPNrjh%4e&4+MpWApo`=innZg$|j6 zXJ1v=mwi6A48T1p6*m_9%LYG(}DHZXsns#EedJU<}2<7GuuN!*G4v7 zoei;qYI278Eql6_a*gO3h;2`#%R@LMjomETX9zNr4OsXX@D;ct##@WZqL{-&`+2Uq zQf7WsBUpSRA8FAGVGXdo#qQtB2_p-V7~K+g!q=f~sOH<9wL zpCjcgf$`e2PkuzoX|mtw#-(4iFH*&4FE|jkg_Eqx@NdghMN|>US|(2H(X0vDRzv5& zFM|_!SAV%{HLccUmggTP=q`H4tHtB~me>JjJ0UKefTFwlwwUc2Q~XLG%tZ}KP4gzj zSJ3o0xFW(bFg>0zS(r0kL*6uFPO7%!MC$V;PB@TeT&VeJ%4&u{`FcArJx<%CIV~$T zEO{*Qz7A02>&0u(Q6RmY9T5A=p_e(?hr3>aSsrItl0oo=Nxq}=DT!c18Y>3JhbR9Q zz;7cB0kHyA}E14$38L!9HZj1LR8CUw}q=Fq6O@UV9@cc6wwg&ao?p|HD_Wf0M@@TE8)nk;zlDwo{aso#iU;oQl5W!Z(|1-hXKEasY&)h#y z<#>U|XwiA*|IJCEzws0%&F<6A5N2ayPo6WIhj1N$Q~r1*R@f{=936|`aun`#P${&yzW+UCP_-^@|DA8F`^(O z-!}-1!Y&oa?s)vD>G8lDK1O9|9wW(D9gi0DJC(UgyR6^alA$`)S`rXibJ_LJ^T#dV ztaRc~xx|FFSohjyAe<>&C2;NuHy-1OVn8K+bCTqvdH_p)l$t>pdFUJdT%LJ=M0ZZO zsR_Qca23WjIJ7^~`vFZ&pA>~pDz#shFF)oQ|8v-L_rrNHn>#PAPCldbNiLjt_`QxO zv=uY1gCWfDuo8C*YH24PdT4n52(zup;c-{$bA@}y6Uahh!H{-QFP=h3nTdE;c$bnM zBRfOY>%(t)oYxa_zk^=F$7EI(GKk7n#+4S{Ims1kEeL#+TllfGFkcA+l_pB0W5yT( zD2!A0l@`jFvdZR@jTDjPfyplWjTlo4m%&xo*PEJ2MYSaylJ5A}isGtI67RBPYKXhdZfxb<{uu3+Lu$@&OQ9 zCmPlkZOq}8!hUSN$I_YjAybdN9|u-?1rgT2B2%^|XNuIgAA4^)7%zChb;^qrrQ9@6 zBkD!Cl%CX#?)3HSIEuV?RA*Lw_pG%UyiycbizR^_LSJp6hgU=U(Ye>8x6W(4?t z)+ppj`i@Erm_2V~NR1ntqh&{{BQZDSgBZD}J5fFVBL_QTLXWeNc#rK<0pMUCJ&Ii8 zo%Z;Eb>Wdxl2A{;Aa($+6Co_dwdz-|z;6h?DW3$3*?O#I>@X0jf;Coouw)9t*Qg+T z9deDYt?9Es_*&MAQo6Gh;~HNRqAsXil9ejOz;@_V5wEPDf-| z-$9U`qm<*hI5e|#zd9WkdG4~1rFy!PDYWTentPHd-` zpwVq-{bhgQQ0&iVMzJrbL0LdoiA(V}t~J(e*}MTG&5Q-N<6%PWy>dwI&5XkB>qCO$># z*t3R&2_(2E*3H1!#&fosGhxSqcE?9qCy1EgX`@mM*gF;c+#Q7VaZGUU`AUfMeRQOK z`Rv?ZOV*il%yc()p7BZ6SUDyKi~FvxkJz5CPqBCVqe3vU=gER?iF*mqRe zs%%bjPkCh(A&^tsE=Le9|g$rc6Va^I zMrvF(MgD%HTS(!DY=|mm#=s84s!|I1Wht=nNfw1}s^;b$knKR=-&$_;Fl>q?dqX8(t5nGmcy(uv>qBIu9Su+{g@xO?p4RDDRlLtFvIIm`nvXUJXvkY07<-) z{D@rHAveo4oEBHxHCVTCbU_7)6cUb0h>)=~#`ADgKJ$jmB!%rx_EJij4<-o?SRsaR zQ8Iz8>)%=PMH}F4Y5nZZ@oI7iY!j^y%X*y{pPhzptCcXt=POyMuJpe3*LbY0(OmHc zMN#hQqiI~NAh*gS+7PI7y*YSJJP*`S{ENJAQ0TO2{tqXW%)|>Os2S#+oyc3tLp!z+ z93uP&30-w=I4b%(kUU8(O=q^RGAaUDzGS#zOArMkSP;km5$sh zFe8KLzFr>ZWtR<$TR(YUNdt7&M<=U(bk?Z`dC~+_1=M|eP{)W3(`36c#9^g<;W+pY z=NmqwdJAWg{-FBtm5W{C=rOtEZRytgcjrySof>pK7&@hybRhNWOxu-AuCcz>HP)Yc zT=@g*Bhmv{-|+4Y*58zI0*UEk{fE0Gj>Xk(P#~!aRaeRy&UaS+zW zxyJgI;(vYtx%9$L?WYf;9&B6Y+bgp~bJ9NK0nemJL6J*5|qyaa|(ScFu3GK0qtB*spJ!#o$`BBbj*i{P77w%J!9R)bMt7XP4D?Oh_4nU zIlpal2YfWB6jr=&qt9P9AU0rPW{tEAm%BF8Sva)boS{`<68P+KuK1Ld9R`zUDe%}D zLCS=e;x-as|eiC=b@3wMU(zr)6KyA_~fw6@I$*r7WcSseTgTzQ_g|+ z;UW4xog`;z9=MX*7iVlm9oC1xQ)M3bM8s3R&Zu&iBI+ZHo$|wG-&gHY7>O0KIT377 zZ(hP;_vzYqdw#x2ttV~VI~2#RG#2}wT90DUSY$H>{w>u!OTebT3V6uG?G7mF{XtSh zKT_*1n{TgE>l!2oUy$2=q}Jz=rnk&FU(x+Bwch%R74>zh&M9ki^4}G8_x8fy6m{=8 zJHSR)j;|{;_=p!GRi5!G$Vzj|m>T#I15?=?-)H|&Q5V9LSy$iXdS#$=t*Fbz{jR7p z1Rqj||4`I@K#Drwjs+w=*IyNN#~_3Pk%wE#NT_z@PPX($8+2WxsWV=|%rOgHd zOqvPbnX#1>d3-x<<)EUT>GJb_b%x^J%7RLcAlk5cvd_%^ zN_Fsp$>;dV(fJARKRS@34&Sc+o1o$t{_Jp+wsOxXT_PJ?_j@n)TLJ}OTFrUchn1sr;$L8I_&059(>cI zGhqDO?Hz#@=Ww%erNiFARt~=oM^NqQM_k5)=;OtNKwIOci*28LzTOT*uqua!#yGm- z#M8Tnrm=oV*g$Fh!|?agx-Cf)@kI#%#E7!a!}a~8-fE(wxoL+-3iOU3$}hWUXAqZ| zr=@V!)g3$}r$i5bE@IICAv?Z#?W>YOe-`Bi-r>l?b9$b~l^HeeOLt<;RWGex!wp?A zK`p-BvulW*K|YB$9kt=@J-aTgd*~v1RLXI{qlzCioA-|Cr+`Z9sG!n1rP2yf`)(3; z{Omi#=+jSq=I^FIt!VVSi^?>KLHhT22h%48bqxscRz@W3LF|{b;gW)n$%?sG5$t+F z=nNUhpuEX(b<*-?SJ>2F$J$CzVcE2Km+q))*}!LolQ~ubH;ut~keE9h%&V8gf6zbU zO9RVcQ2f@cD$h9hbLM-ZUX;q?E2tmeeYkm}^YiupD=Gg!x&Hr5`EQT^+vETC_`f~= zZ;$`mO?E1}7smSS z@qc^#-yZ+};Q0S5der)L=#h<)_0RQnLxVC%$Y0O@uRrqNLyg>_Q;cYS{?WQM=^ry0 z1(XG)<^*P`**iJE!YCv{N!IYT5WRfll`&0P;BBFxko4*$#R0SaeFoikq#=A)tqZTy zM7-`ksU`G!28@t{rCM-mw+`HG(tK5)g>%0bWoC043GVP78|h2JH*5+K-5juaMke>k zp9cxDXAiKn6MiD?DruJp*+j8K$-Yq zH%YHlPDnzkxf@2sC&`oL*q14xcZN?FNo@@ZLhzq062Gu`8Q$nfwFoOvblk6ftb3t* zVP3~Hi)Wy!fAvv*6PMGzn?O3bCOnt_VC2p@xT5$b48eUSE(2>k9aSpld?_|3QjTW^ zhm;1XaZA39NG&s?h{csrj8=rhxHRcT-PULw@MMjyP`Gmg_l}JBwB{yURmH53I*d1i z-QVfBXrG|Y94M?3T#mtK) z{GB&T~;u334KZ#dV<@B)5(Hv%k1&-TM5a%ZOZi{5M&_DeXjj-MO{ zwSB6lJ{YWiA0c-DM#yd4N#DM@GV%(m4D5jVFq8`jWlR3sx{zmr+ST*#rQj{e}N^v(Ne0j}+u4#^xBO~&LQPZKkwPazP$z6(`F_ zQ1q-};B{#CIrwKMuAWaHSVDxE{SuJ32(RWB(6bl=S3l@;5Qjsio?yF7JR z3mS#*YJFzDFdYt)G8#80lm3haj!aM#I}&4upp#G zzCV94=zIQZ4hkho1Et-^N!aP*1>H_Zgyv7AoQ`KGTr+%3?;UuX(@bFQM?(y@`nuZS z=Rm>TF@0O*d%+!B3n;j6as4Q`@0#0i#!qvUE&5OUF54i=-|2;{QnKx$nXP)~HKvpj z@$oS`g#4$NB}-OR;`Gy36au~nk0wKwKR#m}xPyFRPiW^mA-joxVp#%_h1omg=qy>T zc>~HP!~jq(27q$^zk>40s)XRIh;0Cr)A7){Fx!(7z(5>qVkMd(_S#xzMIeGtTW0@j z|J_#w@ZWj;LH>K+@z4JI=4VR*rHum;8%7G}&}3gST88-nv}f`!dK&Bxagj^w1cHSb zPwVD-K%m@ixvXom6>a9j4^R&I8z^@MK=~K|%5MhAH#qa>(U11-oeR_0) zK`&q3-0ERvRBO=O8cyuvc$EL*Lxjy$ zA3IuRzDHQr$&!{zU;g(&a*CTla)x1#7sDl|;n;{*Nrtu~K_2NyvfN|m)GR*d%NhueGOB*g>W)b*BL(hlZ6kGx|&Vw-^~(^G0b z{9ac2vBkVg{^%Q7zw{(h=cXz9#Z|B2x3)0fx{y9_h<6AK)q)D{$)wi>_ufF_v-&Zr z@O$$Y{xM&C!)@dhP^BgXCHbjvVaX3JdWqD+>1pQCCj^YT1%}Ku4ao@wSr_V_<`!g> zgcr0%+>KPaa#07$h>>BVy= zIb|d}*&5qHdt!9?#9bxKKOQFWJ3RWRqr7ZIW0- z8=(klxT^yV_drm?JqKvGD}fsBc|gNmA85F90S$M`n}$2Y9~$m)bkPUr=sJph8bHH6 zMI>&vb<5GbdFL43XaU$EXHD5<Ftf25)HZyqbAPW%2hqEJ9jBG;p-jlcQuaYMEfrR= zJp~O^!>}n>Pq06}3;+4z|Al<~pI!Wa=Hs^q|9>!ab$jsN9{jfl|LwsK3SQkF{I>`H z?ZJP0@ZTQ%ZvTHd`2Pz2ekBuUX8v=>y+kDn1_vAr>=`5&nAb0)@t}|Vw?N-(!AGr( zXrh#|pJ=lao7737s|7irSLR_t+uD&NN;c6o0+FR%WA3&RhtW_%cq`c#q@=9ihDDG} z>LNovPM^h?!FW8kaTU$SE`mB<+d3<76{NOHA%rpu2QiDa^UC(QsvGTgkTiZ~5x24NoS~occ3OgTOIJK;X5%>eVs$oK87o3=Y#r%W22w~zb%r&(Y#aN# zKSmA5$D~&{KVj3yB_6aL8b%WJ+EX6%doliQ_&>RSP54juue*QSzn*>h zr~PYYCBJw7U+rHX{f+(W)xW!cJ@S43x}r;{0AXk4R8#x4gmSWu1lFLJKKVQ^;ybqI z!+cVZ#FA5Q*}Tl@M9B<&SJTJ9{KEXUsbLArkF)F9S)=ZvkVVf}cA4#)8h^MnU0?5J zir>!LNv(%@evTHC%pF;^1NPZ&7$N74=@)!>=TCj+MUqM^4-D*wCT=XRfGH|CNz3@Unc~z_l)vucc7Gu~y@fEkq4GX_h9ORU2QE|?J|>P?pMaTMSm-3LmHPi%e0B(>on z;*C(qlAF59&YR8OmM0jE(g=`}h;eISU^prU_!ajOgaD#(L59#bKs1i~T{Py5gj?Q` zuBN#&|J;#43h8kP)Q}YG%N~O(f&2H5@4XUfC<${llb^wCn~i_**7&f*eRAr~TE+Iapp^PIgn?JGvYyYSXP`OQqFLQ^oY5c?6H|RI|h1J zuN8${|7Dds7_SSnSE*B6(0%a9uF!T;Deg&&D~S}5?W5^CJOg*+uMo|>UhF|QeekOA zQuLgvQr~msPJALR4fwyQjkZSCuI96AMe73h5qEhK>oY}boojVL@RVD%b10nboYwXp z3CJ|wm-8DOn?yHr=t6YD*ABEUjA*F!`Sj%hh@R#&=U>y)GP+SR40F%`wjMxFsc>nF zrns{b+Y*H=7MSA<1C1Y1aig+gfG@d|smrt^CuC*I*w;)=#o#b|FhuW^-9vaa|MCk2 z0;?R=;N90P^JlGF{&B{8tZQ8zAMZi*qw;bTp2#w$e(dtn^KNYB1@hs5XiQ0TEgF{` z0HQIaQ`&>ddsBK1Fl|nsUgdtI2#8miP5SN`JF@)9htvJ=jE!aZEoG|w@oomN$&XWO zKm*vH!9qv0O54rYv3BFvZ56mo#lZ5;N~c3BG)wT^MDL_Fdr(>co-rsN&Q{#?F-ydk3zEUwX3^*Zlch0#4)X-`w+1JAsLZ z@_ZreCK6F_L>6B)B|W}6p>%*GQn!_YiQa0e8ar|PIJF&|ZyVUBB)lD49u8KnI( zMg-8uJHwAv&?2#L&)~%tq;bCUQy%c)vjX>%)(D%^KKA*{4NL#5lOqL{z74)^J$+-U z8L}IGS{xIfA>nSVi2&)dN50|{6m;kVh{kpM%`mZK2I$Swo8b5WKusp`KK>3+RkS5y zux)mRPe#4)+5px$1=*^Z_3C-pRKqsf1xIv(C3&W4|lE8<_<;SpyR^c6*uJQ zAXjjyF(sz7Mg34Gl9x)i)EM|*PGCPcR_anPSS`>?L#)kCh&ByJR8deW%QoXWfuJZx z##{Gf!2``-V<&>#V%6iH++w~(x$F7sy6^MX6LNcz}OPc|(l(X^N)#?+Z4l zft_h7@;A@9<6A&s@3I1#2t3(gYWQ-RKx%=AY7(~i?m=1~izmhF@e1Vcf~E8VT)L6K z-)lsSWxmRcw&$J7d;0vS^LTQI6;OuR>@C_W+zP+?)Y*P`bYEc6Psv!#Kv`x=bviFw z4fsQWm1^wZ?*;L(9|ds_pde28y&yiI`;8_}`AK7Rrw#dD30MdlqH(#Q`dI2bbQOQa zJkcuyGC(fQhbfNvAr}{evx~Yc{eY)v*9Gwp^%hO={u;{4g;GM2-p=4JjS5;YgKgfgaiyHL6;)_=UqM1RN8_^D{%BR>#iqqoex3m)aLX3b%&1D zAv-4Ri}6P9{1Q#Dr)+9h;6+9Y7_JWNIDIRQWml-t;D`Lrmk+L5-B>pq8a%Bj7B}{c zJ9>Jg?(p?FLA703+a2vb?K2L4gyu~AfRq~KFX~7!i?zuq5`2ehA zD|#o)r+$}jLw}mT{${tgczLZB``@U=VT-kaw&qP23$OC|`ao*2eM5Z$omJu~@_Ue4 zO!?v`wU`D_i`^;#wOAIU79aIi6CTYyap+f|SB+wc>JeRZ1JvStKrNmC)ZzhmRoHZ+)DtHlJU*J|-0uU<&w ze#cCD8O%7K7MpOSU#rF2y+nXo{3mq!^SS>k(dj=q_x}z$y}kCuw_l}x@Tv>nJay4F zbkUbao4L4hy~zqK|DF}Pz4mXf{o8B*_S(O__HVC!>3u;-V5kk2d@D7BI5OBb-1+v} zzrFTvul@hE*ZyBQ*stWK>`Z^=rtVX)OP>L5$_Mjnxhd!)|1Itn!EK4p1h~YXg_J(X z#t4B`A}FlG(5O}mt`jt~tBFaz&Nx7K!=wfe|0rGp#{Qss2Fowb8J=eODWsnv)A`l_ zE{cw{7c^f2vKNVlmnztx{m5)nF?5rrxoe08{-NV)R%-LNkTfIqm>2m)hP8zg?XUJA zAlx$%S94pA9yygqd@T;i@H7?KQE6EvelbX;sy$xQwz=tjYM2t2a(ri~>XP^QTk}X7 zgN^OjB)Y^#wwLGPR7yMb^p4pVITvYl3feRg%va7Z=0;ye5N&guSIx2(I$OO6^dxyp z!^mOu8HKDe+)WTy=n9Ojr5L61?O@-2cyrpMYPGfDr_JvKI8KG;D}iMwf!{?TRk0l1bxAZ6VU_r?G)Y(PLyyyGwpE>Gd?@Kdjl?Q zPoiGXKE;f+9!WQr>Le&Sa>{$q`>Fmb|D$XPcLYU7`L;^KV&s% z)id`M|35>3L9f4mOn`rW0)8a{{`oVweG+b;gx{Zpe=p1a`E~doV%gM840_T4%MSg; zEF1Kt{|QURLTMvt#J8Tv4K_s;4Og(RcViIbwEgU%T$MBkt^UU79_TBAX8NbkSEf=m?A zIq$M1peXuge}(5P8GGz{Ics0&&8O)WO5}qRX=5i?H)ANwY$sQmh%6Hg^HHFJT$TtY zIy7+uQF!CHL-H&hI)RS0BL#?NCtgRhk$#S5^Lqi&>|W)~0iRf;A*U0k1oDL5kU;~q za02(Qdblb4+BMGaXv1SuO}<#d)u48=bP+Mc7#Ip@!==^Ec@ob*8Qr;@t1J708+nJl zRWq`52(p8hPT36q(x$ zBZn3$<1zBmG*3UbptgcvT*ZNBJy@eHV|bHmBP7j;Nu02qYmj0dsN8e@{4^e$Od;w6 zWjHkJJ#~1ep6K!Dsx`Ds@30K)iI3!+V|pTb4}k$}6x}Q1RZBoagZ1Qc6IN7T5YU^L z$>O0L@N?iP$to-&NM9>DLz%Qia~ycSRwEpEj&kpjW0DtMZq{`*o2AJ=0ap0jG3$2| z*d8!}^_fz7l?<$z5-xu?fv43Uab-&vtD2HF*MQl;_U2O0So6(A!D5)&w>E#2kFqqv z8{P9l*2GdfUeKdvF47MMXtqPT1&C%pYC^lA*&AZP`;>`AqUV32*;zL<8+r9i&Jtk} zEBJmgS zW3s^qS}LV#lv1Br65B*!p7u`;TFkJpst+?}mCB8EXtq%oKZ7F~8;Mbx$c*2XEY+8P zS&f7J*0^u{gEmu+CBoOv=ofFTr;ilt-l#Ra&Lm+5EnsK=SipXK{&sMnVOHaNH9JA1 zkh0`WfP|qlo2#{Dwhw%y#vLkG2nBZ^9N|^;0e+anoR7#(Npr)nB*{}iHG9Px(>@)1 zoGG4eeq_!8aDr!%jmGjb-^gn+j%Tto@DZ7F=W)I6gy2CnDmEcuM6K*SaNnB_Q1$ zi36&PNg>+H$rgW&c=EK%)Vi(WKkZ+So9pOxp43M_B zuQ7ck7+W)!7b#;*-F)HyVehS@s@fN~U%DFvDd`3YK|s1&5Co(_>F$yS3F$^U1ZkA+ zmhMIxB&1Us?p)yB#~tVW?e~4J=iD(a|1y-d*5Et!ne)T*eDDz+WsY{4vx^KNFcoyJqD7XdpdR?_zWtMAnHrq*<+9z6Ydk~2miOU$O4NP~Wy|zK zTUyAji;~VC#9`Ht!f~mzSYG0N442yveIc|{KKq_wLq=p`GOhtTI=#K3f-=fNgX4o6 z(qd?+NEkLJ!}$eL$mE1t#2Y>$QrK4!t7|mk&HJ?%NX!T#m7D5fDTBn_h^^vKk^Sd& zK}3}qum;R2eSAoR8a=4*0-^R=>XZk_PskFh$>MdB#M)b3aU~*56?z|`?P-es5MZC& z3a}mXI=$<>P@ypuV$bjzp=q9fOP2iv>umI9%h*HXo+)w$u|!L_&w3Ph8X*A-4E1d4 ziNn{IQ5aZDZm6pRqR-H~oZ5ssiXOf1lZzP?Fi?>Aj+sV+*%e`ee>vMkp1&b+g3-qX zY5?!_0tRe{e;KeD;3NZ)E}=?xDWtn&yZW^jKug&qz*6?^`=I($m|ELOz<|vcsykXs zkWMe^>pP^eUqj^a&FG4Ih+G8EYf3&2El4a8>9+=O4;8+4L{tHs=F5Agxi<#v*?$?Z zgZsWVedw-w6dQtZTHM-&sFJF%L`^lHP4*s@m_LlQQZ!5k6PrEJbo@qvjUEA8tHBNs zY{Dl7Hv}6F7gA(r=-K@cPQlz%#^nYTOuoa{jL*nDTTW3KJ7Fo7Q{O*`D)o+VlVd@V zToHf352ZuP^kSmb;Bi2$q$yKWEw_sXs8pwA~?$^+UHBO@V(T|=`cJQJwxoK@ITT*d&Ar)8C)E|msf2&kVAINZCUwNrH8=08LMUd245Uqm;PrZyXMKGak;!Hl z-w&a!VWOnrs&U%Mndn+j4(wwa5n$zQJ-q5DzqMdLD9uuQi7_Xqet=w5E3Y+Pv7JKy zb{7&&D?VhwaOO?XqhijFQSM8Zl9o-pIUc-Du401LLr zw@+8BfCW3!5we$vtTH*bsGpC75oE!}K?PZ`>*9KphetzO=qeklVQwtg^YZt$lX2LW zI<1{b?q6vG^Vp9Jst9Hor~=(~&bbU8*Cjs1uB|O(U5I@9nx8;Zx^IU!-^q>VREN7t zL&jnSuwakJ_RW|=_xqOFSbg%iwP5e{eumOrqHP5Fzu=puj+`3w${TypkBDTyn<(?m zKK1R6E~!>4OkyrEa^Ho?D{of}RxBcJx zZSaddhYduJYCKT?SDj-#a-k+PDKe`2Lsvl8ve5s|KDH2OANwbW{mrFHbvpPo+4wuK zkNpHg&-s{r?h|su9F=f0PUNy9^YUx!4slqG5}XY`dJnkKDlul4m^Uj9n?8C@b|o(g zj)DHKjTWf?I|1td+N`>K2l~HToBGvW+@?4E-;z$Wr=b3?GVA0`|5sCa9wI;_%Y5*1 zz}Q#A-2QMfI>AB=IRgm~+fxBTKlzbE{3o&e1B2PB*S255o_)uz_APnaMy)Bi(X?rG zK9Bm_z5VSS&CfCaS2FB>6Z8K^hJBav?^6C<%D+qbcPala<=>@zj<&m$f0y#_QvO}a z|EDScKgzBjvoinLgI&?GJYWj2YgMRU%C2u-`JWLx=BJR%Xd>-aSg|OCBIF+gX^vr5 zuto?-*mot>dpw}@Lc+vZqwFi7n=ke_zG(0hlbBxCy7W74CXHe+Fx7;JGqVleLpQ6a zt$#lbJ%~JJ|6(ImEqjD{Vg5~LuhYIwo8=0PM;haxcRgbrWD*@vLAV6Vj&oIgd z+0NQ_bF{d&8Et!&1w!2kdGc^}TT||nb6-J`L$J| z;^4EJz_Ix!QAYFoC+6tn%w6oyzUo`71$qx{^@t}^T0NChQ-MMkND(<*t!0y7YTvN; z^@*S-<9$-pV-Tv9A4t08erXqVuEU668S@pM!I>kV{(Iy&hqU_j#s$NE1k;Xvb<&h7 zr0e5z0v>2)>SaUm+FoN3mP7I4L>cKAXL(tG=WgQyJa;NB&5p~P+_l?l6z|DW|1(H7 z@nY7_6D;Qrc%jy4>!|QVUB=d(rj7wzmwV@t#FVbAYkYGCowPP&wuC<9Vku?}O9!ha zKS_{7!JQ~34~}Z{4?ALrt4}YFAI$2`^j$MNvC$OZw0cx4N|PWHc6`m!V<>eaK~CiV zU4p!f14xkdv;YY*Ez=u7f-HOl2a+Ja0VK$H=RZl1Z-<=~LBq~{Yd?ma2_hLj89VXy z&)p0=UkLsfcAmsg!(`ve0EV4Q>+n?N3Nrm$djfc!ksDoEZIwCKvg`Pg>e6!Zt%yHu z+DmChDhqKXD-SCxhYZ>(yTWd<`A=!6i*Cy;)%XELsd=PcM4Ih zI2-|iND*0?X;ak(hQ(Pr(t0TmgEg+`7+;Bt$NtQA8F1D8xAH9(gIo9C&?7q;L2$>_ zl`?I>Zz%*K;FJ*|ENyO3<$b{sg`s+<9hq&HiXY&wyTTqxwdyv#%^#Y~A*b|Z&-_5_ zj2r=wATK$!Vul?ezNc@7t67I9#{M{O0jQ7Na2ofzJcZHc#xk;b*kd*(A7ea=*kw(g zoh_fzA2%ri=q_4d)uT!t`x&DUd*X0t$D7sXncA5l6Y>f7cDoNj?gMjt?>-ilk&X2L zfS0@$V?mWFraG6HJ}u>ervU0~w4$`9M1mQhLMAp!YwHy9%=Lfy ze;S!g9u0%O>k7B2a6xIAZM!H(@6YZ-)jPLu&wWb1*vKTvji6ElCd<`?X;uY2iG9FE z+?J;#9sM{k8+UoeEC@4YzLwCg!UhjMhI3tu`%AhLp1G0$J+4>N;Zl>&>98eJyEge^&!VBg)+hNh=^k+HKMVVolTd5i&k+ZnUTt=$Bjyof+jT|f{9)-T-#b~Kk= zfh?^U%)*WDfppsz;^6*M0Pp6E+~Qr?d381IWE(DAE%dXS{1sG5els zEa9!?M{sv)T9N)51Inl(4UPjhl*Q2g8@$_o(Q{DnfI!%FRt%+$ynj$C%xAgt9Qq~H zTT9N;5Z(-d7##m+aFi(yT)2GIVzPavPm9b!x2A zL?O(CV#^p4LIi7Vl$=HcPN^qkH`r%7tm_c~f?sd^V zS<9#GbR%Ka6;!b{%b4P{Y%aF{LqEA+;zvLE?Qi|$+FgpuWvS)WB1<@Bz=Mnr(A{)( zw*zG1Z`D(2G;VcKiU-x9#rJXXB-uN6Zal~vnUpm0M9nc?LQM5vpIcgmYkq8g{#JS0 z)I&nPoYXN;L%YxyVhI;RxL=#4Ax41a_3|5ACz4~{B-x}K+vgpz6iS*M5J`AqoRDI5 z!p^8Dv$jI9tW&?}76hU`eyHNf2mM(lk9i2*?OKfh?gi+=O?d}K7pNR%3 z^(UziUJ}=3lMivwgq<(KkSw)7sD9ea1fF>>oqv{pI{e(1+e@lEgV zq@tWt=Wy=Z%ru9K=NURFI?Hd=pDnUXC&OA*6Z8AH*7 z(niRbH9AcNYN}fEh%Hm{C2n*pT5l9CXoq=6>YfzCxpTQ<%i?;(PFaQ#unlc;_T{bF zsVX6~6HZ8yutytm&cMg6>bUZv%2DZ0z&G`x3t-&+L3WRS>nB_N)K4BKMvm#pEz*+G zt%`7b;nC&`U8-8LX(H$EMUfNJvtlkUTangW-K3B;6w_ZI5XA-KXBUcbpKEQ5L&{iNB$n#-6K z@hm>VKr&`5_4N505ptv6+`KtgH*07ytw1|bb$0^T&oAo&_=>l{HdR8^7rx=8E9wAj z_hWSn-CQ5z2F^)J&n??UnOC2AgUVA(1F+py5ZkTq^I-N@3I(xUO`lQHt)OeMSB^|D z=ife|lD#Mg`pHk73mdFEyT1VaM=nSQuu(E-pQ5oOoypjD`+Rn@>Ai%q9nggh;3vk1CB(2c3!k^S4T}VmQck4(KcqR>iZRg3zBL!@J-*xWv z`}Mnm!?5;^EDco&3^C_t>fKKH{_qoq^Ol@pgV8o@r|8+MZr1FY{DkEkugK@CJF`*! zARoxhxS(HCloQ_i+*FHhiHfD;Wk)jwF#Y=FLJRw zUh4rb-ef~U7P}YxtTuWqa&qbWEYTm??$43`7qZ=d7y183wtJWOF)&#}rtb;dCH_CJ z5#1&JyTpH&`0o<`UE;q>{CA1}F7e+b{{JEI|CO=*!jAG|w#R?wyrF9ZqF}$?cYO28 z|BR{enNKlcwGlBi9g5m*XnVxJ4XO7`%o*=QeqYV-#hgq9npfCvyicW9LqmI_KRq@N3U)^;zxURC zM{WhxLw%=iX1nQR@Z_`Ot6H|MoQ^X+AtT0)9EFt^`yHNsw+X)q&>Hj6Ko-!WUf7{+muouK75F%9#Pz+vWsIukrs}2KwwlC@&hHfzg~nLn zSrU)3E#{FUVBnR;s%rSq zztXpQB^I}<*5UdV%Tk8fu5*-GaU<;F%LjgRnraeqYl^efsvd{8DOe6z$0rWw$iLkQ z|Mj}~mFyXGUHm3@lbJ2VP=$N@au{}=Oc z&`140<>7Wa2s3ZWr}&YgTR%zgv$Of9q(Y994`8L z?qCaGWVm38n1A=J=McY~4f<+?u?l6EDT0Q6s1oJgCp8RZQ|q=9As3<7D)u4sbaOAz z?%Dg6qJ|J_J_2Fzz6kEL&tO!8<8J$SegPZqNev>J7%P{W4Gsz>sr~vX86SvYG6^&= zEJ{?vk$58L4Im>kJz2xdBqCvbGs#w0h6c{+o<-E_H5nrZ@2zHg;!&u?>$<=}e)S<) zl;rFZe_D*Qh?;6(h-7o`e3+P0h!v0b2N1vaI}oS)0mK7-e>^r?+k^B2h=b4SUd~?k za@i#R0OI&EVWDRY7_Q5_7^45$oOpKnHSYZIOk~<6-6O5_M5waezVrU`pwp)Ki0bK|FqT(>NkVdx~KkazZqET{=0s2 zA!pOZPyObS^Fh-zP`{Z9wARgjyVjirtabPDvlA!YtaTf1amd`mqyG4m>_InyB-HtF zW>6QD<20ckhEVAXFGGqi&CAU0#OUF#(L~Y*U)GpubmMI9xNy1qa#&6Za}?=O1lp#P z^R`H+>!N+7N1hqu5sG9(enoq3YqYtj=!7c-R`tIAeb>WLTiFN-Z`z*Em2e^^ZM@&# zg21{M0M_3u6{7BmzC0C-@vUS9f6$}(B(6;4d?dYDWXn&G@7&o$@w^#*i5$}uqb#{m zl$7+{>Cs_lRSF!XoUu&mCcO9&v>;NN829!4fecCZc^S}Nw<8y}Df!zIf)G;h_%FpM zh#W^1!3p;o99kxijE%@gu#xPygUp4!%d8OlkLPer6P{05eE|%}FV+?|85pXOpV!5B zCXXR2+em4W;|eE3sGF~Pw%)V6R#^KWraj=ru7|6jJ*2OeFF_9XD0>iLNm1nM@Ze(Z zYi&uBH`F884~&gs{A2u!r?i5F`Q?Ztup=$!vy2jyzkHgkZw=dfz44V7F+CMdQ~V(@ zeTm46LJw_GWg>Il9^rrWo10M>-7uxIN8;t^ciAgJ{M($nYT4?YD!{+3a=~Ox7EZm6 z>V6yO2KkNAL4M=lAAV!|AAaN5XMo?hm-aWmF;he(fsA?L)RNfHt=~8wvJ%Xu6T4{U zMWabBAgPr3v)_1)d`t9ppc@7l=$^S9=*G|Ypnx_x)X(N8fa)#TMA_ zNo&35BWF2ERZRm7bU*qr&>cBwJ5-0pQ1r%6q(A(2pnJy4#>~^Huh-U^#A7OHBv`m{ zm6_(T2%3Gd@4^|IHd)$NqEEiFW_1#30RR42g6>Wa;@=-Y{JS#qU;O+0A}Dt^OjqUP zhu>J!3-B9v|GnSXjLX?tzanx9Rp=1y0Dpy4;KFzZnHByDPI=p(Qf0M{*{WhSf_&&^X~IEhJ_2K3C)i_x-=8_8+Z&}&<1C!Py=T_M5O8Zf=n>L!jZ z*cW`l7YUovXOX1#jXIoBD!(=i`UzWzHAIMW$f0NFJO6RN3v{q`ZBhXX3;Tb8kqoa&LL;n7FDPu@lY~~G1HUJFjA#Rv!{3lZOFp@ zUQ_`$UgTrJhN7B6E_uu|38X>scfcPs*)MHWI(4!GZ#f}8?Q418_ZTz7|kV*dXAy6 z4zr{W_M!l;2>jkefazr3W_m^pzhVxVEpDc5psMX8uIqJc***@a&(G% zBiomkN$BG#tpcB3SS*H`a!q(BAKh|rP{-L+&ri8tT5D`)itpXM1z6&GR>G#TYQ#A` z-HJx}tE6MPCg}4xh%;i<8Cau*Y-xinW#pgA)Cu*lA0@R zdkFD-V!OtM4r`n@L=bO4_U+Myyzioq?tpg{_WcJ&_Q+*e@^e?2 z{U|wafCG}_?%yTHoFK_@J4kYz14xdY4F7K=$5ly;`lw{}AL8rOQAumE&@A&F%$(ar)IooWoz6yP@ zT2yOuyjBmMzR6~be2fKv@Tf6w0E9RF355Tg^?xM@|2J9xpMdbYsLy&A_3xtoUDUse z`gc+PF6!S!{ky1t7xnL={{KeQ|10TJ`*n_Cb~ZM~-w@+1I{A5`*!|bO@IT{vcN^XR zf8FSQ^=psc-vjQS&%fV)<_+9k2X_nI|Eq;=&;QIZ{4W7)fppj#*)*uo{Ru-B6u<+vf8oQlOZ>W$0Y* zJ(f~>ho9C>OwQ?CQ5JL@8f&iE6G%>JNKi%RwGFv1UEJR7^zK_YgMjV9H-%gM+~Ys+ z>*MRkzZJR(1ez|WuAoZK#dC)&BHr)y6t*5w>uSS+C-{<$Lf(&*KV~;RdrY?}nVlKU zWVPU@gX(tO1vVUI8#5W*@tiY_;{IDynd6aS+49!h?~(4j`Lp)n=$jxl-Rmn*_VJh1b;c-46Xwj;AzA+rO|l_nxz*w;|>cb23PhU6LL z(fJux=hb_DCurSz_|U*yYq1{u4~1^%6Uzhbn?ko6Q0V@6E1TvEx|L1iM0RRH8Xuw! zM2%E{^(UQXkE%J>J;jF~gAT)=mr*qGJ2*|Aj+DzIL{ak1E$z?LAw-$@sOM=%^stR| zNwR(-^2D6$OBd?%H|9_m+S%MCRLphut<>(#-{eaPk$QQAM?R6qp(fr-PQdg;>=oh< zoY?Xxy#AWSWZo24AjB_|+05)6yk*&io+t=C#YW|r^!1Ilz(G%PE2i}Rragz6;nvE# zBlrPv|3Q>kpVk>H(&OlNkf^1Q%@VYUT7>vwTu&9=z#!xg`?mwXAkcK>N}Is~{vaj9 zHGo8wUZ51iY+*lcF4Dh)$Def2@RO_Q%%J*5kY5^ou~83mfjc&uekdT~1c}NjTp+B3 z)mH5oNoI^SC}(pxa}TemtNT7g2gMPEqJ2)*>j-+>=Q;{OfpVq#n=LB0``m!F8rbJ1 znH8tk>KH2&_d2+HsK+*OZic?mYH zo|jSGG`KZ~(r0SNKM#q2Wc;2Kma%ZG-OyBY#_6ve?*3I!%S0@Hl9qAa$dRJCETnB4 z;c2AbfGlcbDzrrxOIG9i-trfb;%Jp}OKVO1io$uim6fJMan_|PSjLE9l9E#3s2Ln@`?$QP?C}d zfgYK3{$jv;>Mb7>N^}UpTj&Gi;m8$6C$3}{)+LrQA4e=wE%0P}AF40bh{X&mCj3Fl z1wW>`6KVvX1iJa9fs^#V;`i0rn;vT2T=6cZRQ#)eoS?DO69t; z(v_RTTaG8deZP@S>uW6{c(GJ+W6khnE7iTjgO7%GJebR`vt^6VJkDednkummQ$@O(GMJ%W8A`d=c~%{WIsP_dwG?(@A6$iw2P=k-f- z*=nvkeud`lLhn`DVKlkQrRLfGFv)o5yrU`ZE2lF;#K&4UKA|81^oQqTgIvGKrt1N# z^(Bw9rT*~Vp%Br`=Zn5-akK_{7jPLbzGe#Ebcr!%OquB|{s`R!<77|&3c?rBD5Up| zrH$j0P01F87Ro45?GbpfvUPOUO~7#8%Vqx6H4TfAtFZ6$*wO?y)$z@uY{zG63hK5Q zl)kj!bkeAUAippz1M#FZ`V8;B+=xv|K_SX0it)$QNjy~aCR8pA0Lr#(m~twcDW2Eq z42!~}hQL?Z*F^9dA{A=zz^R9+a4EPrLqj(J!^7{9pcnI9kP z8uhtjK(1PX_Y^!Xd8Ho`d2yRpS`7iE$+59&ev_W(RX`3_|MVnSD3bW7MQDT;k<~4;~ z(fh6F!@7u1$}F%3#{E%tLY{-UPo5|^zs;R|aw4V}4h1b#Zn~RJi5mkguW}|!(Co(R zyc=Re=ySDpf!!;YG2uV6&&q~iyvSVl`C>{g&)`porI=)W~%lKFSL|gI$ zp5_z`6&K_^$3Ufv7H-=zL;xrGR^b-tQh@Uv*XK6mzxK1f5Wy`63TEo3;{VWKfvhxty(aa zi7Ew2WyA?Y!#AMyoyY2=*8QFhFWOjwjj`UWEF%Z>MYc2)LG8}`FK1=KF?0cb(1!VH zz!$sAVcw{GB(Kzc`HDTK=muiLD;SA^AU4{SB@?Q)9L=*oce$ld{x#G6=PvhWk20uS zNx}u6n=bd4A6@QebF40vt`0YbK$W{=e zD5%SAbB!?Ts{sjT(zNez+vPU*1-jh&W7nNOy4(#3pe}c)1JLE>1iIW#H(l;ykBNr+ zNpr3*_Ajgthb?Vu?$1f5756=4OseUG==06Av10c2btN8}Ia}!c45!;dTRB^B)8*y_ zb-5R!9}$Mwo8a)xg`6F{DXC0gOd=^Ua^kCh$KeOlbFd%YXj=}zPv&$vqXKSS6RMJ^DLTe;Ve7$jc|gqR-S$*u-Y z&V=pc=rfMD?NPAl~YVOkMA*q<0BJ3gk^c+&_~4wc{KghybZCV1=}D9N}V0|XyIieB!Y`T zhQ<@&^zDUb(6geSIz|}2pcd#)EbEKy6i&PF7~Z(1r_pX)(?L8hllTt$X1q6G{ENp2 z*whtRMfc=YQT6?%Ub{p5@$u5nY2W47-q-w1+W#}bz6<+zVgD}d--Z3Vuzwf!@526F z*uM+=cVYi7?Ek+I_Wug8e_@TAot=a8PZXP!hZyERP~*ON<$s3nctS>)u-a3o1|6UH zg}emzx}$8odz91-EW(&PJj_EsitTwoEkDo^`{FzFO+Np^Q7c0l3|zIKAU5UNjmVw= zR$Iii0@AVvVg4RiDMSDGZU&Yz!4MMi+QP?yY_L?aXJ`ZgUeHF#v>iSfoPJTlgosry zFvKJJpOJ<=tW8B)aF3VmlBv-x(JCgy21?xf)W4Uw``ioJE`$osK0ZT9qyDMHodA@$ zx&K_^mb{ov`wA*?7t{eI?%9*h-%8xwzC+333Lko`Iu$B(*ZaATTHP8)&}+c`#DkvV zCiWH4MO7+h;?<%jequR`WEtq%Z_3Q zu}@k~*a=AnN<1@B)?Nf*&l2m8Q9FNM4R2Y!AQ0|%8`xFp4h$}d3GGAtsuF6Oix)O3 z;|0;@{Ja-jWm<|y)7W0>Nc*P7ZNLsIH%rtnIaBf=_G~}HK@j{qyzl3v1kecn5da2{3kWcb)vB>*POL4p#@xxaND34cENQ zQ!X4Q4NmRLxX;lT+wr454f=dO0W{TGaI-PVMBylarW$!Al}A)Q=|)p+PmwGO(p100 zf07FeXsTx!N03aFCZgq}^0XsZ{L|4dt{*{4D-5aVE0ZcL`^RWg^Rmt;=kZQr&5JspqtIH#L}UM^&!urCt_H7o$Oq|C z>BLm(Zm^yg0&s99k&1cQBAPiFoblnR+@QYI13uW1HIh`CoE`9F&h1i%>O=j^a*TXL z;)=$^+#yt)U5zTLG$lR)dSu0K4q3l*@IC|5CEB)$NGMIdFHhhU-D+MeOSjfa z$L2}NQX-^YE)WObh3%7?qx08BxZ&WJ9-6yf_5Q%YFD)fupQd?Ts-o3O1j>I*b<&qz zL`pyQlOL8t8F%utGoRNpX%V6T0bf6ABCR!8#i#!U8>RRve(m{jO1oloa>a`f7f< z?~H2TLlS&cv|DZ7VluBk!6K}mBkvwG`6U#y6gkx46OR`c1R+aqtTk2^bZO<_{u4Vd#_}Zp_M_Y0C6%Gvl!567C0<(YxPxoi!rM? zPO8qk&l5m3f8|Hrf$}^3-jb>!`9$24DoPcid~Xor9X;b2Y?du{qM+G=5JR`Z;9G^+ z$1mv6(MH4~sL1i0RK}L0%}vYcm~}5^yJ~t{IOtob9Kh;m|mdVM>!X5d73QH=msE$Z)pzHKbk77=DksH3x#bz#9i{>^Pz}Y8wVE z(vC4pa!O?6`~LRhHY0w^!O*jE8`aw-^N@5AY_oA4Qe3aT!Q+n@KGjB=?M7h99IwNgFJ26F&_#=NKGtpm zRllO%V&S|=@`e0I(Ya-c(QU_@C3AiJ7PoeMbn^a9DX4x^oLf=#sA-lGAgWG&&6Ut& za0x7#b2+{^eDLiv2LklUBq2vXcHF9ZuYmzXWd)TT9r~`5V3!%LXkEUJqX6WDB=xCS ze%i5`#Zbsm7U`yGvsNJO;L?;DChg+~i3)tao$c)`JzZW(u5Og)ShEq-F}y@%u&?B? z)@Ybf(KnBr=mxn-Ub`CxpkNVX1sV5IeZi*sLt#ih1c#Pi4Oje%LOv zVIU;m*L$NFRm}gP=~+nQGud!nFW2*ySZUSiYq2LA8dZF4vOwh(HV@bLum4SblUI=WFrOvmf}X8*kj&QF^tD==gjebn=`Lq%T#@dTh@ve44N|!rnCU&%nQDpm5(+qR@3gD z53&N~>@qX6&*cyWdtMhSA?yKQ!T9nSI?-&*Tl{P!#f1>4h`gz6jPIpHR2fQdmcztDnzILUr* z0Cq5*SG@bF3${*~xJBD_2CoZ%z=I}Mk?3c8;c97k9?xZADVoRUr=7k+I#%etJf-?d z5jgbm?CS#g0~Gz$;f-a})1?y(^N)pKK4sdcT$PG%x>rB<>aJI_2kxQ9fFJTXs5`i< zKE-KiI(F!Dv1d+r=;)+q(#(GE*n@*NC3(j6#omSSS&Oc7P2!BYkY1#Q28Y7|1vkD@ z-{~m?UWli-!v+=mszR8|I^63DW0a2vd!J1g9x6vltva*J6lh#IauL=@891#LCc>8( z+40r9V0YVtul5XPX~{M;GQaRvPQ*A33j_l{gh*{tFJYq zoctOgdKolY^oe=jPG;Kso^_2XEQ>F%r&-k&ONS^HQePYDwXKQKD*L#;XIWi()jMzd zI-kX0IKvLvd2^Qo=RuCzvzhvRbm{WED|T@o!|VHAdjp$aG#+kKy2zHjuEN#F3}C4{ zPuQ98o!i0`TsX+#Qt1Io+>eF?ls9|NNKi=x?Y5sm%;}|VaM`ymYR=NfDlQ zLYcB!RT6Zp^>8L!!;RQ*HN0aWK~+m+#;}}mdE&bSPDH(XPsZUJT0phm@x97Do$wsx z?|h|Sbd(baUG2Z!OBjxMCdv@l$PE6dzsmm0r}i6DwS(mfV5)|x_HB7PMy=Tu-?V9Y zzV^F6?DnSS=cNBDf8Q1KQ0#A#{+|)}UC_S^`gcM9F6iF{{kx!l7xeFfKHx373;K6K z|1RkNUj+TXQodhEzd4v6v;2vE?+Sh@W&~u_v5>!1R(3LVMGmFj{>$ zMCL>%{0=`(LCyxsJWL$qss^~Xa(Y^64VM2xFb^FSgr|>ver#<2qpMCI!#9J+!lJcg z)uib&Pglkd>q)CWPqVE!uZ2igvj$Z>oyn~c{(LE%lrB=U+4*D-*(Sq}z(tVXeA08mczEjV=s>|1PhE>vYwa6N`l z>8|LJh(oM!>5`uvqf)M1&WT}vNEBm0?=FKP9{i|U6;WOWQqFQwT?Ij2f|0XdWk}EA z!-nkmLUqIYOt1~NO+^{@KB?r2>hBx*O$UzN4-`=`qkO%2eCuRd0uxR;GfABNx6^2Z zOTK@asx)MO{G>xj#}-{NJXE0E$yYOt$98^a5Bk3Xi*J6Ie-Dd)K2E<77XRTL+#Rc5 zcC7xRZ1oR6)c+D&og-3pQ32TM?5}03Hy`zHp1Ax|w)#`UI00xFBmO**UE0gb>*lig zijUW7Xvg(a%0QBu=|BlSOuZVEM9{t&R@Ef_*&^}LYnzA<5{Z~2(J=zT0|w8oI2mOy zd-l%iqy!~m(20^_un+tgAB%*eG+aIDy0k=t=8)R=!G=r});jN$BA_h1w!6Z1l88Hg zeK{*r;K`fd9`eBZew4MXMD3Qd49g*ZaU!yG49pNepp1TSA5caoNC|Bmi%OiuKyM(k zwxwji7)R+EMeLCvg<<;o(=AhzadsvL@OdPsG508L%6i8k4H}-<#!_tb1P>^pMG&}t zH^xoj)2MR#L>&>AD)F@t-Wjd~u`{_4TTh=~6Fz-v&Yfu9Y;5OpuC`NexZp_$S|teg~` z&SEoa3;4y=JMb);Z}cUM;W^fVQcPGx3EMe(DW(C6-RDMoF*xM%(H{&VpjnAk;2qlm zwp#fOEz>jfy|M~3TgUiI;g^pCd7a_4uMF1;ZRF%(-JiG!DX1*)znq-OswHRiwdekr zRZvKf@vZO-<%<-WL%-FxYN3F06ym29NgjAPS@q#^BG-=^+o!~Y&KTRFSgr%|te0&+SBZ^zB6U5HOK#@W+X4-5|(-9bh8+l3#I6 zsS(Y$>k%x*FlZv%AhA&R{NGMw_y7Gwb`fV&!cP;~2Q`B(IiQJbgWo5z)%<^-$j%hJ zUZ42OM0QnB_fHeq48TOT05FmL>F0^;>qWagsPOsR04vQdN$d?_2^ZhU$`0Zl72N8A z*S?e{cx}(Wf9skM$=|2-MY9%hm5A2J{gzBF1)~@jXodcEEXZ~9p7(l|cBrZNeS~(6 zlpoUQaF8^b$AQTt@OzHPo4_xqZ`{5gjpcrSL)IoiIYDmB;~6Y0%o4cqEyIQ#T{?9n zo_`WEZ2eK|eZf%2E9O+OX!FK|3s2s+yY}=G;#hl}1R@ZuWqO3zmg^R3fIWK0w`5~< zNIaY2{$?}o3;}96p(3HUE_kwENk!?}W7#9Ml~YxA^+`ewkP%sRR3Ng&k!{x3FkI6Bh9*!9D;AX!yj1G!Xo`FH#%LTFH;mQfma($Bch~HFjk#s4!u0@SeM6Q0hQf&f8=pUD zJn2WlxaPSxNEVI%yDYkP9wdt%2g#!Q4ww3TK6Ne|S}*m45Lu(fcQf3`qUC!jiX4~P zAhs2GT#(l3;=!;;qe}66E&5u1$fDVQ$fD=R?FNwb+3PLlYnl*#L#*abKM*S*iv}T9 zkStmbX525m=3laCD|TENsu=*Wsse~rcU_bN32J4Mfnyv%tkcp|I1rUH5;NjZE)ODK zszK>cncOebf_#i2d4+DWHZzt`s#li-$A!NKTOfZ}`Wi*(wCzp8&IjVFljl%I;lsuK z{S%*OJmkOq*vd}!2DY;2|9&eQnb+BNrKEGS1#PDNVhq$TW^jQ7^^4g+{bDB^ndxyG zi3qb?Cm7P%jVi@ nD_We$7I%V=EuiPvpVMjsad^# zZ1`5IPj9pqFP&c0*LTQlzlO-;o6(hZp@0iFR7EBe$^8_Yha6l|{V!h9enw3BA&U-B z{FrmoFm}9^MboMQvS>F-R9=mq#CNt)KgpuO#dyTd8b^>IUkVdG6p+z~q0hUi7$=cA zHBQ-q2y2=Rj5~<1lIf-9eYavcw(PNakBlW#Qp&d_bq(UIm$N4SZY;YH#di3)Z5*qj zr~%WxtU@&=TM^N9{xZ+S7foP()V{jRJfE**S9~sA4(CNyDd8^nJ`=`AHt$^`kx;3v z28}u*KLJb=A(z;ormX*~0P*EF`fwMO4IjklnkR{v#8U9#Ox~4>X2>(-Tr5s0vB!5IgO{pet`j2w*64!Yt%*c2|`RK$JSrwXB%88VPI9fH^ERi5?rT|_3EAyZy!>(B%Eks?06 zDi8eJWlFL_z5wr+Rg-N*llEZW^IsS4+9D6qG6z^tCx2?8(;6&VuK=XcfxD1sTJa(C zxwCJIc#3fWY4iq28qGWC!RxPdEP&T?LJt&;?Lm|kR5V7K7)Pg{0E)(xJfkVqK+%|> zDD6}Ms;Fjtd@m(z93+iKd|Q$|m!KYE(A~M;zQ9(CRs)VU=C!=DK*3Pkoje!P7WjF~ z<-}VL>{2%A^GnBu`~By2J3C3=z8bS6AMEE2`N*<90JC!BtgpQOxOh5x;x~9=&RLZt zpqHef!FfDPk%&yUx^Inw?8pE9{3v6po4G?&(WOp{4SM3+t}%-iy>f<$!DGCg@rUlU z_^3DlW^H)ENv1!%u4Bz*7lQm^TFY{@{ZtnojJ>a-;$XC_q|#TDgg0U#8IVTnj`>p% zLQp2SGC-YV>?p;8+3`dLSG%w|n76e!geFBsbt^0jFYgaRWqSf!+05~>zink#oiX2RWy>L@IHgVU)M%-w&-KOTxdND#`#A`+T7xiab5-0G zfLYn=lIVZKthU@fHQ=b!yU4-EH<i3&!PVpV%C2b`u`zj zz03S}nP1P6GwF&mRWuY_M#2?!xA`vf-(~*0%zu~p?=t^g=D%4Ny371`ng1^H|1UHD zf0Vd#vNALOiMYgZjn^+1q_O?dcIEg7mMwZGpbA zd6*o3qj?CEn3aInGJy_lFLa^?b_VyXax@-Vkm$kmxYiZWH%^4o7I}5sH%12ajmi4p z9t|`=uIksnXRet9@8O8F3B#fwmQ{FiIo&fH^0ou53Q>aQm34U}?K9a&DNzaKx+RR0 zDA0a%{w~plsY@sou*>gDmB;INgLz`CDSYu z2Vsi49mC1b^%Gwj9!$?ox+;rWAhj8823=aL9>r)0?DJSa8=n**?_*Fq4v0twbUYf7 zJI+egF=@(MeQ~3U&it1ydI-O@2Tz1?kK6i8KE->D0wuoQurA9MeR!u$_)jD7QZ^5ZX6Mfp8+<@eQM<8-(pOtB<@UZy;-E=i9>h z?H>5A*TXOD8Q+}BzemSEUl+d+9sl7S++81c*T?^Kef&om_#aN^e~E#UI?O+i2N?L= zuVvsjAN3b8@Y%W>O?1jDKC8{c*IJuYwyW6qhnv4?qVa#%L?`~xMC<*%Ci?TmLZHmw zYoam!s)=4n$!PzfiLTL%MB)ki_nK&D$bX}WHn`P9*T20qLW?B9Lr&Q))=jEHuSO7z z$mrK(SUUIsXri%2Ffajk9Gd_txD(0b@Mt=qiKY{Ns=JvK;)OYlj ze;iLtbfp)!N7ppfd?YyJ<#j@Jg;nYY%xp7)X142p%xohHNgctpy&t)J6JOtpaE@VY zL?NwyqQl`a$M>j_l_E*+I|Ym4Q$u*)#aF{TWt)*QpNyUP7-sjqgmd=~rHega$mzg$ zCa|W^*a_2Fcf${9Lq)N_nlO_xAEbwBLhKSD&)A_zuFuQ*Ss2pN5s1^*Ohv_h{X7r? zJ61Xx{fc!)aZcbh{GvHgY#LWoCD1Rnor2E}?>Y+hp*>3h=bh!n`_iynY1#H{)dPUG>iUuo!b&qH5=!xdR0rBuLQ)DCAk=!S|Q@IWz*s zywj@M{h!1@?KP?_RB@tL4sgSi`p+P*o&7xnfANEXW5xsDC7HP6cLv_?Au1STUP(^A zU5-`-Xri4`@zIhqn@<1+UhoG^^u}@3bS(U?BL@nFuVFFNplYd4H|(XSaO<`JR=`Ug zqR=s*7aaE*AH$b)N2iA8i<0T&+~9<<{r*FFrQ$k;s8$1xfIy^j8Bp7}|F&(+ ztASfX__6k_j#PE}Pu6JDu6aRIgG($6@)$;4qltH*nQa@`l5)co)#n^JmvZ+Fv@Cj! zweI64>UxQ!k9nGtlSZhh%MvBk1T=cecY7975sw;7yn-WJJZ<-QpjZuVu@8Gj-D;!e z2x=Fno3ny(iIzYoo=uJQzMZRC*mN#u#V|&Msj(DgZ}&F)f7pA=uqxL^ZI=$|5DDp& z?(P(jknWOh=@yXg?i2xOq`N~pC8R-0x*PTYbxx<#xz_uAYx%x=?}LB-@Nf(~#;w;g z&igvAom_aL5}<+BNmUh_#L7gcevLwgmNkkXc_q z(KwIEPH~sf5%%g33RYz|i}J;TXP+9-u#lmd0SvtUmVw87W8l`e44f`r-`~*tNi7s3 zGVro1k@B+^kHjpqEaRQ83_S6l7`T%|LRtBHMnCrh0fc@EHxyPmV>VQnMYsjggUUKA zDRUvUtQf@5mVQO|?DAbfadT0Pz;+14C0o)gu|(0)!~Jdg4u2`j+29&gwqUTH$44|c zmP4Fyl^b|5uzUvRFAZ9_M!!OE&2JE#7GYlc8wA&ob(ItonStV!*Nmwh;&cgG0RVBh zV-BOAAo%+`2p%UxD{|X2HW&I1!JWQC@a8Po5CkCugj{)=EMY*;cy`g8K0&gE^v!bl zZt+^*Xs{(ZRBx%OWg!*qKy|z%HJD{BsVyO(XZ$R{49P1wU%Sc;ZsO@(&)6Q&Gmg3I z8MkQ$i4Bcx*F!I3J(6rl^*mjYMS3eF*~85fNml_;;lYDT0Qn+fb&c(5%RbOGEFFYU z)ut+-W{lSZ)5Z!G2|!{&sq+~k2Hc6g+^|Egy;22%V0$AiEQ3U+gpZd96LgaehT2@Y zVu>cR5)AMb>r+Y}a2o?C_+id^7c&7jsvVPKvEpvJmX2upe?`FqQisqasX(KA$gZ)g z(KEr?tL9qS%AU)4S*7eD?r*^6FhuFu3@R%|TnQR}@S?wDIIjmK%{L}>frk7Og6rK` zw#8D;G|T=cY0?`XNLq*b!#U@-Y5*j2qv-|v^L)763V`wl%?cp zZc{)-?{50|wRv#4s@A8$(s>%H1gvFP8&dH<>uw|sVHWX0=FCkE&AqYQ6DbRx+(rSX zv(%8=H%vnP;A;0eY-kBcome~09Z)gGv%uT_;3|N_N23hlJnv@F`P@|b3{WwSmR4Ri zlE1AOyX6kin!J%U&MPzBAdhZq6(bIR$&%0lpwD8ZrWBEw5+mf$G%nE!vZjMWMyVRW{ervRIc_*`DN!BLrg$%IH96KN3}sggm2dS z1u0V6O967m{1TF^EedlcnS7&YuX(XWn9D3{0ic56&t_DSV}^3M#PVt`Q(uH-t8dq* z`LRu36PFrqj3X--65*hwy*CFg7^9rRM17-$Jm&%9LKQ3Ob~gTG0((L3s)N`*dQ+=QO*rXd_NXr+o2&zOtNbFJrGj}g;Y zFFC;Vr4m%_Zq z3oofTpI5%E5m-ivGu6DZ2!k5BrUP3_?=pR#G#7fBU_55U)$2sseTZY;_yWeQQECEO zGvramnO9L4J|VVEt42OY^)_I!y6!iOp|JMhb zAJhJCgx~*^_Wu{)_kGyE5Bv9F|32*BhyDAoe;@Ym!~T8PzYqKOVgIMF|98sw8+*oV zjI6XjQSa_mP*`J-e*^Ufyz;+B^%_l3`A|FOW~t+0(5wl(ctM2-G2ln->l!SAGh&X%)H2aWk>4;rs;p{lVg=;pyx|6JIIF zPSt^wBn}6yg~it$l`whP+XJa_$b{wL$-d(QA#Qy&4AvJ2$@#(R$!sNc`+B9BMUN9z zwhCTNpB!2_ZmsQSRH95dGb{RZ&eA*^bK`skj%%K;X3XWr0{e zMz3QD2?1RSN+#?_iG?>B^TRt}k}N$T{+n$4O_buD0n%-`bNDGnCW|w6`s@C7<0Wmd zaeDefrYLz0>6bnRhAto-W3}y5X7m;etMP%o#3acN`ZO5@Dgt{6M6l5&{R8A)rY56f zkO~WZAfprYgXI!gufE2glh)|6#{@&+%o;$&7V&2ofy9k&JFmj)54jNJ+E#XYmimO! zh!wFFmW<~MNN}h#?~&zRMMLMsalGe~czgz(4(|i2llJR$xLVXYk()9vHxS6FU7;u5 zWn4;w1%1F+1K`d#o&2(+n8S_hh(z2J(xbx;3U8A%=!8|xp02)3{&eV47xVUjwdzo9 zq+?iZM5GdBO)c9YmzuAZ_QA8YjZve-v?pq#>uD9*xzvs>uh=?1R%$1@FS$7@P$zAa zy@L$>lssOTfKg_4$m~oZFusSTkqDQ*G)~VzlNloK2Vc6T{I(8H?mA3P=P8*#&KnVb zxwy<-{wey6HH$%(!OGsEW0dcY+kZcSzm>BC&cUxa`;RB_w{rF$-ogEeyg!lu?>mwI zX0rdodH4^J{Wa@al3TLx`@6|L;79!*ko_6&iXY73=GZ^B+h^^+lYP6SuVjA*&E#X2wic+nak@7Ad3>Wog1`dwt=*y zDh!Q`s9=&0zOOL!>xdm>t2CafNF&~~rFtGCiprl0MKGpJ##Z5Y!@}ZgX&dI?G{;5N zG)j+DDr;-9RQ$CyzpGk z#xTk>;4ZNyXXf^?HVI!cI2R%_>@H7JDj_0$$-^NNpzVzG+HO7(?925vI0-#(P=7sp z)%}Dz%ujn&2^BR~L0Pq5I1G#UrneU9t$dMBuz8cr*@2m49KV&@vujBOE)+R6kMk1u z!-;FaU$Il2nRC`+|GnHEAIedmIet(UuB8rC4LmCsZO)on)CCG%UbCR3|4z)F5^lqx z$%hIi|H6_D2}5ze-J{LEc1Xc3jogNC9#UXA9@Kx`mQeT%Ml$xzvX!n(M&CmMZWU6(PV((GNOdneAGiP_cSHh%u4eW$%J%_F4h_DWp*Q zn{JG%hBJWuZ1~&#Y`8!6vk4JwKwBiqgNj0e#{x#=(mg;n7#H97rVAFkX?DxT1BLo7 zN$dELh$9vVidRjqAP^B)A-s9YsA5`KVAAe+m29y(USnG_Xy(x@9*P-#)6emTu!I!XFwg6AfX%*aSxy+zql{a1qXygAEv<#w3IbY4h% zmoIoj$!FYI&InzR7q*m&!^sw1Sp&cfjeFQB=SSz5%@r0cvR4rEEU<`Mic9Kv0&pxq3U}VYv;?SPJ?RZfYEG6phsF?N3-K(j&|wZ0fw@rS*7027`l}@ zGYP{C%H6VkHK(8z$2Y(hihL|_Gi?nXI}j9FV$F|TV`JrNA3jvA1gqMR0NcPW5(?wA zCVL4kLRR$!Wd;>6njQCbH2b2WU`LReknq#HKB~ zFTw=#2XUy01W+8xt(I4q#o^NXp-KWf6|--tHY9{5CjEHOqTj5}$f9(QQ%}qAK<;&} z5~bR3BKX}Z{n zO90oPIEASq=w_~#2|BnaW{UVb$vv1)P1rBohY{Nw2_I!drJ6!Np7ayb^A-pZC(+@}kKs=!L^McIKF(g26F^70vN@^V$36=v%4X z<52@xrAyA`<-^<6Y^;*&g-24|XDoBPQHAGR35(;_%1lK*WP#!7={Av<+mKpL35}ku z4~?L-#hd@qX{WGfZX$Y;h*Z}`9+!vD_sR!sh#{`GNH45g!4W?>wd=LiYGr@HFFNgI zL=uX&eV*dh0*YptfA6&4S;GnSfOb2(rf-2hd$F8Qsoa6oIsHu{+nzvUWiSCW$nAPI zH`x;*inbCBVJ0=4>S*zXk*SZw(}ZvHx0w7`=<9umze5lZ7{Pl@aBs{9QYlj zvffqNgFmz1R@%7|!oOA8mxG4CRocIgXG^A#`FZTTi4a(N%ex(jq8h?x6_bcSy zkCqe|s4`I&=DHMNNi6vQsf>&%nD&f+A^T8kxk&`VX#UjOM}DlW%(cBhIDn}j0#QxW z#beIq?uF_K^oB8m#me6X1X`%h7?R)V#NWLpEY?*pyHX+O0bDl#VH~4M`v`bTulZ3a zyDH|}k$OJVz+sHRrqD*4Gn$Kl3lqjpEI7P`rvb%Co%QH^1|yb^tk8hAu<{UPQxoP+$p!<0gN z6=IS-xON6RhvnKsy{nq5NM$59phfW!r0Lw+U1ecA7|P{2$3|qeVv8qf2yZ^RhWR8{ zJ<_gt%CU6w92e)X*$rZo0mAO=KwKaEOA9voByv{adCb;9^Y{v9ksr}65loog3ynY8a>8{kiw_h^sW$^?D__oyU za9aHNZ27j-?nYN#>)p*>TW5un1v7ya)4#k7iwW=X^khTCKK4aeaBl07+ecKb?AE+4 z(*~uG!sMwTheo@-r7H(kP1Zo)vtbOn#F)^?+8k@srppD-JnlXc7@(?`4fTmsMagGO zhYzqyU}L?|{75TsjSmiJp;CFbMNJuO`|=iDtu1HHOHZl8t6dOvyJHl=bbb-W8mQ_yQj-rB&j3)W}C5 zc+rU%Gm^of zS$BYX1d1a)kA=B2f{$#A5K6wg?U(#)=8f}+v5z{n-Qi?;V$lGWFa{$f2n$#*=jxbI z2hRI`O~=*kAzRR-zwBp+PC>o``u=l>_V2^~ec0cVQ9;oEOW6NASNwfspPrVMiTNk8&#oh; zS_B~blfSjk{`HmrHI67^G0F?*vybOFSd>n)3hv|Jc{Ln{u#^pQqzkNJ^Y2Vd5)q~Q z%;F!;I)9{mYS}CDL9E)c%);4^zV1o*xVxvx+8F5l$d{(>+%AjvP=_AYMv{ z!Sok=*)9F*HFg`b83uKVJKU}pN4T_>gY)&{@%s8!Tzbk|FkDHIA->h-s3jD_eNG}@S$1<5P6{`D-pA?L}-M@i_7(b=sr|q$k8Li&?i9AuYj$g zdUVYhA}Q7JyULVMKWQBI(Q}el`l2g1j87GTs1StM^^Onxg_BA#>+%DIZ2F{xaN`x& zCq54e1DtBS__Gk9LSZBa`Txt{q2q6i0k@V_H-`+0lo=Wkk*4?H-k+o_j6=#gv+lYz~+t zC7vrXvI^NFGBV)p7w98iZJ{9^S?d$(5mQHMw7Wr9PO=c$Glt z1_C|1>n#)TS+h7TDG`jB39ak`mqA&&cD_7Q0`D}4Um7Lr>a-;eR{yB_fMF#Y;^z>mlI_gxS8 z>pQqV*7wKy|EI_L-+9O2uZQYCbjQHF#MM#?aL2&=x85=M`lJ5dI|dgMp;G_fyklVf z@L~jyM1T>Kd(NPX+?vqlp%;-zsu{o@unMpTtbDZxJmd=nb|juW_*e(92gKmjoL!v& z&+1;y-t=);r|_}8WT+ErvC*2dl6$k z41;h`q<7=wDu0ZVchdVJ3w)l&Q-R*A;(#ZPaS!StD{?MdrUMA{!vO+)f{o&tio#`> zWBZ0=9)ZVIrUbWl420O9Bd0D9QPV?N#rT+Sq@;Hx_|QeW)-c-b<<Tnh)ADlM*Mac83%9_C9SlZRAU_zIJzfR`JNL*^J$jAltr))Z~JdQz|S;=wh;ndvl$&1IMiGW=c1U3&; zmEUY!iex^)Evr=VD|Ej|<>%o7d5u>0q$kdk&%B~NLC}--HD&=V;EDnFw<`t;w^t0( zZ?72eka48`bj6@k{{mT{W2d0*g3`~EzyZJ7y|@=myBfq3L*2FNj1~nOpTx}D0|JTG zX03Uq#ljOhS_LHl{2Joq?V0LqFli+xwXC?G2)^XQc_S*$Arg%+GdfLBow_e=az>?o z2^zD+5J{(Ct26IvlSiHw_ddT_)I;qXu`GR{(}if0g={fjVA?s>^{@XEpqM$I8GL&RjjbpvWH;RDVg_sYC9tX^}M zxhDJ94~ySw1vm7F=g#a06sUqsACY)og^UwCO<{|w@k{$D6s8HsbJ{=l?VH6iM7~5apGJ}>={I??Xg)wJT9LDY;pZ@A zt*?1>NQ6O z<3C}Nj;h;joK@wMR?%G}jq|3_R%wuPyMEv+4Vnd~e6t%!x_p^v(Il>Tg(I=IQJtTl zC=k{DVNkk8)a?Y6ma9)wy9IE?z+7CLpO$-7&eAR><$ar6fFk!KP~=-vpG2a#_43fjYTp+rgtlo36@}uTQV;d6Sxgpv-7K(#kXe&%b|YM*WdQCL zK2Z*`bx7i+G~JZccu-{pria3LxgQ>*C+J|(dgprgH$BhNSCWo^BbwT*5WbLFd3|fm zcm4YngQ0I%49-?=t@#qYi;@6qzWsC2^jm9wJHVPB^v#-2A?Q)zQS#NAuMaKQ2(ad- zOoaSTt@%DP&&!!I#dI*Dzm1cZ-;I+~O*vJ_w=U*(pVZuqlQZ3ple-igd)8TZN)qrc z`N$b6=}A1BQk*t^s|3&y0Oa$Sd z$$z+EKnQ`hngx~;ma;)3vro?wqBwZT=6ND>WO5+&ff+6`?Q(E|^2-TH?9x=b?%vWa z=B(Nb5R^&tKEf{Z!&$b0ZQ-S}OLOMSW_tJQ?0y$+m$*=atJxETej6($i~$EnWuul@ z)KGWUy2qNFE=v2CR+p`YE{$>1GyDK;z6Kk@2zU~lI6#{Z@lBgwd#BAe{X-p)NE4G` zvTDaTTcm#Jz=PBOsDDwr!A7_@YkBFj`IpC7w6Ch>bEQhVK!D7XEOzvJObp!M>M^tM zTOX!_FLs#`#@NWlnjJq!m=A4G)c_eil4kz0|FO3k17VKKPEv+iDjFra=YOUS*m9wB zM&IN5xVh{UXG;W72kbPwzyhcPpgd_h4~9%zPCkc)!`EmJj7lj3A>|(U>6~K1%y1Xy zMV}qbn7*GLUsdUUA@rtv+13uM2z9fJ^fT%uE;3T@XNWNy$Q z6+Zl(vxAHWiwGsXZQ!;*9)?}@}ivy53+hlo}%KL6T}VhI1SHtL5ZckxDp3 zy`prJs<(zgirr)6?F*^1p^5xy+{kwtQTP z=0joI4K4SCfRF}{q#TyDX~NGCIx}cym5=d7(pA&2t-a7c42OSW1k;|2#V^H$Mm&Wc z;JG=wc6mdFq~$TL531#dHvbUF20NH#*93SMty5!Z0^$HWtVpZr)$0HQgjlbnXnJZt}loJT9t2ZQ6!TEl&T z+1etUbaBODKWKT)emEUQJEqDvv=pNi%d>$@@8mdud9@y&SpGtzkcy!QZiuX47|D^H zwiRr1XUAg|0io&2a&L5Q%~~~6)=5wLxI6t54I9m&x4F?1hme$@54axg)R&Pm{KHVp zQRUFP!_LittAb?Z{j}U!pbnR2>0=G($QhreWa!shoC;UNHxDj1l?QAQFY?ctJCqN^ zv#~xahgRk3e2@|L@X5dtip00B9$U)EqPIU`zo|+hxXO73k#sUpAF-d`sgi15zB#U( zk<@{`qH)mb74NIc$;?8Hz;h|raK`!89Xd8nHuV`wg!=jC7;48}_eqh|!RTFH*~FbV z9y$wJi=MeXtp5y=zx@FIn#lin1b!!x|M4B%ABFp)@WWB~_fqU1KZyS!id{#x^hpRn zvHgBC#lHPf|F0-^uJoAg&VyfVLMngqaRB!U+x@x&?-Ft~@ofjbK-F|8^7{_FI$#H$ z;%)~X=GzXu!uK8cKIGdSc$jZH@G*fGG!?(zfw%s;1CRM_2i_L21Fz~5g5!C+1J74C zqc1>jBlYtR{00nQ2fjn}JOMnB>gx`C(%*LA{qA<)PsxuB_@4O~a=O&@MM$g&uhBz^ zhHyK-4;sLwnWrY-nbu5n-2lQ&+dpxE zN^H{5)8#Z)n}h~z=fOCPD9nS!)Ki8*9D*FN#-|Y-3>V1b8DSpyV3e>_9|_STWlkO$ zpEFZzioeT@rhU2Ky8z^N(+e~bWfLM4j#&5VuWH`|DDe`v(ehTQV0$<{11^(*i$-gS_;eS-%kN>E^pXNmW zivoWfpumr8ccGV!Zf-X{{!@W(ZNRqvrve}Tzf|D2%l)CipE?C7@RNU3;7hTp2mZ4H zU+R}L@V5&5DZmW;cLjdn)Sgb}?F_v0A2aZZe$$HjA)Ek+?VLl~z|O2fAt~z(@gRT1 z?+#+4PUC%o+PgL2$G8XgSZkaZ_5@$^66l=Z1qhC5*P5wQpl#ml>zzT7HrrZvI8swg zDwB#WG9Fn`ReALBDHzyMxGo(uqqgG^SZCEXlD@BehDboQ} zTmysdMAq)ZmhJkRP0Xxgn{{Pwa?WHbASjGY|qF_zj$S$Bk8zl-lRL;&J@`@}!Q z_mOSw4o+LWp}3-7*WUr+`v<+mG!7dbAR4mY*Wde50J8gmC)*zkffK&;Sp6ZskCnJx zfB&WU-tJMeQ>W_J_4j6^2h*MRXHCJ^BHdr=-is(UTb0#7XVmSP_~Rp{%% z@7B>ZB%2{_ya0|%Ss5Udka>&mMFsAw#kr{aonjko-;TdC6FT_I(<%yhUc*AaF`$jt z?7@pJ*yqPg1{CFEtqrKLiTCyVqaT&#ggQ-b#Z@`~Co*O{4Dv{`i3LZ~;J-SnmG*@zK zy$_sh23YTl)#d2#toK&0!;k>hdy-r0J;d{Qv-!;ru0l9`1Ii$sb8b7q$rGM`W!IN- z8QNol*`o?ZlVkGa{=U&-1WV?O-nT>S`jZMIObJ=?$i|Au^6n(o0>+Hd>B?YJH5&g1 z>^j8r5-o(qA1D}0CS5z4iOx*(WnQ?BL>>{CBC_WE&x`MiKQ6w{gHguIt2V}bup-_o z1`4)?F)Y`g97{t4k32=IW6{A-uf%UnXa>z14(`}`*YvJUwJ8z1K7dHxl9(<^g&+=Z zItVjpz8hK{IYOgRM+l^}jc}kYGKs7#EduN;YDfo-J2<&0XJkiW5+Bn%tr40Bw`Mw}C zU+dck>Pb;arOc^cWkIV=W5|Cmd%Z^p;)wvkYF+ zc|MXo3IwogaZD1vvx2*JJPpagN1LOi-3J=#>Y%sm+J2Y);Ve6ic}L{(zCPU@yEf>z zVyjb?L<6vE`+id=wq!~NM|Go?PSg_syN*kmb5%OHblPuqu&Pa%?M*M~FQiGXoqTZY zQ*Qn8z57?~{a#-?nC{XSLjb!5otWIUs!=K&TcR-FPT3qUbgN5-jioTKtyJT9p+9o& z=EPtPn0%j2w*KhbZUYW9-e1WQcobb)=cxhE-Y>`jwD;^5U$yrQ8^D))_8TznHJIJP z>J4hF{Xw=Y4gqr zboOLmmsMTdJ``NYf@yK%oZT}f`cPB{}G8JzDDRI>mzKf z+U8m*1Kdl`6U+>UCk2qDom;PYeqz@@ z2K?X2uKyw6|F`V=KHuNx`}=%!}h@9*>dPj^%A^Sxy=_kF&<&-Xv& z`+qC3rek9InOJv(P8ys4cGErm-7EiVm~OxX<<@ksFTgz5`c^2ww~1Owh;x}|LXPrF zy|7TYgY0^`Q>?md<`Euh(RCX6n>A5qGO`I#uvd@E@Nn`8;861)X^(lnm0@piJZRC+ zA&Y8Q*fMB5n5{c|&jG|{8vVfi#Tv*ausa^@mE&m&=sWE>jm^BYabUNZdKR8xdunti z?jy(Jz3s%nD+5RcgvXlL(=5B!TiMkHoe*<)! z5iz;(eUyRQnB2(C!ajB~zwYgiRr*4NG?bH*vqa&-k!sw@dVeD)nzUTKxQo+B8McH{ zz7%#5c1e4;FY&R@pj@1hk|c}i&Br>4#)!(A=Vd|dKE$8ng|wCTiRdh++FnZtC7Ig6 zVi#4L$GupI7t-%iC4nf+y3EZma)JFcTH7{dMoYtx9XHa8aVxt|Ws;}}-t>y;9w@=q zf098xg+w1v4jZnW{{nZNBc|p36}Y0TMt?abCkgAb*!6NM@cw7GF4=er-8e7nHj(8g z>1^VtM;P8N@E&sTo-MEso*II_!=auXwRf1K9(nN~YXCO>`AXfUE8Q!@kCfm$L$9c^ zQkz;BUBYDuBoNTbOiG(Ntod#fddHOu@Xlh7`Q}T(l&Q*I2)3*f7eo&w*kCI9i%NA; z@UaKKmXKmHqZDOwwPElOv-Qk2Mu~#UX!0tQ%x8uUXi-i+G)Bq#;@N2*n_=dP!VJy2 zU1Xrwnj=|KbMkJ>(JXIWLsi(KM9OARzRYV}zgc#OVrYmeonSqqmDPzfN^&;VobPGT zyr{=^hVT2ZIO0A2M0%Pb%?z3}n)SY8$o~jDzdH-RhUY(?#@`6f|MCv*Pv!lo{D0@E z{I_!aznqEx5XVQSX5dl>aC{PSARsruWj1LUDSkfwXUdvFO484yMCAa#7Sg13U}j;a zW1y#H1^kj;hk=2ao>`aXzyGbYOe{=vY|M-_U;i`yS2(_z#RenlwMNcOvmea~2!-RT z9LDtgjqM*nejk=-P3*-6n_WbvnV(`6|5Jxg`nb3}+{f>6Q(4zf8a_#^bx<*{4Z(rV zQF#&xpD_naZ-Tp)$DY@-b&U}9Lw^zL!6R5xk7``aH1cHAXtb9k>!M%GSQ^%GJNcMJ zHoQLz^!PmHkWCz_RQG^w=FFy!+Ozd z+$18MBVyT9tAsHOqJ+w5zp2>fvsyBiN+XNda4e;gMH-!3DCWE85t*VLzO=lO=mdpP z89|?koQbZ1oP0WH72or~>Cg*iEVN3*l-1vp4F=K_n#HSwVx@#wHvT-9!?B~arlJ$EB9 z_MS~K-Q34R$gu6cSeF30GTZ&uD~~E7c`nDTvvWi z{9#N+P>0!{+v$PUx#3!&_26^JS8PrKvdY?0I+HUooWxQ-cC3Y21%;2_tQVd`e3C`9 zmwLHg?dpF4fhSp+?2ehEf2X{sXu8;N1}N|K8#WbLmO;gBV6JUd0BC?4>sEQsoqWxd zCX4_qA?gaV+p8SJVIW>KZbaBz17rnLmqR{d$vqe8jBIS%+T1N2ZLWzqw%`t@il%h3 z;6gxO_&Jcvf5$GP;EGp%O`!?Fr<=hUd1OO4XkR3$P;jbwa9ThRTO8!oeE#lq5>(b8 zC)n35`_OM7A8b^P{4vAC1YCC6JSzD_AzO1I0OZ3Y7#tI&G<6*$4!Pvqf_&0HK)$M9 z7GTT1mzM=E=`H^aV9S2%&n^2+aoBL{*M?MWOWPB%N+9&q8Fkx3F`btwf`YeG_W7-L zQ#CO(6F2P#i@=Lb@+b?O(b1H{{t>5Oq%Xty!b<6FR8L?f#u$TgHbp9ATqXFo#(P)4ug3efOz2&$dSLo7yMpEKr{QRNNEuwh4(I6Iqgh814AJzCy_n|dwULr?=wi4@(OD0c_!8_ zd1J;2KWC-4Z~Lkxsx4%xm6sV@s-Y2v0?R0O3S1pfMUUOZigSdr)p(m7us!(1rH}b-p4_rM+RIwIveF4M7Rm z?c)F+SYUoka3Q%8OL{7fJ0Hw!l-{%EGPBe`IDas0L?)F`j9da0;*4dXlcuP#1le~~ zoHiqrNLz}_w$XrPdk?qo%l5M-oguY=nz}{7a^hW0ov7Mfx(_YA1_b1>x=YnL?IY}$ zfSP&^1X2=SI;1`BD<~2^L86`EVZzt1Y2h8W8Kn5t<+#eqOYDPmRUJ#d@D zjDOCsJ`z)XohTFQ9&~^0b4`0m!e)ArtHfA6Myb{`1X4n+8%m2SU!AG(CT zkx7#p8gLQzl3lQOd*#o~7 z;TM4+0`R`G*&=r;|Ad)r9|PiEid2CZBoZtW$=)-m3Z%XCU6n{k4uA-M^bq!o3DBdr z(wWZO?Ko?h4=eJ3?c|G@f;@@fq=@CRKO>nfz%%mhVYa7+1wI#(4!Yn<62KA?B3s2k zz;EmiV;4{shD^34o|N$Nc}6B)Xm;rA99f)8x?r-dyaIu6QLlJw!mqzI;S&^x6Ypf+ z4co)?wv5wKX;L)0y%u-}JmQo8>a;b|>U_q2J~PlQH0yL-PN6UG8{j8Ny##tDb&xF! zx448~Mdc0Md>Uol+$HMNf-L(aj__Cj8qtu@1pNFbgsm0~fHdM{mI@Jm+oV`S`MmI3}FRa{X;rM~v7 zpo8IjjtDvMHbJ1a&U6h6N z2RZ0y`4j~`O1OGDDJD#P2^%r9=omBg%m@di93uK{Vc9Bx*4`+_Oiw1mNQF4vj`%sa zAwA1mVOfj>q5m`gy)n&)qHTw0sKF}yhnNb=C?m%YD>0vpm5K3N67PW@{IqKyt@-1w zya`};oKcylv0?eRNCBU>FV+Qv?gH}7U#hEH5{BGBtQ|r%N`#Q&A3Mmf9IYe2ba2#VSY|GUT+}6`S&CL?4mgk=uH~FWZe8 zqLncb4@6NG@G;noL=fk*0NUx{=j|BNl2j~T{r5e6%-0|O+D^w9XjqIcI#)az2h!{f z{0jKzhv&SDgiA00fPd>s67U7!(KoxN%|9 zpp73aNW}mj^4OvUE^O&=?wq*Q*=9usb~*I-&hb901$ox)!AK2ycUM-k9dD5^>wf6E% zpHq!8d3j4`IVesdueR%Gl#NmArE`b;&T1qvkQ&>Z=73^s|01#z(=!2|v=1PAx?_IC zGoyNmuC`#O8Mq3oK(=gA!8I;)_Jtj-ETPF6Q9ZKDPnY)xSv8bNI>}?BUX{_mI3$b~ zZ{e1SKiGS(Z&|~o5MR1JR0F|f=a2*wI!cveu6YJUG9`ZlNyJ|^a0~e3sbUVMkmh9j zGys5KY~-2 zkA>XhR@>w{Ak3I-YVf)?D@hWsAih+`Ye>a}`BL?xLsyxzEW&-dr7eH({8f;kpm_bl(YrT7qfySNco9JV>` zCG_`i9=<-~{22UyBj3M!#`#6?|C#UK=l=WLf1msBbN_wrzt8>mx&J=*-{=1O+<%|@ z|5tPWznA;7vC;kH!N<#jLxuP^aR1v^{?`a2m-(#+e=ffud8@+)m16SYn`tZu*_WXG z;aC%tcxgRIR#D1fX}w4#GML>jR|)oaU*S>|34zH(8Sva(rk*V9O$d~=yq`j1)8{+% z@k{XO6hE&ga0-22i9Xew4Q*r&LdsH|l>LmAfe6NzZ2Peu5q<~-Qkb#?E9qN;0D{7K zzCv%X&jBsjeIm)yn0OyfkcKw{r07@x1o9BF54w!VEkTm{|T zEut-(T0G8$&V$j2X%SQ@to+dN zdbnf)#>zB0M`M4K8l#p$3VY&+twL*RwE@B;8&Jn22{c_jUO*M74m zK)`XU{OLS7J$=|&z~PYYM9I_99j-3&88vee7~?aB_m?R%dQCKuBTiVdZF zfkP8q&^n(=SHBMd6NA$$ke81x;oVYiDtNv>761Ko{6@Vz-R)=e*F65mQ}R1`{EzS8 z{Dw~A-mjP8+bR2KAVe+9niYI^ZFZA8#K<>R*U)$uVt7M@Nlp7;`S(-r&^Bq zhdn({Nv~1Me4pkH(?q=815mUhGF>ewU>E`MBdCtIqgUPu4Sf$Tkd2LqpQ)W{v%1gm zFf=g|C+i&()5}X5Li;Sf7~v}4jFfn9?8HMgyYDHOyMOqs#2tc&0(fTvbqbLM`wio6 z_#t^-Ea8W79YLKHA>4Yfc^=G~jmJ@=&8hHngK`S2VM=zDPiVRV)3Fiqjq)fu4Quim zULPa3&2Uo-eABj90JQDV8(7fthdiJzb*_wMuR4$PI%}Tb#=lYB%^r!`={T5l$R&T> zvwk=L%;W@XDE7tK{ZYTp^g4BYN=`7?2FM30+U#7L)-xA*oTu+T!a>Rk$k)6!QtAX{ zHdWS|@$K>dP!&N3Pt-6KTyYF4pRNilfKEQ}`02AEEV}O0mo>-*kOJ1BNVb&Fiyoyd z*46};>5j05NVQmlN2xQY9aQM0wy^JV3yFtKT>xw&e zl^!@{yyXCPNEiA|xgm5c)|H1~+bt&-4%|96RDG}Y>QPZ3DJyhg0z<#Ja##O%Z9D5q zKJ3gGmp~*F+zavx8@)}*{C#pC!p{Nc5#+UUBV3{}u(`#EO9ZHW7#9+DU%{h7bs2rMFMCd0FD62X{a|Xw?f&)uxACnVMK}jVvF3&hvQ7qDzdpV#=Hh^#zc$2DFiSMgWG6N>!IlfQC$I?l< zcpjLK&U70QDXqMFwdWbQVpOFL`Cb=_eI%3vB}L-a-)>-c8Rq0vmLFeEUnxZ_}&Z%i~>?p`9%%Lq=rl7_+ zX8rISSELso!0TDMlGQi^z&PDkFm8Vf#<`I0z_?V_U%+^ujTOH8)YfRQVACqylL{e3 zyAq#;b0#gq^v}3|1>=L{LQ=J>v{4pnRcCGw7DJ_k!qC{LE-s%bxN?R)eE5o65Wa(G zV8}YmYZ>kmLkBg$ac17ZEB+vG2PMrnCUt>kc{e?;-B?*VQ!;PV6$WU&i=~`t?iAdSaTJFIam$|A?g7mO zMB}D1{0-deB~iAU6)eAD`9=}hODpQUm5+#ebo7i-=85%zx;+k0U)A5Cryb>xG3+y*Oe6B zcp{J7^Nz^J@NF;PH!?Y@<|-Laj+GW*qAAKZj0b1E6aXqPGNGtgHnBzhtj=nO42;S0 zmcNzUMCVh(q5@$%U~(R+kf@=_f*mjfPcAV#MsE}>oT(zy-dq=4=@+-VS2s#EE6ku>bb{r|4Mg7VW)?p zx$|N=WaWaid{r1s=&2_az>3($ALYu)p^2m0qH3C}Fn|;&TBd}+6$lcK17Hm{R6yi2 zLuk{cLooY1E3!VvM`SV?rU)_hfnLt!=gqmhSpmmt_DBHw@5qqtR;9sz>%YI8!PYp7 zag%TSaHFf?h3kGgYy(z#MD4O0-shfqsk)=+33D6`amZIzgD_l-azfCHW@K>5^QHAQ z_r!p^D_(Pd?Gq2u%>A{t;VZfds$7RKYanw&!*AM#+eOb@*TVO zj-mvx9eZ6u@1vfNYoFqSJ1)w5aCbUd+lQ5BX%zbXCd-`SrX`bKfTEo|QagIdtqjr> ze6Y3UV!K6In6B8$s9Qx|#>*Mcq$A2=JE@Ng3w*s+`;nMe9YHUHTC*=Xac_6VY?Wx) zN|Eh(^)#cTVoX;~H}P_6elPl!;BrKp1)g%fA{k`ytxyHGXJ0J@Z&$O!w*pGN(TJ2 z4sX%_bsc^junupqa#w(-xh=r=0}Ak1Ynap&|6G9oG4cOSKz{ph^NYm)Ga$bY{P%(X zKJecM{`%9t_U<}J38A`1m2`->Ktr_b!fkq zmDYR{{KkOgFA8_pOqjKtmLo}r^2p<&;J5#>!ab>x$@@ZtOm3&1`Y#H1M+j4c&!aHb z?;O`mvKBtHxYf~ovEIRIFdSl)dA;;>vk&F1{-_?w~59Cs|mLa zCfA?h&pqCl!r<#;1s zL2?V;wdh)#f1s60BM~ds7uSt^&ILz?*H`>7M=A@ti`vynJeJdmcPB$CE_#<=HhyP~ zXUJj@pm0C_&nVpQK7YTa-anpz-$=dx@(%7#!u?73^CbLRiS}PUhyNj>y$roWDGwmp z^S_s9-~Fh+_(Fq=>w!xjzxw0$N2GHP6e%Ih$63~~B zJ6)}a3TSvFvK#~B1Y3HmEveuSXmHO18`!#SaA*G7;J$m;;12)2!M!yP%nbH>gS+hi zQiFT3eb;S+`w+vo2KQI8#{AzJ+;b?OV0~|JR|mOmaJTt=gL~9c%g+t&&_6b~PyN{7 zKFfvmhX(h>Gh+_9h=yhB^M5qB!|Ks(|D(Yj{hv0tFF*UO!CmD7(BS^*#|HPlr)s`` z-QeE$mksW>;`jFk_X7Zvyc56w(crG~PaE7D&RwYcbU--pg7|$O#ZdAVqf;$drf|RW z8RztQJfL3y*da%QJ$}7cY4093pUt{h9Uigy5rudU^ZDn;9k`%PvT7?p--(+edP zTDP0Y^R%AwlnSyl-t9%gLcpT{pA~#i z#}{i5)gAb&DTsY03orM$a0F)bfoubGVV@qAefoe_X9rNdjST>*H=ON4fN2oq6qg*X zur_eKcTrjKDzh1j5*GAvOD&2e<0alFmQ%SK=*NmnWvZ)2Gd@fz%itUcc>?9~Mw_{s zEDms2hfr|JyXlm#V8kbD(Xo-CA5ahLb7E%t=|=`cD%_U2TRjJqxqlD`l({#CtASzp zy6tm?Qj#pxOAIl~mPk6?Et2;vSKX=JBo%HTJ?P+-Ae~rui{uYYL`h6=Dd8W_U-o-k z_|1Vmh){me;%?7xKX^&C(;B9N6qQBXoMOKJb&)(&C3Nf`sy8w~^{xuA_>2;3m$EJY zRrU6NsQQEIJ^g;y*pfA7`f1Uk_q4|sOIRtCZqV`lYMKv{j@mt7=O9v|B3)o3=2kT!m_NHG z2-d;ijjUi!=CQ#)Fymo3;-3{FrQ}vt{vjYeY};4gfr^9Dk=}+72Lj|^6Ft@lw%f`y zJq#9j+BCzI2!tzGq=3pjKa2@(EDsnPn)t?t>CkjTVzO}dg=bvgsfYX%$4O4_BsnxxFJ zn>S|LHb$9ybi(5uJFx>?@A$~yT<^am+PkT-uMgm#t!2-pJaJ`>k~=W;Da63U5-sc4 zaRo}xIP0o_fZX|7=I-3vF~3R4`N}s7m1g>Gl3eh1l04T7>?;T2P z4z+z^i_;Pr@ssbpn1KafM8cL_5iH z14GmWzK@ZM-;I&4)R@#ucq=o>eG=spA*M?+r8R|c8}Zwpkl4G~@e~|t z{KcZ;pRxV6ws$+D4s*^quSpLcUjj8pr4yEav|DfrHin>Fo^z~2R?QD)OhiZ?ae3zz zSN`y2sqhaQg%?n^(-P1eWSk@TRZBXiIC)8DvS2jT>ks!6-iez2vV5&y00!AElU*1_@qN?tRp9^aBZ`pD__0R#jl8kH7vaiGFyQtaOiCbGTq>n$? z&mQy)X2b)suxG6;zsdi6Hgf7caB9k05yuNyBUfWR86w_39!l%4cRR8^;M=W@D5 zWuf?UIqD}j+B&VPq~uYaF3I#Oi?TiQ)=t^sYF?L&)~=3TQ0 zd+Og{xbO9Amn!z|2sukI8CBrvx*+Q~B9zS)fY;5D#(L7U`42cZj(uGtM;HxO0wR5} z0^G8j^e|?o2s^UnXv?``@^+1!|MzR;c0*Gg$ou)t-`B`-e_SJ1eWM_=slARq^Ff|r z)3P9?FL%b-YL>P$@g-6@vE~<6hOcYn3xG9pg$L$$#<#*ZKxBcs9n;!%J zF9h0u75M)bfcAafzt8*kdH+7|-{<}Nynmnf@ALlu!5yskdH+7||9>{`|7UqNJ@fAy z-apuDd0qSmc=qih|2>LV1K1=-YzvOmbWEwVq2-Yf5UK-glAHCfv||g~s1(oaLph*U zf=|)~BZ4Zi$$aqQ8M~m@P8I+KOEN#-du_)dg9@FWtXBqV-VHMk4^&KbVRTvpVlP=+ zwlo#e^EAckKz!oR@=#DH8uzS0+8ZRC$8;MwnUIA-g7m2SOPJ+Qr13HFRMNaTc!<*) z3|p?blhiEE@Xe>u!@iRBCP7wDCFl|hl<+{w#!@!uIozV%E(iPUv;}<- zf)Pjm^eB%ayjm^|s~Rb`fF9s>_jm6%eRsP>qsuJY0pE5^ha2O^Aboeajil|&?J=Cv zV&$SYr-oTWhmlgiaNOd$=CXiNxsuk;=~xJF359woMVj_Z8v$*&Wuf;e=}$k@5c1?Z=+^^ zJQBZ9@20=KF#jBM|9CWhCFuU~8QdR{`y=uvzOfd6=b{+9?iwD_*oEdihV#RUBJ zrT!fPzG1ltaJm!TS9@SwZ-T(rYS0h8oMxPX7%V0-faQO$*(IYj%3_=m<>DBmUG-e+ zBZMu6u2h-I+Un}i0P7&Bl5O3|h$$b7X#sDrDaNTO5)oZzne>t_&1z1~@J^3NJc-3~ zDFtN+B;K9mOHP`v4BYCDf#XJ@A5`VtG4Lzq&MR|7@TX$?p6H;l&*siMWN#U`$u;sf z1}^vM&1}zH%EhhJ9fx9eD|OF={9fu_pYA`ekq)iZZn%}YorZY=Ln$Tbxjca_8xbwi z08J>Q6NGz^{S1r{8ZFn1J{^dGUI;8og}u{IYG98#2CDSB>~G8$zO*C@Yq^tzRFSMw z6G##{l`Dq72X-LwG39o_nl~BUxtdEZn#T-BVQIn+FB||n+cj$nNPwP2&wUt*j@rz< zmyyW%OeVrLj3`jgmN-}F5hy>DB8GA{BrQqWw%PEZiTrqklo-X!&y5I8z?at%!0Auc zD2pgUvMis8(W2tVY-i~t82iZ$UA){2eMlq|;Vl#j&PbpHZQqnW?p3~qnD!<(RZoc( zo3|F75SfAIeDw*?%|O4}N@D7RYs*uw^uosY=E5oo2hn)AEptr?6*bmpLuyCx#Tf+K z#}=5CKa`)V&IxBG-=NK39n~aVvFFmTk4l`?qt3W<$E9D=#`m?#%3;PzX1s>a9N_1X zm6-$KutHyaZnt(MZbGE^kjL~5t6Um(?@ErPB;O~~r_os1gSg^NY&iKZyFfO$VkMuo zMg$a)?#-AMm*8i@%)nqYN;&9CYB|pMNMHL5Md)*4#5nn6z7j!1h((M4fbs^mho8rP ze8w&JW;LDGv?2NvKaWIOBb`U!jJYW6^Cb797?f&}eLmVGz)$%M?aon$*%PH)=Ac^x z$%w3F-9-GzqU>$Ei_VvN&>6S)8VBDT`>3KF+o6tCG|&E{sQE zBzGV`Ga5jqW;y5d^_lS?Lk>irGTBhRmAd=D@HTs zOejkNp$)9kZd0G-(JnqmLsj6rB8<{qW+!++p({~g1FUXK{PQ*7Z&r7?$%U%1FwxU; zsgxsazyOgFy|TJBg1A8s>)Xjj6Z#(H0T@|zJrP1Asac`W79yN-gGt@&V*@h;QxTL%7H-MPZIy7QkH`1maY=ZaBfEo$e8 zYi&dV*%bw9)+`1>h3Xv>=gvz(jCm(lL5^fUlqF0m1TwQ=z?2}JK^fRrwpTpVUKe}{ z2li!x>ggDI^optksUArASX^ZY)F}r^ODR<2^HEyWItXK;aA$O*)tS)`#X2=vQ0&-y zke_4@ch7OW_5)#A<`8%<_mZFnA7|(!>}a<%fnv&TTp_YzgmDN3^CCyG?2`IOlQrtB zusI5SW8kx2t?rX=R`=9*tDEL$tJ|6UyVcF5^VRBxmSl`KCj895P(p%W3&Vv<){1<@ zX0sGc^KKMLv!t$Q$aFft)RS=~HTMf|#wFD;ybh(G_8(Ur-vU z)1j5WJ&z%^S1NLVS5HmE7A5HsO6P9h>dA3zesJ2q?lLgFpu

krQRptPJl3H1wpjGp;v^N0bGteCN}sic&25ubh8u{A@(d!W>{(7H$7C35q-uVRXS z8KW20$*F$#Tym))%Ktq>*aPIV%H~d3r9|09GNJj*3}JkX`kg|`wMyOh=_Z+?UlF*# zKM*+Bbr@!lg|H<5b{;AGqW$vl2@}LL>qSx&?zd8s=Q z0X3lxj#_YxD$I<`%COV9SYD|fuxKbSUQbl$QMKh$DAJATSFTw$Jg=M&=OtE1psw~N z;A6rX_paa`k*cf&jM&3Zie1f8Tzo^|aa;fdzAQi-_`UL+{U4R*`w*YMSDu?gY@et< z@%uzRm-sFVnLLN%Q>P-9W799LJYOek&s+G*%5&GDira4W{nAJgBS!L(P;%;86PuK* zTcw;S=|ND#pH`kr(=M3es0$SYWZyCHCqFRow|~mO1^$GAn|@{BjivAZOzQUgIR0YP zfMH|(Btav#0d2%G3~4N(nYUotcrnFAn%s?LAl4K-^wva?u6&}R@0woHmjDqY9Iir*I*w%pewW>07fPVf=D zYpzj6+5SCe9bVu=|BbU<(k`I$1UCPcU0b^N6DRIjwxNy|ZH|>?xisiG{b}IOyUxzG z7cW~5a`q%s_IfNWIXybrsw&M*GsMQR<$KT0aIhY{5w_b98e4hwE-?Gx|Ge{@Oo<@A z8>=AoL#1(1-&>&9hfV7^iPYYO(or;DdPnR}zm!^qTUO-YWT~2BwNZ2}DK3ZZ2g~aQ zxTac)j0=%ladC~pJuhn`w_@g09!qR{5Nx#&Qb|0rMS-V8t_1>TF7<#fD77Ts0oMI!PPw&xAW!c)&v&W;o#$%# z|GM*>_ z{rkLspZD+c{=YGCbf5R{^ZtF_|6|_&Bkuc^MmH1P?~QI@TH4x${{R8MedND~_c#Fr z9JLK!qTx``W<%30#xJNAK)_j6rwNxJv}Vvv%5WYDC8;FhT6to$4~9%Kg1wxJdQ=3D zOt6a*?|Oc~$>r(`1nbO<4a8pzWCoPDky-PG8`kY){1|DI2At8Hb&Tn-Tma8kQQX2s48(cJVlkLSBOabDoCC@X5fU zhgU%F4iwCfh*5?s>tQ4e0&~==WR}o)HD|7wJb7>ZlC$kVc+Ki&Q>oA5-J#M!W2@3Z z(h!itDB*TCkv247Sv&<#K$h=|`KLBniI=(CB{vpq0_(ET$oX?APQ(jJ!6jTXh7);3 z%B&^qhc)LJ(3}Wm_9mvPc&=wzm%9$az_`={8C>s4h^h`dsMPjXfop=fUdlJZO6a&I z-w4+6)=}L|X?*{n`^O9aS90##%kR%Q_m2nQS90zjpTYe>xIYNL9fbcZ&HnK+{4de$ zV8hmFF#ydD_{B8)_ND$En*H|*3vDhPgW|Leus@?A@-+@IU!0!q6$D?MHjC7qw7Bxw z0a$k5k1RWH)!*Z1mYpDQwo=U~LEE-*LJduAs zB9hTTQ<2Tmlp6li95(Tq5&B1#evH>ae>UVz^1C7LA+@_9Z-v_-?}=V|uGf{82U^lZ zbi85hYAA<@?;eJ7s!?@zyKO=xPtCo?{|d9Ke}>sKO#yb_eeTPI(?9XKyWy!u2r4)`u%PZ3kpgxdk>X%ybawNq(LH%ys8;(;w*60Sd~M00rfFL!p0JP|m92 zSo0hkdKCPf%DjZ!n%BWuJjXk!9P9`3UfI?cgZV*_#^Z(cl?YKNAr{0MIKs|l*d|+$ z*?eUnuCy=WS>HvgvuK5LFIp2%KJfa2N4Tztd{3A{jrcCOGSXw+tq-OuyJ25V38i_M|gH^NzKUbEHIaCf=fBR zAP_yaL`W9a#x0#1EpcwRrm^)W^#N6o@H~)_FBB#f{mc;CEC9j#JDppl8lZDS5hx5t zy_iUg*%m3(mU>%(@i0lhXS_|FF4Gj|xZTS$$$a|g(X23~M*ARQ6iL0ugcW2_seXd; zi}K7Xb1Dv@!_n;Hw}h=CB;!PeoNof3J)`&ESWB^DK@v|Kj=5vm44xQ#!M6qFLJ_9* zx4q;rd(-H6=m|~I!+{W*ZTh8dvahEqmG+!iV%72@1^G-GG#~b^ezDKr%3SAp47x`Ofi4m)-M@cp9pT&NuRFyZc44- zQ3yeIq98?p0$PZqP*=|On5Ulq6^AeU>}Iodx6F|4$a#{&w3?Qq_7fu+Gy^b>Ro$ZHR$!AquF ziyQCG;zrDX*)2wo*GHl0$W=53qEoli$}U!VCPA}<4EnW~yew`=IKNx^=CclJ&yac5 z1Fa53>vViOk^rJ_z2w4st!$!*-?b2oD>4Ql5kPezMCdf{Q41h3> zL@k>#M&YG6#Ov2r+4RHfvecT*S2e&W%H#{qEfbHJI<$;Z0dMPKH@LQ8BN6rCh^q2J zfh)Kqe*hWDX88uNS#AL~>{oz|v-Tsvo)#y42vS}a_9p=Ql5n)Y>Jy7Wm!m9_E%WDK zfwa}Ntt{we?1!dV3GSzhvPh`{&%3y|n_ghILzHmgKZbl2y0XeD+_+zO2}cJZP`;@m zlrTWh1>5`-EDYdv2F#VF20MgOm?UtdN8k#YD z3V}$I74*mx2SJtcS8!6*f_ppdEo8)Gtyg%xNrB0a!w&+y-)ZOx$0bpwc=T3=Zj$ox zlY|qGF`w6Xh$xPP?WPrnRWvlY?)2DpxeHhvykB&=ah%DoXhl6MD zIZmzVtaJyZA8SM^Iy{24HpE#5!#ToP1NA{5f}efVzB^f8INb>Q1@T(j>s2h_tHf0`Hkc;5zOMv(v>D-QmfDZV{OQdC@mXRjU>d?B)K+Q`L9~^( zgM)hr((7Y3On|(XP8vLsK!_4AuiiQjosD{0=c+j7c&LGqvGT_oZTay&Ap~_XQ}=#+ zjp-!TCpdF`h?a#mz4n1)iGY7NYxd@n&G&?g1C>sF-7$n|$bA`~!z^)C@wT5@xaEe@ zit`u*lI63|+AY;S4o-}sd_zz^=S29VG|$ zZY;x`fK%+OJ8~s1*TjFpga0h&f&h(uB)!ovWH#VN$i==N@&Ys83{$Zjz_6tpv$@5; zG3*Q|b;%L4KJG_Vw;H#T_s<%4edRZeJB_^B@$YEd2;~1%cv zFLij72fA%5Q6R+YK#=nNQ;d_fI;@l2<;EhDC3?f8XGZ#wA)*5UAi1vQ6sS!yN!GD@_u#+BJS zsDW!bu*IYfZlL(dSxlvTPTIoXIEMXrpw48gbyE za}Iy2d$Q@JW8uQCk$Zep5qThmgpxndzF@Pl(e9>>{rDke-I8pN9uY1XpH{q?}?a%_HtHVbs8TMbq{NFR|`;^bZcc1d_Q~rI*zfbx1DgQp@->3Zhlz*S{?^FK2 zo$~((@O~k=W?*1u`CS+J#PtE0Ef5e;0pO1t;E$AyBp)xIxRQo|qLjF#$P2*N0vfdT z%q+}w4D_^50bkN<0e%cUvo_7Y{;RZ1EKGE)%#1YjcaQvcfSpb^CyWOVBKZ6Yf+_0~ zm{G(e_9m5O(6lCK#W<0BBpz==t7X^LXc+<7saNouHd>yJHMYd|Dv)@fN#+x#Qe^uA zr&y7(kB98egy7sCS|mtLd9}{Pb`7D;{GR(y8jkqHv}V2|K0#WJNN-tY;S6LPh~1v} ztvTzD@5V30sdvAVKgX#*zAL{Fr~dQ|{_lTx{-ccVr{B$giSgN0U)nzhFuuTF%lPhI z>i-_&gRP5yMf!b(_-lvT<|}S4i@_b2f`tD6mvuIG%WX<}M8gf}pIS!|Z*&Lt%OQs1 zxEvc|CUC1&I24eDMkk6aEl} zJ1~=sgbQJk-?g4wa9Oa|@s7C5M1g6iQ2HwROz1h@ z{M#Z7yXR5rdBcM4Ho!~YOWY_Bh=$j_JkpZLXL=bwE&^khQs!?r{matkV~?bYHXpV~ zuI$p9@jjNwN429p4H|D3mM&(E!P0bmIpRp zR&h>7noZoaY@3yCo#$xkhM7!QQ+?e&{rR= z{j^C;>;YR4cl6{NzN`5E$=zKT5sTbaqM`VRSQeh2yN{{Z-cb}JJa3xa2Lh5@!{j&#)tXH z$~RGFP&4Ig-eW;WfZO|5b?CFLsry8ZH8v%$2(vW4B%tjxZKx=%=UCBYt3a&ZdcH3B zc>W+7b?Pw`yHb<+6;^(T)PArc|4!*_D%FOB!1#m@cWZcZ#*FNPP8RBES#I#Xwv5NZ z{;`oRt|YI9u=Kr-&c0fzeE>^!Y+28T4q&Oyv7HA%D5(>)K8kjp-O;(M#pPr>n9x3c z>9hUHwM~`CXKt(J4M_w3!XWMd(MB~Z$@WGCQ3vw~2Po3c(R8*oVuRExy&qR6qnH9A^DI& zj|7)^U&lA%VIfaOtMv1F>AnyyTC^r+IXM|)xd;i_Aw%2=?WdEhp^(*TEI|*R;DG{0ei5*T}^}^9_|t9C^h&%^qjZjDcSp# z{rYfJ0YZ&JHS2VEMztt3vX1=L@Hg-Z(d4Y4bp$4wB9Xa8?#Bt@cWup19sjbeSs;PT z=gmQKsL*06&vp^EX8<1LDmio$Soo+9hy$pF&^Goylw$|7&zp-HT%iJ!Wo%S>IX<0; z3^`0O{+({wKrbbfI2n~R9TkNvB0PC=-+-zC)I0X3qw;=OA21c1sV4FQIHnsuYv6^K zE|T$v#Ch;AtjO+GQ{?17n5suX>JH!Anknzvn#VZ%gZPHCvkc{sMag}i*mzhl0DYAA zWO)O#`K)vk4U@0v&Q$GB`e}aH&!oP{Z;K@-*Hz`L1AID_iUrf+N(2YBtB3izz0?EV zUak)t>%Outs#yEMFP(swS4o$gI6?9I)My;wu;^@^}^VD^xRs+w!I(lt`cHD-xNt_8x3#j5&1+j>D&{59Bm z#fRDFk?*{zeo|GvS}&}9p3O8Z!c=o>g=DE%<16>%cl88uRoNc&IDA!ABmbeQz6GeN zYOFlrHE(hkvXkljq6Qslou;`?L4U@4KPLTOi2431>Hm9}?>^}Nvzz(ugZ_QczYqHN zLH|DJ|6`KnKIq>EeZY--nP()ZH$ zX&WdA5D*u{FC~3iSt^^g2w>2W2CWr?LFuIm?qOLFc#J%u#lcJv2A4g zs$~xbq~|jl;7-zGf@)Tu8!^H)eCz@5K=VT-s6flbx1apGd*h?cf_%@`o}vV@b0I5q z3RXy$ZoiqBXgqV0EqC?gyP92F#0$p{Pl#aYR3T1)$$Ue)pI)h(Q8Adn50HHtM5@4v zehJaLga2m38*UnbMe-_;t4xk9O#wnD566`~Z|o2zdCP#}6ql1#&=nfYdV#3bhX{c= zyasxAuw=gFCP2zCPV+qK!TjDV-zOJ3A`%HRF_Bc*4dQqbQH}L5y_#m;!G}Ev%v3Qq z*2)A_j*YSro^)%agQaEkw(;bN?RXSg`#-yANUQfgh1R4`Si z^dlnCN3Jk(#{=2tE6m6dc#ruGm)H8@Vh6Ok=e*`d#TuQ%!}7DPy@w2Q3<3VNPV`>T zyvc&&BLiOEOO)3zll(+-YY#;R?R7OiJEGFldb+($N^=BzC9{6bCo!k{)&;tx7@36n zk`||aCjnD4CbXCS0{J~TX)zf8Ucp+t@^MGHB2!HQdY%LCV>t&$5+xqc&V?Pt0 z4-cfVPK76x9ul^X$~@Eh@(jNQY@Q3Nas$VDxFI2Ew*Q6v(|3xtWyCZc{z0gmz>WbHL4Or6^K_5i8ixa);cY&eblA#jjib;kjlE{k7-1MpYA^ z5eT*c(oVITo^9Q9<}86HoH+sy$-pmH`N}}C4V2kfNpr@#%eTEel;#0Z?NngtF{oUU z3NSYYc^{6jcpf%gXM#l~G8H7hRWOnbCG_VvMU7TgkInxT0$2Ttz)9{9IPbgP5V+kB z2)rV%8^<9L8_`zgrL&E3v3zVg3_Pl022!xj17i213)T2eFnbOhZvfpvGvWb1;U`L7sN>a*%h0F})(*uA-WVuVShn)$GL)>a(j$5}smu4Z9rA(|SS?2m++ zb_N_hG>#Go+yz{_-qwx=Di(>U*AML~dm5FrZo}Ay{UE&7r*7qrzY{h$PZHc{;E{V) zq+MLSju$-`V+B+4c1k;jI2kRyS|Bk5ifrdQ3}=wLC@!O+)4rTlt?hCrBXidag(d4Z zmQJKd{5UY;{Q<#h;ETcFXu}`@NG}3s`KMEfd8w>rDM}v}PtqQZ15=I)G>iAjd>k;O z8o=?RjVM$V#1m-#@C2+EX;4j89%JrwD| z;?~;Yp!=kvQaS<|*j?K>^{LB%m>M|TD43!)cUuF&tJBY8!-Fc3+_Gya?NS_0F?tjj zfw5xk0QT!o#%sZy@fs~dD|BbP3Vb(S9lsl|4M}j+2m*Ep*>W`Lf_yr_v!6}rW1d%% zCNG!l=C5`P2byC*br-3a=Tg!3RlI*r4Q6h}ZbOK)>mcrDg5(+Z@nyLy{J1dLnb5~1 zI~B9R$fNYfo5s!f0ipv#Q&uRqFx=@!7_RGJPvGSD6Aa(^a~OV&_X7;qQzP=xK(BSb zh2hBfw=mq7WPAJjY;hU89-8wo7=NG$}M|U^X{nG)_ob{ zpf$yfwoLW8Fr{A7?@|{kJl9dVQ>dnuA;{pRFWD{WM4|mG>b$M=Q!=5JITjx+jbX~@ zk#(&m7UdFM`1Zep);ZNXbb@@YIP&~dX0l^?{$<^XZk0|$Q|O~7Oj6+-2X(VXyi&^A ztE9V)QS*^B5eapTkA~e0_(!=f+rlibdsq1Kh)CwUPQ>( zSxIa8EoFa}ML3H2uvIF8cuT&7Tm-6$oX*g2v9b^|W{_>r60q4=U<&AS?_SJHQU;tw zoF|}aCBb18-hkO+lSGU{-75o)^VbZduB#`u(nP%VX9zSMki^T0sd(YV9-*#M^bbTy z{G%a&Y1=WMfo6q%`~ZqFO(K>KM?b=sn1mhKDOz}xQ0{SC+6;eJ+T4QsLuqrrJv^K6 z)hzbj_tIu|Kxy-o0I|pS-D0|b>=sW#bOuc;eBCWR-#VEc_oX8HskFK6*OxY%E!c-a z^_M?F!;)7*89GKQ!+J7WEXrq2ya)czOPe3m|3ztY*2@m#O_E2I@R*};@iY;pjHW{1 zg2b~R>S$|nL|N_>zDdK#4PXnp!sQxK{anR2ot*+k(lkY(2)7IlFXKS7zHp(*+r zPf}pTW*I@hh+u1Uvt&19gq@5D)f0^zO{~a;FAFIh=&n5PSs{IBzE(1=-F!r9Aw|hD zbxNr6fO%eyQ^CH{OFtsInFTekfnu&FZ++|}q1%5K6j384XkLEiZ68M=W`6kVjVn>} zhT0xCE+6?5UM$YfviYcOwu&vz3Mju|u)1oEv+MdzW{vaVZ+X{;9Q;d>Gu+Yiar z`P_JJ4$?w*N|N>_yP8?D##51Y;d_tmQg1@=D8fe8d7l*RqC2^=W6_|O9V{S30v~eQ zp!+XeX>shF)YjRhhvjtG_jcuoqSW@-12r!!pMJh>@>@|@#1~wwT3)h+h_JD>S)P`R z%4hi)+ttO&hyxO`Jr-u{iOc6w?f#NRt1(Cd(nV>o$cA;jD5KxTh~QP zCnntod4#a3EGy&s&)4obT)m`XK;;&-HF0^laV<=ThS6Sd3ZCdbq(y?1Yw6Ten+%WY z@m-BHFT)}*QxY;&k&k^lV}m7` zJchQiI%6dyN10Z$nif^AfYu1(7i3%Y;*{am1&)=9gG6mQQPa2W%aunTD?3;=)JQO5 zML?qi#ty`xhNQ1Fr%vYvIhvL*BNc0JLe>iaQ)R(LSWvD9g>e>GbYXjzyuH8+J}XcV z20-CvwV z&-)f3_j&(5@89SB`@Daj_mzi6<&C?>0Hw|MdH+7|-{*b6O3P1q|36B^S?K6~PsB-t zf?h!WdLn-J$bS#>6$B0OAbRO7l6^4c7eeaDMbw$Cukd4;XWfQ327y}LM%tEUCg61l zHV?^7QnjOg&VI?j9`cIE+tZXetna3KbJNiTg^Jde{W0lBA9W<@Az^0`?uXCJkY26O z>qOyR&rewBT9#|uf-T?(hjzc0BC$Xf_Mt;Td(RNdit?F^7f)?(h}VbPfD1kM11rk~ z>j&4?Yd^yZKZRjY?Cr~)^n%J-xvUXU(-cqQY?7R0v_ z9NhTU!ax<9<(hZm#m6J3Hnuv_NY|ZBTZC4G*1lHk#ZS_b0%Hl-Ih=%TrL-ef@sq5t z?7n1yR>i-9E#*96Qmks67j>2^7^TWi?!fNAq)6dLgZTIn;ZjFxyHwqw=2N)AhG(xL zW{p%vSRtOs#+1y_35QW209_o3~tiAExo75Y1WWrdVCW9R#!7ht3_D zx2doU1Wv_Y{W5rjW6akp!&(CP20Lb>{&}%S>QVDbuV54FE;jib#H-FWpu7bW{Kwgkx%3SV z;IBblA?sGSw;q1~IQ+-s@e5_-yNmSCsrZk_XTpFPPLA>U_imNSTLL7l9t4#3doit z3rw!BXA`ZAXY9NSeTASbfG~90`07s!&Q8 z4_=&Tii_6FWnzwh%%@6=UU;Hp?=jki#{Bnv-$j zaUl~nu_kN)I~>7<0$_(LxSfoh z0PJu$ml1#+?sRL1uQ4urf3w4#*{+Ou0=IANaP;~2i$Uz(VrIIA6b+R?mZ05PG>JLnE-ehB8^$`C_SY3yy_)J_}N5sU{~&a4bm!vXUz)?4P0zU zis!O#Az(fZ`Sj6OAvc`6eC*W$;lK-0^L-RU`LY_BYQZpNF2rY?GvHN7**I76HUau( z-o++Yy@>flyhVJrsO_ll&=OdN$onQbJp%v?$G(H%tchZaN6q9kC{OvQ4G6Ldg_vfd zv^x@EVCkp{2Vx6OQnYR@^AINA$4PTN)U%==dD;if=_TGk9<)8sRkYmJ>Li92xk0|=>O@YHiCJpdcO)Wq-40I+d63!$C2 z_Orlv=sQgo(|``>i`x$9n{j)Gvn=dhQ(ZBNq|$n&F-$ez*pfY9bwr;yv{3TPZ7Rf5 zIc~@T*0U{uCf>)@t5H}ur8B~9J^^Tj#wsQ6Wb`ij2oyC{LAVE2)!~Aw?WEc7&Z2`U zt2y|kLN!bgfW})J!ro;2=yvE^3~WVP(ypKy!j^SVN(zKMcTg+%^o+*=UnKsW{=Ck_ zBU#+|<5FU;fVmh_76%M(ol{{LVDK17)KzFQBkR3|^(NKgC+`pEH4PAfSA@8x6)qoP zNUdq|6cEfJ#(%VbQn|O};nOvY{8{?x8K4asw3>&u?%`5}^_W}qM>aaS$>+(XQ7ln( z&q3Y&O^3%KhD2}cpud1Wq$<=ef|6Z#9VYPQ1? zW?s#+dLzSn5raHz;7qJ`OO}}6lK~I`l*9%H(hb3bRj!yFe;il!w=(=sfYNm*}YMv}6Y>hxIo z8u0dTzIUVx;(Oz83>>Qm+ijJb9>xGXz43fT6wEpPou#aoG^r7WdOuJpvM857)1m2x zgrny7L1WRoL1VuXNWh@+%l*A1xT3;DIl!RtTs^2#(~ft0Lo_P5BivACr5iVI054MR z`RD*U))xU^3~$Z-+PSVXc&oLDJJ z64KW_V_S%q6L5`V=5IRT@s6GHN>$J~C^16^fm+rGZ#L?}!E|(jT;E8aVtFkaEsvR* zgE47NzB@v=*-MReJ;8mpmOPh&>B<%%ccA674~B`=$-I_905(+g85%-0#0#+$4gzdZ zwild~bOKsTJk9yD2RyAo>m40u9{xUPjLt|eESHlUem7{m4WQ#rzRqed(b6dU4a~y{ z&4*=wN5=*4=(yiM=s5Hp9Y?*T<0oMiZ(qefmg|q&pX>HbIImfG8c8sJ=^eEc7g{JQ zV<$TKTx9MECOh%L3;cGHXK!Nb$5T*r64xSg`9(qyjb$RKl~$Ya6p^Q;3V`Wu!uB+| z@m=gYDjuY0I@@}DNwsz-5NhvG0Dr}(?qMrachc!>y0#FkAC~Vy3WJhZRi4~WL=|$f z`WER`D{!T73K@7BT5|nV{Y1fuyR&=zK59@MUD}xLBr|*qtYC(ErU7pBW7|^wk+g=3lxkgU0$=23>Mw zlJlm;MsD8jYZ>$upbQ#Z83p`|2`BHa3|g>>+(>Kk&1bpz!mI2^L{%}6hVr$$^Cli!N^T7bv~x?p|F#Ue_KA|R|CbzdY-kqwt&c|PF0K|3QTqNi z&#N^A~Mi9Ug4=w|E;&iv3xRO!h3Z|XgQx5!u8CS*qOUuh4ednTR)xN~S4r-d% zsWp&euQV%Ht~*bB>wMto4B&~M8`r4a)j?~~+db?WNCSA{WkwIV=K{R98KpQj{w)J!Z@EboGfEgA!AP+ePC;zaxV# zGLJ}sdG|XuK6(;ubKT5-a%_q{A70~?yAYYoQ8ZJTSBCz**3dOTRp7hdtE2yJWvdmIe0e+%iD z4CP(oG@)^-30Yg5{|Lvd!V(4|#iwH>n!2+(nqX4qdcWM62laFmZY)6kr8s#DV}6Ti zJQk~>4eoAleNfY(_<+4*sUGyd2?H;Bs{DjE?1iXNqB=-R<_AXuk*0X&gzyix9lCYe z?37Pcd6(oW-GfM{@xoak17CkCxs?5Mo-h3%i7biP)V**|WL%zfq3RX7E7x;z02A+y zC}1`X2z-rLiY9tBn{U}&*NnK7`1sZoyA!?BTT4d;DRym5U7)QPpP<0I1bIH`}8r8gXE zG8fV~-{JRgi!W8wW%PaNUAY#D-c@OL@mn&N;Iio$p_AKqcR88CgV#~@h$vh1koO>Z zXNkLGr+sJ7>;nG#$KXF6ieJgZZx6+vGw~k}$FF4KKR$!|Lvnve{?;M+&yw&TFVX)J z3CD!`aw7sD;aT~xt?#1cyqzfpBJUyJK}%K5x?PPsAnXO(>W%l zmwT=c?e+Q95NF9|m_&i0BR7@$f%~)U{X_9WHwYpM;GJ>QDMS|BWX9c);xL+4tR*A5 z$8-nD!RjEp`0z6}4@B4JCB4n`$tiGzDXXT!qn29wgCIwXM*V`fNP~of*=3^y3)v;(6h#nebro0jkp>gHF4}Gh+_9h=yhB^A$HNP6$TgBhGqQ zJ-Th{DD}Rdd(z3j_M~S4deR&I2R-Sd-+R*czV@V-_j5oL`^>NmsSw>a0Hqe^x?(UNA z?ha`b2`T9k>27I6x?51XQyQcj=@#kk61W@Cb3AqLx#9QSAN*r57-R1(>mAO;vz|GB z?n(b4iKk?>oNY`P7jVj=<4_gLkrMRaNrP>k*31BU(j7T(d(um9d(wS-Ag{bc+jfM| z0>y*3EA0xN6*mUYeu1|4&NB?VT|=&yi)u6C3=D>=`&jMZ{2d#v-;i3C%Wb1^QOJc!vJQw(c8@LRshGU-%y{B_B z)0|H?^&SIV&Qt)ceR5o*Yzp%Y7G=Cn_=gHm+`s^RjPVhPRZ9}9w9nRQThNln*e6&m z0k><&r~Ni8L14y~u<$gq#vJFMZfI(dRvnH%uOScIt|5Cl-CE-2S}v+~MB(6$1pQhg z!a4+&@vE0#o&|8JE7xOWytgAAn~A{OJE_H3JP0TJYfrkvCqGed3qVi$rQ;LiPqyFH zaAJTOj#$AeBg*p3NkcnSR8WCX3M0~LA=@NTb;{*_4B7CX#*hh!DJ(2N;YoDX27N|e z&x0XEt0SN*!u?4Nzf`$Z!w4669*P<$C^^uu6J2_x4wNY~Jio0oWg@X0q z9WxL}4DrHOZ4$-62^n3yGHOX~TQ;^{>V2avg_zJoCn(E^xB%5l&Qtg51#nRg0YAhs zx-1aPWnejO-zu7eemRirU1@q&hj9ue&YmT{tkR}A=!~TfyPdBytK|?wxoCvActER zNoD~0ZJ8Yj3p_LZFV>KY?$(eCZr70e|FDJ}$(I2i5F+r?8gljDuOX*a{j`QWaJzDlLGFe4i zwH!PB$VKB-NrFB5Sx)W++qI--hWJISRY~l%T(_iNzTbM%= zLQ;HGCXnP;Y5I6ky*7IdIdH62-sbVtA!<(sdQ8PvCw49#X{4c5^Z&#TN9lUWrh%=9f}rZ_`+^Ddn3) z`z}a-f&G?kbNfPHE$AZ0j8$^UpJ=*HZ-^`3O)d-LZ+VcHnQo4ws1=eCV5F5;0vC+Y zPUE0u=qQbQYmmk$+Tt?jW7la>&l=CXfeDeW1E1Mk`x`Ml$?C6SxT+^iz9{?l6U4c% zrhgE_Q9Pfi`-r=Of1}Fl%g-x%1QKOY5YyN2|7f_rfJ-Ul%d| z?uGMb{lN<#ZNDkw=Uwx;f}2o^AIV>&et<&ye(%h17zQ>mD`%8d>FJTKW zI8$kX7uwHH>>FzBF~$e;ba9xIkkpA%dT~nLCDxjk6*&WW9L;W^q!s#?D#jMA^!GWQ z?YvkeTRymLNIxIse6B|Eo;o(lqm=o@5o)wd3%_Fg;eL*xRW09>__Fn`S_nQn$0S(! z&vZFE3g=)H)2cVPWWwbhaLta!%o?<-rvUVwP@#!fHW$cT??1ge;XS{LYF~Cgglu*{ zgv_x47(&L+J@nK&!-MVHne6KRa$(<~xxHyax0+5up_3Wjx-2M;+5hQCA}!_P`nEo_ z)3Yxj;hvk>OTpwy&8OG8(sR;ChK=Fjx$Q zhsb!C6h9KerUZyRyjd0K^5XP(2tw``}>)nL;kO1-~SNu z|IEH0GX9GA8a0&E8~*=757a}(2Ybl)4;lZy{^=p(r+S|)DI>oVlk4FZc*yv_zW?bV z<3D74fj}RRvM=M^4sv!9X`AWfFz#0jmpAo77$_K7MS1^tZNad4hlUn zJuCa%LNmemx8~Nn<*v2~ADxYwTQW7vql^$W=aIWU;-)jrdqQf8lPMfCBOj%jz#cmv z!a5>s=DY&-<96$>zlvYUSa1J9{+_Y^{44pDjP>Vt@c;R*=08jJe*TB~FOj`EPJh?i z_UHLuO!jU+>i-eh%T*Y&+l6_~F=YwLq=M36*_wzeReRS4_ip{QBe?I|y`LA5w_O1X z$n_feL&3NZ4H{rlAqTQ(HIul2@@G39mWcOKNvNM=FoZ-0jTEoB7-Ug;_iK}Bgr#DT z36o=2$~qXv#KKP+uerOgiZQ`CWe$8X_>x4mFT2d}C<<@vt}y`R&kj7Z{T2mY{E2RF zQoOOEtZl{W`b@=`k0eWz;2+00E6G=q%kE&uyh)m-5!tl&le&lj&tqe4PtAldjng-Y z*e5=Ei|Q9ZvrI+G)uk0M?*mX=Zx@igic~tqG`(P_*^>E?70vi+(O(zQ z{iYXaB+52sGPYBNE0Y{6C`|VBbE$k~Tki4|uSX9oN>2A7Y!?X5+kCJ(BN=nqnewpV zCW+w_bsXW!7!s5+siPq?pb-fXhiIQSQH39!D$#(c1?9K9FPc<_C-u_%P8nG*0wr-q3U7y$WbpV*n z8O~UG!^JbU-}N)MhI73fF7z1qTigZNCno-f=PA5z74q;Ap8DmMUk(?)fi#~eZK_37 zeG&eOTpLf)wF=*288TOx1H_$CC57v4oEDE>RO5o}qbUTx6#~+YXDDZ&Mz2>_L>XVN zFr|rY*$a+)yi&%h(&-&zO3PMSjB9SU=UfJpOZVPRK&_KI5H3!0S`qvLoy7Z*updMH zqm!W<2rG(Sc`G^bD~{L37u~%>aOI#aQq)I9Z$cyS-{%N}f{&TBy@(eHB(}ChD)4oj z!S_dz5o|Yz8t0!nh!c1l(8(7-5^guaU$N7Mxpm{pZM4Cvjk60ZQM7=vI6Oeo z(4ED}dZ)u1I!cb>uKpQ>*l&-Q%6SFz+cCVlZF;*;L}U`sW!y{WE@l zq3V78vyG9X3-83phadINSz;fZK7JaOEM`c#uYY#`UjKaEg?6FNqu2M;30S_B2D#9V z*78r^n zJs+pBDEXV6cs49of9`+I_x{oU{30@M@oX%fK;SC@Ypgt=|C#%?|Ji(h>bC#c`3&nb zp!1nZl*)uBVc^kDr!jECMvpa5f=t*DuRQC*HnlNi8SXsC-nI@n?W1Rzy9W`bsg8I3 z&(5gL?j2^xWCM88nnDT?vHlq!AxCpLlu6S|fnK@`5XiM}!wwzD{nY;~zo4n1lVZbz ztqrqaPx-z7Sr*y1;OGA5DnS1;>fIRfTLI(fjMZ5itnTsK{%6Sjj@9pD$l~NPkvTMO za}o&cWCKGoZ+(}KFTwTTf~+R1-tcD%#b5@!f}%)u;K6Qel#uT?=T327%k+<%SHpz< z68rjPn$(^|b(;ihm-@?$z>oNn5$4K$EJ*v6pn1apvpiJF{J#Eq%k)5}XhFmaU+wca z5WQr&^r>qQ-=GYQxhm*Zu8tWNxD*ZonacaG;1&yG%!2zcpBhOqGo#Y59C$eW*@J=< z`dJ8s-IIy!{7OR*xbvh-Q=#DF6=F1}*X$7}bk*crVuzouK%9O|PTr0IN0jk<_gN5m zqBG+3DN+;$_64-zqD4YHGg2q-Bc!5-rc(MD|Dnxvq_RLPf;;8V zKp01}vtE8x*@*h*DdhepMM%lr_#lgx_HlGhU5nADp?CGq?1I)|Rc0MS!0*LYL9RRD zI+G4!?ZF%N}?ZSed93u;%{k$D~7_Ebh8)Xs-OgTwn9jXhiV;?d?`&Ifj%ll zH!%W^g#;H$x)x4eUO|Z#Z0d_^vNBz8`#&K*zk1C$1SK38Of6>i~ z=&Z(Bay<$gl9wf{!WwGK9=Yb763Wa}%j{KZHy? zGxl+>MuHtY=3uw(b_kgR=kJG*owp95Fm?e$$WbYqFP{U3kb_hQzj1kUXdT0z%XhNh zVm{w5Bpdeas+sG0b!R0Wpu26Bz`hka=a7!_urJGu99oB5-8nXIbg%_)P>uL^1$rgQ zELSffjhGtv&gLnQ>av_t6$`DvZpxh`}$YqdjmvlY~gV#oVi^?{9AhihsR zgj)HL*4?l6c1*!ab9Rb_$fhZ_k70Gw~HJsv^gvLcvpSK{itMUA&Nw*T#9xhvkh zY|;zR6~tK0V-t2Qpr(Su?OAiDrQVlms;#X0)zsyJyeaH@QXF=ZhN-Z?*LxqA(FJFZ z3^M7p2a={0Z)RVt(k>sUa4FaDvi7USbk%f|FQ*ptVqHC6jwl{bS#fnO#7?ptc(P*d zTv;eIfKRa6!eS?r%cH{Y({(a>0}+U{O(?=hfFr*eJlXnoH^-1+yfvRxG5gf<6n}c} z(oLAwl`R3$=tTqNWr*z{olCiUH%Nd&vIJVIgO>3{Q{l4}4u`T&*0=4?VYlti@c6gw z&$jfGx9!jJJMFNYtr&Oh&)CO{&bRH)BANH?&tBkjQYD?A>82113@4TiB~oXr&z%Pu zrHgctt0{F>xRl>xyR>n8EGK`Ih($m$C`vc0&i{?_o&K5f{T%pzCFT2v!2iFbd=Gj5 zA@4ur{fE3yVeydnAM*Y~-hasZ4|)F~??2@I|NXrGSIqPai618$^Pl}z9D+Sgi(lXV zeD})#1}g#fkd0A=0Di0C3-%07MFnf9oi9Q#Bw)=xjuR?iMFhEP&B5x(XeNS4zO~a6 z8OKD&8I&bNP%$Z@VJ)J;CnVr}R3xk@=>$gLy00hp`w}tPgS8bd{HhwS23!tTUN`{3 zOl;Tzbqs<}zyk^CTmGdUH!t`7y;YW3@kDNCzE)VT@7gxgk8|ch0zL_k~w7ZF@W;5_|I_^I{?y1L&~y^|KUCx|l8YnqtAgyu`Az3H0cc8ac-ntn_?dXWsArtCSq z#K;*|c@9VOv;`AoJV!iBuNp-%OkXO8Y~`EBA~MUXlhB7zimAy^*q_w>IvK}G!jAA| z7ALMF@*Wi}sKXPW;$`<7amRodWg}{#w>kHbz8Tfb$mQ}w7%_16W5o+_hlwIQ@obmK z6Fj!s&u(bFw2voHW^^;`46$A{*bP1x!8Ls37918=hC&~Q}(2FvLeW^sg&{B1cGvU z=fo@Lpu!A;I(C_qAgw@^MkMM8e(sR;_vyAl4Yo4E&gAkiwuF2kuiIz?F{h%O0;toP@`_zPL@AKt;kp?o-$|6d-;|0w1E!;$zeQGQum zc4936<)8btl>hFd{u|1_X}!dXcAXku=Yw^<1p?oo%{-zz!#WEwTux>JD-y5Mqog;+ zVg6qBbe$_=n=`foM+eJLp-N+YZEa+TYnW2azUpw)QrN+=M0mgw>&z0FjH!EE@vC9c zT3-F)Vm%Th1?A;58>ZpV>hKk%jjhBQ1RUR6S|iZNtd!4@7E+Neep#feE5n1e$wCng zhRxRCq5CeM1>qxTWtsVX39MU?US;7KkWo&u?7IxIutI2my57| zPTV#0G1Q>Wqt^OR?`??>8nL}l4%BMOzCIc{k)mpFP9p;Dm zf%#kEn>TMUKN$GF{5PgM%s+pN`JaEs{1|?uqoB8#pW_bmOaG4f1&lmRq`7;xr1f)? z22tQX`DeSBPEsc7jUKrt)USXCsw}U^>jT3}J_VU8c~nVaIVEATKx$&cR7|8HgB%!- z>UMqZNTE!h@$e@>CUJ$X3-2belY2`njgKrS_Kw z;D8Z3nly3h0S=VhwbVauJU`3O*n2-3LFhNqWtC4|-?M*q2+()I0QxQ+K;LCIKaSBF z7!mij1OAHRsQhGV(Y1l%lztsek(9;C2jFe>$0T2W*4Rl%Djby#)Vhz zV1*|kT(r>%S@!rFtmOgD=K(PQeb+yLJLacH`@sPEF2e8nF4%W{7vVi#^COjFz{azx zlok|V<9SPpSLp3~2cLCKGme4$yNzf2YBI8&TBKWj*D($M`^GcgPx|hb%&or58-1(q zp4{uZN&tP=!d;$(APWu6%2Sxa?H&n zie`}PD9ByCg&kr2vyuyf>z!VultiOOoO)2CU(WqK37$*=zdV4vplY)T+beb?e3N0% z3dAE?2A*`$G1V6&zinmDr-1`q0q&E`<&)UjOpuy;LRJbi&^l?RUY=N$OdASzsW%VJ zh2xGmhWjn|1`L_@AWU=3Y&(EWV;P(moR zD(@wVsuh(_kI2xh&kvQC<0CG7d*%s1<&|)JcBH={&It#$GAVIC^Nbw^n0cN~t__De z|fIY8z8D&3%*^z zBcww--YmOb6iA6W+->lodTz(V`iWt+)Ku$O5rb4jWS#r`E2NHdLZfFZdJdwlOfxZ7 zstr9SkIcX`J?c-e4!4*;@fP#Pc_<;?v#Pt>#yzPGKM4X)3RnK6AYD9uhc3>A6 zjae%AzFkqSNpT>2j>X_psRe$akhv_|W0}0~D(}v|{Wd`5EeEK)9?Y#w{o%tSPc9kb zc{o?Nh9^GxndeLyT`=Dya_uWul?9SOgY!nL< zVY$j)?4o^~^4QvBx|=>2Ob^k`ID7%X*z>v=dH9d9XMvN!Cn$cV`)g>k=-%9?UpDS zRm80c%`dWt-?VRkX!_8m(S%D{A4K-VikvA*og|KECIlyBz-8Jq5uw5~S3TM{LRwFH zTW1CiC=Y#cIRk_yT-N1vJ!BEN!jp~LI_nQZw{_MjfI4d*h;i_2Go-S3yJOfv2Kt2^ zvxe?~&9EBEN9isKlBHw*CO;r!p(6I@^ZbTh;-r=2l-ywk&4GgL~M<2o$rb~a@}6;e20e+ zyGb0_GA5dlViij*p4>|2`M{N#Be^{&Q9gLje5;wdV?19yKAch6w8;%+56}f6Pnp_{ zJA0BnkH8$y($J_e=kl^x7IdmHFOc4iwd1QB-R8sKMR}jaSyx*guWs&-)quyxY$k9q z`j?l{a8A4=9X27WVnyD<=c1lij$-L_T;&bfvTMT?CU@ynYw+BhTTZ0*C7)lJFT%yi z2Kx_fPjIp7*n2cTA$*_71vJAsKQD(l-oJ(8%=TEsFHsn_EmMj###TAj;-ms;0nz=L zCdg+yZT5|W(a$y5C-XD*a!T|L(WucqvP-rG@kzOwO4nW8Aw%*i^w5{02K^oH6Pnjg zR1EsFDK~MBJ}(0LtQD)?)w(UC#+j>Ly#(}GUo(L%r4Q+|r_LdsC76y`^YvbkbsrH} zdg#EqSIKk2Xd@W;tOpcz@sr})wx;A0mI29q=m!m2WMN>fG2);t+nio^Ey)|GNb(Pg z^9+SRhy}%d&WX8{>gBxCUX{u9RX31D9HbBz@zRQC0T{d?W04-8MDcX54y5SaL>B<} zbKK&7J&E1ISy#Kc`#=9t0B}F*J?>vj{s`%SVAZW9G;XCjg!M_rgf9-?a`);_h1NeO z|6hpv|0((Z8TUT~|A*jT?(ymV@!p5v{}B8ig8xJCe+d4!9X=1i{~`E41pkNN|9>6) z|B4)cA@}EEDvh8m9Y5hd#&$Y`QIT%KFeuFv<^bq<|A>tO&!mKpf?R(NjV&A zGo)W3^ky+Es_=*<(lyfXZG5phhr_2>!F1nGz1fAjpn(aJbIx+OI~uh z$4jy+8B*se6!9A(U-6oQmN9ZeBg9^Z%ieFbsR8ZVyMeF+w=pJ&nGA$_kEC(pk$0Pz(`W+U88yg{a1bBhQTf3CqGB+!w z-ye0SZAFVzXj^NqA=E#pg?oSi^PPn&2`j;3MAbm=4V5g6%Fsrs8)2mm1M@a$ ze5hdXYx}Tn@hIL_m#^bca^2=;OKsrQ+atBZmUgwn^bsJZG18q}GJWXGCf`f~F=gQu ztAY+?S>3{&ikny5VjIeFD8=)cF64`9VHNzdrjtcw>Rc5(NA(x)q4^N294#z03EaJZ{+_k} zd;oqSYyZPLcsK|T2jRDa@E_&df4B_)OME+j2w7R>*YoYWkNR);_FuZ|{?=-NZA^JV zsW#>J7mNL_p1MH8d?@mV#r_;%vESEI!`@r$(NBL^?0o=>{h}WBJKc^6zGSEr3rD!K z*sYN6Eq2g5i{0klV!x%^r!H4>b^wcA!}Sfpoy9IxH)|-uY%70fu|o_C0xWg{EP%zn z2`jRB+AejG0G>#9Z?PxcS?qwJ<{uV&N`S!aP&2?{AMlQY8*)5zOe9YPSnLM37W;`F zcB+6@ty2kYL|mH5S4*f`#7>qj0)|)vLqRR5jF0mkgbUBdcCY5^%D!Spp>nipM3oMK zo$oQUKGuSoLodXPz(6|_*f&b!6IF_K4<`#XIw3EVAO;nIio;dUm0+aE+F|&7Wbt$& zRzZeF_e%?6EAY4Lc;M_u>$GJI;W^gAGK^@1i90z4spf%CdM;m`Ct#8(MR!m}fU^>* zK|A)uOvF^LBV~Doy~8{o#t~`2AVn!tI~uY9Is|C!kv@Q>=8?tk8v73WGM5v3`I6V~ z8heUQwaXis@$VY@CKy0t|Itr9!;3Z5$Z~AZQTvE69sszDMxu5pg3tA{seOVcw|>{y zSNpApxt=@ME8S`AJUVhu*8L983vV@cT!a|ETw9)z-!yhiWq`*1;#OnFwO9gZ><%D) z-!*m)y(oc2TYw?~Qv)Oxrt@ykq7`Amkl}8d|LX9Qu+%^Qkxir zZvWJv#ViY}+6ZHIsr-1mMjLg}3n=38&#@|#SqVE*rTPl5Yp^iWjr%4#w3t3v!kl!* z_@-OU96y?qq}A>mMvA9s@|jeIEUPq5RadG0aHX(jr2VqMRGU*TN#9#GV+?gdQk1N$ zE`g7;O1T+Kx&S(g4>*TkD1`VZV3iQmS!Erfu77vk2Wh}!QFosUPi)p0$Uejnmh-qO zIT5|lp>^`u)P(Fa2AutRNKqK%^qX9SAAH+3@%;tep=$wdp`mx3By#{Ncr~5nlM;rL zz_*u+r^bY>MHli&%_MmSnKYcT1i}J*AU+s%k9y*~O{VM7G*F;HFip!-;8euQrQ7p* zcDx=H{A{sLQ=9zY+n^k>(~n2roB$pl2$|RDsZv7%7uyrH1}rtx-C67n->j~5i2)Y- z6bvmq$-=impUa?mFjVRa3N+Yn@HwZCsXo^~Ovp_P)l=9v!anmn>C2lCjI^8vT8GSf4IRwD%8jblMWMi%g$;!ob}y!CWZ!(M z9*M5#wZE8rwxw^YpiauHw+)~!y#LtTncmZdCkHpsbKr&2RuIvaK78x3S(CVMmw+C8 z{j_srWj+VGuF;F@v?oCX^C_(g4R(twmrMZy{1`&&U(2@+Sr(jm_xQFCiLDtaoB&N8 zWV8$m14u6ve0v(~jjXnY7|-kGd(Pkiy~h}b>)!x7&7S}}&5}rfoo4XwJIzvK zfSu-<*l@Bg_EBC?(C)@#mqUt~c=R3MxmB2eebEd#pLaC??T21ttdiLb_+N)hvUR<{iLPZUa`KUG(4JDD6LZwxR6PBda4da zgRjZC()l?Jo-lkIyZ%)xVM^2x$Gm4O{Uu+*m(}q6gjkWNPo0AbwKDFfpp1NdsS-GC z9U@j5FsR=90XEH(YR>H_%8ydc^+6v;l%hAw1HQI>yY@*P1S^erfO1s zIJ9~h30=+=s2uNxs2f9BKv8wQXgC~0+w-~T^`uytRFw&+vUEPA^%f$#M)zj(c-@+{*arbglXn3ECluJMUg6j(WG{;q} zv2gy2M=4bcqM)k@w_lz!X2VJ6N|Vxc=qXJz_@yZ51(EtJq{&3!07*W^df%DHXMaey z;#A;EZg239kGwkGbzCUN*7eGMfoJsyS+G;R;=V>bi13qAa2I-oaqKb@+~vyl{ED;A z8&hxmuB#fq?%ivL$>79&{hB&8IFDkuw43-cO@!T;NU_G#t7Mi$Ejdb9EiKiAy}))p zA_NACRR_W`-o}(~j43mP*&H?>^2;`5RxK;N%XGIjHEGipkpgTR-Cb>%fG4Yiica$k zfp~DW9M#HKi7p<4`cVf(pdd=16iLiFcP5Piofb*WF z=c~$c#DV-%!w~ljYpDrJY8!t3Q8>A(_tZA*d}`xq?-9am76WU^NAamsoAfU?JbXk0 zPQm~c6|$>6qhBn0PgTldH+9FtsYX6Fp1-j;yW%HCYKWul2!1plDI(6jmcXYfpbsqi zp`Y)LYB#<(rRm8_{A5~R1fbfNw^Y0RmTD*StdmB;k1s#+5TP*q)XS5+-=2&k&Yg$yXI8f2SM zVHMw3Qb#lln}+oG?Ron9TbrNr{x783|CIOtOtl~4{zKeKZ4Wrx6ES{v*ajkueRUZ);%SFUpMhZePU811EP4%^~LuueLTztROW_x|s zsflg2)IM1&x#=Lof9LwE$#(+;e=m9E&KUjiAS1;6?uXuzvK>B{*m@6PHaH0AtIynFfpZ%q-_x(rxH!R%ZguaVNK89 z-1)iEy$?|79(%dTWgn4c5ujQvEa^C9NJuEae^Qc~G_ii#FeSUzPRG7B1P?k-=S?Pl z&K@+g1@2Z6dr{BTHA2=8y&>I0M6&igs&O^T#G6a2(Ls)?i}_3D(y*TU>1a09@M6`x zcnu*!29S|d%AlTSKe*m2 zelZ)sAyPS)xNL5T==S8Fho$4H_gbxh8a)htbG`9~esjGw^hOWdpVfW6b-fqEzq{VW zzvlLVDL$a`yh1IC)ezK=Eku)XicnkT-GHNz$Vobi;VuEWH?8Ecl+ zj^~Q=vJ`ZTfw{_iky)|C`ouV`i96I0@VEi;)_eyuJ?g?Mhbv#irpWN?=WzuVrr9yw8Yp zT6UWuytI#PkTyGC%9Frm54KLqsM{i{9jl9+lv`FO6daIr5yhY{RPq+odcW^-TYC?w zGw97>fUT@Ed{Q&0!t!vw$j@7 z*AdPd^VRceZ00k$j&NA&q6_Q!jPgY>z!lt49d-aSf0x{e9s^e}WIXwMpL^ncpF79K zX1@v9vy~4Xhn~SJCe_a&OZ1_*M-X{X+bLEvyP{cmT)Sq?=&SDf+(p=8d6zVI0~t2^5c7tJM`wak#>PT7J3%pwB(#PV{cm28iCR zn=V-09P~-90$}?c{`Y3iytkUZdoFckLi8)iV5?-a6J_&*V>WuaH*0oy+*W()BqgO?`<6uKi@EPe(Q zy5oFGeH*MOtq^j_mn4EKCPuZ2jY!JD?rAYk-^jQAzy)t~u8F4k;Yv|^)D4XUkDd(136n^$UL*XN+PJ7FG zE4}Z0L>uT!4umn*K67>>b8b8uhRn`w>Q#%#D6!$gwvK*d&WyK>)&)9Oh${h^gpiDS zM#_S>g!TyZc?Du*jn9h|k|%?)2lM%XsTcLDR1r;!-~400)<=}8DxFGCX-Un~V7rh< zIz4`^(`Q(gor!8eWLBz<{@IIGtxkGqFp%vnT4(OC2Q&HBY9{1qQX4t9~PTeWLIxnh*9W?SFRK>Kn-dH?NVa~;rlCx)hY zNyxkDx4L}`_{!_zOZF-{DqrXpY9)(!rO-8{;Id+%FrYXxA(l4h*cakN3KDXklBd6m zh*RRg;s9+j6{}WL(V;9gD2hW;9Y^^FQExZD_TuC) zn1xe9!;<;SMIWE#h!7YO2^XIwgy5tH+B%gj+^U{BLwhETtFd*3++t$r)^x9O3&2NvgMV zUoJHg4cyAzkZ6>OjT~Hr12K`y1FbUEh#x_a#=MtbF22DiEL|PX+}C@>M|iCdsB%{} zD#4ngZ$EV3?a(mdu89j-t*gsrU4#wg5yVRg8?Y3}cXVgFHeqd0lPfd=RJp5S_HWxl z5BNpfxbyq_i4YCXUJMb*z-;J4ctcC;OG7bB>((1Yt2Gx%jnmsjn0nii1U#+;_ z4#nHBUtxb(HFV}v6DFwSd_lHQyY2`j0ZO2-0E@FbOpIcO$UtM|(MF&K{|Ghx;w+iY2``f0{XmFNbCg~L)Nj5eYM*j<&V4n z`mc7{7>WQZ(#a9|e4x!H|{PLZf3G6CezOj`wqja7vWO_&Vd6TyDis5!# ztXWU5nFuT3yP`V?y^O%Cr>9L<{*VjKoKCqfZD*gZM`>Y4)mwi!k=cR0O4mq$naiZ4 zJCG+zgA`DbmNaelX669q=f_vfmmHNqM{!_Va1h=AVUEzUNI;}+9Sbsuy>UmcJB|(3gqa68c=q`FUYnfPH zXTjY}`MBskVdePUHG!d*gD-pLPjG+S;{Nr@|8>Rb_t)Rw1MZ(sz%K;ccPHS-J9sz= z4=3UGlkguU*nhYV|4RfL9eHVA3P7*}e=Whj`>6khVE;w$Ncg)=@;jT`%zm=7L)QbF3R_?|67Eo3W`Ms?CqFyng!Jye0G<1LUgBK3DT7teS z6zEr9;xE!%-I8*pMqd!qjEvzLg04)EB8hR}Q+G=BlWUM`VT2Xgj9T*MS0t6_GiHYJd0n>UBaxAIv3+sR{XG%`;t2 z&l?ZJdx9T%vyBI9OxN$fSOHhbTcLF>lyrRb8iD|?&S+{Vf3p3Ai|e~@Z0mR z+$KvbyCt&MFutv`E`Qv2WlzcNUa;oAvJng=08NOvAXs=^hUHKzQ)Ki9fUO-3c?YmR zD@5<;;Ee5m2iVqk02}mA02}fiU>gAd_9g&ezW@MiZ^wIpt!YdEs@}E(VS8o7@%j~P zyE#6nDK+{VZ1XKYWpyhU^!)Lp1=$EpZ|FW2NECUbujjMI4WDcKST_06!jUp@>7fHZ z(uwZSut*TBLHO3IU}@vy7NGyUNv?CnAG^v7On}&t-i9O_L!=%YV^uRmC@H!{AR11E zak6g=pPT4iQ$?&xbwE%#ooVqY=IVJJeaeD)9x*9bzsTy&g^6-zTa8mV z*)i6ToUM`Q5+2~5JghhGXf|YWx0Ga0$<&xXv}D84x7m+_lxtz+Ken1LX%}f<23eSm~C_{k9W?7t!dY z$&kgIWhpDlR^!q~b_v4rQw`9Q3d^fn+b>rz;tii!pYA>t~b?K)z9#3&Y0G7xH0ZZhtjnH`16?j45`+j@x z&Nb#jDXU26m1P1X7L%xN9qtVBDzc(adY}ROwW!KjePpK2P7c^hZIqn5;t zE-;HSjZ^%l?T}>r(pavlSr!9Vtyybc8FqxdgX~+zxT`1!Ux`qyd-VdiD2IR_;uu{P z2xc{~9Jg;3%|X8$NcPyE2DdM(!#IT!XK#~x4WcY@f@5!12mJA)xVt6tstmo&7$AqT zP@VdvP^bta1oFZKDDYUfj6{&pT+I6=@>d+#vXrx^LkH@BigLX5`-*Zp&T)*m)tSeX zm>|`&aK8eqDVW>|&VpzJ8p*T`mTvtxd#B!uqM2}U41b7hvyPi$XS3#q#C<%IYm3yZ@Iq%-K$X|GVVGHt*pcj86#I$p2g-&vc zWCP9s8{c*;T3-MehdG_LrgCT(pHue<&!SBA?$=v#eLF=y!2ahc^140p>Se&#QjrxD zo6gkRW5h;BrT)fqhz#4&-66Ebq@G+SHqpB&^6BqWf#k(fzYYQ^^!ot)y(aQdFOp;htAGy z1x&lm;zIOjYjR2E>@fAr=gReHA^9r>)Ybkc{DjDs{VO)TB&pT`{IH@B}G>ZgX9tfY};prM*WM(~t6Fy!M9nk7`)lLP~e_|L`(Po+LQ zmr?;v=!MT2Qt>lHHs5sqpI4J_ivO{ioF0$of2W$99<#o z@VkYUK({mGE{>@%MaipGx9pmS@cMR!{El5S+_LLS7XZ6X_|C4)f*=L)wB9i6+_P(4 z)&>nZ%R6?h+J9vW?b6y^QjWN- zrNxia{Zie_h1MC?H6}@gw2{iuGTj1d@k|$i-Q>EdA9~NvR9HA?Q*wJJkMy7Wq;T{0 zzoy)XQE~X-3KF@UcLR??JSE_#!^;{^7jt-ttgYOqUg)ouDjGl6y6s@zyn71mztD5X zuGwzcwdDlM@e7P5=usy@CfD%ShNoNB2Cv+BvPkeR*kLwM#bHjqD@QL-3|Gaj?$47a`jqNKsjsMdpdG6+6uyh5M+vwN_@vF`vW{ z!fgBuj2>cFND|s6!QNJuOBl0L&kr| z_zxNXA>%(}e93g_Q`aEAK^dB#=Eom0{zJyUpC5Y2_zxNXr{_~2GXCGxH2sy{{kjfv z7A6j6)<1dMKT|tTARr(GC3#^X;m2y)V$T#F%S)*Mz82GFbY$mXXJTPy5a_ieG{|7bxLC)`a;m;@FS90s0 z-@(I4csL2apM?J`xBmG${4a6qH>XSS$^dRX@r$|j?MMAL+}h>VyuN8vYV<+AnSss! zdi6o&FXnYH+3b?L^PA*%>pqUJX?%U(Tb%6g4|MRK3{c9|CKuVG*4hQLIa{|jIRq00 zDmDa?aJYzRZ)aH=i65{A+IUY5lLSCHV=nJHnMCNk8Q<1Kk}eH7TPtTxo%N`o4=TUe zu2S6bucvBK1C-pZEs|Y~$)_wazPfsOINmAKQa8PBUuXt@WO+is2gXFTyyoqgI2xqC zmZHyv8%KNmF2!6XVTOekpKBb`Z)_Vb@`w%gshM%ed?tix++7X%(a$yH^FH@AB4y}@J@#&|U}-aDWNk4rmxoZ{ERF}>GTM&1+5>Cg7x z^zqoF2ywk)sS|&MEBp5JhP`*~^@8l8GclJp$PMK+SotM@Tfe;J)`j1>wM}dI-V5tafPCxBC%2f!zD+6eQ5 zDo-aOpV@zWG|*L+j*pOUl1JljT$|V6b%NLSKiGTAsH)pVdz+S&?(Poh?vU;d0cns< zL8LpBR6x3W*))?@KH&qzHA=H>J zWmjtVOsM(fP-_qwd{VylCAOW+Af{bIWl0XZGccba$ah9G;j>e7vyppIGQ$JY>Q{o+ z+(yQ?RDr*&cnZuC4c!ULTG2`=1}Ls~0mZcgptuI_2kf_Hm)55DtSg3Q0L3-aeQ}L@ zUtCiPkE$9yH3E3H2NY7?I#}TBu}h<3Q54A#!;427Dt~T zF2sOi2NLo6r#<(`#8dab_iT53_iWc|eD`c~weA2s+hWSDNa`M&%eySJU>nQC$8ImU zodm=D7QJsE8n-tI;^MY(r@xr~&}_pO3Rk(&oskqQF}pzCoB+XU9A?tIgqE7ALot8g zkmK-RW(S!>!=lITfhvYgBmg?>XCDC_wm;=8?(B20sI&J5&!Ai_lO2e)5UGdh?CSgoCyW5%Y1!~Fs8~3Od(8R$`!Ym z;2-*Ze(m^keodd7jQcRZuKedJLvuwiZ1ChC$vRBys~cI*-}Ju~6Zr&1aOXA_x^Fe#@6E zy2L4KrD{S}l?&-&6Y)VsrG#&Xs6@hNHyNS|wW}`NVOPS#Mc$!t&|bN9((S)4(K9)? z>T3S5#_<|DqNvW3PbfqXk&bI}mM`&IY3Noy3EFLfl*&{qj`tTKfn@1xEDOu#eSWDLG(ZDi9{MyAtN_qnDY@dGjY?FQWZ1cf0L)Kj_RiKc8 ztpbyKmzJJ{kY*}yA9q81ATgx&id6%TH+w#mMCf@2OLlCInO>r-^W2-M`fS~8TPow% z^)(dxHqaK&6nRii_O7R(B8s+(8Sb2ZH(@{5^yQFqn2pfuEAgE&7l&LbC|z%Cz26P% z!)uf2eef88me+lyyW90f1W#a49i-W+vUHuS;**=VV5UTN-q$j!m!@ArU2=vQ%u^N3 za?31ssG{3iB}m`faK*I%MimmJ7Sxeg(xX&R<Lva-q`kDiV^J$Iby;0fV+ee;MQKfxp!+1{KKtX3YjZ1gLS9= z!>xTlr1l{m$(jFk9-nP@?;M4Wz;P#}j{P|ON+SXN{rtKT`QEMFfFX^(+CF$g?TqRO z_u$rU-cffB=BdRD+c=I_e{gFju^+qKS@Om?0NmOfkw@#!%&Y5$8BqAfbD;Wn`u6T; zdfmsp!?LZzd-`rnz5us&o&7!;3_EtrKzlpvcel1b8#?hjxZI}Km1ZDCk+~(Fay68|?l1GS_d;jaG257#g`YbKpylK!6H99atIlQX9L2*JEW8 zw!)==uN;*jO4fYtWxbMtJoM+Ip$FQ|p~rT(u-(uKzqG>RBBzYa>Iv*wPqC>fk&;oS zqr5XP?D#@X73=dRm2q=bv46?lHHXo7G|~a?_4Xk-$Lg+=}F4Ks>Aq;__!@fK$ zzH`bJZms&q7xR5+z1nXI*5_2)z$}>Ut8lu$%yA@L!;aZ;Rb$cTasPKV*#9E#|GB|_O#6>%|1s@9rv1mX{{UNhO#6>%|1s@9 zrv2R41&8){Sx1Mu@5JRXEcpZ0&mr~Su+@E>Zj z?`B8MQ~*u(-0y9&A5PrA(`5e-)){5}yu9viZecf5HX{!{?N6E(L#01`+OGgUZS2bx zf^V*NKYZFTKYiNL$oD>N$say#v}1pI*1z{@OMdrhqy6w{O9On`@o&TMyfLC|?ZxZ% zUQ08c@c-GT9WM#+X^VT`Ib{?zOQ3z%QGYKOO1HF=Tt~i88^jV_uc|-@(71CtdJ5NF|8d%zKVvIRu{Z2+i3Cj5LXj5KljTlY4L0;sg-sS z*MZ%0)|J-O<`5m#{)Sr?OR#@xgIOaKc=hxLLR@R{d3Nd@=F;k3TFMPq!9$VVbzfwE z%5-B(9PCh3#?+F@diykc_~m_(4O(Z7wkqSa^-by(i5fb;r6-4S2KK;a?pJ=nd`tEZ zSUDrOQmveLMS8s;JG@#l!X42eHUvlWmSyGm+0gUQ7%g%x8~pmO=L6(#Lq?-bcrfBz zL$Y6rBfux1CdMOs!t}r751yL$D7f3rWUy@hkpGfjI-}*8cj&ye1dL3I*S9$2I`OZ9 z3@LzrWd+KMyAiuTR-@9zsQw8vlD>T_DWOfJZx=wP-32=DQ4|ZkdQT8v`3FJVjsh`n zar3JdK&QQYuhZ^E5;h-3qGS7`PP z3+>o}>oDqAG7m-eTyq}nOcoldj2RzF$MmFT=?r=p2Kh(b_u1v3*nt5CXp^I2o0cPc z{NWWi6x8$1Y!{$!P{7-c!;iREpq^i14$!nf)|$Z}z^ENo<^wd^FiXxG{HXzz-zc_4 ze{8T17yk7In`!FT4YuaP2K!Uhp=(*#vg(b0j7ENOt=Ih8vy)L`29xIak`PLawbOC{ zNZi^wMRcc|Us<@+psa2i@54x(9dx^(>vHFH;g=4X@r#4@hpW6qnI*;oulcPqL@ zLje?&W~Od%6q5>yAym1(FWasC{?#UmjHWxfrU<~B{!RStRv`WowEp@6b%flew=n>Y zcz(bGN1Xiv`mhWw(FBpc+q`%RNWX5sP05rgFivNI6e8gqY;!)lHhT1VQJ?(X3OIWI zsCDgA{cZ&NOnfIY?s%;*GPZ%;bHcOa>N$`xuwx*)ajmaGY?gIo^D3A9?o;-}K+12_ z_eGBnpTz-~;>_#^>GLLZJfg?k!yYdt1=v2!w>5YkKv3&SG~>L9ja8~eeJHZyUxDr5 zS_!}7wxh5C_h+o)MVaTxR;mAh1r-hM99-LN!nu_g5HtBpk!{&rUD3q7X~bEL(6s0H zcO3C>HKBuwg>>2-X_2Yv06vrG)U0{Cdye>=8z1;lXV!O)xI5X)peNRv7r(5r(GQIS zo&na_i$B)b9faT4*bw-?tg+3tNdgwp8XnfzSorsA?BKsyV}n)>Ws=VZoXbs(uQls5 z`-8N{h`fPY@vmM2qMmwhgL7|g&?)1IMc8C9) zCRv$^y3Dp}s>7(B2yg1b#N^R-yO6?Z|EbRF3gcg+SV5@cm;Ks&Vn37T%&dUS$O*Yeg zlWq5))FycSPo?%Tlgr`OJx4rExPj&;M;y>(bBsJ8($+ z!{n`s&t76mr~=)7*%Wv!L@uyLWBG_bBl~4mN==;q?1M2`FI) z#*iG-oW= zh&~X^gRjVz68)i# z4MlT$Ihy{9>Nl=y*$t6%-~f7QF>CpQmP)*7Shb$UZ|&k#G z+k_iv<8K<6u4Ye15hgRvG*9U1-ke zH}`QA-K^H!Znt8s(1K6XCUq}rua7LbwP-%A-{`N0e2~ud@7^2ZVAZvG+pLVg8A%E> z$G*5QpgK9Qg7un3O2|)B5T-3sojAr`G4|DIKEhIXgQhmf*f%-W?XTl=)tK;$^NunK zbWYL8(Y?~E_J$u5asVjtZU9PL_8uiJ3_yuz-J`^n04Q;C07`u99wjahK#2>jBY&`X zabpEQiQhg0TTSV|GCV54E&FQ|1t2R&A!^vcntiH zf&Ve^KL-BCz#puuIhk9LsU%L57V%#q#UBIzW8i-b{QoNO|KIl6Yz+UQZ8qcmEB|{n z-Xl}|ktzPa&IWk+{Qazx|9IK{KiX#h;T=4lgvV|6e`uTihtJ`EsL>Xe zKtS%l4+!$`qyFzT+78!%X|{nW_6jP3V9O}$)%p2Rarn)7n|R|{ySt#1WwF4ZCC0fW zBFVF!O8GUT!Y{$zV+Z}>iDWi1a;h2-hyqC>7n^m=(hQwDXLL}c>Y{G;8XA504O1v0 zoY$8-6lbjhC`&Zm$QrQLNN@JY>1{q#-A-PZuaW949DH+SD~GtWxaD{at1s6xOnOwY z!_qwj+HK3qppNw%bUKFFMOTf}){+h`e-WE>%N#9_Z3yFS*xyO9$^In89@T!3VyoUu zv8M+ZdEeI99_!1KJQIlQ(ndZ(c!wUrqfOh>=dlZ!I=lE5f9ci4!Odb_=@MoXGFvNl zRLL;d#UXubh||wT`}%Ji?LN5wUZY*nma`6MwEO?qXiNU1(UvKt>6%agII#nHUqk6$ z-aD~}5L?TldR2F^)H3C(SsA4si|{T zOz2A0s9{%?ZJk*1-ifX8b^eDFo8!|hN3v-6y%QV$um#}6HkK@$H2vE~x7NJtmF+nzG{Wtoj50sG$0+l01l zb)P*-4TO;{t!{rfrt{iUSa@FmB`~kmakeIge(J8>@(9dkDJRfcr$+*9OZYoOoS;h` zvnJowkIWpaL+Ny@$2nMaT^Sbm4}CTRI-t+a$Gn=NzVEZ~zW3R@ZQuLsl@Ty!2G@Pv z3A8=MU}*Gm`~u(2fWJ{<^Sl9U>E@BY3{QadNU$wP-}2*&JUzO8$sO(t65;OmPUMT8 z>MLM2HxA@Xo0P2$J4S9g> z`|*-tW$>`4Hz$xkcG{V*YN=UCkbDHjOn8j$ciJH_s`H?V8s;)76^BF8rNU(|qAQh0 zo`Zp1-tV;U+ijOZT&{gdSj@)Cn1d1m=%A&KYaoIwnm*gmkmmN^mN#0p?Atz;p=M$U zTYLF58Mj+`K}BmI2Z7&0oTXow-?PTKpC*vDr6GvH+_&2SXfXz=G^`#NgSzZoq5uLy`@{8M}Mf5ehz+`}!Q? zVWr*1Wy%IvX^;O{Y2Qn-)9xkNwGKmYMr;jMOSR3=Y6?Z7i|eH0mM-lRw7~mD*v;;p z*oY*9I1*X{0Z&xlr^dsM=dk^X8i)Cg8c*2yD{8zlvgSSHIX78*1!RlN1cO#1gat{| zHSxqyZ9bc6?`uUwN7j|_R~cWn_C7yd$40jtPVzcmRYXh|k?G~-^VVzv<{o;(`(2W4 z2asfI-(u>61zAs*hw-Kf#GnVrLy{$(xnjP>^uYUcVZnICAbj?$5r`hC%?j^@K;%;R zp(xOOxjjL)zmL;m5O0>~8BobpNrfxSF!rJC$4XmM8gCcXjY954^ZzGm9M$B%hZ>h^ z$w~B~&-l~_hj;2~RiTN-?SdJh04kzOEV*DVAg5vQh5Umry`IM3l-o^`|3$eC8Sejm zrfnzl&vH8wjzPRf1&qEJnsxkLGM^C00jAW(B;#|#+`4xIgKN!M!5^6-!;mgY+InEr zlNDDf$d|G=pW}ZBdezb}iOR0~YFs5$LyQ$O%rR^Y*lIE~4OGT|0Q34iW|&P_h-a$P z{Z5-(EGLfhasVmd10ca?zET zydvojOYKj8x723)7fWpq6?3mUs0xRAGjoaPHb$yILM%$A`yP5BhAKv*;+sXTU%PVj zfkT?<90I@j%uLX$3ynSSi+)@yBw#GIbir0CbN!iy6&2!k0KXivfTTfp;ZNoE*FTio zhpLRZ74Ed}*Ckf;fU$PahRpg)@&%e<$XIAUhR%~HJ(Sy{8UHM|&B^P({w%lE9?I=P zK)DU`*K*sl17#}EVmf!XqbP=7`7^OSMP-_3X>vZLOQwM-99F^$KYC4x((UcaY(Tj^ z{>O5gYsy3Qo7VCcR;sc-(xM#q8C;>;U}Fv+__@JPPd3{vof~7sy(e4qKo#K0{`BNm zPxeUs(Oot?{G~1*=xHE$uq^;KE++f!jPW0^am~`pj9YSpSU+(&cRw4nZ?2KOM;09F zx9oL(XJ%|bEgD7FJas$1Y%9mJ!_LK3pWxpX!6x5*E>(j)KwoufJiDo9`lKb@VW*>` z9C!Gs6O`a7eJA=Ez6y6E)*S=ZA}x6(Q+8fyF7>8+jZdlGx|YsB$}&QLeWSa*D+k1M zc2M3~ZYB^Hu8#CZ@Vc4(UZ3dd&CGhZ)9SMR7R>=VwQ-w;29K0w)<7|E@D)tKC3_ML z@KVRcsbfQpBiiIpt{xVn7J>#rVjosXXS?Ps8n&18Ydf zajBA;46e4{dJ6}fh7)4IOB)5RU%R)RDV4_V=uNz*7343*Z!%GO(fI}~O47C_3 zB+B{4k4K)*2w3=`+}3;sD7Vr7jdDBqXSq#zUv8)VD7O%*&rzXkf^ef!t& z|2xa=`){27Cj9@;%I(MO|Cs$Bv;SlEf6V@m*30 z&q*Ut-2k*DR3LlYP_{#J;6t=doz*FbW88Ozx=nArgN)(-pw7OLL?2T0-}!WCM!xz2 zyZGN$XYVe?wHyofX>-0{$)RO@?xV2-wk*9Q2KuwA-73ti_U zXs5rbv$>98-fn%2FMp|1K+9AJH%yT~g6P7@&e-jyA(t{{nGG6A_?uPCssda zGCG}c-c=y2o^U+_Eo0W|Yp6^m|42y;76>SW9th|+e$RFPyY6qk<}xs}dueNG zZEtF2NoVhDKd<3xx5A2WmxS5i&3Us~@G5%|p7UcEXnG2`peISaDW_75q4lcjE1`(1 z6KzavP+saXwod~}ecI{YwzHzkYBhLf@(Z6L$E{d|R!p7YB)G^2j7TFat)aegh?>dA zlwPHfqBN6$p-=vz{jOn9GA&@uc~2#&hFLt@dqDDd`bKq!Cb)Ld9Xma25sEuP*mTVZ z7YTfkbJ*^S*wh8<8@Syr+1Y$Yb1mCsr_!@8%`l#nB5%yBRH);UUE|X8UZxHqa;8#J z=!-Ea8H8TNjaYt5J!d&mG0&D-NQ2HnC$))M)BZxxdnP{+mFknpJgtxgN-JcDkvoLx zLb#Wzb7m7KoD25k%gnK9&_X@N%vGm(g3&PzG$j^bjk>eSaPAbd-F=JiF)%T#hNyBW4&v^bFqQ-*k0(UP&P zaM2{Nv215(3dns;57h~`A$F}C7fvmzOi`vah`L%Dme##mE&1#P*e5xJlJQ3DT!T3B zB*mEf{^kPhN8i*pK$8Hg>J)X3p+jxr>#ZJ8t>I)E^fC1fJ0!K5Y8%_$Lo#4N&tDvP>n zR5xA5rb&Tw+X~s0i9a^7wz_R+0t`|qqnn}m%RIg@9qiDmV{DJ@{v{?KrmhosC zOkLmXNZB+CjBWoc!e>nOuapZ0IQ{Y_{kLH8OydZmhsv6H(?KNLTEH$Nm{%V^Q$QFm zPxj_mOvjQI^nB- zKo?#H4{V|FgtYqHtgmk#luhANmAXpDQjx-7AiW(BkwYs4`88H4(js&_!kk@=>2tHu zM+4r$SF$6`wb|^&T03LhJLH?QrI*(Vmb zkMuZB(da()E=nk|-scPnA)Vg>wz9py(Y*|7UZ&ke;Ghm7=!NLTkw4tD$AXal442mP zG5Tn3JJcL$JGHo!C7br;0NDzu=BUT&)_NSZGRjACX)BxgIkq&dLF%AawymtzvN+xz zTe(SuhcpwF%k~F@M!*i$WXYxt)wb`tQb=Bjj+^QE>+BldZ476}cibAS`+9YlTJVve z`XXbUxwaOwaPYil&ncJ$dS=YxyQ(Jjq6^EvE<@>=c{0|zM^6|9Yg+dRWt_h5Q!MBG zDop8|PsH6sg{}0|;h-v`6yncZbmzJxQKGPLtQ6xs{aTPNjXWrz%MnowVoROy&O}?A z4Td2ps$}5g+HeFW`d49Ob895>g6f0* zeX`(XXP{crrzVLUnTIstzAdvx>>8KjK`T^qx&{qJ?AAtbPbCw!`rU9^Lb0C66#`?` z?XS=twT5_SjUO_Hm4C~>ibs?+%+}~cW|!Pi>?yC<7XF+nH_(%WG@v5bDq~uQ+MbbA zE}Yw6!sVbGL2CK3{<_If>^1DEYVj6UE8I#NIxmkA-tMcQPjg(3PQd6j5l0QdG=e5^ zsrl#^wZS7WZ7Zn4j-k0T zc6vYAoV}_xh=!`B4rpC;a7DtdVEsDi`CUXCj2AmCvCaNH7bO zk3&M=DH@r4v{4rYPgEA*kQ)1jDUVY0xm;7syNKq=vU!zo5BPqCrt37E5Me6Wb5c1V z#u9@@Bb0V^FLz)0b1c7g^Q}s&0QeXDWpw8Fx4n_}7dK}Nl9PKe*pZu(@)L!%6j1Lo zlbw;@*mEQB$RyFDs*Tn%ym|%;Nf=x0+E5ihucl8kZO1zWgxoGg{1xe{$qx&uEDMUk z6)TN{6mFzIB@QYUU4OIpqAd=RJkY(qRf6e#tK!OY!5pkFl z0(-?XeMn=tcQLSJ7G%U+ibF2YC80uj{OSVT9*`L7;S-EMaHmLjvAT7^G#`O;8DoiJ zwrK8N^ocnRIjmhFGUUI5p~IPT@_6xHde{!hm%562fs4vWGi*aJ^SQ}cw@Oe*N-|r= zXJO*JpzWH>-TiI-&&gB5R1`#}qLH=&K>15^^AW^|Crs0l9GLQay*suYy%b?lkLA!M6gKpNdp zi}vi0Bf&K?;)v~D`p8eQ%+ZD<2DG*NebpJjECNcJ7$eLC{gf4jRn0_u*D0E`2n&I+ zvCBV*s}g~WL`p!53D`c9DAGERmVTeDr4$|NwKC$B3e&G!jRB;>xJ@G(t(S_11LyFOs`r z3;VRwB14vNSD;f+biDRfOQua2{AzG9jgpjLCDzJg*nOLorTg@L5c_Wp`ZwomFLWm? zZ`_PS{U%$RY3S);WSsLH;REJxm$vu)4HI8Hb>D)^3|`&?T3wUJrf+L9gL6#wYvSm%G zN=%{gg!9lFyJ?PKm&%-k?mA880b{hS>OQX6x2#OZUyKe&xdSB^j2`sUbr1M7+PD9@T3We6%ds>>7<2JvPquFf ze%8mNg73qbQR^I8ZQoY%vsrCE5X6m@P;?{2${d*S0+-rl?c~>pZJlVF@ zIdBt(qa9c-feMT{YjEiZ;K>HKk;nc40A117n5)t4^AL^9dUb;@!q z4?+OU_2#Y1lCKn>dV-tefsqH})RY%NC(i8_*m*geJSbe@q+2~jNR@PgdIxaMPY3?Q z;QIB3-|T6_W*HEC{bTg1(?&BG z2$TgR7Wo&b*t$4QArun8#A|q3@O))F(&vctJYOj&dhM346PByA56FHL>|icsG>}mxvhYtFjVMQHW9|u1v{S8YkNv`76}}V|S9OC`Yv^ z)nPcoCzgv0#>089dp31;72kyAWO09dGjgeWlm0EE7sO?RM`j#$dIW(X!NE!cR(;fN z{)L(N&hGHe;H+N!ixGYP`AB2KE%7tEH!fq2I`lK=B|HRSc=%6*Ee~v7?f1;xhJd~e zua-vjDnJy9Y$=gwr^>Wd&J4&#kVZ$=f$ao#?Kkt=iT8#eQ9_&KK|8IxNO3S>x*4- z`vWxdlNCSD12h4oG&f`s%TvDw_UAVXA#0{cn_vzZA_#~l>QQe8BuByQ>f8?^ljk~Gri0x5*NW_v}(XJkEQnS%- zh#(;|2hO1igaf;fP9Klg^}%+<5Yzy=Dc}Wzn}t8=*WvFN`!r*ab9l`q??#6dC$-vzbO|BJf6K&G|6mV`NujoaI|FQ9h zd)WBf{(0k1R`|z_zxl5lf3{B^Sf77x{IhDw|G4qDzu)*fawX>UEZK72*zt$rfyPB# z;w||y;X4h)=oF5MdN}~EK{zWa*DSj=ki(OVZTopgr%=r|Fz2lTV^`1=?YFKA8)$W- zKS5gD6V<%%%oz&xz=w?ntn)J`LowFr*|mczyi=+>12|*AZkyDXt2q#*Qe0q75NolA zzP*@3>7d0Zb%4$Oti*0qRE#ZS+Dxfbq;2OlDXs&F#thiCb9+V_pQTL;?ywH#$$E$i zhFDgSknCq7NWb{V5$9>i&o1tJJ6=3IV-rWkET{WPlskqa3i9+o5;Gd=u!`#`sh>$P z*sw&IZ|}=nej=hXf*|3v_U|MA#S6z1Pq& z;2C&d_tS3^Ij6qF9pYqDBxXFGp~Aw9$2(h*c6^9Z$zyT+)5!0(VSF$I!<}!RC5uH{ zHpO4R=Y=|&L&HN$YLy=gh0yIZsqj#IJ6olGiBxd`;b-J0z--^H{yu#MY%Wn*Tc^QZ}A zvMEV;o&qonQHD~@1Z=bV(nJDFf}s=Mo;d+3-6l5UJPaA-8z^Ql;oZ!V!dz0*7iI4u zDGrFc^^u;=F~4F`=K6uGr(HC@N7lpq16e=ufUN)cMUK&wx`;Wz<5&pZlG+_vDtqjw ze0}k&C3p3@%|{JEZs_-gK(gk`fviVf7Qq)-2&>BEnG*3LV<%tfo-MVJvmc1g?o3Kfu z=ZPFqRbI)kbnqfh@Hxs>nWBP*zzf&zjBzqG=&9@Fhecny$3m?!Ap1%+tqW)w2CF~H z(1BUk{#^BE{_9mgyhg?smopr{ujMdj3xfjJN7axcL|KMONiG=h0fs+E{gQxD|K8Q# zj`|xL#AF9{9c{1l0`TQh08hjSiL>e?``366Mket14p?iHuKeb&<6W54`7IDzU`DwdS-RSmOJ*jIr5; zLGd~^ti`&|E*<((;WnP-NT{(gln4rE;H|SbF9qcj(r?M>xKStG5jJv+A3K+n15BGk zC?GhQAZqf}$)c376LhzVs*?$@yRaxKKKJHrG=4-mJs$R+OxPhf0c^5OM4>y+n0yi} zqM0;SS-t?QFI<=L=ybOMtj}P0;7ie9|vDJp*5%wudLd5d%Xr?nT@s+Qguu6G^qVG@>_%1 zW{A3+O=#IkgnXpPa|kVr-NPRAlio|*Tk=w(YoNB+Oya5>r)ACXT{Hm0^7xO?`XhCp zaiYDDJFy1=J7$p;v04!TS}*mw;0Lr`;CK^K$7$RO0Ii>8mh$>~6%R-wO}Ihsq4h_H_X75N zX#I`8trJYNgQLqjw-mZHE6u0gUQA{jkoWtO;rn!*1lY>Jr$3?f77c1)1)l)$fJVoo z)f;E_7wp0Q7bBR@;$y-iYd_mrG+i%yGZ zsy4EWP%&L8=)res=>jD;DKwqktID)##O-!A#UWnJtt_KN2Ol~bZD^ZgD}F&v%_Pbv zUrn-$9L<5BWCoEns~F7@pO|M3*k5#39}3S$Y(I^b)h&7Rtxx~|u z^_M@O^^yQ+z2zsPUBsR1Xs3NVZ4UmZdcT6@%zq87|26Ud&gY%)zq0z9#Q*2V0UiVY zW8i-b{EvbEG4Kz2JO=*9!2cNd9|Qkm;C~GK{~Lk-ukGLO9P_jPnOP6~GA+mG z$NYd7{`a~*zOXR{l#V3wVP{VNFny9N!6-ZLK9xBSyInXW2!x?M#8V2qcgb_ayU%Ck zIJJY6@eUR#0P<3wiQ(SCq{U6+PH`X=`#ndXFm>QM5RZ!WBP{mW`t*_}G+3N!JZWHvg|VZD6=ri3}de&q48J<^&b)3Fx*UahFY`x(?< zs#^90TU3Atf%^tx{&Y|H!vOkrg-gB9*5CUu%|k3B*MRNEqtSKop0 zyVqqd1qZv;)M;!GFPR-XZYz&p_a_mwCsqpH4fD+s;Cp(}Z>L8Ea0`MvSV7lV&^jOS z(dvI@3X$D{^xTJw;!J+|EUsRlFHim?Vvu+?_JSio=WFt*NUwKja7^p~%$i8JeU4dI z9GQS$DV}mEp=8b2YQ{#H5*1H5>BBV!chs?UDxL(TwO<7i zot>S`&RxvCg-3RWtCoEaQb3tWSIwDeh8ywX3Wb75gw02|K$wp?_CoZ?dnIfI@6Mv} zA9%aJo{HbO^ap%6e^z`yOZo35|B9QfS>elz7_j(4<6@gwatpsbSJjLV)el6tL}TiMDhkn!VLtFVcXhHh|7-5d(1+1xo{DI(^3RXLMy^VxHue<4kb9xMYzo5{6QqZo{* zh-4kSRY7c9SCObH4U=j+w2%eB0Z4n`06dpkOoJW|k6@ShN@OoLcqU%}-~eRMOfzPI zatP^XKX3qcQr*u?0UUrf=%LWfQj~hvXJu!yY$|d6r4$Ax7;4mhc-*Ib5n1sUbVGXd zu+{N=ce_Kr1qiuI#xO}H}Mc}kD(x7bui`) zV)jbo5QoHwjlpKLNl*u^B80y-rL>i3L-O-D*X52W$pSzCC5uIL@^~CkT@_^jtjy{a z?)lj>PUZ&-4ikMV|1u%DpYH%2$w6;KZkG$oar+OQL61N(le~h|0jIWMm9b_7e_Z zml@Nej1{+lb|M|a5rndZ^6%zwTay$=hXdmu;IVu?PsAW?vwJnq7i#3Us6C)gZIFSYB)m^~9 z_}+$Tzji03i#;@9#6FUBR3$8{YhQGUFhKcqK|&uYK%ge$NP!uTS)G^A4EjCTo#rX^u-9pYeu%9U>h$$sSLp zvt+mslhI$Gu3)y{*VDh$WjsNKe1g+rwklf!E)CZUX*1bTUQF~-+a$S*^W`FAbQ^*c zPOV|7F40VEMTAMJ%?dd6aMh?8sJbE;&oB%KFdUaeKW7GO(8c0K?==+KcCVSsS)FTl ztcw7O&JaZ(lG-vY%LgfoP+dU^hhhK*pdp0;MS5RXeLRMc=4-4}MLy<%4LTZe6xUKMNyKP8XZCWxkNahGv-9P^0*()Ce%UH`6equoWq} zMoh)paq8uAuiUps}(yK$^sm7Lc$ahSd=u44L$E zD=(qlPN|8XW&vf5hcJQlU$Fy70IA@SBzv8jq&BEFHoh>3;)I6psiCe=h@#$)NzmrB z9o0?ZPsXWrb__5)&sX!3Zj-Dq@@yKVW|@=*kC9#l^|`k6&|GZ0&mhMMd;`exSnh$5O!q^6CBgJ1g~7L>n!imUAA+{aWpP|+PL5hV`B|a9B^nwBG^?`M{-qy%Sm0S6h;*3duY;xp?OXDW_U%2wmm@9pmgxr z$)!{z{_u8h=-MI-&GshbNojf|&XM-t*?QORO)NOJ5}=qzXnBDYz2`eM?~qF%{eqtD zOP`|A5cT#Z=<*OkYUk_qa^v-T`o+6dW}QtRbd~-05OCO**D?FxEAT-;INguwvvD^sH z>h`YW)XmtMMT9Bl8-N9n9h;}HKk=3A%NNti(|xN%^%Kw;AGcipIs`YJqT@8ZC_-~{ z7hb1uTzljTcQ6U+HLqicPF%IZE~76Tfi0+WNC$6F@KpdXfMn;P{b=bR4}l@cuGs}xt6Y^8D9G4YXP}G)Hm`15-)Y@M{G!Bq?@33GRK)p0A5@|+BvHg@tsb( zg9KEEZ(Ak^)*zZm#s*#fh9EUYQD;ZpuAi_nG6*+jbHSWc?;eG2K~$CpZKy_BI`ybv zYIlb4kbo_dgxbP^bZD0pWdxNdp^ZA>aE6hZB}9{i$frUX)MzKyj|VjpQ178X6baaI zNyIge_QdERDGZ}vBP*AVYrPz@ zUStOQPTXbc-IF_qb98;Ta%`rl6TavqlFZs60xbamV5s1_S2lw8C4DizOKo8notLAz zGmi()(#qyOts4ph1f*

lvjt3ys#s$&=%Y`Mj&h6wfRCZyU$^H*O5(mF{&1p?+)t z5QW1t_8OH(t{J@b9TY8 zS1n8qP6hjF7qGI9*|+cski0`hab0?z z_wftVP^c!E*0_Oo%y-{Pgm}F6K87Cn!aVCl+`@x$UNji-=>*1BTcO6nY2YX6$E%^X z817cgc{{~vsL-_pXM1)qB{m%wBfKN84)zAB&Y@Yfl**}%$!& zBUMD?cwfzcLNruNR#^;QyyR=V{M*+H;=voTohp5O?;p=REB>PkYYO zp7XTlJncD8d(Qv+p7UqG`wL|c%nX0b1W*Wm#sl-~We<-J{(C@|D|DO}wP*R04B4W0 zC{g4)!v2M}*+6V*YwuOm9N$*ZuhP9 z^C$?TAU$Tn8}VqP)I>&Dq4Yb`p4+tArAYJb%Sh9b0^=JL>&!?vJW4~}C{@JXm0m*( zTPGWcz6p#a**uwX?5}$XOXYM(uy8P9zGPZ0MlbA(v%0k32O6~mDo&hu&wHJGNjokT zr+uiBcTu9gVW2cLRD;~?7S@tW_BIa{y}V*)Oy=Qc#OThpG+nra)RNQ9Uv8wi^xyfwJhZhEnVrK_-UpRHT2zcE84_wHmOHhA%4F8uyAj%wLgYYnezIf&e2g_vwJ znS3&H68)m!`z+YH%G*_XFN@l59ebvv5~@8m-Tm7i$KG@}lH{A?i(WSd=-}a{Y`tz8w4D`&i{ocPCKs)D>!^3Mzek3Wc@^duiH)n z$PhNwhu+XG&CSFllsy{9p6|cwN}K;Q{_rUE=+&jm{kSXW?*fEBUyxs@ zfOtHof31M{`J((n1;o!E;OW9VU6}ue3-ccpL;QSR|4U+sftj-nK7bhF)vpypJbu%^ zBZk${bnqsCeR7n!b7&w>W zgD-nV_jw7U+)@Hsy_P8rPf~6-<22=Je>Lbs3VCyBD?Ae$;_K8bOLV7t-nAoRHrG(k z8Qaz&b$)XA3bWk#`eNph##yJcZQ-=&bl?xHg=mtappr~)8AMS9_!tFgpc2xF_H5Hu z&2sU{OY>V*__a^)Ci7gA$ShS*`FP(VroE=*ryMkB$Swi;u7&8uy+Qh#?s{mL&|NqI zKU$4H0{cS?F>M<=e9E3-fI3GVi06DQF`m13MMp4#5!f`?69zJywK()p{NbL6Tf9~y zd`a%(E&V1lJqSgnt=JTW*0(SE&8-GUY!7Yjt1zUA3$`G03?SDA`=NY|exFXRBvCDq z*rR7cA%XKCQ$NJ`?m`J&a9$^71$hg?lU5KPFvuK0cmO@{=(?8-fS*fe)SY8ewo6+X zHDrniim}4>6J9dA4O(GQos7rkv}}#rKqggamF3uu@dq3d9Se3$LwHla$UrI-#NfJ- zc2n0ZWt5inmO|H1kU-~%l&)Tk-nvxo%mptTN4|*uqJ053SBY=AtEA=eKHv%>oFwsW z+D1N&1&L*})ORh!EkFyQj6BLko4DcsHRqNgNz(VdAUeeQF}Vj;%o~r4?Pl<%iZ7j0 zyRw7hyRxQ6Rm5y7i)i(@we(iB>5i}98+?h(=PchKu}AjGzB*`Z_t#JIl`?D)oin7K zR@5=?JVu-;aWtnb=lH}hAF0!ajgUZ-ipT;UlypvDcrb%$3K>~2Jb~P40y%du^(Jir zC(Q-gMj=d9uPj2&XUGukWyMtJ0EKdo@++y%-F%0F?W$9~@p}^wjxPZr=&_Tw3!LJ& zt}C^t5@Fz>q_(e0d2SpURzfugC$YZrv2%43?ifc($?=?7yNOrYPSa4qne%VhTHr`K zMOiz-=Y$-Szf8*U)dg!c77r;W5`Q_(oARN%Mb{{x{Uf{WfZmWm6}>6#sQvmU1jQ!H zTo#Cm91F(`d|#Y|4Jx?3=xz!WtB z1H#8M8Y?=JGc^wpJ88nrcowa3vR6Bp;lu382O{03p!T2hAH1$eb+*WFW9c!eYF|c z`mDGy!AWK1q;>R}x`d7uql+=OPLTd{xM4vz7E2&-vrP8C^z!!MV`9!tLpuE;O(Md^Tabsq|c+@4?XtGV6NRF&5pOm0H#Fm8jk zh3%^1oY!Fh@x!8R?Q9I{$3*2;c07Riq2sR0u%>3U<*+Y|n{$(UU!dP*`qj)Twr4KZ zp;IrBw;tx)wPji3WD~DRy=O0-Ia>4SE%N|UVi}an^4F}cY6{0Hy{OTRM!bfwK;s%t zp{{S;)CRIAzz0GR7`er9`V+48sDetZoyXuALj$BvGSLah0QEygfg_?NVTD`N6(kY{ z5#8JJE$y}|s3uw5X=3C~o_N~pXZ18q0PTZSJ6=vC4+cQ{z^=uW;a`qX^j-Ua zq$2g6u{QEi`>?sT=|ck0J}99aZ=`D+C@Irf+ED$_J``wDhr~pz-&JA;I8>NpR%#-HZCI2CP*tJ#fkoJb4cMXiUL5&L2 z?w0{bASN>7-*%G#2SvW77brrvx*J1;rRlW11@A>d7vO(^ng=>7fKdSy<4c&Kne}Yn zKiP2SL3FV!6#?E^u;Lul&K@9uNKh?FB+|()40fnpgL~=Nklc)sw8eVm&WbdDOvnQ= zjd8GGh`QCgH0RpZl;vKsPTD?Kw!5taaSm3^cfP*|m?^0;?lg9pQmF z3<-RIE(BebcQmBFZ^f9^ML!Y(k`jWdQXT~mp@#BGvMpB0wpetqz$(d)0*EdJYLS~S zGve%39pRBesIdZU?`G-5#Te*Fqoa}IaM<4#YHt zgrhfpQ3TBrdvB3NsYu~hN0e#+PqH&)K~QNA&m*KHf@w>J15;w8aj<$-T$btWpdA5X z%W5`$550vPjJKA1p-s2^%X6y&GA>e^zc ziIypK)WNCD$c)0qzO8{nSx?9jg_eQq%6EGAZLwQl(IT%_DR;tFI3ksPDsdYW8=mZ_ zKS?~rJ3^6L0_2sp3O%jeGCFPHa2R*uX1m?WWn>lthAFGFSlpX7@p`+V!|09u8@67r zH7W$hjpP*rlpzFc~uybV$)iW~G^LwdDJMURK=HR#Cx0K#a*SoJWhPTC$ zKiwaUmj;#1W5W5Cp{d<2G9Bg$e z*PgC7v*5i8^Q|Ompthv+Q4IgAyw=eW)1Num?7L$Ox|kDH#lvj+$u#;{=Z z!pk5-&yHLk%oxCwTh;XOTd+WF7aH*fzXa(%bSIqo`I%$zNcnNiyrMhU5-%J!QQ;0g z=$^_4KD{Y?{mqh91!!gJ`rfRjsr(DuqyAxE8lZnLkPQ+ik`0&E>iqKY?sqqlweF5Hp!i&NfigBm98xOe4PEIWc&gVlnl`=2L zoB&-2sx_^y5-v*VDhL#whjODEDaj?n<_CH~o9V9Ux?ItZ`iEtzjg{b%qQc|h6~~rS5GViC==4rKgT5XZ-$H5J-p45`ph4gD%Zcw!IWhf*MeGnhF(Dfs-o>N zzN`kZ7cZYiosVes!rWv79U9^Qspp6EX973i99Rxc0s;#h4d(^*llOtwFNr0TrbX~a z1q&R9weN72HJghZY|(jzic>;xLh+8T2iFXtKhdkZbxP$v|EEN0fGh7 z<|9W{sMDzz$>ofWITDasNxZv_!r@nUuw!B9!*|JCcDiTXn!(*eGZ;77TRyELT=YIe zqdcbJVZ7}aaI#_oq0;>C5X`qtd{)?3yO#1faZ8{C3cb!4dx8@urZA4FWg$`OQZ zEFvN+kiHyQ`10yX>g3gl)9rsv@c=lcf30}<`JVhr#lue@;OV|R-IxFUefiG{9)3Em z|0ThLL<>W#91IZ93MCNGFAPOx27J@MA$U;vQz&YI^wft#=yz;$W}q+Rk$cQK6R|}b zU>;i#lz(eMs2b$vc6D|Rz58T4cIZ-`I#R4^G8%;q(V_|_8hr8&wSJcRdJPcb3=^3v znuIbD^OjFwL|^8fgMJYC^YL{v%xlqDB>d#q*q|Hw8o>y7K=wobodqH|yZDJWI%txB z#!a6!4q3^=hkGms(fA9eyQL4s9^9(Vp?IFpqpfWCnilo=8EvF0lHep_A;x%XNG0)} z$A%{D!SL^0bcY!PzfqfS`d03#CtJ=o~tVJpHB z-QLB$`Ka;Zj3^BBTIwa!2p&7>sC!z3>zDx_Gu z3U==5oCjf$^ZVCP`arP4i@=(6>&%CIx%;yBZW`-Y^{wlie5NOS28Y(ZM|67PR z)paT`_X6khxz_dTiua4rVG^UXm(zy*c2QlUC_!ldX9+@=JfH;O`S%ip`Aa|vLb5yIKT8m#*xvl)WLw8^93*+q=kLh=V$^ zXMZd~r~n%ks`4Iyyz>zFbijuipsj@;HkH;u8SkWu>`Qd0)yOsX)@1f!bKnHYHg->M z_)P6>MYCM=Cw=ySAlMp7WB%F?!y`J9o$>wL@375ZX*%F`#@a~!)QKmah4q2HCuV*^SU7cqkdy~#E)UuQ?*}}lc-Uk*WPz<^#B0y5vl)%MaE9U{4 z9Sf=}#akd%)`KYY$+#E=fqKz>`ijd1aqWt>$u8xw1mTMqEwgG{e(TqTqRVFNp%Q&@ z;`AELGI4!p7tWdUlHW@ZasVX==26)Zni~7B2!%TjM;*O1zNHd)3c3#Xv`mF4Rf?;( zIoK0-RI9wV1DA^O8<7fYO9MCWXUu8KS`;rQjnG^NbRhKcDhO2SG&Stw#g8ReLs$EJ z??9lIa0uchMv`6yeZ*U;|0Y_4}s1ecKplOn;8PMgi(RpeD(A3&JK zN6+xf6;;I+_j<<8bGFj5#^%AF9m_9>`fOG7bh-&!%1lr#Cl)cRV@T0GxB5sx+)PkC za1$MIUGlL5K@`w|aKP9dAZ4)>a$RGE1r^J&tI@QQ;ed6(%149gIdrx@ImO*%VlXTKduxpAI_`nvU-LXd%iDVc@Oszc!w&X_#0{xE; zgcIABDUyxkKROU}c7@ns!M@DWvQMMOZ>bIEY=P9(l7ApZI&zQ*e23(nT%=X!3O6G{ zaV1=oZl`KK7W*xSXy4>Bf>8GM@z(|KlVTXQL|`t`Iq%M{x>E z@gc{u9qIeaP;}^Sy}S;FP*x`pB8qojI@G;|#^+)Wy0W>~@;}gaH3gI)XkfH>lC|Tn z;(aec2qrri5c#bH;exS(3Ri$(A|5R9dk4a5F&V-+G&gDY-O6c{K}%E!L}pL!mA$+@7&3}Mio6N7FIOhgQzTm^sxFz2ZH^o zxWzzR|FFg?qETBF;U50|QC4uv6-0*3?BOUXPngbR6HW$=kgxC9yOTzI_Z`D~&N0n( zF7LAJ6~tiSB-o*$F{apfvE$Fla15gTdSLYB&|i#1Mp6m+&S1$-jWM$-6x2mBnH-LG ztPVc^u>#@Q4yY1&U_stKZ#rcl9d&i62_ufF_Xe=}bVw%X8^0mU+X&3i7q9zy6~C_Q z9IVC@|L8#A0CXT+APXXcB|RKPI!ns}{sra}eMPYYNxGh<6FL;^p*5cXm8rmN5m%&? z08b~cW0M0%!!M^p(Z|S`PB4!}e@p&GiwB>}ezG3!wVRb|5PFt{GY@}nA1g;Di@F!Q zZ0m)P+dxMb{wST^ycFuEHV2u$OiNjUi$1v5LSdjbAHB6e#IOZCnmy`?FVGyoxb&e+ zJa3xWLbV6}wFKcn>^NDd=&kf!Q%VNH&_C{1SM^Na{az+ar&FwNJ_*Hs;^F;Y@fxKd|J=!OHX$|)|M zi7lO!3199wCPPZITVxpHy&|>-bDLxR_@E6_+Ndc5`2tb}HRt(V zA-Q@&_qWEcareDQD~|K-;l$ot1BiPMRao!z|)g$+2K!dwx--Nq%4%=uvzC7Rqlyznbmme zch1$d8%L z-#M4p9m*l!!#bN-wWQ;esm*HO-$aQw(YP}Ye>Qsm0&G2f$GKi*A>=B-Xv&J~vm<%` z*@1b>dl=VNsTn8@iP-h7=+ZtyVqBX+_$dTspjYx+cwI;77zxYe*s+_FgWA1WUe*Cf5{5UmdKMng&!~WB-|1|7B4f{{S z{?oAke=+R;8H%g@x-w^02DU%;9~4CJQG@?R#od4Llm8y(`z;ATr%0mV1+HM0r4NNQ zs6Mq>8^<{WD=?UilQ&mC7zxG2Gi*cbe#-Dy zwijG&)IbJUDWxl0&@07u?#yhG&)5l(udJAXQP|mzXGW{|do1H|bStvdR#b#r1G<@4 zs`@z6-pGqR=%9M%(&%jFC|4}e&z`}YD~8)gm!@sP*FtU%@@=)sC)}6I0*LqxJ7qef zSw;oC^2}w_(O~&A9$euZm>%IT{Ysc@-7h(xVTVPw+EIMtBDiqUuXSQ@WpHI(dTt(K zMOAS>CcTfzQPUq8%ULb{<=``*0m1PzZTZ)7sZSfxqdT{AnH$ATM$d#Sgv?>db+ckN zJz9f17FnN_)~YMjgzf|{J&%`#?_l=as0}0dwg@&B#tH!9i?xp(2xRY#_g!C=PTxXD z9y(B;;c^)^H-SO77=&Asoxrk8G*fO@RIhYBD0O7hG2Dui`=4n5lCW)PAjC_NV2n|@ zdIs8dtX%>!w%84>i#EG`l?V8@!263JUn)paV3F}bJw^a{6Rl?B(XsetJ5^nu+DhM8 z$D`yOl`+AMy5r~soMk7tc#JY-%=xd!j$Ru>twe4M$JR>y} ziKYKy5Rx6f^?Yrb!XNi=Z=cp?onY_cx_Mp&)TQPU zhwBQ7LU%i`ZvI;$(3HCQp z?6kfNzb63niCn*K0zQKc(JCP_|01m8-`%-&!>peB#=qpwU1z&8Io;*n`KwNSat{*U z_=qyf*>;p-B)7)At{$%~*yz_sAkO*~0K}KdgJAppqt@WWW(;mk9)b8P&)WKRh%9jM z`>j9-74qw3SVL~z z*+Tgz2S`Nn`8T{i@=VJjd0F?EE8~k%Ik(hI8s~+(YXPJMzz;8JugogqrSvM8>k_dd*tl=XWofSC8ovLz|*_Yp&}G^}ds_R7}Mv#i^+B~V%w z-B_?}Vk(|=MSQYu7@bO?7q=N$g_NXY6h>bBDg;}JkyK+VmmF-7 zBh3TO>^}>)ZBPFOWc^FN| zx2~jZ(OVaM(jcsgcPfmGSAV0`d+OuxQYEC|rT$k_5yT^*puuwk)fU}{ugQ0?mYW3u z@#+I&=o|nWzsEX-6rq8NVL^UF0udE-xBS_**nCgx8kMKJjUX2vI&MK;2>~=#%uHlE z$MVoMqB)6gkFKG=`1_UivurPA)ha2t{&y4VWnWT=jf@qX)P`5sH%*Z1ZEc8GBZ6I+ zoGK1-lb}#lP$(L3WL-QEz4nl%UxC}?Pr%tHa*dJGrHprU-deN6HjV=AqYiFZ?3$~R z54s)tGVM){iRATR7MX^aOF_}p?xa(PyoP23F`k|@zgKdgO2AB@y& zJSXN`x5-Jd?G8yV=^j@#cD)XFnou(Vrb_w%q-X>`yBdOGX)k%6gr1jX!AtmBv|)5X zFN*aNhj|vI%Z%ACC8M6sysfc%8BUM2<&lP4Dan=z0ciNFi9?q>9Q=VEc86;ZHl9ud zM=X0%8Y~@xgB?PJj5&aY3&N+k@Zb*TEW(UhsM^P0=nGM%&z8Au2zQqT#1^#fhFi#PELspyA6@*TL6@vBcekk2E~H>yFE@ z0{wL7wiA&{pey+UUglcG5gaqr{j<1B|8B!ANoGr1Vm?I4f;uds12Y}@m;Rc09>!pc zXp#b)6#K@E4{0lW9*##QTa-XsC5neK{rM+*slK8Mig(#>Q>0YZR6Mpcm2!?*SCuSA@3@%<86-RFGB9u%^L8>FJ z;|&cg0Eaux!-3+(GV>L9yawR#3tDoDKDjfL&mD0Lv>IYOZa$!Sz~jC}ZkKW-hG&Cp zE7^OlVPuydNcyk8A!Z|up+=jmFLU8bNL5TnfLLB2F2uHZYjRT6t*jB%YX;QW zN+gw`$wVuGCqD9UGWQE+vQwi+9v%ym31fMb&sF=SLzGA(7GRIJvN6KhfyHs~p75Xx zUqgbe9Zge?r71fL9ZN&LvivplF0b47XDMumHy=S5~2yUoR2 zFBb*iUpK#d4!v@;mP-*JOuCatf*%u|8R;lL7AkhV{TlPRFG;`#NRtO00E1`rb(;~H zrgegcK!c0EUQvP5eh-RDy2|qr?fi7q2O}Aq=ZGxs!hp|e;8fPT$R_!PI({iD2kE5&mq3RC$nuJpCxo7f?YT{ zMQY#lk5lLrc=uB&<}>%FdA(s0o!9RijZrMzYHk^#O2c!&p;6*-T0? z(sVu22o3{nEs+p1CT1^9IfcTS25C{);z)z0A5@%XPPQ+6pr*udqO7jqWWkI%n*nSj zp(aNMD@E3cZ=vx${c0MTue^bho}|rqRFYAak_;78d(5Zx&xtC}K@4K_MyEy$Lxg-( zWUsoILd=-!0Y7dendil>G*VcjPK(qfwx$h_wTC`pG+0qA)DH7f0X8D!9k~(B+vIT;7u5?{ zpN?|??s&HOZQ^-&vK0j`Mf(CzgP8bF<0RdX3RD`SrMtD4sWc}mpokig!K+q_9;IAk z9A(jVTlZoXL)@e8-2So`d|0+rdPr}B%GmDlzpcK;-`8(z3DsORd%eQ9Q-41}N^Kow z05_P*Z@;S08usA5A4zaNKu zQTx&>9r$jTW*(1w<~tboVo6k&A`i-FDqvnk2@&SSQJ18{=PnAoH9G0Ew`xsV8ceSk zDk&-Un?)Y-jrs7Q+TE9*V65}{cySU;XPv5pyXZR@=Xy6YFnQUX5Jv7-J%E2m&hKPM zi@zVkqQ_c{muttgHvx3BS|RPCA`u5uXc+H!^E+sL}(aSy&YhVkCnG8a)yY)EqH)KChX_&)#PMOo*(GytecS=R4?&U z7S513JU)0;vx;!zZE$X+9fmQkEd`GWFvp+k+(lm_rmKWecn&v>+tegElPJ?k;pHp1lHmSPf3R3@pK$NCdV7JR-rAkQ3G`j(JHhwz zGGe>!I2Jc62>)u0|9R^Fg(}$Zugd;n>i^qd{AuWa8v37x{->e;Y3P3%`k#jWr=cGp zP<h2E?A8 zM1$sJe&O;+Il_JyuYHB4p=Q1g5Re8ZZzoiG5$Pr31+i)Am+u1Qe6Lh=;hv4`kbS&8 zx%fO2`X01sd+sX`P9=yvIFRYUSC(5P;EY6lND+A0PYy!y`UHu|>yRKU(x|xEV_q6a z?K1IZ(6X46lv;uz8}hLWcb(nE2yY z{foC_I=a^Htqd(}49(5xZ0v0oRlY|@-lu+S@_K&14+7Vs!8oq9z`O`CR`pvbzU*Tt zer}wLW2jE!o3&~z&F6a3cB(tu+vB4gW8})VtrwGKui4DX`NGVeUz#D2yy&l$+0dik zE^MAS9289oZWG6iLqBaSWqq`X-?9FSO?>&fPwvqs zZhDXWn@wDy*kfsMIrD}9A{!?e#k^5H3U)DqMjtdP+k-jWR5S|GH=B5CcVXnZSthbY zr`-`WvO}S!d;n_Pd z!oJZ){Q>(2i`6e(86w)AWD$*I+jIm{Bu;fo(I0^w$o$QCT(DM5rw;FyGb&dwqfyv8 zv7;+S!LE+zJA+f9me5NuBGFMl@f_!-aS6!AxJHqL=-ZN(2or+xKT~?HQUJ+7mVID8 zac25H`OFiVf;qxI1+OqBl2%&qLgfF zDW&?N(sAL73=66K3>pesJkC)+EppTG*V0=q1AW@5L6Iho*~5lXI2#6D(pbj+-6f9j z=n@|{>_=F?GT~H+X}_|$cHj-c14)RyMql|@`P{BSyj0(axV-_$3g&Y@)uIKrMvN1( z(TC3V3F(*vO{}R^cQ{parHfT(BE}M(V6K2e+sxuSUWM(qZHT`8Oisw-dqTk{!bv3p zd+j3&`~tY*p7tw6M+-^M)C}-IR6ZR**xU)T`B=hqo8W>NQK5xmn(X_^saQax6-_6t zNJe6KLJb0bixlF<)u2JkM8hD{9#>ifVkR~nR6rxGzyUQAB;GcJceDI+4P5MEwA}pH zpx{%6pWc6T2_S?vLoD{O=ft@|7H{j`&uMR&z3+-8im zdRk7JCBMu(Y`8Y~Q4`?Y`|=N!YjSK!?}lTAUYoXSVhnBXT9kd2n@kZvUvXe}5)Cpt zm2cHeDgDqnDG`n#3b7>sY!;-dupjiEXv0-B(pVfD>WbW7Gh(u06m6gEB0Uw)oeyRy zT35njzGk?~SHRN?hDAjRqJSuYG;>q%qAhwVNiL6efoz-xshDAN@*+fl*8yJ?J<4Jw z$1pK}F1Ptz0O5M=mlH{J0X`(oNHty$y&#Zxz`7xH+-ffIL9C=vHSn(ao8{v#Qr{cI(w_+Z6BlyRUaYY~o?xZQ|s= z*~A@%y=dqWiIF6hE}Sr1JA^NWoLN7*JkOYq*HFcPTATKvPZK>7uImwI?t4j}8F1qa zP0pBTl;Yuk;oMJkSq9~c6;+o*KJR}iZC~8ymF$TCj^gBfjnxKDDZi5R>mcY)eAAGK+9G?YlF{KO zYEZYjdh!3p#k-=ct{3ePvx8j2axQn|-wp;5_G{}HP%M(A-U3NToswJB5y26fP_l!q z%e{dhC*Oe*m&mqX8-j=@(Pi?CQv$bUA=w@dCvb#_x~hhiou#7B8b@(B+SLB?Im=6+ zg|7VMHTw1hdp{EUF69_xPJ#Otjp*o1R|;&sm@q45sBPdsZQ@Y3k(i;Dfzci%bAEjb z?JuMvSf!Z<@0~TS-I&N-cP~;hMLgY4@zo6uai7TR{VM9p6=xQUI*sPI}hCRYJdoZtL1U#PPv;7xw$% z_<3dr)qyM)tQaFvG>qk%hEaL5XK9lO(vZ2DeMNKE)dI290e;{HMXG=&4b(vRP_#Me zz$^)s2WQQPYYnat%IyfP+sbRouhFi!M5qf!Qq@I17o$azKr|DA>)vWMZR7I$vsc{c zyH}hm>5MNol2;+07?z?oQ>Zenn9?Cf#}E$dSOH@`aO`u#^|vhyeGC5T1)Wdd$StL5 z*yb;ZRpD8`Gw}xBMmWuuTk9a+y{(4*cQRsLkO{aeG2raDpQ6f#nWy75g}@R=g05puMXj@&Tah)R#eB zN476gE}VFlUXJ&5>2PjsDr7^Y8Y}>>9XUJO-e`5579LAw9uHbsae4K>Y;3SF%N3u& zemit^g@Xm}A!4^DJiYZkJfvX#o7p6)W^O0IpQLYF*i(4^XUd!@&zMw7hxReLiy zUb3*U@7n|iv!1(JL+j@QU|5dc~Ch zUU6Z7SA6EtD=rK0io0wQ$D1hr(<|O*Ql7LNdildEeoX@KikG-)!noE-u|uYYVPsx; z|L}@;;T0ZM0=>x_!VO$yqGxW@y`T;n*t@c-E*!2-Y7C5b4-tZo1I0|{&>v6ra5T%A zjw0RA3SbffDM<|VvtU~R25(6_ro$zYxi~5Vq0gG>o1krAE7qIY)D}LZTXeRbW9U!Q zLaHOy{KCPMi|O>~rQ2F^BP0gAMgJ1-w1wR0^Dc2iu6SHC{9CBs-vj(uaDJZpeQ^G8+xre*9rV z<;tfHarbUhl&+hrr+)+DA$CHGXz$z%i_U{_<~wlW09NrFfK?pQmMa(C#OZ+e`8zEO z(v||Hy^?~AKJ327@N_hYq9XiTUFm}wb%)C0Xoo%TAtlUa>D(yB(5!D?QFd<4h`##y z#oZ4rH8MKBXApYyiqDl!TY;@Qah`zx>Y0MGd8r++CZyf-)4mJ-j z)-s&Lg*T$E+JNHEKZd6(h`4UbxeMFR`*|05xFY{y7XH%#{V%cbgf-2pM;88=m;NjL;gA18{v8(n zr@-`te;b(oyFYxXxiTyaAOB`1Oe*QjNn@YfW(ytrY~R=85S(-~XP?A*77UF2>l zX~PhC3+zL-E+W#Ia-FL&y#c5=pP!(UP}dmd5vJLK;uoGbi~DE!OV4-~HZ9ffb@ zd0>$$C+Ijo1Ksc@TodEy7kN{mzlM;eZvbnJb~8>u#?Oq!y{Oyw(wf)?&6`9xwOOTm zOG?p9ohFck%mBIG*b@)ry3>QD}Tl`CGV_%ASgIR^4O3?Gw@G1JGII{poY zTYZP&pnrhjkUwC!J^+T_0ATog01O9l`vJpq{t=lz{FjmGGl0nSL_lOZ%=gIjw!YKG zQRn=}$aH;PVnQJ{HDqKvRsS47Wcna48$nX`>jyw&`qzJnOuxCP4;}!sU%>T4=C4xn zG@za9*yM8~_)fz!MztGF-wj~wAFh2k28&oJ2(VP|7en6@5OwyAs_P~Atc=-E?Bq*k zjMXiFzSBP=Sad?=i)bbIQ$~7xkR?*!RItlFn%8cQW|)b{bLgITscRvhPJC$KA`C$| zo?h&VbzTbhlh=Wjr ztAHz_1DxVlSzEQuD)mkE%asb7+8~%igbpG(w1w(Ifwsmz3gHDHLY>?9M}+#@0Ur8I6#W1#EJ} z=@mfcmTZ`kq^|r@va5%z8mNj|s z@CUy}qI)$xs?Xee0`da6edE-XeqHf$d-UTlStSC$4gRU|9uePd!w-}A#ic))@|G^M zrN%I+XifeXOn>{*ts+l^M1V`&32Z#dRKS^H-{?fMbcNqT8%^%tWv1KHrN8VNHh`Iq z1s3D~A2ZX7sQX-rm~~!b-ecY^wUZR>iULa1zr%2I{YKsP@kl~S7U^it)7B+bK4}%5 zZSr^@dM%X}dDnYrKWWe$IOT^Ue5w8`wq^IYl54JnwK!{KmQr7eposKzo5b4#NKMCt z);4eIF@Q z+?V=Csh=%^t+QZlCb{2y!3%W=t@6k)jJ?iv*?AaDxJ+Mm3L%2R8FI51<))y7B>k3_ zg&Te56=^BW__4=k7Lb@yT+~)IP*d?Iw>)o&I{&tXk5G4qmYv7*MzRFjeY^ev_z zGV>n^IZHbH+F!zOaQb-pN*z|)D9uG*SYwE=k78_CwV5E9$mRfp_!+<;4zQj}8wF^3 zSTGqev>cd%n!TJT$Tw0z7NZKF{NQED1XT3aJ1z)%U!Z3H3eAbuqd-=8TiQ%GM2}BZ z?nI(*42#)B*xQb^4W8M4c&GK8n%t0t)Wq_t13vH#luQD^@0 zLnQr$6a@RXv3x5Ji*;|1ASj%srL4F`|DHbR!x*R;^M3g*ujVvOYs-gL-|+>K=$tn zDBIrnDMnps*JHhVRXJ+kYJ0W5XkVxFa^R+`AM-`xTZE|jd~1`owR_J(?jdq z`onkn895XH{_v$b6w3o!%XypUq3m+Y|HgB z0aC`@`)A$!QM1|{t@y`Wllz;F@qomLGd#1__t=2kbboL9o}f|Zj*E@(2>1pqgsCuP zAf$p*ckRm&n8AZtxPi56+ZMI2d)BmD=|p6jnGv0vyh0d5U1!2+DUCZ{b)Xz()`BD4 z_j1+=7vSxAJi;7Pe;WFqhW@9a z|7qxd8v2=6o`(LXq5o;z{FAe6c%9`T_|KHKwRD@hV@ue9|K2p=LF{JSwJ0fp4ZM z10Qq(g%7DW?3V@)0euAUr>KtZvOKRF3f-TJz>B^wd{08fNcP&)Q<8s5u5+c~An*zK z*DAFa#X3c+_csc%A~J4hIF=O(+ht|R0ZQ6x^Tb$t$D=eGeE(SL2eDs1xY%@e2DZy% zWq%Fb=~Uwy?Ug>vG)EXYch$|?_Dh@9cs1>{U%MZ=KjO4Jq&09F+4ijO(?`}N=MKec zgSB2BJKa&6XN_gcbujC??;G1xpv`8K^0Bc;|wa(@VWeUml$8zZg4{R7ICNo~$j}$$gVn zH}!0?z?ikJMEqpnVj8Y*8qzKH8@0pimrpwSTMEb-xF=)jawA!)tx9>>81t+(n@@$F zG@;O1)HT&NZ_lHg=Un{yQuxoO;%DM;(6#y3IQ+-c@iTGwkN4pAl-!<@zjsRhvqb#I zYxEx?;=*)DTp)w^{7)w0pojY3BI18nA--XAJ_cG$|9?**-mSdR=NW}G;CSK~OCH

)jJf4zn<=5@Yb@iUPiGlmS!n5Iva`3 zsF)viXoWH9LDn{S0(Y0hvhAwf2R8IvL?VZVxa>jX<$Yx*qU0y+c-}tQw%nf!17OX^ ziW;g=?kfgACx43f$fX?D;wx;nkOPDdgHi%#P?R>iei;9}Ev-6=&k_OYnkxDUr19(J zB@u?#ON>dP8Ui1Sd>kY8o2x&X>6#_a%VI4 zG$|UsZgGTRrRc(^_?y5-;{Ku#cloXm_pPOc7arIEDa0eJZWQ7&5$j9cAcc7GFADL1 zKPtp2K??EU-zmgZKg|i58`r*LNAJ2{#1bcUcdl_G>v}VtmKy09KgQYksD}I|BCl7d zRND-XX5l*0*j&!1kG!*3MgKa|4*uFK(NHpO3#Ejg+KZpz`2 zy(edmpmMm!O*vc|D2LB@f)wIB4nhGDWR*vjq{LTHXf%5oiYsQ*zO2;?&^#zsA{9@} zHu81Zo!~AG;E>dJ(rKO|NKMpYXrRO2`Od?s9=GLmZFxM%i~6A)-UIokayU@K|9Y%{ z%7&Pd1efrLE=izR)Fa=$s4bE(pPxnqSe@2@{Y@d>==~VjOosqA(+AI4x7$KB2qLq{ zTT-p}?#-Ff@(hG%1V`#uLbo`6_RAWi@Qu-)(Q4z^h3~DFpM4@j+Q=k+@$SARi)`~W zg)g~qf3(|F^bV38V}dsK{?|8CUP~_!<4pR1Ygy-(RPgN!mbKV49$2(N1tWi^{~tm-nzURZiIX0 zEs@ib+!us9hSsiBRWIf8oEcfssS$S~%0KU#PvHATj5al=P%5%F=@BvXSvFRdHSjDu zv+>?-`I?7DB>zM6@r|k4~|xD{wz$o4fLf+-W208&C}LUPL~}*2j2jJzg2Wmns->-!~YJ zBJrjij?$~o7yk+?rTUk0c){<>;Y^;P3DT^60xd7G)xz(PU_F!al$I?++fCki5(@hg znh*g4m+p|&9Z?~3kT+2um{K&8oEP1mGr{v&BaXYW(2gX zq|b*T0kpACA;;>dVVKxw@J92JQ4#dviSG!nqiLWE-(!0eBwmx-@DM5(N)PD8GwFT)Y6HlmZbQVigGTK^aF}+JXLl|Qw5o{ zyscW69f*gMlA$BTDE0TNI*k$#0OJqDR1+SToUX^ z=?|{hAHKeDIhfO0W`n!vIHgq&YTCU(BBq>Nct7fh%msX)4EKr_@%}53>Zo{rc~r<% zQS#t636CjCb~tQcEZq>@2cF6T75WTjEnrGz0qr1;+!|r)c;?aDyoa+%L0Rb3IXrot zsyNQZ3C~!%V^+c@sA(sw9+U4D{%xvLy%&adL6DC?uo%1!wwb(SBjpNU>lzPss#KdsPmnD+`azeBS)>sXJjSy=GB z7Y^gwM!04QRt=Wrjtk2z*sIj;Dfd?hv5I6hHA?~koA@++yT;%r-afe?W;u)_; z|CU2M{NFpoYxOoYHEELOQGIRe-CS%K!N)7O^tM%c!0g#-;^-oB4o^Cx11Z0i<`7y@ zHZOLnP1BC{Mva%$CC+rmJ%x;LSk^q$W7Gm~DBa)e(RW>>DM(UjW-+LsE)n2~XV;ft zw;MMiL;}A&sXl}j&_Xs$rPHB{TkqJJwpb=xe4)ZAUpd7hqY}}P)k(gXnA?qYA+i`! zD66#O;*yOWXDO?^WbRy)FDQ#ou-tUlPBNQYiO-|sX!r`o4|S7Jn1LXsH!`PnI;tSc zh<3C&R~DE`zg*%jn>+sIox0O%z^N^D8iU6)C^)*&aYl?d=e;(SidAXrR)D?;Bd?vb{aCmLNd{$5XPos&NCjQAh&0xrZ?upNY}! zQ2HM3$h?i0nofE7`I(Ovo&CXhc&wE;aw-xIriU4XQ3A6=%t!IuedC$Rm$u7b8GzOY zIr5&rd`;Mh*Z9|?M#A6M!hekWKNE%ji@5(^qVU_af1CDi)BbJRzfJqMY5z9u-==*g zP%vMx$kNX;)aWaFrmCrYs?8qLh74Yko|iWk0s7$UZQ8$0`?qQT4{86;wC^V}aCT;< zKW?PEPQosJ`S}d|`j-D5-Q%{zWkmIP^F>IhT{=<-tQ=Ak#vXVi$!)PR(Dqc>$e-4X()hh z&@g}LZ-IN@u#%qCc;%mB%pU2TlW$a=H{SYo7XrdH4RIx_=}^Y8H1w#z|HG?iBHK@z zRtUZOsZ_Mbs#-QSJWh=gqZ5zs4pdz5K2J6eduX`66%|h#SI_$Tn>dxyb}gMl#(Cy> zN{xc{!%(J6Cm3_%g&{Pf9ZP0OEGTMxaH0$a%6J`OvE3$Q`n*n_J__*QX4eXpVhf}td?evq?Fm3Fx+83Ee zl3R!u$r>>TGpUrcd$L4Hu>1;-A3baIWMT*Br+ic;t$p2yygnSzE$!bL5eJ;MFvb?%?9{GZ6Vudlzq=G;G? zfS<^@e|HaVPr~g<`0XV8M_KmouET$bWs}(=wtQOGP*<$d-{yZ(&CS#7#aFUbpv= zIE#SJVP$DcOoe$CWndbzOMDP?*T?taA{8lThqmvmS3)x53H1@BpwyYk*sHp}5alJY z6)rf50KQ3}+}$^7sonh!D0kykKJ+Aj+#Qx2B^i{z}7kiO1{3 z7b8c11-2NX?JL8mfrvTjd1qoy56=_IOQ@1>kFp2pLq6;RqsWI;2D)(Ih|PX~Rqif? z{av|x;Ma0@tp4zUTSEPHx%>3>ca~lJpp3$DLL4Y}o310Vei~5_(O(iFtc985!>P)_ zvmKgA4446S&N+fq?W@TPI&zZn19O0#^LEhAxz`a+%O)Ki>35W!eh=6=Uk2@*^Fz8+ zy<{qR)w*w3U-f`cEk$FeU^rx3ta#NVg}OGUW1$b6)fvg;@!CuG$X=JBHQL&Q41cI~ zh)>8n>DeXCr!LY2k1~hvz%mOfPdqhMZHHttSJRz-lk@RYMF{;JvbxEDvOP%UWL$85 zEb2bIM^Xj&jGa2xRT#9e!Zv|ub~Nx`Jc^raY)Gt=osdk>s`2{|b*3=dXt9dzkTSEB zIE)HE;>&P)C}!$bE`f5LmL`4y$iMdlxQRAC zG@Y!Cai~3yp=OcOjThqq?CNkM+mcSycjtDk@g5@$7{I5511Nj)+(SfUOAy0P?A@l~ zx{Q9~WncNeF$XMN?A=~7wGJ6Bd32pQGCC%X1sde(5nka?R^+GD-)v1cdUN)ed>|J> z&O)fGl|J)IL?C4sqJAa8=)wNRK@Br3-H4+W%7772J=22gw}_~Q)0+mrqkA;iluKD6 zOG_O$XiB0L}K9O+AFEU*i{qdUt;J{+T+re$NvpaM|XEX!&+b_9}(3 zJgdeoy!m)DT%U3`n+2|@_0aL1GKxXV?piirZ6oi96xu!08T@p*C+j1 zF`bKdb5jxtyPiFAyO;>!?cD1H2m}^cs{VU&-8*N^n{T2`6q!~#8V89WdQo^Q@=m1Z zCkCQ50ATr^Xz%{cf4c?6cTj#99&Fx9RzPZ4> zcSu?4Y2259_n1jpbu{I`);Shv>wG5P)1IN)&lPg^&Xa~PPfifdK9acJI?rbZZJlER zTj$BwTjzT}Zk_jRw>NiGxRR*Pz!PBdMpvQTf%I@Xf{!yp?6$F_{3;1PWtm|~2Ei97 z@$rFYVK^(&XaP7bJo%L`>w*2cw6p$ozk3hV@2&y$yC+`1++GIy-J0L~-I}?F22rSq z$H88V9X1E(WO_~)ZXQ@(B$`KgseL9vi_rRbo*m26GHu)21EI{Z0U3m6E5u6lW09vWR>tq*@~cW=(&O;Aw_arQaFo!a>fVRtfdt>jYQw7b<_SfoyJ zS~nHhH$@IUS%NvPj*kauHp*`_`^gQ>uGt~4Sd?5`F0h7U)m2YCM0w??05j_XDPOf^ zZ}L_Lw&2i0n00V6YH%l;V}hkxHiaM===9qp+QsUi~nxwyz%wa zH(Nft^xu`ck?`!?4-&G*C}>=?Jn%=JSPW-g(`-nxW5;THfM%=P(p}SRa3<%sGwC3j z?S4(OftB+W`!abl!G^!0*>ggxYT0R@=Frq292yPl^@}`v&-GP9z}zD z%DObU@j36r*x-9#uIv%?Jeogo^9c&gd(rl+1_u9wrE$C4ep4&q0EN*TS&S9|CwYm~ z=L$r}t;j-c0lc>H-g*#^ABuQXdz6zNBRfIW8o}dvRLA3sepLS5$ockPjht`(i;?po z6KdgNxH7xiXJ(JXTbQW*h;be;gB;y65!4atWryZDKCQ~(+oh?dKr!2FV&bjEsX9Ki z)BS*W5%)Iatp38zn5eRXis45e)0NRZANtYn#P$O3gFOx{FO^bHmCuS$dcJFsgD<^! zJ*RGGjS$hDou?ydP#NN=>fTlbU7}uWZYJmJDIqOs^pqWb_?l%0WtIHOvg;ldko>~3 zDd5;sVZQFqu+1e1=fz|{Ay57g5~aY6#SYo?U0iuMp_qV`=OE*r|P-PU(UXAP+_i1pQABgzZ?Oy-!~KI>==<- zJDv9ry3X(~DT{AdwlHYpTqDpN0btoqAeN2t`;Bw%uUGPf1P6_7&Kr|(_G8lUJQTd6 zgjEZMmKX&|r#4Up)obOui9r@P6oRK0Euur4?+e5}w>s`Vy@Jv9orZujYurQG3BlAh z?A!85Jw3M^xoTu`zohJSnRyizXf)k>jM8i1!b{NO=%i-a1d9{sK30#T#pj~BcmCp_ z+1j=qYgQW2e$y4izv+ND@=3F?WA*ZJB^taqo1Y$rGiY9OsnuZxACtIp=82_`XvQ_> z!rL6BbE_ddTt+nBWzgXgHu}8x+=cyl0CE(+=8NHsaYt~l^4@ZX;zfVvdJk>n&q4DE z{Sdp36TalrLx!=g51~$)w^?{OSGn-oSc+dbl*bo`b!jb1Ex!27p`%8zOdT2a zs*LIB0du%y6Q5%A{%)m_brr8lbn)tV6%4O~V;o}N5N+0$+$j>pq{Go*Ew5$JxZlm*_tii7 zgeXlocF}phWLc)V1?qKw1ogU;LA~zC-o*u=*Zr+y+7aAI^}5$hk;*rPeBJ9Vx#@N1 zH6T8)XR>>DB%On8UpY2l%x+mn!18|3Ocja_)axF)>2*5+y>5TVxT4X1)+r?xv0Vjq z6r;e&m#=>PF#F9*n;-N3PlVb3D)0aIVD@d?zm5C1asM{%-^TshxPKe>Z{z-L+`oAsYdOh)(M~AccpzrCuInE2HlWTU zE{lC-igW=+e;U)G9FJH$StAMG#vAL?VDJPBl-_J4aWOJF(azljx3hg-J~uxwL>D$( zFyRs~E3l;X%vukAMEB#dBg{#*6+$os93Ddq{_09HO*_^}iypcs@9(3oJk%19y_fIM zloMa_%8KkllGM2zUF?d;TdZ=gX@uO!7^U0cTlaZYqHo*gwjZKls^$X?hxQHg`SZL7 zQ~W~7&V+WA+>6GG?2F-h>d|4lv&_2Oq#4>#!ac$|%*f&dFbk-XYr(EGj6_~&&ZL`? z8XQ)7qF#!g^6F{aaJ&KCu$L3e>}KsXni@vhxGBJQNnbeV`oMG4*TZh{^MH*ucPP51 zu9rQ|IOt5;2p2BZd7-m{GCioYL%?em{0ah`_as*a5iUOnd$T~mxgFPu$%Nj|R@Sjsp3Y`maYowJntp!O^So)@Lu(ZW)b z!0j~ae8=e#I6mD#246GFW%v)VY?WHqqDKJBe*3doHtMYJoc{ zdP3QFdwXD@>jovIeN{aDox4>I?^vCmH#a!EBl454^CMw@DXfE+W@#+8$Kq$>IWb7$ z3wK7-$-kT?;mN68ZX-(7!Sp3{f6(RVq_v7_@N!f~ypr%J19&5jGG0;gw^->7P_bpe;d*nkP5mD^Xp&+}~QTCyOw|Oww=B1&@ zbT5O%Y>{rMPuq!2$r~Js>!EVq--gQXe>wg>R31u1;mWeXKWp4U4Qv+TgNDj2Xus|+ zo3Ya`iK5?S37EPk7zpk}KE8ig(|zzMf~e~B;+SB@V7m9JhubDWkn=fnjo1TR>7e5) zrfw6-opkHkAeN+tD?fhlO}>!qgLh=6JT_F%c@eO&gc_#$<#;_9AK1N0PPZyP) zhrfH@4eMy`xDSazTEaM5*iR~)S=}@FWXM*Q_M3rZuKG;het8X1a5hhU5KR(z$K!^V zWi2Bu(%-0%UC1o_=TVDFF@mF{Qv$UiqyE6MLw;e|@d0MDPgG*eNen-L>%rhMv9g3QwlqtYgXj431kyQ@GVUtZJay zabFyL)vX6=M-qYtQw8dz8h^|2buYW+7nY4Yk%4)S?xvTG zn=^6W8HO@iH#D;}^%#(LcUw`&_FkwmcqlxDFq9R@rbpF>WdWKLSG4Fl;#G3^K$x;OTa ziT7?c$=<5<^JzYYw2wj<&kzZpnMU{?c@^!iYLgIU29mv#7_<3Y(($loY(q}}(@AZ( zLn5@i927m-ebk6?A{rF|hURsYazdjN@puVby(B>>Bz$MKpdJ0?Tg+PtEi&Hz*rs_chN6TXa! zyQ$D7+4NnTCUm@_`#b~g9j@^7+#~zJ^JL1-U2h_1uzaR)v zaje~q$H;tA8+`<-V=oOyRxf(q@cj(<;BmP%>NhA+#1Fd*EG67>#hH?)?$ zpX`J*u7WhiAg{fxW%>@;_jU3~59L)N&*V0;gw+l<5CPyzn}YHKK8+w(af9G%#z%u|gCeMRiFf|9YJK5Ev(aLut6v!#pRbKS9Lfh;u@U;}g{yXID|g zR^?M=Cu3(9eGZoPNktBt`dakw@O3f84Zgl9V~dk7W_}zzQB?z_cvccB@rwUzcv;xInBKKBY5c#5J$sTbuwh#)^_Ik)-A zRhU4qKn;S}y1e)+Rau^kmr(lS%-p>a>ZhhF@lM$T3}z{c&vHu4*Qvu>njez~Kj)5V z0&(SH^M|20(x0i}OCS1C3xt9u#LXVhIhe0I508XV`xz>s3$rK~frQ#Mw8}K4=Ii56 zkl*D{&zgyUt{`?Vv%0o)m)>89=e9=&$6@~<)J$!rKT-GP32AH06A8F{vO3)vTR_OI z98;5LIEdr_xb(x`J1dP%6KcQ_{!BX4i%OL#r_7BucoEo32gg~*?0*J`!vz}=DRPx6 zxb?Bs%88p}8YR;Q1KKt-8!}ro8a4y8oqmyY(_BlsM*&GU=MR!@dj?Aw_u;qJXqgQs zV?`>AQRmnyg0*S{`R%!Q6K7Z&lk{TGBMZRS6p)3dE4rI z_m#n9BTP;9GJ@fAqbZUGgTu3Pc?v14Uq$y!U#ST;^t% zd}G|Nk0ck<)cAWDTQ<vzTfzD^LKtt-N2U{ z1Ge$u6>mb%{jPa`X8eFVX7~AL0?+ne7duAL#}gNuo^sU1a%8}C6Vg?#eKxNFbJtj& ztRCNMi=GuI@G<>F&0{Udld#nqV!2k-Q?~(rKJU==(7kH4OH8XSfwMgIvN{mNuQNKM zI~Rq&x)?^sfgIiAfTOz)}-t8Obi^rmrVN1%xp|-2K4{+Uu9rrXJzDMW1(l}U}X6NvL>}^--d+%1LK1M z1AFyzZ}{(lx>|r(qqYY|=sKrX*)a%6i;C9+#M-KV`4jFVJB^a*Jvb+fD(DHuKvYOI zE`?YhfzfYF1}TDwP|3DuyRT}v6~f>OQ_RXCt-BHCkikl5znPuXLO9CSl`l*NbF%l{ zF`CPW9q4f%Of`VoBSAAhBss2V4i;d4%~6G)_8b~MRcMWZ|DHATeAZIvi_a0}N92>q zbJozoFIN$`@~vOW&EO4P<&Et0m9905ae4!T;Lq=d`O7wyaly~x7w>dE*XMfWVvrB0 zxu2S!dllx%eL22E{t9ftnQ+4nrA@Z2pbhtHp1i&25#ZX|nF zu|aFG-LG+$d8fLD^tImBTc8i-F@FC?EZQ2u?p*l;rUdajI(s&#weP)r=+(8&HA`G< z6Nu=YKWGiR=Qfj3&E<*@;{_R341G;o(#s;CxvIe%I^*dE4?AAaUfoG)SJ1I6-5Pzz zR%4E0AYL4JS8Z#1b!_T%>I&(u8%m{YFj9U;I$b4K`ZN3xoo^VQNYvQ9MdbbNutc5; z9=+QL*dVyF{O$AGe?A;ff9^H<*I4_yo9$eLMBn+EzG_M&Eg4eA5C&gH zL%ww4vw6_;xj1B#!|x-GE|!sXpK03g+UI8~XEhPiz$E#rWbX2@Bx80YmvXoeti?&H z7sc!ct&PLmJrW5N&t>FBOOZ%C`QGjIIa$Q$28?cNp+7Eqf3i|y#`x+)UlC(T3|d$zR_Qu9U+wI9CmP%WB~9WW-7hSl{piTH zlnN2(bE8gQUVa0!Dt6nx!ia|XPID}Lq%7V>z&+s&jb zvjXq)<>_bMQoK;wkI$U=X=nC4MY8t}q>9{O$R2`kkD*VZe%~ag<}QO;1Z|SntfWSQ zor?=Q#CwHsoqS%!jp?L@Meo{TTO@a4Ecxok>T0)$CG9Zm(68-TG1+doa)*42+nr{7`1nk6(1f|hcTe&}%@!PSmW8FW{}9 zonoOl8yV8;{rv6kj_&9`Il73~JTT6y<=sbxhB{2oaMku1hsS%q@zB{!p~&6VJ*oYyM|6<3T0 zpGg^38mo&uA4Dx2m5v2H3Nn&Q4R6nROO>9wsC?WKHi96ZNn4YZrbaS>(n*&NERo9* zN??Xs&!wBjs!UXl*R=%gzI?b%cfCX|K}SSWEUKFCt}CWOXvxe`u+! zv$(JTA2j#uIvR&mrxUCm6&7$D14>i&7|Fl^9$A+88%f_stGVjN-^|>izcX{w<2}|C zM1X$dni2}}*Jf_KRWS}EsHJgQj#130O6MSE@wrwJ8WM9MblPHkB7YX{1KOjWChQ6v)~3vG8Ur}JLV=m%+b$JQ8}?fdBpn! z(Ib`@jeX^*nil7{&fdeQX%mT&M7hjt8=g1d^K$Kv8yxBRZasDTq)FyWxK-;x(MUKy zgg-#G&cj8qwO&cq!8XhTiMD+h$GT&B7m1dFIGu9R_e5^IbfHnZ_03y9KT%iYIZuoj z+rEr3$l8)7d)9`0>M|espbztv-fIut#56bzkmPVuP8=5W!_YClx}hxhi_4>RIyDM^ zDnR@|C-Ue70h`IYA(vinccHZfL#M}a5|5D8D-h9s#PEWFt7%S0+iGy3RZ>&}6?fort zcL{|u5=Vbl29;*$uh{4!eY#Bb5sk`6ortUFQUoqlQJl=HD}NGmM2=jUvI6*lPD_tSqzMgH?;Pkq2fnD`Ae&~>-M((i@V;J zCtvRLNPKT^+lZOfK;vs(%miFwzJAA_V$nSaw6`0a+W?-d5%@Q$V`Y2D2(Qimr|4n z63|2|>(obldI2n?gZU#Pnv@!ik0zl)hw3MR`Q2lg_JLUcLCU=izU^>89r7nBw+tZV z&iR9sTgBsA%6$)7Dv!KhX$=mtb2D>*X2tAr!UHvRFC!;vJQc-aHM_(0PFcFS_s=Rj zeAi{aB&k}K?TVM-n>XZ$bd{Oz9GEl$ZsT3cOPxmQ3| zZmaKBZuE_d^gmj;?f$lv`#s3YP5Gmhd!671EBE1dEB7R)L}g7*T&CvC-6PR&$aKB9AB?$OKLaYkEcxaY4? zwg~V!1tMxalIL?%7~hT#Iy1eT;yd{R{r)lLyZqc2G=CBE{|LWtQ~qtrzfJkKDgQR* z-=_TAlz*G@Z&Utl%FnVfZ}@WQnZwshDG65byskFBAV0p9^)}`It(5;~#`p6|+boQ1 zj2wR;;Pb_=*Uo-=Y5V4u{~pzo4)_d|wi7Akr{lWFHzHw}lT zVso*hG`>RxHSQG3F%CoPH63Nqy?pB71^q75F`i?Gqp9!#T(6Ie_HCCL`_4UyMCN@O$uXB)FsE=BE_&!sp~k&@s@S3F zG~Q{S_nCAmP~u#Dz(uIAGRYEtP9r8c8y2E^f53*vKaOuSgUC4`G`&xqz&x(B##WoC z$GIiznb05u6nd|-QV+aDlO(V9vpbTW7PW@5R2?+D)> zh}C;?+pF^`uvAj zcis!yZ|VT+p8csc@0*AE7w>`@7}`92VQOt_YGp}h>u5WzZf3R5f^n&xb=BxgKlS8A zz0%(n@;&9}{P_7+zfIr#zpdXk_fzir_WU&FKAA#zJ7owo3y~VUV^_pjM8zskJL^VaM*lmc{B0eZJ_d&N+Ry zZ#Dw{1duTyX9RPV#c{SWk=g}AVxXS)ohU`+Dxl~65QS`L&BrS(nR>dHCHL$1o_DJf z(DTNEMW5Xin>+z}-tq3lK+pRQ(DU}kT9oC`dUpi$yxV`@^9GHUa|>h`AbEU(JH;@`s9g zF|7}*xY-}N@q3$zE5o9z=_b4>9xYiZ+p_q`g1+%?S?1F~2-)b21=&I(k*BCz7iryy zziP3vcEh(FF>kZdwk?DN3Y6qT0uMpNnJ_~s4~gnXeMu6*IU)a%SdVO9%xOovabAYB zQtx{}<2w{+e2*0FEqREMB-MZ#-yGJTOL~+xO{{c4jqg&ISWx3zmh8S<(s+u1ih$bJ zE|gJ1%#=4F5*i+9f>3dU&eqzypvL#eFOBaQhp!#9-y7e+V!1k^Y{}x2g)~)5aK;&1 zV6j|HM4Eov@_Mm+I@5|fBlx=U4M_(yzAf+GG`_c_uwpgeXN>lqpO6EK#XjqhR2 zJ`<`c=T~ z$;82j5zh;1eB;1}Lpyd&t~#=9YTpRB+5bww&6|bm=ic{JVdE{)h5>T(p;?2NPzS$0 za_yvZXjv}%Jw4;6mnq6`31(-S@#yzG(&2P@)43;SH2$r zm2a?1Bt{sZ@~!c`^34HMzQ5JJPn=7IHD*lgXyv|D&L=*R6vz)ystpzJKlJp z#T8pH$yl+68Fg1%>`9szoDa_Dj2rCjnA71^>xlyWc7CXD6pZds^5bKdx4iw556x8| zH?noju%IPy0?3py7T`DMhL{9)VOr}+@27?(VI9BZc*FMgtz0iNfsk7~v7JxR`#W5* zkBbuFkfY@yG$&V%?@;Jz$u>n=yLTcJ9KEyxb-rn^f9ZUi3CgJ(tWZY1rq@%y;ofqP z>Bu*o?*mZhyUQ&w{ltkZXK4}jy7RsDz4N^sOz~h4^``UvMbp|oBH<&@`8NKyoo`zT z6h5uq_)6QbA3ERQ;`qd_x{r&JC93kh)|H?UN(0Q9@GQI+z^z98Qz2#E^kSa}V+Sw_ zbqc6#el^&dk0Lcdo}(62xhkQ*s8{><8gBf|7`;sMLQII`@eOV0bUEezXwH5z>GC9* z@F2!QCBeOSH9rP6TyC*?il{mR`DNo)7Wlb z!_-MsiKgD;yf1i3MEp8aS#da3lB$Knclhmm4Zo=w{j8|$g{c?uFRJR=t_0Gvgdpy$4ako`G5s&;~4g^c8PzJ$v)x3vEY613rwv&Vcu}Cmg80 zS`Ue=l&JAo3PhW77(ND;%OhE&JooOtEzX>c)s|YySzT+Nzc=Np1qoU%cd(X3jQm>` zZvTI8;WlobsH{*GXeLHob-OrO(uXK|eoyy*Y~l9xr$Lon_E#O0)+!rc7INpmv~&fR zQxP7|?21HOc4l%p{%8~O;#3K+aJ!hq<JhD&zxt3@-O`E`=(C1!S?o+vSMOebV_ zj~^Ilc_nc1^uDHCi%@dNbb$!n%(+5FC!XN<(dA)@r&oDb%{Z&rqn-aoP5irsdmgZG zKRVGb!lO@jk-dYxnq+pQe-Q+Yn#^@f<+EMWe;$BeNK;^mnR8gjH~M1hp*{o~4!7nV z1KX{*J~ybf%J^w1m7q7Yy;$%SmTcHf^X{-1CvPdf+4_o1H?Jd15qQ_*eczYYDjq5n4Y--iC% z(0?2Hk&>>Wi#6|TM}&&jA78{X$7;(^B5G@^#O&OL{{JgO|DUw-d85xW z3TeRc#4(mUw)_9Vw*rERG$hgd#>viBINeuMldC%f#qrNqSCFL*fhMS-gT`JQ5AMWn zMNC=Mi}&f(YuqM%f>XS$Y0KZMu697xHRe=I=-x#i7@;Kr(xy)IX_3x!SRl;+?a8QV zheK$q3zK4aW2^bmvO5kh3=8=oZ-b37=V}~nt@e$x7$0yJ+XBvFS&*|B8TO&Da+T|E z&f<4jzc`Ei%XR^0G54>|VqC_~MC&R{i(j0@=QqycD4~6wv2k$i)jMlN_ z6tk?mb)T}w4SE93;_4+RE5KPybL}jKprp5Ke-}Ptk)Xy8jswqF1)6!TzMgqDfvNgs z=6U3Yndf9+<~i~E%rn*X%ro2d%rnZbGtZ7UGtZMD*E7$PsTQXZ7dmw`gv9xp>}a2D zZf2hQZf2g%ew=y6wc0JH2_PoYQq)l}jC@u_*%2amugt)jxUAUCm;HyC=b^@2+8<_~ zHGZ6V#`W_xh)^kpUACu=63AlpD54}9ri5ekCfGfHDiBCL?LKx%lNl9q?Y?T)xS zJB~Yk>NteVg~hT_>-My@eXTkUd?~b-7T4GHuZ?A?zX*$CFsGNY+`4#l)_rmuEVaq7 zTl^rVFw3)nRS}U-7dtOY0_RmOD1CKX8@kkR0@$*7>Vb(n8it;p_ti{kkhljZT ztVA0S7MDD3%jw$kc#y}MA*XQ?1rioFhm|W2K7tB64mMzfhqa6;i_XTs5f+z6SX~Q? z{XoKE4U828Dl?bU`LkxBgB=#rhlMP@?)$|63wE7}Dnlk-ytmx3e9^LR<3nj<4nCm2`KU5dqAw7ZB01vW5 zEKvlKpz+yr<0h;%eV$tTrFQyC*q%kqBnnkn>kmsI_iOB)f*)t|QKqF@LL~tk&(kIZ zd}90eq}^e5WhVTW2A{I@-9vr-nXOEZ#FiLd`-=DPrz#wr9L;#|NvMv7?vTeN zzVLc;F%t{4Ug>`m7OUR~i;dX)y5p-lb zaf+zDM?y}kUU1+C`~3Ob>4TsP4^(*?12I-0$NjkYG-DdZ@GsG_Yz<@&G|*~VsK=Cq zJui{qYm6D9b-IYc^Y(;r;yb)#BW;Z7@X7ZK{lf1T31qa%%QVP~KO&6EhF~_9c-z){ zXz)q-y7Y<`0$ZcS9&m>PpUZeh+=!zM4jWQ*dr%%LfKw@5GjF0kyIjxQGx5o{X!>L zyx%550B&l#Rvu$gxlWK+kzDDClY00^mV;iNVUsAScD}z_fB&$fpWi>3N{x znxQXGEp^@mYP(VdiFsT*pY4wZ@J(7M`y7c z;4H@d#aWCBEon47Qb1m$DZxV{@N^nNJx{HSmC6y^GMIL3f`)XJ%|Mmeu|uh9paTCM zR=6W#1^wVdSp{enbm1&=Pw1we%*KMr#qxl$I16MfRtAj49e}ae4lowW-WZFaerGJ^(#gkkcv_bcQwtc214N={E_xiy zo41eQJ$70RIJKot6Y!V@1xGh(&xjF;gzUEDkqDiVPw}~R)U>B*o~*mN<}XgEv_P4& z*jM0vTAAWZynq|B;jWI(CqmJPV??)}HfQoK21lXVxhH+Jit1POru<$-kbZEMhAn?d zj9z3czN`J>(xm)N=i|Eb*X zuhaf5_qz@Iw_%^$_crX`hW*>He;f91!~Sj9zYY7}N^=OUD4Q2M)uw4jd!xon>Jn$V zM?48HoCViHx5~aRiiYP=P7lOxWQw>ty5t58GUb#0R40~C{_s<~B>u3G1 zk>-!r-A_cCzq<#w*WW*X{ryL&?eCube~8-V<%d3&2B@vy&uwj9Kh*ygwT+P*vEN3} zVxO>tWK=?Lw``96|JXb0s4CaRThrYllG5D`QqnEmDc#-ONJ@i%q#)g05&{BJ5`sv# zG}7f=fVy#SJ!hYDf1Y!L{}^jH_|}5&btJ7{=#r{@2yg=Ti`cH{<>p@A zDSdiAX8rEpXl>G`6ZJfK`bfN|{ruiUhDe~6C(fb=+Y^vvVrRY(;71w7=L_rzciw+_ z;2G9H^!BvTW29)y(P+qkEW%|MGo$k< zGEuE^?Q(G4?}Fm3n}Xt?BTyrZ(8mQjo@iHs;?4=GaXkw^8sAGn@jZZ`c;{Vji2kLZ zn9z}b!2My0=z&u$6(i^_AJXJGKv29@b|ok#?!OWgXT(9y%w|WCaUaVUGvYt;U(I z!qaf2C%|5g+eWZ@M(ZWzv?SW+E(ryQ`SJCBU}hIMBe74eUibQJ-m$B@aLHjokAg>V zXg^X|4fuSV#~C4=kA;vOkY@)uR1(f%HdfYLk2s(ErZ$Qmfv9QX8@1&}r|8EPktqI3 zZ419q+qr9Mi++>Z?x_tJUQyeU{+Vyow(*+UN?cJ}A3RzMVF0z=NKx6kQQE|8Vz6Zb zne-}&hndgU&8(bbQdmiA<_L45vL!<20fYdB}3Uq zn=s!}E!F-KPunBR1}JSZ_5nC;-vb$x)L9}L2DYUF_#1{|^M>cji}rBBZ>xyH815_e`=)^mMT)GDN?DUydh$U@7D zs|_k?*XbWIv=GRw0hrHJpP=i`R*2yC5l=tOV-$i@B6D7l8v(Pn(;4lFCBKt&9(4%|waV z0E%M!aHYF462bsl8%|z`ks+;CbEzm+MeJ4s!wm9Ds9g=?Qt!L4~B+E%|!{4IX;Ow4k$c<_R4_og#R=cC`Ba%D(oEmtmx`sIR#RaoRW_K=aqOS88p1Q2F*jLw zsW5yx_U1eMNP~8aTsGc5#T7+-dr4~(Ag#c^(%RzO``i%wcO`*fmV+v=dY4fh7b<`x z_w{SBdb2u>Qb<2-_mHeWlqZd`Zcl21OOPjIZtX^yRA=a{#Q{0ihiEs>7eYlDA`lnN zK!L}*XCwg}#rNb0)60M?ojGuNvnTHi?y5Q|?_E2JH?JJUHOuP#+4n$ds=qmki~j5= zZUi`rUFDEjt{ufY8@bSnYWFsCaea^Gb&+2PKI&oNiRPNdd=s4R&Mkn@K?GPPkMLV` zKgQ5O4YnGu3Fpq_jl1_G5{e}C&=upAl`vwT4)=3U^o;rhErxs0bMdalX`u80^ss`pbW=i+Ngu{LUx-{WK1<6}x}KKL3Iy^S{9l$g(!P2OZ02d+%* z{mW%0ng}vzg#7%gG{=*O&HGHA-0z75G5N-1(UC&?*)hKJTEt6Un{>r%rTKjh;Gi?U z@>)e_{O74Z=e7Nj+;sZwW#%{*)Mk>*65{#xdeO5+%Odx!>c3fvpZ?iWY!0v#Cm*Fx zy9N}Dm?%k%4|kjiI>3z))qi3!hm zRn*KXykRMJ1jvJX-zkzXCuS?4m?)trc#+r&n=r+utAMr17MgwIwOsn)m%P?IS0^{C z&`^z;swmH`7)x><@Tl%LNpZDRgD9BM$4D6X{I{1qO={QfgM2YQE8-pS`D|NZpu%?x zRdJ%GOcWzg6f{ld_L;dKkpbr8bcFEcD3$S(N`W}apg?e=0u{i6;%dHps1g)v3~TkG zW|IMMjJ~9oJbHH`$FQK7!QVd9uRj(wo9z2Hu6_&e?j#@R+d*RO4eN1{&wtyV0;U2dd_bb0*Qi$3g1!ZcW%C)m z53AgM(r2kR;+Q17$E9s5!&{P_(Z?orC)Q5jTSY~{ekvtrI1N(%@B2cM2K8ziRNy>I ze*Kwk=5{VTgwE)YdPLI{Eh!IlNeiW+BzF1H@%=1YR<)L?5{Hg?aC8K3k;64%)_LeR zLL=iYuS_6H%4ZktO4SR6mHOP6#)~!1oj5RPl=?nd)H(>geYtca$9)1uoK9hIVP;mt=6iDw9T>l zd2~#V#-hNY&CoA+t;G#qTj~0bcr9U5c4DQvV>x#aL*r@E)|k(<o)q%_T|cjhx@g0wpz${N(SG|+5pzEmvs&ZrTaJ5 z4eES2sjNFhn(fQGkZ2${)0&l-#$WOincPp2pP5AFcvdHPm_1@wufD!gPRTl*!Wzn8 zqzpy_mEhX<(fH(kX-BH_{N|uJXmVNg0F$~L)1w_(RY!xT6Oex_6kWfkxf%3-Be4Bd z(Eq2v_BQ9==KR~7f1C4fbN+44_bGggN@RSS^KYz?+~)k-oPV41Z*%@X$ocY!XxD&lI>SP$B5qU~09Jv#Ut)?F?p7McM z&T%Ohw7%&Dn%U_)VY&zURu5j~1utkQ@J#MQcWC_<{WEM6lb-JI(!#kD|&&PajzqgA_cH|W; z3*rm`Z*LBR?Lh0Y!$TOC)yH%uDhyL&aiuASxYQJ@TxyCD0h;3F@0#KSfTp;KH)Y>T zW5loEF%(hqep=$4GQW72nqlm?&6ZF7J>(x!+mgNNrZ-~)47sTG7Zuk$xYo$x=aC(l zTv=Of4!x$Arj|F=(0k$|>QNutfnrT8d`ieu5b;=)^Ac2^2=puP!%duU^LG!NY`foG zJP-M;H2l{i@f#bmS2yO*aq`Wh@f&gS56|HCh}<5Lzi~wVqs04%8}z?Kyh*Z6$;1J~ zJLLBg@2i*k?-FnOpA&E68^qhg%`N;p@qVsmHc*ZQ(WC|@8oFzaT04$)GKaVCY8&-Z zH2KbOY#gt^fT7Fu||;(VfU$hgnr&^`y!vIs^Zyt;VMeQt#W&L+O=hX$G~ zpmo|Mj!jbZ#r^`#Sv29$^?XXQ(3?BSGyJ|UdW?;oXv2n!B*WgrvSfIPIEZ%-tB57< zqsN6OCyDc~9SVt_#DTBDGj*h9LYTzp8ULxL9CX!FKB72y$tw|H#N<}j6J@_7v_b(T z8qV!n8QPy(^szx1Ra9bt$mTs57ubToo|IAu10!BB*x<(2E5vPY?i1vSy%LG)U_3>6pBdqe4@Lz?Jwk{cEqi#+ zBQ*4PbCkB%cNM^^H$F*oO)nUa=V8Z zyFf4_3cwn4<;?g$+C6#KEc`B?vyAA?dmRCtB|+Rquo)iAx;5;W;g(c{=>d5~wg_d1 zYI54HkaQfx0^@wjPNTZ~Cf@^;*OS~d{ElSS)4;D+tL{h>#;$!O-VN?d6`q~@`ki&; zxX&`wwu^^iwmLqKJLOUM_N?yRB;Gn7S7{nka>KyZK;BT(y}arvD_r-KcF zJwbq;@>k-00O%>J0pBFv)^#X^rBHFA%sx5wt?VN^%bRhfK&EBj+F*zFs9##1z@>6{TVxRp}^^_hk zCr<1@6n-WZA0ukj)d2J|u}}h9t>4#QYl_>tn1JuU zP2otW6g(ZyXcgTEY-KxjF;zTmMV=?RLxoc5aHT1pb2(Z0C|QTIG8hM{pM|wW;+gg| z!^`P{K1G-lSd^#j88IqI9rZ)1sldz}EcoW|K{Mc&7ghG(I3&2!ZjGYudcMzb)v)D!!bg*+rgMj955YA3?3 zG5)X=doXTxr6+#o7=NiJ?kBp36gN&lrSuRgGar!^cPWGV^@~E?G+r<`92cwl?WE>( z*`9P|Bugl%#8-=xPBxTt43&OPsD0O~ys9=gS9v8evf~}&=^wfIe6|>#>^3G+Udr*@ zc@Vs0T%!S5st5I8=qbmY6e1eoXe>jAGZB{obqinyXZ5roxELODb#80!j(prOH zX;vvBKi3l%`2zIBLDzcX7$5c%8rob3N{T8AXe-tUs8NooCwR_F(sMB3(pKZ7b>z~8 zF7(VO6tLT9j?sg5@3@eui~R!y`y(y<+8%1BO#0ZGdpq~_+S%ZHO>7K@2{bR$lUE5M zIg|y=o-k_@rZ3=@227bZimHt!1(%c~ds0ydO4Yw4iLq3#dFcT&_f$$S0*#&e^h_e4 zZS|pCL4V+zmV^a%7lf#i1{xmzP+nx3)6qdgrZ>AF^aw2rpFL>j4>wi@pY@ZJBl6qf ze&$#r;61b0f@gxhfQsLILZY(VOK+{!Pb^xMyM*z?sd)KXPaOT`T2DMS0$Am33G@lN z>wkjT3{Eb;nj%#S>0<1^VdAB6*9<-rPqfYUvY;%aR-+3jC=30=f^yx>f-)#+feEP_ z^!w)@XCA+*E}tx$8SIFN!6XC0QrVq?@p(tU&*Ocs39Q;J_w4L0LOO&5R@ucYqSQZG zI=v zU%=Uoa6ekQAKrB$%W)d@C5e59|J5O;APQLWm+dGwX<5LBjd(>l$W|eV=hO7co^+Mb zkiRu0c>wC!m2KWKrf@eGRH4fLZk{}>=!|(yWI6L9k2Un^@k)zYmn723db z2H&HqK8)NQOuLAaMx0}6n0uZA6A90`WRO7T1&KpCM7=*6vO;07BMc~@1VED&B7=W| z_z?b)bpd%Vir5Nd^UwjV9WB;U`i(qvtU`*SJ{5f9Jb-qWlRU_(66>idk`?7FkVnCA z%p||E1@}}jo4lhx+2kE=!B=L;ukxUdTm-bHfic(6226U(3VHEiNYc?79_V1m zRpYlMwlHSD3+vd(Y0i1A*4*YgZ&?Kb6MJY|d8 zpqeAL{x40RCNrRk*? z_Y=iKUQCBMO}}x1jnFT`?oI=crx+zt7-K4cesT<8lQ$mFPX=uAE&(=qlk%pYf8FHm z$N6!S_uvy?lNUDbRUm8L_S`?)+rWXdG{_idEfh?Js~X@qFT+SnOGmXxyieDy~$g@k^Dk^ zlY*2YKB;51n}J=S_QhFrEJkK(jylRgPi2zHRcF{ISWqIr|uV>V9c7pr8!cNHIuu7YP1Oo>Y~zS?Q0*@xNm=d(|`Sr=4QfC2sKMn49Embe!Rzv} zdmkI5K1)5kGgx!ZWu0yoL#e;Ened!C`4zMOsW6%RRwIq$%d?!bj0Rav%4miQX9zRH zg<)9R9Oo6&?AbSMUf4RKTxCy*A@u0@EMK@A!!A=77+HzYiRIftrgugjH*2{p8EhoP zoA$gl>86!1L&(h&zlN$ieBd zrl`}XZlP4Q>cLup;-d`&_u`AkeEn_Inn_skfw&$N({A@=9|nr=A7kq%1T?1a~zs0Wqg^gYAf2*wx`;}eCg`Cn>{hVFfUbAb=uk6|$ zz^>KY!teWBvTNRkNdtZcJE=dj>or&ayY3J@Nd!-#zGm0Se__}EuQ;~vo8E5he%;vZ z{|>K~AzrXRX1l{gT^#M$m&Kl4WP%p^JM*0Ju~ef$QAcp3){(pk>@Ds^)I6CPw z?dY6+FcuW#E~;V!#J-IRR}iibi4Rp)JL)eB+HdeRO_Q9I-OPj{fqE^|k)<9UOCbS6 zzYn3T1Tw#5*R}w5&0phyYKIpIE*y0|tNX|tUg_?0tM}rDZq%3?6FSC3W1gKDfVQ^L zv?>kDNFB1NMHj4-%cR|0>((H5fYv^)s>$WZ?xX0d-gX+eWj8~%cEleeyU~D=-H#76 zH5?EnaxwBErPZ7yvH`_y;_it&QzDS=Q<1U+KTuZ535k*Lg9GA#(CG=RY851K!EFH> zVDLn07(4J6bWLYg=a2Cp#7KOAp@JuvIUDdj4W0(OLs3bB3VQ~>`L($1d{x}$TcB(n zQgv$5b}xP-UiuM4r(yNAym9%HM9nE;h~y)%3oFVtHcD1`I^I+HBtQOAg2`5OuXa(ya8*ID~8pS@Vh074NpD5|CO8HWwM7<91pt3X?$%p9mi&UyTW_ZYHzp;2(E@Slp?drY49jgjyWTg=HNpgIU2L44!b zOVRLjqTPyMw52dCBN1sl{2*Hx5=-wHMD+6;B7_WgXNDF(J`)!Xa#PV+^rsrgwT`)C zHH`cYl8TR2Pdv(ggk_dsI_IjlO-O|3^h0kOnE@hrDl3x?+tyE>SF78zoWx`0P%}dW zB=9q?W)z}WH?JrcnK2~sd72(}%-hHZ()j91V}4^IG7`qxYAX^r2~|34cnYZ7{so^< zl<2=iuU>VwyRJIh9ydDMgkL+`Lf<;u-lQ-(+Vwel18n3Grwb7HgdM)Ddk|T(||$V=VJl8@G#FP(#yJs@}F@1^|G^F zRw!Y@B$-b%Ttt)yB)JqYY(&9d4pn8}XkscB`96R67kM`_#Qst;t|)8x9jD*bj+OhGKD}X`-R1xvMPsMIQSA$@a%b|46dkZr<9pyMI>a z;rpd41BwS|Cuhd$lV|9Rg3>v~#hu-#08wcVE^D-X*P)OuH)f4}AxS&`w6yK~k1gBfk2loSsnTYVp4h$eaI>Wc9PC@ya z__9Tn&u!ZOXOlX=CGG!bSvCvnpDo)L%bF$CfHmDN0MGu7tGdjWSN>ZBFN_PJl@88- z5|=r12l@jv{Q*QR`0@;d;G7OH5xT3NqRwN9DvORsUR64af~gtthwDHKHXqRNhU$UF zKpqaQxI*`1YtveC5bUP$Wx%_hoZ$Jsd3J&t64}}rxKKHx+i>uBl{tKZzPD2uHu=D` z0Q_0VmrkcRsh#z<4~&I(SBmGd?zbNI8l$+eCJY{QII<=m`83&90zp15qoFial3$U~ z$A+oYe!B8v(W#8zSLXl_@~C~|0C3KJc9VDG0PId?Si0vVYFglBP|Q*`M`}| zPG$C?&iG_DCux6x17}HgVG(xbYS9V82U{e^e(Tjb{-9F?yho1Dy)bjLnd~jZmDjhTPdaB$6M70PDe8{6{ZZx7gO}pPN+yIY zbwD6`{irHHxh-krJ6AclFQkuI$CU$hP?2`;f4IdKX3$d!Bpg1Z$$p%zr zdmpmmC1>${`7~y^9`GWaggWU0%3XpkFeggalh1-ixb@?J3hkJk8cG14f%zbJWsa51>8y}b z_)4L|1}yw*QIatt6Rs&C0)l6YBkL`-&tb3$DzOP%L1f*1(D_#$_wzvP<-CJ;dOke_ ziJvmj+BRp)7F;(7w2t13X7$OEgO$=_E1-OB5Tu4H z#ZQ9DsZt80S8Yp+0|tF@V^|THP=I;eiBu$7y_2%dHH|y3714!%RYYrDDWd&xNX-4c zA&}|pR$4Y%Eq$P4Rqq6YUqBqbI5wRMBdzA7krRI+jQ{BFj4?ImV4PZHyiP6nYp0>0 z+;;}Z%#988Vb*hZk{vUfHj;&W^utf?6=xcy1k_6+i3g-Hp4TwWws_K~XmWg>7k=lv zWCJUGrvS7D#I_4|s;<=Qy*whW?@2HTkiQebhR|pBb{q`qhjQ*Jn?km$^oh$s5NBo3 zbuH^1hwyH!%E00ph zo1wORIX_gDfiwaBAm^vAeuuU6=uD z@4dqOqC8(?x>WCzn5$S)wDxtJmFA#wHE}VgyREfy?du|Wx>5O5yfGeMHe63Me|UG} zGrkQSiF0_04-r*yPd}2bv|mq?{T>E7FBZ4i_u5&#Px`NR#bn;k6=2 zuO?inS{VqMbt@r0-G|_5{(tI+1gX@<=)@ zP9momSUrL-cJmn3H7#CotO#OEp=Fc~CW;ALH0M#*oewQIx?Xee!Jfi2Lgc*kn}=2i z=BRhmlMOlj&K~f8g44&qv15tV<3Yw`NT;f;8r;H>Xst`}qn)jb#^PK*oHDDXa;l&w z%7O@P7K&?l?~_*XW4me6+}xF6j&rBul>+}<&3frbtbr^ zwuqhB_zDB@yVC_hxF?PAWKqqtXMynxzEObxc@f1v@QU(~VL%ew>LF4IzPDphhQ$C? zD`Ucf35KHq>dZmQr`HZg?Tvv;P-{Pt%Jw^V+nXs|V1YXCI;K{QXx%x7!zZ0s2px8U ze;{%`g>_5~3nUiacjsW3eMiaWGO>@v9_Tju-69p78iXd`(Uu#C70!6<=FPL?Ks&xhM z`{aLSjUc?6>Bw^N`r{^w8s|m3(Y7^5KM11DF9p#l-v!Yy76je9?k9B~ix=NnO`%AYM+$#j+=*6qpXk1$NeM3rt3RLWq^pE_2_1 z#Y-S?+KChznEiRt#F}-rrl8BpckJ;+NC&aPqy`PU; z21Fpge7}8L5-oAMbS-vqq*teM>ix26pSz$$vyg6Jk9TO_^Uvc?A97WfC#}Nlmb7CK z0>AGi;jh8m_5#rw)JsK(%yD&6_O2GDVz3X{ z_e=XyotHNU{XqrB)mAWRC@?df$O|FMJ2!lJfWCd8`1%da&6NK;VdF1S{w-|$zkkv9 zHss%i{M(R!8}e^M{%y#=4f(er|L-Ek+mQeJL;hc(lq!JuNy|#{@$yNiXbCDyOGt^z z1HKm2qH|(lWua$epko7k$)Ll?$il#)NBhtJDIGH_Gd(*C6D<=n>vtG-{pKQ?0GwYJ z1PF*50tm?Cw_f*e0jOw6qv40BomwnC28eSnG*PLD@X#8m+kM68)pAi+1!dCX^T-IG z_+*e`_}(e(fcm)%M$5`@I_)YV2A9*wyHGgo;yGkVqsow`*yP|$H#m#4P*7yiHk|FI z9xnC16$g=S%~u4qg46Kg27==E8jTn`n%!<5&BEExFrMZPa zN=e1te?C!dalX{;e>f4C>dC`?;?zccr1klQJ~P$3;(Hh*;3U3C38d^$k-2n}CCMgZ zJ6QTj9+hVHnI_Mk+!ZHd%x`^nNJMWp@p?9!K-1J9ApE^L3l)9OTZ*AWw4n5S@>iQi ziK$*J`y|IT@Jn}>?3Yk&6Gb)B_d~L~Mk7@8a(xIUWFi?hOK=G11$v+`h#x>lcpl*5bh%owqZ%k2b&sC-w zGNY|zC`MdJLgH<2^2@+(phw!&6<0E-M)%EAFs~lF5sNHam#o%i`)1W<$6KID*FGxE zXW<>EgOONS88(SdBU2wXu4Z|hN8{vS$njy6^>MV<=Zi5)tUi0y;mN|Pb5*&a$*Lz) zdashx^PPY_lbog6%L#^x{etzq5aw4@h@RWvO$JA3wnu|-J$#CSPcJ@)Xx?2hpq1I5 zNxL$=LHg~z^0M9$n|fJ;q5W}Kj;|#mDzj!M~=aNiP*=_;u0$Z zi2XRAC+zlHU+BNZ>j7JDe|6v4pSgrT*E7bNyNkrv>U!A6&F$f~uFLbSCj1x0HRb<| z;`&=n_+L_7C;n5#^;?B?Dc=ORL8BwPc;dCUVFL?aryA6?L#>C5g)qp|`zEJ55Z(ApgG5}uh z@{QNWH4xDPczw|yyj~p1QObI?_L|pMU-Ei`ue`oc0leN$b$8N< z8%s(---`YD#UH%BRV9?eP`voP@fEL!ZMf$3(bv4b8^G(e{^0dC1PnzBAy>S<@EpMF z6`K+N;Pr;dMFJDQk4In;`&4DB0WHH9r;~x-E(h!OQ+h&hs|n4fQ?q4IK(c4h`UWxT@PuY0Pe=7 zvwlN+{w_rTkd2_bXskxwY6_7!ghE1yHFEH1sQda|-%r`vPt8QoVLCN%=fYm^`cuJM z8-s8ra5>VMh8*My`iFc#^!GT}AI&@PC+xW9_1<9u0t_K*tC_Z}$P#J8i4Vu`M0{fO zL+5)65L~AT$67Qeoq2P^?0iJKkCxgdGaLq?-Dy2lYUjLZhW__;vnC{OLWq3XWV|Nk6z`tuq(ar=dOSU#Kg;_9 zhD=qa%2MYuv_QW%L`Y}Ua=GoCP_P*$S$gW5>DnOAp`x0WUhiy5wW-I4jLgR{3YKiZOeT#otzd8@FbUCiFkSDR zqP8&-@N(e&kBVm`3DUXD>B=*fRshrW62NrbGk;~eCeQ*-8Ew5Y*c!DS+zx>>Z%>*n zmLxd5w@WiJ^O}@xOUQkKJq)Y|d!JU*a*z|gdJQiQj@R(S+OTzO!G@{U+MpA$7P9wp z+gTaXDr+eUXR4;u%T*yY`kf3bi1bMOq6HHoZsu_?$wOZ!(v5H6zCjIgQrltv6ru^M zz>65%bWcN5b|X&7Y!YS0q6&H4u>qNP_ig&?yI}fO&SZ720MRw$4bgQY(v|31D*LaZ zYgdk3tRSy`U0JgbymdYJwtdrPA-*mi9r(rxm*}bj*1L}l2`|zVf>Wka+N7JTXQxid zpYU+s<_N^a`4d@4-dIX?*1Ny;*U;DwRU;DvZgPDw}k_Lc&F!z$u zWj|QsYd?7VvL75`G`HFJ&2wFEtJnf5d9~~u{KK*{yjo@xgcUE0Lfx|5y0@n4<9bYO zC2+MiGLd)N>U{RWse@=V)Sxi|H(u;smaX_o;7VfgE1 zXO_!lXFx&N8(QfrxIapkYZ+H@=|GVq*F4e#m53_4+ag}zBY7pdZg%~9qU!?Xs=_wv zCxy8I#>SQ5W(?RH*j=DgMOea+$q3IGkE9IPI@rIHd%Xu`z_Y;xXQEn5*F9ke86xkt zV?^36NaDq`7x!Z-e4{+184$#lYB{~^UsBL1j|eP1jAMe`Eei_u&I5W?I$klxBvzHh z$9rLEa7FKNmPw$_ciM3hqp#_`+H&a7S9*W=Rd+3TN$xU-Lr>%UL$FYCKUsoG-&3TkqBL~$~raDyVx0QB8-w@SWrxa{V- za{!R)(5RwW&wCTvHxIe7 zE8Vr-kGku16tN&fRzOqu@VEF11FT9gN|J{@#d{ttS9e95k zk=X9)&-o|d7o?xR%{#wzoaKLN1_79NcDb5&W=uoO7;(RxccyAJiJbbwca2D>{2~d( zNysJdl}%UAM>b9V&o7~->_>{{c<}3)Bz$(~gUWNJlhnfvd%AWzXPFz|>w%F*eHOQ7 z;i(%sQ>Mc^LfSXnj(qij&ZVBW>o~na?>}wa+IqgaV8W2{c{lH!Uoqo-AZsV~rkXD$ zbH^h`frCdD?6uE%^`C2KupbT)C&N=N@7f^12R?jpx}Q1GL;prd!LCt@8GLMY+k`=j zN-5LSkOgz=J&k7r7UDf|L+4k@?1TnGpB~$A*oVU_f7G%X={(kh24d~2uKqkySzZ&M z2|pAu8#Ms3qc{4sDoh4;l)0rC4`k1Ex$n&EXwlK;_&-z?W>BMAJ|t{(|z&z?(Rj4 zobs>1%$RIyu-~k-)+Ss)4coFdKBvM*R7<8uv6{5w^b5JF3Wpu8A_dh28s2rn`mrj! zv6S>VKn4Onr1>r|WB)Vu-Z8?_W7w^aTy>USWS6>Y=3ncsZzg`%|8(O2r|kYV@c(4f z<~HynZr=v}Xl8g_ic`DWz<(R~Zv%fVdKOrF&2$_4ZQ#ER{I`K0MZKi>Ht^pD{vY>k z{)!ZTqxqVZf$h&MKWuU{SXc1maEE-Wy8Y@BAsqZNeW6`^I}SN(uWV+9%)_HCV!{-Yzyz zNqb2bvo*@bX~z*@5tNXQ$u)R8aV!wKlYGNH3z^U53QtO85YoxgSuA|Yc0|V%NoVVI z(LA^xNi08o`Zl(d#UeD!6RGO1*u_-(FrwGTt;WX9mZQO=b|>8i=I)|5XX5;&_ZEi9 zZPj;&sh^!NN^zCq(%HYZXvRm$l!JIVzXn5WsgMg{31(Ojdhr5|soZV*J#Wo~%j|v? z%2J{316}<+33ABC$q#qyg(FUyy!JBNZ9NUQG%ymovq?Cgj6=>w|Wxcc@db~Ni;#?UWA$RLwg%AdT#+l^M?bqvBX09tHz_o9B@ zJ#0wH)XD~c7W;UG6EO8GQlAH{(ndr!TOd4=96{VLJfF2xVuz^csfl3XiC_yda&BA9 z#JOgjOIxjaxF!fsyWxFibn%#=|C|dai6iwC_i?Kw{vml(8}sonu~MgeA^)yvDu^@D zRzL(9<)HTx%XF7#)O6(Z{C`V}eRXsGoVDLP9>1}5{lhc3Jtnuu&(7-ssD2{9QIX;F6pr%!QlQ+0V9lJ{J-)=BM_ z(XjT`1H8A;cu_Llummj*0-D$WJ-p-vW0Yku`z(DVL=K1`UpeD-Fx#lZJIn%WMrPRz$ zJcul84HV0I&1g8T2r5I+=qzuh2y@YB$bc-u<)wE6Cyg>uP5Lb^pkX`9Io_DWDv5e- zP@oHb_;X_H-6D_54CfHj42|HLg3pbSqVX}|Q#Z@>p4TGR!SF?8_G?nle||~HN{c3l za)&ACBQq}|urvPn&`8ExxHpu%cBiLXpbfnzjbGI4&^Uc<<_w&CWmyvOa4+-|b|}Bn zaG#@}(s0;+k%mi_nz-;#PwoCl!%@G{@I4B(0ElDNP?5I{E1B^?XTtoB&wZmF91YE4 zC3eF=qV#OCED}4@SIm1eo7*p~!Nj}zsEw#8C6uPo*R@)>;%#jX$&8azn z8n)oniX9n4iJ`;$wPXF@s7D%w9i=uD|Kc;ypjCT9p<~8JN*VjwMw|2*;l#Y0R*Fs* zkHBb{o&r;fa_L;12f0Mbi%PXw2@P@`NNEwKH4Vff^G3z0(=)zsNFLQ zCM}c6rDyy12SlC>!pHl)o-wFo=c+}YFYN0XtC)e>-h*~j3Ss35k#q|OW{7R z4{G+7?eQ)n#TzkX(}g0OJMQ$luTTeUxeIwh_S#m>Nx1=0ScVnT3nz0N^e1dUGIcsoRE)u>6RZh{43!#c#jcJA1JhA z>U$@utUA4l&cOX`rpQGjnDvxnlK1&}xIlc-8pwMRK%%RP+XDoAd|{bYr6BSM5{WYx z6%LzYMw8`os6UbnQ6U%7>EH7fB1mg^N)#f>W;ImNE59)`)$}@I$JO?j1~wxNDn*ng z?P0l~cac|_kP@y1_glfFC{Z;?abGAlp1ql-IaY7}tT_HsyeXs|j<4su|{yw$8Ms4Csfmeo+pY$H{Zyp=fEjm-6h| zJ@nqs0-zommpJ^+H4Y~Sx4pvQit=A^c)@oZj@>CJuM#e@r%AWA*tQ^)+s4Fdnsy>cKHaeGS$d)cKpc&)$IDXFg;a zj`v@8pHZ%NpOubo>^_^W0d}A3wy$=d505T)pY@r3*nKYWK}^!l@jjKi7G|%T>}nU! z@Oz(>3I0-;UF-J=l_!&0T@8W^UgjSPvx~k8vyTk-Tp=GRk32d;v5>yx;g*Kqec3Ub zpI=R>@k*=et&ncF#?Qpj#-_e%#UJ)E<{#xb>x{O!=w(I9%J+DheYB{q*qi^g$WC%y zWT&0662#;ileL2CSWbrP>wCu-mms#&`ux(DZE)$!UNR9GNX6&fgCqHDit(aMK~rS; z(wE)-_L=CPeA%`y5GB-D^abBb;4nm)t=s8E&l)X@+_zF;4M$+Zd0@Dm`qnDc_WSU& zbNH1no00U=mz^o%q@(YN#|9PparSJTmYg`a;C+ zhedEqT0TQD`{bXr6%3PnC=VYf1- zOQ#ewrh%lLn0aiRxkgr$lX5N*!={j2&1Jhh&RkzM(^!=_-GNvJ+=u}nw>FW4VsEJ` zQZkp!jZzjOrWYX82O#glt_j(8*`BHt^O2I8yxm3%rZ9l>T2f7|lv*o46K|`v^j9F< z<4-kq3YwcW_P&;%f^eAKTgEcsJ(UZN|5+Ip;#DaV%gVKjl zTEJ!vhPB;vVxYQxWVpYvCgnav8H z+3&*+NYTt}n$~tbS(BPeQ?{tu5w5~EYtDBm+O~rqq@WM7BulApqttp={OR!MkKyOC zDgQ05KZc*V-~DR%d5dt&8Zi8v1{i)`|6}-hJ5TG)*WqVNvLA<^#n!(LKfkZoW^wi4 zz@$a1{yd8q2fW8)j}|g}uEV)?*!0RVJ37D1sqb?5nfu+pJp2r~{=Yr^%<6w*_}LY| z8P~nK4lHLa-E8JlD>} ztXgj4{%zdP+W#+da5fgkKXdSaC>e#b-_OCXuKYIvU-%H9)js`Nkz_I8=Nk;yq6Ugia zynDe<5(D0gpU_J>+pu$VI}^Np(n$o<48}XQ0L9$}2il7_larFn|B1*{neYAsyg>ix zg)j8Du}KD9Ca?5{Xvef{&h(@n1^G|O7I;LNv#yli1hBkm-H;n3C8^HAH(@=ULRehPC@QSVEZeyQQY z7=>KpLaqjbgJH^pk~Leima2Yt_|Zog$wkE>RL=Q)%+7@Dx{vor^_%;4o3$WjE!OD#Y`|XQFO>;*LJKhoH!A?0{Qwy`nWQEW*Hw&AjJ={;!;yp@v>a(?y zI@%+iHsdWCio9@_X}Fx6&WzS&2Q~k*EGgziwkga}p;0cs0~LgLvCX4`@)hJq-B)l2=KBj7*lgS(mi-`WR1qBwZTD-mGChu`H!zp-B}?L}G+eYwB|!WS6h(Wxn7uj0l_?1bkxsmwj-bW2rN8 zBg9DgEG;6@`DgAyYcg+|kw94BsYeLWqh$~8nVhgtu8Zen#nM^N2F?O`e0d8r6k``R z9{)z3J)Iam_^IUKaG6xq>%7JD3a4IJl-%wi#x4-dhyt(%U2!x1k9JSqH4DG%D`UFq zgD(l-HiFG?W7e%<+YPs*hEEO1E3!o>J5&?Xc7>$lJk2-Gr|dMU%Wv{MKzTh$Lu0rp zJ=X;KWXPN}O^BkO6(w)Q6XM9})X3;d@N$oby&QL$K=q8&OXBIU)CV`EeVCX4<)l&>3zc{t;Ap-rTc6o-f0lsl+RISbgx)9$yCkafVbM0fix33&Jq1l%*VCr84o^W`N0N4q58YBiio z00M6Foq+d(pVp62r{E!|Gb8tjt8@`OCkyJgLb-l9xs%rr zjPIo`qa~{!Z&F9v6~%j(rM(79(6oa)<&QpiP)Yl{;fz-1l|a*U!nK^VNad!81N;F= zFXi&(a9aV(!mk8e@<#%$-5_h)a7DnO==mZ+xxSzeWQwuQNM1a|6?C$s8WTa?VaFB( zVXD-}xiq+|eKoi*zP~cKw_;3U|J2|f;!e6?bj0=H{&xPw9f6WJmbC-#0rSyS-LOuW znjuz&qhlH^#=GbztH|gTGmWL456G^QXNG}?A9Y{B(hI`F1-8~#J5_9l4 z2xM#md@G@yq~>(lo^)lpX*w?Bi$uryu0o9XT;kW6NXIbS6=*3&J=9%A-x0XVB?7nj zioh*7UPfN6$gNQ)zMOTyc^!qnBEhpMf&OO%z6Mk@tX|fJ#fr9__=%NNc_<7>eqX;9 ztGBJw2!O)}@Vvz82i09dmz*127mr#$bX6XD6&{|>~&#qPOfzMjXE*GP(2)OA#Cg619 zN|!44p4x&$CH|Q9Hv`gjk{*YkbX>h!&9lKwe#YW0_~@y&G;AE={mMEN?XZq4%|zsC z$PKS467unRJp;hX4e6d~_29)8?(#k0iH1z2G3b+cAhythLP@LV{U|Im*()=J&>d(( zK;~{Nmy}U(Mvqt_VG^7$hw!df^;*Xu@Js$>xQl3vaO?0;?+nLPGPq7o;k-23#aAkK zc=lZD$)dDde^v!Qe)eF1NrknAFgTp43v(sdzpujk1x9d}8xXO38pzgK8ez|uApWs_ zVZ4QfSQu z5kl~y0hXuUL<>Yi-ZG5Td!#~?=%WCiB&RYrj#qhFGoB2zt%wiZj34;8y4>U5dt=Zn zdr^2u*#dt00Q3Y;brRBeEXWmEF+?8gOaIAs8sfqKV(+bks$LiNeY#6Py1TnOr6dID zM!GvCq`Om)4gqP9Rzg9#ySp3d_$_d|k9)iK`<`=tujkBnhJPK$wV3sJocrNg*L^eV z;6Eu92O#iJ00Lk62Lj(J(EjWxPu=F`xQ9AM^m*1+6my`pjd*|-_ibO=-0FTl zDm*~UI+(Gw<@V|1s;{%%&6DE5R_a|@!NEd!C4RakR-N!7GOS?U^`j|F>CnQ6{s)!f zCu68udn8qt-^F$*2emIYS40QA=}Lj^aBjLg9U8EQ$4yR|kk=X1xsqX1SN>E+ zk&g0K-=J-soGQWBJ(Fo|Nug)n-mQSiXeh=3-gR@I13mSvy8KMWA@tMtB{%HizQ(s0 z-Ut2q?^SyD#9qp>y4B(t;s!A_22AaZ`_Jv6WX^XT=&_{j^K$BE`&f<(e|>=_;Je9_ zj`3k%sKU*$w!G%U8+zr-3ym(9w}H^(#>>{6kpq5qjMtCeu35Trs|w-0=XgOfU$@~5 zg${}*H&2bVH$;f+fEYow&lW72YdPR<%-TxF&V8{x*~7jDp9P17_6i%sFqPTvb(z?^ zBlOu?H~Sf&XD1MK{${~#6k3v7&D%DY^N8QC|KF}QKj!^kNWlLt@Be!Q{2}iDgMdH8 z{fD^!5chLci5}wqf2IKHA?`oK{fD^!5cePA{{K^P|37Mib22dhc{jSmV-p|jw^nzr zUuO~Czw*CC_w?UAtz*O$&9?EQumd%swrt`&fnWm$vv>35?F1vCIEBJC!S1wK(_3l3 z48{RfBdN4HJUsH8Z4Yf{YYJ|&gq%;rn|}<%0^g^+ZwJ0V+Um;^;Kjk&1l=z^|JExH zSIXDKb{PdoBAq20Sc7~b+(SIyJlqgER>V$3%!b5=oK}A&SG9bWe&QJRL^<+|N?Wk& zn-1RVna^_lA_t&@pV-I?8BB{9;FgyjkS`>^c;vwq{uDj@P6ubQ40UiuV#6c#+>_gM z6WBfNwLI0i(z!CfC*jZauX8fSnQhJENNHV66S`-T^1{czCaUXAy+{k}pv)RNuM+D} zcNswnoe!PGkm(es?gI71^sBc((z0qSHOCzSSlX7Wv+1;U%Xps^H=Q>UIXuZ2g#)mY|H!k=rd>ld&c0?j;e`Nq=W>-^l&Sp5F@6Im?Fj+{@DXi`2~rVz41TsDnv_ z9%`c2PJAm!hmFpYNI@BnQxX*EH+pu%N#BFqeQ?ppm_gDN7$GCo_4yioDpNc_+Y@)i zgCh_mh15kT1Xw1s zO1P`J@%1c)gm#5agtS9pD(a&3zAI^jsXez1j+$qKQoJeZSb|~y%LUZ zRiPgPP{QHvm2jG+qjo8F`uIB~JZu_X@D$jEY+`Ap9H4~53fiCEDdAlJB|O`yG?5>x zE*U2lK*SN|z7uiEzK)6vT*P<(AmTWmX6!WTek0|H za75b;i;U{lTWA6b z(r*t9&Y_~_>w;`jyCl)RE8zs)s@Qc!ZvJFuSZ&WwHYS}zR8}0|2$x@9L{rs2AL5mW zhbv$}Um`*+!n_=(h8U4<#+!&{Kn<_=2xdp_LN8|#$%Wq6IT>z#M?0B^_L$C;e;O){ z*wsw&vgOed35q##Rcg}@i{@ll!ry2&sdrnCGL+8|8s#TG|MfXK)fpwE;TWrC>nCq^ruXPDseG@Am zLtu$C^=Cll!G44$du}RCfp&&H9kW{E!k#*PSo4&Y5YLZ8(JQZNUnJRCR4aG|4QWaG z_hNL$KNX|ni2;hyosxeqMiH5;mOz3>n&u+7w;O0yP%p_{4ysuAxBA}XN)8uo#b0J zI^y(zPer2a8lW1TZZ)7AP>sGYOKpsN^+;yst{Oe-#o~t)sc3VB9%iHit==L@$VYIj zWCzl+?;jmx>?_4Ux`E@vprV9bU^RhLKHo@{ErWD5@!K)=(tK)^PA6efXJL8GEA`<&Noa{T33} z#2+8$T(O%i26*g|29sEG+%Axwr)LBH^Yw{#lp92pY!mF@;rGF0A`v#ssv1b*?Prl< z)%DN^ee(+4T%s%k;XQ^1ZD;(uGOBa_q{nwccyfmY(nU;&dL@D1(j}&l%=-?^k^?OJ z$csky8+9~*5bnqr!v72jbVHOhs!ih6G&wsICO<;I0kS_dg#{A$1;l3fwDR(!;}lXP z@KZM{lFuh`R&rmSL&qtmDjCqgH!}YVLU{HQ1^}kFiUTW<#LW<{#btdB zZXw;lOe$s8&w_nf>UpZ9>8=fEM#qsadJkwuH^D(I+@bra8U3?mX6K=dyQX%%XF0`h zFucM6ov-i9DgcIu-NW!)knb?OkLVp*KHE*&*9AfRZKEbWBb@_F$$9CGvKuy1db=2B z&>no^nzVwwK7K;_I~Y!mcn8CAWmgL~Hrp2-PwQxcLYXxmI$0OOBmid32lQ(jRN*{J z;nHuDDl`!G;$uWVo?gFUPS%nkht<+je!VY!H*4M=6H5 zqll_Nj|%J}^v>vDd-ld3bscURmZ|M++0m|jAR^PrifUaEc!J*hd0Q+!b!wu=9^7So zF*M3+%P@uz2hmyJRf%!AY=HPMZ$n8FJaWj>nasnAV^nbE}^pNx)l78wtvwnqu_S$`sndnV~I9Z)?_pcuXi9{~jkwOD=3++^@N#0nGHM6u4Cwj{k=HmL@?8Sx2zl z5q3WDaT7L>F&19Q!WhUrZkT41FO*kcxGm9B1afNxoIyWOJfc<>>E%V(dB(N3BIHcZ zK1;|2alH-T@_MaOkyLbxm=;@@yX>l5z5#oZfOJl!Db&S0y&X5^hI^}42xvxk{V0E; zD=%cB0lqRxuB(9SXN9PGcFw@`hM$K4y=}6Fsrb6FG+*wDJ791Q^zh~0j?HOXL>qmZ z*;3duN6}qv2+0P5cBP~j9WT_G9LVvw^~PS923bV7lRU|TlW9+Q9BlRMdo%i5IC~?P zg%Tg@`h%82Y0_@&cKf!@^`t?B77p*TDagnhOOT`pw7w&5x82V5ux5;~qO!{uAL-6e zvZoK^*ZEzUT+g9UU-pYi27MuB$tac<448q{;w2}F=W5+g3`bgT@Rx@Ku<(kKN6Y{g zK6cb}Qp*oHV23-*XXa9>J9;>H4&gEix>JBv9xoBOkPSIv{zabdt95ZLO$Fo@KP{w# z2VKRhiTmoDjpb=c1~g+dy4vIA{Z8{BkNHq7lLigV+vms z#1o$9$i8BdfA227EO{(^#4<P;kf*Z$K^ju!+(5O|4TG{g78JGCV+-d|6&?`_oMzZG5l4e8el8;AFLBvQ$2WaO09ARYHRheK$8zF`UMKnn9mWLGWkorcl` zBkUNcH|lb}wO&~LoGGs7O%_#8woXSNOX60e5}O3z;(?a@?pX5{qkGqLnHBSxu_)}V z*sz zgsbUo=72tJyho8Ej@!b9Ry^(lp4Fbip8U9UQT}2k7V+r-?b(n?C*sn%Igeso^SS+n zi$EA2$m{3}wE3h845vD&5+l=Zd*R*pd*Rw~Zpfw%tS!vb3oikC z;rgMxL3@r_zwL!10rtY(kcYOOgdU0k_QJOSd*Q+&xKiHE^Y8YjQ=l}A@j%o*?LydJ zi?RFJz_yv=f|yc04#za#_E%7|hI#yMEM;Cg8r>VZ2k@`RA}ycy7=IY9>tWvFO^-s# z!lr``s;3p%rDlf21JLls=NQ_!*hP=?@`XUbM@>Gx0GRqZ*L?A7Ou%@E?H@iNNyihY zg~VIe4(v&YY~zVU8CQ;5s*eQ&{BUP2o+b(FkrbQMPD#hnpy)F&a+|1TMk9mu_q&*{ z-mLqQ@ar{FXkyT#9ujM!zE+29}XdXdtBwF-uQw2K8MOJhbpa&6Z}v zofMw4p#K^O(J%tHdot7A^w~o8iLh>pdn0S1`$C{iG&EX}8h2?_ptzw8XQPuP*$l$5 zF`y!SFw7}#ZouuC0M9K_A91QzHvU34G7Rtx8Ufngx5e;)yT$O^alm4DK6Y=hkrZ*p z`zAM7BYOvq@soU0*>8*C*?(RPx61^o{#-xk;PoBu z>v@nm{od>bmAM5ARdSozg+vfAb!`8ZY2*d^V0js za(L`7JJKBi9qB0%WXiqU`-DyC@ageS9qE>T-;rLpvHTS1v`&E?891#ydmK%0yaUUBYs@Rm zH`?>SmRbDbtb6KJ@yF1 z36)3%>_k9!VV|LVqCj0Jx5I6`7sR8W$o4K9L$w#O+>H2=yZPV-EV@gILck8TTG0DR z&WNX%h+pf!Nf`L#&KLKaAkLds4#Q{eoza&4exrkph!0iE>`*5U(2=f}`Ai$MhQN<% z=7{n{fWD|y6TY<2yGR$6#Kf5@gX?pIG3;18u%s}mrx4u}NhZ)W;bqMm)Y( zT*8}h2AH_^070Dn5f)R%ogi-2cQ1&y!c(z3kMA{3TB`0>>WfRlqmo8km7L1ogK_YN zeb$;4vz0L`YbaKo$;hvWw+GoN9;dh>8<}%ilpb7hibr~Z}a4_cq+fFgvAV-dWU zwTYa}8w61$Qtuif!MRw&ZNb7_gO6XCn4+1pTKidTY?BQaINX(_=ZWL(JI-)$&D*c1 zGU@5oz(GAM-Cz6|55>wP0 zZlo_t^ixycf=Vf|pfu#Ftc$!~c|}DTsXNB|9$rR{bU)Kz>NOl!!ATm&{bo4p{bu+C z{12PqgU;}iQrEN8Uw_*S$K?f(@i|e_fIBiS1|Z|C2>qgWWW4AR_$tI`_%u3zjK`8% z1MQw_od?lU{-G+p^%s-zO^Poi3(j$Wvl;%sRHgs*W;mcKeJFZjyqRvsAI=OSB2khZ zt2zrL3)u?TD&&|d`gwEQCpps~9dB!9QwF|03sB3y(8SS0VBU$a?L2<0HjMn1%E1?S z#c|jet&)|rFP5fAFa|24yfCrnU7@yzhYiH3LYMRt4Nqjq&$bm|{N*b;pjsn#etBkr zN%SuOPSE_?bw>Zi4)BHT^XpF% z!+X-b?G-Ef=STaGPs1-&F^b*G*op9%F-M=-TycM0Kyd zEhA>1i;JR33nZ447Y7f1+Kh+F!IkONknzik6pg<0^4?;)l&KBm6aP3n5553@VS>S# zi-E7_82VY8){W}-o8fx*o8eM-o8hB$o*yvpH^b|{ZH8Og@;V>@Hp5eGMlSC*!Fthz44yjoduz5-2g;HP_pm+8K zw#RZ}r*rYp^@GOFCV-6>|IWsZdMA#J(o>T+zUo7}sNA#h+$F+kH~<@`H*S!+W8*vp zOOb#Kt(uJ6gwc`WzQtWdnZ1-&35(>b^yG`2g%6ikB*LIs7KvT-u`&p+ISe_in zt05W&OhI~reE*few>!>{!T(pX@xKZFe`ezkx&I;eKji+0-2agK@3xU1a{oi_f5`nz z?ElU;Vjptkc2UyLtg+isV{~*tHt@$t{8JliI_UQBp%A#BQg{?yI`Az_y*eAXtMe4N7&V_HFZpt0Ky2 zexVFke1}@@6{8jQmAFH-q}YQwW*u(gJgr3G9${@}criSPWhAN1D0do00-r~+>z z99FubJ__E?)N;6?c*DCPZzh@9&Dt9@)D5+;GXZ}}Z0n@s56$uMBjheW571a^hk|?7 z)_cjkU7TkUnknZf7#c)Vs&o*=-yXHoJ(@~~*Jwb1(mW%DCaG_h(%7-@sR zJRj8GR?+)^db?pknPjia+kPazVRyT&+Gi7ata{Yarh1ey1mrSGyjwt`51rNIn}sK; zAhc>-)UF_{TfAF!Yr`eFsgQ_VI+x`}x}X|S#W!O*QBtACS;c+ac##Lqi&*V!VX1-V zah`v*?;;M2OE-|mmqbQVf80TZ^`D{J zW>!Z4x~-Le+Z;$gtz`T0d4b&M-xwe!u7p~^gd{u`|Cs-_=l{WF(Q=pBWIdZpQBt)cWb`$KE+2dgvp|ys6rJ z)_$X-zJV7=KJwvDK1~&mkq9G_bWJqr=aYZcS07wX)!q0~i;1aL&HQw*nnuMco$&^T zRj!ppDkc;$BOrxAM1xWcvqR$K=@s5FTv)Sm89%(vk8m6E9&XQAe;A(p4!3cChudO!#*n|kZF1@#Rqy5tce*|U5FWg6;UL1-G=i0A zvmvDDg97!@#)ib!EC+W5B2qczlqL@>?Cze%x_=nusMJfra|%GW-MCXU`{JJnS-d($>)l^< zF3rm;01cvPI@IU zJpLZ8U=Xy<3h|8KWER>X@IhdZ=%y(=m~VrP*Q1d29t*s-JF3SDrz%x2RN#6s$4pCdg8)JKr*7;K(78^j8Bdr zSPDLf5$Z>19I7`QsIZIh3lc}w4Y;y=LEpUZm=Yja?q(F)T2dEUG;D#;v7$sO3$kZJ zUG-fUz}{@Mzk%)}%UW1&OTy(}#$!p41!8UH z@seUqXjlxxhIN+yy3hEw#27@5BO`mq*rNiU?FnrEbM5%4@BQZ=i+vm!>Vp9N=Lkwo zvEH0_{pTkV|I`F{>qfRak=iUY9vW{_-6I6hS1u>eDQ2+Uc9yv@Qoz%edB2I@wBDt0 zKZ@UuThgw2jrmaA*oTls^2e2K2*T%We#v`z0P*|zck#Qg+O=F)CG9lIhq1%%7zZGJ zgL=ODN&KFXX)Da@puqsY6PgBY8>l{V6;Ez zo%sDkz2-eY{C@IX{GLJh3-P<|AL4i28&L9hrsOZ7+22mjdsJ6c%#_cYbVSBtQGj5p z9?rse4-yIUze4{2R{b*n>gq8<2E@~?ikk&Q+0OZ7D*{R783aH9x&UAToUc<)-BJi@H|J>Pb2>X=_7YSanJN2Q;h0E)>rf3lBUs8j3@c8!TF(x=1pF9SKZb8P(c1lemaHxvmGM{34CR z@A~EOyy89EUcvo=ZI3#`bBWLNhTow1h45!ubcd%=1im`Tj22tU7TB%8_6@~zTc?6< z1&bXG1aSkk6Whf;gmUdb<^Xfz<__2E>SU+TFYxW8k}YJ4_n$pb2=iA(c_Xi$W1y~_ zPlBgJ6%;x(fNBYquK3zOJ!#nZwUWeJO^N5gue;&%2cG*IJ~H2O9T|93w1WXxO`=<)@#l&F_X>3O zC$5hr3g#vCD5^vl1Zyx^G15-o1GD3rjy$iTf+mgo6g$~mg9)TW-J+D$B&k27#ki2J zc3*)G5j*uPOSOMAmPety5&~Yq8@^{Y`P&Nk!vDMit}?d}N57%`)$K}lRrCxvkX|~# zT6M4G6mJ4frSs!g57HVPd=mlu>{MT!X@o$xM}{Gl%s2S=)^}d}hX|eanb;6L)@)ExP zQvJ%ZBSf5oqr=LyY(gpfyOaTA1o%sV?8~pMQv(?Kt(#tr+5og|a%*~rwp-1N*l_m7 z=sX*+Ptm1}Tt2FB3L6e>>e_NUgagpFw(Us!9olB^t*$;Asj8^)zen4-Kca1Vu(Q@Z zC1S6--L5B^A6|2_FWuBn^{RHR6x-(7)|#Z0(8SoqNpz^yo*Y7IObL=?(QGp)+ ztpdFUvHGq89s7F)I`zI}@Ed^k?LK7cuSw^4JW-Ww1p%LR45&a?|5F9}3Q*oQygj_r zltefEC{uvRfQPAZ6HjYeNum86Ur$qwq!P!(&|o z%IU+Ds)jd4+BGZr@$7W`@oS-FTd*}YZO_es$5?>Cje6s%yrf(^TzX&A%{0E@_Y5Dt zc|8h}a%rc;I>SNl!nes)lI-8T1nbJ$_!J3I%qbYMy)__hx#uVnM5M1DRiPRof9`CV zjn0Kaz~&fQQ9|a~RD*C@KQLG4-Wl-sd*RQ|$gc#zcc0W>1K=N@m0t;fe|!fI&&5re-e~Fd$(Q{F%09fhFFExR`{YUn1vC`LaqYi)Fi*54fUTi*_!TVn9H|pm7 z72kWYEdagP*cXcgU)}6}>&1@$-i!Us1D3k?fZxQU9R<+ed%!nbfAD~{FFT~}JYa_# zwBI~n>7rMB$)4eOJ{YmK_7V*{uF_1$0_7?2Pvap51>TcN<6*>yrzA@WZ=F7oxQGYe zf@f(<%YrbC)i;SgAcTuV@eib4p&;h$NDbomO3h&GR@|2LNrW3PKC@3C-RchOS44`& zaX&G|Oyk$Abt$8WPE40rE{1l6`U2aLT8w63D4+$MIW^~r|4jsL_(=rT{w@Na{VoDW z0Yu=F-$dXVmuD0W&O)FH?c5$e?q9Qkl=CVgTlu^bPw)d8F>;0K@qiT2k(jX48=q*dv!Mm- z*PSqs$X&Z^E2J)rl}oQ!EgV)bq@6~b`n9}k+`^^Ca3!amfNbh^z=p+H{{TywzZ$gH zQQ{|Ms_&N!#qPBoO*j`&`E+dnRAE+EIAh68H!t*Fy=hKO*GBnoQ_(sy_fyfu-=?DD z0aMZ3L#5%6=Hul}b%+TlQ8uJ6aKv9$V_WP%76?^?_%l3D<%~?!V%Ll1U$Q5iMD$<9 zBi>X&J_9xKTU!-j@LOd}7u~iL81r;gz^K;g9%W3=m0w6~ZnNab0nd|b_UM70C2=8C z=?4r>AArfE&V{W?6;1I}@PT4MGuACcN7hUUvA7$o8bbi4qG=vqD7QZ`Yd0zA7kK4> zb)d2;M>PJi&p?B$X=#@u79;aBvWVFL8Xe*VXi(sc4+U}<+LXnX+6SFm^pX(rKrm(L zdswPMF1g5@@<|jzx3{z3VuqPTb%-IiTvoY_PA^WG(KnKMQ>tKFUiy?omFaDZMrep! zrQ!CA5{&2U;BNZDEpi;Y7pPVw@$~v8flpE9o40FyRMjhGX{j`ZJt&SVN~)Er=y4cj zn3~C+Z9$up5JjtM$l|}L57Gh283pT1^?II0*oNf#=_mr2x4<5Bb{X;bS>W3H{n9g> z@Jve;3*eVqdmcM^$XjsRV>J+un_guPuSaiEW{KckyX9c7Pe_=>w2bWe@Ng-0sz}9Bo*1s7NFYSJIy9kcnGh|(lpx1$9 zpNsEA7Aj3A7K3f%copf^uVD#n>g@oOU`prm8Jk@z#*&)%CEOpFYP=W4%N(Xri%G}C@HStpM4k?tj^v^ReXFJGp_s0*g_^q8GQv_*jn z1kvnPt>Oj&Km;a<|0V)EvbvNi?`H^<1^6lN*=V3W9vl67C~w0JvJ}6--@1PPV6o*i0o8yA$*h8 z;UkOAY($1jdT0<7hh8p_*Y-@N=~-VCAH(BTHbq5wbHzAmg&|Yi34M-9&S=O6P4;jE z4qPsyeKA9hHcoknI#YadJH$VXMVCAydDZ$?W6`xtk@l@}I;G{oz2?q@`JGHpGt673 zRo`cPk;_>Z$0~J)h@13eBHmuhg52X|7hI2^-|bI94c{|@;+)_zN@+9e7u-B`oUW$O zxO!yq0?jRx0HP&C5;-geq_)oziOCWty^sVBMNW+vW*EK_x7O+l@j9s#0m$yDBiQGY z*nhDf`!N;{+5eBV=thFQ>9Ux=v4D?q?Sz4f2A3^pV@8di7m&tjznt29qEJidrDP_A z3)cL1{n)x4=G$b1_x;$ZjQ{Az)`66Elr*nT zj$&YI($y@P7B6BrDB_bXuA(d;vG)s7sd+SoD+}C|)Dq#<)E409uq9 zdNe&;zh5TC1{!~8)u;_kH;#_g4>_>OC*CUa5>2;CoO|i^89v@|vj@cX5)|52E?8=G z>L&en3z*WoTJ!7Fnd}#{I|~^2vns#>rn|R*m-ew{17?8kEa21qa5OE0KC3$m*pct5 z`MU+IeP;omo&qdj*552(bSy+Kjs_gx+S%6@UdyRX1Dm8f4qvnKg+%zHp$589VIMEP;PEEFdJOqCxvz%A*RCuMD+sxY{9T zcIj(2mtK~Gd10?jO`UH}s%i+A_?vvOmNtIn%w+Z{+H$kJhYt>1)$RBcc`=gfJ*fNsFVwUO3A;WQjnif z>7zM?9xVVW70Z0Ow{XJ!e&O`em*LE|0i%cfr7QyGMmqM%^Xo)#qzo=Z3jdOZ{_RxF z5}IPGwXTs5d}FqFRC*w6SezON`t}PNPd&jlYm;YX;v)lSdoiGEEV=MnM!Xgr{*+Jz61{~_`} zME;*5|IZXm?U(H~vof*&iIa+L8_xp+I4KE$lY0Ep*Zt>+m!M251CprcWPxg3N|PpG zeB&!l@U?k}piiIS#7nmysRhAz9njS;MC^112@qt2A2GWm?b$Fj1#ejcadnx^qcwS0 z?XjO}03$+~0>iPI^*F6&@8*Z^^1omSBb`_j4vm_aeXBXzKvL|AW_g36l|Uo@u`FQ8 zJ%E&Z2Ts0f@A+pH=IT0Mw^?m;qjIU;6VxrMX@0ZXcW1vQDJ=tgm^pL4I#IifiNa?DsOLpC1anU;5$vH5mQz;qd>D zy#D|Cki2lPEsA`2NWf45AIHxu)ayU;A^n#~=#!ya-6wEBK_NoVhDKci-0x5$Qc(+hVi_{O8w40}^~BDd8ZhX9@y35LWZZ$nN!zM1#q z2pdVQ_FP;U<9vnC)P{Yo-Y!v*QiKxqjwxyF%*7%{MpB$bfA1l0duIcM$OaqKyXD93 zHqnzsoYG4aPbp0$rRdYwH6uUtNi78~JMWBo)v-vt^`VmrId4TzrU|JBECgqV&q4D< zif6*jwEj$U+BE2!fU69|e(9V=bWh9v>Sm)&vO*Ni4>b(LOnSgaEY0N5zGB>n>)4OT z>GI%3fO(AL)-4;i=OaF8NA1X6g@G&jua#ezDRPvA*eDELj|O+OQO}Y+37Yo(qAd(3 z_==!`%~)*Pnr1|WqC8N*Nc(UUXr}z&)|+2Q<+Qm%WYyALOAmv!z_g=wpq()2uAX^7 z-ndHwNypfZzX;w|L9YZ8?5JITPqRv!go#RaR_QFwjP+%3D4Z;HYd{~7JUkfWe#HVfQCB;IKz>u+}!^X$#neEt~7Rmf0_U~fKLoLKC;lFixzpTdKXl=m2R{!g3Xf~q)!q9noi!wv%=(jfD%My9` zhPj#RDPb@0+3eUdTaBq$8|*4ImE236WtRURwzAO+lQAGT+4mHwu7qe5HT75%;2t72TiH>ysv= z*)AOwUc8LxLd`fL3v~Wm*yE^j8TEZ?8GG&fVTzY7-Pw6tNV$L;H$SVtNeF`CNnVOya|;|S6i z&*Z#7F&lck*fNkLA*4{NqT+H*?9xP*}7Ffe`LcJac zy|5+?KffufiryxMl;I9wc0SnB*F7O`Xx=41^7S^j(W%u9B*59O&aA=t)IMO(bS@&E z7j!YpBtSH==zB#!;SYgxOF4E`p816*>}vvh&&6QZOm*fs1p5~dqn0Ef6@;%S{Cyu@ zV(%{A7^BI>n1NumB~Kv*;Ybb|KG%Rnu3TI`N2h0+VL7Qbqeo@PtMHMef+3H@Jr+Z; zbM<&;J*ZI#td>%QNheEtA;hNiWgmtOouED?W;dH34?eH!i9oZ1 zsaNLbNA?x)O>7cV#e>&x`c7+dL<3?N6=c!w5 z!tE~3w069RG@R-_Qb0&o1O3F+9@n>uLsRRYWBpVg-F%czmZc1W+{W8K;O5Gs4oBMG z`u&2}YLWs>-=WHUotb}Dj&>16am!2+x>O9P(eOM?5OZUamEZo&XW(H|FD|Q^(eN|f zw&qq=p6;^uug@ISUrl0BYxhXe!|k5xQ}s4$c56uxPw5fwcr#B zc4|IBe5h%9kJ>~B<1ZA6{@FuTz#!Ps7hXUp3*vsoAsDb1gJ8mFkvHQ{6J(&DcLfCVH3djO}jE zgTyP7<_5F9p_%v|164?z-l075(toVT8^}}kYyzYB_#ML zDalE{X8WF!VpI|ZGBqNjvgVmJQuo&)oK}K7QFaxJD(fvUcx+F>bZKzW-~ZU3K{4hQ zrK)re68i(eg!2dHhSUtso~P{+NK7#fojB@RJ~Hz44%S{F-9-5PZ2Eb;%YO4;y&K8l zv*1*@yN;54w$qcpoD%D(5u;zRpY1lein59JNuU-lsGiQ}Bt ze*8T1(Wr=nrm*9w1#N!%xCj*mk;#)7TS1_r`RVG%CPBFr;GbDxg1ZG#>;xrQk}@`8 zF$&ZwM|{0Am%P1Qhz-1f)H;%?9Y{52tE=D}eMv>*Ua)6T))IIrRk4x?JH^_feF8)z z3YwqKSgRKa=6GjMApZrCh!r_fzc$S4E!~XXW6)jMVKx9f*59V9N=^p!`L> zDgOzr;b5G&V6(i$0!^ewC^C)qDTERU6}q%RV|q&{uNY!`=&b4h zX${!DBB%O7i=5SDk|+t;aP1^ocsP{Rx0-Z|%khC@x0N^BfRwl~`v@ac7}RFZs} zaj+blqwvN~_aKDRzlI=P)|kSTF6{z_6jX{Ys#h!dd5Se}c(5H8rfUGux0^2p0DbGQ zlh;6Kc1!F=+s}=mfl!Vv>(4hwHKv71R9d%%o|>qR{hp=>#F5Y8d%V2x`C< z^d?R-yUG)Z$n2v>FHxz0qX)%Gf!HZ)XVCnUT%f5}bwT|N883JGFcGw+yukUA;k^je zyp)0Z9foI{O2C`c&E3K*u#cVAbJLq|!!nK76MPGc4eN_0J_jFwfVk(tuIIOWm2s|$ zIVlOt_B0jQQ)*eq_wA=p)*7$-w7vc6+%PRE?G$C8=9Uo4uLXf%&-58l1!ZimHNFC?P=0bPSx!X!5@VE->WyvPS?F%U+?XB|p$II;(`~Yuz=Ve)1f1~=lfspUsw)Ah_ zwgWfwH*Y&0?RRe*x%;5*4PgdJS71c1)X~He`c|g+CE(i%D<0z^ASt9SLLqoEnI+fD ztOzJ$w_Khf4J6(5Z!Fi|j|!yq@QKL^!bx&sAzM|bMZxh#-|si44#!wX#JKtA5U)8J z8_)C-NX(V%RQb1^*$oT8N7G0%@%iG}wjkN$;24mQPrx3y^)s{h*9KopAjR-u9jEP8 z=*QJQszVTp&gy#~e{gzeeSAd=&CP;G;?+1hGjVm%cUo#VI`@v!hOee(`^tx@XsCB)Bj?}b-YSdL)zN6j%yFXZyndC z=0Qb4-#V@*wcuI5jLM7Xu?6wD!s}cZuNT|)KXdcsaurrkT@cWl*oki-EAe;aDb6h_ z#>v_!zCf5XL#mdw*{Br`x}>OE_|tM_+eX_eT7)c9`>e6 z?Qq7J4OjYk4tvVe8yvZ;cCXy*50K6)-C{)*Ib&OuQ97DHwZOB_;~Y8C_BueJt0ot8 z4BkrC)5C8$H~G`TzPn_=2??b>UldrZ-!Z1;M>W2Jc}8 zbX?CbPh9J~@4xG~M!6eszVEoE6d6)B3^z>2MUs)v@N_Uw+2)Xbj73o@LyXsjBMEkS zniJXy<~)rXfGk|8;%!Vi*|NguN$@Dj4M{X}K<{$64n@24_Gsq{bFs+)WuYNHj%E-r z;0yv7a2AZLV6j&}g_9m-3C-Ug$|(y`UNL|JUXH$qrmBBF#48aGSHOV2M1)#|c{xrE zF(TcJry9e68eY%$2|H*7RuyY;5X_mu%|v$;Wik)#F`X$t>czyE?4Pymq`9Z5DVJpc zZ94`!mKQkxgFqnRF`(fZ)b+UuWJ3@BMhsFPZ*%LS9Y^rw0MIr@51RF+6*fDyhgCqu z*2tjvTUw0mY0POn#1obRuE;MSJcveCCWH)#X^Cr>i?t|rmAS6ufvKb6Dt1y@O%+>` zzFlG-1UBH)x2P8zk1#6drB&Nd6Duds%#fj5;7n6|4+@A5H*{=f_!w67{V0af@JvnO z15bR)r?dg1&2o36&82I(8ks+`|n))*!onSvglRf83lB3yYuOaW5J9OkZ|FpzZP_#8OZ(R&Sc^wirt z1F+Jr0aH zuAwEdL7&w_=yWm_NNeELXj-lMGOw}cX)%M(*g@n*5>^~p5b?9lgUJMZ)=4bH>^2x* zuLVIgXoBzPI4)g6e87F@MG9_qtO;0cMkyJuBW=>OA{yUwruAM<5)Pt<%9t;ZwO2@2 z`)X)P@*HixXRqC-qsE=^TdlR&A8W12m#BY`wJHC$)_T7^Q~tQY%~a@o(ocPJ4Nz;X z@msAmkM>sn>#r{OoER}YV)TN@@lGq~fsZI!492)FLLpSO2%ZoozMS3BzbeP&<*e9n zzQ~Bc)AMN7APJn?ZhS@7jK9!^J3wOA$VLW0WYPM`rm3$2s~an+a77q~6Puz_&50L< zb(Lcv-TpuJ-ZHAHMPb{fyAdR$QyS@RkVZy9A`9JEXh2yOHjecY(Uq zz1`>C-+3O-8Q*yMCBwmR#hi0^uXWA)zQFNd?xDUp$EpK=D8HT{T>$B5^m5DCT^-F7 zJ_TR2QT%4qnh(2N2QX^Q|1U?avwj@4_7YVZ3EfRA4zH-cGBYr!(yI@BL-3GE28_9I z=_49gnvjpHr}8Pv`(^Rv)w~;Nvr6I-qMN-eP3;*(we|E?-@RImjx2|15#<0l__Ww1 zyIX1Vk!5K^o?Bd3V9(Tizqh1C(1*P2}yD=0A$SzttBd<5cDkDp6oqT*xq15`l(KT67gDbb=uHp+E@6T(WaJwJRpSt?I4b6Gc zVp0u(lWJzr>UPl3jMq=9-%kdkga0vuc!2fc+lvJVg2h(cN~s1q;54*%yfeI0!52Q9 zo*G49I&)?QBC@8MXAmzX!ex|~jTBl2`Zx~cQ?y3}(}xs|#zzz={C&g42p4S`Ujm93 z;rio>q)ajI6;OYQ`zS#8xSMaaA8BX6jrCn+)cbjmnYX^;XM;8nig725+C zuoep~E0Iu1d6F3+@4ELq8%J{42S_Cc+6Di;bSRb-h{cT==DBwQIWbv^ zB+02EQL-EuETDD9LiVT`byB*W8hZC#O2D$jaFPWoaF}AipG&qgkcgY~=_Uyn+dCG0 z`cxL4s8&BbsuPbqir30lpk%%fWXb{LG{W`NzS74qJgSN1UgYL($H{uu!2nYjs^wXSS`@YXorg(??}lC8`oy17H5domwp^!hbFO(^9gd~LQB6of zbCPk5&ZaHtncd4vIZPyZCTn)vqlO;x+1QD|r@z&B-Gr~0(O4Rj~Z4A{Fw>kQI9 z9mYJtz|O1R*_CDES__l+8r6V%ho?)V$ZYij(%?}IZjgR;^#{gzr&l7pn}{M$5%D58 zYad+EVNBDu*vVylDC#s>)h=`|(q4!2WiT9rB%IE}n}Qd?$CgJvb{z)OBD>nyGp$iV zFpFE)D%Pwz-E$pEq>XECbY6#xlI(2Vn{Hxb*7|JGtdOX`2o5yGK0DJL!P0XH;m9N* z;PaXvwrSCbD8gDU^7*k5;v8a)DgyAQ_q5nHXO1gVf#*B890m^~(>tO&mXj@O3MG0J zXdYgh>b0yHP(*sWynnR1Xw^Mu?Ueh-V6eyr-f?@E^?pL8s_b;~KBh!z-e;D_-iFs0 zo_l@v?3!J;5YEy}P8GQNH~?RBYt_z}&+HB=|NOimchsA+gqu<8vd#AMhp_nkHn>mV zW_6R-L94W)XQ#T+J6&9ImpK)iz)Tq}${)0?byUP$LJe8*RAAHMBdW&HqgYJq4*7Nh zBa-jJzd2q<@~`w=MYDHnB9tpL-f{37DZbn!S6BXylA? zXNs%R%AMQ^UcFI4=-EBmv?HzK@{cEwKQsFuQ~qykYX4oz|1-6}3;A~;|1RX;h5Wma ze;4xaLjGOIzYF`3n;0aqQV%lefLhYW1D&Dfovc?6Kta6Uf7n0R zIafC;d;X5{K^0CgcUUFAcy1VnHKR=pZV6qp%!;8 z=x*^st@fcB_z-~}=FO+Pn5L;1ryWOtMHn3l%eI$PU$?N6nZdQbw8}X~Ecw)^!sh)U zb)p=h<4sUQDLeG+gV5bYOA2d%M9yCC!yA*u79N<%SIxC{R0og?13Nif+x4e2r|tG8 z)eIfEZC8=?D7|f&a_{xq<;rw7dpVD^cq}&S%;u7TvD4wCTA!l5-pP`coO#@%gn1>3 zX<^_nPwQn-cGM92oJ2zPEGw?y(K&y#RD(X@o}D!D!G**C;%nNgcrH7=!xk;mfcS!I zqgstfX`~8T@#L7#SYFOxuU^a%wm?N7GY*wJv>5xi)_g74C?0Qk8EQs8SDl=Ou=xt3 zyGC0|sA#Psp+zTgH67nEH*~^)8j-n2MZ>XzFXqTkT|r>r5g42SR~C&A@p2k2t<6L6 z6Rm^ZPVFttj%Ig<+G$GaUPrZ0ojD^{jw5rO_JX+7vyyE?Jac6gCz;piq@Ph_@vw=f z@zZH4EB%Kl1Z(%{@v(JTyrG^pA*xR}3%QES5aFGU{+Cv}8E($ZUo-6=uZ`cyw10dC zch|_>HS$lck^e01{_za`FVXHa#1kY{0PUXq&9wXGrT!Dz{oH)x52N!52&IEtrhM{; zjcpipmI*UZdU=#qv&L?0(Mp?>QL9a2aZR&o5dO#Z6Z&{~Jlx!^uA8juwlx!yYa`Sn zYwhr$v(%o%!e^wfrZ&M{N+K)cG1~`;d!UWQU*i+5sfX3Brips8X_Q&<-8!8I2b^uM zhbsY2=dxMhpPbIBJPv_3PUmjTZ%*f2roO6ir$eNsq_7m&h3ATtA<0f5%cfd|L!pj^ z)J89Q^R1WEG%;?S&XH6~Imz^{L0B2uA!(v5zI_5x7=*cDDFI8wPK2(Ajy^4O*<*=d z^y?|w*L%$3iqY7~o%qCTj%6hQCqa>BfaVl2so{ePO3!W3eTl->PKW6AU}`?=gLSzt zxEuZNaChLX()kPSj=fPjQ~sfJPIUyjQ929XD4o@RP&%)|(MgILM63Htgrll>CZG0M zOH*Iy%6*8L2|9?Z#t+WoCZ*xwz5tW~3YmFjCIam*7=C-K@8COtOvb&N^KTVw}3~ zOqBfUGh3Z+EF^$-b7~%E$L@QORDxftP@ict#s-pR4OB%*a3f~)3-HRx&Vq2-t)wWL zuOD$fCsw-8Yv#_PkcQKqpgTAzm9cwdigx#wOly{9v) zkIE6?l}u}(_jtNJOaH4u`D71}4aS9nu9_w!a27vBet^)~#h(O!aX)O7d*Vgx zY^YxwKSlAW9^9woC(AmD;R-syAo8Q zj{J@@g8WH5}Nco%}K>&bu zgWS^Yo}G0s0PSvQTyXh9yOC~aHy(g?bC)!ZADJ2v523@^Zo}mvLOMBTO@!XkZd#*$ zvzZNDBjU097gBBgyH5Etb5F0x{Ir7ImiRSIL_UmD(9RjzlQfhBwrs=LhWhqNBi1E> zn|C~VUzgflsucRz!Xmk)-^(M*Pru#5avT7@4SOCAp__#Qz_()5K9+|tVN!Jv@oUjB ztHHyl%s^?UDggL4?_Qp~1>b}f?jYSnFxKEqUgs#v!a3nb2vy4{Z=Y%2C1b}aEGL;vwh14r1ya7+Y`J7|F`J6X8jEI$1 zGTinYU#}RID}xv4La`4ba-b$i()cWz7&xB3tr}J11{nf70LmRwD{MAlLEnw}G%p~d z*$f!~r&HDj9Ld{4e2Lf1Y;|I%N4{Y2I6O2S- zazDj@kM8>9PKf0Y#lneT<5#p!mMpHh55BX4aMSg92KROV^t4fTdoBtz_2}MU@mB9~ z+BJ*SLb{m&wh#(f-1Tlq^;6knu}>PJla%XDB+v465yBF5>$Xr?CHs-o_S<|u)VHBQ zXL3y!!oNn7&^@*ue55B6T5{b)aQ3_^>yMnK+t-zNilum-z=q0%fOP}ph4SrD4DwPMSMcF}zjOmk~ z;5W8wRzID|J2~U*V$%(Z@TNvFl3+`Yn1&lBU1UlbiX{o))FqVu6uhAo1WYj*$ z)$=A|WJwAF#B}_GJKzBJ< z-CN)@`|>+tqDu41haVRJh&o_SoObum@Z0i7_-z3d(Up~>DXv=)Vz1=hQVCwHQez809qSx9!n4wc+iLn14lRC}%j zAy;o@X|}lWl^R8XEw7>)JSk(S!H~Sa*xY+XX^&?MkN*L@bGDvC#Xgj)3Nvu!AXfRB ztP=>J06%cJHsg-5;ozBJ3*B3`XIxy?OM{*@m;%+g*0FXy(QZHJ?3Zrr-_mhrc-g^T zRc*aZ3Oj}!(bL=vhjr}n*lxp@V(^*~w?HpYivPvHy4C z@4t!tf5zW;ssAqZ-=+S$)PI-y?^6F=>c30DRNOYpf9FSJ+$u+jKqI(O9tPICJnsATi!h~c$tCi~LX0}E$ z+xMs<8c{GYIv}t_txXzz+!`<9idwI1F;`kwl_quy?z65MIBpS3?loDqD^j7ouI*TH z92~8W3>>L!pZpYVa`m>y?41p{QQTTC%=mk_jT~?1Sjc4YN_KHAN+s2^7>=t{P3vd1 z=l^1F{5PtYZ{OZuL){+_@Na~=KRtv0rw;UgluZ8gHvgB%B!*Z8uiEeTC*Qu*e?lhz za*KY}ul&is=;1mCUNzbNJ3U;=FaG4nm7-SK5uxDY+8cjz{(W#(@qKS}t~fz}KiTBF zKiQ6By65?gKiMTP!SlwSEL7cXEcEE`@vT4EQC1q@Pu|7^_>(6o1vYGbZv4sFOke!T zQMdl&!|(oN4Zm40z-;&_#W5M5#JS;^TTO3>!iw-3JCtZ3_oPb8YVYU|U=kN}U#xI- z;~SW~*x{;fuZ+J|wO--$dab{X7Xe);UBE-?IKMUa`Ihoz)u6Cy@)L`K;r0=GTf6+yg@5OdsE zmDvxhhh`E3XZqw7S>GzzR*~ejXD8zXWgBHvwi;Gu*LWRcHEq$*5ZRGi&H^{BzekfH z3SY&BRygDVb*^-JRP5G#pjQj9CoA9BlZQiggp1Y<-%)(bZeRLtPmb(y9{NQ6F(Lg8 z*ak=&{OI&)N!-U7!w8TJ0tyq)jFehInN5|orhT&u+R8&{5r}Ih155Wo6_T-m zc`zt?A3T=G!=dlcw5YsC4Jlw1glt0vz2H&QU}Z&Uk?a6xh+Ku!cceLWuZ0?;$ObMW zQ=U~nzW_&y%|k9jt6~K#FSHs-!VutKw)e#E-S#bdIbxQe%mWOtCr{kilVkapY93iF zdD!yWhrldmKU>so{?VSSR7<;@E8*VSXh}{l7)s)&_>M%4dj*l0@CD+#$BZhbi7Iv| zu*YsS@jQ*(7UP>18l7ULgI{~N^`r(yYo*(mF&~UD7$8J_TIw!G{)?e^4We7V z4XhXE?H`U`619kuDiIrR)d>?4MxS*rwO8Q5J|K^0l{p4WJqJ;R(-!2s#^_5CRH{KJT^*!pFGk&rd~g|^zd+yh|aJ+wlLr!#*)73 z2T|g&a+$>?tt5(f%8%64$`B>kqOD*`UIw)@iVIRoj5iktLy_+gwd*WUK96V0HOe1XjFf9!2~f&CONJ~%tA&0*5zl%L zb^(4~^q{O7N1EHeT!NYa_hoz@kTgdRIQjt-eoMBZL^yM3#`?0lPTiMIuIjf= zuKCZM+>hA&X$^_&t+21N0 zR0b7dU}A}}wC}hAy-z>e;Ptw)#A}G~6rjVkpeZkZOsk|r(M)N_Tu1yc7P-2KA}ae< zpWOdlpA1j4G?RXi$q*iha#q;X0jr!Ow@7XzVMt?2l;?Mn}m}`Z9a!*y3 z+9F1WpnR#HDgM5$b@Cxx_uJ>>nG~LFSy{&Ib7;yJ(s8%F+ytweUhe)6y7LvMOi#p8$+=q+R4 zd!)dx7oM(wDK4;cnkn4)!CxvfXP_`ATOI|GGF-4_%Mb>@7Ad+5b0mxzC9{c#a*4Bm zBv*Wf3@HSPph|5%8k>lPH$9^8C%}5h0M=(LITJwiL-p4!Fbp!1#X)P3FV@4Vn~Hht&`%2zWOM7}K8nv6tKMIFImKFPHSTmwWIxz1*^l zIx*crjbw|N%v*=@&u9{Y=9#bhKv(7Y)hbz}g;0r-LDNyIr3}?b>?x5d0`r{0553%{ zYmrCdm(qWr$)`IFtzXdOfh$S5mZsrPX!3_%ZY#2BSu6@GpqHyz`A08zr|Q$_ z-q&6(aPv(sH&1x5*?#ZYHN=eHG{}uY8F4oPeMYZ$+b8Ah(ro1VMxjjB<2>UQ6{J7i zbAs5T>&%7QZSSCL)Nmgw$bGC9OP$+UY5(%YVWWk0Eyk>5a$yfmUc7HRNCLe0>L+6e z_zT|Di=)P>Y~(hdVF;&MW03sN&qwymnpD0lJ=UxfdFq$;JfC{+_bh1FSo?InUtT;l zTX=v?=T^RyC0(=!0%R6%zN6oXZQu&}5$iocqfj#V!d@}5cx7fM^Mw-BuJ0^$9?*}) zTyEPQS(-!&Ko1x3%|W={i`*BYX9koE!aQ;n#G4G^YLTL#Z`j_H<6vXncI=r-cX2c4=f0;x~0xV6cgnPLzP zp4E_E1X%Y`b13oX0dLC0i`;8`s$qCuN29dDVpr7sLNn2XEeMSs7#kjk2J%s*H4PaL z$kCMab_;ALV_(fo@#P#9-{6c={EciZ#jAm*uKJpeR$>rie6IFv09j*_&) zG#Uvl#Ou1O-b*nY``LW%;IIqIeV`Tj(Iko(W%*CG^%0K4*--ssvF8BW#P2R=+ zyV!ph`|o1^UF^S${dckdF81HW{=3+J7yJJ=WB-4aO|mlmxvN_X} zkX0y`*(BY)Ry@i2Lt&c@E%%sLfi)g+nJjBlL`x7l)9BC39uSBmt0v)Cd1JH<1Wz!6 zY0pLy6v3n5@1iESo*!^=yZQscIx}Mf2^0gF10`)_eDvUfbw3$9MxSI}!|Q{^;?%y! zT~$G>X2Uf3yqiWb;6BnCr8=)PTCQC~c6_m$Iq{V^kz*N(@HM`-aK(PZ2#LM{Vwc@T z*JWj*U(42xKdfGg+Cx>l)=ks-%bbT(Jp9Rycs3Or%LdCV%i;Sf(P4YD3|bsS=^9Z2 z-2$2n@FKVnOGx6Mf?cTS@x728iMGU5SM3DhaE|q;Q}R^FErN>rw8PBak)%_-9Ui3 zPJ?CnWnt07Dxi1!3+9H!slrqYFcJrVIcroiN@#tWGS;6zjJDS1YCU+oZgst>+-v#v zQ2C&tMfo6k5XfPKXgiBo7doZRI|Wxrj(^1>r&Uf;J9oR}+LB%9lUx)^{%nd9$-Ht< z3HP+|cwUhTTM5VE$MbY(F2pkX=VofSu4kE-yAF?macKI}xuZ#ms}9?#)%VwcKL&AY zD>lGN>bbtV7Ov&1rM{lj{B|quUr+qs$!>2>zhAT4A1{F4$!>pq26q?2-G%VSh47zc z+drO$|0TAq*Tyj|3t-z*zqfUJ`(Mt##kT+H#x#I!kNy90V;VxU`7^PfC?5QI?}>6@ z#}t%0Btd(>fokXJ<=I5{Ylq+_us1|@LVeG8HAIh{xo8=<3Q7FTT(3X+vM84wxV`R) zGmw#*g3Ei-A&k0oRSU;3fl~cYjh2{92I;yf(cKnLRN-7GgfU?}vK;p%92|j`HtQ2E zPx^;8ZprV>iyCUYRaBr+@4I3g&z9#u=d|c(#hzm#r0zm{$Tek$EQ`&znP_)@xk_Pulq{d4KoB%(^CrU2W%C|DGaN-;rlpFRCM4xkDbrOGVdte)y7ObVY$w45}xYO_G zrFoQy?0gy@gKkQ zK*pX9Ku?Wn#urMkVeKW4cIh+n3_)aAlT)`0xzo#uQos$fXgjwIX}E+BIQ!kpvXgMS z%yee!%Dm9%(zF6=I>obGP|#G%z{)oy!8UO6gx+#mkz0cMJ}T$DH_ery_%R9#Ivm{o z;9^hfky)Z&gq^3ako0>q??zs&1Q(Fi36O(0Ko?dFsBAJ5+uyzSnXKt6d{aI6#v_wD zVg7a=9r%yaj-d%k<`fM*5SM(}_qcWvegU=z%N*rLxp#;lpM|WhkvwkLKfVH?2N5dY zR1rz+$M1w~A_oiYt%?uOoJ}D!V8)T=IqVnc%KPvdY_F<;rH}ZOXlkA)MmOhvf77&v zScs`yHv`gMX{2JB7nBcHsMcWUb3teFP2+v7yg3069c(#G&~p5j6w?O}k9lcx^3~z< zvpsXP?-3i>KLm7cX$?UmzjSVKDlpQ(n#(8a*@~aYd%sB7L)zbf%VY@Cv+h$?2)Pn8 zZ1XN$nh-9tn)BA%@}^D8>4M+3SPtB5dT z2HN^B;hK;BtFh^S$+Qn-eY7wtVGy2ZDL&-Fd`H;WhX$^bWD=uO;2D5lnD4{*(xLhM zE7Fd+McO}3P5%XH`~C~0UFA{s4QW64A0zFX0cZlUv5}*!oQDc1of*VFhN)dhyxB|+ zs#!|L<0C~mSm;j`YDNR!TM7W>7@1I(E}PigTT*AWMFGZQN#$>(FwvQ)Sx_Wuj!_ha z$|bI;GiSeH=aMrckBr_3r>V#`H<#tuGKK?&u1iRV>K`gS$}V-K4qg^p&<4iZK<_gK zPmY2SbNRXr@^T(xx_xQ;$W!Wu}{4A9L%wK z8I6bKODLd8!kfY->dP^K6e%0Bg}@aFV~;7SBtHCtXuo%AYC-G;&JV1MC>p;1m)K5o< zVnM{u>}K-7?r(y^uX!2T;H7GlZ3{(F5A>Y64f#U4VQ!_5o*goTi#Kq~MIY={ z=v!2BJ&i6}AFqVqva^qa?H!`d+?F|mBb|JDjZMs7>;_kFZ^#)>tB(j;^FF3T4Y7#( z>(sO-U}{>bp|RhY4*P&<+#uD#XoK%)AkLzqgpWtmna3zkIOyG420OqJ8th<`-%I|4Ov)!v0;@{~MpoUD&_9kM%C>--Z3Vuzwf! zZ_P5lyn*#D?B9j`yRiTNblCqZ&ijqFWF~rsKiiUdGY+I{03F+L0Lyj<{3#_~|boP|5ZIU9 zrPsK~KSXKWV*eOaaF2B>QVGWX{&mnERpP?9Z;3&XBApu=?Gacc;wtp1nM}%7_|CTD zLiTZdHZV@TuDaq#Zbq?O_zSF|x`bkZ&OJlDZg@^!M2OGB{~Z(X?R)!cNc-c_{f&_J zr)Tj0&Qbo463Cz4soqytDc0{^YyIzPFZJR=+QnTi{#EE!!8%?HhpQ_Tr=KP9?x{OU*5Ucx$;u zH7^@~3pX8lYq|Acd<(GLLf%+z9Ze0dX2?Y~i?oVf-db+oe6idDf4AJC?m>RF+$tl5 z5@5mOnHTAX0xY+1HOp=aTeMLArw@`H&gI@C%_J*q0|M&4m>oP2cCji`=^41?hwS3 zz~YbDq&>}Y)Le- z<9-?b4M-l=O;O=@Gd~dRhQ#XE2@+^=(|8LqUcyR zk`P$hy)-=U=<0{F25nHLILr%tGZOfH_&2!;iH*gNnV)kzP{5x=Yw=Of2JUl*KD@_* zo4A6(ZS1CHIVNYGSDH0ccmybFEc88A%I!Mw-DDEBeF*-Qk=Y+nqGQdiGc^_zF5Eo?ukU_qCFd#SUhY%JE7reuNoQ`H?<9LJzf zuVlJ*0*t9X+0pp4A#e+Vz-F&i6*g-ZLzz$Tipx~|a@{ZRzJo_kzHN?-QEh!RFQNG~TE1gN`F`dwvaoF^WGfgJ_w(nCX<#gsav;lyr58i~T`z%Ne7=ad0cSeE}UaS09X*gle|ADZPeom%(+2J=<5W zG+Jn<`n`&xq*w8L)@W8DyM#PXmuDyqQ7)0qrjaEJd$OM`)WnH@1&jE0JeBU&;SGYaNZ{87x9R&Ek)iihmCv}Jyd8{quL=lrN^uel?q>f#VP)LKf zmUB=0+$I&*GXQz)buI)Z6&-&yN1|B&9t-8r;PD)nSNo+3M5bx@{eiP+&QohPyOn__ zgqjiG=YEeKtb@vxS~o)^V!V1jUZ_2M+o`o8MzpUodw^rXZrw8%)MXK1l?rD)%q_Ko z8|V-y&!^epRz&K$cB1j_F^KO0o<<0wSO=dd7r7B6$yJi>gRrgx1{3_w_gRe}GTGS& zA+yq=ASg34KFB5|Da|35Uzai}zP%0=)#kzDvZt?r=XZNy`5Had!kI^)t(}=Ig-OE; zLALfp*sb$Ma!aE>50Ko>Rc9>q-$-tkAP7=gfh#3$B)9PI>SpQylG|6Do(V-@o^!4{ zZ&Joe_u*lpDUu622D1XvlI>Q0QKp^#pOtBCzLjZt32PLc_*|`8WB;a18^scTW78!y zH;FD5PLZX~yj+-6WQpkjtPHE5e!@riWtn!@Q&d4*{~3#a`fZt(UT$4@(NN`YZYn_+KoqK&!teyeeGSHs*Mt+$r&efHDk>g zo%cQ)&-dvr$Oaa#5^O}RS7g@iwu2=@3{@n{>v_Zo;6om(h|c-x7lmslHMLgygPrTT z^_?4HsN9+5kWKUUFDy^AyAL+n5mVZ?j2#(#0Xx4n*4z4&tk@$x_SNn_0{8=0=l$LG zAcarRw053$1KBcH$I(P&AFXvn2a#TsWaF8WH7<83Pg9Tf_>C9WB+hijJp+xfyRUYn zO|K4IS8}k`t>dyxm6!Cikx{q&VKFafJd2Jfi_N&c<_XZ}wW=eGq+FlECy})GdyaHZ zw+pO7UN~gMWvJm|rBik;$uEcOODpOJxW0QKIz~oe#mzkoCsmeCVa3d)Jerh_5M(v) zUr92ILy=ggd-2K5OVIB)hyVjoa-z9@1-dnA~Au&VYf@HwDMOMrqa9g)%; zw$n~Z7at64W63SaG7K1 z^#NvnQ2;Z)6@Se9rcgrq6_x?WqrxBL5%SOE@yC?^8_DC}rTl-7Jl=);yO4hu^6x_a zUC38C(!U+exeNJsA^$Gq--Z0Ukbf8QCw~a}|54(|%t}Z9r&V95(}EAM0NTg_`df+P z?IZsq7WI~1s)-Is$j$a?>_F!iTGUj4+=i3D1!F7a8Ob{l`_!? zoLD)^Bj~hGPk4oEKoOXJyczWTf#x(-FHK-_$}Vp=H)9oz=?P8o1v6__%HI$w{* zWVMX>P%wM@=;uWMy%y^yb`U_UHfWiZ}4P^Z00Cwbw*n+hf^4hTh0 z$`b)F)Cd4WUs8H|r$0a5+v{!RKJF!xI{%nwi&|;(n#u7+W1Zb=eE%mk{)8+}LYiA? zuI9q~jQ&=hl>>x+P>%PPcN~mjv;s$W;!(v415Ve<855`7N@!kLpKg^s+4l7!uTu^o zE5?{3J|B@zSfsPOGCvq?6K|-V-8jiLhCehr#^nN|CtqHRvyUBqrMs4(%Z43A1)u6+ zDjvg0M}@=obk%2M=S|2V6Re_%VZdw(gmKvI)G*xlso?}a9(TahaF@cSv{w{dzu~EU zEJ=3Pn?50=kOv=~3IGn&`(LMqQT}kCzIKSle0$$>ZDlYWct-bX=DM51DuIv9lA&7o zA-3dO#B1iR)0ekX!$y1_*QjnV69U8v>nx%J_WDm39Pd4%^LDRDPWzPu^+DZ^CZ<+Q zNYA4xlxPZ(VlaWdni-$+oq@ZhHv5X3&s(fXPjQc!M+QdLcctuBrCAwZ544~GjdPAkmvIw34< zv(c!R(OS*|0k(!wWr&7{SWvRo+`vyQ4zvufdxj!$Hr_jHy)vt>m6CJC=*?}FQ^1Uq zPIrUgeuo3>XkZF}A#uC?Sx18XuGHsF1D4#YN?PJ6GrI5**=odhV`AmAD zYTA&JM+U7Dna(?TAK))NtVB+^giaUlcco)IL3+{}QisP%$;m?I`H&G2m|DjUwDNOk zY(qKtvr+_Lrf`^6IA+_%ht#YuVUA6tcG&^c*>feD%b(0*f76yx)o^+x`Utb{v0p!Y zq<7Qwy?5)B43G?c@K6SseYNb&DjZUBFCkz)4EnV`x_V~l2pHF{6<|cAj=)#( zFST&!+Y!B`p@zj{W~!t6;1@h@(LDUb<)%7utA!!W>`zb<=ZI+@L0Lukm~A8^x5xO< zhr3iVmI7#K0Dy-6XhHo(Lmj`+&@UF$zoVf7$%!r>OR`+%{VYSEnf+Cyzw|L*oX<^3 zRg(3kiEXGG1}AEEj-Ql|!@$$r>B zb3h-N>0@=p8_NaMIJ*=xJ1L_2Ml4%&I@cWg*PZSTyzzEUIpPgGH$USk%Rz z5~^eF{L9Snmv2nE&B;>MQ@>%+uQS76v1s=Ck_1p0*Y`H&rtY^kra^(v%=3?;sw1(l z@{5q&`Y42gCRgdg^3==ET;Udif`s0pvr%6-lRX1XsG8Ld+YhAr=hK7A^hlXFAPutC<FdyFts5d* zTYi{;3!JeXM z(*3!Mc?RfWntkhH^6gSaE2!2+w7nqN%LjU618Z2KKR%K)2adYJdqYICZ;9x*>~|u{ z6#Oe9dgP%G75fy%NOGJ%%c@_UeMCA&LA-V^lAr=qyhlkC%YFWKt^P1U-a(Vo{ zbP8sg@WyTPf%869Gz>BcW;YSn0IO9sQ_gnLZbY7Fc6}qFJ~J_>L4>{lho?uYILL`H^_I!9X~`ZXTxjZfc{FHs! z%3#O}MmU{=Hyszm$DH-<({$FuIw{}#q2ta457gO5Q})cZ7FH+sENU#!?GDlybeO4k z$XMi7``pi_F`v3bNumQ;EIYd~sA{kuh_4OP!DHq^QX@&{Vi%;wR+<(Cc>}o}Hts)2 zqVc^!qWV3<_NOZaR$%}n`XCd4L|Xw!R0)7YgKm&$DgcR!+#t~r01|DzL82<7Nv$_X zG#G$HwA8!Pk$`EN;XVg=2;Dyd{l+dP3mr4vpU7yoD9+yX@81-@edK?Hxk7nvHicX8r~#Y8 zcHcLJN8903E2$^U*!Tna%Xm3fpy=PG5tSH0ot}S&E}VD=?8!O5-Ws$+B=m%^?p5v; zZXG?PI}1=B4ME_^jCv-lfWVEwS90}i zA}q{r-@|ZXazAA04w-BWk*w8n0}obRhfztGKhCITGrk^G*-A7XZhcdTC4bx$N=oy=WzS62BgbcS!p}@LKab^=UBb%Z z+CQ`oObF0$1p(I_di)UCiA$uC8C-pE-RUUKuY3s8=XxE=V_Q|}lY3yZ)-kn?{+oBJ zj<{poLA`v3YLF$pDjKFyCC=8aya`9VRarhC^iXu84wGWwl{>__)Qo95H|txZJNe=h zJ57@;ucs)fdmWWNb>@s*Iri6e+9z=;yJ9@FvXgFI=~>+t!Prx6Q-2j^A<0(SK1{E$ z@%C~eofq@rBscL3681jMZo7`eFuSmmQ@cxuZy$mGdRhEN8hm?l{+b5=czOIr8vN5U zxVud5E|Y(Fnfyly_)jP4e~Ex^MrYwj0SLJ7?D;J#|}ClN{Tb8klC?M4eR5p znSdoDlvOaBG$AD9L*+2H9`Qjit7_Ms5Sb9YCXw{Cv(3HNHcwI;^J)WM@H`L%?g`;c zZU!RjA9dZw^7Y?vi?0>ZKv}ucsI`+bN$S;4Oi9OwNPD1;VqT;Y496An=Q{ApK;QYt zCm}U@^~UgT_Es}Iut=0+be*9OBLQ7{k#Jh$E(-x0~!6 z8@4VQPkid2kJ--JN%{z3S@ycK4M%Ls4#=`{9c<|F@|iF{+Ep)5;&uYumgb)Gc%E5@ zNW>cY<$Cc_)!wEpr$TuBvi13@I~ErNBgqk09jpQO_F;rZ@1U@!4e%0#y_`bjymJjH zBJt2CAFt?Sis=Hz4~xLqrBwObjmv_%YVG$SQD(PoYo9x5j|j>9b!nH;sL|h7<_v1+&v1V zT(>*` z_-CtQDQ|xw(@( zCVgHXtto_HO@e1z!ak(@fuvd7&l28WwEaO`w8 zy^8z$^TMe&D+A9Mdr{%-t8TbA>G5qHSPo|8who+=F;+=Z2jJdHU%0n`KP4-Fy+Y#J zd)|^y%|nkfsOn;8rG*DYPXvpr(Q(lM*%TQ8)Wg9R_ExXUGT8nS$gE86YaRIBzpexC zB*fh4btBGy)a$Nk0lofwK=6W&)FDvAlbC9!qZf%t#=A4u<`5IUu$ni3pYE)Bw)0ev z!|{cFS?DC90Kl#by8^K5>hIjzby>CncHPwyddsra5aLPs131CzEw=1AFH#I+iFdIH zrbG(@+E2fff$x>_elh{NpDL5)#NCX$mWEcE4Q#8B&lKQE4Bty4pMDDdeC`!JuaV!v zZ1C$RVln|2TyX-}LPF%Ln1}?mJ#X0sl!YPV6-dUVy?rFe8+lS@IV>6qZ5tv76jvY+ zFFwWty1>%6UEnAC4cCt5;Cx2G$%%Eanx3jP@~)p@d}To2!z*9!z9w6~j5Ws>dwPW{ zxwldAA?B$-SaVySOr@yn2`C*`w`TqPD@O19v^k`JUN*G2_%s75`tXHt4s5NEux=;~ z9kj0Dw@Ew#o@t$EJ?de^rPd`vyRb&@i>O`TW)%B2ilM?5il0f95)e(_9 zhJ-3mK&{IB;mZnf;1aO;=$jN!Dc>H<%Mi>!%fK*?+=0w_#VF|L=`%jx2{5%S%#x7@$r&&PTX6Z0)FVM*~z!FHRgN5C4S?b zK>DpN7pf1W-){l*dl5v9^p<`Tni6hxI1AwO7btzz;+0-(AZR-Wdc7HPsgnf>~${IcV;J`TVy98<=|@UCF^{YryvEoD+iax}gEvp)k1EBZe7-?u>&CcA3^HRY` zYCm5{{ah7*^0>PU%A4Y&T&XsjO_*I3BK8PE0z-r;i>WZA5a|q<`qrvENtOq-U-DP9 zMu>UcubNIXlTgyqth|4&17k?LM|7muQZ1K-EA#i`x(H)>2%Dc`(d>jA^6N!AyQetR`43iLW+aB`dwCyEvPgLB z%lZ~)&c><+n_-5vzHc_Nv$X~%%!TacZMcxL+u*9k4O%&<9^ZxT202fBa&Wf$nkV7N zah8{3sB>7GYjIg84R%(B3v6N6!f9{!b>~6%9&+m5m6nAqe1x@){W6yXW+6LGe0MiC z%OkLm?a}w!bnS$=@);XfH}qTKmVQ4iPu+9bT4=wxq2I{2^qYX(R(55~?W`G6!8ry< zzZabx*;N3x1*04KO$Q60-=;t4cb@}*eoybCCFKL@cY$tikKO5Z8K4kcnFA;UoBpo~ z!KNz#pI`VG@{l7xKU&+3i zS(yIBzA1Ut(B6Q7fbc;5(pE4#@R9#Ds3)n9&i|l&*5(acxhQ0^cf&WC0dd$FogrDd zL&DniMo%r&5@`r}ozage&l)`zD!-zj$oWH4dN7IdqlPFB;F}~7;X~*lFTkZO#;88#B5^hfF4hYpcodg;hKMDHR(h2!Wd1?4Re@BlwXFyKJB zf}r3X1H&OO1s`s1jXg)&nbdKRXgrJtWxiaiIgZvqsWpuBI9V;g7?9F@jZ-H=8IleS zKT)crxmc-r>iT6=DUa|v?3jP97)FV<}dopG2jaIHR+{a%`9D=`?2r7dz}` zZrN{TuJKO_niXq^_RCkekEU;A?M91O31>>5uQCKBKn!-C4fepVEpt=$J0B9Fp%s&; z>&xmsyyA4gbQbt-$ot!8?7tqpU&+^j2jK7d`rRY=EBX4}XK;TM?~mgDp`-YpW%zdw z!heb3zh?m%QwA{n@n6jFfiLxc!SL1CCrrT^<E+>ZadI-|<#{`Jqx6nfG43z^sq{AaP3dj<4pe%JKNF2aC5Vs2IPj%s zdme&RfBmHE${YofLww&013XSpuVf)(T^vNS2L1%?mV%s!T6q7;TBe+ zHCqmnOox0$aflL;P=kDBq>}hpk->4X;sP5dLZas}kQ<0BZHa%|V)wggv7b^MXYfn- z=(9Lgb%$Di6I!K$5e?>P3$nbakvK5~d$ng)sJBB1fQ@v@@<1&j@m zc9<9|Oy&gB@SKf$Q#>;*g5mAF?>vah_b(tr;Z~93Q5|xe$)s5R?q4ZTe`juJ zpA;6jP~g%y&WYU*A+3UReL{O?%9R+DkC|?&^iOrrcJnlC@qnE%>)Q@H z7+_Qw&|yCTjtT=h>`ZcLj&z6{b`3tX@VOV}oT%6e`>pORw$%e8E=g2Y)N{}R%hBL| zYu3agfp42>qm(0Ncj;FJYq_~gGae3joAK6#e8i?wlyO zxq6ov#+sn0lTTPh2VsX2c2%CE51A28o80kQmtBCuvOEIllK*)qRkhp@w`e3nb|Gck za|&hV=yQ#mm7Yo}B~r9hs$X3w;`B7k@(eXN zwBocqBvVF^j7f+>l~kn&;;a1{+-17mi^vIw^Og};|s7cbbl+gIo$>;ynllgOWPPY~|rT%)%<*?;<>0}RuF!%;F| z`*DuCQAffEqC&B}Itg}55typ!ihIk$II{Q2iTLjP@H62$67HgtYM&p65Sk|oZ8Y-9 z3kH~$)BsVwauWdMw`&7XK5K5x)|e1cQq6mk08tL}p^_fCEqyZ$t&Y=LYl|qzm(mb@ zB$(1k<0*U!d`hV~$m|5)QUp3bZ_=J10mxW%xeK+#S;KhXII$Z5uBnBG>{l*OsSE0?`xaYH*KCR#?zzEWg&<)jmI9 znacN6WP*raYmbM06V^Sj)E14$yM)gYrQ#N&iPsPjBW`22*aoI9>-<7Ycp8RJUL&%4 zfXgZH8+8l_;zE20ZckdfegZkpt|^|C=XlQ)`|h+RBn_ov>dtTiAVaY^Vki#9b{2$*cOnL(^l8EI1!d{ zF}G_IJx&*8Q9nI@(apmv`_OK)h-Kpk%}?+op(&W{LwN(B`E@^OzQ8Tbzv6bV`c~Yz z*^DyXe%V_kf>KZ81S#pk+eFHfB06G^E;%(_Nz%zS%mt2WX4^}3nh6Wo6sAfipL};J zZI{#OSqm(-ls@=>(|l}``4Oi7iRN4Xk>+OuY5t2Fn$HgCu;br!*i)9GzaOc?dkhi@ z@VaBxL6kdXU0yy!N`{iaExMlPO$a|Qt8-VXT0hbE*XY$5uE9y65%TdFG}*5va9cCD z21C+|Dt{j8A;7@1qH1mvnee$q&L4Bz*iBTXjL6PUok@ew7sTIu_+O5ZmL#3o7OKD}(F)$|AT zO6a_Yj@1;QnoVcO^qtV8%SoT`!%I9vU8I?i#J-(Hvwe8IiDM@@(x_(sEE@+wO@077 zx5PakdsPBku}o`~FmmgA%j3(@3F2});T3D8s-%_&Ql6QxNF#Yzcb0{r60l1Y|UmX1nanW3Vp{Fyp?OdH^a zfb_h)vB-kqV#0dKe>8mW#`Xel9SAEgl~7K7nH4E_@CU;;#NQgeKSILS&=r4fuGXIR zK`?@n`Y6VZQ=STzie?5%A8=?$_7mxY-5~wxNhno|OnKSiY?5#}G}(2iMO_fZJeZw_ z56AqB$31&KP{GPYJZXYmw)v`$QNl{v7fzGMUu?Y4*CEG)6Et}o#DnH0MhrA{~_(}9LZ07~u8$;17&pOnjsTLM6 zCn2W{JAd$rufTj=Dq`05J(Y)R)$E8yqoI z#y@F?qS>aeSYLE1f^frKnVdXZpHNa2DDW}ppn?z~O!$IxTW3f11_J%{pFscH4bcDp z$?&Zkuzcxq$MEe~adm6>hO2u-FLdyu&hEo4$EyphvxEE3!_%`=>qSuqY)qb6los@r z#`*exbPEzfiUP-0suaCg{FFApPKdL6(l1ePBg>}$?A2MSr2vd4o*^zvjk6U^+r zqV_t*wC^kCO^f2xzWiw?%bD9c`(r?zojC*BvE_;De0;U=C?blESjQ=>IEV{Do|vlZoTc zz4of7pf-!YzSn;9$p0Ep{#0d+qG2Q^ZS9TGJRN<&PcpXnw>C!U}WR9tbtO*Rgv*4fzp7*D%78`E?^`~YAmB(Tl6%)Csgkx{1(W4b;= z;^^(j!u%$E&_62C9O4Vg*%IoYO(2fYq3Jc#aXN@`Oq;83F2*31V+Ebu{`3IebuBu! z^o@ExEpq|l07c#)s{Ip&W{Az59rqPvsWthyfK^V61QrO)=$HssaL5k8|2A*_qyGxVgkvc52)QL$MrnM%A{FRW+ zgUd~&K5LYV+_T0ur33K{+$E*=6**cRGD7Y?srb*s9$Qw9EM}!M*`7T4UJ*xhl_dcc zchXlIx}V#woM>9QIjWQz*M|2^{h-+^+E;~(jhzme_foFzjO&vdY}7~DL<#gzwezJ& zI{PnfIafXAIa|+kGgoc%bFNz8X0BTDv!MfT z@1N(YAE=8SMRp*34-5A$BlW%B9&dMqjcf2_b_@iaNvZPDQ_0o=zKOE)CIC1E~c4CKqADkyy~h4O==f zuW6Vm=E#7!Vg3VdGh$#XFtsJL*iH_-0>W)#O&9>&=Js1F1;B0e7f~rk0J!}a0Jr(M z%wO4=zJQ>+5ww^8RnT76OeqY2+qnR^Z4H3iuszIY^LAk_sjDq@ro5 zfO&4&#uMnzZ!KFWG(v*ly_j#iC!}@uEYc^;0F3J+cPYaL>XvK(9C;}L+~VejaPg15 z>X6J*a9qE4+TQ?u;T0Pi^CYV!zH#&q>*#TeUZ{JQ0(|eOw%kU~xSdhvO_T~lC>ESK z{2}z$L#!1WvRsX)a!5Uerg-EL~j8!t%@I2bw%QBQAg5Twet4;TA;BwLiz;0*q zC4Eu)@?Gvuy~i;z>v-d<23zk~RhA*SkP8GWrlK6t6bfUxyj&bWeru|$`?LB%Kw}y{ z;>OPO*N;TNjM@U14gMDQ%w(P|TGvnCn{x8uqzFX#32?dE(KH61d3evjOaZ{R^D3QU zfqYvE$hYkU-Sgdwe4+^QdA|t8hKjyNiiAQncY%p}dHL8p(`reY<{i5id5^|{4c8gP z0#m7%-Gdi(U|d@;eVAW%Anhr?8Sw=wW* zds#i$H|*^NpsY^JMdQF^P5cN7>|m4l25_rNwXJ|vY`vHkfpEeP(~^aFO>KmguK~`6 zCdL!MdT6sD>7ZSk1@jblA39Iwu)-Nh;B3M>cBh^2`cx6ZAY`bh&vtVmpZtx2<6!9#7k_g2ma>cmBBLugx&BhA`oFG(=XZzb_YC}V}mmY&H>Zaf04A00441R zB%)~1=(Szp<@>eO4`?(n^OuvRX;q7*gkvUm=yJDEFWr2zHx*B zE|lew$lplXZJ+)Rl6ITpxWe4{UDl~23(t$`-VvK_j|@@)8N(zPW9?2yS{Shagex%h zQ=F;&()|r~4lf*ryuNc^UM@<{ojOknHJhg_t$pB1tn?QY0U^oBR$)&2z_xlKbj&9a zXBZVYq(-}j-?IkBs@0W4Q5|5&aDWpePJNl#^XWa)NeXlEvOS+@ZU zS9`bthpYc=Xm5<37;@K^U{gj{O;##;?dhnE$Il=s&!$6>1^495_J}0pgNIkVdvF(L ztBuvY)+pzx2P!PY-isI5&t8;uVHfP-ltfj<(|+%P$8;5p{TR>t5(RwiIcZ3nsQVN- zI}A4Oala0l4=hC<3gkJ|dhnFO66#?bsX5%XO&Lk+NQ9Ymha7B#e8MXo8pPW93>?H_ zvL|U}V%=r=GNN3$a%kA)sgySr^6oOGtO1t1Q0eN>OfZ&cT$$7?gdU=?k)!N9N_n*I zOcEdcPhS9Cb5?tmY(>NIk>WfY3uOvt}wI zt%N~U zBq~g})uJXhV7o6`?CDRiT@ZLk6)M*l(IRc=r|DtNY{ZL<~UyMUj!a;mz}j$psNdi&@> zz!BMXN2DjBo%|iLJyLGBta7e%Mf5#D3DpH;L44@()JXMiqc9s}~1{_stfoAE_N_tUIz0=yDj?IIW z6(9MVc~I6&uXev_K@`2VZkox90onZI%9+rE**zb@j2CQUgvmP_e170vToFqj|G3z| zp0_TV!x!qyPH*LUvvCcGo6*We?D&3Hv<5$rY@5sLyW4S@v=l;b6!q|6fnClccf-3? zt#=El)x~j+re4QR_KJ2b=Ub#$R2szP(}c-Jhu=CybG8>=sk^QE zJaIv1F`LYT{G*$l=Z}F^^{G^>y2EEfPiZ_t@BdgCv0zr`!;j>6Lo!#@nTb3KjxRk&jk7iQ7|j~Fk9zlof4szWit~`6j~boL;dWQg zsHe|M2gHB|R#4`?=qEj6#3N_SJ5$^hmTt1gI8{E~{%sWMVjGQ{=8ij3KP`2)A8+nv z{$EJ8|0(nTnQY%j{`<&(ANln^-$(xY$bTRCfxArik^esO-$(xY$bTRC|M!vqKgqS( z7#LYN|I}F*VPL46|K(i!_K|-j%tJ&Y+(l1tIX~d$aq$CzcVfc@5hwvM14-J*taayw zcRLw7#+YPVB>;iL;nI1)TU|+_YRx)n(nI$u5EEsUT8&TYVZLosPJD^08OfD6u|qkU z(04*Fq00TH5mH?}-?eS+_`&O>s#2=hwr?8GU*=Ix@jgp-Ah51{x~#X% zz8tZy938$l%dGj7I79uTK#zb1Gomm))DnvLdWbU(BcUg%1M!x)3WwS2=bo}2FO}1t z!f*$Ffxez#W;bfDQB~1Z$4vqJl-R;n(+8HLz8-p;mkVUHxl`6Tb)!ryn*P_8cdW2wf$Al+V?!KUp2u?>bRtQ7pmv4r~N*u@$<9pUoZS$*BHOO{QjP5-#q}o zj%xq$8QdR)`-AY?LHJKH?LS_I|0SlKV;Dd!24LDjzm#d;zSMt(Y5#+Y@ea}k_O;>f zI@e2jfOYN7H~(DM#ywvkJaYVB*R?VJow|19|5(@leRSL^igW`oL?{m!9d|x9#7^W@ ztF-@25&AJnbSWR!0j2}KGa(;CN0(0>Hf3_wm0->Uu=zP#Q#^+qj?UhU8(uU3akfj} z9H;?1gOQIJit*r-cP}G}TTmv#C4?kM@0c`S_%XNu%tu`1Y+(knv~BvYhbFJaqNK&C zUoSKvH-lbYM}wwQuF(|Jhh$ki6K8lp5WAhFlW6QG-+f`Q7l}zC6Oo}83dusK1Z&qG zIp$NbhLYy~{*%IZI7!E-mY^0}0FMK#=C%H6zNNGbwCfWm0a>MaKCSWT^coU+9~-X1 z^t}8>scZS?NE6~Hwta8css#KlkO*It$GhQVrQa=V+osfwy+xgn}x zD4xt)5HaOz2ZH087*@kIq~h9zkQ{A9@Nju=9_VFj=XbAV`j|1ZHgxMSKo$1GKjvul=FDP3j5% zIsS-pMubMAV-O{ptif~K61uodKT%n(BJ;|emP`0>B>UJqp;44DLisO-#o>-5P0Dm7L|sqdXwqg z(^}l#d?4!?J1FlCZ!*erU*XxjX!7jSEeC&x>-$%R)B zFLq8p^;|)3TNQG%|S!HU$ z-JV?R?kxttk^ zAg?a4n$~G;mUt_A!EU4Z*8`THaOW9NKI)avsj6ruSTe_}!pzx_TN9)1+DrJGpnApU zzOHaV922296V6SxRWTckJW40pG;SeyBQ`L!O$iNbX=mMSX}=jY1|JX0>+|hs{J6yF zfD~F-L(eM^_zacq>F9vo&#CbP7y3oa?bU(kKC)tD0V{$7aiDYE;?}ude&bvpW_+vB zNBVm4QG3vYw&ScKcs2@E; z{K%$#)l6{H(gvkhJ91=crC%vBR7ZS?K`bD!#&$N1+;GU^$~j8%9LHl)<|9zLj{Q@* z?k&aEKtid4TGK)`CU;ZQuF+$N*61dT$lHJRgf|R2kxsW);%}tuhCZPDDM+@F>2%_e z@*5pw%>%t5TytAhZ><{E`Z+y$nVK1ULl~tG>F~VgKdy*8JWRV}H(Ky@*Cjk&neGD`fydR-tM@ZfOSKD~kNrtU-% z{#xJ3Et_0;9Cp<$(7mot7m#{H=TBXHK7{32wi(ty;eB#3Yj+7~Y9$z8(;Xm((@Ltz z{4~Hp`Qc&{>hYU)&?>Pe2GBIt6uue0sgMgFE)Vr02(3AQas8#S!XJ(62Xd*eM+7sz zzA_jek*D(WjSwSRG-dI|1=Ekv9e+i}8j~)MW~hKB??z@RV8{}YtOPMxrC!RKCZ>fQ z(Si~bjt!6AZ>_Lj^U~)@<^rS*J1FwwlW83^o_(4D3z2wg<#1N z(nEoBQ|^of~JqCODesC)m_$;L+6_Fcq8QT+6yV31@l+Kh&OZN$UAcL!v~i(Eb26-E6oHqbK^7^ z%@?h9Gds?%I}+pyVS8~=3V^xsmwO=Zn!EQ}uY4c&6}0gNw%K-fZXr-@Y_4}zCeqCt zD{@9fS>DWz7Z6OV2LtBD7k(42pJ`R%s68znu&cK@Tb#D5P<+yT(b|R082bu2Y%ml4;2m+=z#yj$2A(}N5hVjis{00K&@+yeTjb!7m z%Q=;n%=mSVn{l616R60kqI}!dx|lfSD?eR^MPR2UW~!nc`*p>=mtyrC+REyRlav}^ zUCnAu1mcX zj2C@-z<^WJ$QuKjENNGgiO4ilLz>h+suFhIk!TPyD#)1=YtHce!!Oy z#0MQ(Q4kA*#A9=9X=2tZfLAXfBn7r&(giS|1$q2x@X5e2%!d`d(*#|?g3xw|9^Dv4>sl@wu`0Hy*(8O#gF>B?3p?&{Zb)z3e)P|OO2#MY+JBZ<|sliSC%aPq6^U<*PxV=N~gjIcC5 zDwwS%3D?Hn8!*sebUoFQeXzE>QII-?4E@rrm_$mSu|f2(G_j`T^}@NvN~uY<1N|-goxTIgG=tO*E%XISxQ{Y!ao%#70&SK zU2+;G35iCMVJ9|$aK3(5Ars6L8nzjI3XX;S#Ir!l6{kh}oltW|HI0&V=*(numSX7ck@Qjn8@ezldPRHSRGV}Omh?T(FET~gx@HfHR~J8+L{RwOg!JNDe- zR%-GUbpn0+u;f_>+O&sje54b5LSLJ#JhtkK3|FMgfj4}zGPB?{<`|1F%+`*cn2;!9 z@|n7`%ctS?t~l=VJ&377s(!5G3Yg-`_BrK0Dolx)`P1aw8+MORk{ zbQS3Q3#!0^;GmJ_7UdH7ua`UlN{vEPa0QHKpnKmTwcs zg@cj&MHBWS3A!;_sf{KvYRH!bhx64b$tt|n0l=bi8tx96Yts7^H@j=b1Ys^vQC@*A zG&s;{3_^@q-_%T8#D?GjW6+Fipn&s%e%$4_I8@5ptg741(x>bVQGDHo%2gzCjp?(5QL7r`a^MWWiGTR<|9w z5_)3piYJcJc@E61XjJgK z7`9;pR)e)Dv<2S2&!y5$y_)$n6Q(^ZP2BB!d#o%TyE#_>oL0v8hiT7qBsfSnRK1Z6HUoFZVRmbuEKOel>Cg_C+0}b4<07RDR6mRRy|vX z(|L$zH4>p+kAlOLOjB7lu!G0(TK?(0xBj2T__LZ*aBgrTeHJNK|n%`~A zz;WgBCC^BUei>xt34U>2eQapj166GO(0trE7I^`^F22Zl3OMB=@7^!&WGXRDj|_=n z@*YRC)gRB=d0#ml&T+4h!CdXN;>CnD?Oh=}CRbSr96fz#C4FAYey#F=?)qIBV>i#8 z(yAV?w2IU(e^XjTh1`c)xGk-Ql70X`aWo@oJqDCkGvy#7qPX(16>%KerC4!v)vUx! zA|jpD(n9SNvq+e>g=8xpyS*}qbk>ncHBcr^wjq59sn5jzNk|qu=6PY>hP;MsHc8}5 zQG@}BXuvNT?bpeD{#sO^r@~5;PxqUSxd4%70a#isH?R3^U^xIdu-x;Pfn|-q8CW() z90Uw3pZ_+nY^(?zSg!jyuxtw)SbjKyn85Vgz%sZx*4pm_%fH!}`(Kpu{CQy6^rd@z zM`W%4V})!|^Q^C^KL(aZ!?|t-mM#6D3Q~>$yl;mW!25{*#QO?C3veo%hFAr2nn>!B z?Y42%&wO0u>s!8St9uc+oeo+-=pE5HZHDx?rCqA*D0sjhdqV~CmpC8{7NVaJW@alnMtW}%Q*qKCH}fY$E_CLiidVso!(AxC>NmjB%A0FoCJx6P#Kf55uC9Jxkml68SRz3g43bv zND)$+Mb1a{{6vBm?I?l1WW}u(F1!nl+2h?uEE^KxYur;V?QECVA3wlp1Y@S2dF^yQ zCdRXBPRJ!F24Rw00d3ulz>JwL29In#+H$I#7+q2B6?iVuAVloj?H))M7qIr8kK1-= zvJ-8+uoasabX2lkfaB4w8<@s`T_RG5zMY-AJG%@Gvvt6B>?`K2KMI*S$Zmwp(T*)p zuJfMN!g@#_bj&pMIkEu*%XuXUe>bpvH~9Zb;P(%~|K9_C_qqQ*_uuD!$>xt;JZks3 z|33HM=l=WLf1mq*&am9){`=g2pZotY_y1=ZAUg;1pBUgq^p&A3pu2hs{%aW^@R9!& z&XgC%{Q{g3#aplVrRo!_2O)8AFSijRWzB=9G!+)Kphzezy#!N|OR8y6nq&6_d*L9^ zx)kX(5?1tTgP)Z&tUpN+8bg~#8L*+g5O>f(nSQf_;W&-;v4j1QqxtauTM$f>y(Kut z_A#94&;1!msv3?u(?zbFcEp)v#$;uGVmL4%$XJ28rbcj^PaJ^fD9nT zoR8567%T8pMFil(N%Nk+%kF4bZ{rdu=*NGudvXf)-$9(fH~jAr=iN*0S0c{4&*1*j z`>$Sl|5<{2_l^HA5nLQwy*6n8!JYcW1Q+;H{}qC3Vz$BZ;95QFd*eI$6EJFf*DRL5 zIER6Qx+kNSn%pmBZYfI9$+VCftnlV|K#oAxJ=6HzJk`$gQzK|Cs9-0gtx@@dj z^fk<(h}OWOuh42~N)<=BoLOXWltwW>iP7afP9}e7nrNGEzrYJDqWtjGz$Fq#G8beA zpSHQ2F#>4DwN(D^Yk+1>G;VSZAql5L`RBkB;GXUm;GXV-O7Wk2x=PV&A&C4|R{-a5 z0YLQ!a1LYlCB;=>t0#vCk#zu_!xfM1)GE|Pf|CfZ{dl3actW!eV@V9SimBgn!(n4R zYiKh6XLpFMscITwqtXsQ^$8ivyLz z%KOdcPq2gK(`-5MzyGcrZi+@!sZAR_D7jG%L(SYOhdXbT!@2yP4R;4(>S%hNTFvYjhcGBbKlGh z+cUDc{b(8v%#UL*w!WE=ixW52joCg6_L=oOf~sF%A@q2D9Rly1hxb`Gr^YQ~J`HB{ z2~IWjm?XXcFE@xMMh#{6N3gJwSgq$ojg8(o!pKnBL@}hEXYv;f;i;S%(kc~_=}JV( zue;d5f&}^O2}Ci%3RlwC7-jJik8MbO0%v2oZIw_UpYKXofI`LyKUjsMFfu=y|JE#5 zLK%Iys%d}%y5fsJ_3D364oj6Rebbix^2!a1UWHM9LLwzSiam<)g_FmD&DX6i0}{n= znXU&80pAQN)S*6W!#o*6eu|zTNe7*Zt7mcgp?Xx62ka}v0Z9H=)uKk~zZi#|Uc7}C zg725ph@2cyb$Iv9J_Xb)lK<()>6SWoGiYi}vBpQvVNr4y6jWuVu;vOIFe6XZ{Rr)K zH5TBIbjaAIjJgGRh4yJ7)=oQw;VYR@HT6Q>FkF+wX6ZVM`I!sKcf33g`IVPSHV@*B zRJe!Rb}oLeYB~d|ntZ5q)guE>akTB-vAi|+>n1x-j{pcaJ#1h}fB-P4+XWod{ef`t zfC$$CRdTB5w?SRY8-$z5=%?pU6!Z?++e8w7^MMn^$B!akM?vUBlEv;4T+N>Z_eCeO za&sDh;F9|DKE_N9Pr~|J-*C5BQ7jB%v~;BE5bkra$X#IJ)^)%TFf~@}t_aqYt06vIxkRJt^umFR>&!smR3x z09=gU04}#$DRNk)CtzAjzCUVz_KRO)RlMW_Q55s*X7PP>(Q)c5M^cl5PdgETwV|Cv z=@SjgbF50B<+x?q24B1}o-jLD$fvEYO04fe^O?`OE#Kg)u*?9s&XFt5P)q*7@s<&5JL3^h~Wo?fmQaIqA)pZCg+eKpi3(g!A&97 z;8hlM5U-Mo&%sP>8FTv6QqLxR$U>va;mYd*VB2OOww1iWwkAKZt*P)2Y-{pQ*jD8y zwiUU>wq-zUn|Fh4vz-d?Bo_fS%b}51#@(aq6djZ1#-v~@rXt=x@*^!J&aHVu{;YYS zD5|1P?z2{aI;VV0O`gsmPLNpXC;tF5l`VZLc8GpM$xKh#LhV;3SIR`)5iQMNEF-i@ z!!bH4p3fdge9YQq^Vhi@(M7)F8r})`JJ;|w=U-gIUJ3zlf$t?9<=x*H(z<8M2xCc` z3J2-(tH|z45OzTIcyNMAJvU_DSRYN)P;KZLb&5b8C1~Ym)W}zlM_{ zuZ1=%T?19%#9yB|JMYR!+l0*LWbni-#{skMsDrFQ<~r}>X(QwXANV<;@-(!;n4cr6 zZa@j^b@BOb67uoTn^~d4WxOOS3+nEtbKTh$I3OiQ2YVr?)7zdA)3|mlr_-BGzJYW2b^a|K*UR!x zRnE)kAB`2R2tL3J@Zfsv_3JamO6@>9NwOMM;_Eu2={O*l^Az#LrLEw;yZnX8m6YZT}(b{~6leNB#S#e;@UKs)p~Q z{(aQHkNWpf|32#9+@X0N_3xwpeboOqqW*uD({eDe{fX0_5K`0`gMonXK>b=y3w-2% z4VFpjqw_y#pVb{TM(X-Bm#n!e6td7W*Dm@Ro&Jc>0~!*Q9*&4gakX(V|8wi{NHrmU z8vDx!$Q~Un9+1gFgmy(FXmI}Wy0t9NR!_h6z{j?x5IQ$c&R(z7+8=y=3c_g|0q6E+ z6)X^(uhRIO`!p1s!`B(Q5Lx!sN&Us)reeAC>E>nt_e|}Hx7kLNZS4eisoCLT^hDl8 zRPd#fz4O^#3}NeFD{52 z%!Rf0;gaVZjlQ?Zk3XNNsyf^S?JbHp8!VFUEmG_$dZdRnO2}YV1eKiCpQ+M2YVti! zZ%B_TX9KcZ(OB7|od%{mh2Br6Tp&)LYGGQpuYWJrx%tu18;p<7>&0oRWA<}`)Atzl zWp~)j%6sEB`IjPuyv|(&!RCl;`g~=t zAgkV6isMAaArZA^O9R;}LEt2ZLQR^;p=9Bgy@d4y@MGLTb3!QYq{~8N7M=-+Y~KL( zBfOdN?!#ygYz6_{a87zhjV}bstm2K1hf)D+NhCCs+CTI%xR2lYpF;;V5 zeYli_Cfrr>%Eg#qB$_`=8R^oOd=iw?@+o66f-t_VF+C%OE%H+gPgOKu+LK1vQrIq^ zmzqs{Mi_c@|s6J`vFjloHdHj^y z>S5{LM2XYG+K1d%LYX2^s|X+VzIzsbCBVM>4DQe5{h9o~cqad|WdH7o_%D(DD526|;F|ES zCi}pb`md1ve_P7t6nr)Ic5uh}b7FtIigAB2E>xWgglOQt$%D%A|J&wez?g6bzl4uI zi&Is1s5M|&j0!L&%;Q)Z*q4|;RipSoRHC26VibZKV#!-uN+E!WnXmw2U~8uyd6#YD zN=``wfTLFX_{3yIAJlsO!scb(!QI=S}NN5}L1=?up2lvMi zGzhfA#8_c6CzyukY}A|LnQ0LWZ|8mIL0rCn0T~LniX4yXkmF1y#qxhIdGfVLimf$! z?W)AC8y+pIYlyiM4Cg~GM9mvnV}U8FcY_VWgE_g1#5d;UZ_f#8A?A2-sx|=r&&EWg z*?zfK93K>I$|>nP1CsHOa}9E++x4q*>O7CpTBdpE1Z*kZ&VshAm7z-$M{MB2${+HA zJJmR|l(@DZ>9ki-5=5t{>=q1#@3b9^+htREcCQ`wfwDRv=!>m8x?%QeO|8+@CS(Oc zY=CvpGGt_1HJ>@jXshtqUtbYEP%hl#s6W&HuX$qgRL+3#7*c~plJmO$#xk^B|yAv zpM;BYEc4pQ+PLIZTsj=$1H}x~_c}0MTr=!oZp}qn8?2`bnKl6^z{+sj-*mu4Q_HWDC+^GLp&Ys-*8YI}T z!bn;69L1){Xa1a3lQ?;a;Iq$+Nv){LNUVQhF{*1n)pM!p6^3v#)rvD0xP|vp&p%*r z(q3F5&~5KFu!bE?oeo#O=!K2@ zKCXIymS-J8=%R886$9bwW#l9nmU}=KQ&F&D-d}t(CHzyuJVc&OKKbrcdTe;9QN7XE z!;jSa9H#-2Qf@6l>NB*1f%lf7o7zKT#8g7jW=q&%N_!!dic$pW8lkG6!O3$C$(>*^GpFWW*OwPh7tOuy z{1A>q0fwuzKLh76NF>1Pj#&p$?v!pafK@F@_luu87y z5yU&sm}a>n3eGuV7osiX84JDcr-b7!x4)zPu%~bYhGfiOix$1$Iy&nZqOUS+=X)Vy zh_vY4qThmBFcPixh2YymgrAkcN{*9LrytPU?XGLAbf>5B*Haen^P;VNW$uJx{>Cy0 z>18Ajy<1SQ7DD+l_ijmeRS0+2dYYMa&T=ij3Gc%^`l=AdT8>kEHwSk3Q3gg-I_7cG zq1H8%#di_&qrVg}N5`O0DTY6O9G~$eQ_~gnF_a#tFryJDbO|tc4+G;z;OU!I!p+q* z$U+t-p0!}=?f!VwpdFn@EaR*?@ofhEJl{^Nrz)N)T_PF1vp(eKf%SM2NrXuXZk{xa zuQ|ocEhmgllKe>kH3sV~oB3>rV83WoBXH&HBoeBkR6P%Y6tT3dokCSAW{onOEs7)Bnd8u%$H5< z2G!j2vFWt70 zlk>^!xPt*2W=--ByQst6)#uBrq)$wD%BD11k4ViVD48Zt2^HaA%*k-b*;ae$M#i)< zp^nbZM^dlJ9kE@Cue>}3_MsLNG<~zvT!A|d`?j;;$eFlO4NsRFk3aVUACAq8y4f() zy6q;7lYPzo3U;glY4c+ovaOJP4wq#|*A%k~-$B+R73*Q@MJ|Fuy%@0N6BL~{4NO(o zeNo}d!7T>1IM$%}dEi~MEffm2;T#P(flvG=&vqfZfXDJDT07e?G|FLrB}3HaBN;?_{m1Hs8(?9mA6CU0%k*$}LV zeiss$Gj!xUjH;H^lH1`}tP}{K_PVvIHJ5wF>`Igg%U2r90Wo5^-W^+CSzf4_y>F7i zTMZ`$nqr=v>6IJpUBI+we8uOb$P3dNF8>e0A6&1f4D$6z;+F7FRbe2^PXEscKi@6k zSG_U;5dLdgu*H-P!{Yea;L}+B5p$02^Y0#J7=VYF8REW{UHHA0odc+4zy8<@>NihF z%}}FLLE*nKd1hW#*jEWC+jIemk=woOnsymtFv*ATG$;lzt8v zygp@*6X)rhlifU!!nCoDuT<4c`PyU48iGm6HD@ce>JdCGPfcGoc3Wt_ra$(vx^8B( z3EswPxgm`_Zl^@|>~r*W9#JO%ynCx`o=H$P|oUrG4?CiDN1@IOTUhsggB`5z+x zL*##m{11`;A@V;&{)fo_5c&U4MgBii#$RYf* zAG)mmvY_}lrvs}41161&477lf`ceyVyIjS#j>l|#;7@{FFm)bjy;PvDHdjd*f)at!n1 zC-I-p$1kMtcW>!mQ~00H$uFevzxxCa=jGwN{CCgGzm<^x?rr@K5%RE1myla~`P{GV zzTbV-{}Cb2kr=Vsf&Qy)V)+R#TX2t%-TQ4~03mNJ9=aps`HF@E;XequGJud%+-(!X zgk=fGqkN5&<>Bwwd2`J|-Gkh{cU}j>D;$M{mk<@@e?eXTG8Deynzi%F6cLqJp$Me6fYl&|%E{Q3$079;FOUT(B zYkR`P0EC?Gj*u4z^x;uY*SzN zgOHO@gY7{7AmsG_hX{G4W6v!iUqty%$hD*lMZXhr|2%oLB?H>0vCHFm*8WhWUA*K>&X#_zJBv^&rTtqZeqw=1jZ_-EZT1QEUl^3fewj0yCpDr z>YCG^;6eZ!sRK`xIU0z*EY7U#KjNNJ)$YR@1-92HKVQXyRQcO9vG`w36Tbya6HfxB ziBayRiSfVqPwr`CSjFj#^!-N23w|Tyi5bnOfNA3VpQnkzHcqmqqM>$enc<1ObW6Yn z1U`9m{kBak;J;OFmH)QrrYm}xa1(5_2Y0n9Pt)OtzTD7a#LIXiF{LBci#F1!`o)ZO z-ae}r)l%$v7U9o zX+4nkF5hwQB&=$qLiJCfVaiqy6dX95*SJih zO#PkX6)h1|OFLK7?KhXB1{>eHLkc z1;j*#_dPXxOR}w6`cQk%HXXrj6=1~qVJP+`DJxviO<2EI-)*uXNI9GAn7&PZufFfO z+*aQw!S1T>!E7koV$a)#40N0?!yN8sitT{B^`F}{DKep%7XFwiF5(le830t@1^-CM z4c-2ZkXO{)5^}$LLjFR_)bUwsuqq*bc9Y9}Bd8;oUU)9;1Gsc%1J$LlM4iHXE%fg51LOG>x zeTF(;Vu9l%;7&=6NQm@`bLWK4*&`S?{<9y*XwmcIWG$jJ;6pQOZwnqW`G5yn>;&JJpcZ%mcthPL;=fNVe*f&pR3@a#Y z73qjFAp9ByqH0Iol0SXv7oYQ_ZlY2p=X&qS_Yru=EARbjOE}&63YO2HR)e6_C3~36 zf%(0@+~&K!{6NSZZvS3ij%!B8%qH6RR)hRAz0K`Raop`paZD}&&wDSh0s5HkLamTa zSv!Kj-le9jt}6QIAmp=>)=n7tWU0kxq;nq$(-B@NM?dZWsnP8C1jl!e$O(xMY-^0M zaZFh)d*_0?O#_f5A*%K9NG%ZBu?dWlpDpLg)=*zHd_dtkbfA7i#M5|&K-~dJyquhl z8}Z3K%vpjCUSwtM6-J|&U$)DrG|H6LM)_yxk^uY|G^NP5-6K3yw;YvwZGs;D} z$_pfg=f0$ceW}C}n+FuxGvv!7g#$AIM0+BV|8a81R0yV+mM&UTd4ZgfSa#T30b*Ky zLap0j;f_hk&yro`iAKXkl{x!$#teagv12hs#bPSe+%)_K&qcAnSt~vjTfKcy$D{&D z{=i3R(VWWD^5MWta{xOZ@n9W;{L8gs{w9#ZF2haJjJ(MZ^`1FKsda%xYiTv<1**9= zp~9!akClXBGol`mJYq_NSUi|{F_+GlADbgfoRS_EBgur$1lp+ovQkM}jkrXwut;=R z0YoMvh$eX|2(!nnJag$oSO%kRIX@A`%vP+toT`hnIlPW^u91M!drZjB`ZfMsCCh4{ zD#I3@Sq46`zQT@tO)FR`cESw>J9}L6sPmBc^$a*I>UA))4w@EfWH)UWk#lZN>A+5i z`P=Rco2_+^N?+RlW3IS9SZ#7TqS1fw-Bq!u$_mLIL@bwp>AZ~Um-oCXw?%l9XT7P; zCib)+3Nv%@yyZ-Zt>Nx4c@rbmls2_-Tln(6Htl5-oy)aOuQ^Mt;%l_4nG>5{LwlA4 zN?SW+y=Fno6Bp*%nD|+zw+EN@`z^NSHL)|@DJ8uH)Co1?(1~ycs|y;yaNgYM7e|Y6 z{!m}qh9Mjp^dX8$=a(&umGax=dL7xv3ze^I*)X2V^?oz1vTp0nJi0p6UIEz4YuQ$F z5d7DnfeI2#OwcwcbnL+E0QU0SB4Lm{%NZZy>91OGPSjwhi#sDvfUFoJ0;?UXObbX` zZ1C7f$)d$?i}3%ex#A%J>aN5(U>wc^%oQKKj#!_bb!g=M!LE zi>-Uhr3t(#k>G&Z;;o|V-2VD)lpK@)u)S)M0n5o_T41a|oac~qtTw$mTp&kNy~ddo zUs{lL0>G4*;$Y`38$qERUxque@~3XkTY(p(kM#mDIi5mKQP<}n&KmQBt&jJZTm*p0 zSMD)+Hvp3dVXH;gc^1s){XHiCIr#rVO#XMl|G&iK54ry#_dn$Rhur^=`+vF_`;hw| za{oi_f5`n0x&I;e-(8RW@8teJv%p`-%3sjX{Bgnfy$Wi>DZpO-i(Bz`PyW}~pIFck z4QhK*+{f)+_4d@TQeH|2cS~6%9pexQ?ndJv8bLE2w`FW~@*ePbWi&#r8M#OZ!~lVV z!By33XFTgEFtwMX#*lL{j~lUobQOWXk;>{e>yWC@{MN^Q)au;$6{!Z;TPWZ)MtpA}MMSMk24*c%d@`uwW04=Nw(dw-0j9>{Gxsj4!)fujNiW63WVfk_T+2&F2XY$A=KteqGF1DY8V6 zeLn-Q{~q1~WccbRkAZ!|ESox5p>N|Q9QBs#rS7%*)4nSXrx!MyCtS@Qv%K3bq4^}Cds8?PhqcHeRJ?04pwj&-t7_RMx z{St*=eRg#MJfnFvbJN3Sk;ubhMqevHh9wq)a6{K^E4rI$S{L#ux$(xA3w(=K0y!T{h@=N@V0YKIJNmC9KTuzMpYrCqoARCx%F3au zjDLNDEs@sll9^r)X*=KDo=}=Gx^XXp2L_1XjhT~nIzXYys^`_TK8jRO!)@3$dQrjT zU6`^U-HPB{TWx9vWN$_Agm)r%P~UYcLV+`w*U_n401-TGY7nt2m#M6+@oO+CU0hIw z)@=yOt0zpJW-x7rIH3CEkApA_H@&13Orake0z~ju01-TR4?QHZ_}tR?m2P=|H9!Q9 zaw~$zdJg4VL&iTOryZmXsEfarOnDEei(CJ$E`D_(DF6_`ZwK-D5-3ped_p#w-;d!6 z`5}UzE-zSyIku@!;NrusG<+IAS`zk>^$l{;JkfKyN9IvKvv3CMy`0(r0v9F8pFHp@ z->1AC?x(yB?mY0`_ib@LrC1;YZEBqEiBu>3H}k2-d?`szb!9nD^FC%_P%nHH#P6oO zFYV8lro_Qeo|TbE9D}8wgAjQ26DGcgU3-&(wM+6oU7VM_!qfZnswt{f8t@oxEY;lC z*%!vLmosoWqq!NO5{fiqRrJ*?xQ1*wtRY`O*b#J0^ahL)zg2V}lo?mXLhV28z<-T8 zS6(Ue`I?PW&*Fy1A=h&ay7GqXaEOpbw<)e9fDC;}TQN_V=n?(L0q8}UmrFwf3puw0 z-1FI2G+ceae)q9^$$=gr65?0Eu+K!;m3k8^k=BOg)U=wHGo3YkZqJ^%Jqd$()Mbbi zMS&kPFzg+NKtF(_F(`|!iwMjIkiS!1lEg@4Gp4+qGcg71cP|6>ySoLv~auM zZ5)gzj1b#J#Vu9@KL^rHtXOOP4p=G&mlNXXu^15a9{)t(iiIB=oq|i|dC64Z%HTVO zJ`_0H8tCe#&9)ObN2a&HqR=C2HMQvzRE1;J#Er@(Pses_soa)6@cB|aN}0m$z)U^0 zS<;9=MqPA9SnU^hgVbr)#`mR=KD}2WYJf*aM)(*dg#e{ z=fc$zeHFNS`8&zkG(zJc!+TFCxpaa`Do?1U(|D<-ae4bTWGOP0GfmJ}VI_~7MDyIl z?i%8a4u5EfUyf8o{(*n53gI=%d@x=M)1E{mdFxj`6e{MGmOyCNsP&^FPW`)z_yM*& zXyq|e0N0l2jmbzW!qvLsIWjchH&zHIhcTfB_-JPd+JKbFl0Z#okOuxf$ zljP{WBCh&VMSN_4Li|TX9Q>{#UJa;-FZ{V8J_Af%gfdT`}|Ku4UV?5)myM|>pilyLG79r4Mj`ACz&=%cPWl_@Mw#enTU5i4wc@A zhDBGI)w-?pA=O6bsK&kLEx+xEd&A#%#AlzA_~Utx?yh{hv%tT1smR{#wX|3=d zokzH}z+0^x%(pnQZ=BS>H_Z&s?XYd@>JmYzPqzhYonJm(m~RPNjb6kPSiJbWw2el- zvAN%A7xR41@GWa}G`%h}*wg7kylLeio)()OIU7TPcN zOzTb25DqfvHC|BRk=jVDj=7w*fXg|>ilG6SE;>3eDXOp?7_1G`z+n_TqCylm#wt#a zt2QhRwg-BDIK7XYT;N^uCc03&x5xH$yVxSk+%6~nqY^G=7Dd;R^m5p~xU6=7bE>)U z7%900C+9Hi>xwLLix(X7qsdwD!4~tr)x^U%D7C%Z&gV%VrU`WRK4g>mBy^N&1Ei-sHa|S7nVN! z(=Fl9wJaK;*@~8T@Vf^9zpW3B>{_0=d%c`K5}|5gR{ z5cD~)AA4(B&~8fcrO8+<@9r<8UTF=kVJNdMD8z^GDK_cMP{JQmY-s9EW=5fiEQh+t5<5H> zzpe0*bWKjLhJwF}QNLsm=ejznbDI1F1m##F4*;ei=l(DQBZJwof$=iE zgQ)z;a+{s8Dua{6x{G5xX4|#h(6sjbcJX+2tMl%0i&bi+TFbM}VS`bVsamUx-f4#u zJa)&!(+(+>wRNZC+QOU9U2=u9wN7%5H}i{GeX8}&7uPM#c0rnwA|I<*rf4F4>8BBO zNPK8@!Q`Cw1a_r89eaz|bS7%TNa{HBET3zk7pe0JAxm}BY?<~1C=X)GA;#i(mZUDD zdZD7U64AbV#pWK1q4@0*LiF1;u#illXH*0A1wk{UoWqX| zYJh*xtcQ-kz!2smD8u1D#aSqb1ygT+Mw61tmnP%ZKVJ!-TL!)HE#O=(lTgg*u`JZs zPN9QVb13{`wS8`n^YB;AGPu+yUlhC6n(-P9q%1vV+dE6Vp^|FW`U6ysDshVA0X)+m-YAi0IO(Nhnqj{ z17Q7jA0YnweE_Y$z7O#Ea^7F;ukQmO|M@<^N>W<;_xk`fD&epkA%A}#z#jB(?gQxD z-v_AoyV64pC%}YD+Ah&ds6wiS<_$~hQvuuu$O7C4K)e4lAtMh0upPnp&~Pf?J^%%e z<;BGgXl>7V-HoCp8oRssg0`)@O6gRc+2!WFwu_z!YuBczW=?!RGVJH} zOb7jO(m0LbLuZBBWpH2V<@FDmz;HscATz~eoT~3jK5AFpY{K+K7Qx_ zZhbsK;$(Bnf)le}^#IT&dJmfEHxorB3g;cK(v9&!p^sGPo6Q*0*a+oLKVJx#F)m?1 z-fUQ`c_E1R=|mCqxXidUR&gIBQDyY0Qm$4u#oTrKPo4PmErVi$(770%z!4S|8Gc$E zs={i>%um`ryhihxQQE$`9M5VV0V?r4zg6N@^pbk+EAe)}&B3dGplUV;2cxe(H$6~) zKEeBHf)xUjzp+0BvI3?73Y)wP+YfxtYd8H&aVC(o;^}iKQ6Itic=E;}1>02O3ZlZ# z8lXOV)hJRKJw*EUb~YG`t)$F50@L~N0&ZGC=T8dLbQ8TMtq?`MlIgE1>F0&-ZUktz z2d6{!ETbip#6X&YuY}3fn!N)q%>HpBVAb~%R?jM`jpipHu_LW2te%W^-9%E%-3`_? zh|;(*rrl{Z@KI2`W2}f8&N6wlYq|Jc<^xI`xY52}tGi>uDh{N8E4?MKEDfL{Vg1~v3lkjxEW(F+6QmR%>83HYGmky-jGULH&-T%o zmDg8{PCC}LJc)2O=l{1>GDpP^~+bd zj@2-XgUmsK?1K(nv(d}5bHX%oa|~l+WjDT%v<&oyvd?W*n^`ul z_p`XG(zVd`hSK%RTrhudU|wMvgviuhuTH-dR$X~dPwKpOqLL=$=5m0i5{4ks$s^41 zOb?RyDp?adqWgee3qQ9c&utVHG=c0J5E_W)l547dChThoF&{6(_3}1$gDX;abuK&( zTe2!B-uI4X-Ye;*j$C|SI!0L17*yQhB^xTz>R-+;1nXjzrjbHx%+-8c>Srbkx!8mt zNNWSG7HOsd&R|S!oNAm1z3^gpQz-$1Z@iibN*W8>hlBn=o>I~|loODVVsj~-rar=- z^;K4Hd_;!a*E>?=>7p@%C!o_FsXZ=B!Wf$=gRC!yEaO6QD|sLB2thI2upb_YAotah z1}tqzYTx?gYpG-?%M3ThW#RmD$!9kNhAIhMMn082p4=~Eh2DRT&E^Xfh$We#9?3{+ zq-vHMsv(w31SW^9I>(f7`ydh%gAbns(j=*}7ZxUEnPNNP06Kb0 z*OHNolb37Axm*I-u8WEbsJteE_gmJ+dav2l1W}u_3N1d0n2#KO>a}3cR=aO?p5wfD z-BJ693urH6{ZYZN@+lo*9I)tF#Y`dClT8cgHFsSrymWQa?UylBgT1Hkzj{MD6(s>* zgt_8aNr4~;iy!Hb*?qujH_*LCZOY9)A3h^pVuTA%zMPn+{B}YTy*O@Oa%pA@M_p(P zxYgKH(YHe)}!@PwbBsaE7 z5cM`!o~<+EwK_w+;%j3a33(kkx!x;FD2JBLs@izI76Qa|=c~12bJ&tMR+Te_u^^k4 zwu~RBqjCqz=&=G%45GPa0=@k+N^4c~;*m=Aj%cb9Slb~ex2Y??EjpHfxnQkMPM&?6 zkXPa>^wRrcDyr*hOJ~p;X8f(Br+yRoa=<26)TJ7?Q$V>smW^p~zGkvlxO2I{Jk`8P zFTQ{>Tq;tulS}>s?YVC!v3kxV+TZ89q=&9b6!(O7$odc*`g8f0$|6vN3GhIf2TW>)O*`NZMs&(M)$Y9^*TD zht>!+Y{yOO80M*cvT3bl=ESC2aC}r1bs&L+QZ(>o-W)#-W>w>yP@-@8(7MEfozkpL zsL^U@578KcJ-LyIVJ3@@=o>Ds%-k{(+lT6xCz->rHAH;A`_n{DM0ZAb=T znckyT=bd1JTq;cbN6V{tT=l`hsKiM5rd!thLGp-o1gV+xdtuJ`KKo0LxE55b$7ywA zzi1u$LdILLFNA2g$4z4 z4gDyu>$>O~vbv9ECbw_{@B&o>nA#N6;{Ea(4CNdS`Vwt6M?!2y2%v_)62>ShVc#9)shqT*KPpGe%zwxFPW|xJhu6*aM0*v% zL9{ZYjuNJA)DPR#@&faVFBWf0@jhb*vb#7O|fstm~@!q{K>GBB7GK@rGe2u0f?)oo?gsG2AvstKy-Fvu9 zNDZ7`mjWML+sVcz9u<9!7R+BgN~KaQhin~KXz>x6=HQHDORC0G@1EuTrV*HI&^jg{ zH&Xo8du@~xfUs#I2dp-Y}%Kv;oej%0r z-6wcBC=UnaUp^@RRvP}h*YrO`!`}-nr-}n;xc9H6;dfv4e?h|^+VTGvx8qfmg+uZ) zd|C~WoenV@4+r{{my^@ruPqO~GE16WTT5!F?8H>ywrrKe6qQ*7hLn$RK8@mUCoT+H zcq5cmx*jzwmkob zDjr6Mb32}@P9^JZOdW1F^KMLC{C-TG0x+iT^oKEZ>iaSEeZZJH7BJU8#?)0!t5J=9 zjHzGVkEzG-9-#L>wPs4*Xs9F$P^8h`K$nopHtkk>#}q&4CiPLRW(BM;ycUsCH<2a8 z7KF5KTd>q~#3)fd2`JD5ecDu5XiAJAww}&{0d(5MGz|JG_gz}qB7=->awBV?Ev3aX zq|MoAI&zdbGaGCX*Z~cw)JOo{Yrk~m=ilZ*^}SQYQ>hj;9Bf@;EHrAN%-2RmQV#lt zox+luh4O@yGFU2}z>1A91Y~axWfc3%Eo;F7FNOVNil=!3FvaI%T#QlNn&NTg!*5OT zoUK^C%P{ho3xi;`G!E-(BWPPv{?Jd#@Sv|YH}Yk+U<3ogUlj>|wFklS_0e1z9U@(I zej3A_&FES}ia-415v>RAttmd3eArzDgek0p{&)MPS_H2ADa8MXSeq#keo0 zb*<|Z?zYqu*zUH}({ez4DH{(=kE770SF)YE*i|>YazEfxhrurJ0~`A*%4{~!`x6(-wDg&Qzc{cYV?@hsx7t85 zrLR^F^{bIwa_T8<((F#rd*m2^G5JaLm|{hP2iV0K=C;TIEF5e0j)hZ_y}f7QwRbGM z&R4BrvFx6O<9oQ}at?^O>JP_dhf2u1Ff}9vWQK2h>e^AUQ`!ev5@JJu9BiV+8^Cm1 z7-xpV08eeF8xw(W1`8LHxfO*o!j2XKV?hz$_%I$CZ-`Bl%t(7A1fIToLuNn2!I z)l79{0no!g|E`CRXyyykR7^q$b*JsHI7B8=x084FLU(_vbex~oryH^iu7T~=v3jM_ zW->VtPG6HS<&2){9WzVw1ZqLf!6aFDSFqAtkfDQhC(yTsBbsPDGgb$G!KhCj9FMU{ z0u(*gCI?*r=d zNdr4LubN8|J*YGCyWwz;9oQzRU~r9Kg|l5#mppHdz7ME3Q942m?Pu&C$T53h(inX? z_f};mTb*?TRjK}VqU)#Hr!`!QnMx_(({`yICf>J+yF>T&u){YeC_C$J<31{mojGAcr=I{R}&XZaQsIK=x}zL8H#xU<^c zyl#Bc7s^TVSYC^^I%firJg4oo;0uf(>!2mzXsg9Fm!T93hz3osckzT;$+^d7bSI|W z7U^)PLt+0)JAPDs*Grpl7u#d7x>LX?nLdW8XYg^1=wq}v)}mL#{mHKfuEU}3I5=Sy z{4EC$*8a}HWq;z}cDEcHrSuC5IPI>ow7G6P>K7+7_mDS>K+44GF)oA9Z}5%rx4t;> z;qny9gY20!R4kH~XE?g^W{P~w+y6xVPH!#2E@yzoAXQ2~_mklUd1Pyg2yv(xQ*1MU zM2nOfQiNlQ4Ut2YQTUQ`hgT6W#&-5o{x=uY9e8G{{&qoqIY}L>YRy34zpa$cN6N1%UT&wvy$u}w-f4nyXqYW zUAGhJR~qIvFp*Z)cFXLqo|wL%Oz7&uV88|m-5w3ze%_9cCDZiVgt}q<+n|Dk$pPC2 z>%GM*TV_>efA6zF4BEJ;;P9Gk3&Y0CdBA^pJtQzdm1gyIaa4r~XN-sXF&_Ne5ANqiPKR7&r|-3cEkX0l8S@R zo9eA6(xuTG>La1gh8$`yf{aeDI0>NZvHJu|p=R&g@Ln9!Tw1{VAA1S?<{c<4FB+fA zt&G}~em1{#!w28F;jsa3_-fPVnYV6u@f{MFFD+lKw-| zr}c{-w5M^H;ynE)pzjy<Y1G;Cx1edTJ`Ahs#I2%B5pZE&8YaHO7w&HIMe2*A4+!;A87c{k;yV|+|6 zUJ`(J8%?2O-4Gd4L|oSKW#a)=%{tr;q^Irq@AcZ600z>}qP;ZamcEi%DD8ix`fyG! z&QXjhawB zH98^Z^)82LpDo_&^eJQ1(W0jn(;qi%jVfM)b)3|qvI+tm@SNWr@cWM#zm}1$l~m0Q zi&8E~>Y(3b5Q3eXsAYq)qNQap`FvpXOI);DI;`S^9I(J7I# z(FEMG_bA1cvEYr`l?;xKZ5iZvdu7M+@rtDzO8R89Zg4lRJ)?d~f4VRiQ)L3>Y~Zqm zKk-74^##ID4tT}Ca=?T37}ba05WUBL-^#W1r?UXW!pc$lm8*M{pD#^nk0a2PyS-Iefw4aM{N5q*AT5P?Sm51*FAr~f<9(8 zxaC-!)L*BVH{kzc1zilVf{q1PLAPR~zh6O*Li@3TE(TaZuTG%2UqO#vDQ%}7c^P_q zw}M{uIg!9I%4E zjR9CepQPa1u=Wx@j{?tSyk9|&xm!U${KpEqiqEY3{R%oM&#QCYvG?_TVKRUfbk^Gy z^ht%b)xJ?V`Zec}t`JQ#eY#<-k8_|*eOJNy(` zHtcR#8NJ{PbsU7TA}v=dyn?o;iz4;RA*aS{6P*asp2lF8Y9HAx@M-I;Tc5peT9^EU z4co&Z@U@u82eKEsugAC1bA>kf<)$_F=zB9M^a{1^5!&QT$@!S3Hf!c(u-7SW%dsf6 zulIRrQtVc^7ognOYw&u}6l(0W>p&ThH9oZv6PPi1esR)T`2xD-QWOronEP%~^Rr$~ zKewwD=HA;CiKlNHsF$-}xwN;KJ)`9hC-#v|B~~&%fJ8>Bf_y`SNmVYM&*lq$!8O~P zG!O8;zh*AfB4%6X7j|?FulzFiN3zXU*x7{+A0qlqG-p#%?1V_3?qf4=fWHKT&gSAr zbZI7V15L4J3Fd8k6ceH-YE3=nXp%1c?rA-k&c_QOkZWeuvi? zE&U;WujRnqT+jY7f}ZiR#;&GgP^gIdI3XmBShyfiHjN%xJ7Dn^ z3Zw!nI%~P2IQE|yH;GaC=U9F>cNoUkxUkYM8AQGOH;!G&NG)Ecl$*xAD&_yw9H9(` z>Fcu38AeH>-X}IBmC4GnwIvFR(ZCeFQ;HAmH|Mzo0?i=)tpBmZ$nJT|miGr;DZ2HJ zra^p=UIdQH{8OW>ZXNJjw)?{OE9min74!+HMBNUmFXb_Xz_co58aban z@QYFJJbxE|3bwlSu_kgzsHpqR&B75{&yZ;;v_=P_WhR~t345FpTzf_D;VHpMa+M>< zN2nEGrR*wA|50PgImY4Dbjz=SK+=GgH%?DWyKa3dRR3IUczIgYA$rdNKj=(>n>9_1 zuM_Ajyli8H8_Vq);<2!_;WYAG0TWW5O)VPFes@aiW9-hkeF@7GfCOISy9BE??dKG9@aX*^PNq2 zI_#_hD&I=qE8lZ71v)hot4>R5ulBL;Eb#TJ_zOB_{Sbfw!()w!HmjwDCcq)tGZa#K=CXpxn zbrk5iP>RTjqaR1VD21UM=w^=t0%-%2j z{3Lqmae18+2&}wH0^nJ5MM{z$!F`a3Qkq<|hL11GOW4i$6j{}DWvru9qt#RzMnJ|W z0rsL~sqQgY#!D|}5Nby#>}r?6?lPNVIcGOsnIn=@sKMn zdoompI3)FE^-8mfEOjAMP;0ur4or)8O@j}adH19h0KhGwB0cy6a2LNrP$sXQ8gBRK6A!XoTG&7H~o9xZ~Au?kMV!-?e$`D z!ZCS({yhSqe_sXY-{0Kp-?ws9+rI1HS5cn4si3dN6nnDxIrs|87S9^ycKe*Gkxjui zoTCOSXyu?r{syuO=sbz}!0tw!GuDa?z_-Kqj%*q3`L+%_h{lb+C4hYc`1Sxo%fOX} zBa>$*YfY^+E(y#SR#flsFf8V=tI)}Yw~ZWO2wd&~fNz7TkzQ@=0r)n&N&LF$C)JwM zJ?F1U)bXEN9M@q#h;_B^O}DbVP`ftmkV(>B1P7X8ot^24V(PtwuxEV5C#(JrV$XKs zcKcjC7-ALldbeizG57SLR@!sbzWB*EH`7L|l*{IFEK*fd483wu9aWvg%Srj&=vS|n z!;1Q(R~#J+Fyf8-WL6CA%L{n=aBx?f>8(U_*rYk#JC28MAbb(G@c3wOF~x7~?;(ZR z+Ef7hyLjrWoxN?g^0|`>5BJ?+UC#Kxv)E1gL7s}us&g`!IgfAbsp$24yhD)Ib#x6? zaa2(k=Sp36c|K5Mx@)E^Ap;o}EN4g`SDnq7RJd`YnBNi2Rd;+ukORe)n8U){8X`cp zLJ+6e<@8HY-A0aJKIhF?aM(GSM`5cVI!{zKUR=VAZPZ0{EmZWdZ*=09}2VNYWVVSatb`|ipA z8q2E-`bvY?-X5o0m%t}jEGbFQ>EymCQwz)(Y-$oxOO;gO79N5l*~&p95(`guD@~NP z;0d$L&Jyj>TgNrLyrbVe;0)Wr4jJn&#qa624rA>n$o;f4?+@&7CzgiWj+o9K7!95b ztx?zo9jlzx)q%sT{0+ynAr(tk=uc%{vi47{u$_tTv+X-L>Nf!Y_&xmRBk~K|-ghtR zU*qqekIFB^-@p3=4@c(V$ovnE%)gb5|L%qT53zAyM#WJ@02`nBwQT(EtNyRpc&srf ztu%7GaZ4PQaP=)4xAFl`qj*HW5aL36kroS%Sq~9OqG%@_b%%j8zopl|+ z#-ANIz=RQ-MIe2RjB*z0*HJ&VdlUP)vT@_2;1RK&2)m_9$&+AJ!+mxP=PRoiyC(cY zGfW-Y9!O^RhU10NXFfPP8=F*?i})KS=XH|`pibqd*c@j_&$QP3DkqO()7L`NF|cBu z!FssrLi;iI!#IH*J)@z@FD;LeR(u5SJYsW3ks)TkVo}qqul*6@fxiC)ENiA(| zYp{W>od$&67h5OSCNstUu$?~P3veQ1x|fEh(dr~@ZWUFF5b5CH*THodx(J~X8LD7B zWOUxh?HM7i1gG6_RKqCf36iT%avVq~uth$mM9{q125$m#zUc;1ej**k65%7wnnsN7 zCoX2QTq0iHnzMXm*r3G%rL}(Mna+76tN=1oN?cCxnvUOhhd`Yv3jE86B>&SFzPR>B z>gT$1dG!6EkN`L?7Aik4q!BY6Rohk=Yt9OQg)jJsk<<`oCF;&DdU z9V{UQjG~X+j-p3`R)Nn%WEe9Sj)e;%>sz)ob%taZtLnF{yD&;Ey*-)N@1!qS@+b6N zwM@(BP>ouPYC(uq(hMT1o(x3Sre>DkD|gRi&hjBgW4>f0g14t&3QS)xW0_ z57yR$QECSL@k<1oc2P0bYyBqSh*D*GHzuBpm*<6mVsY;g!+Pa6CrR(A|ae^=MdO6wEu}{gN+oTWI zL?+vF7s%a!%wKZwpyA|vEWn4xjEwO&!`&STu>1BnFo#tq*iZ=3v|Sl*A+U9~k`m5L z50*Wq-jc?^|2Uhc%6|f;()sx7NX~I3VVha!IFUJrYoLc9-Eq%mM|F}piG;3L@|wBO z5jZbwfuPb3YJY|#)11+wuCJULOq6cU}H za>jZNoZC_KFduC8Cs`)KGe$Gc#Q+ET-fB?Sz^+5d?3~;+sgGLdXe_Vzx?bgoUQ}U< zo8+IZ^KHMeCL|Ok*@sB!Py8gj+~R$LdMR z(ks}EX56c2cFzk^UNeXop7fb}7vIdZ zyW!W{0(hvq&a8NQson`M!xS3s3daXl0(i$DJ8hU=T9y_0iqdsrNaOdCOvvy_f<&_` z&ix(#AA4^ZRpq*X?b6a9-6bjAC`fmwNOwq18tFz_y1P@lyE_#`y1PXh&O}{nyJDZc zzdeR~pYII*Io5Eksl)eK-p{<=>%MUkRz7-!_(ZsO;+WK&J~vl+FEKmZ-R1ofD1h_$ zr<<*`Hl0-vy1ESCkd7EnZy3G8fC}~JAtZs*i!j*i3iCexdIQD?CRDqtDwHb6Gi2RK z2@yGR)l^yAEFv?h%bn~F^uP0J%ZK$8XVIHI$=e8*5DCXP_8Q-k4_lBzXNaLI3v|wf z1dBg<4A1%;-Al2&me%OM6>V}c=DHqlbz90Q1&T&K^<(5WuVm(=W+K1&jX$CD{?W&W@)SAy@iM;LB&3d~SiB`-j6*_BM6TB^Wyf;1{ zJWIrxK4rl|K}?rtNK}R9G2f+1iY=Nz zS?K;b_Hv;pfbg+X%`RP}6QhDU_k}bUhw5dNI6r{wh~p#&!w*C?TcwiKRy9*D zJx0;(NHP;witgJ-Z4<#_d?_eamJlq9sEzaPu7|8ttuQN;I|Pf6 zkYg2Po3#FbW(KnIBud^>yIMrr-Mle)<3hL+#N3zOhJgti2`Q663H)?}A{KB`HJjCW zloOsx&pxvW+(;*1RC=N8Sm0$G9oIQQ+Vg28ntoIHl=E5!dFouOjtw6HfN48~5Zg>~RM68{FtB~%@wn`(jod%Ut>ylxxyxHXC~ zMT^1=-K^*2=P66EE3^MAve|w9j-bp>4WwAGW4m*4l@{| zj{f?3Ro?qDbe)^?eG{;9D|BtbmqQ@-Y>g>&yK5#cdP6;t9iP|2&LY#BDr1no_Tw-o zz6_gah_^HGxB;l-ant5VfYeqs17C%-pt*u_`e+L+PTB@?WIO*BQb}1T(v=$GeC6P! zGKd{BT2;MEQ>g_-heKF$Mbv=8n&jH?D2J8`>BiI8DEDe6y)Vqs67Adyb&D%DLzJ6e z)z`eFMkYUQ)^$+V9!dfo@X+WH?Q(%{4*12r1D<2!T<3^|>0B^9aLTYF8nyLe-nEDA zS|=45MoVhOKa)&`)l`NamzaMnpESOf#*`Hx7O(F7_f0+=B4> z_b&y$-*A48{l5^B|FhWtZ$t8j)c=tBA5#BA>VHW652^nl^*^Nkht&U&`X5sN|9R^F zD+*Kt0RfSfm*MB*msHUbdL=6a`$GqJ|Fs|d?}5Lz&0_b2wo;v7Vc>P=#<(2MN~hnav7m?X*cL*e5H?nHQ`FZ{gn zBKNQiFh^H6O+SqYhdA}2mr_%K0)HRTx5l68u8!_2lHHiU-4e1j@yBjE%GvWgv%<*Z zAx0`50*dsL9*U*tGPaTs+`Bw8>X&!(WhI1fvlrCvhMIMxGgMC1Wimf)oKoeb z>?rP5Og_RjDt51*B^q+-%*POTY5_npqFE$|YLeqrG^h|qaWM*kxt6#UZej!DP zYQ#x>dmxi;4P57^8Lhsi;ntxBne?A-j|D9jJ!x?!vBmdqR`700i z{O>%X|05j!Aq`nV5{ScnfjIoveJ}RyZ^-|Mh9}5Q+8x0DX(RBPDX#w-cNra-zukG^ z4>%mCiYKd?jaK}oikkyfacZC{e(G%VT@{ax`CS!99Xz^hlK8HQ$6%cJ)3XVMBYsoG z0m$D~aqw@dxWso=90#b1pE=*mOWmvD?x6(USW(utVvT!FQcPcXzp3I-H^xos@j&S1!>5^@Bd zYjs8NNNUM!<0~{V$x%}4DTo&ktG@a&%0W!bM4VomU(XgEIVPSu-?1OiI6|#;4jn>e zo3Ze5Uk@;>;Q!bJ2fO>*O>mq4!%c8C-H*q>P4M+UZh`}G`1eil*GA92tKx}*giR0( zt}M1w&o=YCdGMRk^NRpPWxEyT%zd) z;_#_^9IgQZ#Nmq3796Puec&)v^-J0YdEzzn2s@6gezb5!SAb`av6YXzJUbm4#wOj; zp4w6`J`z}q2M^e?dm?cR$KT>GH{0mP~_e3cmHOUH3M z@80&lcuO*7TsBu-vIh6np-hd753kmQBq_E$Lg=|1O6n3R9TT+mOFxU9l=Qv?KgMX+ zdZzhhr8npTAaxndS^ab$ZDk_Jyq^ws)j|uIc5{CXm3q|2Gfp}+;CrO$Gso`M*7 zVg$pQ6B#ql8#G-)d|($XForjUSsV%$+E1!18WUiSN&1MS(H5&~mAY;@xnJAd@i`az zZo<~yF@BkN!eHE%SRPD;wQ8?yCQ1s;oHqu$q9nBHGj?3ytSvr}4O`{wubMzclKRy0 zpVgrE{gX}bf7GCldN=qkK%hRYB1eO}$KWSZjkq!vZ`5;Qki+}z#K4xudlz`_rf*Ed*Td7yrG zd^UBEc`!f>?okKC;1)F6;vYMD(tuJpFL8=!!G{6E@v2b28#HSyu zv1?ABCE1o= z8ZLVr_DbNOdOnMGM@s0^^jjW`=#1Q&T=FPO_1bJV*yS)8p?4V1Xs@mZt+PQ_Hb(q= z+u~NAIUz=rHq!721oJ(nyP6y`V(C2wV?=CQJ#nL7soC2ciytAcKoYPeJi%Qj;k!0D zKxcuug;w5wORlof#AxNP5kWemcmgljI0sw=&-}Isp7?DMe5sfm=_@QZS{{;&{ckns z3cH?~syYog+RBh>9h9QuhwA)xfvIB{`&i&new4TPby(RDU9}4x&no2UzY)4g;BW?tZdwrO$nJ=5X#a?}k1PbDjb!{DP2SfG)UKEc7kbgO?jnN z_KwOhz-hHty5wJ9qa&t6N#d5@E@8^_U$8HD#FkvXNLY@wQDJ@WM;R2Jo^G3Xz5htt zDWRp+hk6`{!P|YbU54uxcWGYe0S$3_m-72b@WA^?@EjbJFGiw^FTDG%RiX0DqA|xW z;lJglM=jq8W7wthGqesrj%fy7XQIG z;iXufhL|E~!XQHan4+KI$6M4O1MVJ=kHk0}B_{bPdcBhXU)m*zLBBm=;1b}*JnTHrr4Q1kY} zl!R?a4w)lWtRe15XgkRs59!{^Yt8FaYYoD0Iwn;DkTFK7lDs0C4aNz6?>yr{jaX$; zpc?HHA+9Svr#%Y~Qi#5Up9aPmPV3y|C6E@wtCau5ma-;OxFW5X>J4v%s`ol>^>$*y zJ^p@i-+}(DYF5AVl)_4uhJEH7h`-ss;qQ9Cd;HCgR@A%{Z8@%dI`CCyUFaN$zokR~ zx%=%R*wgU94)oLe4s@+QcAz(51M&A^+CBazWGv+XI^sTG6y3vtj<{8$-@44>#@GU_ zL?Hft9S5=Ik7y*Z>-#gG3I%X6dH@I5xLokD8E`D^N2X!5~F{Ye3 zFD!6=>pi*aQ zfAM__{0VRioEPYbr(rdB^H(_ASC!W`C(|o`bHwxR9r4wBN8Hzj@doIKTR3s5@Do&j zbHukCp{KxrjyN^W!8b=7>FMG6TcI3_F;`>O4mx(u%iYgI>>CJ~@IXiW3KZyw+kA7x zG4CDmX%M-uQ1yNif!&mv;yZ1-R#%Hizr7Rx{X+9|%y;><7n;9``TvrBKcxJJl>dCA?B07jIehB-aDd-_a zkLJoJs1y8m@3mXqy#tMqVtoor3>%84y8@5Ez-}Zkfg@Tw$%iHsD_Xc^?k0i zeMTvjH9ysN?(TYC7^cRjo}rG_-n_6%H;bY+*x8RurrljgXg_&^wtc2a=#YDzcb(BF zuSp%rbbEowG2EMvxh{J$Iwjc=?hpE`Gr~!qPy)VJ+h@M_d>rE|ZILlRoI$+M_ECBd z=LwwqR(xWWo@NOx^LvCb%Hr|IZ=N%BKqvS2acH)vDwxA@=eD2?LCUIO2JRei$7}QS$!08+%+E9O zOk3?vB^%+pC)c|wBX-DFMHg+|Dkl=TxT`8*wS~I9^1_~enFK~md-VAz7i=>W5AMz?B9>no5S~6G;EF9tfcD?=Uga0d;Ht_lTd#3&K0r-_n z`=?*P!$EjB2tOT!|1P-x={fu#f$P{uj*dz|aJ}%0!8P!A`ZwQb=^NPSS-%F@zP7ZW zvvstcQ#G|bVL`jq%)e`UOF#S4xH+5LMX*$dA9MM7a-3OhDK) zS{MmZ_AxDIo{a0>9(LtWj^9pciPRB(%>XeHOBv1ZkK8onc@xmldD=3(Ktd05Vv##j zm(MzCbTTrghwLpMD%?3!GDRwYL^?3ts-I7Bs;@S_nxeDSTZfIUTEi?kUPJTBGL7*T zk5#sVR3b7MDcwJbK~SAa1iMe{tK>BS(Bf`WF5^Ma9T(}iozRFWVrJ)8<`cF4GF@ok za%;P`-jyM$>qQ>kK)y*#L{I8muNoCk@P_QIh5KETe~n7biF?qnmyxXWEWD*`zcA|R zO$$7;8=0e8t){4S8qsY459A(qM8TIJ($`!S^j0rmv9b7D+W{F)5PI_4xBOBIhQ6*a zRh1~@bk_{KZ3n5?+6fWEOjjuJPmL-e1dhtKQdGb8<-B5TO2x2z!$+d@#)({o7d#@` z!@(@j{B7b_Ih=D*r|9Hx$P3kA(ZR;e%vg|X5dnu}?}*P=6HB-W{jiTv1}xau$lfqk zu6VMV+pS?qIec^&)%2>J>oM3wB-`io;FzlhGs&`c{l4BERuks;^`N$S_Z9ov69rqi z+p2`)IY(|>8KrFYgrB+f7EO2Y{`gM(XVFqRk6AFA0&&iy5#=>cAJsho1FK^8i#R_! zF71vO$Vpc$DZ%dOU@M}dIs3{g!aUeHSgdwgU^}_4)81RT+u(_4;}=*7&cS(lV#r8I z=qZV)o^V5Yyg{G#JWB3%a~Lez;)?ZnrLx-@y+if@{V+-VkUOjtj*+Xr+WaSjo}H)= zZ`|0E=&S5c2AzV?hBkyO!oxaVOcI4OcyM5 zOC7L@2MP0Ek=1=mE`eMuBvCuNi9||bkCY+GqH30^>VN|G)%~d6(JOMX;Mq!JRP=5U zD%laF^fHOJ-f;h@`5ZHg$^=7Bxr}o6e&^Hox*Yr^dGz_^60CEP`h97zaEx^PV@YLU znYyxbXhq=&Fak@pI~tAQubSUwFX<=WL?4=!RrWe-C>PpigPYX-SQIpI_?8Yv=2JuK7>MP_ZU}uD7eqm zs~kCVCTWbs2=kk_X=4r_t~-|I=Kf>8dvAS@T;fSv^Ct)X&=}IXP>UzTcMy+hj%Cz0 zP50iis;xnCA-xx>o$ULh(PnXsb-DEzt8!6Fr5i1-(v_Bt6a`N`&+1q|?P-Pzle%UV zlH{{^8z8}+(N7@DK+oAF85M6jL_s z4ZmlJN4cLep#}G#P-29b3}Ot_V}RRcn`@UPm_M-4z01o{z;XPV*0Lv3hJ;Q*;;qQi zDs}6G^r4`Hg_veg7Zmb}9d(X)qS%Ko$NNm(0WyI3(0a9JArJ$2r}UbDF)oCf9ikX` zKBG%3qxOnEV~#p2!ycr%M?-6{s$VbS z;a5C2=mstu!|;N|QZhG)UXX4KicBb6VA%6!7u{+qD(1=;U-!L>!l4AiRXP5#lsX#VeK}Of-LI=}OgTs1as?WfvQ7^!C7;FZLksDz&9$fx zunN~K?NkiJ+&A+OlV^M47@)+UEZ}tu50hcU5U({r6kUAGkE7n(B!kIpME>)X_i(G+ zBhiESf|95+9G_BM@bm>CO0#lo=0#>M$Hx_d=DOx(rE1Q z!e9Vleex7#1kvKPf9$Gvgte?ZlK5vnF&;|nM`SkIr=$wK<37iHS3r%UKzyDMd`iOZ3Vk`ofNwpnU5@=v-53+(I1Q^p@kk8K|h;*ZdBB5I?A_gZ@*hZ zseb*~T+jYekPkizGnxg50@6Blj!1v^lYp`q7I|8wFj_C}TTbhRcOs(_F|F9OGt+Wt zYD(OrIG-6c{%>eG_x}5qbM1CX-zhnoCp&EVub3VC6+e&F0uAnHM>t2FEamVl*b-7d zc?k$qpF}zDqc@hgfU)$KQc8vQ2DfBBesChFb`?pZnxeLg*=K4jY4Ja|oRdkIj&d#c z(=`TL7;4QswzuH4BH5`1ZMbJ{(Dw*M>z!$tAp z<3jzafd$_C^a}-ugNE(1qttg(_bcA0fkAmQ@xk2{Yx);@cR2HJ=RlxM+m6o;V=y!g zM=bqUx|Z$d@7kC=ZgYoq$6B<4H|B=V&W3HRS+Pgnyit1H&W?lR@rf{m{(z^*(T(+1 zhof0d+QR5w;8q^Kv4wH&=*JFOA1y@^tk>dc#1G+PD;l1N+}0C7ft&nK0(bn$QJo>6 z{)KXU#nyB^)C&j4B)E|ewE6q87x3gW%6GV={FUzTZH~rFYBU>X0?j!IRq99;+&=)e z7Z6}0wr3vca-<%zP8(%;TYRzs0_;|pk8gMxT{e6T&vv~GtXw&@O1_@f#hl1KMlBs1 zU9u+1l-RJod?GtC_r<>4hl|FlTeQ_~!itdY5m#C(JIj2o0O>YC%FD$NG|u>Xp{tya z@D1v_n-!+)3-CC?TdXu-u@Hk?M(ZqkVXrpm8*R=uyFsO=aW`>Fp5kOWQWZa{=-F%H z0r~BU|NUn3bKd`z1pDvv{=X#H4{`q??mxu+hq(U`_aEZ^L)?Fe`)`H&@4Jm$=D+DUocHb22DxiY>ey%YN6R2QwSSv%kfLe{#ADKE~ns}n-wYh$_ z;OrP_$9Y%tG5!R;KOk|5ReajmtMM*YM_A2^-FL@#6#{mW=ZGS0PDDQ1Eu1vO=qp)? z2r;+-^e3jIJc72ksQMP!i5e9hEq>Z!p8z->c;~|_BdEBXtct;A!JK|<+BR7iv-;c^ zS0>ED*{e6VF_@(C(Hoc%kSs(hFpeYYW>T}2VdJeL0OM=C0X2PoB7|pBKPul81tic=epY8#;7a|{_m{fIm8s&*!sp3o? zc_64^+&7ZbFaaCM!2=GeGmEczl{ST2k^K6B^7MqMNboUc5}nXY+vu#GAijjxX{*Xo z-LuD%>2KhTA2;BSo@&jab<<*1*um%JD{=rE$?>J1c`D>-H>^Xvk8DKdU>U&^`$a7z)EsKL8g<$zDOG$ z49PTGCeLyTqK}x+j6T%M7d;*XN}oY3Ped+B+h@wOpU8D?0MKAYKcMcE-m~o5?=0IH z*hyZkU20?GNR3kzB6H}X#r29fzx`kg%2Vq!m1r`20qAH4Pj^hKsa7JXoJ#xczTN`> zNw!b~9}RWunmvK2dfV$`w4YJ-G=?b(3>cIlGO;qbR4dr#j5NV1cEkZiVpL9!iyBwMQiaBzbMB-ugVNjCQE%&9)0 zb>!;1jtv9UvE5pD|Dt1CP^_GtZT7`W^-LhSenCFr+yUy?<%bCOI(F8<#q6AoSRJefxZrDEOeG zJez?S3yA|$T|EnvhB10MT86EalcccH3T}#b$(| zx3fe{#@@e2vd=q_=7!kl_KtY=&bi){ZM1s}PTOc!8@22mN!lTNn62pE#sKl?c?0vGyDnSIcZ*LFZ#TIQT z+p7o@t(5Z8fCiz7S%wwIP|8-^JUYf)BRj(JRX!<`g@^*svv~PB#@s+Y^R+5jx;>d3 zq%jkFmaqbLf>3Gkj*^-}0cnh!82p%M{Qb7}akXOEhw@@0wfi!1m-qNmE5M5JiOH8{ z15?{d?;HloBB4iXfo0?`RZu6sqSxS1O;&y@BZoZs(_r_<`t$0Kp*hyT74J!(=g@yY z*!{9CLh*jEJ3sgD2D^)Yv#|ll7QzVKH}h^XiZ|=(w4Lm=0W{=XiTlbZ(7=ryFoaM+{oe z1q>&Stz6ixLJ{J4)U7|}PCJ5v)C|`+RIG(Cw|HtIOuSo47zO(=*lm#L`V`{4;~)lD zMm}-RvR~L(h}`_CjQl@l*<8u=hDZXKff~PVAgSP24nSOush}ZV0RgC zu$zeAjzA86!7+Ucyg@U5VRi^(z}2;6jq7D6gc*x%Ene^DcwN#p^amTBI$U}pB()?) z6u_MR2meA)B+5gCkgr?F0rmd==#GS4BnmagJe3JLv5EMu_ABcxccenN|(9`PHJ z$%ea+cdnxy_6amNc%z#9N|rJ*7z1O+ofw>F=dZy3h_Zjq`@a%p|9#&7cTo02+<%Ds z4{`rn<yR&c@ znPo-~9YGL2VH{pj5&bA}EF$7b2sB>2WSL^gZo3y7hCD`dL!UI{$Sk)4aq$Qg#9!(zM zmwj+PNOcCd*}7THb66(VQ$N3(eYJ=EjHO$B=#9y`d{opti_w#|gS#ycC(`wmu^U){kG)dXA{*mQ4q9=(W<41d0l&>YV_dRCCKtiKgGiL^se%%efx8@XRr81s%6-qWXI zUrK_1@=*OOR<&LA#pU^l^`~u#S11g?!ES>ku`?Ujx{uXbBPK4dkq$Gj{6SM@oYfN> zm}+>ITNiXK6d-d=&quRLi{#4!^VOrN+Nm8Ux_pX!;Ajn+JKWn37SFCfxcz<|{_FYB z{iV<8-vjTT&xzlES>UiH0YR!Wu2s#|WmEHwH zF*fCPjN>1$~hkXz*1Z;$`t?{i4$4n9E3MM#k_q=vNa& z+zUp1Pi>yqqWh4Fq?*&NoNQ3D)2|Dmpt1zaqVt7;z9E}F`PeuJ-y1_ze{pjL zIcQwlfw7Rin&pk3RmhK(jC*Fqr_njpy^#@TI=1t;!XT##d~&C{)HDKm7RNf zj%7uAvyZAO3@WA@7UJUFPl`9iKNRnnS5=Lv8{ZXgH{$P#_nBEhaX=#Cz2g1ZBoK01 zHBfYrd`#p$s3al6oD$;m?L`?8OXH{1c%n27GZ9m(A4fxbK30B=)?=AdTHtd=Sl*|i zd*MK7wE)_=m4hn#Cyj*EVPMO&)0L^JM)MUR3Kwz_n# zJ7V6L9mMI_rym35>@W3?Gp`|YCC2O-SkAEIdLmj0IjFhVDZHpy!a!+t9l+~v zgA&_oA@!<5L0O|=d*IpZJE&+md||6ir4OI?!L@m<0}IY60LQy-ENaGc>+z@ms3xcS zy_!5Fi~nx>lkpyh6gm!Nsq_So&7JQ?!JMnbc-VMpA@w2HG6eaW$iXW+&B=w zRrw-Su}BDB@lC%;3x|f@e$uClf;h`!ej?7vHWQ1*0?k0J%Elp zxVhai_if}{F2U?%0_V^k-PU{h`#?9?kAdzgHO(?R36F+(LEu2QDnuW%KZ-Ikf16zDW)^SN_Rt5> zJet zcS3Bj9F(~Fd5q<;kYiLB2+iQN}$gz`q-V19;+#)W}%9Zn}}!*X`_VN@T`t0IC1mHk7=L{{}ycxV$zGud&@7?JStGkWH z1!m$n`}jne!v}}Ky!X;yi;HRl2*Wk&x6h0NwMGm+HsWOb0fxh(mWT=f)L>D)j-KUu zRaATlCd-j;Jnn;vBQ>D*iv2OrP3(CFPkv&0KhUiyx?yy@IB`*IL;W)hmu{6C3Fr1W zDV$=`NTU*Ofx~*7GN;=-Txx!j>2-*3wyOL^ zS52`6OEfN+aTWOoK4hABCAF5AUTdB+Q3$Vev)b^Nm6f^R?^Utvpl z#a>ZcahZ0}TI4;K7`nO`e0B^p1~hvn)XEMJh{yc|#M!?C@!Cg<+7#sm@8gh_r|#Fe zeGu2|KNw?FvXYHN(G>G3uqecm@y-<2UzQw4!f~9d7BPQwyD@g8uEWhA;T{&GP;+Sr zREkS3;|5CEJFb~umNx_L^k4cAdYq5jLTqf)xx|Iffk|9A%)f`g+%<*W^ftC5%+jIY z4k}g6N zW`5P$r6G>S4NtRU?<0aoDF)3Q2zvqGfU5yFWaFe^`bRtY$;F`#cgm^r0uRTxcJh@q z17JJ30vFhQJNeO}PT$GEeLMM$uC)VPw4ME%H7-faL$g=UV`G_(IUq>p-V@Gggz~W! zEbrVDP_;_?D@RVdl;LS`)?@Q-z7*RriVk@$V3B); zcL*rNpLzVWxmfD%iTIPhA>y8gYmVFrQs*gnOyhj)yG_3naV`DynMd}GOfAicv@zf6 z$&3D6PwwW#uEP6|dU6qPU_CkRk9u-TYJhVmkce-({iB|I>PJ1f0GMHl&CWNw`~AJ$ z-3gkp%W8}82t7ouF>2C#dgW^y;U9_k&q?3;mtJZ9Ch7l6ApQ{aAAnV1q_ozqmwKHGRpGLG)!;df<;={Ev+H=71HO*lPsrigA5Ygs?F>Q zb+Lo&Bq*7w+sn7bbQj4x$3jU`4)py(r&O3}7zYMnE4GV~!Ic%YO=XYdzt_Mblg;VeF!#s9CJ#s4b9|LH9Jj~M>3OWtcCcn}b7`d`ZM zfxpqe`DX7gE$!wu%WTNE!|-=}$!>L~xZ7u#&n0_6$49}^c_Zu-5TgySXHV431tP9a zHL!8Pxv49YrHu+^$;M4ijjP5>UPjCm(}$uaESY)Re>%fUdL#FC+#Gpv72VY;;&bsc zsTE2|Did)D`m{}rcg-UbD{ogF_a;5+S;X?Z=_G{8?7YBjS1wqD4m9ESZYB_@RW^hT@Pt=*oWhK@Q z5gx{>Z4jj#xAaO|jn{*%*68&h;Hp+MDKcWH-x*&J)F3JXNQRr~AfXzD9yl!Cr z-WF&keS*V8`+Rd6{HBguGq;u0f%}<@5}V4B5C2C)xs*&Jsb_?*KE`lt7>6!5dVbyY z#ls(6sAF~1+Yc81&^m_J|ul~sqa5g4^G@00>oCL7$O&TAf z@EKmTpH)E)z5*MWlM}C__L;{y-l&|$ejJ~0DD0jM`savA_*nV!fN?`EDY=m@1;_?$ zOYWVKSXdFRbheI&&+s*(dhZXMha7VTm~zo(gQrsOxYVp^U)fZCc0nEvEE7A%F{jk5fm{_c!ZXatz)A|y zBV@B-%jhts4(zT#rGIs@D_w|PPHyuu0}}#|Wh~ruypNUI&>fRLhywb9vXbLj<9mG_ zO=MqXQrHRzlE!GL#DHR|j11)Ez|e;APoC}XSo5EV7gWO%_iD*Wm9rK|lq_ivWkDqx zL|kyym`~w_Qd-kIpOa1X&;4XQv|^0MwOrzD*FHf;yispUn%J<_rbFswPB!i8)VZv) zrHB?9bi*6@?h+rbhg6*7YlaEylqh-%$ps)mentgicwL26%((~+CQH%YNbcGV&-TtAp}w9m8(N6YN*i~Lt=XwfIPQM$RNTK`StsB5RtN!NoESG8~ zo2tU&+J>l=_rPeJ)(re(AAmeqT!!cE)L+jT>WGqkmQ7AQfr=NXMoaSAy7AQmIy8h#t2ON*$0_xuB&77+MugU z6<&=J7~=#>3jtDVO0h(_s?RAUm=q%|j^SH5Wi1-c>1kHaIrFkI0ASO6?kr_F8<>z3 zL#H@I>t;iMH-TGl(~IwF=&2166f^N;ryqA2vZy>4QGg%h1LwhI&lIatBUD*MI5*g{ zYBix2mzN~KVwXmN%!caW&>}KUk%p5>_)Op4M5Jm{y;KZ2J=c-?C#UCum0N7u? zGn^SbQ9w*n1^)maN}W3N?3Fcw#8O-@-KQdr6k}Zk>17B6q??Ny+h+;zOJ*IQL(I8o zDQjh|c2n>o5-qB7>b?!k^f4HZhKt&C0+^fP!vq}fmO-{zdA-@y8=ttvSshm5q;!{6 zd!7O~*J-f}CXXP7CohTDRMqV66yzw4He_HZ4yQ^La4dzaws<~gd^DU+zLbw3voN~3 zcG8z|f<;8i-Gb_HUWmkWbL{8h2teB?amWY~dz7KE=8CD}Gs+^wNq>AclA!#yi~8*@ zr}7x*l*BlE8GhpE+1|^DmY@s~Q*L~zmYs|%26v+YlBgETMlcF8!bK~zI=S(4C*dOr zBroL&U%1DDd$9zCz5Y@#AF#mWlrUit(GXel9TWkLDU{nJ_V|#CjaUVWGgbizE>@l) z=&f|HIsET1yWC`W4PYIN;SOjB0$tJE1mn`;GTv3Hk@~Vlz=x&1=@#y#Vy+ylrO5;v zsZYbB*uD&=Z09MSdoI^rpx7RJxEcvJYhHs`j_b!SDD_S}jp*~5``%P=28YBbeVQ*l zAFY;ni<^*39_Uzok^6ZxMgG}d4TA*xUJP#JMhfK)yGE3csDf-`2={Y>w*jHE0}7M911m+kK(Jzs(?vPT@= z(*dX?hcP|EI z>_??muO2fLhr?OmsXKaTg-eaup!k|P&b{EEHq;7T=g$!})-s?L>XseFb$U7mZJJSE zLe+3p{pu+tTR3c>Xu?>QIx;Uc$CTNKou`fV$9T*y$?<}G>lsi%{JEpB|*?s$&8tTjTdn7*LzMRx%@b}XIWc8fhG_)Zb z-;j)Rm*9Z!);cpM(8m@j=d&1 zDDJGG-*@mzYQ@?xT(iH?;R2JHIn0gtWL`(BH|c6cqN{gqFMF_#y(v!Fh8|yYAC7)? zuAyFG9gb_7@oE7;qIl7RJcv}*kZ|G3Qk>7i zANvfSMTcUyr_&qyqZ2Q&OGaQ0u$A7`%9&lOB=o|DZYLcexfpW!Qu>jRt+_^+JJb|2 z?m|e+yGN)-1TZdhj-Px@!En`qyXpiD0-ZYq!?cIo-6RT0td^=DOV7GP=jWDfCkna5 zbB{>?8m*lbIWJkidf442IfRbv6A<;!^G*R?%fUp)E?YB*G&h}4{Pvy7_j}yW*PCDX z;=6VVSc=>@#{+XzkTq($B3IkKQJKo^duTLB@2j@$;%V>yL#^`HG;B+ z0W9B@dU)&;ED?0Up+ucQ*Nn49Nyjd)>NLMpfrA*|>gK#USzspMl!h)QAD-q?&Dy|2n~FHj<6>u1y_`_L^V z%f=1cuubY>BiTOE6TfwR6kf+P*&R}Lgw$Tb-?zXSb@7B~%Gol^nZb?4jd32!GQ|36 zx!Y^Xufa*q1|||Iml0MRCoIVRkM(4BMex*gccR+1&g=R6)RYR^aNDq{GkK`Mi)rYu z4UqS%H65FZeO~Xx4Zp&Ep^)QUn#^~6CGze<04iT3apQ70rGd#wkDjx z^o6DG{+PRYR2Xkt$a6+vk}z4mxkRsoVo3TFUE2SLy|;jhD^1sbaVNNIg1ftg;O_2D zaCe6gBuH@A-~ocWTY%sJg1ZGNyl`$MJ>93Ld*+eVDOyfpW|6bBVKe6m;bSHh(4UEA3W!P?n9886Qsywvga&sDz<=g*vZsrSfulM1Ez zrwmRxD9mn;7OhF7oaji3*bJ_v`5fh!EohdDoLiGXdde)vJXco#fH-2-9{)(*LDn%K zbjbCq`2X|i@zWmCZ8WylV4Al z|B&e+gh)SL1q3d5_m=|wf1a2BitFJ|+4R3OH0g28+d;CZq7T^hq!UOryWV+4XPUky zSjR$r)$P49A}HwR;}d=V&2bXoTa`VYsbe!LwOQb}kenMv4ZZ<#p7-aqSj;2pYmK!xU(ISs*v%n&uW z9h4!Ytax;N!1t6&0easr%asQTru#<|2jeC z-KTjt&UIUSmljScT5v(De@8*XPMD4d?K^HGSclbs^d?2>|2P2Lhdblqf1pza`EuFA?wh(Z4>NVN3yT(&v@hMW!@ z@C|bTm5V5k{rG*YiUhi;HO&ha=e!tw2nP_kz;)CG=D&dcOG&NdOrdW46@}#$g!y|F zH_zr}P~BS^-!10$`of|XEy%x&Qq8g_SDko7IzG9a7=OST`vbVZVxy!KiLq!(2=?nP zOAbv509>Ct(y^%F+$)O{{Uai2LuY#FB=XJ~hbL*SIv3#=B(=Th0wW@nZ=cKpT}c?J zUTjFWbH`rUam~-8sJ^j-zB4T5cP3?Nv+Jey@86TIB}5t#5dT_59tJy#Fg6n2`DU9X zN9@4v<*dJ(3T}hpml>9vLglrTu6{f20_Y;eE~gRrWpdBwDdV6=Ie`++T8Y}0DPQ2P zSq8_4XK7xGi)~zZwF%<+ZwA`E{3iA0WV&iX+cAxnUC}U8oIi;t0d5B1>`9BUdg4GR zjWl5jpI2uIpS*AvC@Oj+j2SK-d06jSuKB4Wa%mlYG_Y(t9-jSL_U zJ3qk%M}GqsP=UY&8z69j*5AMdl3(Y4^86$B_wt>&(6|+?cz%hdm-sE3p6hSX^md3S zk-#*Xk_ zhQGzpXV7*|X?wIA`Y{bwXxf0W=(`)2)~1TeF##A&GOnO@mWu7^{s!?MrUpU$-H3jL z_jpHLzU8u`U*(wI`QY;P7l=Q>NY8*}dmjAws!N<( ze$zSb$eAeQa(S>Fb4xe~;*YG}nGnQt!^l+PM)woq&$R$I!?zsv1LFVUTMdrGG*vT= zV!0O!2Rbd{F}8dBgv+D=8bjrqw_;=O?LvB98fGm8{TfIAJivRQ1eA6#W}<8pNqS(4 z+;d^wDgJ6u$QZe8!7IN0XB<7*gQjXk)^b*wV!Pv7(hW_RkRX<@_GazD85>rQ2s*!& zzo6)|e)6#i=h%=fvuiwKqzH$(hG@Zj;Ut_eM>xuCpf_HJtwhYI4`-?`Zr*Lm3NsG; zx`uaUj?}S4qmu;tATJ;)yoE2Be6BFff^_|GR12Dfqf5~Qed*kk0F4B}p2PE##&PaT zUytguf0jr8lU(qw-eKT>Bp3XeNB@&tz-^?)whI_ki$L5wZ|j>+v{}YU}Q29{oKrD38ABW15CYLf_|c#b!A_ zASAQEh(YIC1bfJ*f>qRaV>~z+nFSUm8$vPznj zwZ@K)ZFUt!rn1FHqhD9|4k2pgsBBPEtrqV{lB84@&~f(mD%uPuA(zd(mkZ6$B=hWC zaNXDqn96mA=`am7$sjY!DZ6xJ1v-3jHbr(Bj4c;BlzFt@?nSv@W{e<*<9=MDxX$@N znD8|?&P{O=MY>;jkbf37)J_YATdoQ%WK7Xi$ASVcvjkFZ#uiJuI%xC@IN^7C0_oD5 zY>zkhKIf}-o0M?(Cw)X|@!co)NYANscHYf;AoEJzFB3d6Ab{8f3n@fGN~n-~VifQD zr2-c%xZv=Fo{g)ahr&~rqd{N7Y)3C@Y@(gVQ8>UI0hc8s%IQ{eVoT6z%lONOH1WL# z{sGPZNc{hf=1=f9nm-KoNgXf3sSfutIRv|%#omV*drTNBniweg9Shr}} zdqL%>NYAx!MW*wNb5-qk!Su7fJ#+@emEYZuvcE(gL!ug_MXy>dy|HJj#slF!_kZ9$ z1&e>fd+LYGy=cRGjJY|^LAhizTw(pRVJE#RyjSwTOu^*5;Q_J$yzmfE>kxPhIRGis zApp^6o}axFPZk5!Fv;85V~Bm2mzs!49dDCMkH35R@!>OJH=M1ZB!Qm`xnf7I-5c`* zfbAXbh4E#B9;3r$(inop9$>v|TUYB3JrO$^8zkZzEnAyzFd%q=>(-(|@+Yp38NsDElGaGSx z%VEX`-6L8m+T`^9y&+Z}wWbeu@rii(*~Pl(m*GPhF$x^PQ->u(8FC6U9J?hw8@e8O zc2cfyhp3q6+HY1!(emz1;QB@4=ZtweNKQDWKW=%YTu3GC2`u^zVBh&=J7BgGGKrtT z8^nu<^X`TUXbG8vXDDXEV)jUAS-OqcX=2YdoNZYdWLxu~V6lJ`L=iH=vNk&~779UJ zEXvta$$aiXw|EDo%SD8;=GF;`;3Kx-%PX39wB`w|fAuN8M90Nmd*st_U$kJ0+u4X` z4|OmI=br|``G3jyiSvI0!uc=pbkcZ3>h!iEihvakjQnNi@WX{ z2Bbwqw+CjFaP2OVZNeBYVcRwkK9|VV$suwM!Tmh>ex4o5XeIf14Kh0EF-Df(&6$9p zUpN?|4<`YbNG+H>Sk8WNTc8kP0Px!-_5$ZF$v7fDzY(TjOB1=SE60NE2&4Kt9MoMp zy_X7D74F?-nYI4*-X>{BN z4s6!$%4rsbUgdg`xHj=^S!{7_C7x=hCY-FW8S;@8>8FT{h#0UTOAy0sqRM=K?@P}@ z8jR*eb||C6ZEqwNtP-T8UBCw?5d8)AVV;f4dZ1NT$6TKv4>U^V`8F`cAernrqJHvJzJVo7bAgzGs!*Y#{;b~$JleNv+jPav)m~#&l$3#QgT!H z{LYYkVlkCh+YaReDsn~@M|F>mykg%~QqVuG0m)sqDN`ezHP812IQj)iv4>IVT?t-_)2pXw(Bg&cibt@?V}w z|MM^X2Onzvsd4}R;8U$B&fBZ2lM|jxi~;!$V4vSBce^U#F+1EVJ2Y~Zp$4T*^UB@G z;IDuYsVquIc|{Fv7&PH*vFn{yb~)yOeIO$|g_gLFi?;R`lJ;+yV!U@Z`_#Z5Va!$f zK@4pq2Xx;rD!yWx$0uR~^ia%>$1YlCk2@1jR}HKF8oV+`3eEWo;CJIu5n!dX#8TOxB{vEx6Ci)abHv< zE&G-Y!-AJLalFSUGm}b?TSiLGb7NzHmo22%my#p3Spn|__Ze|8s{-51{G}Vz z#37&q<(P9H_+USwb^J4v9{EQmz0Xy$Q9oZ$11OXJ12puB!X1qz%6ruU19GX2RNwG@ zrO%zH5ZIwf-_hPlmE0n7_@-lBQhc41PH8;uaRBS^HxGC%%{zP`V_KRqj*iqfQ0Q$n zN0n|oeeS2-x(yw!y0w>T3XUwP4zXNCQ~%tKSM>EN+3TXAzitJ)<0pFm|1T@peh}>F z#x6Y+&m9}yeD*cl{tUSka7>QXuQ4EQ-S@h5{AHjk{)r}N1yZwPY^ws4NZ;c~%_164 z5jK-Yp)0tJLjJ-DB~OxF+oqx1x-aP7-~e0U6N)YeUq*6u+@VVzxnPf!uIZ;iExg~M z_lGE&Ib-R*%ak4{%K^!?Sc|(~y^B<2w>a1+##QBlwl)>%R^&dqdA=-3Z}55Y z6O&v3Y|YLybK42Qx?%_A+g#?+_T{wcc86Z>L8wU4a-wgNqU1G=S%SRo7=e%lNswj= zFH6Th^`VOQp2dI*l)6AJZ=#$lh3(WIf4br!6kD-gJG*Gug=IA&NmKBww>7i1yPN>qYIgL4NMEW=%PRqG`{S|)4AD=Y?VHADo6)T6 zhY&po^dlY0XTIrmO>MHAPmwWOcBNOpqhWsCLdQvtZlhZ~;l-keH9?QZP}vMySi7C^ z%683!bp(9^L1p>HxFl2p@VzMuJgi+>eQIgj!Y>eh#uc+45Pr5nXiUp`>TxW^nV%5; zrrliA$(jC1QixF$0q*iExmCrIEk*h;t`MpbgEKq+Cahl)>G=$PLiib)DCV#tkxBda ze?a)-e?a)neu3~`*lw|-(>s6d@Msk~V_&QY)?|gs+#AS*2T~^I4@R-^`3(wKGB$v5 zbnyp}aU>rc_eVju7J6Obe$`+Hr#?`ev}4a!S$sbM!9Jb5WyhXOobQ=s+1cVcj%?0V zWxv|eg^;4mEU~ghF>NQ-H^TsaWKPiKH9&wyK1L|5+f|743`NWWrBscnQ2dn{`0~0P zYnpsBRo+(J@u%I9uTc)Ta9?V494Z)?$C^^*8KE5P6~2qVSUpR@TzCP;r`6+dkN@et z;%SVg2%vuX1H-G$y(O}EGWsJ-nM!Q$c(t_I$|L)RKCM zvf~y!C2N~$2j8aUEowa`;om{{9V{SaNQx$jXU z4e(2p<}ht_q+$r2d$&->k*?moP2LQSb5c}Bk)9Wp5~9X~rHB`kePSZCw^aNRPG0UpO2mDZ}|PuU-A1~mpYh?4`KBz z3qJzsha#o%e+1Hxfdc8>2y@DQ2GW!L5=dVO3Z$oyF@#+Nv?*cgsI?0}SD{c<_tZ|T zVn2`0wqpO1wwo|d%dpTa4dUD@OPMZ46*_<-;V0=AhCYZ-fwJQdrSlNRP3I+q+==0-n^WL-m$d2E%Eio=J(;2I`($rPE*5^v=M+UDgEHD3-R5`5_yV89^ ziI(FiLd*WKnzHba&W=O*2<~`jK+~ipb_42h!&mO4UOr zE76nfbAr0qJqA>pCmM;ca1%Wc8yP3dB$c5x&_zlpg5bMHio32_8<4rT70U`s)ugCP z$P2$B_m6;m(nhnx#?lP8nGZ&MSrqqDt%MATx*=b@Ca0Xnv(WUlw`JPS^|y<3EsYgF zKPPZlgJC&wU4L}gKBt-}q3SI|Nd0N&H$~QA>fus8A}47?W}ZSFrIp7*sW@w}r0wiP zT~cj`*hBS{ew~4DkzS-cusO3k&><7JVa5ZA3QI8hB9^S_iB9w$T1GoY?)qf9OEDL*nx%A8D4ug=D$fl zxIVOO)m$8XE2IfC{`ggkJ`@;v(z+ETq?6W3;8KKbpIS8s^gB=i6_GAW>Oywo2&IoS(MK-fy4&l=z_Y~wIDj9&JGWKTo36hay5F`O}Qy+ zU-GAN7)x=v&Y5Q;fIsZEOjEqnLov%|G#JTDKRI3+7?m2@QrQySI?Z)#u9lToW2AXB zHS6C6Eoq1N=CSTpzyQC`YDg_o_beBhD{v3$f0IvF>u z*Bk{%_{ecsHxZk+VVHTLG^|uXcdSs^gfI<6PWW`sZpOZU)@%frj?n_+Q{4gYJC4Fh zTdLVe?7KMhX_}wi(H<2MlkF5IdpjKXjxi&0FXp9y`_#f9`st@$JTmZExd9Pw{Nn%! zg9(r9XYY%>J#+$Zsq5KXBahyyvmH29<&RY?`8Y2#59Ju4ag!Tv^RN}+dH3@AuVuDK zP(AxJ{G*FqaRRqb=CweIfE~#l_}`1`-xvFT-3sp#`{PqqHv0=J%O{ij<0sn&n0_5Z(6>;HKHTm9eNg~!Ih$j^!{iHr79^o4ZDtw6Gw9fn{MqfCc^K`~Fwf3=ihzWK@-KJ5Ma~4&HqE5caB64Xpwp z2s=>H7lw@5OABh6E37-nQpwg9FM%L3f;8+!7y|qVJB9(O*iu-!dXsVlkH8LR5hdMD z->uV8<|9fL-p=S^)9NFsGmMz}AbyjZ9K`L+)@I6bHqY7FN$|7xZUQs&+8z&KpO;&B z<~mjcS+83MxB7O=(FSGo{YUo#GX(O+zUB9S;}anDH1VI&xz+Z~m`ZOYp2oO95}@PO zTG`m)+ZDN020eZM%B}aHSUxgG-FK3Ow}%(Ug%iO_tjxBA73SynfL>-emBA=MjU3WfGy6VOa^7BEvNYb82afj&@avaKMZ(>#qnG?H zyRkF{EiHVO2AWLP(2g}7x9zdBojJZMw?II;^8Ea~?&E$CdE<(|f}}O+w=>(7_9c2o zM#cp{H@BIO`fc<2w*=Yu=q3@{ZSrj&znI+WA08eSCJZMtwd@OGl2cfI@&?+?=6OS} zOx#!P=!|xE2hCNRMYe1k2`dM|OifLh?~Gv!bjcE+Ec>@>g1mWW_T|N~S z7Rsuq#P6ThcXKFCWC1z@A&+>AprsIax#Q#G`>a=8p{;Wc1hOk))&*9)gyRtI{nJxY znEBie9HR6Sn_vWMc4P{2`jj^|HoAx_j_+hLU5yT|4|ZPN`|Mu&v_MJGoj)#o`<60S zZ=0?I$>j3=;fz?}z`8=e4L@Tbi%Bhr_>qm5*Q(xb>3f<$gLTflK=y;}RbAFqHmN<7 zKoT22ziul`7K0XK!{JFhmBM^-^^Qz-+?Fuj6L zNJy^_8RNFfw zj|FVFxw(-Q5fRbyZl}|z__TATp>|)syu4g}=_9s6R)^rD;`-=>dFi7x>YXVUWFhW=fEC8Cc}|q4h}N_Os_g_GQ&^wa}r-hMxcY zz);ykZA>QD{p)NvCeTEdaL~j&^h1T)UW%FQOMS@?LWgZ=-v0C66f+OCKzW<{*MI`e zo2g};_rRjI*%yZj-T*Ps#1d2~|M?>EUC`su=3W;0eh>LEh$#&koQb%d5}a253i@5c z)qmdNl^SRg9u{ang{q*zR24VSpt2TdP>TXIbIL|#ewJ||@v?5XzQFhJrfYdAWC%0V z5zN2vz0^clZ@)%+xJ}3lV_~gtpMl+>Va7B@;-b5ChjzL{zYTWJ20;^$n62IB zi-r!I4Xya@q@+5VZ@)7cy?*>&a<)BsySVc>+UCAEEMV1FGsalAK4+2K+&zav!1>N1 zo8h-H9RF;)`jdm2D2r@c{#zuK7ZFp0 zYc{G+jLTk;_;as}~>GYbM3c6=24K6kZ<9WR=Z5|2z?r!jf zg@-@5`hL{c+8asds!Ot-t$6+jP$zp6L~EPTrA?P9=-WI~;||c@^p`5ew%tHF(%h>u z8K_N?F31yk`%LTsF~mvwS?YmkV$5 z;Mx>Ey2H%xa_meMDb#@`clbT)%s_V}zE^S}afi~-tK$}&TG@!et7yj6^q6KZXdJpK z{69MYnu|LU{mymAt|!hod)oGm3wD|n-}Bt)Jjjf>9!1{mQ2^TZ8S+R~+N@71on0%= zTr0fQjS-ezCtCXX7+?U!xUJ3)1Hm3qeb%9eL^c3JZ`cJsyW3;Ddo2V6J8x7#pO&b$em_l6mZ=U&?p>kV?lZR(g9;4bvEh)dHd_2vWpaNTxGHFAP!1z?LnP>N zoO5Hh(tfzzLA|uE+gn4|ywjqz5(JI7c!yZvT{1ld2UJ|Fb=(lYSZed06}Sv^;qtva z(9(qQEE_ml)@ZM@o^2i|k3TA;qz`^`lp^Wc_ zk3?~3?fP*PeIU^KaE_tls2rIpdNFIl3S2bM$T4+t;bxLJp+5A%OtMoBIQR2#H%)E_ zzjJ0JK>3Vo?*`Tf5V~cmIKr$1X zi~o-Bw$Z;0hS=g=Rm0g*V^z%UthJ_JLx|%k7{^q<{u$GG6AV%N=oo@z`1oVW@x}O| z+k2sop4nR4hl0?|!^3g!D}Oo)%8Qk6OL9xMA0GVK)5SfqdmqPwAx&Ci_8&hu+av%T z?||~W{hlOq{*@LVfJ*o2-+eJ3DZOzX>%IQF9}DK*paY3H5r`a;Eo&vgY!L`U%Ar+j zydV`Pnjz{HW6WC^vZ0$5x))vU*`qDJ*x;+YefL+lwcDLPpW=KP(>7>>F3NJI_74{o z>Breku}X)i><`@2C-FQ!{_m;5(=%B3MOJGL9W`A8!u6P;kHik_RRaLUx`cn&KVIuZvZG7L(>6Iijen@JjfVtd@b8 zrlPEZlqzUj%z)X0lZ%sujg^@jw8?7B#>UCYY0C6JPyJ26{wgN_u^aXGqB7!t?HHcK zCFrSs5|>Zn@=07iiOVN(`6Mo%#O0H?d=i&W;_^vcK8ef!TXFg42CtC+HDUK3>hYS| z77vL8^>~rdf`JA6<$vtI(&puDzt4{O*rD7JjP|&Q_;K^Tm_7I7zGklXxEn!O?mD*{ z!BVT_q`=iVA)nM#9hW}ZE6L3WBNCEFp9AN+v+yZDK-m)P(z;VrmIEeCBhnNURyue8 zHQmkkktx84<@*9DVWrs`IFks$-aZMX^g_|q3-6tT3H~B*-lNp9qYmw4GtRrqg+{nM zVZu0m24(eUlKB1vAI78-)>jwSIWDJ)cY!x;W#W*&DZZj8MiA1_yhRV@b$L9^MV?($ zg|v`nIn5Ed&*%q4m#3S|&b{;5y+?YcLGJpP;y3sOo=Mxr2#}j%Xz0?=L$8I;sPK^t zO?Q#36QQP#esp4%V*{KwhGSTz)$@BdDDorDxfxmYK(?TTS4Y;ztYM)EaVi=m-6)nsz zPsoJ{nm$&}2NXd*-`QheAs{Vc!FI^`#s<$D!}`{k>YGSUMM+2SB_U-ThnweGIaCLv zWVIYlPG3g4t}!K-Ty9RUh7a`W&e_;+z87 z8}9&%WuL{Sha@@Rb3Gl1Ch+aA9N~QBknZ#HT!bN^6}HXghzGv=5E{lyz#WWK$BHI< z!Wjpyd0IHvC|gq`;oUA5xefvr#w^MDghSZ<0B3q>%y1z|{hP*|B}(mE7RVP31gNkI z+=ymnyMzatvxbvA!BI;XmxB)>;f!;Y&=mW%v8!|Qf>}h88T>6oBiQ0xgl9mDGF){o zU3{fh8j4|yxO*aFQc$aW5iLKJ$pSm z$*MQifHchvXJplxG{b4aL1>Zs61_=P&7i=%lf55eVAAHuR9PHdhCyu!SS_YH$fz|X z8Due$BRHS~KMhHvAYzvWfw8TS?f#Au!Ja%ts)sl1Llz~hsT_n3r%Bv)oUJi5Y;BG- zgoPiE@39?KTqpJ$F7)Z-@$VR>c&stZ3v;j`QzZn)rHvLSaTh9@&at)VFNDH38u|2P zTS=Je8I7ieIJub~6EdEUG%ZUL4(4vg-*M1USX&T%%wz~`N%PL9!$TxK;G9yYsG4;U zRx0E%jfm5m{iH$nJaCap`BDS3PU@vL{4G^jeF=Nmp%t|_*SZL%skb4vb05EF;9Oiq z{Qh+ZIYp$@!)oW?v!R6e94H`SLqbS$he91SL-ss&g5^2SuI*w(lN{Bp5>z5 zIoXz3yr_1UsBR$;oJyhB*OhryF$0Nv$Iw$&o8Y^R_?*Oo{@9Y%^ z(a^6Qz)vNBdwu~HsB^=RjZ}2{h=ZftVGY*Zqi4xoKH z^KljCQ{q)zJeJ)av+r~3jE|PUR|_|S#ph|y145|w#hvFj>NvE63SmpV1^UQmYK%g~FGBndfKDfJU;-XB`-2xi z5trmJ?_*Z6^@kHIcA9G_5*SpOv(W|H2m|@&UCya%I$<|VMe^mr)PdL%@UkkdXvjI$ zwlv+D(qLG#tni3P0f=mttoH$EBRXkA)F2<_<5#p;)KvB zsq?9y-xJg1#1xXLh6Tkaj$>M?7`7S)jg}@I2quW>7Sn#KyJ_Q!{A7c@X5AQv1%qdTShZ3Z(@z#JQI(3|DB;cUF>XIfS~H)D?v4L_69UAAb-cq+8&F9f{2Rx}WUT zR}Ybt@V>wkdgxXQM=dZ`yI_Y56Oqb1Re6Q4UCC$G0PQ*N-B~PkrBWxNzq3o9(Jf;bh@;(q|dqpWDo8ezU0 zvzvIAq>s7@=XqVadQPQ1o?f)FFuB>qFaIc9e32TaWQ-` z8tQUX$Rya%m=n5F8n00m$)wvhhUAk&98DyIi{Mhqm14x`z-6r>n5bh$N|TDw(ss=< z3c(4haOvg=b|W|tV^qx`k<&6%NhU={#sxl&7U}i4OZ2wldYbvtth!aW$uznQrwRyL z%8{1GG)36Qs#SMCqSGnajD=!Sk@Kp?tl9zY$8ooa*y69&y~iA1YRqSF@GhHss}{I4=nKrl((ZRK zvb}AHgkl%XWk+Ap#jV53U4r33&{L%lK3^EV_ix)qh19svElXWKJi~Hhw|oYW!D>Wg z)@I*M*PQm57uP%6x`&eE1B@qZ|6+G!8DdpxN5cvxH>|V7_M;h zts@}U2VLoAo*&!vgc8AA<&z}ufVuLhmKXZ5oK^JqxQ`{}CzR!HNN#;M<<{3K7@*Z? z^{ZtqIwVV^Qx{a$ian|_hm#jj*HYY`XvXGq^9nkS{#t%@P=1Q$Qdj23PjGn2n`U#x z@Ni&9&MDtwl-~4}r(nFLLOLiZT-t8(1t z_6>L1v*GkPO>yI70(Ix}) zIeC_ueNnzvJY0K5*8FWJtp6YS!+tLm{_X6cKP|ca1EKK87O^Lt@T3!-bi$KPc+v?^ zI^jttJn4ido$#a+o^-;0P$&G^n)h$-Eo0|oW#(YzGWo5)>(BfAxA&I)woi~9kcE@^ zzxvvKSuJ{RclbsR#A8jV0{i#(mi=kp|BC(ZFhk}Gq7vr7n2(5b&1xk+){ z8O<$0KCJVBOOzw2JK0D-&azR12y3b6PXZD#NK zZ-VfKTPlc}rU!F1Z%>39t$fNu&%4?ra2+sCuYKlgW|KOYZaHH0AG{wD+S>1EynU}# zE^khY4lcG7=JtoPt5L|S?`Uq5!pQxH+Ra{#tt8)TlRoG?B=|0bB>Cqm<{T_gC4eSG z@9}~r&@~TbR|C?b&x#I2a`QpMLxQUFpkb8EB+xKfZo!@JTqWcSdWf@?7I!8y z5~373vr3dNN!7Ek+cIBD=OKL(tIPess};pduiOKU z?l34Pi9H~V?{mOKteTgE+qHh>*o9ZaAZ?q<*^Ml+Q*{HKzP%dh1>so)=BS}J!ChM<$X430JX3Bp0ji|%4MPeJyOh}IVkaLBigtJP3& zL8O294il=n{*JO|#$y1up6{7elqA6!%j6qy11yht7;Nt|8<;#Nl1=6JWQ|W4Hgf}6 z=D*|)&B93vzC|J8?NtTY_oE)hf|@eyPMVw@{CC)|44PeNZVX_ygKo0VI0RSS`0DLf zmalAM`P`4&fn7G=B5|04SU+8R`8+<{!#wKL+jQO9Le~h>3FFcC-0K!-(yt#z!h0|U zxCOB`dTf75?YOsd5lTUsf1T9T3u-N4Uo2EF8wAux!<-4rjDSr1$E#hThoDxmfkP@% zyqp4ayo9o8tDbsjMC{f2H?c_HI*L_kkG%PXj#j>GcFvnE)Z6ZMOsfTX^yIBBwYcxz zm)&yodh~RQp9rF@qab3ewONG$74Hdl1=t@WfKrCoA9au}m+KyZfR*%vHo8X=L7&*= zqJXAP@`|kr&^1Pfaijp-+sCUDlepG~ErSz5HmWwRDqO8d#qv)?(q835`Lm@1(7|<6Mw9v*z(e?Zg+aEb+yJ_`G0PX(D57cNRDG-HAw{b$f^!@_d0%=ocq} z3MKrvZ&8&{;GPyc+-mnYu{9fDC&49$ujgO4Y|K? z_(sK%qs_$JbYnW^b4yHj-mkL|1D$P_CA@4TMm0Ee z1^q|czGSBlD|y*x0A9zgwy){rlEmPeLi@{8W+UpIMcS`4*GOCp-(-20k^n>D9ln zaQ}Sa{kQw@|8(*D$3FbuUx5GZKKy@r3{My0rwj4Zh4|@0{B$9Hx)A?IFU0=~p2dH9 z5&RE%7RL=2oE$)&#bQvj`oGMx-yJ{UN{>|r8tMPfrk;8Gj*LFYW-%7i{Dt^I!ZSoiuJ?$eezOy(rxA}ImNfukiI zTIH6}N3Zpd!%K!<;uTjI7efxSymxoC!@FOm9??H@s0$t4gtW>Pf1Op(l+q36sT2~T z9O$Gyeise{iHpY@Tp4GGPw5gS-ZQYkueZf5j$c-|Lj;_K1cDaOMz6_O|QP6Ko4 z?Rn~U49;08Gw73psu2=@q|cN95SzY?4F_6PF(aO1=*p(s_y?PwDZxhiK;j$>Vdgi} zV&U&hi`T4##YbJ=-mR_B8%%kcX&76YL&qlwV`#UynyeLzS#zs&Q>{R@4$0`O?^awH(in5{DX%--BRmJ>Kj=!YG z@ZHZg!lb91fJ?e-zOSDHH$HGxalqUIUaM+9#<7NhDB zUg?<-;EAAmG3!kM#NS0y#W9%OcJZzfMxu*V6O%Lf>WKlz(<3?t%sm^r5$&5B=$M&BI z`g|hfjun-`9YEhlGK#3CtJ1Y4iFy?BPZfGa*=XaOu~Yhfhu1MJBbJ@US<*QvX)mqa ztT?sGxu4J`*`AqzHllKGh!r5SnESLNw@wfZpHISOlhsbhNl zuR9)exn87OuRqJF7kE;RLs#2?8 zn2J!A4@Ik$MAxE3FDPnnptM45-eAq3`qMo>jc1E)8L7$iJzM>_FWy3XG#5<&n{9E0 z3uIf2{d?PDi`KTGdrCcRc%nG~+bm7Qoa!XcbyZBqczb%0KyUDyV(zV5X~aYn5EVMr z6p>5yo3tb;3htg#9<`N;KAn+2cAWEq zj7o48E!XT9-yia*@s*a%Ud6#AU@ld)`#M@t_$B(@^%1bCn@*TxQASYAX)ffKB}!^; z`mi^hR#4cFAlQNFgfsCVt|dL2!l~|;0#1PCE)$0xGNUUBC{Ek4>#Rt`>uW>B3Yslh zCe_85TUWz(eC)Pk&X1bJZYTH{5*vi;o1BbvND7<@qwCVMH~t1Nm7^eVX`%dSTSSTHO7eY0>=;rbW2ln-;15-n5vG zHl?a33R!HU6X8&V{<4oFyc+^?wHql-R>-gyw(VnoKaAll)+{NtY|XB!@JPI1F7je< zD79AZCQ1nW5Vf>qhXlfI{vI4w-YOX;JM=szE>lWQO({hSiWwSCDS}(MA0P@NDGH-K zh)&Ds_|wY5{1G>d5`&m^fbpmILJ!tbO6uFYILF-@t4Wo$1|5`WwE?e11O@NNh!4*f z?2Qr`Zv>Lw@2IFXFojYp#G2*U#6O^g7<#GmXX7JuJY$?fB7F6^gd0*pz8d4fA@Nj; zo4|1LokU3SNhmYM=nv1L`q+9knCT)+l|wXgTZA%?fD&x>SY?~F86ej{O;fC7$Q3Hu z4Jz6%;!EJ+ZrYY*MSdWT+7t^u(eyTVKaDbMo&i@hJU0<9)p5*_<3|-!WcC^vi4E>c znn?2#Ns|~?u)p$i(Jqg|bFCv_y>5Slfgua^SCrB;pL|Ac7*I|-GX9#LY`<(@ zanMc_h|bP#e8fgDCCn0A2{Pz_QW2mO+<{X?n@8=ERYte_&25BCA7oL6 z_Xe0Tusy&eriM=y3qCb~D;U5*vMZF&q?HglZBHw|4hmrxY}c2?7D8cK!7M6e%?aZfJ<<0I0SH9zZf za@o_1>2E2I%(fp8X{69y97$ddTc~Z#UX*R~h1_GEzkp z%-&5~5AbkWia?f8ksX0SfVrDM8Fmh6CM-2q=}7U^*jQ^R>QWlQnj`nV4zM_fj)d2Fdi+GOI&^OmSYN9n8178$Ok#=S?-+@UMG|8d#* z+>+$M8#feA=MoIQTzCI7$d%%j{Fl65f>|-<7*)xkK2R=wD;6ZDsOW+KVv6Hn1{dD} zCeH0-u9`k44FgM0AV)4(3%91iKP)#j{x8T?lmzp_Ankv_jy1OIko;=iH>{$xyi5(7_S;7JTTiGe3E@FWI6 z&cr7%@FWJF#K4mncoGADr5O0LA%Pf#Gf<1y*o9A_iXSz)Td7C7HDQs zk5OIh3QmSwylX6bb~{W-wjQRp z7Gakza}mvY_JtXIXTW>)x(CuhV3B{C%ge6JMYvd7(0u!5Eu}i zv>1UUu=s!2d&{7@)^uGPcMVSP1b270;10pvHMj;f*r; z*Eh^u7al0SlhGA#a~Zu5@2JL8_gFI9ooQ6#uI2pddou&w3|D(Kzfi|;cdl@MFc<~O zp^+m)pGsrU_;rq2^I`{>ncM#1lqEqr zpTpUE85HXx7c`-X#Mb}f#;C%c6E>wsE=hh$Sy_v3Je9yBwblrEd<~Vmx$zerIIJvl(600^u_eYfi zH5MHIAbMnK>()R;!F|JrJnwNg+u4{mf89Df!cdVF#{s>RlVrZ0e=ie|%q812h%-|N zPnPs8XvnKEGOy~6P)tqBMf!~f1e$F7`sA1nw--H@-GdHErOP_Izp5HAic#04+wl=G zu%yC-%O<<9(Eu_xzpOi1LkYUREe7S{t>bl)5tD5EJZFmYP_7uTbHApAM0#DMUL?V8 zdy(5_5yS(zt3nVMg72I+^0*0K9>)R#05i8SO50D3>&i0GW|ZabRcqIuPdh zN2;j9duNJgNP+3bNq90_1&-myat z@)UI0E>I?NjksfkPSS9$u=XDjfSKc=9U!pgSK}bkI=}{*^PQjPC%0vv4d8X7NuI9R z*1R@7SWBKpkX0xeN5HtAnlmIiLyHH6tpV+jrbyGqeIAZh_)Y*Ae8O~UGu|Ua=Y9!I zH5rIDGr}W;&=#F`HYmZSa`;G2sC^L@B>Lm5mH12&>_emb>m>oax^l*}+cm;bdml2c zcDW?tsEtzi#ZQ`ovCQ!LBq$$QGES9Ta0Ni>jfCV415Fz!`(xTsdAixogn9JwM?%`| z72b<{oVxUPRY`T0stlqN7u3S$$B{f#BQk%n&ln1wo^sXULgLz45-h8aL+m4*qYP0> zo9smAeb&Asi5qFhK3;8l<>$!>fxD`n;W4Bv}CvWc=H353`QaV`PEr^_EJ z+}FD}sL7y)!%{`k^eU~xVwDApG}^?UT;^j1xlh!kHwodnn=}sV3nj*RH)(ot}<^@wJyq=DC$}-Oe-~dC1p-I?tv0-U{Sxd8r*Z!%_&r>?V?QQ z=I)8vWy>a61~A{2>L3dT zG+yTswM2bQRWfhD#IQ8*LJsj1OVlKp{rf?hHaG2=Qa^I$Y_b5BiW}^K&0d17&B3$v zq6e{ZWlAkWuVgsxr4R*e6An8jZ`X>zcM_uMNa=p9&IwqeY3|3KNDZ-hFZXtg;#IB8 zHeH+*Zrx?ec?V)`GKMiZWskeQY#C{1<%T6bJbi&_$YE0-ZTYecQe+kshW?iw__G)$ zL9PIun~(Eir?+nQj2c6QXO|xKXj@L7RQ*l|J49FVu0S=`UZ4|~v5rr`Oo6irh2!A$HRIivDk4>aM5^SEx+Z9m7PdH+UK?6V6}Y01Y3La!S26%D3xvfj zY`reW7QxO}tV6ZgdJ?SNkRC`7rPFcN+C+TxA+9;0VP@h&?M7>G);t-sJ3*HRF7I52 z$KW|!ZgHPifaTy=6dITvMM+im8@JhS!R%MdkQhrgR@|AAOPV?0!vTITq2Obs20+yw zzz*WAw#kpF86iFS8l$$;`(Oz_gA0Sf=fbf&MQoq7%?cJqABncr@WXYm`0cm32+;^% zih<2p*PfxKU-=M0_=>B_p7c!*gyd(d>?>yLE(se)y=^em)P#k4H61L>2TR+4fO1fe@`G^EGdQfloxO6|%ELRs;N?QrZe%h$V7aRqCBV z8>u*FN&>8Wj&8gYy=4v?2L)M*vOF0LIaqD(ZasmQvh9`!b*z$!WHDL(p-|qt6j%@w zG*T|#I3nw?ZL99qJx`c?MZQ$ zUWuFy{xBgv5+T`&sNQE=dO)xH`;4c&B%nX+7poEbkH_eVAL!I$0x8pXxbcC1LU5v< z_M)oGY0LEyWy`L|K}!Mmkm_e9mM9sAif*@)D!FLb)7(@!TH!GLAXOw-keyievGEwx zN#}LJbRTg>IiWJTG+}_xE{fI(i-%^j%{Q~?>mx$N?h~lPY1}Ki7s-MegcygJsK$5Z zFqpn()0j08r1fa+>UpHAyykEiJu9Bv4}_qjlKL>lDf4?JaWzF!9q{(8@GFao=X-aQ zH%Pb9D(?F>&+IuTPYha8%HJMjw$GQ?0j+X7-@_~wb+~PJcbimcXi?p?zJ>tXpR=jo z*QO>7wc6e;S+#KGNT)izXxQ+pATI~5jl|C>~$-x7#BfN|t zr6O?s1cc)vKTt2wd4#C}Q)Z>TXecO?HwE~j)RRM#O6AM=oDEM3muJJxx$T5@c|b|Y zrYqZ;PgzAFM)hho>R^cz`xiY194Ag02C41A={2)1)tl+VUZ=(_>6wEzxBXp{dn-r! zn|FIE18>0{qvE+EJi%R<(?(Qc>Bnd)l)r=y_Up0XUuKV%2-aWAj`oN(TN93dQ@+0E z-1pq`n)P(x>giqI4ms-ch>Nn7W#x%JzPOxmMcEYYOzYF`U=p&X55F^%6x<(WfPXv3 zG=M=5?>5Jz-9v}!*n*S`noIWii%2$yEfjy&xYOst0S7;7$pUjSJ}WfcAH2jX%-A9A$A=J-nX~u2k9Dns8)O~ z3|+m>`(~EnifR|_kJqp9GP##g5W(f8T{IEk%D_vMVHvS9G6RzLad>%NIrUrWU1 zX8&|_lkj29sJoEa*R*?l17gKn3#g1)F6}Z0TiJK2mMLjRH*2IV>b&?U5$)^!wlzsw zTd=mkYRVXvGt%)j+d{WL$P1L1!^9sC*QK81s)aPSlkp2ERX zICu&NPvPJx96W`Cr*QBT4*vfW4*n6h{Q}x$V_{_a6WV=CZadNoK)XDEs+V6tyWdav z6}&ba+x&=jdm{m8H@CrojxQ4T9>Tt$MS6*^bUx=GL9{P-jCw4>#SgO&RyH+&VBZ6a zVV(fk2abL9>tv=AR}3k%j`xfstWFU6Qb9eHhNap?V?yc_ohDyap*wIig~pM;iW}Cq zaj}~j>922zB_H^q(rq{Wn+J!&xfyuzV9w@siLjmONNM8IZS(gRaqaXew~r(@uc0ZX zZ}WN=DO<@}DJ$Y;#1COAmema1gr((P3k>R8BnP5Ig4(`f7B!G$1~;G+ur_cvrQD`2 zHL($=17KXy?B4im|JKW)gU|G|GYP7n0!-qRcZ0ZalXO8wA}`y{0wGsi>s*Shzb+{6 z#%W>2$+6!}Rv>Ruguqxl6#(!TW?9w{5*S zQ2EyERanZ>jM^)ePj*dVaXh268Rs~VVwueN7HQ0__G(!}u3hEg0?~9Zl5D$jOvI=N zwXR$9%NyI+!r7wV%s{{F>z6QyRw01o#6VAnzgWKR#Ihy({$}$L$yB?)PE& zYr6aM*!=?C{liI54_Y2jo`qt@^W$82#*^Chps@Pp810uJ}fp8QAYegL0dNLhQ%AB+AMQY z^<2o``K}az?=k}TZjCzQ55B924&b|DQ7wb&u~6I22cM!CQeMVotq-_6-VSpNt{q-3 zLz16xdI!dmg}?sPE_ciwj3>xz+jqHZw<7ZPv(*RnL^Mc_FXArG##Ra+@F4$vuL*mO>j7ak`2lIfFt(6qxWy z_FlQ#*Z#!U^-V{BVk8kzrFze-;9jm2RIeHL;IelpPICLmFS+|aGJClSi!f~{zuXxI zy`^7P&2P(d)WU7ae%DkfTDfnegqJHS$cZzntgM1CZZGNqdN2-~YN;W)$kXitiqxAb z!WW)Uuq>aH(+c72O%rs}{;jvLUko-~4Qf;aC9R1!b{N&04%&eVwPVN`FDt zWh$bMETc3lvO);QT(K`FS&K#g3g4y)^#D@P4guML3VI8aH2F)OqK?2B(pZioW0oLZ z8fFhQX0-!U(K|^tqp?aX>38kqlJB(@LT2PrpwaEM=5p(N#4uz~r1ma_J-phE%Z|${GVm z%&~hUNi0m8gi22t{E%$>gYpItChb*Xh<(Z3L*8tKehTwoqlB20YR6MmSjLEGvy*=;%t&RjF`rJIZo$RVhJ0cq z+U)Zj2>$&{k62aYt<8CnStJqc6aez#82gN`eKvtco|oRqUA23^ypsDCA?MvYD=ASG zbCJ>}rIhyDV{yOKdE3Y}DCt>Wf0Q0gWZ?n2SV&0X6jvZqc_-0kN*y$QpG+krgJK++7#nz_4Z2JSgt=lD7-UVZ= zwEWVYGq7h)b)dTQjWm1ul9Q<1&e7U0S7eYc0hrh0%Z{ImSPJ2xAf3mI6|oBh{^Ggu zgANFtJH|6{D#L z#Y0GSfS!*}ed&kMuDeF5Af+c#4>JMU?rtk=^wS;beO@)pBnrA;rE8AqBDa6}QZfD* z*pk3}H+xoeRTPzjtbnZR09~42L=IW}EF=`^9Yswsoz}Rwv68$atRWBS0Mb16!KV!5 zgm~l@e=xIho7zR!@kQI0<``r_c&FBnl-Kwt$~)cA^v%j}Wa&HQtyQP$iR4yg9&P+V zc~JnAw+OE=k{jOsOUHN0>sC+8#vLx>0-(J5-zjek(J8uTn-o0w4dcsUW;p2=Xz=2M z@ka7TiihspnHPnBqP!mhzaqSJw^W*O5M!p+thLWwigm-Jf&h!*=ZW9CONesmv=M zSzgurh3rk4F)hd{SEUvJz`!$ zb2>D!gqP|J_>KJ*ivchgzN`ZISkyDQVEXbjz&~T&_O;<@p!YG+qeZ}C&>v8h%3?Z9 z#OU*l-fO@Em0+&Emen~r&d)z>(iQd=1&_25u;Zp+f;IR~dFONHKAQJG%bizJSyX!K z0AX6(&5@0O6{z*`wRH!gJ8&mUnJdkSJ$z-A4GcYMYV!)(ZIEOvX z8v&R%yaO$08PbMTX))bXI8%@JG$fNV4dURFGg}HxPpEbyhK-v8G=YZCjP;5L8cl|= zito7lTjnnhdRQy(N$;ESn>j$ecePwZQg7U9?=YB}z& zOjUSyKU3HB;vps&$Ck9q#B02}g`eeDzF>Pm+Yt8T(hLjWYiv=aswfw&ez2bfPiAej zJu7#-d4#-Uzd>HJz*)~~-k#g_Bedn{UNS<%LMwNQ)$=23F_cZE&a{E=keBZ7kazJ1 zklrz!flFe;TB7ZwgK1a)jYXXLYU%;SEPZBBYAwDSG83&lz&|IL$3@ zka*F>91_?2xy7>il`L!{2NTuqyGIMde_YvC}oP zkFW6(v4Ubra%Tt$Pk@}-@1!RCQ&=Ay;ku24NHL@v z4lSMBjT;Bs$?xF*_!ZEf6T&Y*-hY-5{wv7)6cC;Q!c#za3J6aD;VB?I1%#)7@Dvc9 z0>V>3_d(W5`Rkk=$+@hLJP4cb%!7M?wSM$cjkMG8g4U+R+}u)hUoh80>9(-{>- zF{HPOM!%lQdNiw!79UmHbbpa~xivgAujxhDL_z}Orw>F20VD_ZB9&F;$b!3Nz9lW~ zE&*rWD$R4oWEg(|dpXI~7GU+BRL|L7P9&<@ailb{l4@Dt)YDbFp3gboJKpkLx$iCn z;?G!9(*ZBi71f=U}I*T^{IENKZTnJzggHU`$L=rAEmh4l7wm zXfNZ6t*4@!y*p=ib0SKd`H;2YP`#F1tSLiAPdQLc!AuX+(B;~TgzxAYA>inU6PQG7 z=iCqNys0BSn(iECnt4V?d{#+=x)N2D)8hKI=M-+n? zHQX2LQw4+!s2So{C$>7|)?~-nFHyi4bq2}{JK}f!@#VXM<-{z)AcPnxaKIUL#6?pO zy52*^;U57F%Q$-Pt!`<0v~MFM#k@-*WHcga{rbi47Hr(yic;3cQ%xM-JFxMX-#py@ z#p|)7VNhBvSdk08Y-%&mxn+AOm?I@JGedtAtU{GCW@+^amjweF?o4acT`mM3?iu^{ zR5M>E7C}g6upFmJG4Vybp*_-F4xYjJhjKihqLG|N8$Gh_y}6;;e`d3U@3z@lKN8~l ze!4~b*35D2(>UjTHMf0i>8f=#k<_W&`M#UsGu#|O&}IyCIT#07WwnHSULl zY)=yvBdmLr8d;$J7dj2uKe~q4hei8mPdj8`{PcOvN3-KR+A^sg0 z{>L%?Pr`5)H$T}r01OBFB^dtWzW+ai;rl5#!|pf;ft|?j9KWP4`jn?zgyZ2XzmVP% zCKPAoUwJvYliECCHEe<{sw*z1py~`POv-;lV=YCLw*Em~aKI!+)+d7UZ0>;d3sq?2 zvL}9C*AW<=bPkiADx_%pK(^p(9D%Z0qqZ>bjd z7CUI-a2Hf?(T~)d8!qM&i41ULdtX*sj+3(+aRc!=7lUQKE~&vIoxlLwdF=4shDyFX2oqpCGv$^&+RiV6kbbkB!!Yv@ z*|b7F{k83kHAaXi4Y!USHpc-rrAUIqxHAh^IJJUG^16b&`wQ7H7(zP0nJ(9fF`n_A z6EIgEExquf_QxK!iIz#1B4N;$V}H-bNU)#ZaXnorr~W2|LQys=T|^UrFQGmi2}UPE zAD`~d7Ge?^pZLU^Kw~_=#}h_fY$iYoN1t~%Ftcm-+?F|W>jO)i$JwrQ?z2lLfRTBF zY6P9fE+JU!Ff(Q#)tS`qM;)FRrlb`RB|w7}tvIKfawuM9K<6(*KjI!eIvZH6N4JPt z8qIv}v07K6=`QhIcQ$&|o$;`V%&C9Uorg<;ZMxXR!9s<~;Og>&e1`7yY-d{WVByH7 z;m8_&vTlIb18hVzY@v1-^0AH?nhl)bEQ0{yI@=a^3(4qyR z%Vs+0T~!&%Bmc(wjenQ^#=r4IE151>DQV;2_>FILjXNau*f6y(3Ii+h+}3R2Wl^qx zalF~TLRX~ABF!jb;QKriM)4BhL1xX3=IX*Fqvlfxree)y-$xpD5C(m#<}$2v;doek zJgkFNhkCV>`bO-7d9~h`1R$qoXr1Qu4^Rvh`wC!g7dQyFLZsluO4J3^kDBxKxicLW zD?oGp1kjwhC!pUSK~Ghi+eA>yR(P^wWkRoLIqm_T)Tm&JCBvw77JY2ya_LsFGLumXOa|`R1P5Er=-tbw}~*FyM~=$#NGwZ#9{^ra^wJ~VSr{HJ_}&S zx9($^#DRZ57*M9WAzZl}E34E2S>r7zg4oRi!<#e4PcKYpRciyo5E3GrqN3sVN-0~( z|0D!~t0bmMo$QQVE&;XQr1m20eQDS+b(+%_jMID>#v-+7m7}-M4&k@%2d6_j5xF$t z9ag%fBQ#KzvccOU<*ohuW6+@qm&R_ryV+Q!v!>7(BrNO@)^X7_@4YuSvy*(aG?MCY z5bbq|kiL_XS8*64G2B}TkV#})c+s_2pjKvNW0{1e<+?W5?@VN2-Z90x7TRuqxvt@j zM}WEi*e1@X+NQ8dCc09@o##ZrAH`HB61BS3_Ho6a@gEuZH-iZMuTc}@O1JNmIN6L4 z-}$t}ed{58Yg(J(!{-A%`t3BKX-57+ZBI*L-h9`MTED{ZqBP>=U_m#ed9FgfK4x*5 zH?$I3y8*>V8uDYwPdXw7!G*bnE8*XQ-};{6ybm;G>p`CLMr-7b=B12;edxG+R_I`Qg`rb~60T!JVE%gh(74 zI>;{dVJvBn7tTgDtv&aj%v!`o6rJpLJ~6)pDNmyT_LDfif!FZu zusqo}qe~gBFj~~60tLCq)-;Aj(wW_P6nQ;lIRu0-4e6V2yZ7=_-xR2B*>07c2g$Fm#3Ij5E#S}VXuyeL05;c83W1gZ^LkJx^iE8?}N)w0Ky*$$l>_Nulo zS&Te#JWnrQ^cmbf(Q#p^$G%hSk8fD^!Zk3AT-WB;`r13$Z30#ECAIr>&z0$mOrU0z zOEo3yky&Bp)GhkNy>>tS zy93OS?jUKJH2cN*@~aWYctP2#KQ$r!oDKdp2LGqo;Qt5)e~Jbi&`;6eRm)Q}c!~y3 z(cmc>JVk@2Xz&ybo}$51H2A+94gQh;{R#kQWnlP|>8zoJFZO6UBmR=<%s}^e!msf@ zPOInifD-F90mWXaL;)bBf+=`1mHG(l_hB&vV%smS$P__d=11xPw*b}7chE7?>I!oP z0SgKay}h*y=$xTx1DXHsIcuqvq0v~;z^bGs+?Q{XFiWZ+?NDp;=fTvvtqyD5c-qH2 zd_ZZ|hK}`oCQzv1qI<+(ryn^K8Q5{>m=x55ix&)QSg1kncGH>8SWmS6smFTAef5ajuF-Mm%Ll`R4}{qHN*qLpkVZ*f zXX`JHuU4V!@Mtpjo-fuaapbE&7%C!+j(h=q?6Fq+y~ld$n0PxZ508q>97Siceq~Xe zYDyUc^IIXPv-`!EnKpc|+~lnq?CyYTL}K*B_DOej#yY`n^;URz^_D~-^gyX7my#IS zGXQZWsVEe+)nAxSp0G|XJzhJD+kRnd*5nF_IBHa)K;*-tMnRO<3J8ix_7Z z%ZjIiRmcswt>-Vw6ku`7HT46UtRWTY9*~p0>;Z811^{=ts>9i6eBtcd*E?+p8bp7G zyB#bYRApJvjBB^JS4{<8rs5o<7B2v%a}jjNn#Z)}2a{NtN?X_E(agy(h+^Asd?=AF zOyp1%*QkGkyVz==ead7xgsepTk$6dw*CQ0*SRc;Jj^L#>{c*dhQkh-C@Zc?5wH-7y z=Zq(D&*49c(ps>*p|@=eI)fktuw6fFYHIBllH=Mhni?AzYiRYZb2Jy@E}6!uugs=4 z3db!tQi{Zl*^-;2iz++YC-OBoaKm%P zQj*x&;@KoG~(FwlGgRvOp$Mjn2@B) zJ{v+SNFg#dgCg=MZaHoN)&A)w}T%>`{M2{J@F%o9B#ESNbBYca1RevB|m{ z&}5CYLG^Q!HIvqwk_(mqP`$y=P1aq2CTqK%C44mB-2$EP(sxI&x0;q~%zDV#i2-#? zAiPOjOwOM`Ye%U_(x$pFA{fUJjhK-yFhzrPqKo2z&4o4$wlHEFAI@Lv@a?vFRZ-d$ zBO>WRiFOg+`q3z)K+{gDJCd%so%k^41YNEYAiaMF`B~Rn=H7h$KdxtUiKsR@*CLS!*CG0tJ|@~}Y~9>0dXFPA7KD=&WilKVUn|b& z{9G&8xy-kP(`RvGg!BXtYpSp0H0&qM`OUFj7DbLK!|OCwCrS1sJD6(!d4n{e9JGR_ zFurgojU~twzo{d(H|{&{5OSL>y8xQA-A|hHmN%?D7>)UFn3p_xpWr=HQQP+I3S-ry z=8OOr0=^F4iBdRf%9!a+w+6tx?r=ofz?qJ1q-wUXH*v!=ZJ6cQ>`KZqISuiwiS!Xr z-KLCR1_$0DQ*D=KIyXI*S(iSRS%>f5hC}PeuIjkYWgfO}94aOvLNT{*P&ryIkGn|qUpzeuGVpLOoVq(=6>U&r{5_r=h%{> zUpV|JMi~fz@*)a8Qr@G#Q{G_|z14^?_ybLh^T#r4JV2Rs#PScz+47H;^Yt}%!VM(6BD+nCdh~Di`-@$cgvEm3;JZ_IUYziq zvw7^BW~pNYP(%3YEDUpK@0{aaI8WhCa3XD)-+?J6NNUofeGwL6VUPSIXiM6g;$pvI z8uchSZ~u^-W5YUJ9wlc>faIL^o8$}ukenq>rN!pR-*FOK7Umtrg{8;LO>zWSda)aT zr(@%)PDsIXl+V7}-Ko+Yko97=a9|Qta^|o4h7x+*ib$hjTh5&sHc~zwX5=C8%K0w!$hu1*`|=k^7CCR28TL$!J$EdgrK`wc4B}g?qN#-Gsu==#!&H(i z)sF`JQJ|`n5=HG3bN(}3$6!nl7Iu|9Jw~=vVXU;TN)~lO3o!t?Yf(?srYzP0CT|gH z62G{C0op<^YyqIV{Q*i^-8I2$J4Jjcpy3%t;|Sz4_=@(iz?gYJJCM$MQu?)tjzy z29g8jZTAsY*&uQ@!IDz#-Y})O zJReZeh*Dv^Mg7BU_yC$S3+!G>jJbG%a<%SaTe1G6>nEj|cq&cE@m+~kg=ugu!yGE&f^JFfICDIJ{@ja)~|lISbLiTA5E5NM4P3YCHuu<+#pFP!PfeAf;{ zQC2eSM|-QU_1NonWFT`73PZIkL>I4fTI-T&Z$ZmvPaWNvcaO~JTiFMNjdLH~19}Kd zxzcHkSV3tf${cxH=5Y`0570FXBOwQ?`=?h5i?x1e&W2n9F!bRLWFcJ_n_+?CHBe+Bb7`GT(r=nG{BN2w#osmO z4uIyIX9LijX&*J`4uIwixB|u_|C{EF_NX}<0yJmk1c2r|0MMMvj{%zV$EzQjGb%uH z)+%$bk#(s4%v8T{FfHR=yJUs3nje z!H?PZEyABQXY$p3;PS-Z_-+GYx84uUd783Cp~BV%#uN1SRQ)5?{2UK{h4228c<{f& zcc0S1Q#yD`2T$qXDIGkegQs-xSb_AE4xZA%Q#yDoL3&CDbN`ui@NXerCKh_OKOx?q zTZR91nKi@r6MluUJ(XGik1w>h8PCaf=>!LFqITuHSyS*c}j>gI`Komkm zrWVU*nD|+l#Oigcrea;Is7-B0-`g|QVPdJ(GKQ@ccBxzQVYUh~Ptl35k@ZXMWP2aw zrjZLnOPSirh#|T{=pHM*D$sg$Ycku~D4yf62DUSFW*QQKN4>tdm>g>qN(Don0ydJ8 z^E{GgY~#>EPSN#iG||WVtIEJyvD!1w=jp;){NxVLn)vB!dn9fF{_fj6=Tv~d`&{-B z@q#$v|K{(W#;n!BQRw*e24=T6K>m(+dn910Yd}bbf{rd%md#<33i8edBtnMbKwt99 zHB|tX6?>eLD@z|Wb}OWe^C=x3ny%4Dl7O$EW$HcO>+(Q#0~3opy&CfQ-e#@!a;F{i z8=%d)ur2RGi+OoWacMUDwPPa%;<#`2!ES+c=12}J4@f}mfXpe%@Zg|1u3^4OYL=*8nb+1C- z?z(ABS7rrsm`~tQ>OpD669}TGO7()e%A7co@JgomlAWJfXWtuoJ06LmMB55?&1NGN z;#x{^De0>7`_WA`RSD8BI(88>_nwH?-~k}7=ueOrcG!b2^z(riLcNpTdv%@a4~T#= zYZHLKi%`h)o4=b1@OM!-D)wbH+6hK00?zV3m1n3P05khzA3XZImL#^?a&u>VoR9wQ z$#muT>!1AHe1N~}@!j8Doz2J0>0bjkAAd%}a)TQ})&PLKRp|3l2iW@Uo*0p#oPA&_ z4iRUvTpRV$NdCQSFx6laY4O?f4dy0Q1-e599m+j+JrorJuLxDbUKQ`tNjVX#G9+~b zVj8!YjLhEV{_uC<&pomir)jhlsEEQQqLM|BAY*S6`aVP54(WA>Nx84Gp)}K%1dr+c zSXYejeO)nI<`P0V2?(S(JmmLv#exxpILL|nppWZ{n_gMZmLZLruIQfd;D8;N0DX)! zg4Ns8RwwP}`Pex(ZSf9Z^I|q)!qHxYTN){GqN;jruWgWze4cj8pkfA(Wp$qk8|OUD z)1@2#j9fAsVrJP1QzSas3g%@3D$~^DJ07>2&`#g$T+8-{hHm>vq>0MtSDyX29Ol9_!)F zk}lY$p~k{@1YjxQNIOshpN{wMyKn1F6c|)rR5BG2Y~9kNsoW9U6iwNXp@*@;0rnN= zKkh5;`s2Q0iJK&97B9?lb-=!20OCz#1qFRXyqtSy1MkRRkI3sv!=+Vu4_AeqQKKDw|!E4J-5yU^~fu5<+l!$@MZ?*!3y#kLnyf?L70{`A)z+oJ6~BCMv*N`MF1gYCj zZzzCTb9q&5xpiG8*J<+#{Ivq+eQ8m4t+{noz(oPkzC}{230hv`_9b9pF%H{x%UK7a z)AxnNH(W8~)vi^#t44VOf%Y~H*gTz*6v_T{-RwunswoRQkUYSzYXh+geD z(q&2+9o_D53`LezLv8l@%e0A|K(h6UQi-b}=Ds^~2Ej`HW0iHhq)Gx3aW~4bSGdVu zdLK+?{WS{W?0X9Of2#3%5&;$#Uz))7{&``s!6W0X05INSffAT?G+gIT#G8iML)${C z@-K7e=iYP_+ji92_@q!S964q<)Z+BJLZb>@UejK*+GR3?tWoi|dY`?mz^pU#Sn_PO z-R=ieS(BwZ02US_l2(~zoXb5U5)?dPxp~DU%PoyB%`{eq*op2dNXOIf+kW!KeF)aL zAJ29aRPqt>0zBTsfADyvBQ}?2Lg#cy4$y8az2l9lyb3$y5ZdHqqLzFo-$(_5stx;j zS&+vlo%E6Pj!Q=^3~qjY?6O{E4|w!=(+F}4cPzPJdg*1ND0U>St+%>p7f1AwUeT>w zYcIt(sSQX=ESj2fQhO8{?$->Vd>~Ct0RK4f%&CFApMiD3FTh9wf=zsSjNU2t-5Wsp z?Hj0Xw<{gY+dXIfS6^XV z!8GivcjC$n?7`y*b>{^sVAeybCp3c`L9r!weMR)jt1*51sw)wd9#e6^Cq%SdS(ysH zd9@G*-VQmPA7U?|s*8fGzz`i(wEFXSoCY!uCm@_y`J+PjdT3#D(lCM#eb->o^T|pQXEDDt_eZO;QvICoKN+RtV%;(gNko` z5k#$9wGUfT`2DIptW~5lxU^|@NB2tpiMQ7E-J%rdyMjB+vP}9KuT}%m%Hf?enUF#HPyd4}%x@Cxf?4#Ey<6BuDMMw4|J} zmBSw;f0HB|A=yvs;(S=?qvh5)fyn7ROgnVjnEs~ zz1j3F)R3<&0|7ns;ardF$nk9po+PPp>Hr zr@N;!C2u?{ai}UVO4_3+KQ<(5NJHMLQI*TseY$q0+XK9xDMRRk*XL2yU%xB7!|CPo z-X;6}HVz!kI1i5sueL9~fnngI!izvsz3B{AQ}ShV@6?P7e@MjRhr+uj%=_+=I`3wg zqSZ6-UgiMl*7~B?+4F9Ajq?#DUGe0}mnfUBKr@4nP1b;Q#g>ojipT3?t)&0iy5gVX!7m`* ze-;n^HR63r2T$qXDIGkegQs-xln(x)FbP)F+%K@ZT3oxn`De_M7|ymloYN0U)wHJ_j2fMX19;RGxz)@vSMZm| zS*|s@{eEE{rO4%0@eJ(N&hpR_`l_9{^2?OCqbSw4c%??FK?w~_{I|RX)a=YPNerBe9gKE zs$>uQ7F+4slqofWq<8{Lnxq2MY#(VXZmJe&^yW-1xBlyZLM>`3ECDMLyHY+@#72p2 zBtX_=vjK3t49QLoocFqeAO}l`y+oTKL6xEaS@ZLESP^I zGsP~bNMDQ&pRHemG#>;dCD04~Ln<)t=}H%!ReMsIAfJ?B2fc5^u#Gr8K-N6}A#1LT z0Zv(iA^E$ki8w1?G!BPxJvC=QbcPlW3d;oAp+%9Vjr;rqTH!kZaPZHjQ=9P~A%rO! zw6CF09(#CS`l>ma zak~Ff+2$n=*hxzXRg4&=4`tj%9Owm*HG#j&nq78g&aaygA^91xy>N5pe3EXyFQFZ_ zaonUBCR&x6R^4LdGrWM4bxO130m7)oTS2XRWcl?gIUppLw%XP3L z_r5*oE~`boOAbt|Qfxj*4|khk9ThFgBRx>+-XaJ|<3Z>}bkw-GfMhffsqkCn8a0V`=G04r&O04r&? z(LAByD5e3f<{A9tcULn*BlS(PssI;6as`k~$!c&%hYye888bmZiHKypWx5IF=CG{q z3xPME!)~fJagvDI! zG|Qeq1gQ9#s+EY{2_d!|6EOA$=Nrb9PK0p{6{Zz{s|jahz5Nz;87{$F!aK4BD^anL zh4P~nw9QN^&?ioOr^Zr0u&PSADImi<-=I|k-+kERhRZjH zlx{g{KJN6`>Q)_qNhZBpDSx3Ja8Vw5gE`40jHtDNLHfVgd+Vqy7kzD4P&%Z$ySpT% zr5hxrLsF!>y9A^=m6q;CKpLc_ySt>$1I{^@bFR6@@>_e4v(G*s|M@!bk@1cnLvJpw z``*tD@R#+0S>WW<(TX$-fIyU-t56qn^9kSmUbf-zy)oFL^=bl`q;=CchfP9p_jv2l zo{@FHkiaR!BNmBkOdU`==z(@GYqn*DZG1t>AaN)11iP~}J260H`coZv0ud*5g&uRz zgY(Xi!oKC5jWEx7hNT?~r{2~TtlLBmki4hHkN-^aEEZ6{Q&0(*XuUxsQu0+s{Y=fd zUm*U);*R8D4y$F(Ofk2XGW|yK%z?5`faFbqL1*}1pG)Hwr-f!*B?he58~UfQeU*Lw!`8ej;Nek$fd9E*eadFE06+LNInhpYA zO%>)6L}<4j$;?KcseRFsm@zeRrgbeg*skcE{W!y@KQi3%y0pKqXetL(P(`04zcR;G zk^l?A%Y$s|Hjwpv%^Su($#j4`v&@twQ#Cc>NxEC9xFdH@Y8p^t-_YLRxH|vT82PXs z*^%%`T^eMXPBh_K%Yh3XI@db);WcEOasdB?Uj#14Kv(uUV<5pL@UD6xzmjR!mZgND z!mCkJ{ls$YmrTXdTel87EK{{DQQ)PkX2=h?nwWR4X1Q0{HsETWvSvrNZb#}u4lZlF zgYKI*Ml-PLRY_lnT#PX;q7~=?J}?rwb|T0ev9L7pO1BwZoH-$eT0TSPz5Tz~q;>tf zDqeZzZko%;Afg`9jt)>3y1OdgjN%qWl9udZFcr~yq761h2X+Ty#e^Yi9&rY;6`px( z(JEPfIV&;7=pZ7iSzvvZ8uKCq%ZegBMpG$2i$P6Z@*^gV%Hw7#k!lDk0k-C)>mz%G(V5?E&ALC^npG;Xk6N99Hr{U^T04HWHUDKB?=7VT$nUo1 z$xpUsUhTcDiSWbL#J#sQx0!ykHIWx*M3I~SWNXg+t*wdw`p(u={j;sv|HIZCwXd~< z+5Ob%y)wD{dS79*`0F+JHUYIW&Mh>s{F*{1BAE8Gt(nR$TvPJ__ZfilmM?xod8j}e z?+PPbc$2b=C|;&dw7|@{V(Zr2+@@5t3fx;Ncc>ABh8C8?SVp){d_64Zwj&g;+F7=3 zM_e%5WG5~JLf}I(j4iQ!H@gU*v;;Jc@G2D(_dch6(wVp~f60~`dIS5BL&t{J2K1XF z-0U{}C7)Jb4Eps2m=9MQi+;6yi3fLzMRyPk`D76P6fL9~fdeGtb_Vs9(xuB-6OQei zq(ZnZUFjfkd@#w8gJBn8xIUeHJMap2|HUeI3)h&9uUqE^PDj@uOl=qMi{@msAkPja6!GG&c z$3s4N$OjMk;2|G8IFGl+IOr%ktX*1?5?R2~b>cqOYIoIS-c}ZnDcbqt-cmDzF|+O~0*a zXtDk7;y^ZT4jy@^x{c>e`gSz6!QO5hw)!)7BdP%z*^jg2JiA&K!WWv3+4aiSDh}6U zRMXVfL9Iw?czQkDNe(y>f_cw~^ztYPyb+yY{*o5*Wg*qgHBAP=RaD&* zKBb}^-_wK6rRy27$rG3_vrim0)b@8t(O&1ngve|>!rS91pHdOj{d(LuCQw_NvSg5T z?C5q-u*UJ?d%=bFQo%*`2&lmrv7Hi9kdK^pt5|pjWx7@M=u%A%gUT7_ZFw@)38f?y z$KH^Zn8TP}{(w5|wUbi*nw`I!>@9bC>;js5BDRX(oLe5BE2i~xe~DvC!x3MzSl+tq z9z343&ShppgRAt9z4XU?>+I`QC+?Rpzo*fEzP4W&fW5z!zXzK?U)`^O&AY4n{Yekk z_kY{<{b!K(=bQPTguDWBnG#h1MbhhL^*1Ha@tsvXtAIB8Uups#6m*xPn(w^kxWa<=7H{ zIN^C}AOIC)BCsSX&N;}W2(AvMzX)FL58mLP$f40u8BV7WPPVRZin)hJw@s3qtMhzl zqDlp2rsg>C^HcOA?vZr$po!I`PWajOov~YUn^jeC(yw6$Si<$}7Q>hN2}3c9Qm?u2 z3gueP{q;eIc}P$ek#Xc33I`;Ui-+SX7pVb3X2U%90MD`+Z&367M z0W^nlgS#xaOY&I;8AZ@jCHt@SQoJ2O8`li(((;@6U)qR6HCKl@$m5a9ckdUO4>wJ(2URA zIM66#FN1k}Ci={%7xSQ}A+NmC4dZ#*Z4xlAmk~uJhO8M_E+gbRBel7$k~r-Iz{psh zLeWl{la+U8;_^3vxmLnMvA&18gym!#p=9Osg^Dp1IN+3&Z}I78at;IDcZi3-PW(C2sgfA0(S&;W~MB1IU86iiIRN z=2p)T-o3SVef3rSTcN26Hc-er*N;yCuc3_CuW%C~%ISuYw8-#657IiuZ*~+{Fp3pU zj|{o;M9Uy95`z>%KDx0-u3a44u~ zi78eb=H#~!rgNAWx~e`y^;!uzK@P8aiR7609{Yt~8sl{dqmCI9PDt_hk+#@x4V%`X zvdF!UIpoVW(294S&pRtY;70~o7tN% zpOP)D1{yzO){Ca}b;HMK6St5XO zO;eoC4!D{LfU9X{7SUk5GT7GRj3GY8mgLM=-Qw^6HFVf##XKbre7B3~^Pba(a7HPl z<8?nRw=1`xY6xKtOLbB5-q0wNH~3x~b#~PK{d+^M?rgX+b7zC*5y`5#gkRucQu!kn zpIQZkzr3aFYF$PCZXhuV3fPhzD0iTutjF$eZHV@XTT+?)lwYF?jwS+1yMj-)%hZS z$ov3Fs`{BfAR1H65MyASpo}VFMkv0MA5&NM2jOLDtr}MDN7=1Vr>|A7)Zan6SkOBS zZP-g%i_V}39kSG}pOXM7QVXw|qwaG&ZF|Zfj=qByygw3OkbusE0?{=nTMosCgsvDK znad1kv(-`}tc?&d!1T(>2`l-qU3fUR_wYHgh>M6m>5WGs7E-yGsT{!XX$Ygs9HTBg*Dx!5obALhP-ozZ{%F(AHdnrF++cR7)e%Hrq=eI2F$9lBh zJVNjm`c}VRFNrWSb6tuFdW~@)g39=ZsJSyXc1DV^zfDiw?M!M=oVEMDydknth3QnB z44<(Yb_j005OhR*??X`bmTaUFNl$|A>lYgsrK6+GhKKHY@Hb~Ip4j~rTknQ0;1Y() zWnP5H@@bKNOE-`i)OuZ|g)_%paR5;cVrb$Iq6xHgDRT95+N z?ak)iJ*PWH%d*EP{s`BV>h!aL^c1=bT_{j1;W&j|FR`53q)D+?m2AKlauvRkDu>0z z#1mHb(;?()zpW*zlmr@f zNz%ntHq?ZucgUJB_Q6aHN0@}6*$NJ+3}Y!O!>olypnVoW39I9!22g;CU#5K1_yT=B z`9Ks`@{E)`;4e}ZZ)Jv5B`y0PAubdH)7}EgHcM0TKGIRs`y*tfx?#&G;y|1eI#WGX zJt9?~Sv(#XW>hJbRZXTkg(!*!fuB5)S9jt^5Pe?)e7VQ)q+c`gUZX;0g6WF)>BnO| zSB7roNdq;UrM`2)x_z)l-0qR z!-ffAQTx);>!}N98xyTM-MJ0iC!#k#7?V$EB0jm7R?a!rc=6w(@p3X4sa<=zSv6D_9>cAMUE~` z3eJKJJlax@*N$d)Tv$x2+!}XeKBF%U(NNRFh@G=`;4+;0WgbnR_0TloTr*+J(0m?O zaCm7Li+(+QH~(D9htr>?D>Jpq)m}6>@5JE+;Y~y|>&gPME4HW0ok$FgU%P&IRO ziW66RFz!@MZ5!=7Rg*$dl#LM5={WiHqZ6(U_-jIrS)Zz@D$=_30gs@^BAo){1j#G& zqc?fCODATIlc}$~>X;=3{iwlU<`2rfP$8sCQN7F6=O@w@2+vD;QVL>Mf>m!{e|2V- z^P&c@w=L*y{2tpy9t*#3Yi%*45nv?v2%%1BJ_0Ecm^j*(be{`00DR zE9(x^;L7XkQ)pxSy{_wsT0Kh)2M6Y-H)KY(oFOqCSRTI_)<5PX#o=zAVR9cSA6fN% zbwc*{_$%IhNCpqd;2{}2B!h=! z@Q@51lEFhVct{2h$>1Rw{4Yrc|BTxH{njco12gkq!S2tEsQ=#5{PBeUchMT!Y)%c0 zhPm2lT}Sbxh^2@s5JI`Rh%(zhs3^*OCP(DO5X58CR?xgHuUs{@-Xq?K_5-) z5MkL@lhZ{fTW4?2;J($PUfYvgxqzY?z0B&Ip>CpRqArde7vF_0o>Mb$7M7NKDbS;5 z7VnQ7{@D5jtEj#tE0{imfTg~R3H2Infw7f1gLuA;XnN=S3*V-*|LdAi|M}ehJ=y(n zEWh*EKS$c1&+gxo-9JC+;r#xuJHP(~?f&^_{wL9{jHymT<1ZKS{`kEA=KDAL25Yjj2}(-CM;zt^$mES4}wrzzX_=pmByC&|h=QJ0o6s%TYBx4bU`=b*WhgiP8? z(Zam;#Ex;kzY}bfc?HUTIAWMNSzW|2IJu1Lv@f77E|*%H-{D2Jo6=Nom z@QsNE*S7f5Z_MmC1b;NuPoTfO1j2z2L z=dZ{h!m=htI^OoYh})x)?;mlpJ@(5v{EXL8y2a`kmIAk9rJ=5>`Aq0;X|>#lzJUD= z zJ`cqOO^E!CHZN??`Jp04>tZ9u%NArAdNC*OYuh^)sa?4^rKb=n=~O3gOS^qDNk9Kbu3S?wj3^6iw2 zxloIzYzm|j<@MJ#U}{x4zRN{;r5W_Z1DIM}1EyAo{xP-sg;%)5Ej6e>(j!);leYum zSui?{kVN&w>KR4G{4SWMarp%A*sd|%`I!xms}HwTW1m$@us`<*RK`Azs7}oDNM?2$ zb$d9eF_w^c$%$_h%lU`gK2NOs1G2urkJzY0l6q6R1ie`ecKOVk^kZt32AEpy1g2Ki zgM@wLunvbI7qt%+kyXQ6dCTGkKL*k#8D-!*vLc54KDAnfA{P;_6^d6|CFlu~P5k(- zhL@K=h%gB;76-Ie@*_mO^xmX5!oaiEwnbMC$jzZg+X#JV?O&Uer6XMn{L82v(at-zZmzz5{chlh#@+&}s-RGoy?PFeeWg+JE-aa$k-Q0+EGCl#E1;M;Enl z7)D<=y&$6n5CU6AHz!58j2xI zRX0bV5VhoFZ}T7a?n?W?n=H=$Q#(q4>>jR6-_`IsXWZ5BiV_YY`V`ErTyC8q-;v$S z_Te$ z&=d^R$)`>aSD8K|rgIdE&J-lkg7rMxB*(M-#B!J@>$~!A*Rkl6Wf8^|(eb?iwCf?@hcuq~j=LR~g7&#WAkBE@GvLj%6@IKmU+=`= z%yp)I?oT6l}JdS#r)|nGaJwmg&-6pLt!hm2xA=5x{D3+ffRWq&c&_EED zQ^P44*Dx@(ntTFGt$H0--%YI!15>M_^jG_Fj&EX0GX|JZ;Ta7^MrSMJ(Df2>*1LnR z7SFG74j_Z9hN{B)<6^Tg7a5<7*!PJGW1?J2v)|g z8hdE6nZXg$2VIBxM%z4#{7@Q-ya}0Y|H|0-$Qyf_pXFWYW;w1GmhnO6t*zsz6FTOj%ArA`Y|p~R z_^qj9^E&}~*KZByrW>boogg!N-S)18m+J-UarPBE?}0?wCwNdOGGJ>}{ZLC{()6P< zt$A_wUPVYl%%q%}m38hHZ3I;jHHqW&fS|#H2#`#KX z5U3<8*+WASW;mKjdDoh26;sNTo?Srs9>owS(e@x)3sN)&7cHakE^CB_i$$ptdTWlT zRs@-*lvJ{eI!&Zz!0xEm43~{3)q_eoRPsewGLa%I3_2+1JxY)Sbjyjc6Y#O`lWGbK zN})r=P_uEk5JUf{;+_5bD&9ya3&NvMiP3<-Ta8hVMs;FbgGY)HWerumFhr{;i=rV9 zo1Fof#15Fc;v&46;7O7nvOm0jk0K%wL^o0n@LP8!q* zhwcMaRj`)o9;PaH5zu@eKQ*?M2h&qbH(&6&Qu2eKUwUj`O#c33d+nDwN&}=RMTE*| z(u97C7})iT;;vdVweGClS7!)$i`5YRz}zY)F{YpfA^ZK@Dmm&P#AqJxI$O%J@)OH< zY+u}!@#&6RZq=@UE?yp>i+6%snNLbAc#1&7<6Q3%y5i{dg^CR>(8YVTxWH}9=6BuV zz?O79)#ycCVESkQsoo7@JkRQayJiC}XCzVV61~U6gJ)AZcc*Sc8~87W%Q!9^y}!5E zY)Wj>epHb2bF(uDbo;$EM_1nSZ1(D8ILpubC3*eyb@rKT2j*?Q{xz zIeZ=v4NSBE;04{5yR_zr?_X`m->qh!aOJ!_u^UY3uPv+FsGnX6>f7^Y&)iK%8>tIU zvSnI7O$-f{Zac7HtJ!)JV^?u`Fth8BYsxmy0LWbKk0w*Kt)m%h5G4f2ylU$a~Fm9xE)+mE=qw|zGld*MwQE}|)b zz?)oqP~#KZ)I@qO@Y3B2yr2J%1YYDjf!8Q$|MkxTFZi9nyH{MtH!HcSGP8mDL*P{b z1YR6VK;Z2J1l|NVNVCB=__`BH>SOt*D_PDw#!c}#DeW5i>Eul4Vyhdy5rQdQ8d(9r zE6n-8UPmwcyp6-F9mQ2{9?ZlwZ|_S5h-Y{z&EJW;p`veZk@C0b_WRv!Q$!b3oK2nY`W;UOSA1cZlx@DLCl0>b~Ufbh@c?H52V z<1=RVzZkqPLK5cJ0fQF_;#cZ;neU(QE2M2Esv!)S5uvm5fJ%BTJ2POp5W#?Is!ypN zgf-mCvV_dTV;64$uLA_?i?dI#4P18B^rDSnV@46d{o)GHNCluLU?&2}Qv4GjJX{*8uMVcf7?gfU-m6hyQcHmNGP;8AIk(^AwzyxkPwFwdsULwE9D{8>1A}Qm;RNr z?K}>C{$Ns|(3O!yM9Na4I}2v(S&FE5>ZQ?uQ^Y& z64Ej%(ytgC*x1<^nVA?kfL}7{vT?96vFX$Q_`3QPRJ>ua#D;KV*}T`B;a+OKw8;zm zuUDDc{fVZgcQT&W7z?^#x#7V3w;`_BZ6)q_StObH;^EE_ORowOijVWplhCgxCJ$Rk znP7?Ph|4L&JA(+5^M9wa3?)uFs!)IY#W+&dD~!5qV}?DSCb(|S9Y3pm?+KoC28*sL zglNkdi4*j77vWqky(jjCN!_T0rV`S+{&)BpXF|wq1kT}3+dpxOYe*e?(Njuk7cr={#=YEay5wjRC^gAnoS*Upa!X^60s zYr3?G66$G(8uVQoK}qIT|6Jz}L*8eoiXzVfokS{ZkLQ}v-PTd?!DgLV*zEd15285A zZtJ#^v#j1rev`z(SCcb9elDuC5Ea1a0YJi&fCYTv9pAnhYVM<|#(&3(x%TJOe{8n05izd>q@+>I0%erJj5WdUcdr?o#h9@^ z02Z(m_v%m@HFwuaY^*IE$l=-qsU)X2V|(+-x-Q_Y2SVqTh(Kse%p8H_&>T^HQzLshz3zps z#!U1X%Mk7P2w(xXZRm3-zwg)Pc1x7iy96v?JR@_+ zXUp(F(=+EjtdfbAMB7yAZ%xl4K-06sCvSw@cylpevDK8{hP_h2jLGu|_7S$03Lna-VCDvE((FsW+U_?li?Ba6jB55!s7bHTMUoA7A-sE9O zvV%G63%kDJ*xN*yBS1qGG3k;Z4)E^Q6VxyCbv0y6S3rJM-7i!OpyK{JR2=o;JqUXM zQ1ndKdDf8l?vJA9@CaQ?GcY@I{lKPcQvfS`9Rb>`t zeI1=}y|R>oD8l8QE7IOO{_uM0J3>4*Fc}2y#o~=w!J?%kWIC1libY29qhmm;*+M!R z`8#7iiel;#{wE-tkEH}Q?UOi)I^R24REA$|i{=7@?k)an8HWyvxGmJsyyT}&}*&_X`d9uOGfX!AzHvgTn znj+)Y0g2-H-r0g{KfwKc91Duig8|e#S5g7>&JHSDk50L?0x6EZ&@DpBQ&evv&!Buz zu83!Yi~@5hOO$ixer+ezQ+S{=$;IJT!X4})Mz<7>Vo$5RmBGnJgvC|*;?!QnC~qxeBAn4N!bM$M?$f0M3rGT zG|^8Oa!i8o8oKD|dSnp8(;(6Hw$^M$TPby>1yGQuvcjW zE=FfzUdUg86n#Ssj{NMbx5=F<7PrGerbECHjOZL{X~;6@NWifV+@BG6MRv!O0A;heq16?J9we_ zG6wk>g$XUHte{>0GSsRcLt3gyarBHrB1penolE4UqR6?jQ_Nf6x}CB7-56rkX(9gO zxZ92!`&|hUxg^qcc81x#_m5Nxdph@&SGj?D=a<>RclFL2lFEI-bm9W~#uQqj_<<04 zof{+Z;I+0ole!F$pN$-8ICw&392bZt6)YUn0(Ey09fSGibNoP;Fe6v7z&l^~@>4ox z$J^LZ**B(0IU$=A4_d+$u|$C}p@v&O33u{4hHok?XVolYg#&F!H+~;tW{tN4+nrqh zia8vf8;&V=pD+Fh!|1Nxx#3kWEnZa5hf)&toU6|-SKXJ8o66M(_z7CP)@~1D>PO`5 z)HbChrcE}uX!UXpQZ{g>m2JR6a^hSJ^p)glz-Sp@NZwR}8p_hzDN!kEdBP=@Orx&4P{J&n&AvZY1h6Q!9GW?WZ)`Q69Ls{^2=Gp%4WfqF3VN zu?FA^lO8q3bW^dBDZO}RPn7U60r-2~lW=>7C^7XkW(nxm2x-u0FSUWHld2xG#s!f` zcwyu4+D9SI_(AW1)BA`ss~3riflrD{uY$r+A%MjOq$>tA17oco1t`nZubY#7)a;ZB zk#x$1BtOOj70+E%{O88G&9e(d+54~+0`qcNr04(ju2%vnx|%r>9UmwawCGV7pu zqH~b{wmLhZ7-=&?Zr$K$l=G??7o*aI)w=tBtd+RE3%7)(BX>{u#P%xRWVPw8;n}tN ziT%6^O7|0>;o0u4;hE3XgYkoMC_noFNfnVp@NwRiQRqS|#ucCdZ+ejDF#4(__-~Sv zn8;!KNvz)>H2Y_5a-FFhKRYEZJ~wDJ8MFumZ|inpxvg-9N=+#8@Hv}5Q9r+e!VkAcmzv6tjA~7&Ws8DtHC!0 zmc#fKe95;?%-aAkzSuDv+Iri8W}mtB#`0D0GPk$ zxo~`s2ho8WlRG`%j?X{AYHhz>=P3!#X!h+KJ_NIIuABtJvuUb)QZ79_JQOv?^g{a3u0@}X2h zRPvA_U+L$Z#Vv`~N_(AK8;hmvbv{-`ao{97kzo7ArJkthboUA{!i4rbNP9_75wO-8 zY_j)yf+sEqj}#!pqR;>#K4^^)#G?cVG4Kj={#`3Thzsrr@yi8(5UZh;7V8-RggDC# zAjHu4@372+e-L6RfDrG@)QZ99nJD}JP=Hg%ruACY_q92;WJK97{E}K}@|`Q|HdF2u z;C}Q=uZFsNLOj>AFx@Q^wdMQ*(}C@= z@Q@4sSLA~K2n;i^GBW=K4F9ZR{(=E~|Ab!wZ~uMO&JPAK4un`LE52D0Ym<#yTCY=k zk+{G+253o+4LKH46!%8d&}lHkPw(W(<05WbhVkL!Pj?!bC4^eqA=lcLk~&$tgmc8B`%-9vc}CTzS)R(5 zF{Yc~_)-ennyiAMB!g|#)w2Xy^^cn!Q)Y?@KylJak)O@cl+jqY-?~O1HK96i1P%un z(Bgp2MXf(OCiZtpZG2*}oZBZ-_C`}It*o2tc;1&FI)m3%B^XRmQnS!80};X zOO3%x&P}Z|xWdVG;RA_9+89~PCPDQ)t>|{SNc(i(+Qx9}bQDsS>~3UIT4PKq??M5l zLxCxghSMc;Bw8f$=YWBwU{hHcVjmtWogh_4k!6g*0TZ;#^IbBkv&ZC}$q=is*~x(( zOmU>)(k&b32)Fkg)eY30#iloRXX?|II-q*1k%|X&JB#W+88#<*f7k7N*h>dcU7*`J z{At^}b&$~RxFZPWz`px#XD_nefW4|ebvvj3=yo2>0J@#OY+M7(>yGL!A^%2oR}{>| zlB+{?!wF1g_DmxRWrYMSguGIC81Rphg`t^VZ;j4kCwzf%4lo!uJ;dR`2D+UqZEaT~ zr0l=4Poy-I%(i!Q?GX24`*3KDBE2pzze2lHfERvOfOr000Tu|wMY>af7k*QK`$lL1 z1$YJe3Q&MY?i66c-n?Azct8Qx0~BD~e<;8U^rr}mU(09%a;eNn_n-PD7@Z=F6dJ(} zlj95s_p}Tq35wuKcpWs0t#VSL#tm|llz-5aS&twm_j7~!Zib8WnhN<8)21L-A#5Fm z>}3&UM-N5c6J*YTZNeh$2=c0iZpnO=fdV@ZT7gif+OFJwD&+X$E}WNXDF}A*3+I~? z9BO}H-IPhuCtGJ91MaY{)i$x8aj8R#K)Fw_x!Y63XZG}vLJb|KpX@~STAFgVHi+9j zkIa3JG`N@FNhA2KaX^Os4gIjqpjt+n=$nAb@pQjJDh4 z7~?FU$GRfFH7bUodf3k5@#lPPT*I%yO6zTCN+Fuf<*sdei(g$ME?iI|sW*55lV1+EKz z(#%ul+H{3vveUJ8iNg5lJ23Ug;HX%R{PF%GvN<#z(Aq7NDtp?}8N*UDM9KC_FItkweNMtl;Em;|l)?x`RX8>o3GUVG ziz!MEo=1c=HoINgsP|=vL@ti@8`%;GQXi55GpM@I{2}ikNtRnr;F6w zS4aUUcMjJ`Beqg)=s6qTBhQfP)))26<_F`QvtKA*r1#{{Cid2CacJ9b-;hunAjc1_ z?xi8b_wG_@&c!_ljQJK)RJMVH(I!lr`=v64BAOz>1BEEM zIwf?OZuhwfNTRrYO-i4RzgZFW=DyRyXw>BNr@7(rCCeL5A8 z0{eOtxz%{rcEl$JRt~=}_#%?Qoaa=v%^JVtL!>sJOP1|D8 zHW-i@!`xXSP0^`vlje&5Yk&iJgruw-iwk;!ocvI@T=)>j)5YGU_YreG}a))?#?+~vU$;Aba z)4KHMwu4KyT9_l|EdcTAEZier_yYj(PDL4S7H~z9aLFno*rq=UMDisFO4pX}u`z&> zljjC`JQ0wiC8~Vh-k0it3sp(e8vt&j1#4X^fw5{`PcSX{mSvs}rqb^ndWV~+fD&}- zAha|s56UIQRe%6Q2a0d?WHaU0I|Z0~2~dDx3zP{8)TRXRN5Rr}2No_{A z-L5>xNfEICSh$Y-b>f5PCmgQ3#%b!4EE z*y8nz!5{m*A&MAT8OjM_$!}{;PHev6Nn!3O}r#qdSq4CmvLo zS8DQFjg&YsNpy>#=KXm7+K^|i$SR-!C;g@X-_<(<3UE1~0KZ*~HPpj>f&}Yu6C1nS z5Lv1set7dWrnvuMfNSSd2YGl!XbnVIoYP#XIQO!%0s9yJ{MO0zV zR$05vmQ0b1=cv|8H)3x-yT1T2mo0qlZE-DTAsk0LEOJ-v>mUy zLQtB#!}fvsaD&lYp=fJ*gR0r-wv5{Jmg8wcsE#{B3Y<|>W%2ytCf0qmvv-eTwROt3 zWAKrUzO3uJYG*v#+>z568wL|Lx5lk7zu2}G68ZrNv2(%>9)`+G@8G(#BW^zYt6}VK z{eJ9v4lfPXVrS}xVCygHr}t#ibnngIBH7=}UyM8RclTG#Uk#f-|6u>SpUhwAKg{0~ z@tM8m->RJlYTFLX1|hb8GJo%?ofFxCYUfQ?7{(vf&bL6d^UaTH=WL+bSrm#A+ji+K z6#ehj&NWx0l7h!rBVDgPv$WsPjLeTqWx61al#ELq8NdqatidpHG6ZEbn4{zo`y)Kz z`7V8_*dWdDxB?-`tQBTwI+E=>bJn8AP{knTi?wGC`Axew4$SedY;#rScVR~&7T8)q z9XMuNgJAq8?#y2+vq39-mwWT~@Q3+}nUg}IA(T!Ijn2Qi(TX6LLZRUk0K7t+4{UYx zxHEsxcN7=6xw%x)GKv)p9Ib3K%n-SDU{VpVc7krbKLF;hRLkQ#^A`?2&jK)iV}CP$ z&0DemVg5d+&u0eA-;m$UUoXJ?1*)9^^LL@{KxQcs;383z z9l=i+LzC~L=(wg)=cbCRt)Sf>|2YQ#oD6<}>;9``@K>(;5DXrI0s2EQcnAg$!Qden zJOqP>VDJzO9)iJrCD21K`2Tt^_-E4g3&t-qGXvXS!0z-&0wC5tdZY#ROUCd06MluP z6-G%&w=p32b=oT0ua)S@b!(Px!}W%3S$X?_g4*GDW>yolL=wve!f@2l$oAFev3NWe zz%@NQ8Q|WQMD~CxT0v?iz*j~mIusR^wov?!bQAiC5m?+=w7i(O>NYWHvSsLdes@qM3# z)CB6~7GAnb0;p0aZIE&i2XT znvm@$YtD9V8FHtI{?tEso%7hCevDzP5d$eXXFOYf*!Kis05|*T$z&PcBEg3DD#R9e zpF5{{1jNjO;ty|k+lKtk+wH8K2Keo+)|P!ILIiNBus)>#M)*TORy<#y^onjZE5u zjypAHeR+~;mPdobgsmqdB13MThO+i(9a##G&QLf#kxZ`m$TsB_QSwn_Vp)2NA606ns^`6pVap&f-0F+h^?Cn;(zd+F(pX>wC@o7FZ6H8tY4;I+ zP+D_C*kMr|dZDeqrL;4W>k*=VrnF``3a@RTkqgG77nPz7y`Yi-)~mwMHIjH^Q^cBY zr0m>`mM+4qxvXH69N4R(4^J~F3F-XN%Ei{~t8!8fG%AX5u3W6qDPqfaSDHm8kXO7o zmjQ$cG+HGnvp*kALo)i&Go?wu zLuux)AZumYZ)Bd5ghMEYD0hlz>TX`QC7!w;ts{t)h|3 zYi4=YghhZ2&JsabyA@*0i;HpoHMg5>JZJw0DS^i&ezo>K*MFj1TJW4!M)55TrO{}q&Nc8(md+%~U(T&IMA?M6;{fzDo3BQh64NnDbafIOqVAip@(x8Nj;xtgf_}D|?D|-`Lo!wQ zTTipO;ayL&*Gkd}^3&>C7;}GGL)V_O*~_WF2dosaNBQv`ZONhh?07W z+tZut+Z)BJqF^VC5frJ+_%mlYQA5kF z=rev7A8panugdqqNGNX}b)E+Zi!G_L*rp7Sh}oqT5Nry7Ady1zqX>e~XxEndP*A3L zfS3s>>`DHBv_?p6FLi|;bJBx9n<0gL`%EjsJm(pfRV|pB10g#sCc^~R-r8@Qut!SxTpw~L%?dN~CaHoH>a54Ukg*$O?;nvXK zTeyqATe!T$he+5;6fg;x`9$jqgXU6(yD@5rP8s3`e3jo zq~Dnfdwcc5RHko$yAxfLvn>D)ZuPo`BQIvkTpDGclMe~xNu!K@yXw9rM&1u~8&QP$oi&g>30F18SP@=XHDZQL&?_vbMPpPwr}(0oI$s|BWi%KvSNuRD*~P zt>nPavoMlo6H8LKWKABXo_wJB8Lhqps{^fK!lX5iI1||l>%5<6m8>T)tP7hh@FWVT zY3>r|=gqjQX*N(Ar9u>uXpc_lwg%K(B%hw=U}Ny9YTA?$l!y+BU62qg9WA+P@6Z2X*t+sB@Q3I>1+Yj;)wKm8R|b z*A|SV9(-V~wSwv!uT1e}+vK*>)O80_vrf2knd+GxTT-Pu-`wfv%-|ubgjn=!lB*Ak z@ECR83l}?=!YQv{-8Y_Eu4ZmQaTk;Z2hZ*}z|Xo2VZ-Lgexl|9YMP5=Z=D!?Ag-Bc z09XsY`{qoSCAkm%x@R_v@0%;r#*qqjt9YJG`u@)G>(o4_?A@xnn&zl;mAJKrA$?w)M|N+yUTMt1<~DSv z!Pw54ed$Y_GP!ebjemD=;eeXvQw+-=HO(15(V?{mAAMAsnv@bLim_G|Z;)~boxDw! z>GiO5-D6Dlw{qkf1575iaxR$s(o2qfF>o=2hi2KJN8brTdf~a|y5?z##(Ani_H!(Z zo|=ncUt`L@XvUB)1>Z!p1;gH8ZpI0~IWJMao}|HT4#GuN1nih-PY&%WK)GvE+P?DQ{ZY^S~6?Ff-SR}m4 z2oC|_As{>igol9e5D*>$!b3oK2nheX0>Xa;ZQ0q_nf?N8OJ3S&4ghAGG3YNr+xsW{ z5>JcZhxd98D;$iasw~4$r1AD~(J~yvfo>*Q?J{J9gJ*x3=Jo%>-dP7#+30JVZULo{ zknWHM0YOT-K{}*CK)SmG1f`^;OS(ZiMY_8iq+9xX7V7)@#yQ))&-u=tGlxH!(P!2y ze=>8gYhCyK-V;f1u_Fw{@w8q)Ly(4BQAlCTUebm%rI|Ns@G`}xiNUVLVaKRF*OwoA z@sZ-gkT8*c_rCG|!t9(@b6ocNqkwdlFV|%*`;RZt{`GDD1uOODP5XPS`SaWV3t00HPx?Rn z&+spSzdyWr|4#4+Gqs2VvNO+rt#tS1b^mvRzu!uCpZQ#{9K7Tp^(X1r8eyM=p5_=w z;Nki)(CU3N(E2ESI(Fb@pf!W(1R_xCW}sDsW7V_*=4PN3U)f-=+CoVM)Bf8)EBv>C zR^*$3R`lNoTJ3VCtFlS^+7I!oPM)BO^?OupEQgV=h1?9Z+NOno23jA|;veP1_>Gt! zr2+%3Q8Y5Ym+lJusdU!~Mt@iF=_k#n)mgKym7*#7z(8vgFwiQMK({#E>>F-SLW@9! z3*8fz@+g$Ie`#JT; zn&Q{MKS_cOZ^D(U|4q;H9D65oo(FS9K^=I8ciGBOTPA;$Hj=H5 z=_3l2LR!QO9-p8XQXt1;9vhR$90K&ru>z{r96--RJp;Rh;!6vcS<@vKEeTX_2F1xz|rO&># z?(zezyD6a7-G1F_bB!1D-&%K>8e7TRK&`v#KU#N<|J=I!9BAE5`(x{_JfLTm8f;#w zfb`7c&w*!kmQ%x2b^Nr%!2@q%gi&F`+x$MOBA$2YHVH|(%yXmFmS?}RY~c`tiWAJk ztK=8tH?ZTZ+nElALXI#&j?mzjarMCy;2@zNr?80`kZ_2cDRL%ClwWLKu;ze^9rrLx zycuX60R~#lGD>oWi}^tVt+}K16NF|wITQSP;E5nt)0Az;w#W=s0{Lq`L8|?s=!*tH zQ-fSx@z}=64Y?N6VOm?LqHBQn5#SgtW!LB;NT@zGq``$7Kr$HGcTl|BZS3yW&&`-# z{sh=%MJWSzSEsgS~c}fk1_Cx$aB&?VK4-ZW_>4p>!FY%O^{o?PW{$j4ZbUlk0jgwgu0&+6nft<{q!^<9@n3kl+ zRbM2JwM6ZQmT{BGpTSx}uk;z#SUuramlq|7IIg<;CR;EnZd|>lR~TKg0cKous%xdt zm2DK`&R55E*6{JTkF$O3;rfMX+OG+M0o)h&1NWWZ;68nc_9l5rEJ8CGP)@ z`xt(%-HpDf-PQhwwY%d^;lsJ?7&?Z3sNGHYy>@r)z(=dZR*z$0)>ak;G|So#%(B*9 zpzomqv#cLOq;6(e`GHy1Eu}E6%GC228>ZNros>z&dOcv4RcpJ}gA|x$9ls#?QfAoWw+)bNDIe@VVS7f#Ki=a*nnWhS?Q?wid7WM- zx^vIZjJdntquOi?S6CDM-0)tu*w=s&%l5V8F_C!@bS}ya%9brmDSi>zyJ81{L8u?7 zOS2g@`}qx2h$nrS61|Jlo(fl&E&2#8`&i7^F|$`rn%7R4bB2{kq6>zeYHhl&*6E?Q zs(86Uu3l=wTMky$T$?ZVln}aks8ktMJPS_j(HpK=OCc5X^INbzeCwd?6wmwKSX&J% zgAT@D+a(ItdvNe;1QvZ5&vF86EaeIfvBe(j)UeF=VOH!9jFi5Bm1&r1wYo8$#{Tvg z;j(;Aj9KM@{2ryqZkFNGo#;UFji~&b;$#6yWon%9CGH8Futy&?zqjtX_*xMxB2nRM zl$`{9Y<-?URFWDUNY-g_c%+s0N^2r-^}!qMrUQ3J@fl;PM|8HC>070T@1u$anR+8a z@+h-=-W#OIt0<#?d`|Qs)tFHflgl?sCyR|kK=B$)>!x&<;4h`SB0oxZhrXBY_HqHG zyIF{VyExxVcV&Ms-GzDq_gm?%6{vKVWpDbArMnkE>27`s^Hbhwxjz6uKM?Ty(%}I6IYA|$x6 z#Tm1a+V^)dw?=v^YWLQ3S>ji=gs9-_T`M6!ZEHKYox8mq#cI|%YmPfzbAmw0`Ld8= z|0qF#Me7j8n~KsdeRaWS4D*W?ir;RMRz~w==%)srZO!0}lG7CT@wh|(N$J)48KmkG zM+>({YKLc2g{{+TPE(T=x^~V9K~ny;{MAP$gGNko(iZ3HX=?A?E=qF}ZMHC7tO<^= zRu?y}q$4$r&*{GME7_4=VXQb>u*9IidQ4CCV2!dj8(T1~dG$2rPu1k)xykLQecrEE zbh}1APn;k+MmcVCaKA`jc(jjBmbN+cTAHlp?D7qp?2Jv1S$o?g z6y{jNxby}n)}mSfeu8mGvrL%7->Bktf271A-5V0+ySed9B|#mZN^ME1x=AEWcyi(T z0ZsCRq5N)(fpdj}V2Q+AAK`Wj23 zzLKE!`J!+dlD^jFACCiL&_JB2ZF%y-)^m>vzhSY~U+LTgSR$PnReh>FVqFs)!Q0D_ zaP+^mcK7C3{vL4te0IM8IREgZ+w;4v-Tjr?-9H@7zZ2})DTNg#GfLN8V@VjjG~Oq)KyiJF7djyozKPCR%%K| zehJX-?YZD42yH82>;A-E4L!{@evgOq2iNtw;kwT03vmH!9ioHYP*h-;DZr1z#jy-F8@9BR{v}e*R?Mis3pu~FcyYX zbaY91)y5r*?olz-8a4E4lJXcXY$QX6zbu6q*NWuc;il(l^bW1uoUB?w$V{KY%vkC( zyIS(z{*q+;5L22Q8h@jz)H=`OP2VGOdIR&sg&OdHMMb(KVew82Dv5qANS8`SM$njQ ziq>=l3TR9mxmk#sH7VG#n=w_nLV6E%{wak>Cyua! zb{>S1FY^t|3h8e2cQz~={OAx%oo5LHBWM;{34A$@j1U(-AgIAFcqgw!@&vArkie{? zg{-D5Ya8_trG$_*y3CPUzmGtWFd~3Z9m~`9^+nd#vBXaQL|UaW0Ap{%`ntaNa76>%?x073(qjNrw@IY7s3Si-ccQSjIQ%Iqb_iYI6SLCf#v7H^}tWL znN#fm=2VX?fjLz*gc4})_jb;s{@y%2*~gT{V7;yF;_<^d6)&UcpwWu9d>-QR!fxE* z{j&PNOL*zCk6?~SZi*rRcz2)pnBu>lzPm||!utxPfsYt#8ACp4z~nuh@q?%8(Jv2m zlc4D z%j?Z>wTt_u8}UShgk8ilTm{qvS1c)-t9#fATuhXhUF;Il@pWlO4*UJVz_9AV!_O|z z4ik41jM}@`xZ>!+AF2=OW}9sYPHN7mf8roU&pgVCi!4dk<`lVXS)_~lbY(K{8%DGy z@pw}rI_}W9d1L$QE}6ZwIxoZ!lpC0c39`mwI%rr`Y(L4S?=_eLS+RQP%7Oq3FtW<> z*?z%^#UDQf7*=iA@Kr`Juvm3N)Iy2!6!#3R!vVGKDgmv#bKhHc`Bx%c14*8C%rTi;(>BD-AUmh()RL%f-zC7Tjo|`6=J9koz8n7>acDy`)DH`yvRkS)9d5z# zX^G;>X_;)Z@vset&aHjH-OiS4FJ54icK`jW$zIS2<%axJ>{0+kxG1oyEfuy z9Mt##+kXFeN0MTI&?aJ|;-$gg(0wI;BW3?uZdZ8py4xo4fMh+qVty zC(mL&1B6ZoYP@AAyfW`Y%=o%>KYHWxJC0uIM)wKEmpD{m+w71*iUg(wMV?H-J zXObKyNarlpz0o<1qJ!3utYj)8$dvdW(v>7}#43h@bWYVql@5UJ7H25PMQg|*fyV+m zXEF}nH=UD3U2f`LcbSmUM`8~pE3bgxbxz77BVbbXm7gNL?nGh5T2_*gs%Ua$8mf9| z#wzg8_Lxpp@|?bC1=)@wwEm~V>Ua5aIOcJd^1@U)!U6%j+u91jGDDZ781I|gs6eVx z*xBK-Np5X>pIRMB6EV`MR6X=wu;@pqsogb9YDxrpDnB_{sGhhSaBVV@L|I5F@*z2e zGBJcyvet+%jaIB+xw_wcPJ22b=vRRdp$G)?J}XWNMwp*t!%W4Z%Dq=AEn#wu)e1m5 zXO%}u_Ba!ubNXqrspU7JOnK_WDDk{=sPcQJ!r_Y@_}pwakmktIcH?T8^k7yXD{zqj zq;qZr>mj}LovH-soQVp2gbF!lNs|s?YIkddCMd5}Tr2xvuTA%~n0F6ZGIn(jo?Wt# z(V2K#f-i)EtIH^!tZMb!Zi;B`1^FK&jbk6fE{54PG=&s6JJjxO#Lt_ikp+ zj;#i#xjCDweskuv0c!W^w3|DG*9&8fP1I_M+PEt)g2Rqdhm(G|LXoY`c|ESUll-d1 z8SRtx&CyAIXReK&?TiESP#U&+!kOSIe^rScdaIH4q)7`lHm*BugX2s2Z7LJP+imvM zi|_NtJvujaEZiPetzRm%M^?>x;_K;$E^6^7*!nMyC!v&1R*zq-*fFk$oWFSESVF_T zW0ILTbdFhkX%RVF-+Yy67jVgb{=DY#mDL`;W5_)@yDy(s?`d9LMX|_gvUdG*-Mb_| zb??4x%GsKXzvcFG%UoLPPHcbYC6 zOWAQ|RuHWqQgfvyw{r&B`u4vVFvSrv+3j>9!4AY~vQx~ycE_FN=IdxE!TB66>^({} ze+W(=eHxb$KFn~jg&o)$(32l;Gd`aGb;K@GK<4ZHA72~(_I=f#a{F(0F zri0sbaGMTp)4^>zxJ?JQ>EJdU+@^!uba0yv{uiZ#zan0ef4DWs!otY%C&K$tESKpM z(7($I0|qAYYY+IJC2YIG-TLz;gT=FDQ)zzd5D+}ehye=oP7E~@onJ$x2I}onPH1%Y zQJ$8Ruo<&CMuWaUdnYmR<)V*x@OiP!`Y~I;Qd|LA|qxrQ{`Fp(k^UX>Ba}T<`z5i>s z_g8CI^q)JKe<$13s+qM1we`vXZ1*33cysgX`B%{HU%R-leV;$NUl9^MAvKUfrT)r4 zFF#+*D#Y~++4flx{=*q_Ea(pH(cjv7%hYCTB-SR{N7fqmcoy_D(Nk>DprrPL>&8X5 zMuIb5qGzD9ru$;a*xXCo*&iTn;?$~UO$#Q6CtIszNt|{o=_#%}zdYd=yO5fjClw=! zvb98akxpsr3&q=aJ;SSfn^>;4HKI@EDP^$J_a4hjCeUwaI#-E>zk)^7u}$v-iLIX6 zz*30LdX_sUOR1eHYHRPS3RMC93*=!1?;mZwu0Ps(Va2%mm=s{teDxN9wqBU&^9@o} zGAWN99#C6vJJZZ`;v-|WUZAb_K_t%k<9;UNCe zopKQdv+|b@ZK?wfV2DE4U;E(FNotV*beE*2x{A4!;rUsL&UD0y0zh|-6_zvm&A4K- z#0)uNYNWD?T%Q1RmzaB_SLF4|Ku(M*$ule&^9Ji|F=qUB>;J&brdUC6EYydn0(NMynq1X zXvY&xS88z7WrC7**MwzIh}V`a=Cg~CK`%tNPvJX+Hs!WYje&y-$zBj!EMI_aTipPd zQADLDbuJuscg5#k2XPd9tY{Smq}>`o+9lp9bj_M>e6~A#I(R`q+^CPg$c>5On2RPj zPZiQc>&a+nyjH%A8=Gs4%^XvhUiA9evOXNqQrKP5Nc@cTd{S{3`LC#pU0B^X&h83G z8F5~$#Tj)BoAzZvqX9xbnz+P+a2MM9eRC=(Q@kb7mU3wBWK$xC-YSwlJfCEVpOKpA zH{b%Bs;8|>`R+WJz@{qW&88}33wG1pm+id3rm8_x=V8?JtFPsng~I52ym(L$Y)5>L zXm>xjzlbM2ACoXtE=d=Trd!*rd0aWQv#Fy{=KUFh7mK3z^@hqZyv;jLGms3$mI;AR-{oTV5xK?B44ZG!`Z=0%ffWK>@^lel164+F2 zw`8o_ls?h2vd`{>z1dVvjulAUoq&gSlO#JrR$?c4p!kZGz2u`q;%i`E_0Gck%9w7Q z^P5f8!46aMl8vH*pX+*E8L7+7;T=Zfz(yWv22maWJIQcfOdP!E?|HJ6%A!p`{_g3K z10xPQP}j>d*POyGPtj0EA=As7WNqf@blKVdRf4Z#`h%(9T(3av3#ML+LtH-r>L%RZ z>Uxn&0e|?mn{Icir(N+`fUkrH;gps)mTT+(w05gNWv%MRXoeXCoTEz2mZ^!ld4+DDm8?6Q)diV1T?}yr$+)S0MG8ZA_jvBol9IMZ z8_Oll19yl=3BX+$4?z&zm0_fMsG;&C0$sWR46t`c!!dY4a93LQS!=Kn-)ifF%xWJU z`ZmPkZWa;9?P6_HY)9G66HB~cG#`NZA++MDm zJ7nQqeift_`f=HlJn%I5v-kx#J1ePC?;Dm;Mh;RY6Thi&Zg7tKj z0}_~@6}UU@a+{#6;|HLS-q|M8s|+lp&~?L(CPCUrBirt zlVcZw9P|sS>+blk>C;XK5b!YE*PY_~QljHjA0Cmt$V}Ub2!0bFKlc=j-akYHk%k{90QMB<1GSd4wpZLSIId2nUZS=B;~I>?0B(w}R0lj*{ZEvdf^?4C2j)VJ(WE}FmhQk-oRvuGJ;^`(MWG;1vnP#Tw< z!LScbk1AAj1jY z$F;0ZRmwU!KQ-W_2N`f%;m!=!` zaLs=*Crd3Q-u5%cVR5Syn%f*2 zc9ik3RePpsK;$cu78$(aWg7aScf;?`l}o-YD8X75ZZ}lmw4+}je6+ew<5(nA_*T|i z_P9L{u0&{p`dZ~hWgpD-#;yg9gAuO0!-tOryb_{8Q~XSLa5*>L09>i042&WJf~4wu~zQnexY~n z=F@RJ-lUm2_HL-LIX9tMi+Ilkqc{gFCaG^=IT=$I~BHn!#ZYV;#{>Y z^$}+HsjatjSQYk1Td(FN(AN9zMU(TcB@1EKr_ocdcz%YQ@bbwoX~48ZwAQKB{)-~A)V#%yO#Lm_ z{2UMje=XPiO+ffF+`Y{QxB1{UAKc~x(45C@KDf;XxB1{UAKd1H+k9}F5B~S$gTFGj zf2{Dbu&_Sl_!Hp$*`@r)3h%ck{LfN0%$bajwCXQZkE^5Nh8Q*Yk}_Su-%_jZ_$oW& zT=$EfjY=K5kx5+f!@aj!_O0#gddf!UWwrQGr%6giDh*7a^go0UBeP7J2GhfAW9Mq5SK){o{_}Z^!cYjQ8iW`^O6JAD?u4e*fpr@2`|s z>=!-_0sXf7aen_!%&SA?^QaiWyw|_f&HU}y|K?*HJ$>uvR>qb##un!EHV!t^s{hRA zI6wv4r^&4pKAg>1ylxk~o;S^RKiF-=O?&0PH+xNhH%lV5B19y{&Ob-myB1eFVBT$n zE21MNE3e`JE=0k9MsFcW9KTqmCeUFNCgT-Cb1=TezCjyQJ?l=G*0KXdAeF+Rs{$+1 zctYxgborTRHnZ3B{;6^Gu(^g3-kRPq^0XrnW4h7P>24DtG#l~o2o#AZE;*5MGRbZ1 zsF1UF0s=tov+PB@Lk=t4qP-C!Yd{!>*glbs%#bxdlLtPVY02R z`OrcgS*XAYPSMrmDYjF_NS-={`Nu*Z1qK^^&U@OI3VZy#u0+gJbgPETML^#1d8qDq zcQ&_hsGl82VP0-NUdnpN8O%f~7TaW{;=#+XG2YXvXBdt$| zLTy!4gjp$SyMtLB(y8M%EV7Y3mQ0TLGSB@zGScdx9YzvEal6x%nQg@ztH7)v-^we- z&OfcAKB4R~@w-`N?P1An2ESiU+qZpbNh_BhfbERFz>=C50Iaf-1OTh7%Ey!$lfl?& zC>)xBBS1N`e*jR8#6z76F}kx zt+LwQtg-@6$!};c*=RIN{gYt3`%Fd>M*T=)P(w5dDZ>)$hV!2H(ZCE!HsY$t&tipCPqbE`2f?MX=w;k(XVIJ+E(4)Yr_5N^pt>am9GQ(n> z1Wo;Ni1}lM;Fn%OOsSeFK6GrRI2x;`uoyAli%HJfWEN4wNwr zvx#F(c7O{P0C!O&K6In{jyFltNfGxu$!NM%rNcoC!N&Rw?QpzQ52ZPpGJB`{`DD|9F47YYKAB9>!z8ioiYe#0{z z!zKw`4s5OCO#gy3=LM@fGH6|p91zxPXqu0bAIN3X^FjeztYE$_#OA^zjsd_Hs|RR{ zRT$V}jok=@xhUO_ZQRV;so3q-#*v_kPPO<%Hk|L+Izk7&?S$6g)Mk2D53s;FywDMl z&jl%ln%i3kK4T}REyPCXx0ZS-a=uAkFa!5;{$ z&^|expJBF?y8xG(z8e(wDfRgm?jz6`YaTGh3W;zt#@d|L0xD;g;|50@3&_xvR{Gl2 zo#?>xN+|j7D=XIU~W2~E(yO0j+HPgBe-8S2^9cP3@1CZ{t z#;uX;@f~rvZW<@4VNHFbyNx$=*S7>jcfoJyt{RB$qOX0UyRQ{kD18-TMQi0h9vrz$ zB#OcMx~XZW$I#Awu#6zF93mKa^ya}+Ty>Jqme$&8mc<%-pUK<$ot|zlS#@)8&9Usp zH@P#leWSZ*p-nGAbl3GKx{H@^y-ep=kiJK;szbR)FoY0BpAp0dT{~OCwm*!(X!Y)75Las0&^?Q(N%_L2P>EfGM%`@$uwCqMEBMObemVsibagqT^b|O9 zi+mW5$l$3|7(DT;^emG|bYby8Dpv1h6R>Bka3^*Mx%j+g=x(&ivU9SHBsNC*BEANm zx!;ypS(+_v+l%a@Uf5QA9mc_<{43kFeg$H?zVZRd+9%KjmDid|%1c_^OxHX<*&GB7 zoRyG?a-{MBG)ot=bKM)uw%vUUR5sHW{3g@cOFRW zt!6*y&z(Ly&3KHH7%EayQ%lP^f9|iww}~ub$iDN=(UtQ|pRr0axFBPV6*@@aNKqI4Z*b)i_MqjMv+z4VUeEZaaO^X&5>vCPY^xS4|<0$Kq)*%)< z@K+iz)Mi2o$S(!xR@eRih| zYPpKLd^khsUi3ADTNs||k?o>9e1W^Wcqddr`1e=h(*KDKzJ@N%q(~AEC|W*`NEI%*`9|M!zmNfadg;Rib!NF)VuD$nhns z8Z8RWd4;|oq;YprVz@=dW66T;2l{j4NK2yO{TpvA_rdHNFC+)sW3jI6kXm&GDX^rf zwqGc_7*=->QC{5nBisEs75vJVKS62cZ&Ja31@7L4g4lt3wpw@5VgE;9`i{?^fp4t z#zSG-4Q-Fuz>qr6_z&!BQzT0;y3?31D)5LzlGT#%t$naR54@dVfzp|MM^r*L@L-oD z!R_q8H6TUM13IJ|rU8|XyIV8a9v_2!*A#pg6H#k%3g!~Os&OwmQf_W@CCqYo*sOxJ z`q@KGzNBg!a30&r8TbM_rt7k|htjXtrp2%?y-{(OI}p|0MZf1^oZVzTIB+Azt*8fJ z?`x}cvuXU265oT03`@z;_ ze`azN>I~5sex3+*v z9GE{Zq9%9SlMl9jdk=xW<}zQ^b6rqhb5xip)`&HCXaw)5VXsq&cUo_(mRUTjyNwfH z!cjmqHM~j_CF6XSNPol|PW6pF1^MV|=e)=CnNQsjt;!iOSK= zd}dHks>U4qNj6$;NC8umuV3^{U8h<&+^WOY$Q!0u(ukzR4i~%gZm!OS?UPwps=Y^^ z{^69bpN%xi?()1M5O{3$`DERCPS|b2yiDyK1}s-ht$@8IoCFoFoPCLEKh*R9=`v(^ zddSe*7oy>h{L)jemizi9^7zpoQ_Ps$Y5Iyk@#IblX-Jq09RARWYXoyTWipi{0p&Vh z?*pWAg!UFhW2`$>C!?aJV)0<_op~ku+r#y1svp}Am?a1i2`x6L$l7f5i^NVP_6CXh z^UAic5k9utB{#0PvM6EhrJ+oh@*1UFN!=URrf3dMpq$YI%A9f0yZ#mg?-^$m5i~>x zbGkEzkJS{3>qIFv_~7haBD-kHH?WYsSGJ>Kk`H+UCA63PC13ThT_e|K=ls+}!Fxpn36s^~`TMaQ_npx@ z&6SoPI%R_619q%QfIB zFQLP^s|mU=RZE-<%3#f?hK&4zT)vnwy*&-=@Pv*9*I~fuDF}Hz@w@Na!7EhgMi^Kl z;qgwojkgt*GYBhJP`q+%?SwLAZ5!ItsB|pfR5=duipM>6R)D;6YK0@TRUlylO4cDT zl~Mdbw+e1mUbP>&Defl;ax>!^z1)2!A9SnsfV2+eK^x^TGH)uEz?UmQE}wYgF}&9^ zv|s0b*g7OWoTep5|JACe!wFP#v&-U?QD z_0>`3xCea>j*L?59zBTt#-hH%TlhGH0ksbMS;d7YNglFg!4;V4?FZXLy_xA{1I_gM zmC#s>%SF=_&H%zMHy&uFH}x|F_c!4;LCoaK-8`K9KqzBOvNse6mZn9Dt%BSXO=BpD z-nK}DN7ktPBsm$WBx91>F82sMJO$}HXfhhi;xf%7A^8`Yf+ylUvjb}M3OOtYqU8=a z0VMo_2|&UK@|rbz;&**&P*~tU%)VTxB>3>IY=NZ5z31QPgzOzwPy|mg0Qh>m~5+QufFk-WAl*;ZH0+#YJsaB+2L~mnz*_?w0We?ezwq z6C`OQNQ3Qdm=x&0^-nxNLrp)Kj_0TbrSqduQ-ey0^L0H7VcTghJ zuaH@>PC*jQ>NnrQ(NV#fSL5LC#@GgkQkO>*R;74JRq64^=9y&3{S^p5j#Tf7kuya zepJn<+_CBxP4P+7b!WQg1^UNQ!^lf3Q3$D#cWkn4SQPthX5<AzBxk?5qQ3^8C$r2^G7TSgT#C8y_7MWP$LLl^KMUky|+ zf)N4MdI#$e?z}^<5VU@AS2Z6lDKh?nE={>mX@~iK5V#g)_wRkqf-h|pWLWajWYp#0 z%!L8t7c6h7OP?-W(MTeja(V2PQ5sxnA5I%s%R#CnMU_ z3-6*ZrylGDewdV**WK04Vo6@#*1|uwg!R)`JyKs-$JN!JN7tq7VM9V6{nGhmZ-EMzu7o<;OWFSZ8zY_*X$N2}z&OHD7G! zBxa@wy+F_ByWsVp$^L?HNppsN{#Nallg{3&>r~g8Q=YAJ{zfs|mA5<7vEdQUT!tdsProwFi6@K|kRQLi+x$Bpy z@Xrz9SE%rR5E1@csPJtZWF?7Lby!`|H=18Zxh1*=Y;TA zF82$Fn2m{v?N83HRyH#~2oa0?8X~@V!mn|-#~?)f>7PQxj|B|wlk&}pa9f5`Xa~Mdgy|kxkuJ2XN2r z0q8@Z@|mJ$LiGAXcvB0vzdDlf43>zcBND5e{^28M?Yc?BmC;K<7ISxLb;|q8V&heh z3=9#^D>8O3;C#Qh4vkJzJ*KIr0({_(wBTzu$Pi|$FTR{Z+=r}#mPP zkZMQ*Ld1R`M0}*p4QZmdSR`QLPu4WscXQiR6V1yuM^#eeKjE)v9t`@# z_^WZVvD2f}UnsbJfecohv@v58v#Tt|7(c& z=5_yTh#2ZW?1cU**WysEfldk8wq&%jXvu*W^0Y#2b`#TPQIF zNB-H(NIO%pK@J4@z}Su{L`p9B0eeSNym`EWXM@c#bt?KQQKIL_VpZY94nP<0=y}(B?Xumdt=t(66`6d6Icx=+6*fbaI z;-R-(#dOA2ZG|>N)wtNI)x)6+?^@LI`LOE+)UwVwo=?q=E+}0y+TVu?9HU&ax4$FN5PVc?JlNFGeYMO58UQH6AbqcQjuNn zGYlL%TWmwtq}Up{eqm?e2%SD8x{J{2!lF5GsTV!Z+`7^A(pA;l>ooK;c4hTb>Q2J2 zwB<;Rz(uC422^g|JFFv+*x?UXQ4H?IvD;B~4Io4_lGM$5_L?F@XQUl;&No7K@wBFVkdp9WSlPhXxQH6>Ie^5&5C1oqw#4bx2{wDe6Q zG!ry=*}<1xpb`2tPoO?~&OSO1&cu8}d2y9hK*pml_l=}A$IKRWzZ_Hb-1p$nWQQ;* zWx0%MLce5fINxv%QS#a3E4e@ms+o{_^Zz7pxT1sOX0VpB17cp)CVGe{Qaa z!D@^K8>lk!F_v9P&za-pyyc^{YctRbQdrP9fNA8^N-xobnZr!$JQbdj3CMDE6P9M6 z5_$ww3BB9^(d_|LLa!>f3BPDH&X(c#w8OP^)K4USRv#*)N#4+z`8-iKAifnbDuqnl z?9drq*5<^Ek44pNv@8d-_si2u@BmHS%sM`EfvDHki;}xlHk$0s3N6y~h=xEo>z(K1 zXyuG-I5{AS*9cP+O-i9b>mNo6N^v`TeYjGo{`XeId6KYT>Ujl_pVNa zUl)rPM>IE^;E3u^d%v;DX!8LtBj7M!sp43Q--V7DU;bKW&wLMCCL2e_4x0byt`*XJ zaODzepS~FLoT5|Pwy%TK9h9Jx`3FYAkO0(FLzTZ)eI$BZgwvB>qc5>_`flUVpJH zJjyi*B}Uv;kFRM_DRH`QI4;L{cTx&Fb>6ygW-iqYnb=6sgq&2BSr;R30BOem9kF^2 zo1I8u+|)TKFBs%2^$2ANPqB?vGohaVaoXd0qdx&+Hs-=~xF<8eIl~G^W)>i4m`IPA$q5LZ}4TB~QDP-)Kz2j!k0rSOo<@MDlCXV-4m_FT2=6E4I{hKpv2{^-} z;=eh=Q+j=b8b{>*3?IKa!(YMivN;cN3gTr@M-{LLz3vI2c|7sE$DaC@y9J+;j!zya zhfd`LV7sjlq?@KwxAw8!_Kh=KiT-sh?xkp%X^HMe6qtP(vUcraBpg%0raT_M988;k zN(t<6Hs)YdlOFiYroj+lXe@rem8rwCLxV3+V<%8w##uSqFtbLhaYK8cE#uxhiQjEG zcw?~9b#On`Z~hH}r8rOso#Ho>Tib4Ov-azDv-ZmdDum{=+`pUy)_$43t^E=Ubc_^H z0)@~#ph9So?}gAL03V+H&WGE6FNAg;Y&Y5m3Za{S6hcFQ`0#Iq(7lFXq>uWPP;HaJ zeed}`2u#*tn*6Q|Ljub1OiZq28=wp~2p6^lz*uS`xm1Z`uej6@O-fj^G|=BK_j`-g zdKKf7eUCSVHD1+;@>urkU0>utDukESzVdHm6?_J27KjD25%Q>mm2Ku!q9UfB#Pq&m zS}GT=E;IBI()Y2L2V+&PoHT!7Q-Rk$0gaH-c5(lF_9Fw1(95W#*#?JtWhC`7`ki{U zn1fA!LhUH}2|CQhOlB2UhAK+#4_^zY`Sp=EVhQQjd@6Fn8;&RasWmx(~8U84; zM0e#8hl_A%_%zlOJ6@O?H{uC(cUlQZ88#b;d-^A3m^sZ}LcT>M+VF*FfT)Vpt%(V-0|KTL-PlmARxV?5#%ZH8l*D=MQM z!Cmi~f_&bcP`z?h-H{h3VK#}X+X>kGJqpwB@V?pnwKGM#FaT}-+J3eMZT{|g5eI@c ze?@@JU(3y;pqtHKVwmLnP2V z{QZ|0@c_^Y{Wpx*%g9)jiSW@{`VAvi`iT*H{XHXQ{3|1#g1%wIAE?tlU_cXKa5uqs zA7%B?zF{RBji7xIWI*W$ohfxZvXOn>QP4A=Wl|@WB_N#qu3LFy7t&t)S%zXSSwcRM z5~dW9pDxY)nguCWS&eFU*6xcF)a->y6vGYV3vQAaK6Rqe?L>6L3wDe?;8y_e8e77W z5|qVTwhnhCLi)qTYp#n`B<@GAscJ^K73w8LgC-c&y}k;7oyZSgo+=-59+MP&ZNI67 zhG}khVYx1IhG&1Ke4`Fynk&xlJ337h_85!~ep831;<~FUO6E%eb-0|JKqJ_1u%?!h zbDkZ;-eU|Osn=qbVgF3`tGK%ZGogm`oQ|S~`k{H7b-+r{j5Z^5WB#E!X!Q4TqY;(h zurn7J{lzY9n-1!?VbeNfa1Ot+JXyaOjnlDb+v&D24AM-bDX+Y*5$f!(+GXBrJ+fZN zZdAd>^_slo^sv15XLVTPIIEt6Q0v6~MjdYat`7G)r?$IrfK7C7xx92`jz1>%{)0N) z{ufAG0YGA*AL_8%e^nh0;h69K3nZS=I&!N?pr>~(5&s5>^8iT9G9HF8TBzMdvV{r7 zw&no#aI=_ZL-Aa9q8it3Rzf~hm%g}fhi^DP#c^PR zbR779?7d}Fmg~Z?(;YuPq|3(_!=(1S)uFkh2LQhc4kHt_LWiB zm1wS@Vtj%Ap1ZHZ&5t4B7a;N9g@k{G#5Wn?CL`Qrgqw_TlM!w*!c9iF$q4U7j6pA) zT6+f+Oxziys_wiCVe#+1M|zVHZZg7mz0gfY_;1Y!e`RyOfQdO+IRCu;`=g`x7n;OZ zC;SSF>y4-dFfnR-XqJw1MwK0dKq&qtv~5GbVrv5t%Z+JO)!phk=!o8WhE z%MFKV`ra*XM9zhy;S>j+aB?^uuW@?>oq!uPG#<>O6jnl@EnIJ_mfGXoQYbF;iUD4d zV?&PRJ_d5RGtW52>ZaCON|{0?pD*RDHQp&|xPE8zW2gK~?IP3T4?6=Wn4lNktzPi8npcHw4;hu)PG-Oy#k#h=3Fc=3+}B@VE}<{WzF2zP`W{LD zdfk2j1z%m3pQGR(uiY=8;6I#nbNz1A&|tryhW^8)`A_0rb$LzPDggIN{TlAQ`n~@> z-23+vz`t4GZr=C*55Dj3@>=kHIx(&_$?c12Y~g?(zRzIQCNTh zVAGN19|nMtbKVIH00Y3_R|CLfL)82;@^9%pKL~tKj56d1FY4rlFNt4hU{=g@qC@&< z)!;{qQ0l^u7Zgdo*h=8b(Q8b-m&bExM(x+eJ*ikFX1)d6zbUJ z$zz?ef%sA8e0&{=G*M=aWd);%7dl^e=)o#tJ2U1|W2;Li^ zOZngyNMy}R|M+RNX&ON63f!JOC*&|cf`w0D^X=?B`&qIIC;gd+rAssBLU zz~7{bx-+~HgRhn2P=xOZVP9aQt-@Q;v5^zsr9!rS+E(Hw3M3~J$Y%^r#sP2MzwM_X zvo&2TdVUe0b!bYA#~5%{hvTAla0qc$h_1qWIeY?vM2ToIc;Ho% zCeSsKmXk@S{kaRep#9%oV=(&wLj=7|?Yrcid~D5=QRU{8J$Df8X9+b3kjs*lw&nD1 zB?m>UahNH~+-E%w7(-MM@n#9S-GL5O@qQvtk2o1!cgw%Ok;^aioHHQxmD2Da+7_7u z-wTum0b;BbOa+~?UWKwOuY1pQMYmf8lpbh-_J09I^jTt)`2rgb`72{zN_ws0zr(%K zAlwV{JMKm5o71jKdGRCeHTfg%wfQUVefu_5X3`ZYU?J~2?lsJ5yu!V1s+{WZ(KaJ8 zJhQ*;|Mnd<_dTz?-v33>wmxZD!A&LGgW!<=rilLZn<5(V{(qr}-u_^@kkH6vMY%V~ zz7%dcZunP4^lL<96cHnoKPjTQ(^tm!-mdqKz`fmt8!0if3Za!P^5Dctft%N|-=q~m z{kH!b4BG!~p!FT>55#pY`9zj)VoBB12YnW#ELi2?gd)5#Z!=5!q9M)KV4vE?F!Y=`3YW#L8hdK8nIn4a6U2LK*DW~1-y>i=KsjUoRBw~Q9Joj$Snsv(UW8p?syXXX&SbO; z;=O&-0Pk&2eiOf@8Tq_pK(^)u-)$7d(BbxE=qfwiDLn?*wpyM$iOFr*HCEAEjO9EH z4;W7ZYFY`c6okFLAU?7|@)>?8;v@esGj4=Cid(xs`!d&7cD)=*IldD-8D5MNTx^@D z79!iSDorB(sc^Cm@{}2Dh^k^ zF(`(A`3N%;j~nf!VlQBr4n$8D?4pXxq{*cy){xhr5m=f5S8G-6z?BpUhr0Wwr`>`{ zr97>vb^fKSiD>sRMPqEFM8ismMVfc|e7GJ3rpSCvB`%mU(*X|aysQwdh*JJ*1~qxf zTpSt|hz2Ur3K&J5ZL4v4SaX}7fnI2d7`6BfbD#{I50rsJBL1r~@D5N0F5l?hZ2F-L ztl}{556u65F9X+S{aqPY7&VMIQYL?7jzR2Zob?L>H$}ZzhPWcU%c+06}a>Mf$_RxQ>HL@5FajGoqDQ0_+ zQ7SIBywQM&ZslGBlg!TpHs0K;;FhsgCZ2uNl^Wc&kmBx^Due1KrtXED{Jw?I%ahKv zgOkJr5}|7r(s4s=Z|D9U(|m+rnGG<4UEb0u6=A)Rqq;Gns^a7&gV#q+?)z`nI3AwA zIn!BsbCx*_ZZJk-uXH=`xtvbZqtJB9G^>iyrOGS@l@qS7rAbuBl#*~9yMtPf9LJvI z_p8%hIxFR`+55Z8e&tDvS-9hoa971|&OMLc4aZu*U*d?;aM;&8hOaua8?ZsQFEbk& zd``>lp+DjW*`SX-E)f2A`0n*x`8nVH@z(t_-~HoBH@ENqwcGdaw0Zw{Xa19T7s=!U zZViBU<$ek8UjN>|f_GgkiP=%V6291-&-=PO<+pR;^_&WPSxDj`JgLd3qU|`!#B5zv zHR&>+Tl>X)oLz;MOw?w8PJf68GeKy330rR)do|Py*W_(p&N{Kgo*<#fLhpu0S_AAZ znUk>tEFn#i=~YaJ;DLSKN1C&^A{^~zZ0C`Kq-l^z%2^Q?meHzr%Im-KJ$x|-&y)DT zq^0;yi1+TJBfRrh!gVs*;Oqy(h8dF;g&YHu%lOWFLOSAdDOLHc-el{^WR!%lH1A(W zn@hxhV4}gdE4uI-Ge1f{y}y4)Vm){+jaHFfe37Ele?UlcPK;9_@OJ#r@{9005B>Ud z^235_!ph`|E*%pd1hv2oWUdWkBo)vu%`9a`7!K3GQ{qDRd8fOC@(nNVTdOIm*-D|Q zyM3N$%6~n1THo8pQj{9W1*erB8`>r@or1{xSfQp182%NLW%!DQbIalGBZD*H@Y0%M ziDw$nnAqO!*$V;3U~T$6XFhQ)t1mU-OG?4XdIEOK=MUq-vnV%!AAA*OEhHn0L72Cb z=PS9Rm+8VUtvv(`{~nw^xE}tstPG;fMK71zLL)73iMg#vO_ff>PAu3@5F2{dM+`;q z{&;i!TbXy<>;RAV?$km>ncH{Yb8_w5*_PIxZ@%X|D8To8cI|scVMp=%BtoOzF$$D< z(Sb6rnv^@PWSh^cywdZG!QacgK|8jxX0){j!&hZq%oZu7Tz`_Ycu<*_0GUTvX>)Dp zw=(Z#8c^od0?ND!p=I}gGH=v9zHen-UZBjo;7F&2{L?b8Gf?K`{9~DyH_;jr@I6}t zzGu-Ne9x8JQif`^fbSUs@IB}F1HR`s-+a%Tw{*#`e9sw}*||bcP*Wx&D^YHNI+uKy zs&QcSDIp-Fdx!pUK(y7n-d(u|jWY<~gU0XN-pmYY?CowipTj!MyCy8~V4*l=0mHwX zAx$)1q(&C&Wjna>Z%nY6r`2Bf`wa7M0*s4pS4j)Dgmuj6i zzZ(8+xgP#q&IAqr=8_c?__`S~rYWFnbM!ypKln4=t;OZFwe$z@t{8Nrrl72wH-<0= z2^}Y-ZJa!cW72F13{kSpbN|*0E7XyUTfk~9Z9uL^K_cnJV-zEm+2TwFb%qI(atAk# ziKQRfytO}X^M*)1EOl<7Qp?1tL85<9F*Z1X-)M0#A8`tX=)A1y)QXW)s%9jC3ws;O z5U&p&MK5`C=)7UCDRfa}D5o)}{sdo|}$@ zb(=oCp1Z5%& zweS8o0qndjW&gT17uNUq0PsB@Re<>J5WsiE=s)kpg7~h`DvsgalmYfoHQS~hi0?XG z@m&%S-_`%P9(=U`EDS6Fo0FcM@j99ryuvH-(GJgaXfOQuTKnuXg`@jP5RD|*7 z8}2{Vd2eNBXHiQ8gfGHjH;A$va}_t?vwJMsk&5aE{XO3e0rA~5%s=wo5-)}Ij2zfZ zr&f^wMNBm%?4tFC5(>&{U#1jvgN~;!4WIPG9(KXbiJJj@cgEcOd!IM^Cw*SFn7P89 z$up4ex!cgE^|X>Cf7RgbmG8OeoA0?Y!^`67weOic6l!g4pA+PJ?)!u9Ss*eE69I&5yok=>|FOhn8_==3Rk>aa@X|lM{QO{a>z!7AvLBc=%SP zj(rO$J}!BxcM^Txi{j47T3) z^i__44@T!r!E=?XzZJ~W!BY}rh>ADCpNE%2{ZxRU3uinR8b*< z9&ZPl0458Hgn18|0PbxgJC$OF@es%lTTAXhAX4(R?k0qp#30=TB=XMlH#D$YP#UQWOAb;V=PwpI|}Jz|XwB$Xh(qd~YI zSO_$EXXXoJbH%O!?};Y@!Hf`;NaOuhS*pMWCmU9E?4x%OrDz z{eUKKbpCadH){E|%s47FLN==Kf&x?+D%-E7;b*%&qYm zfd&G*?BP!{whSh0?sXqS{9>9LNiF*&q)$a!dGD27_ykp-9MpkTo=do z1Ic|=CDj`>(@TN9yZ-DMJ85@@tAi5lnASffynHF$yl=}^`SDq_{rijknH|S$Gq!m; zmx%=JU<+q{rAzUd-R~p7{Z-BT<^wQO+cW0wHr%nc?U!svP709;K~t|Hoacm!zZM)^ zI81z1^qTNcAXqv$t!{N#<`jQOIr6gqe$D60g4qX7qYP^YF$_q9W|AZxIK!wHC6Yec z>@N>QB%8I^dt(?8eUs>0)*C1SKb6Vlgy0FG2Cs8(D;#q*B8~`IwZK`HS=vkii{F9h zqT@nF4N2qk$6u;0mU{KwN0YP!E0`sP{mh^cI-2*R-&9z|7hu1h^lX6kzCdj*oGR9O zPftGcQShRd<(PDp7=iay?{qIQG<97O7;4g>&w*SH`t`HVUq&>9Vnu z9cOkG!5Tc{4f6C(ely#^!KNWo0wI(AZZ{&#P`nm9`P@qn+&LbBu7(nvjtEhoaiWF2 zTRSml30V=N^q;q}16u?73KMN7Cks!A#i&&taB=P}?=Z=W4a@N2>=_G<_H3SujWkTOOW#Au(he?sQX0q2Mc zXO2wl9pi|Bk`P!53qK1fckrqFtCQtyPt6Pzc4NL4%pQ%KryH1TzUI2!oZ_rZ0l$;$ z{B|X^%p47C$?Y%OP|RpYo1&W$tSg8b>u_jbu5pX5dxRlYK! z?PDbHZQ#q5gMI4j8~vnurOon=#<^nShH@ukbV7)%PW0<1suX&?yXfuQ@fT@IlIQcusqjjK zZZP}amx9p?17GpKD{z=0mFisKq&~M~b0OIn+2e`Bl#z1&e$L%{9jO|VqCuNBE3~0e z>ohe|XbO#H{nM%^RuNRx*LMxe@BNl#xWHbVFfG4lNydcBj(It#e0NAygPe^wq3Hew z4Kf|?uK3gvr3{_7(^{cAV)=h*qjM?vOaJLu+-xOpW0uXrT> z3d0}$Yd85n$-;F?JwCJoEL;g-;lJ=*7w8|eUqRs;7E5fXUo0DT8`3?BpDu0kA^yFz z?lB*6+w^w201gKkKN3H(|MKS0{X;1uH~}E9+3JF$6g?NVk*s(UWRYx-%TnfyOcoBGLQNmQ!eJB{zM$dw*kV00I0slbPsvLTIv+&a#-(Pf zdsSjjm{vbGO6napu{F^Yq{1;TUf`eBWO2(0NckoaDj_%qnhuHBV^uLJM;Hw zU9s@JhgU2d*76iXU5E%x=dldGa#h;7*JGOHlbc4>>tpix0-w!XHFf5q z@!@NY1x9<+MV1oU7ui(iw0o$2@kaKj!%qznhs5ycAAD>aNOTj$m+;kT<-RN zg7pq^wj$s#-bLN~h&!O88Yn#vAy4~H;Rk>7THn?fVeC`b4{PTV#7JJG=(!DRbH~r( zV_{ljnHOUOoH}+wfRfg8R3SR-SBjIm@jK$h`V77(jD4%varbt@AB zXgW9K@(BeK;i1KBp#x24vKsN-iP`|mB`C88XuHjV_jD9cN}It`&c~-76^HiP+Ow*g zKA-gN>vO)$zw9FrRpJhynYVd%aNDSN^C_9cOC92}qye#JBg@)Gu}eJBfdIVNFyr3f zsB&>;M?$SY#{!=^Ztt1pS@L}XoRNc<9o0gvCsAlQ>oHbhf=gz93(ko zZQx6Mr}Yybq+@28i>8V~((OV>32izga_}7~`VY>s0cPuhO4kTSuNbFL7R(BP!v-iW z@R-qhM~`E7s;Njxd(_9cit~qVdpMIIvo#EKtM|U&!i(XU(l{AD>}PSRLVVD#iacew z=h0~^IoDKH?WWh;%Z0`nH5DK3ib+n~R1yDFE@!lFy?^xU#yE9TV5vJ}-hI3UdVau^ueHf70`W?t@Er616 z!Vp=A$8qMq*Mx!+hh;=bJ;k#Cw-|Y^DFJdh7{r*Av8MN@#{9jhZomX zXA)Q2xdds^2%zeGceNcY$O(=ayTwk@cG&GcLCeew!1#N1K?s3hyvo z@Ny@bM0NUs;8Co{lds$-_cJK^ZXeyn-aQfb%pY6XcA&ONzTATd9ulc;)%$EqmcJ@; zy?tDialL)KAqg>4#bC~e4Y^eE0SDA|=6UvNi?W<&-~nR_n$rvZ`7A%kZJh8`Tqi_K z8$H}vK8|;?oi_>N^z~p`W9$nX8dP%Ok5lJa#TnwV!pk=+{vxiv>cM<9g6t#UeG3>t z4zE#=w-?`(el$(F!F~TpwtjNbCVuw-VvxENjKX?+-sFItlCY^*6szh26ejcopCB-F z_`vg&iRWM4tQN9tR?hSt-F>oHKB9%+8pdh_;XOX;V1#LzyHakBdzqg}z7 zY3y5y?{u|9j8LCf8EEQZ2AIS_EgCB`CxlajoBQgks*shwF%!Svv~`;i(%ic6VXL7P zTM!e+R{n(5i;DXRW>to)HpnAQ<*mmJ(nBSzofttN}CBA`M*5>IJsAFD#j5A#_-jx9bBWj(FMbygVi1 z;OGEK)`%5TFxC68`=Qp#>(FginIp0f3B&P zN`qgf=%RUY%X#Xum8n5D)TKoA#GWm&Or3x3Q(H#RpjCVfRwn7^yhUW}YM+I(?F*4) zZA6a^6wB3&k8nJ1ii3h?w;hpZT?g+XX34&z<^`B|ne10*hUYMsOf<9ZEYLg8PV`uk zda*9MXJ7MwaOe7ZY&enB>vA|fnLfT2NV_9CzBF5Rr)2t2!3jUZcVaZ#PH2-y|rpzS5b!}?Ghn~wOKP6nZW*j zRC?15VeotF`7U6t+h&|4@Tk1DTi>-?Qh+OR_sD0H(_-z({d`|i7U z@?`-@_P(L8FUwlL3MvA2>#TXN-cP0lK0bK~qgkCRJB1#L)yMV;dvrY5edoi2Qg!#T z2f8;)w+p$RLeSC|WgoWI>FgE;TituJabkUHe=xj!P9OwL&?}J0LQp3SmyKf8+%w0L z^u}pn+>PQ630I}<(5PzdBKI*BO!gl8_r!l4Z+^@P4}LA){3Iv*8HwM-gqxUirG$MVeBRH7=Mz4u5TiYV^)Xr-kG<96- zuY6(pFgSj8Tguds{9ou!kUVy&3>_7Q7N8iBaiM5H9t%;=tovowojM`tn&iQ+V-Gkq$uNX6- zfAhjM^{q}dBUjIW`A&VM0P4$pZkS!F&U{UM74LkbzUmRMYmVDvVb|2R%hmp(m+Pn0 zmq7T6`r3S>zA>0ETyeF+4qC91l(_N^C2E6^Gee{+5I<7iFDnB8^%cb6C!aM%YC6Tw zOM{lXE%u1-Ir8QOUss%bCfihP*feSlSu9KuZd&|r%>o6gc5Q)MwF_5EuV~A!;F+CZ#2U=9CS1} ziO?05!LVd%Ki;^7(c|%etYJn(UiC{DDQ%It0$z+DlppW~Fo({J4g)L<^#y)VKMRlO8}(g}sD8XLdvdtOlHry2fq$Uo34s)RgV~Or*=CC-h705)nJR<7 z_gklZ_gim==0^k2mj!^n0xm~QhUi$#f@u3wIE=gC5td ztFW)|O4%aR;j*5Yuq1?#h(l+veLsY*XbGKOU+_hh!t!%1!$ii3ecLM z0yM^T0b29A0R7^s04@7l0Xk=<5hy^P4Syy$XfQ}x;JI^MfTp}IK%4wffX>_xFY4+> zz1?x2B%F#{a#-_GG-B2sWm_Em0gj7@GGbPOH*0ZL9X;Z67`b>=$#tI=Z8#)V11MI& zb^R9Qg$1M+tCR7B*bzh#Srgh41scum_e?rcz?|_}>vEw7@10;3F6^Q$c<)V!*VuI( zo^+EiwsAvo;VI2#4b@WYy{FB zOw1J7t;viWqlI;}^&<7bAY^LTK})ak>sb`DOekZjS1X1r{@WRqg~kms)I~Twg==+w zmeAb|nGIrd!4i3H4Af;7a8~09U}M}`00roxYege9uyUl}a*-`CWgNvIL)cp#Uux9< zuoV#P;^{A9nI-M%CX<@%2DUZFr1`WFFz<{$zv!PyW^zhA2O^ z>3Z)}!j^!G0-8NrhjuCa&}Fv^w)i-5qRX7ig8xNNP)Q`FTXI9CCXDxwhU>&Sz;G>q zMpyOSaQ*xm`!4-xxE2Fp-;!&?b>adD`@;OpaQ!HEqw9A1Ye(>umnmgA3T5hfFPp?kwv)`JX2tx zY`lub^M^`lO1}Gn$UOPs#hMg{oN|66*VOk-@Ls_Y=^BXoV$INs6_T3`{J-; zBPy48f1RCSb{7*urJ(y_S9x^{puRmrP9W+#5utQg6BLe$gB!>`D7NUe`RsgRSfHFv zQXLVxu_DIbdwBRX600wqcQqO&mSUCQRrx7|g(<~A%5M#5_*|9<=WOe>k7uR)QJ>&1 z%NoR)RT~r*D8%M-cwaj>x?6NalYY#5+C*6=w-2g7I|In-372f*Iwnqhf+wM}V>X_F0Z+9%ltpCUtO5{i+a<)mKQ zkOfO& zk4YSTmt6A#lIsqHK!)#<>%ku+*A}qT-zC>f^MK^~!M@VZCD-2nisX9azh80c_x-=VJO^2x|+%-9$yQXQ>E#2LW7=T>PbAlz#>KMCO8 z+SR&q197zx(FORHU5JX5yu$wabeVUAPOT^e(mwWPJa|%AORYsS2o;T0kf?NxAK9() z;T`%*@*9o$>f`M^-XX$HM0|0bt&Iyc+#c&^zwA79<%wU}Ht2+_cF*|D;Z3 znd;l_uI1bxHl}DRx(QICjUw_JWui24FOVh#mF+pcU@nVz@BnMe0@Zb@G)0ACC0}eO zpyJr8tq%*!&L7oU5>0#u!0QfyQMOt zA7Png5gO6RYo_XYO)~g}sid(r5t6_hw0ur3y1#^~l&pw&xZhgnV?e?w#H6_wn$4>E zY=K3c@nJQT7ZMkN5MuRum-8rJ$}zpz4Eyj%Mr;tx(Zf~ZPM%~O>keSY7-Jv!1i=%| zDYF;Cs+nAm-<_CkBz7qD$&Q9zrZ8lg);e2rl|(+{=_ik{DB0~2B1gTFTD6bMsknyk zO|0vt^HWYOYG=r65KzPp8_ivl=sR$Ni@Baw7f4SFbO+^6>Q(kn)YCHKJv4*9Omtfc|%xd{k2 z0pTVf{C^M-{w>hU$;ra;zXy7+PPid$|Id-Ozh1Y09x`UVx-8%E>>rcuzX*E&aMI27 z`+x5G{k7ct&qKz4yng>l(Ce{2Yh4O}UWi{aU0+@HUje-?mW!fSrt7y#UpwC;9skjE zJu(YZv8M7gqTTJh?;H(01gmgdA#*3UcgJzHyo9-=WQlcqjJ@b?m3=X*vz2QoM;w+f z#SElZ1W$&gy;?PEh6$c8rHIti1t^Rp$c<`OmKRnb;}%Gi8IOeExC(oX%IDsc(CoN> zbql*)kM79vVkp1>9}j9SVx94b#NRcA55{6Sdt15MPW4%8#3Z-vnr}m7I*}cFKBm+F zt(1HngX-o({K;sR$|sMxHnowF3TAL0?At6BjNJpNu1D^HRM#;Bf^NU5uD!yMdk~ud z)wN_znEha?i$~Ifd_Z+w2~u72sJ2yK*pT0F)wRQXeK`h$)T6beaf~=hv4`I2j@ouAw5!WR%6@=XgR|E- zmFfhAWj|Id0(>vte?3BYwt1x5D$aP`+CAd|PyBqYzfBW3jtZv0)P3F)ghbCq^ ze&d~EhgtSLc$sGyhH#Nm62j$n;{*Cq&9R-&X`Ki2Y-4X4BTq3!FB*w^B$oP8Rt zho&3t*Tv$^6U)P*Kc+TibO#-pb>G*W%$YXt#Q-yhIAp?u0=(MHfbgErde-Ch1PF)} zqlgsM-mlNWSp5b_e#E>)$qLQQi#8mv@q=LIguQo`f1|wl#*^}~w2!xH_$xkWo7d+3 zNO>jRnp4K&z18Fu+wF*$@_sQE{CLHi#ix8c3U)ltWE0lB$-0&m%tA0N`#7L*^YKpwsKG26TEaQ)?V`B+y86P*~t{=bkNAB&%$`pEL_3 zS`vQckOb=VqOf3+(v(EM#S`?#NvyATESg2vQ0p7Wjdt%rn;GKFph_waF9 zJmP%X7GXwk#dc-00k(^qY}`$|uE3@Zp;uwrqBzMGP*#HX;XB*qHj-$x4mp1@E=Tk7 zvbPK2zA!^v9e>>0MI7X|n9GeX)Eglc8W1Cp&%ji4uG#MLZ){gq24K6SGS6JZ5e5{A zyL*k1r^ReE2fb62wU}dTk1y}k;n4Vmd1Ld&#wb>=f-1cgAEm%9@QXykoQz@?VZ|vb zw$NuVfHGfP+3#!@FCbdIxjFshA$da`xom&omEHQwioPqErweCpIfft~ib+`~Pd%d< zHgYalIf(6=f!OYwEWmC}es{Tu5o+Vh3N1{g8O%=ZZtY&P+iI(7S0Ja%DXY4eT&aWR zNPBD+rSl$feFYuA2#*i3Mo&Qo`s#fXKS$)oBhBil<&*98LjHu1?A_{hvYy@864(_7 zm;Q!F`!E%@Vl?8omLa)^BcMv}JMSC>2;)c!NI67^h^Zg#*3QLE5P;qKnA9(~Edbg| z3(>Vo0(;ff_1?6k4NC(ZOqt&+tX6j!AteOD0q7lUUW^Nh&jCU(tr)%)Gfk8ophoX3 zsL|`MjNiu1wf9E6>!WB~|BK?+4}taKC(l9a#S2x;zpWP^<5C0=9Mn&I?Q`p+2rPlT zgl@a2)tk?=JNrD-l~_yY4o06;u1?by%B#xSUrhn`DlN?s-HntWhafwY7s>Xc_w@C8 zG1k?3@w4yi#i0SNEui&cpR?cAiCdMc#lMoj-a5evhKC75ZMhaCitSE<*zQuzJmy?O%&5^pkzw3d0(m7ol=+=0uM`DRg%0ZFuFHtU;IGi& ztEptPMyI;5gTrG+&4P`uj9}JhmD!Pyn6}{PZ(sR;xp*#&ie6-9!}U>a^Sxk zF3g0zQw1rO=Mnp7jx62n-Qno&5YG?-W){}BRxg=$>BZ_1MaP5oM==PLXI7lP8Www+ z*KMKrGox;a%e2Dn$D3HO;x+mRs$$i$);6*n#4sYg!8z4=WXgf2#bJ}MgBP{=C z!}X83;1}@j-{pco|f^>h@-PPm1TOJZIB|Vf*sqwhZ9*{(&U z#j#owg94&`*?4uyiUTj?VY&L8IhO7AD)rGkG~Y8D{t($RWMOtU(YdWido%G8(h#P= z_^uBqlw5En4kBiFOW;K_xU!X=QD0nee98t zq$($fW2aCf1V{KX#SS34rw{hI9BMrY1R6iL>mz>9Bvo2Lc{CK*#nyU^t*8Ubm*NL8 z#)}=nc!FYhJAu87vS&yD#fhIj6yeGWsuU28^24R zHEv$lC4`jQ>ToG!%_?14y2X&l3z@JZ(iEIKBW6tLXdt4?HxUZ8!vp~k-OWAFdhs`+ z%MTFU2DU4rTfKSLIMjW_e93y#o^t1|Cx?$zKwxjQ)zE&4E&CC_qzb3>rU8JBk8Fk*-qDr${9pRCn8btVcmfu zeSOD2&A4=eZ)8V@?(}5K#2zJXUN2&aCmO}65WQ`XG9-h?m&HgIDDUEYTQBzA4}aGc z1S{VG1(bKIC5L&xm3N)){ZQUb7rck(P#a`PaR*J*q(kyafX{}ous$#BMUS3PHkp@I z@(cI*(FYuQc-ermc?|l4>;pkVd&WAOLa|=xqY1BD2AMd!Ow|Ss>2UiUe92#t6)4I*P!_8GUIw~XH0s>0?uZs!_ZzU`)%60@Fh@V37nS_gE~)LJ;eeX-!`Sf zr_@4$6CT^3e(bUICq`)7S~%kDOz?l>3?uxh)Ubj}&A=&9h>p5}_UJ=e1>kI^yVps8 z{SYI)Mh{+5jemt27alZUT!RCeFFrp!T=k-axt=d3Goi8OS~2Lfpzsbm@ybF&;<5&9wZL(w77MmoV{gLa9!u;F^K~8z~^Zi}_TXjQb%C5>>#N7t9)_2OJ_5 zJ~jrz>fJ2z&g2q9o->^`14FodZ2dZLo^7yD*v~G~DF>7As2K(%SzT<>r5h`~2Ek8+ zo{a^c7hAJo&|u}HI5xBvlRl=ue8>cuv~iIHXA>dlVY?yuN!!|?Wd-7Dzc^=gh`h#{ zL{LNF5nAM@Dm2f$2hj1~H59;Y=KS7)iW2%C)gylt6#R`@bKzn!4HR(bSXzyysLs(D*yDN_jB)n&z^!k)Vy!A%A#yINr zMGRnVF3{jOt2@a+IjKxp#-YC8dBxl8eL|<;JT8LV#?n3DLkP11_nC5$2xFnx20w{` zzt_6O2R3VWs-TpkNz9?omMOkwH$5STqpa_VA|4hW1bHjrJRadYj;B1qSvv|c;rdup z@aY6Bsj}&)4;Wb_yCh|zQSYyyzx8}+yn3SV>teCr0>hU6FxVJujl3b-<+*NO``zMR z78QuCJY6&FvuC%DNEKt&Zxt*|42eDROb?~7mJ^bDK24kG6`W2SiHV6qB(Gwusaul{ z(O;Zyj@1P&9Z96ZHdTO6LSsteia?&@+cabUQN*D;>dn(s26u|OXM0H}i3*X+l;=pn zCoa7WN*@otRKMqR;r|R)VmoW`4wCU%1`pSEs4Y;k=(%1_}^{qdf%~ zb}$>~k61WYd`p%?eOGRgNmqzr(0=huz=c0DdKhnnohWLG8!1oKojIHP;mn!s8QG9l z+FbNwRXPMmQ@j;ey!ZZqvl$1P^aWRrgnmtuKe!=KB4xtnsDIpYj33`bUTO09MvEiq}5%T4<=uiF>9mVr zo=4yEc70{HIBw%76UFOvd9^X>qDzZb6mo@G>zc=QN{Y9R#y zz;`Wf6|B-20DQNim^8Yl9T~9-36l=G$XA?MElmun?X?iNg`+J(6b6(EhHx$=_!{j9 z*xSHY{W-VD(M|8?sbTsK2I`6T>iFV}A* zIFRfdVl$4XY-Vnrany9vJsZWrbL&;1wCkieI0RJ9Zu7{9-K9H~O~b4$c}Fs-e!{tiq3x=?B1lauo(VV|MO@D6?Sty?ZzJ%%$0lU7p}m##~}Vrv--rN;DB z(x-B*wD;^`noAN+g3{}-zYGy-^^2*XJ3dyyTI=g|L>_cqK!jER(cKl~cfBL^xQGja z^<9DGgfDNoeBdRNGCCCb+7x%>KP|IXuZ2=wQpsE&N1Mo}V*ZS~3YYsrt;eDder#g^ zrxXNt$x6{j|6?k00*bh>hYO&#~TKC|OZ zKPSL`e5A1{KO^B$Bef)Gb zQi*3jC#evsM^`dH64y<7=xEqM6sk|B&;ooy+ynZ%jex0HDh#|$5(A`WM?E?XQvZu2cDIWi<3XJ>rW6O`7C zJl36l>NWwbrlldZ7UU+nR@P;8uV8~4>dX)@HE$xzLnrqNBm<^qWH^5mt46@oJX7Pe zVA&>1Cu(cGV3IYI@Fq$>ugJj(n(W zo9{TLPx<74(!-+d{^7*gb*JZDK|&c})%o)0CjFB=gU70_bJGV4O+HBl5_8GYbmJ;n z$jSI$T^AkS)h#`m7H$?}TZbL|PFb6diFF(?2-A0os z$K03ZX0)xbpJQn6VGimEFBg4N5r1G7l68h=tgs7BSl(FETGMULv=%plsm5;>Zw?U$ z8Qs-ijHOT6Oyoku6kLiJCit3!aDzL#>D>~Pih@?(dt4qe4#}8}V;ZPJNqX0Wd&=De z&&sxLD@`)m#?lQlzupiyLQnmiio(K=2R7Q=n{bYtGHu{2*?1Ipi}`b=wo4CrfEKg5 z7tiNm;&WJ<9$yrB@z*$w-u9Mv9QV~2$_Nhal&J&0X1Sp{(hDjhY-6L@I6pEoC?!j3 zQ!*bKJ`)dkb((PkfNWVNtMTcqVm+cSQjIfVdUK?nV=j;{*v6&CPmG?&kOdY z1(r=@x7IG-sjww(a^#DtKfQRLmL>KSskYahSx{wx>I<7hGCVi&V81VXW+-yW`lEYE zHS{yyVOot5;4@+<#6*k|izrXKY6Lud>z>!;d6cJokI8?14F0)M%yxB&e@>r&d>np( zKL6pQo5$kjvG~8_vG{kI&VPI?{*zc7>g6Z;8UTxf{Tdd(dI1RomeqZNvZ^YoPR>so+#_g{%GX>R>uJYePx}G@#>02)>n3T}yE@s{XZLv* z^|dh4ZSO)#A3U#{q@L+Z{9o+7by%0_qP9(gbayJ<-5`y0cXy|BBMnL_-6<_04H8n) z0@AH?cM0zUjBC%VS!?gv-&*hY?(hBhV~#_|@%atM+|L|dT=#XJ`3~s$=pWzZVaXqp zzgSo;wFrFKWNRjZBZDeA>|nz5>B2P5#Nqa8FW~KYb8CmhTQS$*NK#oaMGtbMf)-j?a zqH(PnN=_>y(8;rDbm5Xw{EDAzh@PMBvv0WE*i}{a&`{>dzT%)<%{lmbL(%b?h-%(6 za%&Xoj%l6WIw$@c(|TL+7t`AO17U08Yc5~LxXGppDT8>`)o` zF-eYrq?F-EDz4+%a=V6ko(pv8cP3*;SGjwWF-Un`gw1=jGlgvwQob)WrGm{*A56xJ zcP8T!C4EIt21LMQJU^ME?$St&G!l?SfLH=Rt%U)owVt5oe!B}EmQt;pgD&XjgBlC~ zYQ1p>wN3!BW3WTm=}T-`SLgTvuHpoDQ(bg8>c)>Jr;^8!EUO1KHc666Rag$%f=Am` zy84wyu9Qk0OTd=Iu}G2!zgO)CVUWg-{UUDBSN^16XHNZ&c*yByA{mh{7$`2dH%f0JR?3QxF-Mg997Uo(#!hOSFacvJ>{! zGv>4A5T8lZx^X?Is|)CNR9TZo>J(4sfmCpNmBT1SY@>S+%Yu0*5 z9r)I%Gc@-L;;55aELi~6tcm?99Js+VNx)p}9er-K)LLAfnXfK_eM&O^hWG>d8QoRr z{J!PWRGbHuF`AAN(2G0pHxp>fK&-sOU3sS?DBm1{FTBnb=>fC8F3Gbf>d|2vt@XUto=8#|}mjh#<2d4~jKP(+&U$IdU8>u}VP>!;{DqYtdoUEke}ozGY?AZV*l zfU&b5PI~hvx93(|&B7Z4a<1aE|m7E}|++4k4<(~=Md@T&L~uA?gO@8$Q{{*c(M;-TS<|CG5a3;&o4=e^< zEV#1tP*okzHqz^6??KjgW9QF!4QQniaaEoY{N2S_Xamun7TE&ecenHp;^Z>j;)#l!@#WL z8e1uPH(id4a*oqp&U-D0XqTB`P*L^xB3Q4gt+1=z?#kScNk++OPt?aj&*zmJjA-4u zwzyqlLN3m-AjD|xoNTOKUCvCK7kg6kUd|TdC*#4VZ}oQhK<}FHZv+*T7R}uGgDZuk zy@=HqB0BTY%97}>D1(E0Sx4WIiAdatg27FO=Fd|ZUF*mC9{3^P-c{k9tp$z0s&H}e z?Mk2ucURcXkbF+Tn3 zxQpT*;S2bS!G7NRiwk1Hq4J_7SvHPEcD|tik}kaP z^yNNuHG=zQSQGNHj{N6g#xKz?_uTlA-takLUid&rTYV;W6dprNrTDIR94!(J;>t60 z5XL}d$oT#(Bu0jIX^A?nN2e?X?&?$S0QfOFlQ0!|={{P@NYjrwRP|5&RPEy{nX~dr zsNSKQCZG%Zk*@(=HC`~Q!$q=qWm!#W}a&a{C<_xeS}KYURo0g z(U>2x%Z8x1dzkm_xjuC)twe<}ze^m~eJdU!lt(}}kpp3*NDo@h)DQ$4{z@u5OBvn& zXw?!#y|>3~%+K@5M|73a*miRXraYGq+6W-U*h@>Y{vSJZq{aoZvs(*ZiF5vb^gM2k z+h6<)t?;yA)8U}l)n4i2Ea@0Y+;Crfip{w{4(1S*xT3klzKT)1=3gRRcOlO?u;$XZnSLI!mJbKA zgxchTAeXtX$omOD5-Xz5{T8dw&ySCQ7W3y;r`!C_wHIHa>>&Ay`@HVE)P3+!Jb~?~ zuD!B_^21BZ>ppw0kEz;&i$*FsX$WNnQlYB=6`K{ht>svK8@W-sqi+P8AHFZu?Q9hN zL&49gUatymgdymvCAYJ!!---C-wJ%%a;)OEXquXaByCyf5KY>$g&!qH2l`_>yj!eE zbn!=9BxW0GjYJDO$vir>;7CJpOPh1Yj^|2bYMVX?F46D!B7GskMR{OAn+Xt}>o%GQ~J?AKu#Suwh z#E#QW3q1%7pe#x1mI7byY^C1&ivt0FG2Y^!m3`eO>}xkJy)-1uHROALF}?|?J9BYw zI9vkIiZ>A4wc;>_lkR%oichD!?3s2yCFc`%Y8z((OJ|AIgZ^k?!d~s%P~c}ci!uG~ zuUtzu4zG9AS9$q(lCdhwjojTGok{Itcy?HbVsLjVZv#pKEi(|>&{F2cH7TIS8H?{) zaqSzR6`$i@BIdd|?&se&lDWcMrXKjfO<=Yzk{ zivP2G@SnBfkMZC!9z4c_$9V7<5AJWuKE?yq$9V7<4<6&eV?20_2mf>9!Jpf}zp#Af zWMgCfmvGkX_fPmM?cbxf`2Y9b;)lcXkIU!(9?trYPkKClk2veU;4S{+q4_^q@?vB| zlU4vFFX&$@dGG%p``;~jD{WRb`QiV$mh5u{#>l)a7UUOEyu(qTMc+1>?V$vdIu?j3$3ZRgT!WXpX`{)BA3jyYq_r)sdW z?&{~6pyaje;u5Lkvv_BFbT7H=?%^o>L+?xcx|oa_t(|WsWd5?Id&6m1ujIpn$L2~@ zSp{oZB`#Wx3!ga~YkmD5X|VC$my5O9#R|D|D6Cd9fY~RcMmc~oEQgdx2>QgE=!X!M zq`71qv?TX13uQpL5c7f1v}nNYPiNFpR0@H$bU7ubLt~u1-Jvwr6f=bvBb@fC=yM*& zG2~}!N7-Mq3Q<8N&YOV!Vs8yadGXj zWtuHY2^=K{GKWfDQsj3}M`%D?Oi%)^Vv#P@F-`QrpbuZtwDvdj|_g{?uW{8^$qra~dSoJ_B^7)`A*&3dU*~j8tr;hWk4OUebzxTg)5!nt>Ol)fniJDc$&eTBK^H3yK>FnRESd| z=&0Bzr)Gs!#XPf>`%ObrWdwG1@5!ro(Llwk^BEOlf?N1qsoSf8`@2%tqUn3_A#)&vWAE=uU9WJ5)rfDe zo1fDFRO~iF4W$LF$VTqZwV|Sc3b=<~VV3m|hmkd`3^FvN>)wZbLQQ|>VWWb!6zcF6 zhCNJ^%RVCX)i0hkKIJ$*z_ZT01fdGH7t^kkTW8Ko+GlPyaTVe(=nCmvvqxsF0-fSd zp}VViQ-O+C+Dxt3B!W?kanjw_zW({7hw8_G9x(oUYq9lwpW)QgMErdnKC!*^xM`r` z?N{%NXAN+jco#ZRq_GKOc+azD9_~?b??g|0;92JaJnKAwXPrFSw%p{dFKH7**^fzR z>3|w`8gR%At|fw;$v;e*>(d>!;-Ou*W?GIS+!dla@4O7DyUI7LjQpWrv(*s-)YSgw z=J2PqQ($6AJQS`na+WvNF6Ip?r*aY3!`@joW7L$to_&S6D$oo5P#H8sbp_3)9@6{E zs+B&x+M87B8TxD+2IyL*NSICwmaV?Qsi*3L8qW`y!}BUWX}D(@!*GwD@t~QacC?*W zKA-a?n^Q=z3QX1~XoXA^&e)%R0_h;*e85kozzRzB9nFCSuUB|BeFTjCU5_J6O2_Gx zwi@eV!Mh1*Q@b@EsRilyw%Au}9*p#bE;g#xbEx}e9H85-O_&O+?{q$+TTu&IZEzE2J%Dia3Fduu(=T_Tx;P?*ts!j|m9hNod`D1T++ioW5=5#B1T(8c&X z%L~P8(6U*Sh}bSqqfOouQVEyLQsPY^a9A=}L3Cko+t)H`z}mSJ%^p}gZ=M(jG0a|v zO~hfF;y%M2c4z9@pf^bDI|#OB85r?vw4THj(?!4Hd!j<-C4g6FbS%G}v;Pd109^@v z*#)j3Gv_@_o_nWgs4|A83U>KAaTRsUL=baEzyr{FCD7zYpj{pX7f0QUZS$lpSL{jh z-vg}&ubNR8^PSyq=f0!?Kx;n@Zo69b*F>I`mg%kvs85B356CZH@G|nr5_#fIehadQ zXd}TsJ5;y#z|A;p7p?4`JrY3c^b-9J%$*w_=FV2w_|Gt)@`fc@3SFsPThisOlq|}J z?cmB-;~<$aq8uTjriDGazo&dwwbqJ}8UJ9M6B{Elm~#?6+k2Ai?zCtT%@uUpo7%lj zl9RJ8!wkE|QIPaRnYB|AWiwcG`asOIxKGs$9i>%a~g#{0tcY(=vb^m$j05FB(7*ItBJc-hDspEgTHr}JKpV`#SU!#;3|f`R<1B8%Vv2YG^d!L4r!=q z>d%=x-k<+H7(|OiWAjU3d_%tS(|&ps;a2jsU}bA4GoaZmt`A2@2-T{ruL-5&fS9E2 z_1Xf~&e!ChIQJnfOh+AsCD}_HF-FP5b8^5&s!_A*L||-9M_&s2mA>tF26|m<>7r=I zZ4p*Qw!7ag;RY2}Y#iT^D`Z?RqD`y6G6$wbrm>DIEgDNEIQ-p+183aky*-;7gL3ke zBab9A`48NEL9tqSf66)$_&gzq2o4VL9!Wv|94Kv>_jyH@?_hGsfU&c2J&u6tllEF3 z$Wuf;P3qS&MaXW-JunokwK;}W0uyhwl`5<0Qi{J!Rz2$7rW7W(U)QC9dC0v zS3ddq@xNC+5v)BRJ$qV$xzTw(wAm5FfBp&a_5gH9&Is0y{cM~;;%hcLtXifIQR`Xm z=F2l+?R@&I{M^6YV%YXgNX~{~(>btq)=Q=L54769MDT(Pvg`b>RmD_KKKa!_cKw&C zVoE?&yd3C8$6ALQx!9K3AEEa=8RRV2lRtd`tFKMemm9m;r{Vm>V=Rr~G9u-o^7&#g zon5zD+)WF{QA(Az6Z{^j3E1w;dGcsJRY#6daY+ssIG&K+oT#g!GIU&0ISk-CXq&R5_a=PC;f4D6qFuc|G zeSOxwK;QB#N`_=-I1=h zSH`W~M>6yT>R648#P8iWW*FNSc@H1mSaoDvd^A%-%N3}*lN5|Xd8a*wM?|$@-$5e{$R?~Qi zSRQL$6B&~!Us=PZPd3e$&fKYroy{HV?^MMWKO5xSa0nw;1E$Wo7ou6PO`PXkv~+6y z-(jg$bvo*O@YOQqjQ$3H$@O=t;`#i*E$DMXVDFq(;=W?nEpL6dch23Kcjf5QK}ecB_)`v0RK>-)3vkK5eepSr&=CH}*c9#7vR$oemUtp9Lk z{!f;<>yW!1tw5Qp`q#?b`+x6$dzl;Zv}EokJm=DO$-v}6@FRftz?o2n4zhzs-JPpYb_ zA&xkSdxPJVxi;F;bNrp|;D2xvL;Z3Si*`3q5xoc8#N+S3$mL8qu`0Y9v}blFkT(kP z%g=3r{N*N2|IJO@bMGeBd*^xQCib^_FL`8)`)$b&K?~FT%!d<`N=@W7AFM<2i0Wr0 zj2aXX7~ugLPxMh6G5D|0_za?3ZNsU;A_P*eE?Om4xv4M`hj}5Y-_OCXM?+HtJHT~W z6M$J#qebF4SqCdw+QXuiOuSuoerpOAG6+0Hjj^|CtIax#t=LS}vo&7mjcHv^!5}$W zQu%v)^-LV(Q^lq0&B^zroH7{Hl*6()^yS-15L;(iJ$(>v7f#zs@G(_xZIac25pR5= zo`&!0B8Q4a>@>K1tY2I>D!AY?e${6ad8E$!yOIJs3;8g$yVdy4hf$%T?8`8$er$Q{Lc zN#AQKgRtfMZdf1NZxriciY6B!!EF@@!ncUODAw9up}$eAXJ4;=5N4gg04Q}o*aD_z z>KEEM0!)5Utjh+%OSQmePssgFA}5~qG*!wuKuF-=6NL{FDi>=?Yu!zEkG2lmn}x<68F#|LL#1Ms5PIpDJ3 zLsZvsT#+NfV&WqyZs?Ilr_t2wQWth!|Iz9)*!6nSnUv@4eynbeZ<$~|)im8x-otLl zwLC^&1x=$S==oqm&_!ygr~pX~`GcPEFX4Gv9NWrS2K3o1JwUM=uMXK+-T!LY zT$Lp`mIllm(u|4*P4i2#qJ)8q1QUe0W7&%!Q+w73X3m}BVS5P&Db@+htRDb~y7$Qg z$oju2DvrDZS^p*~CVu$`Q856reh?Ku+4Z5T6I{lSsLg8cT;?M&AVrsEEL}mRQ`w2zo7j!hR zywq-iXvtd&SsKJvl4VpH)0hKHl;b90*3D%NmDii_vhOgr0=bRxJ*EtspFFpR4mQy| z(O%xbH8fd5H>8Zbc%`OY%ut+ib}uRxx)T+<&H3w@lPZP&5*3$#U1n;IL(g>qqTPocBJ^?TUiS$s56z1KsYB(tWo}40O8~D$YSS7~bJOduV)4>~X8LR+h{guo--I zbX&>3k@?v_(f#Bfp;G6Yu7ewp zu5m}Q4#@#X)_qMa_&=Gkbr`zTl-$%+64rjE^nzsrJuUvAzy}&W44%*Qql=cDub=~% zndZI!&Qm5;uwR?xM9%!82xT|)(epl^2psaNPlyy$v+q8y*!oZ2Y zin11ZjR<&(?@`tye?VCmr0zT3qpaZzISriX0F<>m!u&qN)pOl}c&winkbyiMtj2X3 z0LnVu78vb9Pya$$Bj2N}i%%~~e7QDTlKx$z-3A%NA_LWw2T$?dw?^;wnSFa!qW-Rl zi&v>_l*LCiGn-8a)lGHDbnzjtf6g#>_*a__5A|}4X5_26Mlir)h!ec~uj0ler;V~jyKSl&`NYPPA*iN!L*A1WAoj^w$aNPuT<%TOhMuf+R@E8&P z_eX?3SG~Ld|5HU)N>)xyR*%t*or9f;g_)5P_#v|)J109cyD`H*{8dIaCN?H6#{a-v z|M|&6|KgLG7}?p`{%$cG&-g6#5EKMN5()&w^xyLQzfu8~#z{qvF(L=|rM;iyO#{WG z)pS%1HCZ6$qp@vGe%6m*h>QFop+ znu#&rJ`Ltn`t~KLvSOmY=1b})_M~p;9_77ede@xm_t)9HYPys;%-8Nv*5cnMpTsfL zZ%KCf4CzE|3r7-E!g0CfatN8_`s$htrl@4MQMXajcP2a@Ram}liEI9rmJB4*c<{EM{%q9c5H|9&XFGrji z%)lf@dZI6wlme3C11Gy{#Gk<3W}k4nxIZOOsKZVQC1d9(o6E9Al@2AD(M8ei5gw2$ zmyE?Oos5*mA5G4;SSBeH%Lpqyxh2R-Mv9o=!8wM$x+&YeR}h!SA4CP({qtoxDep$s zScn$gm9uhRh|8N6m0QN_f*aWKfjpU?NF1wn^d}=Z9XOYhqDoil13J|&@dz5k_g+OL zVjKu5CGD+0A7L0NKU_G)`xUAGe5(KJy6``LUmi~NKd!QWf4Xh|EvNg}=RBVB$5Z~# zPx%Ax4O~+pPT}s<0e_kQTTkDAUYXN{3nB_IqC=jcy1I!|wzbQOAn6+{co99%dRG%c zs24WXZzvXlgtB5l%akwTCGJoYBALrSU5Opa2|>Fod!(vwS`|K*)!cYk*am;vN&F*oi6~L`3XG;i1EMW%lhv%>NhjhZ;G!Nk+_c?BSd!U>&_S#MdOzkaoY02K$e7^lc~Oiul7i8uV@* zO=W);qs;I7A~qhYhAOfz6GV9boRwAmOkcVy^?9O%weD0tqZEyP`|EQbq#HfdyG9-O z2bq=ThfyIqud*90M<_TdzBbvd$ytbjtJF6agmv>Kqx&Vye*QKVc13v#6HEBxpcnZI z2F^&dRZJ!{((&Cq8Z2(w)8QPLM}I-=teg>b4<&@R@zrXtT>cXvvx_QLuk~y>M z6jVmS8)4s#k*Kyvs+{&?{;zMB?bwr^eIbCYnqF#URnGHfMzHd24W@(3z2Zy`4WxP6 zg&4%SV@|VN2s;DwG%#y5h#-8U<{8umUu42lUq)6lqTeB~saendh`_#jKw#tihQPi_ zR&0v=Dy={4ZV<8zOYZK%l}cCba?o#y@SbYSJS4(v)0#QvGQ2$>CqR%xGBfr6%k=ej~+2*?z zb)?k;k>DJ8B;RyjsE7QcLjC1GE7VQ5f8H1BUdA%sdYrqK80AzCX6R?30lnT*#x{Z8 zrc7B1XnLGOB6jL*D3RFWVXYEllKyO>=*FuBqbY4aa&`RattjPHrw<0dTDd$+Mo!pX zsUO3D*zoMp@FK|^1^K+}%n36+0%A?{w?^GIq>9F>kg6Zk+>ReReFv!~No7ag7&JX1 zu7J}DYi~;35|-R>?uilW_1*>Eb@84cMA!@AAQ3C^l5CaaHXk>#_K&zmt`Nn&Z{(Kw z7|mlien2V_e_dtL8Wo7HW6Y^wk;jO62aiRu1FnS2UcjhTC*37MddT?09m+DC`1{-l zu#+ANTQSYGH1(W87w#&bIyAZ4NzaWcBZCcy!8k#Xn7SPvY_CXHQzn(fr~^CcBX6uh znj2I~WlPFmJL#`3y!A|XJ83s~W?zcv#z?vdKm<*P5b8Oz!x|&;o+o~g(OA}90UrpfTN!>yRt9qLEk^w20{BhE%bv!4tTFNDpE;MYX0He`c7FKcpPY)rqxZ6Tlqj|0Q=W&>u@ zMt3vmMPMd<&Z8SaeAG_gi9%{(??uV&DPQ^}=^llB)OUx%=6FD1502fTus`3Uu#xTT z+0*dh7Sq)>lb?pJkqodWt<{PlbdX@^%NQK%CE`jTC6$QFWoRPmJ#hcm}q#7aD}MGytYO-zFgj$5h<|FU=5HfaB;r`EEmc^Shdb= zD%&A%^$e z4(Y`SRs&A|AjKNd)jD;5xmP935AhwjR*3_GS$`5tvQjLrF?ZhBkG#Ta$j(Gjj@<94 zvazYj+32QX0be!V922rk^D~VK^aZ+3Gh_*zI{&%46Z2;6ga}Vk^y!AYz%Ap)YJ;tNlI}7)Z__p@* zjK-Pp=lQe#uM)K#hS&C_#j6rTWF*Y2=yusdpTS2~j{W;+?>OD^FkSWWBTEKeJw$`C zeBW6COt&qH`nOn^`PN~w5;LFfag$uCLVF5a7S+@fHUf{E2sHrCD zsTyD&{^kuL;?BEDI(jPm3nfMAwihqCKuQb)rHnW)E3F|o&hw=lME%tukx)Xr^4@=- zHMh7c;5FZv(7^f+v8vnjkAFPn=(f+USEsnAW@B#2xOKmQcwM_$`x#J4e+f|v&6?Z< zsM#Bxm6zNrDH^N35YUk;B-(A9`xtVLi1T9fv(Kpp&kHz)p~s8(&38;w@5apOKTb?~pJdEy zgB$v?^0!>p_4oB1FmxRJFm!Z4WGG%fG`45c5qPbID3*i6x-Au@@_p76Pxp1#zNNaU z-%NSFAOB8CTQDp4`y-zd#*;+)~vSkZCe7$+!R&S@%2ZrwJO-{44H_$n@ zYZ^tp7hX(_xQ_8YAF20MGV8&dc=ks+jO%#Qb>W|@>_|?P3!qh2b{v!wGeE^1b-F=R z_Z4>@E<5t#rAA#2KTxwv0ctkS3+qoxKDUHddcUaIZiGMi{B`K4c$`;+pOpLhma-}6 zD)(nyvndN7V~+ReiL-t7NwD1SD^h3)x18)Ny5J7af;HyG-k}m5(N%*Tj}eA>h2mZA zU8rp*51z|mkBQh=H^F5CnBzOc-dbfLwWcK?>gVvEZy46_67 z6Yr#vU_(eu@-U+;WkAg zGwHVdQec#wcWTMp$|e)Kt{;CY_r~RWmyfzTx{Ggo!T)){F#6vWF#dTR|Clcx^TlJn zc+3}%`QkBOJm!nXeDRns9`nUxzWBc)U;Md!{Fgg*Hg@R)`5U`ljx*v(heo9|pS!tnIr|)>Tj#Z7aI`fQgVfzw zz(7=x5%FWEcqlgL^mKa&uU7Uawgq3h`*aEP8m4X;?VG`7-`H&*pK-_IlRk;7~?H1x?1B+;os7j zD^w>p975$a6;)UDmVlq*ub5K#>^avze9*`fOqSnW!dQHR$>hZLg9Be?1#LKgo?zZK z#67`1gKJ3J_-ouiwuJYVky#y1Ni8G@(1y{VKg4+iR#x~jJ?h+)7M8pl zr8B4!L0JsDf{rTBI`mcih*XKNRj=z7U{^cV751;e+YCXPM|HEFb{|&bX{&3{~kKP{0EJ0YF z0B#Rt{X1?C+<#er<@SK*%Vl=t+YFqRfXfA)8Tn5YNxe=m(Qtf+l+n3q`NAfAt#9-` z$_VX_y8eKMz^AF#wc}PYV}7wUF4su2V@Xy&cX@gdP-b5vgfw|ZIoL!gvcU~w4+ym9 zJf};kq*f@UaV$Mnbz6rUiM=x>$WeL^rb|gyXeF>k?L19KQ|#0NnR8#JmHNM zvG`nt81{9%QfLX^I9l{>$h%w7_8)bBZ!vBWDak?Q#;8ooGA>x%?`|?b=R*3=My&i zpz?x3x5vYLxUo?(+vF9v)8+-O=pK8`$;~c$!4z$TP;eKhF0<20g?RjI+F-a)hz<7g zmRtt6aay(3ZS6?X56HL7snHnWLF~HISJsIm!7cF{fq0|26?)-33DlJzYt;tT~GeMiNof z^(0%4sq@Q*H;1Pr3+DRt9JmzkZbdFg6RMJRr~RyOg?LP5MI$>p4Ygqw<5STn!o;X6 zwO&?#E8(w7VRTUGyFr3~WrR?n@zW9YMcB`Mj>o3i zSF*YhDJ1>mJMMCR8C%E5EX5h+tZi^WQkK<#k;PO9tX3p-%x;H0Em~P9mM406%1Hd! zC|gVXXK1M*IM26bGq168kw|rWX4{zeNwOu-d)=Z*UpjmtCEq3lo9?%O`g{!9omnel zc7;4VT(4{vU4bK8+-9M@Tt@Y*m~wy=jhkUxLA#e&t{iH#euP%HRuk0a4hJC0-?1fa z+LCRr?{6xgE|Irlg<8Do5KNCD|1_;lTVb-`#Wk?T|3d0^VZW_JJ7s+EDz85%!US03 z!vSmjo@z2#orY=k(1j^e7ijlI!-OSXOa{?>G?68guy$I1QZs|3$PLY4OYA`VcZWeA z2h_$zVV-<{r6j7x#38MwfDvJ37%H*axBB`eCp9KVBPx*w(?Y_g4&5?OxJ=$3+3GXe z+=Yb<1ZI}sOxfO9N@t5KlX{r65{P0No0`SV+>EOm3gnpzjK6~zhkn77`)v8Eut0*< zfZy5%!l!r3OSptFkZFW6JU*>6k;*MG^apH zvX@Rqa>TC6Gtm7Jaz}W=WE?$=< zu?p{sz>7s4N(pv#z1Ts*)iP%}u?E8RBVy}9uOw6w)+v>G?Ax}btnF>VS{k!yg*xiC z6rDHFaSlf!)pNjqogHZh0WZ0y=}G||ks?hu7sg&s{b$O?c*053Luj?k?#B4E(lo6E zK~)UlxTaOdI=XQ!#S%Pt-|>Jke(hXHmQ&Eu?A0LL-rk)@n|`AT6TG1^E*c)J4y$YH zbpYiyljLqn)|+Hk?5~{|+B>OvRJxLC&>f{uN|?AdPq4SqJE8-VNUxHfSE1ywS>VwFfDP zSR`k_$8HrAbl1<+5OXlrH;Y z8T|qind&?12+uB=Met`wiODM$n%?rFVH;l$rk3+z;RypDzBp0J=UBdAvSPbSEwBfa z7EMkDZZAu4wa=@A6C1e(H>6EMQQkY@)T(F+zK*w(wkC=9=msv?g`0+P%vT6iyy0R4 z8H|YX@6Ai)Y{i1J_WNMnN>8J#5{=b)Q}L>Z!b`x4GxO|@{Ei086pjNc(I~1YFzN&_ z0v4Z&6oVDRYNJapYQ(=?Lt1Hx)(YB*AGh7XF;Ku+;xWlt1v{HAE!}2U-Ch$AJdVCa zy}LAEbbo088@Mze82SzE=Na`&!rSv_ufJL}b{ZYJm2A$95(0K_97>2h3s(baVsqFPvTbow`{-8s*hsh0UqoY|&t_`4c{xH!JrlR^xMU@Z#aBbiKF>>-_B^?!&y^4}z1FFo!wE-Gk&i9oB zq-8TYV$`rr)Nb!ZSV=^KOoaQ&mR&GrCJmT^8v5JaIFgE`*6m~$Q|((MvGZ4k`&Nsc z-5AK9NY587pboJjGY|=8#jkQ}H7&D*iJp*ka*X!hf*|4pOm@b${Z1K2(0MV2x#u{& zpUs$up;?OfCkOjr@fv35VQ)pf>xM(lw?Y||MFufDtaay9GVt<5Ezs$+E_6T=BF8yU z7Cy*qi|Za>^eNmE*&{C8Zmjm;%gBa6MXHg1Sk+O7Ai?G*1dLd_aP9mw)I#ne|2b9S z%7-U2Q<_nJ6?d@V#yYSS5sStjR}cDm-rmXar$I~tR*oK2PVvS0A(*aeXQ#!j2XhE^ z?K)D3lKG?(yUKU3LH0WQ$i?x@evph$$sm`xuH5N^s}XG)w}y-!H!e3@<_YBVWXp`#M8Phu!*Rlw29*eC$W%1x)A?3F-#&jRhIzhAOC)*-4g6P9- zM{YfQ=2N>b-@%x}1)o#s>3KEPH3fatBt?zRmKI|WZb!r#T>1PB+H8QZb~I}r?06Tx zpm-&%*x6+la{ip-kKZEreX#hKZw>sjVDb021|D<8W3G726_2^%F;_h1ipN~>m@6K0 z#bd5`%oYEa+O6#c|2aqSForjL)q=9Y@DZS z{1!8jow!=A2(+SY7(IN2;h;rYZj>JMV=DD7HZaUsxn^M}w0#KUMt;T9OeJ{A$ns(NRadBhWr zn!!pXBYyq>_m;>Gd_c~{Z*ytY#ye_ghXqoJS=h8++GleDSyZ1I|HB$x^Tfa-9k!ZxRuX0kV)rhzMtiO)Ua ztUJ~oZL8ECm8ykX*EX9}NyyXzZU`JZtyaqn12+Up^kx`U5_mt=60B^_e2{5%|FrWC zZjGB}^G3DNXQwF1M@!hQN^dWF%NWBq1tTktY>JH`S5`R`F>ZZM-Cgkgb*yqW>01$` zkrid?e#LX)8Rm#}h7q-4wSn@}zg_14^Xv1k-Vk^=-v9W9!0%t9fAxmIA3x{ub$WcA z{s+8H54QrUUNV*ayO;uhJm&w^tpFxiKSpE-&$j2=XxWsn(n8(+g1kB9_=ZJd(cN1V zQcc5g==eomhg5t{L_HwroFb%-xis%HBwj}T5Xv*4<)1V_?Gkdj`=$7@FuAm^i0F^s zymP)P;F<<*1!VslZUsDiS%2kLz=rJ#JMxWP>t5@P)O6Rlpbpfl_KLJOje`m^5}K?* zGzz(;cTfR`(+!@nB`K7+9T$a6_}J)k?Nx9*F^ z_Y2;264|1L(Cf2D7U7ZK@_nxDZ40JYBZR`m{F^h^2Xls4-8nNblMr>3KC5Q%JNHmO zQ2Ga0DDzx|;vXpeW*zVoZ%deG4lEF0SD!m}-%q zli^(*0d55>Nm)zm)I}H$iGIc1LN%tL&L&aIj!5T|Cpy{@h2^ze8z0$H{}IF&ZowvX zh|jlmZm&I4lk6CpKedTxKBPNYvTV3|N_C3oN2<#PW~gcDBV`bNio5vpq&f0a_-cd? zn=pU02+NWl;HVFYD_&Ap;SM-BcNXYJ1VxbWhTAXUAYiwYD*m<+FT@J^9rilEh_$1> zUS?MzaS9%qMpz|zO_2i$xD>KWzJH9)!kg4=LB?@qb?Tt|+G z7%|oES?XGLtT?wIdU`ZvKPrslYJ;goWTeUKCkB;$tC!@u@772lqF=5`7Fn~DaK+MY zNG~Z#GwW5GmUL*0B$>ik8%x|H1<)20rPbE+Na)|RB9Y4>q<>sJP3jGdm_EU3_ZBHG zwN&FYL?r`zra%K}OZAk3r5StS%vKBxQj!hwOJr*yzhEdyDoQsWgj3=@q`$(GBweTD z+4A2Y{ix?-pHy99y)A>QipDGR7^N5|Ey{h}IVU}oKZ?gdx*C}Mir-wseuDMHZi#gLPn@VMYl@Tu@k&*ZH$ zyIavMklx)3K$C%_AAVmiptV?exkg0)Tv{Y0w$0K%PZpAY!F91_nZaKuFIgx|zs0~~ z`IyY6E6$3Ao<%9NoA?l8aS1oQhpvB}JB1#UNt@NM$htAKrnzau^2K+>yL$n&W>O>o zR3K?W3xEoYx5JU?3@5ovCNZ+(9E&G37k3B)_X6snLLs+6%Eqi4$fbDD&vnO1LNd!< zL1rRneI78k-Cafu#LO%#qvgn%0*nU^BH+3VO{R=iJZDPKW-@}VAG#j8|y?;>=B>Q-Rvr1USt zngeI4TRJQzaYDaVd3lXfiX)~vVoD~mF1z!&Y-|brZWWj)rYzHw>JvP>1<=j$&dw$!3LxH zTI>h^Y7@{!aa#uX;5E@2Pi4wQ)d(8*S%=q50c`>pTXgLb1Mj%i0c`>i6|~bjnS<;(=de8Qf}ckCUV;8H#_B=(j0ta3 z1x4pK#=MD|ffos@HpdkDIusjR<}`aCAD7A^jtXd!n*h0h&o5-pH=|Ob3TY(!Z1St8 zXrLHnLl38_hulx+VoCWI&S5>5o)c#}yA-@>^$l&A7`NhXbUr491a zc7-(`Ke?ENjso+2JKj3_dOfsM9Q=iK_Qk+HMI&~(e)=vTuH)oK32#$3E$E{>s`VBvGFLivp zwYh|Su%beq2{Q>so?xyPt5iO`p-<3KC)eB^Xe-U0J4;v!MQ~Paq8z#0-sWnnKt?eF0sH zBtV@+aY9nvu{;rk{KRqfi zu9=&TV}mQ1i~k5A(6o+V*VT*nF`utFIikEGt8#F3%)M?4>$cw2mOhEUtGv3LdyiK0 z#f{#-#0v}fL^T4~bD4)grl898CFkP|!O85XR|}SNVb$u9Gw115gV{yX#8v%A^1jP! zYSVN$cRy##cQgAIoT2M zSg`{wjvQNgc`~J4mP2TpU6`oJuFlBv72n{2)vi&reUf_|JC44!z3y}Q#2xv(8X#1p z>3rBthNAKOtZJ#|s=`3_V@^Ke3rmscGiQl?8J!}$t2WD^ngYDLHjAzpgR+l!P!?!D z`K@)nJp4j=n4a+3)>!;^JPYqLi1P9c)Em~qfM-CTf3$k z$a1>PJ|j0qGC#hy^*}7CWn~W@F+1zN3lQ&74wdcTUfk-=*9Vi^YueqnobF_f$Q~_m z4Z&rrV{qA1T*+bm`%lA2x6N_MeJrPV1c;i~8f(b$N0l#r-rk#Zf$I!C<;hkzI~LJ1 zHa&MI<$OP^9qQ!R_2C1jo{gO1G&{jWHCFbQRoFNQcY3ajSow^OR^mIrg;Ae$WLsPA zT|Rgsy0ah>6AEJ?>IV70q1Ea?&y7lF(Oh#Mw)n?jz$;q3qQxs(yrRV`TD+pgD_Xpw#VcC8qQxs({J(=1|GeD%!`T29 z2Il{4|No6H=8dHl`hQk7;Mep2Tg%K<{JJ3Ey|)y?h}Xg)FoFoQtmr4;u;0ESSu@8I z`Z|a!LJKThF=NsYn|C`2)bpmVQw&p(28i%aX)K#t^=Qb?zg@oF9pSoG6%qN7P`CDc zvD%#M+5{Wj_2oVI&nf|Xpdw`;XSQ-~f`c_&OAp>wr}gv0*5#m`h3m_O?eB|SQl}NI z?p4emzj+=H?7-^UNIQ$UA8W6Cd#XuXv&n3FzI<4U5iP61PD}FowwkicUHkQJf4FRR zV&ObwvAfDIGn5SRnB&p@dHQaL<5uk=&-h!cadCz*$sm0S$Qt(m1(b9^e8G;vR3u;j z(&b(A%t($g@qI$HDSCkMKwNj|(z}ck^35k%gMF8D>n>cTF=|GsRrGJ07K0UBDZ64> zGA&#l%cK|hjy?_jTKbA=W>2N&m3T%d>Xdv#I??%XkVgUi^plMI5HXP+d8g_yeUTVi zGOiqR7H3K8^x6e;RjBohEoUvh>NM`%$(2&d#(m>}YJsun0?-LL?;n2FS$FybMff(W z(;sh_X{QWf3dZ1)Hsqc-4R{4E8y8@NdA7G-Y)}ea^PW-2I>Hfn_}Gak`M)@iun0ghrowR_{;L=884u} z?*9IHi2iUw;MXDl*9n2Y9i~5=5cs?Ic^#_Pq52;)RKLGD47T;D|FoRI-yQb<6Pl>zg%S1B5^ksASaL)-pfF;|J9VW<-s|=Kmj0be)M<2TkEk;@~1vtAAj-j zAM?Rj+z#5F`6x(dUbk2_6bp(c6E)F-1Ek~|IITgK$SnGiS@yQwsQBFnBdN*lNd3d2 zPaMqE&X!1`72le)1PndGDT@R!#q`tQv;FQff*1?HdYH4%-;m(_au0wo+Ji0%`K@-z z;L;i{iS3n(y>YrU!0tobbB-OIq|Y)tT9OJq(Ylx33cAqH*&oLUoxh(dM9}Fwo_(=) zHqihknT|Y%5%FNQnf%!v0Ne9@+L`;kpYI*w09d`dIAsPOvBVI}66%t^yf;z32ew72 zJH0j_C!n6F-dri8Uy#rRMsePZ@YqJeUq^M&{8c6<*@0gQ3H3DWq{uaMxf|xfE2)K) z;!0&_Bczws(L4=w)$Wa^0@q=7KZ&>-upa?`1Mxd-I~tVBBj4vFQ@S^Lid?n`Yval~ z3)xAkRpetERoTagr50bP9?TlcTK%q%AVxSx3vCh&+CYPI0rdf*urq3?1^c$ZtGa7A zi*pK|tKU}RZ-gggZp~45w#?jEQi>!^*^`^$i@tfbm*=%Yy3A%qV9(?yCcIbpO6#p9 zw5=R(!XE3ogAkBBVyA~)GRd7B*ubaP6$?J;i5V%Sl>o{w^~U z0i;Y)xg5T`?#Y~E2EyDgn`6S9dYsD5_CfrHksqjC;0qWIJ)t*NU{}B$* zmF@i*4v^GV06XW-I^g`!(p#iIp9fY-9`2TA6aG4NwjcE*b6Q1&!dtkpLR3 ziV2q2&xt);xAz3ZNX|VELsS z!1K#^n-oikwhiL?Q#l~4u_~<*3{Vc#{8SD=6eBJ))3gu4aG?qYd@;DkR_O30pVN}l z@7+5--`Gbey^m<&IXVbyX)!RnJJC_1jx(!-elB}IT#NssH^5u0J%WpJHqyN)iXjQu z%|VE+ZGc0-!(NOXLs?90I3f=9d8$Ia;!@+g3g4m&hm;Al~O zNTw7Zi!ysV<|^qqKy{&?iQq0773hOFD-c!sFVp{!B~j+>c=NvNye{l5B6y~}UT$y> zP@N__FtdmV`2Y-pU>@~&WxI<2WQMW8f*1Kk{c>fVxM)*NuD?jJ|LHn0@0w#s6A6i!dgf?k{J!diiia?AOU)5=2+=z!eoyd)CZ2Dph@(b=rJ?5u;msmSxQ2axLxba zij(UDnk2lF5%LG7kN?W&cGoSEM=Lt6DS!UbPj%#pip)AmiU zai^HHtBS{=iGQKQk2Fkso1gn-_IYY0w$MHFuYQ4QO}bXP4u8{68vp1Q_?}SnVwCiF zI^iRA7XLkFVgWv7vRY0&T%J#dlw01|c6=1j69BSEU332KJtUz2lg*oacQ1wkO38?C zp}Y@N2Qob<0|R6V#dyfk*W&?=1C^(bh`RWAmh{k0j0mDDbwBEdnsybr8L69?97&2f zNbqP4AfZul{*VRxrm{DPv)fS+miV&tI zK!cc(kTolP-Ts{zIT|hHf3CUF~CC^#ywlj zHl;@t9M6u`Jq_G?0FKF(NC$Lg_A;=6Ejwq^)7SpNun9W9i4hMEPjI@S&CTXdT**S= znwLRc6wF5wbjCmR0$PY-XBP5C0KEXIH}64uRAJSff!#zKc6jaD=%*H}E0c@oN9Wpo z#Co%^rt_=3HoCr}Yih&v$osCJfq+{J*34A|cBu+2v|CDf-JgK~AU$sNG?{Wpf+6RC z-+_RQTeaxDr}G&PW-ve?z{B2?DdoB%kjL!8Moo5hMwKt*0gw1sARww`>=?=Y^j9Dt z>N%r5BL+2{b0WlFt*vb?h1`~MSNIvbgvia$V!I+2+rTr%;%w=+USR3(^a86t^#U@# z^#bKukVU|gIPB(u+RG1V==V%no5F((6UcU^`G)gFH=i0aXld`OV4*%npA6YG8G^Wa zsKk(H&l-n8ibGkApCcK}i^#1`j}<-*DV(lc9uw|zb8$s;$h9IEjXHkmN+$Zi8O<>k zj$j(ty~l5oF^9{^n^AjIi60$rRrTWM?`@$A*Wnmy%~m|S;}E@L@jDJ+?9lWdH34z1 zov5N38T-reWWVA7PObB%M{8&U;6|u^UZQ`A16Z=i5fh3ehpz_ue^B?+D_5lLmMNh*yAk1&CLGcm;@8fOrLnSAcj0 zh*yAk1&IIg0P)Z3N`XIUCu3w~Wcr6X0C-&K_CUbOzYzim$oS8A{C{mZ*=MuFj}#b` zqjy+4NCOEvO>w4R%m471t)HU>qwpp=;doy5gPYvvRrgaWu5VNEtH7{lBz-$FkX@+@ zE6C)WKA>PJJ!e~OOkB&I;Np5iCcxApIC{81MvNtV&}}F{Z@yLl>rHM`C>6?NGC0m2 zaX9Xc=#DqrO>B}#CDQ1AbC@|~v7EaTkSeb!^Yj!moePXeWwl*cY_WcbOmA{NU1+j> z@$m~nAQ&LvaenL`P%0ctp2@uj0nEXp;z@Md7D_1Sbx zx7p+BUgrF`>4t#U>;7@)d)+CYmmvBcGxAC&Yl;L#_U^7-mon+7lVMsiVQ&_+)>Ut6 zyAs+Dj;@omgHy?r%j>*}hR^!#f$&5U(hObIT`Ww_5{@1MX3nUCp$STuiqc4N-KY%5 za26(3#TPg<#eI;3DlO>mZ6fDIkBFV$TnNj;iDvlJVpkqv!LW_SVvyZXQQwL4MK24v z`M_!ASz<8`UCu2i?vYsKb`bfBRENk8L~kTs`9v9~EVzkPHLT8}UM1uJUXRSdM@X^3 za%yD*b8F^k|m*%vpeAq%y!P zFgyZ;;|bgQ7}da74(^|8j)BQLg)}GqUJ~HsOi(1JsfpZtt9&rw(or3`sWAxcxW-s@b8CZ ztPd(maWkyJI)t_~xv-yrDr6>*y$Gm=@JT&Ra)g-N7PeF;cbxIIWYfE_8pBS&!wu2< zV9N$Cb8d1mCLp&nuW|l;EI{JV7=(YF3i#W3v;H&R=5_8~=kEWmx%=njfa#w(5dXgh z2eh_fyqEr>9r(jP`~CdZ{%__6maK8qZuAMsoBt*^K!IP|*ho3R@v~k4nIJUDsxAz~ z7%2%Cp3e(6whOt~W^ZZ5pVq!r^dtKj#pn~e-~uU}{e5ujiqy(zxUmGTFF_FgzPU6^vyEvtyOfgX#P>-L=ci-NvAAbMK7TBDw`{pd_AuAgclNiS5vRF?y_Z2p z440dP-<=!NtKNgQB)5pLd4Wk{VKdlPz5j-)UB&zcPbofQQc1f<-aWxEr(>a?u`yjg zjl1C40zQ5~vpN8~*Bqr#1jEe?39LwdP=1gxVU=OgFCm+8o-#*?&%l%UXicZ!oU(_A z^BgoGn+-AY>iQbY^o~2~T_7ou4ujKim3zW!#_*7I6c2qjTPE*SKk2davu!RD9V59R zJBj7z;MH4=mn!{U#BeKzBk)pS@GXKV3bUIS#e6>09&*Melq36oehd!=IQSV*%v8rm z$hu-Gm?o4HOcLqOQ-u2+FOFbVnhYW)YB>(aXe>VD9C;@P#;FFODpL>6&q+Jf(=|(6 z3HQsU=Flz_1@kEzc~K~tZ+AMdaiYuegGD-nQCA-Hc=6X&AUNGl7gjX`X<^(^`m9YI z2-Y-v_1kJc$Q&b$bl=08-FQvgY&vXTliY&y$6CDyhF8__qS{Eg!(AWgi7@s+8%jJ* zsda1bc3Llt9|$@>^5CASSvBMI#Q*6WsLg2uyS1Swr~^0$_6}5kItL&g3(9M{CJbaw zBjQ zjfeizIlz2l*Go)VjR=glTMKI77W8JnE^lmHk29cL;FojY+a{d0qChG!Aui)b-!EPNAByAn?sOO!$ zFsD8)UJU!75|l$i!a+)gaZ#WElp2NZd%5$H#&AM!Er*hQ%H6;NiV_2R890Uk(1kR6 zM6sUD0ve5Xmgr!UUUR9ps+;n~iGlUZ5PV6iH7>J(OM3{3vKH8-c@M!0Ni)iehA4%x zA~|yq%aTU2CSIH^SX#2g5X#sP$~+-TEq+KsoNw`Yz%J`&5nK|qFK{UEZPt-$!vI<#XMZ8N1 zh;0whjKBcZj)VVhXFs{hP{ts^d?HylKpbIQCG4I;q8ZY?<7s5x?TarPTTo~r>fVGR zMM75=F*J?%wA^Nx+zq}6j}c5lYw7ai`RGZymSUk9S^d5A<^?FCEY))?rm{KaXYpQ~ zK(Yb+DrfE*hE2+kc`mqbb)hpR+T$7mz}@@zEcwG#%aSi)Y3$VSz__Z8yA7!moewp@e~}Jc^Ut!!-s-Hp3(8Vv zA_kNT5FeXW+u1|rk(hC+%s4X-BTjJ3&29w6uOaN(^m)OqAtZEt_T{+G(VblBEvheg z*P(4IsD5fh<44W-fIYuUX z-Bs?tx^BhkO6KFfSX_q^!WX69I`EV=W2v4r>#YfGs=LiH?0n5?`?Ze6+^}m?NqE0&Y%R2Dkr**&;U>ztIf}a5n z%5K7Ksx#gRUB?N-;z8uHeK6yPlBROn>l1JVRQn5m^%ftP61J_+G~qy5BGI>PO0TXj z5oGgQxZ8g8B+wS=xst}u-PC$SX2!aMx={)4Gyk3s+lAOyq96={ZLr#9Ph?6d6wcqV zJFS2R&hVax;ahBbEKRPfiqaNjHLUelmj*f+(^wT zE-RId={)bKE#G+*au9C-IGT|8)q54`IN&eFIVZ_p>fdll>{IifcYsM*cKo)x zc8poNXA*Ai>jvsfWi4k3jomOAo{$m?dxI)o7h^3aNFS%@`?2YjE~C@4Z&5J|Q}9c6 zR^PFBuRk%7c^x?8cgp(!(>;gAHmXftOWx}Y%u^-1lUP<5&E>!3rEZ?)LMC2X@?~v( zOf>8L0h~`E=;s8$BNc7|_u?g22eS*@xG1wX&~;&tP|fPD>ZI zev>e0OP+y(kHOr5CsUZU`!;(6--81LX=F3f_$Ub$WaAldFMZQ3nEQZ{;vCiXRJ2tk zxN~Mu^6_M-f~U=-?HthxICNAJaq@+4h7~&jk_lg^ER_^v?NK`w44eSB`^s{xOkN!i50{bs46tthcxQV=^In}N;^RI2L#Q#;_GmB$Wqg;`8;Ry3WB zV&N+ivBNK;d2ZFiP^+HQewAfOzBHhvEBNUGVH6tU`)7U5kVlVitHK05#6AO>b($N= z5SuC}C>G}P?wwS8aq6?WiXKcuem7se|gdVTDF(}`fNa?Xw*nS_2sAOb|RF!{X^_S|qPYt%67eeXwx&wFz z=8vUCw=Q~&&MjY10p0;1;c28hs$bp#6O68N4=;xAFPrM?y#;=E&7W8Z#v0Qz0Y09A z0V8gz!6C_?-T{d2XS2tX!>7uAy1q8JzQnMB9uDr(s-d`!87E*~8xG6}6Zvly+|wD3 zYSu0c*j>5$Xuv1DDIoXNpBR%zFore`);-u)JsWSY9F{ZbAi}=fInbj{C(Ol#9jr(9 zJsxUjbK)S1u8h9W>cn*x(rHxh!PbK5RrFnDxuPAVq_*(9 zf{+d(?xM#9ta9i}&yP(9Zk)8Jd-=Vdg65p!bZ5pFE-0(EDX*6du*@YwXdSDluxnx5 zC!TTe0Sx$Ka` zsM?lz*{nBAezPv8ITNTC0>P$e(=lzrIw>J3ERouTyKP-CCtG@ zfH|MJ3%Uryng1d}2uw8S^vF%zywT~J=5p2H`VhKwovj7FKSD7&+qaZIyF^Q;9`Wfv zDh_`W)8Dd%!Jk1)|AH<4KN1D6Xz_{`uW0d#7O!aWiWUN|Xz_{`uW0d#7O!aWe>qzG zbJ*Yy7YwknGBE!`+JK+L`HdqWZBPJ68<_lIbou%G|JvH~FY=`U2Oykv1$e;HOn(#9-*4B+LO0E6qdxqVWZ7 zG~Cu?^;;b!a%aoNaotNZo2`kdGZ5uGHat+l0njusA>4;gXst9+;k>-d8F~b=!}+@3 ztGe1|X+2Vst~0xS+(aQ3ZZ=&}o$dtQ+^sjcOMM|z+ik6uBXGa;&E!;WV0N>4*&fOr z9jmG`Eg$8>Tw-&!uV<{>o7o|lyL~FesfemulcxKyz_fPCD`Bh!oYdVAwZ060N#PV| zO{OH-(LREfQ1ex~Lc=8Kb5gia)>=2aaAT*zkVCfd!>O|M{Yc47S&DII9Zj}mslC(~ zT3~h@cE+iAmu9+FTtj-f382z(HaMfn7?X2wn=P4f>y3Ql>WBMf^mB-FR(qd%an$bZ zF(!Ie{@s{-xIyV$Mv-Mh>~~wjAy8N(l+e+@RolbYh#Z64D!5-d0Cl^Z!fZ9$>{T3R zpvzx3ngW?x4aq$V27(bLW|+G===(di#kA?Swyf!|?9Ll`b5EUvX=C1i8VH9=Js6*c zJqx9}QMl;7Sccp|Q#*BG5P>P)=m|8j!dfw79IZrvmz0tiaUB4$^YV~emM5WO<-1Et zl*LboXqj-fVA3^Ah~QeeWsd|I2e1Z}lSK!N+NoLlR_miCjZY=da0;Z@X_!8}50d#H zyX8KlP}_>|9Srwotfg{8(A0RPZN|9`!lGmiP&u%D!O{r+L>Pn8w?-SPi#WeNUlS-~~w%|#m^OYlMi1Z4E5d};oR zAN-7r9St4K?VQYQZD^fboL1idpQ}c{%$!(|G_2fT-}#l>)e0ic-;n>36>vh?{qS#H zabGN>kOIgGuq@nmb=t?92t70BNRbE57t4sYs3kB(Y~4+!Qf<{V&~LnMiNuT7pt)m( z&AY1*LVO9#E-~+s3;6Qnd~oi}n`Ug%)o}M$E_oWS1ob2*q8q;N#FFd>k`!Yml{kHl zJR}cX{ATs$YAh&W!UjI)mf}2t%1nAS7jK$Sa+7=@Xk5T^O^ib+6eXc@+h+pd5-vhO zjVRrP=zF%n=?P^>0yM&S@m>{b%hLSpLz7aPNfk8=7B-~Iz<5L-zJ|j`PAV9@TK(V( zKF`DG50f@eYbK@%81jR5f~w@`x#yFsrd{Ez;iXJR_oWcv7X%Z~b~n+Ayr0NJV=yw5 zz7Ayr37vKSk`*+jZSlDza_0O<>$J}GhGsf^z`Ok<;ccVFAhN+Bva^Wu-ZyJo-bsz_ z9+gxzq5eD) z14r`>A+S<6s4Y#*;;1Ij#2m0gPSSIX%3Xy1Up~{7TDO+a z3W^hAq)|48Ht08omZ)pJ`6(+fVH({iRbM`m^f2o2(B(X_KweX@qKue~P83Cgj0+0v ze-HbxysMa7(CU;?tWjk_iN_Fv5)!u`5AqRJBRV-<#^yoIFa#t%1w=&+MVWxGCweqk z3K3YloCP$aknK@5G|19LxD^4?2W+G~nb)P~XFd_fs9_H=LNBy_vJ{H}D{@cpA3j}Y zFYk+Yv$;+)DBfn_YLIMhA8Lk7kOWb!L;w1fxE)TGFYQy(U_vx)MZOPuoUqwiKvh5+ zF^q}@3`y)=;6cb#VKtUq*+~7MH3fbUw~DXn^jT4N>z-BIh^jXxEe^wnR;CqP+!qk=b%5xV!P7XauH;OIUODy@GceD}ikjbeNK=QXlXez{MHZXB;cHLix9>=JodrF ztgB4GQo6F<_ltIvzAyth-LN9G-N-TA(V)+mM#^Ts)dE8ps&&+6e`RxWZ8S&5sD&UU zN>88$&;nb+IzV6oV?3$C;2xSR9A+_c#cbobT8)h*AL!>x-FShfgbQ0-x80Q+s4OSPulCxmF#r4Ocub$1$wosJiRG|^!bNEdE?Q?R=dxT#cL zML-Ajp%11c;|#cL<912tTU4hUc{jNUIq@;N1hC8$vgCzt7*ZKbDW#nPy^pDeVg_IM zgP@Jd1nQTSMWxOh#mk zKmSw`OgV@3ZJ(>pG!^oE_U~tuZ;s?uKopLe5+kab^fM0=AoAaSFDfQ>9^(Qgb)7T? zL>d|(vdwZXScHwgKdlHiR|yuO%Ip%VYF>c*u71wrKz|KQ-Mm23g%bA|p8X!jF5J-Q zqqGbYe3u=ylo8@OGg{Ol8vAZS-=y+woisQr8W+Bgp|xvcWVuF(jafqZ@s?9m3~h|q zgRRwOqO;{2Fc@i<=ft_`mXunxsT+%4oss1)8tyeVDi3mj6wfEx^&q;gym;wa*%U+f zpGl#v;*2RlRGuM@d5&jUvql)DPbN4~?J-=5gui74hwFbPdi3Ve1#3p&jPT$CDIgh4 z+(QMwg>Hc3Aw@3r0Q{FjD6wpGvZei~P&Mr)YD`u)5jnIJYtZ0HvKiYYh#al~A_=H8rPR9SmNKnro;776~0CVduZ^EnvFjFs0t5&b9n62x)T2JJ93%4eiE9fL; zZ=rS|klec_2CjlcbacYKu)@oCw}xO{G|(^#pS};^8Z77V;mT&~%PlC!TyQL{JFxqz z`7wfeJX?V5$E_Z?aHi5hm_CJd?B6ZjRjB2zTCHa4j-fyKAX(cpwWeJn?j&hvZkJ9e ze44kh&d1gr-ktjHqj#Y4#aA8tkcz(voB${sGAwRjXWek7{PPnwbGC&$?hDM1X1>;> zs6hUv#tb^z3el&<}O>VPthn|oj#~&9@*WSE1auGj&d9t6#?9Xj0{A!wK zTxjEw7d>-YQB$xO7RsU67HCnlkcEBqy(o}VHxK(qrA2i`4)$}UMQfx%5=1hB0HowZ z_*{Iav_FLiea>kFz(@dZ;e81qo1%|#!&&I}442Fu<6wP>P=7J${;Po?jdt|DiV5nY z>YO4`M4bwFBF5{rr$*k2n6G~`xh)pII(L0n)o;1V$s1F9RMkpEY z|Bwo3P=UBP00shLg8bvDfZxymudFL~KJ(Zt(WCYe$aGwae)z8Eoe~P9?E%W6WINs< z)(_v^NV90eAs8uG$IrD3#Sl&MuErdyvzbmv6@{38ohHiV`C#nk_Lc-oFVMOMgkBi- z3>YXS@SdtZ8Q7z@_05rH_9x)mTXcB1+P%`xAYyEZ{$VDAZal_s$ifSe_9@Z@rO;?u zJ1-(GU&@J}#7Nw#kVHR``AasObuN;a7=9dU(*=`!u0BUa;JHn*>NWee(dQhrv| z;MDN27xbfVj~3jCU5H@Os3iJmnT+k@KrZAZ>%G4QG@lve1;!KKJ;}X_tJTfFzvur) zck#au+rQq$|Lvjvqr3ROf1lUG{d&0n>2Ux4rKcV{$58&~iWu<_Mr|NhYZZ#Ljz z3<%zYNMP=7UcSol=SHM6`~ZS=cgS!H@dbv-sK6{p$D-jCmM;9(o%H7XP0s=_Wz7A- zcMIZ8q_3e((zWfKCU4yN-9LURret2psJI6I>&X88RLB&{Cu@JXO#eq0;J-iBzxe&? zpBLb^ORPvQYu;_3H@ZzU8LNn(9qWs-TQjc1&av=A>k6pmmNS;IY3xszT!;D#s@-|t zLxBz7CvoF{;>LIFd-wA?{gZ#WeXS^90j`zist`OWgS5U4?dcxfn2sd_Sb$SlNWs!& z?aM^Bjz~=fZ@a9F1~aA*Pm5GYT`U~eeWwn4;Cn>MD_?{CwE(Zg2Q0vs_ZcqV9X&_$ zg3E3fuE^FoD%fYSRn_f}!un8%ygRf~rAo=tOv&@mtDKH=tE4e^82jqPT#t$MzK$t; zv#?vUESteK%%VvDbGJe)Vs;QjYm`F)DhYG`0O$wzaVBO6?SPYMSaSmShnqQxYDqiq zQSQuw{gGM5)z!=m=2TM!@d@H~s!$uAd-1r3D%Y5U2^tZrivy)7t5}=87gnwdZa>A) zHIuQKe;5xRZ#`So78L+xO z(NER5>SuORmjM>wb2sj1FC4(qN|UZ8nQxhP&}anY9jF^~(LH~VsM4N3+$p6@@T;5< zm~Apdk%F(Y=o(mtZt;flU`Q-=B!ex4hMM)q@8^giPWO2 z9wM<$=y1pQ8AFaNafe4Vv7?JvB1X zu1#hY@+^MN2u^NCapd_^A>?@IvmXcSd6+ppo8VM2&=^aPz#`krErduB3G*@s*p3~a z_LlB=x_yQ?J6)+MUGv@uZ$O81Qu`2^n(x=1V5XFs`_nHNOBrHR3=ScI^piM}sPsxt z;YlRG6`WC!CeyuVx;`((lx72Gtt@Dz!~IwjGKV^Z=4Ku&_3q4XKq$=Ay57@-VI#-c zbA!9d%}}MO6FH6?88hTP#n*!1wBbh&H@5nWYN~O4c<@0{w<$&!^OaT%50obm zJ~9x%(Fy0S&?KY?YMmQFc~%n-#QU=ZctO7vpH}x~omxbuvW+*f!`2D0E9;&ArpMNB zv2qLbb0hBBiyBAS`gDWc#;wGpx=xP4=tr!z7Maev@hYecIPJJqJwLS_Ojp$n#;IwJ%z#lu`(zeK z<|&t*=6NE2wxUqBF#Q@mkNy4U+O2^Iti)uJZbPIyn6qk#3@Y_C*v64vOMW=DvLwnc z7z!&xVJ6aV6Jx9KKA3W_1oU$pn(EkoW4>miqWcUdV0v$F+Bt8;oTddw8->^aIkE$h zMXC;ImmheLP-;(pW?7QTm7i+^mQ_MEbZpji+}Nwe42<2)WzU6e(q|U=4*Se`r^avL zYI*MLSPzSuLOqx6o@B;mIJ8U?Wci8|$eqj**(ie}PftJ|A~7hZ338?+ytsf~!<(%w z1FkUcI>3wrp8G9l@}~D~20wQbaFDf+i(lBmb~=zvozfht4(hypQ=FPT6&j!W3Sz*=V<`JDHGkOBI$nB2B@?`T9OawO{Ys7 z15yC5=s=&dS(!dwik&04Qd5?Bs9NWWfFm{tm2$Wn6EIH?J&8VPFnB1^vA023PIE&g zDprOhPHrMtD0~&rD5Sb~B483}(N01al$P-y`g`p87YpgPV1Z;*Z00LF!^fJ~y_ZDj z<4kGc)^oC&>E+?d>KVsTmmF9YK!UOt;g)VhwiMgh);HWsvRjUGfr-AB{@RX9O+jyV zfV>Sz<8}+9d|WTq*>qCEpWh zldonBzQ>oN3g%pzO0(%lRR95}cb2Lp7G9|o?SsfE{zyrc08$91vz0DM%S!La;(f6R zsOQ%bwOSA3sO_Qd0y(N&A4K_)GtU<Rp{yN7jf8%`r)4Z}Y*yU4a=SofW%Im*w$48Y!75=&% z2gN8GdpK1)e)V5RvoG0l@v5GBVQHH)cUm@r>&X}`s;R_jO-j*E{()} z*c|9hkB7)MiB5+KJTxZ@@dyK)tRoe6UXDtNL?M)pPNvjl6A0Ca5wKi9ZZn9OCwQcD zXlaH?aTfAYEzND=Vu8YWKWX0t6@F2y%#iPpmdni-SN2Hz(9ap=i+uyjaedq(4v1$T zG-onm`W|g(yXjU&S)quN&K~LL1|UgxvhwghSNp|!$ulBInyB2%1rEIMa-NB|U3+|d zJi#6@W3^iW%ND4VY{(t792Yorc1Ezy(EovKEqLM_gW-z-3p0i(iq(lYf6>tOJ-e#^ z=AGXAY>y^61@Fvgp$S8j4)m4dqh&dmBr}DmC*(gU;!QbrV|MYTD3jz#|lLX9@h+t&z_yWD}8Th^)s!g#J8w(=GLehi!mkqhgrV8dQ8?k`PiM*mhR>`_O zc#b^-qW?=zABr&z0?jT z2Ue`HA3rL${l|=KfWPr!w>7!84POkM({-I+8901^j#qJZWvx%9ZSSLj%$M*t#ytD2bvbYlU=p?wO@1X+?a_o0Szx@^ZOuw!eOZk&X3DMXW(L2f#{jo2*-^l|hf8MFj zLltq?pimZ@|9~96?|$sK;}(ET*zA*P$==g4Y@W*}M2V1x3)=#G!hM52df=B?ZZdSy z@rb*eu8+;wjIP0-p*3qHk@#U@_vf8@r=NG~R}(+(R4uF#KzA>RrXpEDs+X+b1V|2Bs?5`k~ySRnlrxvH(YFvF-p5gyJVEoYq z`M(8>e_D{g^2IA(yz<2>U%c|gD_^|w#VcRD^2IA(yz<5WTYT~7FVLA87#SJ>@xnA(f*`pbd|DdQ?cwEaywRueWP? zS-kO~qO;XW@vQN9o?6Jxz3Qk4B3PrHkz7)(s!hCWlxt=~r><6$KhQLg$B5>_wg zbxf-v1@6+?p2gr$gQ{O2SkM7uOF@2n@_`>BtbuFyyU~bxVU|ryPU*x0tVuhnbMo>%zvq>+@7QP_ z7^`c8P5~aJpQ)}|lP6VKa-IC%@_o{-yms{Uf#br?+xd30>Z4CPX~z33?*zw%1K2Jc z$kJM9mbeL8xus$3@VG+#zEB3C&&N84Jm3P)((^x>e17qJR{zIY`m6iw{?GS$o~`HE`rmD~em^KeSo)vB2mbud{}1>;Fdd91Ef62*;5k5%>gbXB!r9)* zt&YGoDi95DZj((l493i%GZ+lGq*R6(NMpKwC7;OcUze0fOl*!Nb*re2x<7eLOQ&w1 zmtl#oG{y7#C&sU*3e&6KUj*U0 z_8f0|RFdg~HLnJZW>(71Id>mV_!Gx6(Qk;tsuQ=lkOO!|ueo7#B|Q3Y`DqZUEDILc zirGd}=G5#qgxh1YUY#=+ql%9)i8IjAD(sSTO)0?D8nKaJrG`=FEMWHZ>+O|Kk0!PV zsuk*_lGv!i0qFrgPndkTJW9P?oE)wlOe~)=LiWoy)52X3hXz>X@3FH{c(gHH&R3PK ztfZ~uN6uMwjgi+;`DeJBjdlPEz&& zIb4pIw^x^1;(nqBqJi{4$J;3@a&?9bu$IP#%Fyzhn<~8tMMMEQoNE)*%`PVg?({uX zE5AL>G-BRBstJVuf9)aht@SGU%6l$=hxa9?MmJ0skW`# z|U3rrGd@0`a;QFmQ)SzD4hglK5>KqU0#O?k*|ElXCoJc&0NBJeU0Amng5@Pfg z?r@@j-*U!H|k-zL`sW7S>Aw^*lEdE`yRidT)Sj|EKKY#Mk)+g~8oSblpUV`pg@+!@=E> zYU@9B{5CVi*YWEzCb9m5jQ*@Z9lyY|&@52LkHrL^doD5LuOPP@D4HskDo~Evkk{uu zcxUIr(2yzuC}ac_xmL+!jspi*cA=R6E4;8mBg_X1R*uJu=^@uDG z8OSUz66WxQUDbf?AV7&;y@1YvQbp1dG#T5IFC_aD*(`F@FJtBxpo~AwtE|67zk$^R zFLAnpEv$LmfL>HDDZoUUp(0P@-Li1J5arGqk%>@|VO_m=rTkeml~(@8o$Uvl0V0A? zOJ80}XqB#*E2CqhD#8A(urK4f(TR9Y)|#gY0$F1GSyf0-6EXS`Djezai8gT@?>P~Y z%E3pBSNqj1J8;i_U?JrwP~;ES3)LKM3bK&U84#HXyPu^}`4vL!8R1%=QbIFR@VuuK zHQLfK8earr1F7)Ch%Ak+LsKs^2`a%@<+~2NN^FRN%-E^C$N5;0WzvdFIg*7D#tIEZ zM)6lf=f`My1kO3+@FYFcYW%O0^cpTHEV)1xzfqTNjzY9$#&;buH9giJZI?L_^^FAS90~W6Y~#Z;M@&QZj6PbXqunu5BBX^Um6 zN5jUF&*OH-890BiApgLb#w1iO0(iYiaDZ3=UQTu(OBPcW{6lX%{kD*u!~@4a^3>d>>k_EGf!tRgTFen&P3tAU<4Pb+!r{B)RJ zk)JMp478^6jm#Dc_IHFDyt%QHzq$BfNq)Kb%l_!%N0kJ+_>J#gu>xKEj*3q%{_dYH z{!dUoQ%L8y;jm5l^k1Ol%~>H7pJe>4zsvX!sDbC|uYu?4mDhmh>Ur2+l0?|9gK800 z&^b~X8^7-# zZT!+Dy{jZ;dT*0U)$$e23+vkHGMum_QPH*Hp;?sGfamIQ-jo{c9j)md_vzuisVz|R z&r=>|IGcS8le`;0lh5~b%Wd+^p$`(=*^)${G-q!Db#*W?b6AD15pKPpoVe_e zA^G4WDC8-xF=0;MoMALc>nZ0prxg^w!S+*4<@EEAZ>vfx(q`R(;F>ZH2g4`XE*mbc zE6Hv@)smE*AFFv6i4_Jtr|xGGu2j1zBs#`bolC1hqDBDJ@uwQ74O>s4y|(Z81pB1p z2mdq{7zs~r7c(6#las655RIltNB)Ekpc>6h+fNmhs%Gi%my;z6Fy|nFkD5w36};-+ zP*CIlME0eWEFZ4)=MPU25aw!&s6LTdtH{Zk_lv-?y(lsC71v}f0{Zx8LtR5B0Zs~M zGC{`gg0Tj?;_KGug7wTR85LNxyN)cw8r%FIws2B;si(=i?2v!_&}|LkhIs?BQF>c? zA^~=~_X=Rzfs}soRhl^dat5$6c(%&LY8?%?_7%KKiDj3~>2>SLgFX>@##dgv!NOZ@ zH5v*#vhYfZwa*oZh`_`3T&Hotee=i_TbCC1{j!SjJ!3G*EB@Ap${uK^@U9}>voxRe z*Hd~>8)(pQr@7A_q(n9cmSF?HfO_!ZD zR`26wnRZ$jWDan8ihlF)$A4^n8>o=k2nzJ^NBzymzo1a109dZg~ zoS+o4*}dt+%!+rJH58)ZEU3hBum9i}Is38T{(%dcyPhApWfl+pK8W+i6{cB6)&6%M zzgZDi@sp3g5a{DC0{Zw(fj<79?7;2YqP1V_fJr2f9moXw_*KY%`uN{G`S=?(vtEi= ztsY=G*wB3V>ElOv^6`5%lePM#-K-Xb%$?cM^7vUB&Beo92_i(2ZmU)47Uk~+zkv3F zXUFA(<2WpqzKoe$H3zZ-?m%`R>4_bXcwz^(p4fp&AUj}S2xJFDfb0O}8IT>2&ZW97 zDen_=0I~z`+Cyplk=VM+Qp{&IT_P_{iLc9OxC0Gr>!oLP!g|iv%xzViI^l#=GIrEw zNZIi>ce~9iIrXvCmHHv{0bP82ZS0TMA8o+QYDI|f1(U)v0(^0(Q~QES5r-GJEIItg zVMkNsQcEN1%cd8a(496`{`++CSJ{F8HeLKZJMbJXp2Nj+xOfg1&*9=ZTs()1=Wy{H zE}p~1bGZ1wDO~*Hvh%N=yk}%)V*Gm_zfC}R_7M;qfc+1gy#ICme`&cHt04lA1@w*_ zm=BZenRELhPM0955HuJdVs;z9H{`m|xj~K{=TCeUKk5_9U=fTdCWMcXc&jK2eHqDh zVKXBF-4E~jHDK{153w+bY(b(W?UrC)9>aIr_B+d?>oC^`o-JxmL^W2pOxmIs#US_q z-TRMD+hBz~ZA`Q1Lgij(!*_$B>2dZ7dU37ya;?RdS`-N6`YvxjEXnqqQve6wQ6RgBkokyWz$t-UTHq8hf@ zL)9@K(H?u@g2@m8{g6lVyYVe@>7(djd(YA0U~|FS`I%{Ait}U1tFU5+%X12gw3RE1 z%3f}!UduiiUe4%4uS(8 z96pO!UBco(L(Sim;9nDiHEGMdNhM(FP{IAcx}Ym6Bp5P8dqZ>|4bq><+>iO5e1t}p z49^P8;BvTsQ;0~7h(^RgRERhz_x={sT1|jNlCSrKUdKhWgpGtU*Fa8}P%>ry<+u#E zz2HT`r`YWu@>zT_;DYbtCXv0_+mi5{!iO=3r&wRxDoBwk>Bti)h=xTWLQ1`X=3Gey z;a*OL&_pC1*`u&sD#|7KB#srGpSw9nWAkGUU9~gc+XLp2F~tKMv}6s80KDI&A~P}N z1@jMT{9aR108G$|Mlq@6k#&N_FETTGPUc#5`jG3g8+1K#d`MUzZ6TIP;nJINr zv>~g0h6d@`h&jDuq&pekVSoQ~!9Py)U&a@HPV_&=7ydZee;Hr+(|w*N{CUEkC;XpH z_%GZb-hO>X_CMrc`1PIo`-J~H5JhSMt}&r#Fy{)H6hn9D7!pcP7dx6n(x%j&2I5x< zJPi%_LF6}Rmj&(=v>_T(hqN7926-9zIi-c}f8(xxJyt9N64VTkqR9SFP!vBuQ2tGd z0()VuVIR9TEmu&k0U1#(tW3;y{b0heuq(JUu-~DXOa{WMf9zz#nw0@Nde5QF{UMWr zR4oUx_bM>vmxO_}ALYj3c-O&@F)W8RukcXC2}JPN`@&r_MToU`-$5vLj3^7d^)P9~ zvQ5KCW$|$>0H63H&51Q~-m3u@R+x|YV|qKn2tNqiVHW$Oo6{_}Th@7x4Ufl4(Lv>c zg(jCu6dCzg7)5`y>whA>)K?q-maemFY|TwyV`+rZEge*^%CC2aJ0;Ua76g>)ze9v~ z!`qY~7c&-%ffRH3C1KFt^Q(#Qzi%!kQYDu1l;Q$P7?yw%hLtpS6XucZ$ZXNo60)Y# zoi~z4Qrm)A!u5d4p#o{H7SX1($AyEzb5OBQF{@0$Ka5*y9_MH`sJc@IZQSQQy?;dX z0UB;a-e&L+i4MSykcSUs0&57a85xxkwIzB|c@jm-ZGnuxK} za2E7QIP;4m0q}y4iUczjzlfc;rSRlo!pm{X@jCBM|zYq`$lBmyOqB( zn-I&E82Mty>n8EIV{@P{L3Sk`A}Ep=hximo^P3 zfyHM*Vo}J$3IE33D6FH%fvxOcR5OyNgM%HBX8{#)3Dd&4;^>|I9cgJ)o2a(k!0kO ztOxP+I8w(wkOH$?g0xRXKLTDv1h17AciOO>-azH}=h?Lo6^sx|h2f8GM6qzzol#a`0GIpkoOZ zbWD9VAcrZ@62{z0(p`&D)tp6mAyMstV`calzg&G9b3*Sl+DM8IfV)OEh%AyE?{B$Z zmerr^PZtBNhShwhr0E|SNsSpLKc|y?Bvz$Q>z4vI{KZx=#7VL;kXDRe6N?X90#}vL z?9Bl~2y|HTHN_fxHcLq|l+jD!pmxzo(`>U~vcAEQ{Cc0_AYQNc{9aWQP(_H5x===6 zhyy&S<>o;~CSE&GeEERoq}+l4$;W}^iIY9&op>|TBU&YWXzgG?#pE~V-7yT=b>7v% zTwMfgS7`rWa|SRvTt5uW%hx8HPNNkPk5(VDl+4odhC+_=hY6YvR~AfQ^jSI)^EG4Y zIf7D*QOo!OsXa<)^%XXsH+P6xZGtzlfi|a-P6jn94i3HG5KIn>xqw!!L83>L=#18Y z1&m1$>Fme^`TghZFE$MCnW|g20sKAXb7uJQZdmKqj>y>zFPlSCN|YaqARKT+gHW>|H;ST|S-z$zYaHSO1UIb?cbs z8FkASrl1_2Z{zb1*P{z1ETaM%|gfVp`#?`~G zW{}nUjpb_#9rU#16=O;p(WWeh-P2ScM=mIypEqiu=z*^hHsAY~0Rh?7K>I@KZ}x>` zpnbuCzh?0zF500)+Kbzt_J!?P(9@UO6a7Iz`@;Jf03YWs`vQ|G2EwPG_65M7>~!rCHuS^3cAK3|cMl^_EWx~F!5@A4z$xRlij8FNxq;(L+8E%lrLzYHsK6Xlc3|>0ILar z6b;lSpB~6uYatU|a?yZ~voxH?bwJKr)v9BymdicpM zy;Zv8);wJ+PQA!B*kP~WS6i+z64g5^;N9qY^9SiE+o>r8;v>46tl1Gmn9+2y(kgsu= zP;7%r-XLp^3lQ7Xl%(dw1U?sO)vsbY~)k zexS<9$+-^X`Q5&-NO*?j0kkh5+L?+Zn_;91y~W}bEM|-ef2H2qb}@PkQ^FVn!HF7v z_7eLNo^_tC$|bp!uSaho-a@&^a9*tYO$xT~%Bga``D{}ehQH+`Cw4EHGh?C%>POT$ zZ;mo|>~oAypw6+6JtQA@9qRb-JAAi2oF$iw$zA`5Q54U6&`Ufx9(PjR&!6{Se}e(K z7x0Prj3Z0l;})K=7z4kp9Y8G7*{*Rd-r+h%p}zyb2KNEo3%0n}BikV50a9;PB0Np} z&MvtHz0Q5rgK=Y^rgtoj(Cr&?kbKrOE`+-&Cf>p(`)Q8J`5CIb$YwAsE-@Du4-Sb7 zCaldNZ^TE%+N_#GR-mjmAE@!pZgSzvDiWzvM*?;ZIIC&eeys~vL@g=uTo}7hkA#8$ zFo(}KBT5WC1{1s%J5Dc3JD&ZkouG~?!D176Xlyb%8%lrTsoY@Q*AXUOU9oN|H`@C! zIy+?a=MTRfuZ9BM3+vIKj(>13G;AnffU|;M9af3k{A?$971)zkSV3uQB34GOq8gUh zCm+YiUmn)j@ug@3Vqxd<$0=jAMe!Uul&Orh7O>#w1&DON?9yT z-j-zW0BOC-irWbv0G6>xguZI=ZTvoFJ=B8~%w48*&u3awac9(ETI!l+ugj17S}VdM zyECQ^qr}-=$=xazEzhRGd&?1IkzEl_(2c*o63@BYh*FrZo&htA1}&z${GOp9ffEvG z**l?ptqi-3EKviY_x#6Z$zzBCFGdQ&*7?Jw8|S{m$2MFE(t?;%%5oZUscWgNmq@oc zr@(ds15M3v56tj#w3wgm1PKK``@5jJi?*~_Lzy~S^NLUH1ShtP{z_dx+XWwwiA$i1-27J1KSA#m$R{c0NV*>f$ao$Ri?4P zc7pFe+X)ImlMsX;#bj${;@;VRL-N)ZSTW0>n0Y<+QU&3R%26J2tg+_$?!(Be;pkwWdDMvv1iX;!Pz3%!rXlvzZ&OzEo7VwG?Lzzuew< zDBfL2NenqS2pbeUy98Dg)VpvnDI{n<{imAk(&Kjl*E>c#T+@`XPJi@yv|{CC0PUjQhcbH#J6 z_$haL&K1wO;yG75=ZfcC@nm&-&K1wO;yG75=ZgP>a>YMxTK_6L!NkTyNBeiuh3l0s zqE$e4V)Z{DUHEnVe`&KCBP{n*x^Q4l=emEnN){hf9Soq#lN#LWb_MX%)B1KLf z$QT7*H0fzYq(ij2Thmm|m}RDyMyNezDnbYH2Bl<3ne+ctZK4R;$B(&yZUE@nWmvV@H>8#A|x#bY^bX zhjoLA;u)*uHrL0FOYV<1cboexkGBySL!VWZl~V1ITVH5&O-Ir7;O`sC^eYn%I%y_C zlM0aHNjwOhcdVlpy^oF~pVN93x0@&XNsdl5pho1KJe?5H#!FO*9n20(6Qv5u!w;rH zO-T&d7z&}}Jz+u}zQY0^(|f)+L1L6E<;JJHrXFpBpT7%K%h9+{EXa`6pF& z<~mR?FpoQ6)JDd4VWXIsMhnE;v$3N%ztS+J1@OsDqK1VMb9ZP`6H2Q1nlu_?& znWiRZml<0F#f8Q<_-CbtNE?S}NSD@UEp7SJr4(4f0%P(ufJ2Ad?qk?T{_|`3ll;dC z>{Aqx6Mvf6_e94X-nN#=vy=6i6OW1go%0aoZ!ADNjIcYCX~STp^LjBqG#b8xw3*r1 z?Qlwf!ui6N52;Ey2wTHy_W;5&ihEQfVQl~eAZkpdP19F{t(9FZm=Htu1j4M+5MnN! z6G>MaJ|D%wLC(YO*QrrmQ55>G;njb*_v!num9?*n^)bBjzq9DU+16BNMoyDiV|| z+D0<{h7p^YvJ=lwW+>Y-+9Cn(g5$#F0(Lv`5$yjv{^8fu{JtIi{XW0em4BShzsf)S z`99B6`aGro_fF}r=>b!fjrmV841b=U|A}GXL*S(aKwKd^Iti0?bV>;zYU`}H;qhd} z)rH_{1JTq*1y3p)Dwg8t<|Q5H4n=!h^jLBiJw+XO(}>`aTC28l#Iu8CL~-Hi9!6n6O%7X5Ivuk1yW5p(OkL!5!laR8oo>`hwx8_`%H&izQT zYcHXQEIgeX{u@9;R7RcJ;k014*RsS)HU|xOJ^((cS(94D+fpSu*z1#+@NQwaZXwP9 zv+Sd;G3MbkesBh|Rik&$H>!C)_-vx^Xg4UF$t(9*hCDJIa&cUYL*9{53_H~EAoMC+ ztc#=a7~`bX7irGi;$tac7Oky3T_(%}*^yZ`o(XVEE(cM>S4P#@qdKqsuWu#_5L8GH zryngG44pyp;7IlTbm_2Y4&9jtjl25TyUIpPfhLGoX)hcR$v2-&5WvO=Z;dAt1ZjR& zj|=$3CiY`T^W>{IcbNJxP?EvIW5-osk3^G3Hvm}I{ORB_o9gM;d#QM-7q9+gi$p1;Yee)LEt~a%_>|ZyjZz3$`P_iic32p`x47r zMqs(8%78uOe&*SEXvkUtr(u>ZKERDzu~~?`yNuXNzZUFd!<*HBX(7s`v0*0aR&mi{ z&AZz)6v%hOyY4rLLkWiWCRreA5K@#Ly+9(n^N22UDAkZx0?!)m$ppdu@;4I%T)`C3 z1Yt818>J9yi0m^A3kgu7@1NN3u(M$4bf;@x<;tLZm zp;mxTCg#wmd`IE6aQ%krht+o^IEtp@Y|$9^Ggzc^q(M%(B)EBJ9b!Ij@9@~5?)J63 zl?^^Z0u-{}B@jv5OmpflmBP<4C9f43#~I3kHkN?1B%FJC6BqZVNpHNNHI8CI^(zy| zy(Ceq4_s>+%~qODu%RK+`D*~0g7WKn}G z64I&Mc|%U77Cj1<;-{?oZOEKC{=&rHxr|cG>p;I)&jo%uPkVLf;ye~6Du5}PB3qwc zorAp%xSVT#s=k4&JHyBDo`VY4Lb9@h9Q5=5*BXMp@a>un>1m% zoKIJ{K+8k7{+$$Py~Za;fG8)TO5HH$XF5~mL`6>y7$YqJ)1cvQa|?;PQj7z0AB!r) z?#E_C{#}@^#;aEJk1ZoDtm2KiBgr!k2BZX-;MO#uGnkOFvwE>^=Kjp4%Q_2Iy4WrdFMaB@w!YKz*Okk5Xc1wVr_t~?wu=p9h$SuGr z%#vt&YbZ?@Lm6l~bjfJxzRZn>0M=2IF}Kpy*0#7}7B72n0zXvwDeJdZR4qno2seI- z96g4!x_}#BPt;6EnzN9QEEJ+?2LTv1$qRp1(PV2pxQbpu^io7qT?eeeOc*QzRKF*$hgw3htp5qvceht3>^qca_fU!PWLjx*fK}3O^cRT& z71?!a3%}$K<~}@cHSG_pv}b|x2LHl z=yUX<^c&?od$?+yf;gl34zXZNpW(Nsh6w0m#_Wa`b2BnxKUU)I*k82~Vq!}4%Z{Qh3|NzB=p(t>$g20eF7D!3+6bPCuYvY8lPVPlL;`(53mhqqq-hMVjan;P77OH+9p zf>_8nnfkl)+ZRVr#nKpUIw`XeE$cZkF_}wPh{6fyr*|{UY>R}NF9MATzOqgqDa^HV#&Y8S*DcBFKRl5kPYsKo~c>Xae0X;|S zWzPPO>pf&m#qMsEM??AmjQSnK06F7XIc9}#i$<^2;e}63Weh!U%Sk-BchkZOfc6LL z<vj-*jYAerr*b_gdk?lWhS_m00}iJZi%vJqxmz)z;x%iZ z z#C(!JuQ1`;ls`m0$sa_X5Rm)G{f@vgx_Tf0RG`F;M(fcHzGb6#oOe@SG=} z^TczWc+L~gdEz-wG<8*ec+L~gdEz-wJi*Y-frNwP#yU32vry4KU}169lFAX0r$esCvudbd1XfPBbH^<#Rv!-# zc;VHW;gOvDU!cFh4|n&#`EK??<3J5tv+-(cD{LWw1)cQ%Vq@kZM4ZR*^AJz%#?()KWS>!3u`;~QFLC=ETss3gg*&O%!Xu^pw#t*=a0sG7PY5Z5 zN57S1-y{>vPhxkia!gBj%io|&y5ddfl5%_%uiqe zh7(MOOg^0vJ5UxRHUk?pOgh4IZ*ATEp7%QrOq>kt8y!N4N7nL?2Xuks>%3Ji_G$VX zXpFYC5W1JUt`+#@VP2A3-qoa)eG0XHcOLAZVIw5+wGLkBjkzpo)tVgR28&zVt=Lvf zyYvXDnx^y0nx;29A3@dju%+WrCeN>Ki}thZl34n z|IfMkwb$Re0mYO454j2c{67B=d;O3<7CaDyr3E^B`nj_r{#NiHlweQKX3JyCF{Mv0=N3||ADRk zuZQ|~xB9cgJsR7EheTA#oq0~PrgjR^AAXt%5(r5a4zqbt!AXR>BD&TFtwoBKZXB-o zlvvfWAP-ytMw)?O}H{OQ!Y16bKiVH@HhK z1hjd^eT$d2{m6D*(eiK-3hZLS_5l7v<+`AoZT!V+Q@4i@yFz%s~WD@ zuf_rldI*rVFY$~0xXU6F(wxoHPT&XeUkx%Tti)}%W9#)ep|%$Q_B&YQctSJm-Qrw( zhdE+ zo#m#pGsjZU>t>A-3P#}WMBF+hfyOL5+g!(Ig?z>Bc1RX<4#lO~u-0Cv%XbJg)V)Wo z5vDPpwxP4X1>C{l2hD_ezNAq2oM%1c27U7VY?{6;d@m$?sLTaF*rZE3hYU}6B4kWp zhP|u*n*py69;gHAJySbyhcH=4U0pRv<(G)u$0Q)7VdkIHsB|RTumlI0pJg@_V=@;2 zR)?)XxD>FaOrrjZ?mHQPC5P%$fteds5K??P`gbyodQ3VIJdu{jA3g@F`~op#(LeA- zx7K4tSUjymf^tc#I2 zyD%jVhZ&wWO<`5!(H3J;pJ8em(O;tafx$C^b*jEi(~41MieRw&1c!Iyll@I?lmCfGx)YiMZ;dDdCNNDOhwqZS>J%JtQ zB8Yl&5qv<4-%TttDD>xpQXIvYsO~t90sjd3 z@bd8{0pDAoCjXr&;~T}Xw?o=IEwO9!wUv7PrndVN*Dv5yzex&aQM@v_k1bWk7gcXi zSisy#9u#|dKC$Ix!jv-6@J54VgDBcLu`bCA*j#XSq=HQU*=M5x_tW0oGIjU+ezQ8a zI47?JXGF?4-*!tXa9zbRertG8U?F*BKx84bvlg6 z{cU_M!+8aRi6uRD=*TU4K+0n4mMQ#bRzIJD#-j%XY#GZ&>Et>|p=1}R! zKkwv*5Ray3<&I6`+Hu&FP=iq-cB(Eu)uy*(7FZ}A6|%`oOR;*(eD-|a`j47 z;TJK@Of+0N-@38Fffs+&@j$%2vGpid5vuHBVeHNKH}&z@N9Y~a7;6BWqO>UVNvHrxioXZ6|A=_Oon1 zVQhvz4;bm2E9>r`YyBA7JG+wPV5mgkUVp+ys$Sk7!%HkdN39n1i}8=1FKD`-97{~= zEX^cZPQy`QNX=5QUTk;wwtsssg}oXA!Ms*y0Op{QRpi}5_B{eso@)(EwJWG8Ko`$1 zLncsmP)1~)DjGC7|4r-`1Ui8#sr7u>BC!Oy$B51`64$&g|H!6!9 zrCrIOqYN^gaNM(T191x?-WldWPN4a`gX*sh4G&*`a|#uIKvw`F0e}tZGh6qQVd5P9 zl!sAf0F6~@d;%yPmtYgJR=FAPYNMzamxw!&XPtj-eZjJd(c5=~!Q2q>GDTsa3cG8( zHdy!&2Kz&o9tPThpWOoJG*v`7Jk?SI+`PJuRp)|;>AyF1@tBvqyh82Jh_DCJ)Lv=NxpGlN*f z>)1w2XF;{}!4d>R2{Quf#A;T7rd&s7;WfY^)(86?*PFy?4yQI?0Fe7LBqp zb~BV@5()kBu%O1oMq}{|>UG^h3KhkmCPEA!_}(%S>ihW4=f)9Dl98cN=lQ`&1;1PZ zQSDc$vB$18FOD~!9Tg8Ii5lty0s+A&%O(Og&U4c;VlXyh!Q}i;lt8dtiw}cMskyiq z%wlP5Y?*#;BlZhLy3Vwcm#{59tKQhn|FF^b&IK2 z#BhF^l=A7dR$64*<)Rhj5k@2$JiaWn)N1pSV4BxxQ@uYI`d~j7`u<>D!u0(Rz=giu z&xL;7uZ8|ooda;8|K`6I`fp#U{9Nc4w;}zu&~JWW30+(cTmAc-WsRWJ$T&o~ah}z!y+k45cBx=VvpVA!XaQ zo5ZVAd;O^gz52(63%;_;R1v1cJ8B&mb7U|2uQrFkUu_QW;5ha_rQGb+cyR9lr>Zrmv2S>}Pn}2$=pe8y2094# zE`VAB2B4OJh}%jZ&3Qq-}IS zzHx!{pu#_APMf{$E0+#TPKlJAWf2NamrQ^#9u|@vkiO zpQFTclz5I3&r#wzN<2r2=P2R#===tcv_0zEvHLgY67pq!8%0--*@43n@+xfg`qn$l12wm@Cd z8DhrtBx#jaBcG=Nz{=o$V!~Gv@2*>XfUGb_XO~Dl!IHbi3->3ZTGjwpLbDD%HO8%aAZ$v_lg*yr}H0x2hkwI6I)S1g!;i2uJn)hnUFg=lthN2Eu;B^6c;Qz`#bLU1^1x8 z$Nhhtq<@Ak>|R!y`&|1ffmApo8tbhW#HcH-#;&YJ=K@F*3LN~YA{Uo;)VWS{7(P% z&HMijHOTg0w%FL?hQsjF<9J;k9y2dBo=vVE6i`}5`6)V8FQbiLEVw-I^r;2mC9nly zuy+lP4g0+*bK4yC&ip{aP6sU5`X(QCmU*kH^De`UVFBZ7lw{z#Ushhpup>CzvG_os zMu-m0X-Fu8J~=-&bK|R>?d=f#NX+-Em2!IIIzTy0SFE1n13ZRkg z6h_fMl=jEulx-R2;>m@SS$#|l^=uA{tpdUZ{)OgpoEdx&{z%p=*cC?|v!Tu&v?&cO zm6AH)vh4zF&|PSEpYuH}C`ii9<>d2m2%v-4-KX4JcVeU~ZCzHRGpbX|><%Bi@U7~!`}2!`8wxwk{bza54XyfJNdhQXuS z^U%Otl?fe-6I}4w>pOa#PhAkhz4I#Pjv&{wYbzkK--0t5}$UA3mOFI-d+Y4AApd4 zn6s^bv%(wu68r^^b;zA22N`Al))T>gAB5{{m6+DDKQYanm)~fd&L{lRdLAUThiHH) z#|hJ@QU6`YSA^~aR%hF#l)+G!%L7x$S(!owMD&13wQc%y)Hp8KNw7|-x0mHXr9P-e zJMSTg=P@U@<1~Wx@3{dgN#N2AdI`GyB;pmSeeu?nL&rde0GD#9eopsMmIGwl>gS1q zU9N9l=aT;C%ADVlhTn!u*8Wj@?+t67<7B0k+0?Vkmt4M^IuSOtKz0ZkYILOvo>)Fu7_Lx3nL6Lj83 zlC6#slJQp?tZ|gct@Nw@gs}8L!b9WAg^VuKR-1P!0elKlgf18Nw4Xckv8Sz3Rdlok zjIm@YN5ioGKq?=n{cxi(8d!udFMb|zX>G}*#thgJn@n+VO}O2|F;w7q!VNYq*gh@s zt$JA5w||!U)`mo57>%(kY`YX(5X)9?wKsCY8ds7SS$41d6P8XN2pomgxn3|5oxdoX z+`~X8o6LU>%Qxp}ZJ|zr&2}jzd&P(ys z=em2%@!^A%Y;?g63+?hTDwtB~(5;oy*1_EgnA2{{oHq2wgTf~FWg!z^N-*O6>o?H6 zmqe}y7@2CX7vnwoXpaJAtX+~*&pK7kgms)fgHX8N2!!yg=KF)*s|2s9p%p|0zs!sL zYMb|=sIDzNyjjnneAEiIgi?tZ*gfC?9=^{Ao}srj~hxwDc(#7ZUJguL!lOzXP`1L;Q-=5$302yE&H0r4dh z6Ami(0)vB^!L<0=i7F0u^}U@YAQ?qqoso~355qqrAg-X$`;9849!{a&e3||MrTFAC zB6rKS`bz@LRE-?yp=RG)DEkS)o{eNDZwImJQ{>0|#sHp7`!Chf00E>6MM3~GE7(MMZyl~zu;74&+p>Dyr6BxFuh8x5pr}l!BFXO5**Q2arQG0o>Q^F0!PrGcK1fC01TKjhEN{#%{DI6tvO2al zE_z*=xH~#5mIBlmwII?UIS0L}?SHZNmQhtFdiytx(kMuSba!`mH;8m2C7n_d0@B@$ zf=YKwOM|p@mo!NKe;aj%PxgyqL9IGvj9V_P1YLbA7&_YfGiL+C${h zjYXIO!VE`K-5$?CMMpvR%f3)##(hyKmUs53)1*o2VQ4sFl9|;xD6eK@Zhwx@Sc#^8 zM@+ENxqr1BZxS6Eh#N=~#C|uCOY@eZ;E9q4jo{J@#FKW-t|tif^ArKu2PM-8$#g2! zm?=yZZY-JN_dC!C!RbSLhofa$N!y31f{lFdu~IQG?rOu+aUChCI7`80leVjEw!Fj! zfd+M=h-yUXC)grHxmnHGzT%q-nd1Jd-tXRjt6apyVNoV7kjArT-YPgv*G+919k)zW z3P;F(oK8DF1lx$KH>A!R4;=bvXma>#Bo#HyquZ>njY?k@k-2`uhtQ2Wn*T8C7tTA( zC_-tsawGY?ziH5$?~UTIAp4M{2C7NOLDr?|@q#eHWl=kS*!-lm&_arXuIEM+dWB#) z*!~52{ceFyr-N=0HH1?li`p*!BZ~YN(>QX00bK@w_#gh1;>&< z^~#OcOx|>6vd>|5=Xv{TRcoQ5vu?;nU!q@&BM#}hDe1FW*J>L! zoIPugiRARxAKds=?Q*}e>%po{FMLyvFr8U&VOxjXIX7Wzs>PS7U3!6IG`sx?L)+>& z8hY;I#)8()>8|a!w|I+teb<<~;RI@p#Np4SKFM7ztF-jY%|($-6$WssHoY_t(lo?A z?nwx!PB+HBtTivEH^4rrHE#^nr`YyD6>}FG3axrAB)g0XT0Ou@FBnHP$w2a@R_35; z>f6ZTC#I6;_k?YLv{vNyxp@6GTs`_s)Y%Pup}&+Cz26uqB5(;&laaNc_EK5&p5@?k z0)q)rt%`z^vmAF$v!=u&{Pw5I<>E{jlw13~RJ?ID5**={=HOS zA@dub6;Os$0e_kN)l%g4_5YPp)3LYZ{!0cF=)v9Egr#Eiwvn`*$F!4zP&hc~M`rio z*dh$A_hEVNEfU~Ew(j{L=bL*I?LPPh`DV-Grh$CMe$aM<7`iEO<~`XrO#^IFmx`Bh zStERYeA%8H%@sU%fjx{5c>^|vwHJ~5AFah-A zrx&|^G2c>~TLJwz&DK1{w=@y?Oajj3iz7~3Vt%WtsrQA!kPXRc8Sc0G@i%~e+}!u8 zS=50~x03i~S7lB&UhA;pu7#f2jv9Y(`a_!<2z?LVN`RrUexLvjI(GV+5yUdKD}W0_QEx}}3?NZ`!}4X7_fejiYu-2>dIa$iJC#3RbFustc%R78ZWMSRnE7zhqi0sXke+UO8Y z(kE(nv>xlRWlA@u^48~8#*Ql}vd*8`2h-|{C)@njPAL0vyg2~ZjEx0l0 zh-X2`1;Ys92dtn4b!OaN1Xc5sp9|_vyRgKOcHbA&0sT0zp#JQ)1$7f(LA`BXs2mre zk5lAx3CZ5~1@-2aw+refz=As0uM6rKhRi8Se#!}YHF;=7Su77_)`1=N=g@L#vq$;% z?=^YLrob!FELd7a`5ea*yF5e}nj!kUi=*ML3JtR>7gAW_ zC>Gt4@)2r)r-TFXy?5P)t$bPICakDonBuSWBHzSQSiNZK^6K3?pm^2q2h0TQQ;l2$ph0mJTeMa8R2lv_D!d9dHJ**&elD2FU?d^uT z+f`v}%h+!l>bRzTn{RXS@P`1|xI_dX8+XkDt9qoRD$^#0*74#SzlPIZ(F-IZGow)l z2dKL42KhxuhKMdv*A}z{tA=hh78DY?-Zu@HZ-UL@j@B^xAeAlb<@76UlS88=%0I@$ zYnJBTGgyaBdii;m$Ea)!<${s=B33hGj);GEFqgzRl z6_Uompj#3(!snxV-AAArMF@tzhBC%BYE2JC};(gU(v8kHn$N zy^)3A!6G}9jd9k#4-|)}Kyhe;*I=j57T z(|Ewh1@ku(@);-&yF8Fh?Mo!-M*55{qWwnT^#lLM!I=h1oeswL6{D&o^uTb2K64v} zHjDIY)id9hD(pj9NvEPF&M{+%XRgdDUqX0F`@G0VO z-Gwha9M1vu>;;sJblYP$;bo*0(`BWj7?B95DlK}!;38@R28tMDs-&myX*96iTIJBO zSBba`D?h<$ic?b3sYwNgCJ)6tMFqCY;WZQ0%#zfU610_6z>`v_l``Mr_GL|s9V?B+ zNCg|mpb4`meYlsQno>ifOj8lzXjSOjZv60h@=!VO+owNG1zVxMKk&U=48sTpqgBrl zX{Ewow94XGktoTFMGKaOL!FQvKnFzQ%<&a6YMG30vtnKlR*r_|tp+%Y&mWb-K+-q!mO`H@)<520L#xKDH=*h?tHCG5jJCU9%{VMA&jcNh zCj6Gd_kL8NqR-0VY=DIDsFF&>ZD|;j)MCd9_RipCk0>;#G%SF@krnmH^A%qod>Rhd z2cfBKC)+(-X$Gf=_^QT;d#eC`u&93_)S^-9jj&i|e4qN(9;7Z(@p@sJG>^9MI}Z+j z%uh%<&qbTwSnoF_nOwWy^LYLxu+p9}8>4Z-T82_z!~VDdhZ|p0Qxc zt!AGU%}7^2sDnVEYw4-7m4%O=9ND_IWvfeb@+v{Nce6BWIo6Phm=DOts~Yy#4Omic zW#j2)U%(BV8F-pJo4R^J7U-`Q`aB$XeL4!NtJi13){5C_-27V5pz4P6CTyG%&&T}; zS&n*G+^ftHCYHXon{g%6pT{>ydR0$z-5i@tr1rTVPETfyuLaY76&qig&3sfgeVF3N zwT(FS9wSvOdeXyfdW~krf_}x_)N{_VYTnM{vu;Xw(Zy|JSfvN6Ik^NhhHDK&Mtrzn zJF8BO)s0wk?$Lr6pvJJTZfb-4xY55V&?a`Ssr5SFDd>v*!mytIy7U0gHTZ!N;2O_= zpmTK{$D*ji+WYpBR7Us+W~58EgQe}7W@LU`HroSrqKI0yevY&UACAlJAzrqg8X>w*`IJKBhKHe?Orj2N6dKtcG)ji*c|+?eh` ze|DlPpDT%dBprTtim6{`K_od)8LriQ8LEfjc5-ngb0V>cG}~b&h!o!`z41c}ut-O2 zDa)A2ZRjH@&{yN8S*xqNer2;$=lL<@n;yrOyg2*WX6i?Z!tBPn%{R#9_4R4}7=fV; zbxe4^xNqiqx~rno$;MA3boV~PMiuPuIZAMxd)L`rM{ODPDH?DG7_4MD$II1nO$P+_ zvyliuo&6n-_-ms0%bnprN)-R!o#9=exC<0_f#NPu+y#oeKyeo+?gGVKptuVZcY)%+ zD^UEg+4{>>Arl)5)8AbdPk>2oZGeM;_5PL3^q-L9?d$(5O;%qtZ`eadw9fP;#gu+w zanx>Q!cSlHO3~RfR`0p{F@i%mxWD9ug0&U!wF@tftjs)eP<}U7Uu0$=5b{!KyKMGy zb@%kLgTT-my0Q>vkW7OWq8+E7i(rz~0eqpEt@ z%-FU;y9>C_>@f6^%7Pnt{gmX*n%FQuOO`XW{t>c}SqwG3rM7|7NwY`AKyUcPE3+@x zY1ImBpJGcLoqPKq_0J`JTp~s*I8}?UQ*Km$p`=4u6f244#SdA@Y`5vp`I+a4b;NdA zUjV5j2Y<5j0VESKUu9|~!Od=ZJy}i{5J1#bl9JeL z@nvEMXS;gDb3p)~JBHQK=>Qf!@W^5(gpkp~O-qVQTVr6KN9ml0&wb1um&9|dzWDi= z$NG^E&lak)>VwjkfF@iqJd2XhzItrwZ61UADc3beD$y~e4CuVqopeDnyn=7WVzQ|0 z31C8DJ&s)^!13sY^7#_UNa~KdX|)g5!5hN)^wmDX%NjRk z-Uu`aHqm-b{r0f^@nQbUHSO)g_UAS2uMhQKu4#YwbM7AQyNCM^5BGndBLCe(_rF<@ zJGemCjsq3>;J>3HzkOH#(~8__x?|K6lL4-1$MOr8oCUXJNS-Yzer0VfRX69!2KQ&w zcC|K_+l6kDWwX^K+W=f7Nk{HE9U3blP;oC-G_yo+m}bysZ>J%y(DP zf#5t+xKW+}lKo)BI)9q8h+{ChUCUv~zd0t0(a|{>QFf43R%w<|b5oLcGLEIjRD%mU zEgbRvG?wVT;i6ULN;Ls{=wcq}}Ni!=xbrRqI`| zMaFP4=y_5C1Fg+APc(NZN#xS^&lEm%1qFNwhMIBL<6q@YMoaiS8#2Sr603ef5jXSU zlc$4?Ss-5FkCI${@M}ZyOo#s#P?A%7bIeu%B{_?ytbXwIgZaMp*O{JJBN&KVc^(i-4$V z?wqHO=QL4l?BlfCsSK3lZ4=oj`FK{sKuOLm_>$o>P;WENIJG@)Xx)FpLhz?0xsyQP z7f!|_twGZ*6b0qP;(-i9?v!C~pd@e1L$k?dd5G|%B-eQw_K5nuHgDMzNDDaDsRg2R zt~wc`#w=SsA146~Y5(idlA(m>NmMEd8L490IurSrL~Cv>VnOkBfXw@T*7L}!A65N*T70F*TiVJp6KmA12j|S#?=h56g4|%hFoV_`Nqg+6-&CktpQj;$`9tRI zOdDB&dXm`w(l6;7&H`5!yBI6#38*BG0!s2{!4zFI119XPJ#U-6m0G<^sqYmyM;PAY zU5pYIh^O4~UfW=;LtWq%ZAr=s8ee#flJORCr}%N+b%lM@Ht-o~zm7}#XenqK-#T=r zZ>h<8bYTUajZ~v#3**1cTD2tR>;mAoCVOO}f>-qtviUlSb{3YVoS0kO}c=FaRPfg-b!Ub2Un@6x+vLx%XkSFcn zgBJ48m5q-d7ihV%GJs0*%51*AlqBC3+~bGH)f(6rb+0j`0x}q{iW&8-neb%?0uNhd zzou1x0s9QK1co$A2d~$-^!^?b{kAf$pb|`HU{)FIXaSkB zET|-R<;3gD+kqUi!*S6lXLf|xc856LhDkAm|BRD1khcqED^Kkxi`sS=VN%z7sFfYC z5CK=5$8fHxC~Px6YlOHXD>^YjF=vLJGo23zy{nK?Jm%aM0;hXJ%3{#18W&)lc}FW} zPliwolk(R4LoOG=uA%nt1=|i)hRrh2OER|^-pjM8OC{lN5od30_u%rH6Ia)NVF4=1 zX+5AoB{?IgBzJoxn;Pizqa@df#3Y3iL=$d*iTIjYIwGUP%h&7? zm}-o~*v+ntdmD8635WZ^mdt%aV0G^%u*G!HE+Fr#%DV(Q*;;IX*0IIWxG3@{+GddC z1jQ6lr4D^VP~O6oQ!(fa`j{#!rSZp{rBDbXSvYXJi)pBfeS3tYVDEo1(;p2g$p?IV z*XeG;uXew5hGu~*+Ik?1_J=3wRdYqXoZl8;_lC`@S`9q-BUBH|!*5G+=kF!C8~>m{ z6<;+ijGrD)mthMqkNuILKWb(z4mN>em6)h#ALGmCJpuQCoSJ|Z^PH>}Wr^HG7LG`F zUHY}w8izg5fh|ikG;m;R2NlL8;5OjBN7obe;aQydR6v0WPign_a_}hkny1`hNF200 z1Y*P3x!Z9Xl z(I7Xcs~S(X8`NKyMZ}u>=b4lGPm+qFXLQ#Pp(lMBq6xOrrZ<*-o1-Bn$tc3R0_wCA zdzjjl;5El9sWhH85?OO6#Q`U`74P0pJQ|{+?~?!Ol67y;4s={=hdM$QtbBs@?8)tM ztvhu@ONvIW0RLIw*fx&_srrS+^yZ~#~~ z&4P=8qS+SIQHx}SKpA0rEi2~*SUxFtAL_B=_L+I6XJa1ZBfqG_F@@5T_FW(rr&`lu_&)l_rlbc*a_+JQ{VWa`M5`P zWf&OQ-FB`e>o*2iDA%T~E2Ul)DKxdI=|ur$8ygO#U0YjG4;zQ7VcM=;4!&+)anTo% zH-(bL7jCrU0;}A|8+#U&z7_hsxZxO&C*tvgk5@TI)(v=kFtV9?UR+ziOq5-3IFvkn zFK*g;W_ED7vpL=)=~aXM;X~ZkLJ&1@j;_-i5cq_qXm;gYNVn~m9i9!ARC@K0LR8ZY z^=Fj2+{s%eRglh0BSYsi+XhF5A00LVCIlI0#M! zS4Z={)W0>|$(gMxcKxPycE!EzW#KpBRl(aaz2qLd+vOP(QL4z!7rA$GI-c|DAWL6v znO+||t13b4nkkR)#5576$r5`dBq5-|GKt<06OLLpXvjwqZO1WN0gvBl6=y-&eU0UoV7Xgd9)Wy232w>|&CL-}96tMV$H2<3M7SNSh~$ za{xH5C6+%4Gw!#q$#z9_vOGPI*_N0k8k#cYBMNuxzeZNVEbwH58t_e%-{FdWQ>*#D zIA!;Ik-V{--{#@T!cwiv9Z$Hh3`tjYMmF9(l`S$8Xt0{aZYo!c_jw^xJrFABu@~e|Wczzu z`ZZYm<)-`}1&e>yl;7owyIgUXEADc|U9Pyx6?eJfE?3;;io0BKmn;5@bHyJ!#=l&c zv#>D!ePNE!Dzj?|@fQcXe-`Gqum7)fitnR;4tCQ`ZmrU^q2;?koxh%nvDc1!jl|Ee>P{f7ByQrL7WAFVpKwL142rNN))wM?2WF6VGZpW zCuPSr zFn*;|enk9*)1188=~K7rrH-l5{b<$QshLgx4ylW8nfv}{YA&_VI0^K$A+bEt$2`=} z!}g(|R%PV`%&2JCXxEY|Z+uKgc3sriL*h!-wR}5i;CiCyU!hlt^GqqWxu<>}+~?l< zDdeWQ6>@Wb7jh@p&yXFm9rD?S)pX@3XPzDAbyr51o4xhrao0~{!Y;-j%+}~Z!Rp{b zitsU{#GU2`WZu-(YJLMyfg4O$X}Qgb8-C$%2Jg2Y;uy!j`4pDf>X6t-hzM&C0kIOe zC9ssur@;HP{_XBwqjuf^TCX=2Q}!3v$qR$)!CFnY+3cGqGWz3neqz z49;ab55*tPoxuLg>3{q_{pHU7_IdyF&i>c$)nD%HfA@3lzF&9Wum6kRum1ox@Vn>! ze-j&+-!IY{2CxD5e+M>j`>y_{*Z|uM2phNu*XhJ&jYnRQnj@-Q{Qy}@TRV0c_u>d| zGYDC<95exrwVj09=YiWF(Te)kX)Afh*E+@0A0KaySZ-C6P-VZ~dVN!;MB zx(MfT>3wj{%@0jA6P>X9DXevqTQ? z+C7h?Ea!o^=Lfb6Ig>OYLcwA_WjX8p+43x|)d}daNS=8?@A*A9=N*TwujcBRd#EXL z<$TpCRUN_`=n@e#4|DsVI?sqG~^T8iXfvnGfo+}LCg3((PrB5)!z$dP+HJxmiJ!lzvAj{@=zI*{5+lUZGZ(-5q@ zp5ka~Pl}J=9fM6pW3VMx?|q?b=L8E{awN_WlkTyhkQthTsBday2LzXAS-LYZrz}IX z-^@QRcP=cejvRU;<_O~!HxPHVvq$+bN6O8<*5qt=CY(x;b(FnGxeG1w^|p?X+zUC?tA z^@P@dSE05&ILhNseb%>`IEqx9sgMmUfWIy47g?pIa(`q7^DB~xDhBH=)aF9lD#VghLd3oXLTn6_{$BPa zc3AHNo|^>zM|{l#|I{ZVSHKquqs$|R7Lo92I!Mu^FEsdeY9N2dqf^- z#!FGeH=_UrzDX=AwCS9}@u4%;&AL*S(a6JWb%sP|-guT+78<jazq)ua#`}>&7Zy|Wz2arE$vp-Mi zQ}f28!(mjdOcY7hL4tw7MGYP?`8*z5mZ`@new7@kNb~yYco?2kcrdYXE|Fmg>quO^ zq5GP8Bdq!<deAxj(gotrbNZI*oGI3#iCWTT?e~xxyDp@@z0`GR;t@hEis|b)0u=@A<(Ukc z-t2W)$DP@$ugq##d1&0i9lnzS*dS71OZ&C>8btMYs+;gFDX`Uhh;vH{*b3_(m1PCY zzH8{Vm`V;VE_-o}tsH@`GiRqzYd0Tr-U83hXQY#o`)>UZFQwGcXtYAE_Dvw8tn$&i z=!@qXFM?g5M61`e#CH?obFdZ}p+=&esJrE-hdgb#uw?lhhO83O8B9?>g`ennM=yrk zE{AEvu%zKAubs(68Np7$Wzn%<8pcpSDIy?pFtTZD3dIOO!eKUxu^jg^WTU)0Ajj|0 zqhZVfPr-mp|N0<+lfb5nZ3GvwxF_Jf{<3I^7g=V(%WyM9(@^|iPqY_8nSKVrLSL*G z(2UT~Gg*qNf10@QT;f0`?p6CN8p^04>m5veMXZH}Bbqfh=jr$AGqmERl>jNgc+-Ae z^;KF-F@oxoOE_?L5fC4dxgaH4W*` zJu%`Hm-nYAcgCI_B^x7M2aOTR^F?9^b-@QSV2fed;o}Xg4VC!O5zU2ro4>+rvksc} zIrM!RoECLYY2ImzRb*dP6ydv$yD%1AS{U}vhykpBnHV7c12MoyWX*g_48&UEi_>JO z>O|`S3$tOUoHX{-?C$)e@sQjV2J2|br2gs9u7A@WwUTP=<2reYyejTxqIt4tdD z3}6I>91B=REm4}EqJoKfNZZ>XSY~N~lNFdoYA@ElOJtO9i`B@m3rHS`kur~^BA=Zi2Qy!D zLLUiM6d>2W0wDvH5=8(qKtOlYa>I2g4U@Lrfu<9UUofCFoW+I^|M(iEc}2z1`5N6b z?5c~p(TM{%TOZQnNDNaes`ZddeeTbkRDw?KX8a$@KU#+`UZm)QK&n zQj34)q$4|I$Tq18gOuDu?m2AGOv~QoNh?tieE|PyAp7CaF%+QVZWrBk;t6cfAHqS% zdpr@F76Q_7d+}m^^m~zL1n9USPpaJ+lloUfu8nPm39R{3Z|s=2`&S#zb}Was?AsqX zXKy{X(G8j0aqZ{AJAv65E0oLbw&ZKrv5&K^h(Bm3YqY7zapTnQ99Ks z_ItN&dr94OIBUj4faL9D&#n7(4k5pxI|H5x7Bu@^3Cw<fjoV=6%aAN{tGc+^_>{7x+Mm<0b(ExAO?yR--O`` zp@gn$?d<*_2HMbcVvqr1ApAQquzMhLWR@j{0FIwh=Bt)F5PYBldqpZ#J~%B@;SK|DNpBwzY_x;tyP2z^N`kAXVM>{S;b%VVFt&B z%xZIOY+63V=eqTA|8_m_Jt_T~DgH7s@Q*UZKO+Y2BE?;#xQi5bk>V~=+(nAJNO2b_ z00{XmQrty~yGQ|A`1vo36n`u?|1vDV#>B$;cabHOE!@`V-vtZYzW%>fX7ZY$fp)uR z@vBUiQnFC?^~S|SXpk0RC$_cWRafv%9s$4pQj z`bfmaIc$bBe2=Y6qk27Zzc1N&`+YEYH_q(!3IA?iGHAD3{}~GyXt$dk49aJNzBT?q z`E+0S&JOIO#?g*&y!3NU4%fqxOi$%$GPaqyFLe$si~X$);_|6)ty5pvTAOfoKl)NK z+tV|dt^IX`7~@Iz(g3XP>vZQdnwx}6t|k>%wwjyS$%nbSHuNv5>m0UD4$ttoGwo|n zA;wtcpQ!l}J?kU#t8T7_Zgh>Ny(jBm(`Lt3a>Z<%{G!3qQK=%dJ&80XQB_~_kc83p zqRmMi)y9EYxN{2$LAsZz?9)5f!nWqom^lZQ*WrT6Zt5;|_Ybk{lQ?@)42RziUW$$w z;dIfItGtN3Dwe=PoD7dpd}kblV2F1iF;{{Xwo_D{bRhL%be^$AzgDKmhSJvLeBRJ^ z;*EQo+ze?!t>HQ_=4~p`>a%VtaJB$u=1~r#f{bCa$z5*~zrhGSVj9r9UUfKS_(Jd~ z4+IG~(&nW%e`N89R3ef^epLRfthvL!CGLh%7o)=WNOua>X8;=w1PM^)kKdM-1s#&02kamt^NKmb<-2ok_>ViDK4Xg7zlE7vMA z^Te&t8+u-_3abyn=_HHFi|&f#>B6H+65w&IYf_|^($54(=(I;e%!nf!5;96J`m-6& zW;BWGis%mgXAk>tpYuP51b+QK{bfktcR%Oudv*7{`oHwO`VYVXzkA;QH{k%36|coU z01oi{cfbL+@9KXH2mFK0Za}*q=6R0f*cM3C@e3S)6!;wunDPCPYWW%;_Xixn4!{8e z>&Xqn)_rE*;Q&pSA8>#ypcJUk68-@P98T`AZ-L+dFM{8}0jDHx2p~8hf8Zw^pa#GJ z+fXyEAUHr`rq4q3p@a0_!2##-!T=lqqj;I(QpgH|1N^Z?e!u~{zrg_tKjDB^033kr zuv-*u7Rv$7bqaz5XMo9WUd8(ETR0%$CP>B`(C(LB5=uVNnat&&^MgZZSsM9OyKnf5 zcK-V6xD>hfBVo`aT}F{ zw|ngh{4+IE7GV{z*^NIDe%4O~O;&NZxrZpb@|ri;n7!}-lNWnxp}DfO)-EWIdlSbj zTxY^^$zb!lcYl@zq!hUN?%l5|{kU20ny!m^X`{j zdwe#dYdH8!3%v!=g(xDYY92s*R`4a8p%4q{sjzAi`A9JmtmQkJ5a9R|2w0^-`~?VL z(P2_^#S((6G5Qq!4~V$ndxLlAf})4g@FQnQ?SF#mxa{GD_CBf-^J&tScQv{wC} za6m2y4rszhCR;KQFaHAki8P3FfuHdDxH%#Amq2eG(~~bTgMaCfYskH~=qgbryL$Fo zvDH=rx;po}Mqq5#h!vy}n0)L-OC@niZzD^g&21~^x$95xm6^U@N$u!N&IIXeS8q80 z2ZV#*fO!B8&;j6pdjK5p^amUu_#F;F{xYQP#fB$8=R72vK)?jR0m!FmKGBQFwwoY0 z03T0z?Jc=vDWny&Vm!Ny*efBF_CbcXmbIlXDSTkiioIW(Z60H;YF#4ZP)rQ8iAchKQsctfJT6-ynsPx$j4Mw$qC+=kNi^<5!TLF z8fsiDYNP*Q|I-EQy5p?66^SuA1r*-priq(=&wh&FGN>zuL5>(5QHn6uL}?eK+D|{p9~R7FO>*aeQRd@X0aup;J zknM^Fi3Ik2iGo2Q0a!pJV7r}h2oecAA%rQxS#+A`A&$@LB=JS7o^gAn;GqbJ1afKK zxGY;3w+|2EI28;sU<_fEsj78xNl890QBpGc5}LOR_yM{#yFQf*jg&`y+>XkE8(e-G z2`9T^_Ncw`LwsqTiV{tB4rUghg#mlN*lV0<@Yes`Gc9x)Is()xEZH8wL-77qBv7Ck zp_{klPbAQTPB~QkNmM48LXK1E9bhL|j1q!!8nFj{|8lP}ZM3SHOaaA8J<7C&m@?>Z zF1|F4fc`V%zMm!oW!e1KAa$9U05}Z4c$r)*+VN~CLnS)!DsDHd!g`uX$CA1mFlR9|=oKEPz3U0RG?wF6jy{P`g;yUmwWp~XLUM80&mZx&Y- z4`2Zb&*6h+7S^{{ub7JH#hVbs#zXc;(Eu!9#r4Ld)Vo1{k^spRgarUA-SOtOthgJAB%gZoHfQ7+39m9+L#N?QvC0g_1W4A!mJ>{aiT5 zfxt+H+|q^zV;z?5@38=UngKF(zjP`93%~(k0nY&}AmrMm78B9O$+JvDM?2i)YNHsQ z$;N4AReR?s+HLM*VQbZ=-8uamW$w1?%J+-Byrh#Tim+Ez zt{>zPy7`$e(;H$Nc*U9TZRII82ANN6<()AFWELO#W8z_o4$ZQ`jYbOJ^F{T{_bkv6 zPw;tiPflim_smKT=L$>d`T53^bv)a(iiaGt>o+c}S~|dZ49Zu8k%)!3j}QkgwWQLu zLdMBnn)iGVx$uP$>efGrjq;@*(~HlrN6%&_gruAR-T-6XG|jwDCXD-QL%lrdJW(|g z7~w|!Wi5uIUC|AOiHD$>Za+NkdY*^ez)jR*FLRW$Sgy=k0N*t^YcRC zdr0~Te*y_$ zWoP+2B!FJhp2`o{%A((6fw;rS(?$+$mBm}p$mbK4`ZQ*Cn zQ#&u&ao+XI=TtExmT?@3Db|(i?W-hdwiyp{HyRxL(3vqymMQVy@5Qb^*kV_&9T6$J zKKU)Q{qbY|%V*`cAH$zF#=m~tf4wmVecV5P&VSj*{+}omfBiWAHw(p_bp!Zmpiu1n zw-kz?clGZs6h-*H7m5`cFK@4n5dw*afgSH@#cWz>c@rj~#FS zA3NT&B)2=>IX`y1`RcArQvYb(-(Ze67u+4qpAb<9%ai zX0|i-7_{SE0R!xKTf7mBX;X}n&-6QQ47bZeBW20$h9t$q#CqAHMwsYAxRWJ#dd>Ap z?bX8!`+Ek}E z_fgs;ad~aPheN;ff~j}?)uQZbH6O1x#ErNS#20On*a3p5oR!yB!AneL&1gJd10ctE zF{2sRkWC&WJ6BTn4#Ood5I4^G+!RsjB}Mh)Ors@I0xParF1n8Dv>nTYY5}KLmz;fO z8C0jpEc*%K(GYt{ffGqw&oSEZ1&2oxEd|T6h_LO59~`awoF(kOQ<_)gF6y5hRGFR3 z)Nm>z3m?kP+!-j08;$j3nNge*a6kHJ@(?3!I+w!+Y|&-p-kYJ}16F^^^Jm`9>dpZt zqBOdpg~l67gEoLV&|JElW1*~op1AXE*Nb|L7X4j8LH zcAssee5x!NlkU(&nE>T-xTGu6S?=sc7+vV@9)_;Zz~}v7Q3`amA?$J zdJ#w@^;HKY$RuP(cn8U&<)%M<^;7|tZVPU$#HE}1=k6XFr}VEw-ml}`RCNLr1n98- zZpfR$WZSa{6S!J_W+dyW%duMn= z@AKh8^_hWHhMU0KZR+9xgWhbdld9#PfpcRr?p>?b6Q;h$KgKBf&}g!PzzLel%|fm5Z=2?GRpm?u$p9 zRvppE-*>z-4uBnRSeGo)stox_55%B_0#s#VN0ia*`kK(^A{27Tin?lYvMqLD=dU`o zfWzayPr%_ZLqa2eLNOZ_Qb+vN#%Ksy z5O8cPk+yge^C;u3NZilErEKyPCOCk5aI+S1VbAW<5e!2sVlAT+m0uLjdAOQ zJU;B8Yez*hwsoQ4a#wh7!8nRW2EVsDzSLs$1veL^HjAju?9C-rlUbb+BI-%jwR438wQ;t3~Llc0H6(cULM7 z-q-SHtv{%2zt&0u3jnkrj6`!4i>|jb39F6%yisLtc(v3m0uaf z9=roY<=pah$5B^5`o(8JzZh}gOZ56@zv%S0e(^2N@NfMh9MCUHDtf2_{bKfaQF%aa zCj0;V>{!1h?zet1@elo??$3Vl$(WjDh*>PgGKO=#0+d+|5h=D>O^|u3oNE6+6_xk> zCMpm9ov57PZ=&+#5q*aCLEw_ld-}sB(>3)u+C`-LrN<(RSye~tkOQO6Jl)Z~kErD$$aZ~o) zcvpAMb7O{DozSAZy;2LhfeZF%=xxNFYg-P;mJdfN+w9XaeuWG7bPzrfxnGPz6_d{# z?pro$Akm$Vw3uD&ERJs}IybJ9-r3e8X>9rQ?7tzZNpt z=UwJd*buXu8hBw+2hF~;)N){H$NKGU6t!a$ICs}4q|PSa`t|VqkRcSaarTgv(POi* zbfmh+hpP(Ke4ocS-k#EWaC;P9UgMqcI|^(!apEs6?aKqAa>JMiI|X*W*uC@9D&Xw6 z;7`tut-qfgTmSCt*y_8eJmD8nc{3Vc%-m}EP&y%ceEJ9fS#alBE}xOt*Wv1AE23U6 zz&Ajmayro2aXzc&Fgn%rWngf`gx);ia&ZW7c6@cHd1Lq4vuvF=xaN&{xDlPy*ixdg z8;!l9Eq-6`RyUw7x7(Lkt;gn3dtE=l9miR;61K`ZQ8Lm)T|(>{BJ?c&EQre@`HCQh zLFK~oo({AX{Z4Jvo4nhzf?pmQUOc`)?Y+VRCJ6^P?)cDGL zV$)-H&mu#RpL|ZnD@kWY(6dFFfTDmbdmMCj{Gswp95_2RedUJK{z-I~F2!M{a6~v? z?ta7{>cwBf#b2)%|3SF;EA`@Cwz$g{p!uV_Y;l(@?y|*Qwz$g{ci9497w@vgUADN( z7XMeX#UEQRL7)^=m6Mi}SC`XeaA9L-V`OGx-~fKfWWdJ3#>8es|EK?yf%T_MoZ}DY z$E(C0Vb6f`<9uM;+xXw{^8Zrj6)kB$!T{R#mPtwe_*&S+s8Z>qc$Y(;`a*6pbDR66 zXQ%a)QuQ(MQ8onwWao>QCV3cP2YrEZ?a@a}VLp`1GHI)4YfZBw(KMQ1oR+b0-q{-v zM_}H&hWw{%eY(ZAiUW(Yq|))Ux+Qk1#>Yt&TVpm8)#itB@24ww?-f*});aA?PFLC7 z`1l1P5pcR~e|r_3FL#>G>HhW7KO~+`7pvNB=lpeYmGxYW`|h=0U^xDGI*;ecWqXf$ z(OkXf>2+%-1GXgsVz>vkKhI?^_|ejG1BWZLC)i92TQX&C#@6cno~(4^w@JAK#+akt zTkMK{0_vDH8ey!KH}Und1l?LQ6i>t~J02Xg5tY%nejIex3h^DBf<$4E&%O4qpekEKy7C*dOX zb40umh|r&tIMXB=Ucmo9_TDnAt9@FzG+M!G>lx*O^45ELY&yF)-y=@L;o zRX`e~yZaq~(79Z5&h_kd>^ax*toC-I_l@!q;=0Kf#drd_&=qukIW~MmcW_FHT?| z+auIphsx&fyv^Nk-3`}&;c)%2IAHd7KK1{by#YBSDQ}S6yc_5Z{N-1BpdY{gPHn)` zah?;kkmquFm~(U+hD|o~Ufm#i47k*U1<&Ybh;MAQRw;a2Bd$x5h}`P$bnSRl zOtxNrZV)VW$s5yp+HlxsEBr;iUIHa@8;$C){T{_+--l-zLtLJDQ^`Z*@PR?u`IS4I zm`#)9RGL=k^N8hBc*+tBiRex`NdvYmngtf4msjU|Ik(&iGmTxza1%XXun{PLm@&Q`vEcxeOsONKb zW45R|o~Kh!=SQxO;9;H!l4Hznkrq+=K8lG~bD@ds$pjbOdH2BbH4HPQQ9n^HIj7x* za$?>Rv#_*R3&gdqN-H}>nuZGvt4iccNb%jQwX)>nPX&)znzok*q@=k(o5)50ro11l z{1j7Lg=#JPBY-K788AUwqre^V(~i!RMA-m1<*)9=PPjXtfH>uZ0H<8d9gzrW(_a78 z>oWZ8)yOmGi5zV9Np9CEflhY_RLMyRp%?e_%K=Wg9zR2+&bh*Pe* zR4`=ClUyim#+}rNTv#CraLQ-E`PK&{Uwj|#Nzzh!!|3--WbuYmUfRun!zs4}IOS|e z>-IOCa!*10h`1iI4}>62IUT?$pM)n3$})Y$58{;D#=zh+h_AN|rizLY$bkFKayzF5 z!ONNxf@_W1LOXp7#Atg5WmJm{#_!q0#)##Ef6jGhX-w@IM_8um`zy? zWELolUL}C#zLb$5S93|sZ-}ACm7Qb!P{fqXc9f-on4c2BQJLS&gzs7xp>YE$H_j({ z-*%GqM^JerPH2UGbYUJC9UwRFWukPwT(1D+=6yGEbCiF`&HMZkJ~1?4%s&K}*wdk0 zDW>fAc*UxqSPsieF$#!M<~E+zs@{Ogf#v`T2vmM_11jHjjN|+XDyJh8jtOD;2`WcB z7sENHkYeO0r9N;(6(%dm&msFNx8;RS;O8$!*-e+o^VlW>xSx8L`iH*6Y5Ju{yX zLnhatuE2_Xp1rtSI!`iJVbx@)U@s*8e$JSxaY4acsLDot|K!0p42l6Mwsf8ScfIr^ zgn_*peg$JYVg?4n8N;V|sDWx^`Q61*s)u`~g>58R+!hkvnh&v{dT`gM2<8sF)l<8fFSsNR70o&zw;} zj4Yf|DA0?_Qo`{oN%DF)^hNbva@$7tF&029hgX6BzLMe~Rb!=F;Vk3VFm0>fv`_=f zTJo#goEBR}9OO3l;U|>+(1$Vf)XMGgf$5s{n{Bw!Dl7X)2E}sUhqxJVv$`&8;iO^9 zU~+GZmboO5I!Gw=#eYXE7e2~<6}zQ3-Jw|NGP`&_jUe!?KsSz(etSQy*SK^6=d%>{ zAxpkg0Ab_c0LrWaT2vN#UQT&2o7yV$tJ z9GkuJ1z6-R8p6VdD)TkILt+xg%u?dDJ?J06@>rgHz-^9hE(8YgHH=a>$^gEN)^q-l z+}z^1`MqWF)`Es0gZ{1um3{1z5F6PBRyghki^t@u@v~qybECte(NO_W)b@&EN`8|J zseaG1N#l&Mut}8F%{2`gvmpkGGdJ#cd&$R9h_gNxV2w`GwiU2~N5*4(+u7VgAtBi| zC(&-19&vm}?1QBUwh^tsPIBdAU?({Z*hwDl>IHU^CA=hz8Ls?N@Zb-A6bGd7;&f=G z@}`Tvoq7mtD&z%yN;Ek+J?sklo1aHa$^1L2T3%CZ*Tgl& z*MAv4(mK=a`D&Haq_Pu2x=#C8jw57u$gd zuBlc7R5?{v>^T-0FLAPb8l~NYdeSoimPZq0v-{dCiur?`Mhtf_u?9Ip;Xr2b{=kJ( zK4zCe_my)J=2FzaH%KI&3pY#2+(8>}fu&@5FJaJ9GBvgDqNVuFQZnt(?NV}l50A7k zu#~I_T1qwsmXh0&db+E{MydnaHv&LQ$+FStKbDfQfzp5?eNN_&rR2q4V_+${4p>U2 zpl2k!DGgwPRZHKL2J(KE29ijjZb}0foiq~R9Hp6xI*MVfwjTMgnOLbwuT3h^Ur15p z?I2W?nzD1KKn_aFyFtUfF}`1!oBQ!8@W;CM!WF@s!i>?1c?VpFMB5&%lP<^hkA=&Is*;2odF++<0|_Xzjg+8{-iVTS@(YGj`IfwVwcdIs+8lN*Uk8stT<1Y zK4_@8JyuUxzD)T9eiUNj%bn`4ui?>sobn{UZOk4L1zOyv>D(OrYwXsk8>b#U4EE)! ze)YN2?)qUNuigPR*S?8wE0*?jWI5%fD8qLyGu(CSQKDLHCY~1s`<)x6t(x^qy4}b9 zXU*fbZKWq}Z}?JlkbG#D;HT_bkt-{^cFT#G&K6b;*&!zm`wZQk`I8R|Iv77Tj=xHA zt{G97_eLm3nxSp+4ZT#@L_N1V>T>hFU|8ba!}*ZAGWtTEqVejI!6LiSGEwDJCNX3M zDL=a9xkcEeW`0|Fio_{tzCn4)_a2;(_I_-ACw)wD&q-=kNn{dOiG#GGA`b!sXiE}q z`e4_^w-0R&%!E2u3#_tSThqqmXN_~N7sjmJhcfhp-m%Gwh9JNrd|a>)k9P|0=De0g z1ApMe7lh+7^y)>Wx4^nyWW60_lO)UX!_DYk_ihiqD%mKLevJN{BzFOKa>sN=!cVCt zfnCMX6rNqIW_90&8libz+%zd&$nDb2H`$1yB{wUt12ID^GmzSFY#l83)jE4?7mt6P~0j(zQ^=C-0r z0!I3A=AT~?{F*Ba|BkTqC%NMHje)yZaThD@V#QsoxQi8cvEnXP+{KE!SaBCC?qbFN zPh!O%4>aubc8l(R5;SGUhz>@UlDn5+Hh_w#ah@~v$>j5 zbmP*dS9 zc&B+zJU(Tu<#&C%`-W?;f|c#aV9qn=)Ms&}ePf}fDe5yyh76_IanUYWIU|0cb`Bj( z{)dd$FBm^aEgLVisq#7MDQIkMxF1~{G%bwmC{V^3anM$Mre%|sk)|A;Mp#1)Y1Uj3>Wx85XRHmcU8`jjTl`b;EqVM&5SyS%2gbDx1D~5=Vvjb1%_T zhJnEg%;%-9(NUA8x~95jjBFZ7qgYxk)*;r|NnMdV^i>ZMiedyB;8>+zghxAA4x{3F zL=HPHV9h8_zuabrrF4_cps9~U*T~0i)R zcnBTZ@7FeWEgvNX&?J$tnNkWKuD`s59MX27Lv7V#$ct)i(>=+I6PZAxUpe~jhg}ZU zacz`EV}&%H;RK7m%|UHt!AHj`Uyhqo%9$JSuHV{&MNei}9AC#HYgJz}Yc+2Y$|;L& zqgZB;5pbEG@i&0iG9!k)MHDz`);u6Sx`QKY4#=Y~pD2)WY7$!p@e_$<1j>Yt?pv6ZOijb-Oj& z_y1%X+{p`bXn2B29Z0@t{(Zro8$a?@%Y<+;G8t3_rRS+Xg$@ey&qzL02}e&JUW|@GK0s{OFM0XA>7|QO z%ej55SkHU7!QkZ)%qGv;=dqy(RDGtJn9A(%sTAU_gx=YoIyzq$I<2sYTVJlKz?8?j ztY35TRy78IXad280(eZDS2l@rY@O@94&GXU0jE(Pao#mNqV3rRXaayVdx5pE6_rl_ ziQ_W_h$i3)&;+<#{y`I%`GUzTC$$WGVs9K7xv-K~VSUMc@2A*wQ|AUpF{bQ_uRnPV?dgGh%_np0)Dydxe92#vQN6jrx8E$9-$6t!yx58V@*9gR4P`T9da3dG3o<_C5Hs#(y zRI^Bz>EOYCW6%S>DS#+Jx)knKAxR?7HWA}i-2OS>M8DA8B+9V9FHHC>Y$4eEAx^Sm zSfP;=GZFVE9jZKVjO0+i`!y+G1bZv*nQhw=OGSm`OxjrjBm3;7k>m{mmXehl!-r*O z2Z5{1!&AC@jAZoJm>%|8!hBUO974oC9n~}=-N$+bfxr&YE>D~Ko4j0H#<*(1mL_|4 z6$&*LD(mYKz?vp`iUr8at<8w$ae>wU=F045rePF2^gxDAbZabeWZG88wT03?hHF93 zbbcY-y050P3Z0_q522LY!gH8qh%K~m>Ps6!D6Q~5$WmGxSnvH&UcSZ3jS;0?^kNdk zCU?JKlUx6TP0kd29;UkwzyvJtDFVc^zmL3;M1x8iUpi@aWkbhNEXGxIff7DMQ%0P7 z{%#R<&_tSTR?VYpE7(mQ2_@oqj@VoR;*BV~Hmb_C4zJWv5pI83qlt_`t^S)T-Rm{` zH;1n+0V?^9PHN+O%_P;>C~;I;-Xj>yQ#27f)|9ZjZV}AVbIts zEqQnVn7}mEF4zrBz!1K-)~8>c9hIE1x3CF-34D|}+mHC}Ps5R+lF0Cla)BJZl-Xo~ zLOYyz(K}b_(Io&AIDDiwaO6T0@_c4*DdjyvW3Oj!(a%bN`t^LrSZI+s8|ObN0qPet zx0QfiE?I@t=G;EFr#2sMEat||Hx_evgkLS@H=yzmyjxItU-!83o79}Ez6AyVRPM3* z8>l=M=`5#YdU1!s^*2yCN2tKUD-3wU^4~z^ihm9&ACURipz_ZkP&xVysGRIk_w0_M z(^00@nBjzSB7JMh)bq0ir7AKlTi{=3S~l(8dAbmP12hOG;GwZFRCmv|O2v*Qzzu*2 zqyaF2Q4mbPmgc#S`siRv4VR`I026TeJfQa+ez@a%6I>o0On(zm|NF6DC52?)tm&PEkuVV5;cDWfNm-lIalm6+o!*zufVY|9#E@{!@S zy0h%8G8!cA?}k{j^$p!?u>OiCp^JHL1_G6beYUq;1%b+`FnOr+so(!8s9f_0sQhIh z9tc!^{}tM_%)rw!`?pgQE4B|~Y7j8RqE3A`eAkKm_ZP5P_0 zTS7JK%>ht(M!)e`<4QKUSV+jc^T9Kq6p$*AW|66lozDOrsP7fu6)-Y#5{KO%!@m>{ zlSuuYF#7EYgsmm@Uw|93A{(Vuaj|_#(#q(Hx&5g0%ra6_j^FxD zJSmBOkgB?pzmn25M#)Y_6r+w)8D9qCfZbr6DL;TJ_xQxR4WA&mB@gIcsd2WSNdxD1Lfo})1{parfVMf2M0zLXhKK^I2fW{ zR30XaSCp>jy{37E*+WeeVxD^=8+X*qe{4yzKA{d3(IffZMq&g24A{_F(bbAqTi##n zbF!ueuhxl1M=H^IU;S)8j;u3TU74DZMogcJUjrxr^y_?P)eQcS8?M}c+X?_aNDH(A z+}{|-SLSAadwr7`K6gDm(cBvaue7- zVd^L&=4Hd;lWXLF_gqeM&gP0Th^v+4GHWTz7U9xsK(x|Iywg$Dr+E5S!#%8=dZ%y} zP2RjrGT7ArHBDW;2+Q|=$Os~CYL?A_xs4CfZ3|L zC(R7+I*25Yu#j^#@8vahT>&BqKmjBHLVzT|xBY^0A25+|z1{CT?6aRpL98dj<{@@BsrSdh}yk6>FIvENF)7dyy!uOwA!)< zb{ItDG|HEeP7^y9xH%9>VCzO;u6-*oe;fV>fw?!^DnJtW2qFn6{~!rOgGd7VAd-L+ zKoa140FVUu#sQMRz%5CjqlXPd5)iY>I1S^oOt>VCmZ}+jwK@)hg9Cs`oQB87Ir*GwLA3zApRXTo)6%cG;;+|@ zL22nva>eg^0e7+DE>`H>#frOFaThE8h5zU-R@}vkyI4`eeHSb4V#QsoaQuHLR{Zf) z^Dox|9i{91GeF|}52096S-?o6Y5*Yp`& z3|HgjrtfqL7f}O*V!L`d1a}ByEBU>kEI?u&iry-M2|^C8z}1!2emeS zq7=(-SDt*DWpmC8h|Ei^of{03!jNRB+34CU*JKP=j-G|qhr2bU;PUvmnm;y-Pr@=C z)1wM0%fAT8vG4+)7)@E&tWDBL;z~s5rJziM@6%(Kt9{l>DuabN9u*$98+M6oJ||;)fxi4~MYhhY3T+ z5h3}1=z0J&1a|YAJI-B_1XP$IOy58E*WqnGW#rlA-<&=+pt zM6l+=w!S1na8jasbe#`@dh%LC31Jf_`l*MSl}R;aT9=yT@cyp!%l-xZ5l6WPGLCXY zQ?i*))8>mNAWb@`nGJGPO5_5v?Uf1^CW4CUXLoa!%(Z8Nw zQ!G8ceI9Dq&|r1KDxa%aJ*D*_VZD?sd_td^@XrRc{mKXGH(wEdAw%z|FJ%^FZ_GeQsX`{5n&AxgqdR_qm&`yV?40o2~yq zS>T_Z`TxzbfS1R*&etCd0pq_~fw=jq{^X_J|6CUMp&vBleegCic0ztQn?~nZXldDR zGINdhZoiZTLT<|f*4R#)-{}r!p#>Zq1tS$}kwv+@C1y6_fU-apc_eFia`!hB8V_t! zDse0P1@N1)z)0LpS-`GEbIE-eKnO6C2~!<7;F+=X@Ny%!Q0*FFzGplY@I-Fn{x|`Y z1uDPalm+^u{AffW)=Gi0K(= zv)75w{Q;MGG00`EG@k#C5acpnw&m8J3S_}`yw<0za5qY6r!Nh9_7okG;KW-FY$Oiw zbLW4QeJFyC*?C^PT9Uus(=g%l6X174QxjLJf>wP#d>8hvMF3Q&4DOY-x5i;`0{xxk{o7)9X z=7%FNIVo?1o!%s*2Yq>8*qlY%>hC>8idIoeo_kb5>q^~g84_5OMcdcU{`wN^K`s5@ z)}=nVa@lhnUd(yU9ENA*wAKt^s3BUaF4Xy7p5vIJaBGHr4$P`M595i4ylS=Bs>8)f z9Q+1TT{wlf5(C5K?||^ZdK1Eu79$eZ$vQ*@c@~rMaXD^h33m?^Mt$LiBA&rbb%n#W{xc#!Q5Um8wA4ABhYLVDRl zxDy4~#XbjuT;{2xQq%XAE>Q_kxTYQTU zi1rqWq5%*B;~<1U9gN%KMwCzkHax%0obiCfvo8~J`%!)NF8tb@HwXd8vxMxniIaO# zsJr^X!dO1X_hB!JGXfu*`S41hdUrM()Jg zpmYV3I%*ZlMqR>E$s9hT(Hl~H`Hp#Ewogb+tSVPf(2g+iDf2RLpSPdLUx>%byK7cF z0QChjEyMyNQ^-T3*O(`7NJl#)ktSvw1itMJxe%JT%t( zi`KyX@D@nuSICIrP*>2$C=BGOOu#m z_km(eU?;p(8~ocCPtakc2IoOK`>CU~nP_}rIU53SxKd|=<1`@$6ou1RogJI59S`joE z`6Mreg`&zTOq5o0w@SM9JFzA=ZfB+h#2KZj!|fY_*Ewl1ay3G)L=r!T(OGXF9rg?qRU#KNU6+ihRK zrhghm&@Z8Xk|BP!EB$ry@{>4;kAsSpk%H(%stT1|>CpAgZ8mT?kPEtK@bU_=D!SY< zSC1bP>dyxagk^UU*{g{9Um;5EBLdr`Wzi>tV}jAESuB1)IRWn8&X}DI?nX_*Hn>0rh=rwHRVMXVAu=w*;Yhlm+6r z9iT%`KM4=;gML+-rOjwa@0z3!)EW$}vV;f7%n-2ewPx$31!cwT&Ey3N>|cOGJm zrtGDPkb|6+wT9YaB~8RF??7gAI?STMTeG<>2VgeG3Z4%KnavSE5_5WEhS)K{Y)$KC^DC=k@U3=6uppV8Go)_=?Hor3#e%7QW%*Nj^bqaWUz7UkxvJ)X|BIY{z>Vsc z?64TpRsDexfaw4*0ukBGI9J0&x&x9L7;cX>u$TM$+>kvx+Hn!{L1y#rOVgAhUk;r1 zK%ZCoc7k{iNAElZlKa0$Tm`eOqP)%M_iZ9{F>^HYVbkUY^#xp%W-?-p&Jk0c)?Z>!SD)r{By2e6A9)r}p=%*HcdC*F3nLDFbgP z0vb*=V+!AW5w>qB0)YTU0Opn=zyYEN6y&ar$^aCBvwxQ&U{G!LgCfBAdx}89Ek!^K zpa_@&6oDtB07anVbl0-}oxSM~v3UR>HaD*%xfPq|--ykHZp7wO0vS9B9a||<+e*DA z@}A_5NtJ{H^dm+|Jwf~Crs)cVpLFsgBw4Y?XDci*KTTKkiZi;hm$yX{=te&y_@qs# z)zB-ss5H58O&pvxVJ5mmZ|-Sf$NJ18@esM^)VADbUi;i7V+URUr~hnZ$hpF!fVunZ z<#w&WA_N0dS^j>fK#rq!p6E-6!?XY|wo{9z&M>D?3f{y;cqn?IL82({K7VJbvz^AL z;54GvVDxaEGcB2>J~91^!jC_#f*6cfsN=Slk7RyI^q_EbfBEU9h+d z7I(qoE?C?Ji~om%#UBqj|9WA7otyi2g@OCVCst;ETVVin{eSOJQ!Z>o2(wEsd015} zKLDXj6`gM-JvWm$ERm5A(qOl8O}OzH5jKsgors~Ds-liUK*^iz%uKFjCzh5!fv8ksSNX z%Bi!;6mNs;Rccw9hv)42i`bHunWl#it`iBYxAE80ZKHU#KM-z}xA+3vlb*(29(^P0 z3uc^CKHk2x+!tHs779iSu_#kk=K`hmZ`T#~PXh^rcx|x*6&+jzWOl^dfmse!EW3(|nWja!i}E&g`+$N)!5c`mB%i2tDCc&-^FJ zwruF;^IR-f+&29U{56e%!a%tKqK@3Dv*gGLPIZxMnqDiWecq{f(5xTGDAy99<^>4S~VWyp{tFtH~}AK%bgQCP|3WozsD}11zsE)!F5P5{kG>IF<_NV)bwD|T`o}%waGUA z#yK#epl^WJ{D>wx9|mEfMpJ*GPJi<{v3y@kxH9!fc(w}MouS%DtbG-$^wm(Z(|wI+ zQUf38gn1$Ya|ktDz8aZtGFURt=Sw4U>Je4t>3R_nc0)ojs9@T0><#pr{fEdTV7VVbjH z2DsH%d^CgJ2h8`;tH^cDRq_L`(7nODm98yX{*y$3hoDFO&-((uj?`c83;cSYyV1HE zt^cyo`cKpaetqQsH|qjUc+(YqKwZG;?_dkue8c#^s|!E|8~v-gKq%?N3&_^`P_!8y5--aZV&t^B&gpq7JCij59{75oWz~ukn z)S_X`_K6z)%G3emlqU&up1IJ};ZrFLC&}126xnzlWyx9!xhH!I%jeW)(n=yK$$ZMg{^`Ov)>ttW*u#u#u0*ym=1JUO^*dh4 z*{%ce4tw@9<3N5`DabhBJbYsu=%J&|lMm3K{+_ct z3>XIxGiY?pei#QxjX=f$dXRBIqxKi$fah<<0c(}SJS=7d36ODMTKUE}Q2Wz3(7aZr zbpRL#9ySq~GFeDKsJXl4KI`I3#`NRz3NJ0ha8=qsBj-QHLMq0>8hZI4I+F^e7Z464 zfk#caJ05_91IU1IfWtjJ9nr>D=Yi&vamf*a!+R64*qkZvcD^xoKD-yU;7pb&A=6_A z2nS}s8(W&Ws+kN=v-PIpj@d!Nfzic+IVV>95@|DL!WN{$3U5F-fC83&Y}z4VwK~Q( zr3eTIbVR@12nWhP5!?s|Oab8l6Oxth58(jLvpBl>PGpd9Kn4&FXd}!AW_^D}01^&B zuaZS#XD{iS_X}i4Quqtn$JEJ7Ls7CHgE3fgLGUaNJu~1Wk}K7l)VH z4%x$z=Z2M+q%X1zT!qel?;u|=&8lxLX$<*I7Dza-S5(z6_MMK_6C@l+`-5-*z~DbE z!=?{*tK)T{i6_Rv*3{iMkFfCxC57M8MGdR&aCy>@%yhC15Ss3}&l<+g@nNC3=VOS? z(L}b>`;(g)tkiDdCBL@7VM}@wyqjF!9f6Ae5sEB^mREM{WW&UJt{dOLVjkN2w#ABn_y&AwzDXWTyryhNTcAdxN3UU>4IzbRt?JqJ z-Zmv?&QxW~+<*^QBg@4RiF#*D^yhE^?;E&)762Eh0N?_qJt6JZZTezZT8 z;`e9kxZR&snI7s=^@Id`0-GE&I*8;eLP|963sbX}VsmqS5^i6boF7SiG;>Zq4FT~? zCr(4wUwVDnS{y<+x$U_YUO6qm>R!g~gHW+#6Emo_SBZ#yR81JCfnrS^aPQEclH`zA z9{Bv=HppA`yWh!z6I8*AUDK4Rj_pR4h)96hu;0BbV7&;FA`}dWwYg&U=mm&VLL6@ z*4Den6#=Gz&%6PqjFE5CfygIRr~GYK%3gBl%ON$p%4_L*GR80WINJF9Aee8N0`tjh z^WKWt=HQASscxA9{CQC3w9!kZ?4g@Eb!FzQw@iT(ABY*m__nx!haSv~MJ|1GwYG5f z8teBy^Xfh$-tT7YM9WpQAEn}_Le0usHv7i{xxcroD)cJ(c%l)a~LkJRV(*j_T|VVJSuuW@w(M%JM{0Bo0%d z^&V$-kt-$LMV$140-t_I@rN*IdtF4YdKsMWUX3J^vX1Pnj1OuveJ@+CvnqzXg7dl`HSHjr~vZ7^rV-KqeB{Z$yDD;BWT> zWpip+Tc+}TRlcV+m4+58e*ZC|0ND*upc`SYgjbj5-y{m01%Fj%OHQT(`UzBgfd?9_ zGMdUt#&x;x9{YW0fT|9!ddY#~1{Q-Y^WBK6C~s16&Tz-2h&^Y?BToP2*`hvU5R$6m z5266&qcRDo_yNyJzrvjO>|!-#90r>FQN;KXFnuhtZ}({5pr2N2oSu7$`%6Ma4QAC5 zVkJXW<}W6{F|ipeBptVZYHnlt#98Ka>><8;p9Y-sN9u#hQ%eG$*&eX_-eZo>3ar9j z1*?Q*y*s1Rb%<&%ESmr!1w3z%0vOIP0-t^$1*ia|KqUArQa}tq3NUNuYAgwspkSZP z`Vw5hK@2=Kg5Q=z89S!7PKQRE8WH-aC|7q+Qqq6?@=ObTqhXy?YZ zLvx?)bG&fqUYjfD!$tXdoIS8ZZNi2B-kh!17PgfICPu z5N*E63Wx@5s{SDw*vxDCL|$y5&P%`C&~Ww4ZgbMR{rp&;dtE`2>vS!xow@|0xnV5` zrMj^(y&wDhc~b)`K>&W?OwXscu^E(Kj$i8SjKahe@9x+<;@C!Zh)pCav=*RbglzJoQ zNM%7D-W$*+8u{FAy3xo^jWnonZqx1>5Dc7tCGZ2UwZv+zIsogxCzNM+4soJ<@7-2Q zx=(Z6&WX>?LWh0>2Ny|{p1JP1`?}^%WfMD(vxP~+uA$kxhqXKnF4pt!cV@f0HV^Yk z93@-iw{))XbuL`aKCGN-phO~$)kn!A5qRwFoIiGQyxgg)nS4V}m6DQ?&UoP=ScT}R zU5Fp?ichA7k4`G`6YQh&dufU`=?6kuu zXJ>b)AF4QLm-tfIikK*FO7o3W9ncJL3=Ez?0-Ax)x7udYMnESZDMFS9D_PJkWaHlW zGyIy~DuSh=dBRB+R{7`QFO>|@pT(u;?C4zk*-@9z@*u+U!5g>N{!oGnD^vjQ%=A0Q8vuc`4x6ar*0}fM4%( zH&%CJ^cz`uTlccT1f{D8kK z8@M|EXW0PNt!zNxze+Z+Yji6c_@1VzD@@~z-YCLC^diAU5ZClXc9+LdC*yNw>opoK zge$g`$*E{ebtAB8tOJdO6VNrKXvFUa@B^-H_yGw3Kfn);ZT|cp{D8b4{D9En2FoFU zAFy=blh~Ati=?_V7fngHZ?1fAdI#VK$bS>BkbHSS{{Y*&P{SCo4TuA_fj2j{0a?H{ zF!$3opuTit8}R>U+rWq5^&^`82Y%eTT;P_~?3eNFn3o)_=j)!L=dAfmJfG!Gg|Maq zd|wn_u&2t07^$ryepvVd#^C~MF1@Dhx7;-TW=O|_L*<8U;NgvJpybvzkcd}2ydnG3 zHZY9>vJHg&Y8!wx_-ESy{}0>1EJ~_zS*)@@T%V{=#6+JTvb&QZ&RhN7&m@`otaFLN zU8dZ5&;`tG9&$9g;ue&Nx3+;)zNS@$Wvwa?(;66Sno;wR2(Pu*Y|*FT-TqL?U_bt)xN-0}mS{KgO9#4TxrB?;DHCM~M$V4r$r{7E0) zm8IWnD76Bm$&h&p^K~@Vq4(Uok|$m=6=BTMqNaGl__Bl#NUaz)*dpMlICg`5C_QY{ zG3LS?;$ZJT)55iv`As)q$(h+>2_5&!w6WwMaw-CUK1P%;p+124682#P6Qq-+9{>=5 z5e5JP1lhL$0jWw5K!8KL7Fg_m&9#15jtrwcP<%vPd2gWelT0c{$=f7)ZFow%uVsWe z$BR-ntzuRZuMK6A+a}j5(Xf3`KC=LXfubU{2MuIj<+i-hiTwP<7`y56^I)wu zn@m_2@jlk91qa^{Y5K^rbuIXN`|+@%%1!c#qdimoR_=Z@ znBqYE0D~X=fJ4eqraI60r$|5e0V`~}59eYytybqnZ`%R?qjBKO2jNFM;LKDWw902lhKaEd>W4f(iU!iL2!>QUaH%#4{1p&OzoR>-x$dYJX_VH-0b7*V0(>g}gpxxS64EXeI)iK8-jhP6LP9bcbd#8AqDwdWSPWeh} z6+KNuFlz>e$s>^$E>;7u5#6ve?QoWVR1PfvP!50)0{>7B5c%9=dQz=T|3Sg5(o)w+ z37u3_beHGs5uYNzd`3U}U@3xaL>nMe=xJHmAFi56!vEwv}NDmY}dp!#n*os zKGHhV?fGhz^vx(Aa(ReZOA{uxJDwD1G>JnIna5bJ4JtA~dhN^`7F|RiWZ(o}d)dzw zJ1(6XyZHp>v#+DY5Rb~l)1X+LVpMBPl**l?m>^&IeI`*5jK&t}MF{7{lfZpSNHDNG zR}siaIuqq*@eD`IF6^8Cet=GRdJJsLtcw*!&PgRHY9`k%5muB=>FdXM9v$*nc;88R zjB2~#H6>|i7}cf2pQjAP0U80ihX|TU>gIqNAn}Q^Dp+zVopM$YeqZ+2&xgvNgx`E{;n^vh%t?*)XDTC_VL}j+eWzc?V&+Y39 zTcsCAbRCFm%5HoEJnUa`M5=^7$LV0WlrrE2VyMVsS@5nGBMg@J&po$nmM#>P$V%wb zSl@xrLw>VTk}kvdMD#U%st97I8mC()#btJV*R^Hx={Cturvnl4I>E^_S&~p3>6fhx zOtT9zq?JHRH6o`6X;10et)n@+ebtE=588ZrF3w@ow?1I%#t{}rJsHmCL`)#QLTwG! za3;CN@{YXxNY|XjjWkg@q|coc^}WS~X-;|rUg#ZU`Ajs$avfm8rrLHcjxI^dnL=6)Lb>*b4j~EE$2!Hg zUHC$q42B-u@&h6+O%sZI`9b`EB$I7{8-4)G4L`udZkT9GAnn?NZKMBt)9I%5(7I#i zeb=0Ihi%1(@lE%B9)csF!XWWynai0}lil3Xoc7Z3_M7V> z0>kURE1d19mJ%>JJ_Ubr2KUr$AzBR|hJw|fx0_K^g#Ev$J&K&_mtSBL@9EPp5eg0tYo6=D(hr4z#e z^1J;BIDGp9pT=}XM$al4Sl1AXkM;@%VD9YWF%(a-D*Ia0gIb{pP>4gGxR~Tv>dAU) z`~V1ug8%~2KL7#|zX1et0f4|V2q3Ts0tmSO1PG*q00QJ%=OBPU!!G~L9;L{=h zA~xTlf378;7XiAwz^qG3%Oa1aW8BxstjBdLQ+csv{k3yhRY-8C!dK8gUqsv{reCwg zUvCHei)`^%+5vabV*UCqT7X1mchTZ5THHm8f0CKqMT@&=aThJ_qQzabxal3=MT`HA zXz|B0PT{|ZJ!WNQ;rJawpyz#~p4E@0fXUx+`G4<3vn2vU7_$q|%u|wnd;J1df;0Fd zhX|zbpdnL0ZY2xx{rj8&!Qw)^5mWE=T=gA-#W92S4^X(F6vQH)wQCmUMq4rM!b1t0 z**tgqcJjRsA!SKy?j4{U*l-1u1A;CvnSQ0}5IgkVexmmjODC>Ky=d;Gb~amVlw|4o zJt+`;ThFBRDQ77mVsoLxsH!jO)!eN7dB@x7%dX%isGZ){Ns5OOdGgj4A=Cwn5ec_l(1(qj-W()rwQWM&d^~Nov-fVHVWz$A>WQ zB@{61jwRyLS8N{N2l@g@xM9wQV_b293%Gb0eierkjZ?_`(2jt2Pe*^aXz;?F&6xM2 z(qdr;AB<8uEukYS*~0rmSX>H9V9RHjn*WR59?}w)SAj5do6(spi+vn7oA-`)%;OSR z!;*On=gz8wL;;n@Kw%(+Ec3z~!rZG7P89{)Zr!udE`ug92A7r0G?kahRd0ic$0z~7 z2(-ixD$MFXXr|74SqpzYx^&QrV^c$t*6D0H zQnjlU(?35u%m!Eo*Z}K*d?p)U9jJ%gYzM3ZuT=_c0`l#33t}fiis~147nX1|W%h8ZoqhgDV>+Lut1hpl>G0NdG`a7QXKkp0tI#f1)=WXtW>u$LI3y15E zwE?rg^Qr&eYz^>QNC|%iS_1<>Yv8ZG*}M7i`+rv&!1uG6auP{4qENO) zd$HoFGt-7lD=O_An6BfnSa+qcVL4RpPi$wV1=ZSY$sd#wl}Ak17u5c7Z1j)h%z z+x+~JHJLmvbD`VI<-CulXMXE=28L#r*FQ9t`o-hVZAv@*&j>{YpME@Eb)1#(nXs+V zPQZfk;Nlf_)rFO%!Bcjv(i(!C8YW+Yh|P-}jkb}B6r`HAL~1{Q z98(OWewIT{Bm#5jO|&FSBW*4n3nR@l$Oao&D#E%eG9ezgb?J;=icTf8oUWj9u=R;m zerq6&J;hAv(Ga)2I_8weK{Vy@@_zPkmI7u)Usn`Cqtry{b&BhEcc{EksU5sdFLvFD zOXI{LjLwu^2XBviP*+hOA>TDTqU|Ay$z6J76TZM&*ow-x6$0^@A19V&8O0Pmg{zjP zcNjjAnXGxnf94A&vz*j2@QJ-~WaPq1jpg+v_r3RM)aAF&PaTtogw(c(%;#C6D4}LK zG7PQO-ao!M50oK@6VAzHCvsz#V2DLP5? zn4yI3+`K-g+5c!IxQ~-j=dFyx^u71H`Dltcd8=0NDhFTgZI^8!ZuTTLuRP{j;#YG* zxZ)_@8!_i3kWk)x7bfkQzb#j(DhvCZb63ZY(sTP?1#AYOLM=kG;1J$~tej|7no!k`R>c?vj#j zkd*G04(X7VF6mBbNePi|Y3Y`3>E8veySTdd?sMfB=Q`)S zj=YZ<7*ezJekXjZO#+hF0dSkxfD$%Fz`cbL*l?m%HN3_M;7QBn48UTXd>q#$+((Pzf?))0 z)*wG94hi-`%g%ia4nAS@aVbhYK=Xnd)iDl;#=ecZ6;T46=IP65%aVa@X@P+$7?1(O z64#t551KDmCqw6W^i6uN7dX)o9E-j+e;5snZgB)Mcf(6MyAWmDiT(vgK<S{8bhaClBF_LA)4VLn+*tJ8*-pWxIp!G=P{(8sC6$_X%xhDBci00rQe z6Pr!vn6XG+8TydX;N_5ch8_O`6u=kCYcaJ*&~E=ySncxK!6U{Iff3D{cmDw(GZ4na z>gIOxf*6n)unT*NEswbGiqT7PiHs@FPD_gZ<^Cs>>^>ugB$rvMIOWHj5OKvoQXGu{ zq5!yS=duYetP+4IkWV5r)s@hNDeOI8j&-QF^bwVEB`4XTv2}24rl3xm9_;nn+3S1H zBjz++#*??+EpGXDLAu9l;x(qm^C$02+yl3gAaazRSQi4yyV)7o<;Ip_1jb(E0Fc*P zjt10}7-zGiMq%|w8;a)=n&@L?X@zHk#PVEc(NwFz-mXgkt>YF8hB@lR%tM9KvvQ-p z=E_m5h&8_69N1sq)ucBEYz{czYz|1eyGq?`4vc{up2kG%#sO{VWfzeFHU|bxBOG4< zHV1HIfk#k00WT@SHFzJ82f_`%QF7J|P(-(fxox#9Z?7JX(zb4+90+N*FzElFqPC*qb9ENYPP9 z4L&Fz)#l7=57TOwo{TU{BXTWXm0Z0(OO!!1xOWN{bnM*PsIb0wSsTUX%ySN;!ERCY zGzj0h)HuohYh-}_Ap|m9^@`)bY9F1WF!EKg6N}~dG@B!Gh)-sB&PgmfIH>fpGq=jiUq?3# z(c7u$ORYbR*EXbmssNIo@0+{&$&-DMJxuL>oq38}MLN0f`{edPH*Mt0{U)El-inoo zfpMnzfdZ)~p3*$ZnVdOGQvH%fRT`c%oX>Y4%kMevy{tnd)ByaCMcWy+KkLAa5Q1xi zck%*EoZ|fhJN{4bi3W?Z2eATSAXTa~NC7nD+O#>5;Qw%9K#sB^%+@U5vvuhqU{S{C z+Vk)FB{6V5AA%78M5UA=&_a$uXO_mg^rR#!3N=6s8fi?T53pDe&Ja@}u9!-fn-=+k zpmI1UYdHW&rS)Fl1DNP;*=TuGWoj~N^pst5;OlJyI0y~eIFlwb)Z&~PI5cVqnmADg zl_KGLA2QTHwgL|ZBgC7CTBXSYG(8uM0$;pDEQRR#wx`u(?1Rxcm zqdk4;GLe7&z9FqK-4n1lpcV>!y*OYk(J^SuC`OV6ZkKPMZhLVujFsp@H3Gm1upX4Q zI-&f46Bs+Bq%K;G8K$~aD(iLw3=V`qTFP%Xj^cHo0tN@HuQFH{k`1p12ToILZ8{5~ z$^@NcF3V0WQxPtQ=AH@f=(1$(#M?Y`{Tz;7A@dew_YA10HgEk)@v7X0u*NQUt5Lss zuwVL`cHNf>XJ8EN7@%e%hYJX5qd974J0{GY6{WH*nrPrTx54DTT0j_}05CX^#e z-4?ypBjY(drq_!DQY(SuJ?>>T`M)j>C@m~B?U`CLeaQ`{u>Ey$pl&rZJ8%HeaFiu* zY534^BpJT;!M?td`Sh?NPwp`lU?nO4{1W$wr-Fau-8lZj#V$+KcDqhwSg9Nfcht`5 zaTNe3koOaufcaOPfcbYg0kd>zTsH3qm;?3`*`IB_v2uK7-=j`P%q*7=Bom-zCl~ol z0|WHE$3pOBs8ZRIpxX=Jxn5d0EORo-2cg+a%7bX+ljo{}P^SI6h}vUs)97Lji$uzT8T?|g_dGf{QsZND~W$Q>J8 zyg$t0C8N0FQZ>wmZ|G>nq)K^=bylUv4#w7>k{n@?#UoL?_2AuXF2W;)h=KJm%PnC0 z$#bI7j`(x|t{a>HhGfmw@LZ~#ADI6GH_&fiM10jsw`GO)KcSU=A}jtpFL0+S?o`E{ zs<=}XcdFt}RotnH--5_@s^U&n+^LE?Rq_9hs`$~~eEhdn1sf~d@4^C)iiEV5fq{Uc zA%KAN|B>ha6+^Qkg3El87PSpuqUk`$c3smwJ|LvQBQcj{_0z*e2<<6!vnm_{;Z)TW z+~?ky?Sro-7{Rn=VhGBpWFJ`K?H&vzZ|}Y$6m$o#?15-Rq-vx9T4n!iF*^z}TX@)~ z3sh`X1b50|B2AVccMOLOeb_#79xx4AE^6_@mt^3Lw;_YlW2UkUzAN|HM^|KICBn>9sPXDw z=ysW<;d)+X*WFd2w_HJhovFZ1hybY{>%M>HJiFThYRRR>Im~i8rMMQUffZSAopU6% z1#^+AsscUTccrqJ%*zY+Ojh*C=O)imW?<&mFdCe#k8^E(cj<5&7s`B8&a|Hd#ZO0v zi(rgA=M0VH4(&@i#DNq^W^x;2HQ~02f6(XjUOmd2QVTWK@?*N8Xgf~Pp+g>7_i%j( z4|VnvS7&v0zkQ0MRBYn!|SV3X_qBX9MSFSP!da=m&) zdR%A=mNhHku(@lQYJYGX}GD#6Yvb# zq8dcY#j{fS;+s$I^35j~{?#Wx0{G+?TP+gER46387&kuoIK3nubs}Se9>6CjwTwoc zay)oRjDS%F@X7m7OAfDna>*N?T>q<24*kt1pJQlU2l(VFULaS(y0D+rA4M%8hz#xl zAl+72@|sY1_WZ$zKp%9wPrTyZF9)kbmz9GMcl&SK&(4@Y$7W>!Xx@VQok-y+q}=jT z3W3}ws1(`9EgM8VhAHF-p^Uq+!Vw@lzEUMM}DjV>T@pBO0PaJ&N9FD z$%_cS`Q&)Fd~#dXUwrZ)foq>U^x7vU0{G;G;5R-w-dCR-sSW1ZCtpGQ&L{W##V23= z>XY;T>XVDYNosi>#>>_P42sjH?swv~qOm$U4JG$h=pS|)BaF#@^~seDu6=UQ-+c0k zfFb!*PmoQ<&wHKRf^S~n2iA$Z$JFX1Yx@%iVo(Z-y&YRUCQV!20{3XgIGQtr%S!O9 zu1ag5DaET?PcJ-)zUoafKnPQ&u4EgM+YMWhuGC+$Xll7Q}OzFw5t5${VEaZeR9 z0rshecUU+z<}3Met@tg`Qe9dfDXheohXr=KRIP-~q;PRYU{S6FHLRuy8w_H=b1oK}uJoe&cn~ z9%eTYP~F~c;p-2A(DXB`e2{fnVHduk!;q-n6HVna?%CAqbdlfEG*Xtw6+qee+-eWm zpy#t0aaXkG%Q3rVOezuUr70?(7x09J0>;FTR2a0;)CXaw{bC5!@|o>~-z0oGd&CX& zJ$CHyBX> zF^~@|k-5-AM}H1!75A(g$9#++emwx)U{4kz?x!74ViZZlhBh z1(L4Dcs8qN25bm|paDXj0#z23PX|cdcux)w9+Q+nSK*x2Kte8x<_t=X!RRcGYKq3T zF(*4lqnX`jDnZ0P{`f+MK8ql1Uw-mNDxZPA0BonSBjS7`3-adP)003MKBuudmQFJqPaHMG6f6&|>(RGnp@Ig;$mDqYnhC z7b%zwEL?S2LwpRE2()uQAkzr*$sf_>6Z5;=ELA<)Wn8wgC#BfQN`<#qGTsP=6#%1GlQ%NP`A=ZNBX)<<0b(nfl<3S2S1 z10)Grm<>dji{Gg&a!y`ZPOB6%pkORZ=3jyLwdm{t;C)>i#_>q1g{X$he70S&+Cv;L zWLD0rF4a8^v2l}JXDYMe%lf{PteAxs53scLV^9^`iB|&T4atSe zNGomYBbhS8wXuj=5rZSI5%~txU8rJIy6Tg8npP+NZ+i??0DXHiJ+szIe?>>W>9;!k zNGVGJk%mu~2(u(mvvJ5q%EKR9i4cI)u3a1I*2|^Q9psF}3Xy{}?(QMWe8m^8Xu=^fG3R7uJfhmO>znsi0zg8c@lyGpbCEN`=t^`j5s6Kv8DS?{ zAvVr**LL(m_-*1d`Qzhf z5)4;dU=6HWEvYr2Gmei?{ACv>E+XcG+!BFZr3*iMnWxK{3&v6n3Z3+QZt>y%^32Z- zqiN_t7XE5CD|W1AKfBS^HB$e zikUrBeVgQ?y0K>K#+slmRr~HKg!h$|1@roJukVoE`pV?AgAEU7u-KDk%$bm-_%tDc43 zy&Io=iv-}46RVbHP{>!FC2P~C16s!J_9vJj`| zMEU%cC0mDUi6NEG-?{ zG_dM!Ohv6BF7jSzNH)AaXRL1UJNL}y4wDb|E9P&03Hix*KSqtjBm{Yq4wV9+b=6qAUK~DE|x0t~*&FvU4XZ0P)*9S#c*T{tVc4 zCoAq`#ht9UlNEQe;!alF#Bc9p#s8A5_|abc+eSGZ0|Wi5sgaZ7ebOtu5GQTr`P~7r!_ZkKi0lw-$}nYHt(cJkV^NMswb--}dmt zbykur(UdC4CS0%bVM~MWWp&|r_Tpswcr%7d*;}pu{Dt=;QLI#QD1zkBqgt6)`6`Fl zOeVu4pjNh@NAhPrr|IR7m`zlg;LoJ$WcRAq*sV`LOf@K;c0D~>=h2)^ zY2x>Vzn{day_hqg^C9FukJfxfhg=r6zAP;pk*$h~(}x2r27{iY2sZoab8r|8DveT` z@jWyOrNUm7GP|i$xce+-)1|hPN4OmJo6}|XGnb%{2)NwV2V=V^BvNzIcD-v1)s6;z zuishj4lbQjC>5)}v)UiopSu?ChFqcqdkg3U8EZa4zy}rKTWmw(c=nUAinE!pLxB@+_NsHQ-#H8ku1OBq-7N zVNmxi2p_K#yq(=aa+6hQnhZ;D?K%Tcn;hSz$Zg5fWLh=@Z%-^+ZlnIOZLr4{q{Lu9oyTN`EO?gzWbcJ zOMQ2#?=H0%C>SarGVmXWM|^kL{+scLBjxC@Q9wMR|DT9Q+`QFKzQ+6u@rXYz{Ji)3 zDMp~`rx=0a|1L(rEEPfqSy+VI8~*bdcW0bzWPc_D zB1!jNuH>xMsR+HqPstoc%zbHLX;!lZq&0`D4<)wxRs=KolS#D`Lh(5qBFa^-Shln0|>zkc@w%{I)%S$926upaA{5?EyL`#`2b1+XHy@ zZ^nP!9++mlwLMUq&++5-K)i%73SfJHB;vR20fUQ^oZq$wSpGF2wC%U;fdGfRW@gXZ z+XLR<_o)ah?65hT;IqO2=#&Z~Y; z5irq8Ru*T?eMxh`Fkn&^55?t`F7W2b$Ib!O0Mhnu8e;p4^^!(+*&g>&3aC7UFdZl^ z!14fZ3|WtR%oR-i2`Y8S#^ILk6^zU9x(hi zJn$<-;E&@G&wm^q2v_aTHf?}-Z#n#Jc;H(+!d00~6*~I)M=8!(ZKDkfMGaCc&)$QU zUT?OKmb48UQV7qikKZq0rx3?NTIMYGlhoNg=2MeXcYzW`l>maq68#h;w1;S)QVt|R zRQf4s`3*ngC>q=sqa`MCb8Dqld0#*GA z5h%#2&xPW+zepnlzIM4(e=pMnQnF#Yey7ECxmCF{fO}@wt2Sig$(M}4Q_LYoK?IFO z43eE}e?MvOz+T&f5J!=C0z3g)E~BdOb13|&LxZ8+16PbG?~@W+^wjgWJ6Nn_mq06D z`~^i8v>0uZoWdV*^eZCTrZ&OIK&4?~6EjI%GXz>uZe|A#e@RD-MqqlxaHIhzVt^)Z zA^Wo7TeLF|;lRD=@-5U_6fBv!jz>V2d;EDkBLA0ogzw_W&G(oEzr`akrl^EV?L0hJ z39dpfwm+=|rLl_jTWHqJP(T!^#2n8Qc8{OULGBDX*0yS&j{)KlbzkEVEWgAf#)f#S zsNYgScxis>@@iT$a_NLI=)im41uBlZkM*kR3#hp{g zS*Y>X<$;)0mOh+wV6(?bu7ot+VHl`dj6w8^oUBQG={k_Fg&XjJhoI@8rV-zQu3%N8 zauFjfHg1lH`OoJE{4eJtURbrk2)aj8$fjvU1;#SVBwA-Y9TJ6ZCGvsV$XWp)13Kcm zREYEYW94N;-yu#K3&~y25zKoVgh7bulZlZBP{yEQ!1Oy*0paJsbQ{VlEit61*FQOHi2~v=QQp)THHr`^-)&7LKHfks5LUa z$(jkMK-;@k5L^+kft&{#XDjF-3?AB_T8)Pm4_=zJ7$2T#Hb5yP5oA{S+IIM2MajVO zpyDaXM}md^F7$PYFCH|IPY)FOh?0s36wxIKd_AWy>gGdUD622HF?F3EBYv5805VvI zciDO+P9XY<;#ewx;W8NFfUhDCp(a?e8cnP63C(ZA1N%@(n;!tB_N{!2>)`=tr3WwY z8(o!b@d3jF0f6BF?wjF(T}wvwAPm6pz^u>)^3Cu-BNdgJeqRwp`pLQR$j$J8)akzC zu|9Wv1z>pKfMj8R*D$&&1~5F3ZUy5%HMhF4d_iAKBm53lXf$wl7!@!)u;h59U+P}3 zHI5H&@L((|DF84$U}VXJ)8xe$r@PG^4|J5_%$?MO(bXjA#*Vqkt$yyr^|=@0qP53m z9N)4vx@sX`BO?SYpLHJET7cCKYlHPl1(FV^0`&|BCoEvs)HL^#bf*S1u3ZqI04 z$#J~DOt_$%#&=UV3E>pFN5)~hAa}3W%}p$xv>1C?{t`Khz{$&Kkwynw+b!B?XFW@% z!QW_XJ?n(tH}%cF4<;_A;J`F9^zbWwC{HBUY}Y&u;aCq9s1Wfv!4osd`xjWUR;Oz! ztGJdc6)3DTt5*(8su~9?7>HZ2Lt%6A%^-UYHAG@HkM$DV3ZOjT*zq32)~a{hqsO?nGSJPL%o$$&1S3?px2#ELxILm?CvIPD%TU7$ zm!pmog(JM`N%>J+XnVTd_!S>Ce?_0~taAU>;IuySFl|0=^!}8_#rvwGDegHY7uI+L z{e^Xx!(PqEVZIqN+kQwD4YeNhF8&XfW^wR*@QkY~iwSE|L-`!-G!CCZMTT_`*dO7z zG%hi_b=a0Jla}D}msk(f!jPyR|IzTkZDH}Z^AUd}EdD$nai=Tpbj6*nxYHGPy5de( z-06xtUGdj)*LS+&PFLLNivMG};zw`w?*}AUX&HVOkZ9OEi@PQX82=L_0lMqw|1~eQ zJ_Lmhv8`>FTyiBd-G8wVQICA0N1+awDb&*94Y9lX7Tz3QEAYKeXYW88xXh}_c^mzP zv|wP|`N$G|x3l9QgNqV~r<#+dK(GTKbwKV#>6Z{MsDY+6XT&xpQ{K5A;`^RJOzJ3# zdXy!IH7h8UO^s}5w>kiOOb>z|$j>>E)J=$7#Rv`ZFsIp5XdNItHjJd8F;&;LJ8E>P z@9UO2dujOTGU=@}b7xekt$lYddhbkp^TI>aykp5207*dlh2mF|fE&;Mh$Ikm(wOYL ztiKr>W75@a!p|t0ZzF&Q-%Sg=a(vvl;0HPD#Oj!5Ve=hH03ARQh=-o8cKePbK+giq ze1XpC9N;6n4!fYk?%rkqQ*qQ9hRIYu&#Bn85E3ffeX%_}xWl?xLma8ETZ zF1(ZcRO^^os1ar^DgK50Ks3EV!>e?KK~`*ZG2_8*f3{{MNh{}WdE?GyLkw94%+7C`y| zR=N8>VwGRN)xT$z|8eC9V3kkY5cfCYae7>Edc#_fa_!a=Ha*P~O?~iiXC6u}3lfNq z^36V?SxtC7Xf9!dEvzLfBNyikEV%7?@W>+gVd6rCDrl!+xU^>oMcLXEOFm^_?Tj0K z#`|qBJjpahZDmN|rsGFW&=>6lGubpA_fL#!ht1U$a8{=dz^0rDXfq9Yrw*+}P;7)F zA`!%+*=2<*i6pi#qeGmOK>1CoPG!!+9lFq<7EsDPJ`0QB5S<{h=d7HO8i>j~mW$_< z9rQ@z!!$(;FToh3{%ntL9&Q-N3S6_}5}#(@7j3m?IhQd`8TdFr$fGP{wKrXg(eZ68 zS`@r%mVY77i;Y>^LGz25I)*L^(o9KDCDP^e-N7xA7T9Dm4TF&NA#BtyJcK&4TZFlk zZcoCal`6?Xx>7*+ci!GNE^wwL*6GFXe#C5HDi@oHMyn;{@(%QBTDFmq=r!OU(#wT} zfeG$5d@fQs=*WJ`R*$bwVSIZas(3;3CS`RTFLr*>uJQUejGn+T>4zY_QHekBQHvO)q`)tQ5RG&DMe z^C3G`bw3_G_C3-Qe`ZsVu$M$$1I`nicg~n7>8k^<%0Dbr0W(!17>a%-XxyJR9W$h^ zkI%giJpvwP;-8o|2rIm&P|dHU$bcgbr(k54rL~DL_D0XcZX5F9D{H~`W2uPQSY{%e z3R)(7-n1XleZTv-91pf|`caYGM(<_r6v0h>UO!HDx*%0r zeG`0Xxj4)26hKX0)=Mr{vpx&8IE@iSd=>B%D{#rA>4WU&h00uI6QInf#*8h3+_oce z?Jk0PeIPyVZ(^V?@^#WH=NT1pQg}InYwAkHkP2qn2x(Aem$t?-G1EHc!NmrUshLl4 z14wI}`5s_XRjyAAyEM5O^p!!jgJC4#tmHbhKY#rITFMGl|6T?g41bmFXuqyROKgWX zRnTaV0)QRx_&at$Ev7+(Veia52?o? zZQ=%D9ipa7oC%WTT3Y5^S)t+wfK2gw(BFT2HzFDCYU*2-KVF(jt4cejTPDWYYnKCeP=O1DT0TzXHYh`T;M*l69%V*6kQL+g4YO~%WJ>z9SB7Vo zH6XL(orY7YE)@IFF$ao1ve)Hm9?Q5J(G*gQ$qi;7DV9HZxAPjaZ@bG)3P9_VE}~d5 zV0Z9;N*V-VjB2<36|=vR3Bc@IxV-bQfauZ`ZNlNgjFGQhzQOG0+g@Y#1-@eTWl32# zP+p^6WA>R*iD7p1S<){ZK5`;aRr&e}Zom49*;n^^ZtCGwpTE1R26S8_XF+;{*?;{F zvu{os^g{7te?kR|vcxrJf28kOAoO6%x+;pO5`3Z@kHegw-!GW`g*H=MtZ72YnjAkm z3Auw+!53B7WMIwnfel62QFI`D8gR8>$C8+~A25r>r#C?AL^#%P zkC;cW{2cN$k`WJAZskNgTo-ZzI*r;QCkWZ+K|m@nF|E4t<49gm=&u9;Ot}XQi&C7L zUYafb5SALSE;VA9%Pw^Ulj6@A8>#PC`o6+wy^QnDL*`Cn!l8E}J(Br?$&IPbiQFT}U3JWHYNA9l7~9uJ2`O#uK613LS4jJ#UM-ItHb;ljilG&Dp{$ z;7|oZPiT(bJ%2_YFi*+%&SUpQG3Hxi^=Y>%z~(gqk9!RD1Qq&1HiI$~O${kv(<{{h z*Yy!z4qmpD!LOM8zCBG#C+y_CX64fCPkTTptu8`~RG01v*w6{_@*_ir{e!;IFCLkcaW&fHBNW#b`6g_~>%@_7 z7CFgtoCVllDf`xV3embusG(VvBm&bEQN(i2@XqM-Bq=3tTOFou5 z=>)fkuSqpNj|=!1l9uPlFLQ~Kzw-`(`jdDOXEJP`MSr9|*JEUFrw;lhD=IfnJJH%h z>?{2^FP;?J_I;^EAH)Ms!Z2SM-$dcIeMgs#l)(1mhngyc5Oen*+t1cLh)K(SSun$DLLzL%YJVe?Rx;rLros$qHCg{gb0+|8AS$uCK(7=! zSOhKe0H&l+pOFbbFd&z7fOz>vH@Y+4`D!53GIG4-^_!*$p{GQ}5#SFP))WtUmdb*+O#nJt0QS zY_B*YX~nwA0y#}l8HSu9jaEg{4?M^_H#nSojDKF-!ecOdVlF->v6gzuOhjeeVtH>K z0r-=Y!tu(pft9h)y7>sdp_D0XINyj9!%LH6Wb-#gK;B|Ir&OQvnwRzuYIqWRin6Dk zQGzyKy=6(TwJ>Ngsy*B{v)}|+(Akd8GSM@JTxYJQD0?ySKqobpAI?d2pjPy0rhSg_B#20f%Lnp;7 zEnBA32{XOu_1sFPRxCAm$43>hQ%NfYLs}O7fUElxhJgL}?->H{f4~rU{)U2O+c-b@ z;~DxiUW3AmEBLeI34$Ypqc#V(bG;>wJyfEMjgP@nM0KYZVT>} z;$EWV!Hc>iYHH^)F(`XqqjpOfEnr8+@h~Fw)Y2XvYVSq}T!aU{>UMhR#?Qo^m0Gr% zGLA`?3A4EXj<|BDLG)Tlw_vj)BSRkv04gxp`Y>+abmuA4p6>S3WzHCm_)*O^c$&WV zA&XSVh3d->_j1gR+`^irH_Hed(97$~S>gnkx{dvoTCg?B6{9uULq| z-CWS#w20udD+pOQM_?rr6ZaQIoxLbGTJ_P&51^o#qsfL^G2S4Wy0o-4(sHIO+Tcnr zssmd9nI&v99qk=HSc?z7%zlQn8oMRLOt!({F=7o`p zdJ&dkT3obE-+!{see>2oH)?PHbpN(d``zdK-~K882Ta57-u}O78a~TAbZR9H}ileQLe3New6!JP1R=M#6UBPe29f)H*rTGBh>O6&N!XJs^iJB%cUVi#sA?c0bo z)c{$8TFEKI&pl}%J|^up_VtQOCGTlqENB6~UrE`&bzw;cc-AjxTSDb_M zGzAOMPBzue*7T!dViq(Ss$sTFjM5RA=i!;Ot{zC;C)_hsen#awO(K=%R_1rYNZ|G~ zPy*?#cIvh9G+(yQjb0!)&RQqTU9WU!eOu{%^!t_WV!%o_^3PVf&-y8@Yr5FVUst-{ zSD^+%r86#OBE4@~OeH8CxwX>wOfe?*zC4rQmsVQhk@YOMxaK3RPD<< zA}s~#YwdWR$dsQQ9`7Vz;+s#%7cY2k@g>M76;lN|r28_MXG9`Jj8n3!D-S${6eWbO z@#81I;m60BrN-kSJm33ZRbYTBAoYYd&DS|!2y0$TLpge7suISW2g_&F ziHhe$v^nw&w??|v_TP3>65x4tE4gP6?+9pV@gj4+(+N=SwHHqvcM zcHO9Wt_zv(?%BIvK}`aHzOR!VHl86oVv8(FLfLNWwXX~ep!rbwTQV$V9|7p&=P$t) zs;)P>b-0pp`$2jRRHkFApuaqtiUMZwYGWBWS*;I!GK!was~|g*KB%rvs2Ncy z>mtjlDW`!c>qjOSr2cq&&oXm^!#nTaEOZ0N<6=Kw=mwC-e_QDO{4W-|t@%Ixy3h^u&n$FfDw>d) zh!VBZiv|#2lU*Bpy=u{9(JJjVl?qMsdq`FZ1LXjA_+;nL7rMuCI$vo^P>`XUl3bU&do;f0}tVlAlUY zAwPpwMOHi)i&6=+kzDBQQ+Z9IJ)`2C=j}g3kJEwLDYEi?>aF>_x1Z0znygZQ@;S_E zRWI<6_y_cO$swRy>-0i-YWBBoE#x7*%i67Ot>e!#@K@~TT~JA%KcH%aZ{_!?{o1Y7 zQ?kYQrCZyO#0oc2_*=J@{ad#djY>`TFLi5^{+({E&Og?zrTcffwfR4EYvumYZf&pF z9M_NC+E2gh)`r~f)@J{&cWc$1Zg*?h0NvW&ztXKubZ+Eg`^(+h+oIxc`-XocD*oIz zyweo_OWoQ#O>w6w?li^yPbk@aMhr=Jn&M7V+-VBsOwOFIYesjP;!aci6<*JsruZ?7 zc&8}3(i;%5sWV|W$nCC5-hM9 zhBWuF3Y9gsOcPWYY3Y-1yU7kZ35}tW%eo8bT`jyYYvT9rhh**EGnCsVx2S5Z>#gfh z)1;VAWgK9n2KD(B7fP zZ9$=R0pZ54DnEK{{a`8}Ortddgo`&6nSf4g-iKK)dSE7{IIVb{XOrbW*zLVJ?LW7S zZ{MoFZy8_Ts&Aijcf0Ox*Z;lS^`D3e+&=aH&8Wab7QDRcsDRr)5*4_9tA8&la90QT zKVAnINkKRa2r_Ihe9|8Qc?8G`h z9WV)IYH!VB=5c`D@75qmr)RFQpk}RF08c-gxjzv@=Q>bg-szmTihjM32)z@VA!AD|o(JD);-{QaSv0OXUXm-z}A&eZN%h`iD#9 z@V{Fsm%hDJ&h_)9a_U=4ce}0qGoEHm_1L>XX{DI z*(wuD6t+wWJ2j%tAHf8tLyS^MtHGe?i1Zk`T2nw)&(Elaq9eQsbxS+(B#ljH+qqS< zhV1D>iqB`wR!X&Be6^9ZB7M6VJy~NpnFU5v#thI=B#q}`F2oNe3W%GL7D$mOkt^tD zeF>rI%er=5xAh;oc++m?@mB*2V5o_k;@1p3C6 zQ58|{N`*t@s06FGNWaUs*|bU1p#F0BQgdB-7+w&4wwl%PWtsk=21%E%X9w`)u+BjU zXD(cEu~?M2|R(sp(l)qC9v#{LvfsLfi-nw^-&6xp7Xr?VE8Qi%;2 zJr34A3-o2)4zPRjz)6ZNC{)#KuD$vcys$CBvE-BDX%aM$F?1nNtws!=*E`3h-z28L zn72X|({Zamc-(<#leKM6-2DjRVnD&7^h&hmA@wK_Qxm8ALs~!Xg(wv0`FPR2l=9JF zAo&~W_Pi@&njr{dyX3q+qu*wFb&+9XpI9+g_w<(+pfj-1O_82#PPD%!1eDgV69O** z2?6R>qzq}xF%ovNn}h)Abwa>g=wdhLTSDOB?Sz1n(!xMB(3WlXwDe6vfc@8mfb{nX zfr8|B=x7;!qgBL_ML4Y4FLs&{5PnGrkf?&$i;uFerQv;Glo&|IIBB&yA)7}+olCR8 zt=G{A*Y|Hj6qlMPe8giRd|bb#%jh^GSf%yiL!uxl&!jW3WB^ZNDu=erpo6ve>lFr( za9l$Q|C)ZyAel5o0Xjx;lBOfnfaE;&|&tQ3V1btE2 zD9WJRC^ttcJeyPYC^R5&H>5*Gj$q0iQJ5*LLzhm4*_Lj zmDac}`c_#O<YXH&bP|K3h{)6aLxd8>4}?IMt; ze4#PCM#VF+s7BMlbY!W4k2##yM6zbXwMo$gY5A;~$lth3PeLTx&4tN}r!Zd$Lh%!Rh^ z8(P1#WUfuJb1Q*`x>}ev9jSi}m%TaCS5?2es?C_VyeZgmFIoN*u(mxd=R4PT?dySa zG#7I{E;d{qehRi$1GTt)S{6?aAiT(+>@ruh-;L{keum(?lkzNUd@}TdJJ*&*P*&MV zn%j87f#0Om%DZXU+A>Fr7aXbwr)njwQ>#v&CP%gHoRi8V{p$H@5A%i$=@XZp@a2#P4nKck2Jt;j8tA2o&ZYd;Pp|i6RsA7F##)skJ3_0 zBJ(Lj#{9uhML)-EuL+4|`)F`l_Zx;={R)8L-sGMWbfHZ=%uY{mIh53j z9G00;xBUo+3TQ~J1iF5hR=>t@f81VLoa~T_Sa<#f!|m{e`4Nt5qdMa+Q30$Q47V7G z`fIaheghQb2cG9}-@b_WDwS@FioYKf_ybY#=TU(>O>w6w?li@nruYf8=uT5yr;hJ5 z#lMan-)V|FO+hwN9{$)$gaD*=?HYSzz5E9w<#(FmPE*`zivNVB_zy${7#Zk(-!i^$ z-RXH96-f9eq5?P1|DTze)GP)B&nLb#H6?1kf86dd@kEz~S;Zk(5cS;?Bcj~Ft!4Rh z-fC1k=4>*sfo5v3pyzCFBbEFOW4s<15_AW&LK7?`#My5Yih5gGIGjyh)v;LU8`uFs zj~O!o_4PxtLI4ftts%^s00W`|Av(|CE-d?1*tu$tS1Ok9BTS^;@oY`UyI3u}lEdbe{4!P#KQodcm6ow!kv3VTK5MQ%<3t@!xaPVJBPaI;ooo3cgBeKTPwf1<6Y`h%sP5h(lYBbP2DjaN&0qqRIR5yjrqPnH*)PArdd znYFd0NYsO$ej?tb-UYULHAXC|eZGSA^!~%4ewmk?kXlLf*w%;y=})^5u|BY)Kbd2* z?mNVAHQR@77;5yNMRFy)&uX1Gj`xMnTsfb%t2)3Umpmy|_~2!CKRl$^E6*N;s>YDe z%BGQ))`U|$*D5Jp0ZG*NVVFxtUFt&nej`1yJK>k3+Gi-NvA#62q8V#Vp5|uo01E0@ z)qNE9VzfsbM!-19dhI4fTn~{&X-o=(MidRKqGAtB>*fJ}v0RI*#E;gUz^jSl)nji` zx4qZtBcs_YO(K~9rq|;5I>;EMa+oa`pIW%~l-Ly6@)OT-rw_yH#luy_+6(ObHJM3) z?XVe<0flmp(X2lCj|;gP3*_M-xXb-R(oP;>FJ6f$>V~Jo9MCQ!mp#%jl*cJ zz`!RhzA5w{Z`0q#fZv?D33uS>|MbsDSwc>pW2g zoDQWWyjxKLTh?Eq0wIE(Xh=Gt*HHnqU3nifFr;Sb{Z72EQ32pKu>mJq#udcxq5^)u zLx&C3dF~XSa*Qmg_F5x~}6zI>R0^HY8 zfq*)3_n2CpZCvDM?RQGs@hqd7yktOU>Ms;mZ@QoPFb^um+qt7M*@ZGtj2 z^XFM@fZ)LEZ@~d(D!5z00Y(jaO-HQ9qBXj=f&<)omc%1v6RlsV0=ij$KoxL;_(~N> z|2b8l?RQjx_s@+Tp4K5i@-bk$|H{)f3LBKnJk!qXLAP*+NG6tw~}`J`4b7d#s>d{(tPf zbyU@9qqmQA=cY?Qq`OnPJEc=vK)O>xK)SnAK+2*^x*Mdsy9M42I`cR)o^zh}ah~^_ z^ZW7NtmU}(!nJQ*pM787>uSeqTO-QJDmu|)aI}`{HCX>-NO?fzo^aEXe3moq0t*U* zmwK~A<6N4vRW)22`)+LTRQ-;C6=S^6s8aJ10z}FNeowg+ zf_nLJ+PLp+v^(;z(QcFP(eC!&qTNowXty;cfateqH_1Pu-GNic6~9Hhv+IG;Zl?vR z|2@&}2S1N?^IhwAxNSYIx~q0;)Bi(A{ssMK)o$z0e-)BzQhgJW+c~A>lkervp>Q&f zWeHU9jYeytITX|2kovb6woL=o0voq#ft3GDEzmd$r~QJb{*C2ced4n_BRRL1fjv~+ zkytL!NFH-%BUi!Z9;%w~zvukhdgcTRkeem_Oiz&NZe>y>%p%25}waA?#ZTUY^T*f*<0LM(a^a zV80rCyk74T%Ik|}hfU$UeY?8&X?S+Y_mh(6GitMJQ#2ni z2$5oqqly}3V>Amc5ytsdPS~%}mxMjJwL<*)s_WFKOG`v6uIT(i3I~xwet{AdUf{ z>`52%nf(yCP7Cvv{g4}Wv)uT(KnP+;rim4<-$pwTcw=DQ5U+A6NjD!2cwWw4a!($HNT!hKVc3j&qo+|!YFO7eQeJ0&@hzn0yzEVHz}i@2^iqB^;pojv`pKB<;ClPs@S)$b1|mx+z8)& z$GHSXLsw!Hyi8Ki~C`5KP+xz zNB6_x2N?N&Sp2KHvio6?m>UByiUTNnJzfn`GNBZ$Ab)3H8_kjvsgF(i@2+;=4~zR@ zaX&2nO~c}^*POrX7hqvvX8V(xTueS=%<%8>3*5c_|J}7_Dw{D2W)<|jAuR@xiZ%&r zlQv%&a*K#0990oA9RJ(#W2Ma3xfRIFe&HtI2xbOEwwHAW=0>QS2^ ze6;J30rE%KA?dz?+}(QlqxG>MZMLq|S6_}^5?4_3Pzj)!>jgNyc@`K|Tw?H09XAxh zC_>FhrG>H#L%q`qJoYo0u2yYV&Gh3#%0o`uAda4F#faKi8*>BT*GYn6O@)KJZj0_Q2U}NB_iizUI8dK#cojWFHHwo*vrcWP5SRLzEz%AHDlOG? z@@b;!#hN8()H*6 z-^gDcPO4N~y$hPruOAd<+lSRoBGp@fn5ZhvepMw90CQxS?VCBMCvGN>s-8)8L>_@t z!K`hfy25fne1UoqbT#Dh@08Ksea?T53;cMVei;||!~5KytNU~HKj~ck8$f|SeBS>% zL4oEz@Qd4Kx%1!Q6uA4T{%xSZw`MtFz_(`kv`HV6(h$Eva_Uvd83G zvs}&Td$U}c__kRt_`O+vII+#P`SWHu{9UuW@3&^T3b0we1wQS3+bkEG?lBWavy=Q& zv-~1X5ZEk-l>eISRK#-IEce3^`ra(x{k>T(_gl046|h;3W4BuxWfH^wfb;aWSuPv< z!p3tadx9I-EdT6Xk-0XS6~_GWNg5`wS)LjAoEO+Em%eS58yTmn%1NYvm&$jGF6Kr}c$}Z(JObGvM)Jz_z{CeO%^j5Z6Rq z>;=QLaEX6*nh2Upu?~!CMr;4@22rd*RSX z*XPg+dm`-ZZ1ncmg{%jM+AH$P3BRAqlaEOgsaQA3q)eGNJm5_KjQBuW+#PQ3%@abF zM9ETa`)~b$h;RJ?%Desm*qB_*O2?o216V)y2ax~R9~k|uKXB+B)orgpNuS{iZ6aTd z-A{xh1HXt7GQkNxtn?UA-nZ+H&y_-QFc>n3>*IO1J@KsVBO%y&Y-T&3^Li5HC@ zPLFkjY>M<_Mjd&Mw|qQVB%g82m_{TA0ofTn6lqCvu*TTl|6KA2alV=TP^!Tv|RGXX!+|nV6@yH7%j(+ zP@2$7+>t0Zr1z6$=yi+e8xN?^r=JGAiC{T)pZ`##l?hrhLmrVaEOV-EHnW9>6X0q#8ifYwWE zWag}ikt0iB3BZI6SR4?Z9-nPe9~c|ll`s=O_4=|T z%Ahj$6N`|lxyT!R$;8H~O^KIDVQygy(E2wivI}7J;qAiCt$_SW=gv`PZ zVw;F>)q$RQVBLVNiv5)kL0-+9QXn6Y{(E&mvtZTet~%g6W4{2Qy~5M4g#5N!y}<_j zfsys~^}&@?rCv<&s&m>fR*NKy-0zkP(QMF`uwe(M7}a8(-)dH%aNUW9gja z1(asHF4!Q*p`AUz^X52$DNT_>9#g_3^g$Iy^Ag}iVatl(Zowy~;ZuA?&6dTnh1_E= z4CbNk+@pKqu=9SeM;H48;A}1Fg?N>Dh5lwNh+{2`ZtY?fG-K(OBDm`b9^$1C8APEn zO)iaJ2WZXtu@gNu8&~G?=-%5kof^ zlO0O47)85bATKrG3$ZD#9Nk-8uAlY)Iy0fFIMZ%YZ>FB z^P&Jw@?7$kZ44QH5qT7e!=PZ~0?NuldhG#kV`T*gxM#d%osq=Y+oP!{u`wuhev7@D z^On`enbpf;qqK6!JWKWCH@)t?NkA#^P_ zOLhFF6nOkiDM087OqTnZ-YNx751#&(EN{C@mVY5R!0>F4Mu50rdep-LFGGTkAVCyk zq_C^BTV~i*2M!QPuCgGW8^y(8LsB8tfn}tSMinUpVL784W%GT^^+gP7WugFg3JP9>F zL~6S7Vy9?jVfS3Td<1Tfwg6;!C8b>I7}RT-KzQ+HT5ir7}8flO>Vz^q%$ZdgYDm@6VUjk z6R3DtFVzMo>=jF;kf|3F9M3ABY?J+TNCLK%)DL4W5CO6RRO^bYIHnGOrUHCUCN$n7)hy7iD`0#eh zms;k*EAc``pUkalOFrd)-GG;=#n^nwX^7`Cp+}m>> zRn1(wqRW#~ql6m*P#rv^Ik{=?UB*ZXAqt!2Yw;JKpX7S+=Bpg@zaOA@PwW(Yl=*wJ zyxw5$6|h;3zFv1h4s4cZSwk$GKG2j>#soIY^KP5v8h6cdB+;Q(r+xEN(2^3`2e-{~ z1kJpr;=?U7`oz9cqi@af>?diCRx4R*z-GC$CnGOmn31!qnoUz1;61Qe9@=X;Lw9&# zbJV44SBs@1Jr8V_r=D6ph8xF?y_&a%1UAbH#;qI@AXS@DxUr&PPIj_jbY(xSE>5_W z;b|V_`3~$1wU&-$?YIr-eCdw6dZ23I%vG0ogj5wjo4ov{Lf&)SvUZI*wHLD@>4EXO ziYvt|*XE^BHALL_V&j2@4a-?UB$a*r1FrT?0${VeW-Tl)cmUaCj4gP1WP%!tgBf>W9rHn*a$*Z3z-ssy*{CvG498H?U+H;4`|S7hUj*}FJ>pZ)5fP)}x= zP7f!OEneiBF_-AXI03TW5@$I$-oMr|k`LW88WDP4T8ZDx14nHx@2uC?VX76&!k!)v=6mT8ur0}{ABN>=lxI^Z zy*pR+Lmp3GBx-pZTwZK(gHdaVw-mR`D1y6 zib*|=+3gWoH}lzTH0{QKtaDw~x?a^?co8-HgK3ojxAf)K5sNZz!>!rab>t;JUk{nO zglp#7PrhG$@_56Qq(w>vn=+uj;2g$jl9`91PB8$eFl(!=2kotJ2{@<1K~R={e_Y|) zPWo|C{4yZ$A1#W%1rWF&6!(MTHfVM~DDDTv{h+uX6!(MTeo)*Giu*xvKPdi(42r*k z0sO!MfwGLGjI64R4!sjA8!H17BRxCtKNAkV8;xP&@=2rN_D`9zB!-=nFHG1uyA>@;nU+P~*nRuyZ?H@#`skO77k~)#tHV z>wIY72x2o{s0`9Kc&idvF5m8JR@phIy57__UpWgfeiG)P_JoD&>Z~KL>h;L_YR{5; zsYia9(lqbsW>ammBpFv8VM&_15|?}pCr8EPrGw|@q40j0{j-vCqZLnpZD}IiyI>ui z(XV+?vs}TBeX6WM#UFQkB`Xdcb*<1k%j9~?mAcCDjIqXu-dYtRW)#02wAQrza6RQ5 z=fSjVmoWP&gT*P&rC4$320|V zPn~9Y73oQtbp5;6!VU|^b&zX~;(Sg`WP{hqtluK&L@S6*`9e%j;@!puJ`%!7shEph z=YfTvQS+-vE~-UXyL4bZuOdqMY_C5ww67j1vp6@XD2*$rAWb+eldhODSMUjZyNR4$ zFB>iIxlgXO3fbbMf5E4v{j6my)mi`NprMzmY9Fl&quvlaF>}<0GBf(ZIxw{rENF*+ zygzB@7s_d4G9!jx0D_OvACPfy;C(=rjfy59egwi3lG8-(hdCMR9DI#f8$84IpBe#a+VJqltyOnV7f5MtJGjh{45`@Fsy{3%{Nf} zkf%c<3VPLPdo-Le@lka8VyBzKWe;c9!p`X|6vaN5cR&>R>!+iQ@_Rh52n3(lw4biq z&WU(TT2^Vqp+mW_aq&B9LrYQMC^%NA4}eb(K3WEg$_X8gcrG5r<)4#vz1-hFSO~Vdh|lETF8XEeyX#e6si^$#KOQB4=29 z52w|QS$p!zFn$27HL3fBy9)@!byz$2hiWm(F2cy{<(TI|i;VdV$lN>rV52-(Q4Fg{ zMyN?_?Sn!X#{l%w;;X>_u{)aN5x;y*>8BzL_X7$Qncd5C+r$Ar z@KWA@1!rQugfV+U4Pt(oJD;M$EGYM8pXlq+!6IjM#kaIxU--T##Tc@(6Hu%%PRk}XG3y!8*Xhrm6?=hiTD1e=UUhvIWiNOzAXC;AL2MdkMT-G(| z<;@Hw^?qU<`B6p!;xY5-0~#|nFwUjMS9)K37&I=u5<6cSK;kFOM}x8Z!Ni(N>~l&m zHNNbn;sU77ElnKjzUxmMVJgB;&y~xww5EfP3q>WP=m!g1 zIh5Z;RSjsoa3?Qke4xD(sue_(NUi-Am1bT)X*MI!ry3KSSZDk)izVI?c4a2Ds#;oWwV#SWF3TbM_-|I=hfj z2T4gHDY>MEw8UfKbN48GnaWZ}9&0O76Ne0j$B7_AMFse`yC9z=w7!f=JQH|=cBQL= zmSJoi4UO?io#RvP?;rphZvQhV$mkfOny#bR=~s9Qk?!1apL`x(flvg~f!iU1lsOS1 z`WP{TOo>)NFdUb@jxr>4oJXuk#}A?&kJL=&Zd0pp*zn$08bEa9xWxqCxh7DvK%kXv zzhuDiI330PTA1bwje{@6mt+d;4A=oX1Gw6+tc!iixO}FUddc<)u*8-!YxH52Cb^%P z<3OWg8sXJohgphCzw!Jb7J`QSGypjpg5e*3v1Ja&B* zYYEzIX}~+z2ib(+C7&p=KIG~y-E5ywQeFols-!Qhe%)@9X{!#XuLKliE2yWh>%tMo z^UqO8+_X%Rfo%^D(dSH|oP_A>F^?#cN*^$2vgjASNfolEv!XS?LkSu(8jg!mRJ=|+2^0~H6qrv@_oefOVve!7XQCZQz+G4pW-5j8_}Z!#wXw6Kh{UZx8TfTxFNwDg!f zLVDpU0oSiY+|^@(I3;SUHQ<$|qRkYqby??c1=*!5(TL~HL|bs;t!goiI#;EiJq z2LDQoRuG9;=iHv0-ATIoh<+i(ZEB#j&9~zNFg39AfB>U5f%Cx$kGIRogJc7^;Y}Tx z&&Hr1;!-~4LN7RrRYr41 z4ijCkg38f(ulx&9mVI%|V}@MQAcC59I+*RdcAG9jM;9XkmJvqN9hkT$9Ki^Dd)i^ z8!~bN^a=e4<=4{VGm+nGutQ)A3zPRy(F$Z2_7^re2}7kSi%-x-pC^+GnweK>aEUxs z5jj(FiL~{r-X0C!i6v2+;^RLGziGR6+_4prPbOVsqo3JD2U9KXy4+P+*}B>Tb6T&N z)@Sh8>L_%c5f%@GM`%r2BiZLWW_RB*P1nHug5k?gzq6e2TWBEcKMf7kDt`1MCd6zy*=tbq4VIRvXKFdr59P1AbUS zmVuMrhas9l1X0kaz|H`vz`pPwIs;bY1p>{QLdM-HYDAmlq^+$I;t?;H5+i}308(Qj zsv%fu;2nO2WDq4^l&vr&b4->R!1q#8O_7o!R$c*qK*_Rtkah3V6 zo6rMip{ysAr(1!c0exU-pp@)3G{B7~jk(xbIt}*$u^Rj~G{9yp42L;UQPgO{Tc2ou z7aEAVcAKe92r~kP2H37T&fK^Ym$#n*Lj%TNK=mEjIjf!PyEnTA=zIr`_1#$ffT02B znfe53U8|=j0nOOJ&_Ld8XaGkOL3B@7Ze@Hb?6DWmdTN;QVXKYxKpLXRlq_bwcG#yw zVb2##Iww$?Wy{-VW`nb1`X08i6}=)?dO)UU$ca;@+Y<77Xn_06tvLYe&*lJ!|I{4t z?#>)A@)vVJ!M|n>IQh9bU^Qni^{?gt%RiX|L~qRj#T}6)auX}F6au=wp#jLvw4ci5 ztNM(uy5vuLvQNoZi1Tb^8ON@dbqhB+Gc)y(0ZD>IDA86s-;hP+C4W4bbRv4=W`kad4pkQkyJ z@X{9P!^8^RN10JP(v9D_fKo)H6wXI{;ODr1)C>N&F7*G7$@G(T@he!s{kXUv7x&}h zeq7v-i~DhLKQ8Xa#r?S8_PQSzz>3-ZxcHwuF8<00{IWcNje(x=Pmn-rLKt-}5E2;s zJBkB$um8{8X|~x6^CA0d6w#PlReWLpAmN(HzJuG&yAPTCF`{uPWU1=)^UMxxsa}p% zHC&7G4(u9TpAM2tki`tL50#*uO7c^R#j-bcvgSUJ5B+IUAnC!Sy|h8XC0<>#SGIv% zBwj(m<1st6_vxO9)dSR|85W_IpW8l&n{Qc{sFDk(_eHCTBwVY{)?n^dnm zpV=xIORG_*zg#$SY(83|QLnd{+oSQ$a;nZ?wPf1$WM|5AZZ4x)G?akLV_}IR@wo}N zdv3w`*2hCkTJ29?Y?e2wHrXs^KDn>%)LtSH@S64TcnqE#O&nrw)9KWD9G*|=k}x`20eKXud~OYNt-{+@Tp9>brTjkf z(Pv7Y&oy&YTVr}30eA)rpkMTW%S)*%F+N*)bZMAiXwQnw{Kg_cSBj}5pxB7uo2|vMYQTuC^ zqASY$eK&K#KC@Ej{)DNZvD{XDOEefKFg@C;fed&a>wJ{=1!_Y1%7*ejmRVc`8S%pV z0>O;0*Lv1y){4K%UPAmf^Z$Ahf4Nq0cT#>18~k`8e_229hxfTZnfE92|63>XugrqU zuYLjdhZFPP2`z}s5>^ibp@jh&5D>$^<)`||_lkzkYz=Hot?f*$ENShW?55S%Ef-ml zudNz(8!|mvpD%9k!vDts)2F{t3*VkM>J4uu%5m6C+V-(bw(ujs|1K~X0}2f2){;^N zEu~Gr2@DckzY7drliUgnz`hF%D%PjjiheFIfV~qK(ETPbPzDMNj=-l~Zv_T?)5kXA zXm+B15*WCsf&m2v7xG^tox0G00s|$%wJ9=;ore_ zjKi5?9#Ucd&B zD;-pD?*lI4(^Flk&&f~X#VuyWbLl0ibelrXJfN;?bG=L@I7=-Q4Ri5`V1gFhN3^Qe zqGZc#T%L4m4*~@S2YX`Q1O`@T01bJvoy>6(F_&1n3-^3gLm@#+VV_j)w}gi&&tRp@ zR!8P>6FYIa09}?U%M>n*l~>*)<)6yKa=A8eO=PvlEf$;Xs{yMBe0Zg}4_MR_>vHb| z2GjN8P`3rTa*sBoK=Wu)v%}^D2+hf+p}*VBkQWI~9VJ9mcL5cq=ft z4CIUjzitp;;iN#1@Bac-nLiD`7A{KW{{rr_#Wt83C0Z!9orS+5;&*{T5l~oszs?CX2RoO94K@ zwpN#-rE9uOvJ8CSL;GQ(sD{N67eL#K|hQH-zNk&JaKSLCZ238W#U+@y>FTnc2Ur>!@TxZfdeyPm>q#s7xgD&c< zzl_j+#}*Q9v4yrDum#C^-b})7Gh#f3P}D|Zc`C3`fP8p@R_LxP8;SRW95ArXl85=c z0-;1lfs!W=v~rojv~wJ{v;$Z1=JfV?@xXgbK;DHJ!Rc@4n3HwzvNlhQSQG$t2JjA} zn>yP_C-g;=8SS9lm}GP>M&HaBl@9}?THc|3HW81c+8qVlwhd4?=!pgrQHo4rjI0T? zgMOnHW`3X+)SnnreWMnV;gy7$B`*$xSG*~pY-RM`Sto@=iB&d5zlJgkdbs4CE-rQz ziq;kou|YpIm5asbVNN^yNPF(t42d)ZQ9n1dcj!aIW4alg+O!~6(kT2#v5@F3ZnJ)u zLG|E}F^KR%5Z92WE$fn#A!LM3nntn6Vf-sp4MT`~LXws;X%!Q&$j#44ayvJ~l}-;< z7(b(Aus;`>ev_Q&vy69)M)%<<&gEtfri6bwlY2dro+aa2Scyy2mEcb32RD#>n3V^b zg&arNrOCG{gGi{HT1)VB%7|qnX3X6z6k)V<{yH?E%D{r~PGz9&(xdCJeTh?tP3=no zVSCi`A$t-^yUbqFt6ClE?aaOec!H_}Md(8c-%Y`RXVfw8w?Y5~dmb=cEr<{4qd)pK}M9;iv!Oj@h>5LCa1K^b}q z9d^%P{xg0pUaR?gC?ZNst zQUb~_gabI1G(3Py@~?pcP^|#J57SK)?c|gKrrIx1h?V_R&_7dg?oms2I%IUO3aKeP z%9@^JXv$=4dT;HWNcH9Ud)7}Hp@z@FAO;MsgRgeK#D!$COZHpo*342tmZ-;_&K7q& zpEM)QE`y|_$Aj8`a2XuKuj7Bf8?*b6 zHX;?+7E7##9%f;Kw+;U%nZajlM$Vv_mMm+$L-+!py677tnXiMEJW$@?hq z4(b~+l2fMZTr>uG&uqdP!d+6{nP>u&OPHoQ!aDbDEiyMPQk;Ycle0UMZi= zLSbs#mvE=S_gVEv8}SIBzI5qeTz*00>Ej?#UG>VdqPvl>pL1!Q>_7n8g&#$%nOv|p zYw?_$*P&l{=@NyW2E}&`A%e?VJ6v)=5tSeHi{*14fR1X5t{ep%CBa8^wKC=-{}f8* zZehF67BT4Mp$ZC`Z=wO%Y*`d{T~Um3#^QeF;%xfr?0isW4%KV{MUF(_vf|C0Hxw~| zE^-QglWa{Cz9M#8wcMv>M4OW;5W!udEzd=UY=l9IW2?}oh}D-NoEJk8{z-{}L_PA9 znTVn-@OLk~G!BRQdFCKKT78cNx|dOV24Y5V8HVS#^q= zk=!^MGD}@(_w5kM%B^7;009D5msjlKgXiw|4QVAsXYRB zUb<$xC91uT&}!Om`5Lmh!;Sf-$`z)xr3B-TyD{<%Ic-CtnvKXK zCwi7==|(v}vTG%dwyfNo+^N&VEM!Ih`s*_(!L2?<1dnOvPD};_*J);*&-4I?I^-;# zEb_@Ikqk~7Xny+4-AdV!O=u=LxW*I;yqLd84B$d%!p4SLpIJG;+)518{GzbKMWYg_ z*I{FxUsn->v#vRTFl?1m;VNJ1PgdhN%u2b0>C@Uw0+j{P$4*8G1YMesl0}&g-44W7 zh_$#QIr<>Olu2YyLZ9{8e#~-4aM;>AklGTPAs(1~#!DPFX>toD6C0X73 zs8COZi+Z)X`udgC_LO@QzZ-q>ab8xE+p!F=V5&T;Wj_L?uB|P*8tndgMk@i4A8~kh zd1|BoyUIaMR7vl~UVnigs8D$Q?-Ipt zTj|GD@yjUm-B$X^s`#&Ih5J!)KPv7=#r>$b9~Jkb;(k>8Zb-Wy75Ag!epK9#ivKmE z;;&buzbrCfV`umiqoB@RlD`9F6yTviKz>^Ubx_n*dM>V@*$}$oO3OvRM8jz-UtT7ilqS0Ub)@X6Y;i z`W^Bn{owbup6#6IknU($9owsbPuU&|QY*Rtw7HOxm3!@1P1bkL%$8$VqaHJ4VII*(W? zfqUW@mdxd(f5F!wr#&{f6&H}yh7+k6%vcg}U76#j?t1q8V!!-jq6`<4xw%2`X-NH* zt^5mCX|69^Tmw5_`py&U;txL@7^Dku)OHLdsa}=PAFi}G?MESi`HEV?`@3`Pz~fEL zre>bGU|5^BO;6=C&z8S`UO((|a6WX9dyx>QT7FTQ=E6FniAgs9(SL&h=^%5L;AN+- zAD5mV|DJ?3#H6|ih47{&4#pA0m!s8c?6+E#aN&(J)(?Qst)zzQYKXa6?FSt}mi7~+ zr5Dq|5tnAmVjh{tGo_1gz>&PHpg=WHsuW8eAX$$&62GW2?e&sy_NWtZ_QaJ}DOI6m zd!$A;K|S$!g5(wH_H3Wm6ept*ENXL4{`%v0Dp*xsvC?HQ%+Jkm`2F_M4WqD4RH8U;20|hb&4whM1&P$hOwL-TTEM!``8u(Pv6I)ltM)r zAESS?R91)@CPffe9JJYv`#`sa)MKpZ?Rq3zaW4C?0jEYc#Cr=40I)^#dfX<^abo~! zZ|;*^Rq1W#bP=JksifBwvF;%OGZeikl*~@eGmy5XNwy%CO~$MfAJzZ0e*)xD2L8Bm z1fLKV_@g%_q9(C?PUFQXBZ+>__F5-835e*&YVo9e_4PY3&}5a1qebu4x5hrR$V+$td5K^DW)t|A)=$3J{3mdUf1=;|J1&7z0K_H!|J8e_Vd|qI&yn#NBVWnd zAKW2p4oM}SF$~=t!nwsI(Efo-0IycR;}T|Xpy(eP^b&SIVzt^*h|fW%*AsE82fNW$ zY+xo$0p7tfDu#xG3-4!al&BwdMtCcQ5Au zhTenGMy!whgC$7fyh7&Y2sh;&`S=ldC`Cc##1zw~0br~aYU$IL^G|_SYz!ylEv6zG zD6-1qBFIGWETvoWQtz=D#0afx0L4&(wumV9)G%NF?|KinxP&|qm-sJw4+1wE-qBb*tX=r2BYnR9j>1#p!-kc>eY29KlFc&+k#xjQTb6OsAICqn24CqXt8ozE*HqMUgO&hDgTS5(eF+gcKz2;81d%2! z{}QtDR*-oN9pTJ$nZQWl8Q4mgtoBO(qmZ^cU8qLj_r($Fcb!2jVC5;^K_-e104c#7lxlR^)#D+x*%MTE2&JJDgM9l=p zk!t{D%`6x*==M2_e6sI?YJq}7g45v4u(wXD7k{|#Z^6_v08(u+jw7NCxa5IRCUxV( zWj8#M+sfJ_fyD1s^;SXws@t@U_J7w=Em|_?+nrtuejbR z8jQuZ)HjK%TG21t`{in0@uDIrg$=c({!U3~6Tr*JE-GrXOP>6z;Z}pfAfm?o(9C@U zc5E}!TS%ffU`d8{EF=p|2CR?bE14}`RzP%U$z(w5mqrFxG4!LHuWYv8V-MC&*KzNc zYGcdC6i(GAwIyfGv0Z5@j2!?l+Ann97QT{+2}N+thIy=H2i^;Au)Zhuu7RkqkP?SG z;wH(y=>{lup!IaH+qCcn%Vv2hfl!H-T@?81t2RETFM$9xoSHrvVclsJa zMKurWKP>tY^L3$947}|WmP#U*;ZS&EO6s=|DFE&;bjw66bw8ttQZ|t)B+t@7S`Jx)k7Q7W5}*;hV-)U&W?f?Km37cC`LPzNvC^5Abt$||nW9{LI(cA>E_P_(IJuv=Wd-x)w{QkGv zgYO?}4?CsbYY$%vnnwPq+5;x~zfgM+|J!O0Y!m-V?SbphwFlLhzqR(z4$zMN3n+2; zr`kga#SgWIy#M#Lhvq-j9*(9}pxpnN+Cw9hrtm*qd-!oq=>IZ){qs5TUvm=oYvMnx z$K9`q`!#XDCVmsex%{4wyI&LcYvO)Q+^>oIHE}#IK=`$^`F>6Ov>kW9CV=g@fA5<3 zDKVZn8G^(eb07YR_DK zZ8cM4V5JQIvSxnU>gI5!=6oFA3-p~jLIZ={0|yYk9Q_NPGX)SQw)d`v3%$*LNmFf8 zrvVv9Hhr5DS!BkuggYLV1Yb`KJ#yGQPxn8LCK+5>L3J$`XkZ$BCR^dHseO=?mO{Yc zdD8H%%$@0YH_gM+*=}Vxc%v;wus#;E$hAmuri5@>x-@i_%VuE{>}i*qsoI+*wZc`k zSGFOdMD$iR00Bk4PkIv;mI3mL45HhCs0+RAY<|U zCx3|CHfl!6Ys#_(v(8ek#LsQ%(zU@g(~yUZhd31-$wq?({a>Aj3~}3;E0y?DQ|M)} zk0)M*%fERR2ycK7)!tAB2;C;MVOd7kENV3NX|_x7Xj7Q$K5Bdqt6#i@M%G0uAA>I# zu+Hc%h=bVj5TX;Qnr|_SK#oVVreJrkPAj($(CvlInDwOBJntN0VAF`gDQvVd-UAeF zXir$;6*JG%{*oS0+&+lr%`(2#DxW1!P7v=t)TOHaP!yQFxJnff^FcLD(#JfwrQqw- zh^#zAm1U2Hjs|+bDTiQE3#H{)LqO3kILjsV&>KmL7jJ_rWtY z2EmxKW3w^q-D*`vF4S}M+Exz=VO4qD(w@lD%vItMI00csz5wwf=IBsNF-I{m&-OS_ z9zG-kA_mC?Kh|fdnRJD@ZD zXKG)rt}h>wdXVi|qvoJ=ak9hKkqs!Wi6Wl!y2E^Fmz^qh*eqP&+s!3gn}PGD5C+>Q ziIYrB=Ss|W(=Q*6;4G&xwP|~6H(ZT_rCvP}wh-5%QNo9nmX4tGL}G!wBd?#IXI7L$ zF$gtra48}ZF$BIzw6b@&8X#+Ywso&G?!w% zrc62_!RF;7@}N^?#}R!g0{v%Be^Dqn1s3O{Im&OLJmTpJ%HgjjCc&|xLOojYzKY+a zR@7DCvXYtYSDKl~c>0hegskbp+9Y|RJ;hdU$y6^I0=hXauS zt1Y>2NWhC4w7h{xdPu9rNLgjDlQ$s2{_dEx=t#9jPm!&4;|W3qN363!;!FOe~+(IWnPQ$rWPD zIY5XXqnN>Gh-#K2tr3i~`SN+K4EMhs3~`8=DRYf*0C^u~3}^GZKtZ|E0(fPg&$fA7 zdNNX^s>}sY^IBb4BJE8aQ52Wv$z*9(PI%ap3BDopz>?;DVSJ!Fb@$a?{rk{)ohv+{ z{`SK4HE4$@*R&SbJ2JqZf`00PLt}tX?gM?+iD5crCi!|FT_RcTu>SA z6uV&30vnFW>?Ov9E>-WP84TUXW35ncqYn|eJ^+(Zg>(`zwX5J$)!n>I=?=rHronWd z+g-}DK~Kz)LlQ)VT7Uf+ZTMBscmisG}Rhm#>T z^dobDa>=Y&btTCN5M3M_WCYe_%qL@#bkXpQx);~FO_PTGgj&asFOfcSE!ZH)p|w1~ z`>sz2cU6ug%c<4-lRlyLcYOky$E`l$ybMEYW@?lagp1L7vI^<$e-u9uoB?3}#s#FTdWhx&}HRS3z=&_6H;=o6c9s9f) zIq-At>k8{k?YHT8EwZ9K}JmN+1Bvztwl z5s5n0vcp|z8&!LGu-Jq-mwg77yhwsU`Z{1>*qQeh45;(Thr?f!zl}cFHGt<*Nd`uK z4F$(|iy~di^ch;n#-oiZ3M&`!M=&7t8yK+l4Gb_wEiBnXDV`r66f6sC3M03Zladdd zqDl4%$s~?mLBJ$ZU@;ldt;qoEE6=vjxr;uanB7Gmltj)jWaRFm4@JL4AL4KHZ@5lL zv&ef2EH7{8s4^wBZivaj(ieJ70*E`E3 z)+0kSH;`bp*hZD|(8|!_c+N`n<0lL-H3}A(`MGETB0P8P=q?XX-^0tq$zFrQ&g|5g%MZ$HxZp@A%i?v(vTbtWms5 z2e*8$%>>Xani zz2hS>dSd4Qb?aB5@kD4%N15L+@O#sYHw19U&SLW_&pa>&GY?s?@d&-tNw_|LX2FxC z=j&E^MpmOWBVmu{wssR-85PJp zYK=P_o$0*R$l~(gEt@8lI*RFn@y{a51(6cf5Jk@bM}vXBt4y&2(@JAj7Bsyk1X44$8j-g8+BoQwAMe4TfIxT81p6ivKGg3a#GBo z8&-{(wQf{RBbNbYb~7^@8|E7-!#)X$u`40#Sa37*bxq(K%w^sfr1($Kf*r*3i)(S>tMn_fdcEJWY>o3 z=hxwzhCOQfOac1KnT~NXpE#$o19~5m@Defo5{iL{`6#qLW#a}Nqe_5Zv&cXaAHed|n=`O{0HsF`_ z3AZo*&s|~G2M_ZB+H_d;j6WKUZiH6*!I0~(#`l0 z6mvjg562iC0N{9w3TL&9++sE;7G%)Iwp&Yzi;fiPKEE8bTf=5$q>bu@sNGD&2fzYL z2KQn{SbRcIVo&RNeto{4Cs|Lc>ArWZ{o-P4CE;+{=6sM^%XR z;{8$?iBL|MD@v&uUX!)h8i>~Llz@@2@Ir4vqv^?xt6sJ+pG5y3_TDlmu6Etl#@*eW zpuydOOK^90C%9{{#w9oeC%8+n-~@-@5D4z>>Y`>zsGl{?@6is(toX{0bFd&g$;x zE^5p%?s2^V@QpBbgnG_yHWi!{o}C42;~6UL}ByFsu-2 za16A%oq?^K zPTMr{&t@ZIWFbxqlug~s4)nTOVp2?tw+ z{6gC!+P9w@e*A05!f!VZ{5-4w+}{85Nc?v5z@KmPG8!+V@gEf$l*70ikC74=nBfd{O_7L2v7{24ozJB0LLa`hK>?x0*l0CoJp+wcJ4!4xnhW z4XhmIjK)Eg+=9hxXnL@Q|OMPGKws1ogLq2tA@f5iRUm?*8Z18{{*z? zT^`g{CMe#Lb6QVO-zP>x8PuqM!GP&!&>qLVh%oy9b7sNpgDKP zC*p?`Bu#Y{iaJQMs!X*VSm)30h@C30y;diY`H{=7!uZpom$k^LIL^zU5rdW1tTB{> z*Mc%UQQe7bjjdO#^x>4sH8q0V`F^emSmwi9SZr~k`)Sd$upyLDif|Hn84N7l+Gtx; zON4yC?2mcfESDDbtbOcF=ACBKo^#kD{E(oPwh5WYLYG5_;q=AB@*W-YX_XZNhmWOs zlz!11lhPnkd=#c>QIa<64Mq4y@HWPfYYvF-$&EsB6;bC-#n4knv#7@=w^&2LYnc@8 z_8);?k}<|zxI=y96bberq!bc~fZK&!$s3c|DS>XaMQp|aWIt>*);<$SH~6CqAgT=m z7OAfYDEQOB!FuBX8ecPavZ0Z`Z{N+ZKoS*P=3bT?lJ=ob&qyg4LvNY~anue4{PfThB7YFeu zlrY?&q=qax#9Uj1W5%DoX;X%CfCZw}?;pJfXA4CL$xs)gYcZt7uQRwq`*#17EtjaY z=&dXNvh%m}(QrZj;&0tGTF9Kz#+BP%m+pl_@Szx`M3tP6OsVkZRa+Jxp0Wc`jVCu~ zMqhff4Toj=$1&lBeFM)){h zSNRMiw35J$SzwsKZn(iCVxeo3r=YymJ!pcDvZq22OVHL(s~3Zzc?z_wDQDJoMeP43 zV|Jofn92yZ=t{X_K%X+P3%DiYli97_jkbZGrJmy!t%9RSPxe|+qa~F=2T^jvr4KHp zUPkQY7eg^R)|>)ka@ETC)6#FIVMCk6H) zly0ev7Az<)^gaIT6#o{&o~*Sga6NswJN`~jv6yM&cn6F-B+ zYk;nMeM9^~9*EqV5LU6<{mrt)77W~$!(nj1D;$Q#?$gZzYS4syUH^Gy9kGMmd_e0d`Klpn&f~Bw^(1oBo96s6Ih@B5L zu2LLTdP2Gs2YbpEV#4oUPo%fpSrO^;~6rVv39lZyHr-xS!B zI=HM?DYlPCBfXMrCMjCI2@ulzKC~IO_vat^gJIR465-JNMjQtRT8f$uYLhJL_1ubh z5-~LAG#K9y&Bq@FF4bE$*Q_)gkHQ}xvmm>Y^|tRv4M@U^Z!dD}DGh$Zuxy!|OdB zh?Q2H8}$G@ht>RMYpNmzrn&aHrAd-go_ zJnB1$1E_^~gc`kXGg&FA_qad&mYGTH_g;_3p5uFpfOA#u$3{govZ!o#LLX;71%5eV z9tdY^k;dK?l()Pd4g$OpV>jKJHKE_nLC|}>MK{==0$cEiEaVeb4y4xEit;;aKfGlv zb_&tfAM0DHcD|^xZ`801f#jo%_6CdoCS)b8ZVKtFL<#On0ynW454}$i>Kr>YxViUk z3aN{XC_2w2_IqH&=(>boNS<3PSqHFVfcezA_7n#K&Ds5F$oeMx74cMJ5FYoZVrcgA zPpepQRb8VLxm(U{PU2b+-G(G{Q7+3;g@LkqaVXBE4EXPXtq<9(fu?x{YtKFG4{r9| z*c5bQZcxXsECy>T)+u0I5=;k!w4a~|`9}H}U`APhzNpLBYp<{Hq-T(e7QnWG8jhsx zbCP-C?YLu!jyh2WQHQYQfXnwbAw==iI$ga-3`(a1n-&Zh0BBqN`Fv^|h_9AqG{9bhx1%~U9}rFHtkcC|r6bg%bz{VVSO;51>%qd+*c$AU3SL(XP^}8d0C7x) z-1KN0%p@gYIJi8>Uep`e5n%iwkTsdzxlz=qAYSPr!Wi$;;%x;?_J@oUxlkvPwpf?9 zaD9-ygNJjCQg5%vwI^F>z2U^+brH#25>ey+h*ROR zsviiWr&z_~!!%5l#Nqj>Gl%{KL-YFb%I)H9=s-5&V*l->&BWomUM$Y;QpIbHi22Kw z3>TiAtMsT$Iq!Y$wxf4RuAh_6>T8?rIPe_^_zzw$M^$(pOMe!=wmtz*LgsqH-0*PY z%0j*qOxGF1R!``x<2`B=+L|srXe~BB%wKM-3cgW$dgR^nvkIE>tLIN{?02L8!HulA zh7q-JnkuUP<;$zXuZ%of2!61$Tvk!mC&}-kjD3@=cZMqBzJytSPu4v*CFnNTgs0(g z1jy*Q!70aWa>3BwMSGX%Q8fkN!Z6Sne0kt03V%XK<$A0`ynt#t|EA5gvGe53uB+p0 zj*W7}rn?S(1{E8+&abIt3N>qNfDgf8(S*!=kQ-HB<128ehqO@ns*Q@--f00nwUK6j zcQ_?;uvL~z-fZi3BYb$#`BZd^51&spif^9x1NYdb+}8AW<&h!QYIKjr@EOu`SdS^E zE5Fz-rn7kzK6p=o`s-9tOS8{ij_v8C*WQ+X%dZYb?t?V#c``O?-Qd)cwtYA^J%}wl z-mzygM&q_{it#{jD^#W@RQ4bDt2f5#pG-l=mrSgfN^(8>YrD1&)YsfmS2r5+I!&a* z)9Jcgt>)At!=ea1LH+fi$sfw_&m!u#s|x;wi2D0P!i$D_(NHfM>P17nXs8zr^`fC( zG}McRdeKlX8tO$u{m;`-|Cqt}?SckwHfHv}3t>Eq)Rh_jrwST=UH{*+n*UnRkd;b4 zl2J^LbY0T@mN5f|BDT#SE^H1E43lf%^}(WkzZj>J3*WYSCZ_ru$<(F zAPg(=+Q2GaM-z!f^wD#6{81OyR5N>ms1-&aEVOV4pu zvs{|Ca$MhCMU50V1x8 zmB2xMQr6CaCRU1=S-2)vOHYYC^_N{-JmR40%cC>b#o_y5$SpFbRH-82^X-vXLbAzm zMQ9*-mQR(<YNDDFgVi^sriT`xK@kc@jA*}tZUcQxNbVc8EZCN zcC61@iYFpSdW_AMet^x#nKxk6Ik0FCtqwk~<9&`?MgweGmq%u#6@KAfd_Qusv5pUZ z11#6kNAu0DRJk+Hi%&})ge9qpi(Vjqq>6|b03e9BqBq4Xkh2=#yF~K)u zq$vB|$M1l8;z$Q;!ZFspKF9JQY>Q|&e)_M{8^7Jo@avHO^Z3S}hv~Q58UE%zFGKY* zRR7Nm)j#Gwe!H6CZw~u^XYgY&_4e%ou$p1`KT*x_>s9?b$&X#Tbzt(tzT>zf*N?+? zeJ`54>Y)tX+dBvfYX@=XoAV!T$81Y}N!PZ^3*@)z5B*oMx7Db%ZwU0xAz{j5vbI`5o5L z`1gv=I;nDYUo_1$zXO9Gs&9j42C1YH#rdq`EH3$@h`LD}cdvKP2O|Q11wZJJF62MPo>{BD+G|k6khZ#K zpUr<~*cJ{ycBu576GZA~%A>6AA*73aoxP)_lo#C(bqMH%9L^!V3keMnAq8VF<#j>z#u<8Fc| zQnw3bjD)R;$IayUv!#i@idgTnfiaQ#W ze1%s6ZiV_-iK{CyY`LJJ-+u4j-$o7r40QcMV|lz?5jrckTu-v2VT7! zA(Wcr(pV7R-l?bGgcvDXCWf@K1#+eEO^MC~RgKv)WKOYZNM56^8>lJohDjw#VukAg z%NgPzQ+IoJD!lj;aTK_jviGC{_rUXUlw#bSiO1Kq_<_-gq2qk_BT%Ba!j3^~`&9jGAs{pqZk)aOuq7kWoB{>uF}SoaR^4|lfk>6m`DKn?l>u$1 zTb@&O->o-QDrjKkK`1+Kh1HH99yjm9ZIo+ngp4d%q=u3CxXN#&jTAOJvPIYI9pr%| zhfDXpfPPgw=~FI~b~HY3e=2Q9)~iI>WPcn6D`uDWRMB+3Wt~2X+{paPPmFZtBBWN) zcj5iod{IG{UC5Zq-%_i8q_T1DUWX(vojyq)MK^hZgi)S@L{I5li6+@mhg&yGTnQD2 zP-e&G^juo7A;0r_D?RR9QgUg*@I&I9Z{GhSmM?!w?dc;_I}v>l4W!e>NK-y9wB9=e z?Z6hDN`tn90tA-I10@|PC8*HQnp)_k3arVHE>+m&3(q-x#C@vVL&6o*`SjuzvH(WK zF>Ze+!f?-}p@|b2ub0YvZ>Ns20n0@@KT zqVJ{BNKr*#cr7{NA0CL7T&UJpZ+!5V-ruIW03#7qC%9a=w;-W6VG>e@Qfy8ic>uZ1 z<1;Ad*`U4ocw&))-A3QfR3MqP_&~wA!U}vPrh7hPW63{6uXPCY(Liy%ffDG>%YYG> zP#}!fMVK?~?u58iByh%1`EUYSzB=_y;+_A`f(FH51<5qT_`t|Q^29AnWKu0v4b|0L zBapG&d>iaOa3K}aM)ve5Lh@lca_>^U;?G@&X6s^Zi>e2<*{T<@&s3dm%T9d?8I(Jm zOv}fZK?>!s@9fpL4jxXx-FI8(SC~BxJ~g{6i%W&cM6S79#NB0kW(c@4?aV+m_8OoF z^LWs6@khyvq0-MA+j;nh8!?lgCApKxAVS`;VjiRxW={a13V{6#1x_Um?OD++#-^23 z_V8tF%9MPV(XJ5D%R=HqU4^jRxuBuhNjbC)x~HF#IywpS8yr7-5`a5cxy!A_&^inw zebWj#I>5Gu@82V7E7&cu)L5YN(R?1sxG9)-*DA*V0vr+=r!tcoCcn99xfhup)D34Q zO)F~Sxe`>R7LuK0DO-4-o70~UR4XxFq{lt9!3-0@_ctu zIvUzyiAi9dp?rhhL{%-vP)DgrS;-kTEsahoXBTY5tcN*LX-4TSz%~g(nL{ZD2H2hO znSR!$E%uV2C6IEHd~Z5$6WFY{oOGiVm-b~ zQYr_n1@|u{4Gq0?Y!xcNl7^}3{fUb|N*Zt}IsvMK-vGHKl)dC=Y!k14l{5@=!ebRR z(DorAgn(m`LLH}Q{Y*o^_I=O+tB8pFmY_pU**irGFbUkSQZcw~b(7)R8kbgFVxY(T z*98h%zt*%%hX>)&ra>o^xX007O#f164HxIM1_q9u-Kcd1^ZNXJ5AL~C3ad4=1G}G} ztJrN-ImQG*5uoSc#}XfY%$kiHQYtX_if2>p{d{gK^|Pjr`*`S$Ww<=KXazp2yL5A9 zyOUJJ0*Q|Q%_E#$OUckp<(x8ssPE}*&u+;)&K30fyu+3CJ=jq<1E{EE*d5~ci7wfz zjS|ijxyo0E`ZnlY&!2cR8|({%q-sykW!>2Lh>>1-c1L4M)hMcFSYucitz` z_742`dQq!}s+k|%?8RB<@VAzH{lEfkH;aE(G6K*%kmpokv!{QDGaK{7o zPCPqfu>+IxW8%mDyp@?9yW-dVr2`MSylwst(2VA^I!bebMA4ikz2hl+VaS-IRYLtf zVTRbY(`5_W2}hgRk7nPzFr4Bhi3W7?%lcVM4>Y#OR{7F2HxeXRuy@zuhCMjk%kVsE z+~}RMh6qQj&x}Kp&5b0^u)=2;&QU$4IPTv_8sa?Jz{Ek?G9JplQbep>FogVZI4y5v z{o@FIx$8d2(w?PtRQ(u2Tr=~0Np0KvC%VCe*;(5+S3KCPShUlhmRLp@@n>DxMa)OZW5( z1*h70=L$2R#*psy){-oHl8b{23!)BCwxkj8x$g*((uLGbPuCAe0|H{LtlDo|N=k`Y z5rHXzaxh>@paTm8M&yr_K&E;nJHwcO-#g2T`Qg=(AH;{&?LRJd&qIs#@vlZ7GBldn z*AHUY@nht&@cgdNmLC>&27-;(YmxPT9D6NznLd5JW!!#yw%#amnRDpqzB;p>uqgLt zhyPtwWwY0qg$5TZyTe0AZzFh%0XKZ2G0kwT&Je4Nqs*Pq0_QYxTsf1P8$of)Q;S%# zZ|#nA+eS(lr35vLbXPS2wb4#v*gbxld&@+_MPOg9X@I6lQp%=5G|pYfnRQmqDJ+h* zeORNm`Le;XVKh^JiZd;n-!j5HZ4Du}RjN7NpmHx^gON!F4kl?{4+R0vey~8b@NR|p-$?;n zCP-x#azn!`uwgDQxxt`l#{jf%0;$; zg${Z}OA8^z%`2ywn>gw}LTtgJ@3%ESI}}c~9tl{v>6Ka)E^dwEA9UL~6LOv|$UyUC zVc4>gI+s!KAmlcZZ(-X6aU|t765}8<68u#1tx%Lf!}?i z_v=Od--ZQT7yG7taA4pn4{g5l$XW49MHD(v5;Zh8(++T7?ega5-vDsz8zaC}W8V{u zdJ~Msc9Ryk?x!C@>w5IUEqNIVwvtI2C06Er9m*Q#FYrj~;TDq};|rtqMBlU* zv&}FF_{DM16bEt~ew9REiY)*+4%AeJRB#SS8?badT;c6h10n>kh;9Y^01p(yKRFJ$ zTY~n5_7k=!;L6cZQ~Hd_Y$BX&L$@6&1$oXY>daHon<<~%n5!aPOF!nzYgXw5F!@Gs zC_GX~C&(b=1bG^UK`2MFq)i@V#Uow(VX z>*);xC<-kwJfs13V0VJGEw!4OJL3|7xx4j#Bt7%PndcE+Rz*SXOO{q)8e-X4x1Ssb z$=X zEwKwgg$DB$I1#94O+=0D!~%)Hs)*s+Op#9z(j=&M7+E%rDu(zq<7}$t^Rr1?MYomRGUfgCCp>S8IOAo_jGR-g7 zrh2bB(U0Z|G-?LWM5X7^7&z|;0rbt#iWK;-U6Jc~PavP)cx5aJy=t1<;6gSfA9Km2 z5a^WBF^S!xr=Mi^8B#z5H!ehLsLEnhb3qk>`)nXOp&El*SosOi%XVa>^B$NMIP&T> zDtxU;PKOur?cHq4O~@JwFfB057QmIV#Q7^NK=3MaiX!nYH3hmhO;REu}kw7;>fG_J>gFaT6lA5G<$v_ICfhw9#6U@{Gq@eJRUuJ;`2q{^E(I@gR1WKqJ2 zlKHZ-J{glZef7I%0}$o#0l{@oJYey&+F3$E?`e1Xo?8SZbxbflC zAor;B9IE*cXNO4C=%viJe9gao|4DPWcy%B8o$%cy$aw59c$3Qc4!NF3HATg)C`3V< z9Yr>e;=+c0$-A zE5c6CemdNI>H{S{U|3)_w5A1msTdm=7Epm*KCqf1j!C1+T_;{KoFABqaKMqAazb9= zQ_s~qHsbT73h-Jk2EJ8%F_zT~fmO^_8brmQoEYM7=&Vvk78VZ#y|fctXRx8mgVK*%NS++jAuQu+YsNTfIU4`r$H2JRV}qkHRJ;z-`<-auqv`1yNz_r#Z-vZQ&&6ajKQ6=qQ` zJ;WwxCSY=LXgLfUDrv*eCUX5Dbwtls5}AFcP+xZzcfk-~g@ZZ>!Fd7Qd?_ceqeCakUYvN9bjfb;zs`D%euAjW*68t0&(`dneOjxxyXrhPJ<2E^da| z#qGJe(cwVZ#F>6*!udY9{i&4uRJ!F7M+}Zj=OHYuS$Wdc>P~KCt~iyK-MYxkDaJBw zAIE@wNsvmbpNT*@wAvc$8*fPoJ_DO2l!nx_Ohn_SBR?aIr}NHG^~_Qdif%V`i?L0+4CNHY_I7r<3`iCQD7xyG#`W zlQYj!7*(*8OIq{8j75l|Vv4pRFfKrgQ9R)sy`^xFW=3gEhuK?A3!udR*`8n}M>@nN z!D#9;TWt7lTJ*t;O@#U<(*b*nk=csz)7X)Fq2%~`GEBUg&tZpXBc(Sh3>ctwY3K_i$Z7{~lcq3K%c%vDvQOX#|UmEBPcU>1|?z$dRgqnLCMtFB8UOC=GG!jl>Hnhi`xYD1gO z1aw)5RevyJ%7OBqjy!Qx4Epf3sLd>}gdH;NEm5&ZFcEticum9FBEZ;YoP^U&7CvF5 ztW@9M_Y&!-eXBIm(*y&$*SkLY4alpQESE9NEK3qK{tRLI5#urUP3b$aN22FaOVswz zj^sk0rn2i5uNWIJMS#wopOVf=3|ls`)s)Y;tTWorxBwp=FfMR24*k4)a!l^toUX)0 zy);eSvSDh8!zlE?5QwdJ34dF;V~qDo=oYb8YRWDOs(Zkj?YZ6ysj`Ows(31m4ONOi8J9?Ps^<|rxwk*V=!TIvJN0e&WxFV)_iC|3m|H)Zx8O-l`{&^gFflo_{V*Ds}z>#rtUissBqL-*FVM!vVxXefGR}bJ}4c9if@z+)BND$Ex%r z-whTL@(-&oexcp+hbW1dEY{TJqlrkd2P?MkZ z``CIO=_gl`W%GPcC##ZW&rK0T47Veg7gzyit#%kzWHBfZ zWV)%AR(zE8!tOpQl{!`&HkI?Da7wKq8Y}x|oI3RW+`=qN9+)2}jF4c7usP9S7X_vT zYQJtqZ`IFLccZ7y#kHE|)(?4$64j49AuHind2>LF1vVsKy-N5Ls(DS|5V?-;OU5YnePmlYEny(RryuAW`vdX`L)u>%-S@zy zfItTpitpYXi?+UBF9BQB)wm*`9VgPA81*ylx}XKnGj?Fs)% zTl`mHffs4t12fgC$BE2&*aX*$-xZ#4KCo9EJhq$94s6rjQ{kzOzbSC z%-kGojDKAJ-?BAhg^&W7P{g3wYY6y-bU$A~=?vf-to4?>YTkf}br0B$Ub-m?#>jnV zn6cH!_hg?VQrE#n5C*56Eb2wJaCoA3n*H`&b&dwJtshO16BgW$IaK52@eED)Af_J9 z5~H%XTE@;bk1q}z2g(5RXl(e@@;L#LRB)a|uy`8~F!InItXPXNZkhQ5cOK;X{vQ+0 z?ekb2?J;d{UALIFElZWZJZbTiQ#s>0ACVR>)|93x?eSiFnijVO?Z8}qU{o7roIMzF z*~N8Ka50KWoUN!awi^ex%2xZa5BXPN_>Z67?{2gI@$UX}kNVG_;_q&=|LuKVK1~eZ zRQ#ha`nzk?fBP=~cN(L`70VTqKx5SJKd?sq$E*6kbw+=#Q41jaf8!`||3bLmaF8rs zx-)CZ#;4NGk?6k;OYl$(`{sheH2{BSR#d00oCd7VSDI4U(i5C$A>kj;UWeIsKb-Mr zNux;2ULUmaydI$)T06S_0Zntt8xWd69i=hTsd&O4o+bRo@$2=j^oqFef?d6~IwrIy zC%@3O9*hhPo`PGO&Nqmq35redgo5a)I9sU%-jIU4<>`*`g>qkvFBHp;kX<(rw%K=z zXcAHa?~(Ry1qM@<62}u?#Uwgso1;K!2b&xO*G1edg{D(zy^`~1;QLs(vs7!E!KcGz z$uX20o2$4&Pt$z9gDy+NU?x@|@{z`9KZcmsJ+n^xne%w~4DM}l!U`tf)}poUet@al z959=@epd$t`4saNr>RAfc8EAWA83IB)>%Gvpzs}q;O!Gd4y2qzvxbl0FJhQkLdv9| z{y6S<)`m+d%s(IG5HlM@jnAfDR$o$$5V*ylE4uDJpd7KtrbUinJ57;D06Phhuf}v) zV*v06=9}N@BxLKwp(1|9g!Me@@EvwbqG2k|02~E6zvR*UqLs-O@HuV zTT(>M=JznHje?&&RLTJN=hEW@v#MhQ8lxDGuRHGdy+rPT#wgE>tcN`2Qs75%RbMrRS0mVR9TX?| znat=wA#5_Tfg-D?6;_PaD%6@~0fab3On0+^X&o+ z)4&1?SZw@9Br%MoHWHL5tVNeYtM-*IwcGRHCV>&M(dR0B8=vJ+f{VD|Y9YR51m`R^ zTU*o=8V;LuVf9(}(J~54l43_nmK-q2x>0Jfq;%; z|4^VOi~JUwDvko3&>!+u3;urCs7p%LJLhA#Ui!2smk|MFpjfUN)OQ6@Av0I*_T!~U z2&hCWs6<^M1)ui>B0H$b2jI=nS0f}S+1%`GWo&u61#Sm=`Gg&Z>+^v>m#C#`Vn!TX ze=bp*!B3@M-l^a3P1lwH4c`u@cV}qkBYVa9g+vo+t0j`LW{O}Qxgd>L+Nv^0H%&zM zZX4xzx#VGw*8<_!9fD-oo0!T>UoV{+asx<448&i@sAI;--=9Zp1<=&v<}ztF757R} zq;(FK%5!1}`QHg9#NH87Men~W$V#_WM!+Rb^Wgl+Be<4S7V2QJ1|33$NO|hLFTGZt zz%r`Q!n05idVi(cqv-Losb5J@%5$G|Eb)=wgjxnjxAH$j#)xordV zLLGo!Xw6SA)RBql@5uIg5`QJz3z^^fns><<{Xw>u_(u5dGt?*8El`~R?hD+?3LLdIH)Q*tUTDxesd{U@Y8Pq$7A@$i<#V3!AY8OHEa`?^sQ+h9$znVur3 zJ?F7z`@`q>c_FK@a1J7d7qz(|%Vli?RtxEXs#;%PdRj^3%A!|5vVBw0{~_Doc~iCE zWyDw6WjZS&8>bcSOhi1awLf5-q5vEwK1VMz|Ll?vf+?grREyVd%DZ27W=U&3&Rt~s zVlqmWsDIQ3Le)#WGDBERZQ06GIC`E+F@RKuDXMEB7=ac{0?08`T5>jpRg8ZV*8#?n zTkO_{6Ofwm=5&-IWK~jv&HvnJWm30`X?q=U-YhK-)OEg!J+hVhYK#K7ISoYH$4~q- zv^^#eZLeyfYS^0l3vG`*=q;B>DaNu;PDoBqOYRMSo%y+I$#q}VZ78nHHk-tA*suCI z^FCe?!yNVwG4k50w?lRR?5PD<%)~bD+dyLQEwkgCbBV#^Ah61=ao!q#QnN%~W&{^8 z1iCS*?sI&$0?n9Mh#b8d84r!2kJ*{u?Ak*9inzZ3BJO)yv%~WKg1G;uq4K+}pfu|+p%VuuyJ>;d+fb2QQ>daupO=r58~1a|dTrP=)u=eQ%vu|ho`D#( z5m$BySP>sphA8wN7_Qh*cWYIGu=q?yiKq5C%o4qqMgqWIp0A*z6xLzq`KvbmbD3!k zT$B`M!3BJExfvTf&|;;PbBFS%GD)h*&;9Bs^{yHu$_?HE)11_r=_GJKMS9Dav$%9o zVb#cC_)my?Uy1*NxPK*CAr6@|=C$ab9_{Gs??@Ru5pVQ%#Naa?h#GTOsUV~p*~hCA z&>{c;EC!A!2iPW0%LZ>EJHSpUy_iii#~!x%3AjJqR`IY$aP(=b^gWLWhUdI@J<^+# zO^}H8z0W<9>^*~BG!U+0cL4QPC4Ck9r7vk_PhK$I@4knYxM=&IlM^pWPq z+SR(HyW0j%BHhT4$<{V%?$rbUuiybv$ado~wucY%L&2NY)R+pYld2L12G7QI?gPY# zWdkP2&Wa121I|U6$Nf$eqKhGVulos{s{W;jiJx`yj9v*(4)?ncv+0Iz9LFQ}<`H@y z=^C2wbz{8lwTA7+oMv{bI4v6WT<~Pg&UbA;);gEAB_3y9`qVB3s?X;=t$BMdJr~E* zxqN}-{W|z(N0hViy!UeC4@cCgijMOb=!j0;|8zuYfsW`S&=I|dzBg`td4Rp%(V>aBBQKOmCvj4@(xTp&-4NW646 zOC=i8p~#S6J@-D7+#=KEi{~DLicuw(zlt^;b^4s=f#`a0awc;ixlA^(U@AZsvtafN zO@lBkfFEcsv?%SBAf?h>=BhF3=JtsGW1;c>eeHz-*S@?2=j~5Nv^2fFWe@0xwzg*d zaztBLemSB;1C0qEU(H_srBD9!#8$HD*57U7;V0r=(TFwVe?m@z6MfjXc} zI{4k729q;;3&tym85F|V>pedJ94&Ei+&JzrjX7IPc%IYqcJuuHp>G`* zoc?6N1_WUOtQEw+BJUK+mjOg?eNLKS(V!jl?9m;-bfS@{v~sW-?=U@W)5zYU!K^2k z?Y9f&x#!S^u6Jni;6#3f9JRCb7UwYt1#fc@UOPD@lb=cdkoA1smkh7*3l&3Rlw*O- z5@Bs^@T0b}yYGA9$K}2Cqr~G69~0FFtxc8se*6IK$K}54BCsO5OS9xUVMM) z4hO}J9LLAiU+8KN#zd5Z6}S9wL~`M7?z=k1?^NqLJXCMGRZognpvprg4{es>|Mio76VNj1-<(@J$wtf8dYe?knH{@p$B-!xK`H8V?frzHIV67K= zCkK9HiCX43#FLkTIUJmxl!T!60{f`FuZ!Zr2`NaKq`r|`)&Wl5T z@yCDvQ5JAo|H+dq6H_N+M@t81OM5#8XLsi%tv^=*{*mry`d5p?Q>erMi(iYwRo0GN z=kK^gkRwA17LrRNR$}PR(g}&kGD$p25)G8HM>t8*cgZ3m){Rh#4;k*I>@e$% z7Vzw0@mz1uNSzgaTq}+y=Dsgv^T^Hz=MQ3kU(Xn_@Qnp-Vn2=NmrWfB?Y>GZa|S0m9TZkd8-~Nrc5J1 zD~qV6Wm;;4f^*ntW-r~ZYUJynGG9^mSc+?-%B#+aqmUx7Gae|)G~zN#5<9eFltYU+ zA)&g^!#)Hg47(`NGUa%{SSYsOj*}wGA*^FX&htP_sk|a!-I+runp(klrBO-KyH7m= zfzAWGicUa+`E1aPjUc6gpt9 z4`Ywu-jCBkP0DuSX)6D~j&51#ZN!Lx$zwAqMD6L^$RVwn=@O_-aZp0n-!adfHDgDO z#*qj&i2L*bv=KuwHdSBd=x)|H0JI zF>xEUct$QKP}PH?m*Z9gURy%hSJI(Ys7_9y_B`=^?145QiHkT3q*1UuPb{}2kz`F# z99mZu+nDTJYxOXAYa2p6jAdu_4lR5p=xikO4YDdha&{2nZwi5*`rKda7tMc6rKu7jt{mR_7fV8N(rtCMpXy@ySogI z^#S&np<%Q&=C8_-?plcQbsJb0H0hO~%sT8wB{sa_4Q&LveOzQ1MI%3(#ictPe>RIN z(nmdx48l{2jHmj}r7|VpAoV3b?yl19W;N-6PeA~i#XAV@-p|TWhgp|IAPa@(!U~dp z3`?JoBw9mC#L6xfO-i32a1GmP&INr_-fG6=wSWKGn^gl!8E$K5qA7oYy>hOZvP0J% zOyk)7b>J}kJ%&WAaHrwNoqWOilHR%kCQX0NFGR?%*0;hfKC|=Dd&c~YL9Q>?cMRdc z$a|SY7Pd_~!jZboDUR4pin)^1wPP-Z*rw@~FkQ!qX=onwQ2&W!=}Rknj`Lv$_hlQl zZ_`*SaD{VX8y{EMUD_z^vLWIQXA;;fuD5}`y=fj6s_;Hy)a4??1K2E1B+BHoXh(S) zz}vh(R=BU9QLJmiWp^UNS3SUH$_X(!Jqf;zQ1yTzWhjFK)mX@Xk*;IgPFrEze za3%{i=>uwe@cF3Ds$I)vZp)_R41)p+|HhZO=TVR+h!zWX+#l@b?^=cU1nHez28 z#>_@-`o0)`P4=-CYS_4(9Cvgd3ZhR$MKSz{&ijFjMoch$ZG1QxnZ4!@tADK)7a%{w zvtKC;fxcs<7-2_{BgaI{5~dx=Urzmg>nU(3Ul0Ub7B(nIrC%v_NJMv-BKpQ#B?m-u z8|uUtQa6{W@YM{wt0Ri%{j9?pjl_k>XMXZ=_+2Cs3lCtqC(nVPHdIAOf6$MW%Ga_n zD^L(DblcBEcDaJzsGbK#n1FCc5>7kfG}#@f6uW$}rzhx=0a?g=o}fWCk$O88J~O zBGabnl+$bA@fa1sAv®HaU#m*pj5a2-+8u-J(!|D{#jR4d0)OUlqyN)gh+u|hJq z(2*^|NPAXVQ<;_~NfDSL0%n~2)!uE@$W%`W&(xR0VI|A<*oyxwCAX!srfU$Z8-zcL z;MJoBtJ8@?LoC(lsS96AB=1dAQ=(>|5jEiC{|ls@MKicBAE0y>Jg3GA>@Nqiz@(}Z zBBD<%pf9Gb(NWT&7hGQg)9Tgyiigl@z|tSMNUo>gj1Q-SpvU^btWGBeEmG<;#P{Q! z0;<$NX+Vw&MkmC;^rwz94|{xvZ#hZ1C8|m|uW1UW5Rytk4KT?enEvp^A&OnZ0ty2q zcE)vL;6}hSl^taVzBO1hi>XQ%@YYr|18s4_44>CCur6P@F8&vLZy8l(qpod>bT>$c zba%HP(j`a;f^;Jw-QCjN-5p9JBGL`gAl(fDBHukh*Yb(A_IlrEt#9xB4u1H@;h2m$ z;U12Q^E{8Evcn18ZJ`GY%XQ2qFwZm~200JqQAG`Q;}=O+wb^=i_MUHNC||!g+!NnI za!HAhCXtMwJ(CM!{VoA{EL>BFTpud?4pXQ031hdr3K7F`+cnQOQ>fJ4j~H6fyG3$J z!i_i+nrHkS#_<-5P_1V5leJ!mpH=K}C?4=@V zHkFPQ$7_R1k0zZ-A|ylN&oQY%R|av$R_yq~?diRh_DK{T{2Qrn439djt%lN&9ygQ( zzbF%*JoS zdanNly2n1Ms7)^BdBG*(XJM67kY-)Xoe#+Eg&LaG=*mjPtG?TQhD^xPeCPO#_X^Og z?;q}$9A4Ugz8*!YaIY5pc)7GkGau1OMWUZ);X<)^ve%g%cvz^@zs#tEo5>mf_&ZB3 z$*ExiREq`fN^rbilSLwo?lN=}(M+e2?wgw5Q-9Ri(35vx42 zOizol%oUU=+a+#UC_pAtjvCquw>ks^VsY|`uEeYlb_gBaVwMcawzJcI{{0+(5{v(O zOZ?@bFz7(~lUw4SrQ&y|#N8=zcS_uy5_hM>-6?T*O5B|icc;YNDRFm7{4YBt{+NdU zslMmZt*jmZxa-;17x&8e zoELE(%AKi{bJGsfBcaT3##gB>g@63|Q96a*=7im`@w7;BNtf$;;snM zr~ap(cQkg~^~xEC1fbw7M+Z9$Fuz#SS7_EL86yLS;8nIbyiGK;d?k4ebKfeew;9*-@<`$eg$D`d+Wuj2QL(XGQnjn1 zd9#?6L4Z^oITrH>7z@t}IUjo&;H@du$-SDp_hG0ORX)pigBDKdc;en(=`O-fPrSgM zD(4EgvMszDuJXAtTT&QB;V_OYMH#rsHp*c1Xx+Vmiz9`scgMp@v~c5);Ti$Sg~JHq zmCEnLbyQgK-vVP{xm+Crq|fF0o_2fwx)IinA3kTHURN7FUWh&l-G? zIrPZNG2(xaXcLgHE5Ss>C96r9aUVU=-vg^A35?)yL6pg&ExzQDkc|F&X78{*D@jCI z9j}u_`9`FurwfB>`ft9#Q8?Q1$J19Eob*~F=TnUu`N6wxnkhw`A9i~}CW7fOV)mDX zg-!*HJk9XBzr(h9*exJd?nZRjDD4p^(<#t_!W~?v78q;QJhZ1EIy5_NCTgQY6gIA1 zPrcv7e&QN&Qm#p4ZfvE1U@285 zF>6cw%t=}2eQ-&3@a|ILd;y^_l4R64{QLFN#!!vY7LzG3d*pB`7-EgcmK^ulYH|s% zK8&{1$|k#+`Bh0-765T2g54a^b3&xrROKB7J+Rc^r8O#Z6*+SDlYnuAXQeY_h`OK9 zA>Y<~E__LvimtQmf9?Gm;d*n8*z2*1jJSAt(#$y-&pq%!>F8(Do|Cn58;KSWf$*#* zmQaPHhmp6jXx|#JO0MgoLK35uc07m-B871zGQyW{SrS#?R~)Nq(hMS5s&hH#IpxsW zM@$?t%gfW{He3(`+6qyX^kdMKn;LOUte#NGCMvv8krivR_PYp#eohzoZKoTa z>_;r>k9!-7O6}gpqHg#6O^{sQn^K~D&>HLTPZu460EEk;eMZ?+$h0|-Ml=yC25kNW zneR%CTIFcVaC%Euo4qWdq}p;?#pgq$3N@23HR>SVZtXyg^J)bXS9J??ppxlZxlr*q z%a>R)D`QZ=@2^fQwdu`l2gGW$w`X!H8G5_QrKf6o+n9MeUG;Q*mA(h~mY-n=^C276 z%kZ}_n>;|G2BU?`O2cG7HrSC-8JT_G*`#N!S3W$VkwPYlC^MV1Nm3~tiDV@u znriD~wgaaS)cxh{z=@~_D$EaYTOCpNHyCu{j}H9ISo?={8S!*&=Y$J35y_-~2mO5zo!4(vcit62_qQjt6)I*KOvQE{9$hp!a)m{Og z_|c;wj&D!+7NTPdm*U7S5PoRh6KDcaX$ifx)lwKMpJSOi}Ej=}AAXVm?OYs28ud2hwkQ z-tcG1rUR5&RiNqd)J&eoj+k#5i&wf|{-$gkhw*LYgask@tXlyxL3T zl`zTuhK&RuS+z2#jO~(Sqlk%qsTE+(o>c()OY8TnPrS&h!pX_SV&Q{=A&nX}glM^K z)V$m1;(M$01ni<%X8qu>z3ruQaOg*}?&&I0fK7-wF-J+aL3YSX2DJ*auuGQr?wNy! zagT~Tt$~Bfg6xP+Y-3@+SFGogBnCvI_RhX}G31bhD}3)^`;MuG=)&2_C!*;}L~Lxi z7;7*}4(kt3kBV5i($$M~H^W~o zNNuwPFfNOMbE(-c=)Q4)0}#sZ+!d1#83BZHVT|h_4UfJGgk^+Q^mVbo^L6j**IzqP z`6fcC8p&tlUeuF0nqw3TeRBh^(_AtC_UxGY@Dby+#~0fXi%|cpjhBsIYn;K(bmH#4 zCwI7l+BI6FakgWB(6{!i>UJ_aYN3% zI5k)93w@?~t&p~@WGnKngoI=}tq;QQC$Zu@2C5Q(7zyc9`?t4obxQO7Z+yu&yq z#34NChweBdD3?{z-Y+;q55=V0wK)6Ym=Sza7+cp{se(>xe-n+q2SuaWaAkmTd1`&Y zBWOf!LIf}_7lDk+zl}!YZlcj3ggw)zwdZ+3D4)}pNIsMYmzqWI9I0JfkGisM@CR`Z z7{Af$R~lbR(02mN%2tGZy+>US6OL>To~+X0@u`H;P4dQa_W%rKc7UPW!&33k@krD( z?L2_bB<_kRo9XGL8B8kV4#N&j6qUc)F2GPe1u*nAd#A8_!|g*ZOn5I0i|nDY=-!-L z^ymr<9)2;YRV8FOwG6g}u}&8jd^j)do~Sh|?AE44^rVm?Yl39)Gk9t3xm0Nshj^d~ z!g;sY9z(L;Y|;Bid2p~O!r!5O9>TX5)33M1U#?mHqub*5+34MAad%qWofdbe#ocLf zcUs(?7I&w`-Dz=mTHKu$|L>d@f6Unaa#YIB$;|w_<#5dee~Kdzm97GR{xU=P=Jo%T zOf9FEAI@6{1#)2x*@Al+!W2`{$-7CcKLXE;7(0n9Jx5%=ykf?>;e=ilCboG|cYzr} z-nt%%>af&<*Q2)2HM9mIb(^rxRHBpac-EB^QZQjMl;W$_%L|Ep6IjL|+2ARYv4F&n z`QhYeSSvBPlPjF=xJKF3DOLZ(!uyv4%$qm==K##EPH(9kJrgyZTpR#a}0ux3sVazPh}4bzxCcvcs9w&jbBSN=qfJ!(1DQHlqGxFLsjyw$PQj{|3s?F}AZy#1T ztG6`jd(0U00^PC#LdV6AL%xYBFpDfr1pc)v(TX&+q>*G4rKCC&3ygP(2+N_!)Z?bp zC37@-G)kekR5_*N-42$1LdF!fBm;#fLrhj!7_-jD2^4SQMly#o88IrxI^WPYN+yP0 zC)wvZg6E7%?4xzKaA-|^*Nbn1?JNHQJIo+L z7dtai==Kx!l5y;rDaGetGU+^aX@R`9q}EQ1><9i~0yX6muS|y*ubTqaTRJ6k$t z2N8(h$o(J?$NGPcoZ8K>Q}1-&vfm0EpFP z+;F8odPfviUt|sa1Q0)15VPmWuZh*_*zg1GE8z}v3rB%{rOd8;yfQL$LE{T)YPJJzLWACqV_WR6gaq1GmQr{00Q*X?6yQ}#Tf3sB z=k#*NiVRhFTm3{ro!)-R>!(3aC^OntOD9CJQ_OIGZH8a`w|%AMwj!{vEXeN$?JMo5 z{iswMwMo?9cW|^kLM69ngb{5nKQlCCn#K4q7kSbA$?3B|@{XtF`QEYq1k0@d2m2fFu;WL7$FP|h!knXEvYieSetP9Z7uzQND&&uA69hr zLi@oV7Qf{WLmR0Uh&RaYO?p4!^_cFgg5*9ai;2=B+FIPEQNQI6+c{5MZW5>{^J1uZ ztbJK#@82BLfbQ}03jB=y9v|@<5VL+C8xV#F{p1N7sPaZtKaR~iZ_yWKf+xP=;b$2_ z7qmT3Pf><$yj-E2F{#>Y&vYxDk8R$bg#nq_oDIck@zy9da8>0)ULe(?iz|fNA^(~1QoU0Qn zf1-&HkrBdb3q&Gb21vw3y+@{1eHypF&y}5n8V5UuTvE;6G-T?ZC_u zQJwvPB@if5QBPxoW|s0(xP2ePP*;JOWsKJH^F_O=ig8e&h({HWdiY}7eXZF5qeIQh z4SeZJi`i;y%H^A#et$p6$;yy~h_$p9R-71T9_{mKP`)up01f%+n~}9JsQQ{VbLIyS zOR}kO{R2xjZm(jux$F2^MVa3OG^q0& z#9HXfho!OhpK^7>a+yGH&?_;UDJhe8s3=dev6p;_kO|9r9X`{&viZukwP2BZ4Ym7K z2$G_Dy~*B-RjjZ{VFM{#HefBtnJ8mQHiXW3C&~kEqCCA{0?w2l9WNhsK_>V&G3hV6YhS zG0+r2^QrG5UBRJm@do|>nR1?+;4PT0{Ao*e**ARGi`3Uo!7rJz^T^S_ETiYs*+Xr0 zVkl!gMZ1MY(zwhuGOx|LN!2{c=FEV$bOo*aw<{+4?Zbnpyvj!L!RsNDG_-mIIoYjh z;t~i>8pd?JR(GPJL`6vC%K(FJfHoY& z8mAwWgH>5-u3Y}MQEbMEjUHG~a#Ys7)DSIdBrcn+$b}iS7L#NvwniPH2vX|DFjbex zc$qL z8P{HbjKYcSU9(UuoE}_wx$jainziB-tu5V6zMveT=AUXfq56v{(6WM4(WGv-sfmX3V*GmN*&`!EEFTM8L!#HNy^)M`^ueadXx zLK_W%^_xIohi$dau0b(M(mvQ@(4+j-lM!0=c&H@Om-M-;_nYylS((mfJBk}^kLao+b?`Z9DY}A4jjo>Q_WuXIuoEo z@e*ln;JwCnmy9J-%AE96iz-z1wSqm5`MeBtl)=(k!>*A7H@@`Y_r_%(OV(YmidmxP zGfio0JLd~=a|?DHjX3Rnh1@OMbD;+1oV^WK-ytBThovg!%~($?F2LUo(ZX-9&AL*r-8)bqT^XMG0Xb3w??N5MlfdwG(jqgP1V#I(Hl*Kmi$y!Zo9uIaOLeXE>x z-V*jRmfpQX88a^VC9f3sG#o6xs+?c(Zo6-Kd=}&(Tv|HljNbcX6CG|X&nXbMe|V+~ zB#I+UYd49a>E9E@d5)VzagO6hqWHmRfGWsthU%#}5($jKams0dQ;If}2?-aSumAE= zGRFmL_LswvnnB)$ehovb%AuB^QvoaG(VFx#I~aJot&luvO;4OUb?l0mh(W% zooU_o4;|c@c4YkO00wa@UD2cF%gu0rL0q5EyLuTids&I^g_}Ro*JZzy_K_1={>A<< zbWq{Yg837!V~>fcZzL04n^hkSkbtq}UTL!JqhA9F?blzYTI7LudTh5#>BxXbrN-+zfFB&?g-qm#Mj0`Ha=__0)Ua$7kqt>Nw~Wz1Ha zv728nHOjch*VU_)hkR&7JM8r;r*n!_eRcWa@iSDS*XWNrw|4PX;~fn=)sAZeFrO*8 z%?_~%+&ABxUEASEfbSJE2%a<;E*Si#Hlio~iLCsoTkI9F6b{lPa)eH{z6Sy+!TFQ< z3XHHFA{+LVmFGomx?b(J30m`t3%$o}ln@mvrvWzlarxb08Ngqsk|087rrleCz7$$& z2b1T2-dM1=->jM2i6Nba!_+R=Uu5DYd|a;vHLU;&S=8GGjz>s zSf_VFt%O+M$tCf=nolv-6f^1Sapripkql30(dX>Er5NIrk8Qbmi5ysYi30TrLODDi zm1s{%Xg|IL5M9Dhl$s~D!p!7^6wd{ZH7&Pz&{(Ps$6{9smAX#dfFH^dYo^b zVLwSkwoWti!L(|(VBh=6aiV<2@sJJ@KWui?Sq?8nHs`8@=WZ5sM0h;;fk+Yy|M8pk zt@We}%S*(ch2K9uNPj&z2K}J_d2sye1NGN~<6pnd-Gg=aVEvDJu>KPzfnR^%|2s

=YdQ#sX1$X1S%eZbLbV9yTu$V|TemL+Z0tx9$z z|MKcA$>(cIsQ(fZtlCuD;;J*60F>K$_+HdnDBguc!5II_>uDbKCUW z*^3rO!&GH?k(38z3LnIm$YZ(W1344=E$Yn_vCEbESfW9w$pg=CH(zFxeE5znG8XE zUfGndwS{Z4NpY2OhIzHUvsIE}X;4vdI^EAeQE3%}EAFe8KQQIJ2vWgLL%c|9n z9=_UH5I;D&XQ_kGm#fc+_DccWG~5^O41*Z{pbd_P7Lm~S^kO}2gUOFX38e13FL1q1 z@qv>zBD}9YY5`^Y$s4`xEu?NO5*T|7Y$pN_M>{n;moIFrsmKA3v|^i2KaDfSvxVi! z6Ybi;#4*+$g7i%JEF6a8f+`uY)gD@CEF&nNl&9-22=Hn!^9n>DA*YN-S7Ka)w66q~ z)e`P8+JL6VGFX;XX!MINN%L6&UJZ4V0WLrG0rAeJo0p_pIt>C-i9k;PG(C0%rpNK1 z>9Nhv>2daNr^gjN?koEDU^gOv=?Q#|zL_4Q|Ck<2{W?8f%)aRfl=Xpn0yooRDe-52 ziec^mFwErs9t=u}V2n{3c9id@#oB^01I`xv9(&}DSGR*i#p8h^AW<>51`S*lq<6|0 zbez9;iJ`LdO;O-0w`9`Tv`lP}R~KGwQRh0pqaq&DP$FuNYIyekZavzfI=c*k@OI0Q zgzY^jv;?ZM`1>)pi(_LbRukjK!T=W@)nra&>4H8K-^uqf^g)k?oaF5Y^QpYeZ7+aF$=X91}*84Wz+Yr_i8s~(}h6+Jfg;kC(?17Wq(&8eBZvL90D8~~DQ`Cq^ z#o;2ZHC?eUU3J0IN-mm@vd_V~Z;7SK#{uE+DOjpXJ39S4NLR@FR z)xFh0%0|2U!q1f?YUZEL!U!po_VgJs2#7umq7d@lCNp_#^O+=ZD+uaa^BvCgA{kojJiKYgRLY65*54g6H0&lAu2v5+%PNO zgB`6hwF;w`FLUR{NrPRm<9#g#h>AUOr$=u^#c1W3Oc!bjk1WUM^w@V~#6C|FJBM~j zoHf+pM;8-tx()rZ|V&S@7FEt$(^VhO86QMhS6NqvPTa zm33UC+t4*|^niUR@PDy4rtyO)(+v73x2Tto`IEw&@Popf_fIIy9C)z!saN{+j%7L9 zHKR?jwG+c<>L0aww%d#Yp{l^4;0x2dCJ`Tvwei7KSBDjE1@)yRtUukfYM}8mSGx{W z0CfW_$R|?e9ve;=JsuGtVHUY^h}kcX*iWt#?)-{}6&*bWOQjv>^5d;s1`dMZGSS5S0M%75GWHJ|IW4Mvjj)mkJ zfaJ)q1H_22y&|#E7-|eu3|Q$07GNdIz50kyS{_m_;2GXHhz*ib5AndOmP^coTQ=J~K$f}wP_l? zNagE2sqlQ7kBX^4)c_sd#%}_yYFh8y*`=-k40EQ@J<3HSmqb*#9~fq(@BAPPb0xC6 zSY9v4PMmU>Hs%lSy5E9y9qnn@fa-geeR%VB8 zv}lt#btvacdXDHuvjR73*@{$I*?CY#%y_Z1@sbT<>ZI?b<7@uJle~6@PmPl?Nv}^b zL1SYr!rzaL8~(jxV?BVw{D-me`R~TY6SrgI+iHLg2?WQw0}S(aCM}-+rOS8={_A;= zp19uzP>CJ=&=V(9{?rrmf%L>ZAU&}ZNKb72Lr+`@(i8K6ILxGPoVvavD?TW6<$xIQ z()#__xMdrCuH8TDT$`i0Uu6&Bv0Cc!Y%HZ~`bx)`Sp}co_B_@G%CeBR+vDbh?`%!= z-rv0P1j3)nJT80mz6<)f*iqbbO7k$Zu?L4S!E>5iUG>j={be!Hh`ql3?RO8iC(^IS z#9yxl{DWiS_tk*ATjK7PxVt58F-CW{#N91%cT4;G%H<$&qWLcqFCCQJ|nhZx-fajttC z1thAdJW7z4Q7|E&gs>0s`_iE=W!{kdD*4Ch&rmT=7RbKeM};HDRxl!icHU>&YTM1w zb2(b|?Nd|;2Py%EEucz31@Ap>voRVE-Szt+U_$TAfJ#6jc>ITExKrh!yalDDq12BX zx>0dyHJzygjCNQrcABbQ@4Q#PUh~;)3?&RBba67c%o*relbhw8(zNTJ6*yR!UZQMq z>*Zu{+vuB1N&VhDRch(Tsep5>J~``{GPAdbzqj3DeYoF4kaa20%*FJ2dHdC8qtt4; z=qkGLN;+|z$FKMMl8PT`)6lWeuO-%AtIXvNtd>|{(LEfh^Wm!^rVCCbi=AaSke5QW ztVVm(XV6O6FWv% zjrU_zl+4~}^RhF?`s~2)`BZRqt5^l)TITHNFMi|USsDonq<+?B#nSn&(U~Vto zG4i_9I;~UI)!$%Xe|)C?ayQ`SXa3K-0lz+5f4Lj*o3C^CjNLtB|9b!C|KDfqKTs3+ z&CmXSXH6h*+P!s6;chm%K-qpWS6Zp;QXZGWm>jNgZPCE_@0?L|{Y%!&`Xvi9x znla1xm&XK~0mxz@(>s|$IAkQ^tVI5-%T`Yceh|tvZVBa%3IW41C|q5v7Y1e38mx&Q z72*{~pJHhV4K)z+cWL};YhLPhvAgW!>G`s2KMzTL!0YKBMHQ+#-lnim5J>n)(E5}8 zhRwobwy9PSdB#8jnL%wZ=8)Uhff{WI@ydd(gR2WA$a7&SN8Jmc(gC-8&2y&-Ac)-gABegGokWEk-k_H~Jx& zu!2i|eG!)HA+?I^-sQPX;*gN?E|Jj}<~J0O3+!nxO*cPiVmL!c$Q=%jrfWq2FabitG6uys15M2xXcr6qkfXiFmg{ptH^h< zl8_W^$YAs)oZvjmZGk#7Ud$T)9*NyPx=;j3i_y5r?;*C>a~ueA60}9ufLEclI^1?* z(lF}VOc*09&jGar4hyQfL|18PZdw9Of8G+na0FTc_O~qoMpXb%UU3U3hrd5$RG~Rh zx(ff@{X1KWzqHl6zE_07{(KX#nfn;xIJFtMI%VeM*){*1m=tO;UJ2dsZN@jG*>|&<1y=y zX;mVOcu1CL`IFIZ4~-zIPrZy3_E%dKtsaVf9+k8(g~;K$F#KO49|^@#|Fku817_ek zfA4f0#8#vsGhyi~nd!WB$5R+KaXM3IM6iLQAsDkp^(VJNk!;8w# zuZwLYhFlbuE!_jsOjN0?lgamMq~L)Q+O}H!uioZIw?F}ozj>R{1kw?oYdBGzDtv|Y zMGB&Zd)45p6t3{pXSneTsc0cw2~Ef|+Xc0l=vk43fj}0rjK>W%hCcfGK4(_miL^83 z0Oz<4ziSE-F4O;;;AzY2G}fRmbiyrO2W~|V-kNC6x!186?p^M+Nv-W*1s~|jsq`H& zNQ&qgQO${_1wa>eZs^K^&(<&0K0xq##fS`*mv=zTm`v{6OOMQ?&}%3<_XYWFL57gK zU-mn{HskC}Ve0H*>CKexl(Myv?@xKCj$J)t0HbZ*dxfx81?MMwtyicsPYyORaKaHy zRXQFf;frsPyo>5#Ut0GVX|;iK*9+4<4j)oDrXciPis#RUyHNa|#C>4XaDoAW#>IEt zrE#bwHECMlOmAM6vsV++6g$aV!{etnO`$5vJXA1S!A1~PyQd>TJXy^XtCOLWqdT2g zYE`sx9Vq;DKpb1krj$P|q`!11#K0Ax30!p1tdP*VdjU1O6SRv}fF_VB^GQi=*%xKc zi_{N96MzP20!G{EM>jM95~v8gOuK~}JUN*c1b`Z}8-WgSU8c zl}|j95&)iD5rijS28H%&pSr6>MyeyL$ZbMZve%y0H)fOKu)jCbubWEmXCBYmWL>f>04i{5Z0Kk)5aE~fJt&xPw zA_w8gtpPmwOCRiDxMER(9ZbBZB~<(Q3#dG76ImivLgUfTl`5<06Lqz{^Lr=z>o-@{ zo*7yR)~HgBk}M7OU~S2KjR4UElm~8T0$8#neqOVHxf$}R(#ijNjP6KKXd!qB?D;6~ zeu+4XFO^v7j38D2S7_Wp=&?e9bq*eYCNN3bM0Ks^`gRcddSl=6p+g~_5*OL*Got!z zF>{Pkp>F~nahhX2U(42&w#Bs$u09wK{^XPAID?h7Gl2O>?Oz}^X8LkYRu#1w3A7}> zcCST%xsLkoGS`&w#$ab$j`OPPs|#P^%8q^)ERoU7{g?J!JPqgNy<0s)1KvX?FJ0Ju z{gq!k&b1`aXgKg*%P!sM@Jc04ftdY^y1E;6v+T;hq;59Pk|*HyA$~AaH#I-D1;Z*2-{wl4 z967&QJw!x;nU_}TI|pX3#p~G<`W^XM)ry$A8`xq$6C#eR{;j&%3*5u(h!K;dT)6X5 zfDX3iWd77z)%TVBOM_u&44a4%!mj7p#ht7@$EvHOi+qU*Yf<7X*c)FWdL20&ig6t) z?E!9i4?&-4xvqbl;Y;yDtiW-BBUHyxhD*UGI{BxQD17i!np4x#nYacu?bglHMMUT0 z&C`_0Z9ggl&p?%d*~3|tI+wp!24Zh31F}G6fa|xFffDG($yNX7l%`>5)65vO*i8*q z!>=vz2zjQ%@1ZXL?$>a?9u|MOGVqTMi{DoU?(T}ayCVMXuDH7^?(T}ayW;MyxVtOv z?uxs+;_j~af8(zBW7PRq>jP{ooZQ^MyIVAMRIarDP4$7>*Z~qrZCSEz|KKS3kzOYL&+0Za!kz5Or zK^rS}6%*50&wO3&<2_X&7x{!Y=XT1w*Ox@p051QYgCB80?c!eEJz@lNcbrqndx%8! zb^Ri16Bi#N&_j2%Ut3;IKRxQ~>Wh6~XW4x2sJ}C8kaxbgakivmW3r@dXjgG1GBfW+ zpcwn1N#R|0jfUB0Ls|;1A ziKwYe6Nu9{3wEG?R)F#R|Pv4Y0;V&?Uf@tg}S8vVe$qlIl3}bFW1ikv7HmY z=EtcyWpb9&G57S+R8iOkW>`|S?Bd|2c~qRNIyRWEk{&VJ1itIdR?0XJHu!`Tp|+gw zO?s&iK|@$U^l<4zJ`4^y1#GzI8WsP_olSc&9Rj1S}4 za-&hHIi1G|?<4)dnLl|PW`PZUb%1$_jBUB)+-R9b9UqCq^w8j2r(;TO3$fEI1LWS2 zJAFo4Ya54)f+UGKGM25WP3uRSwhC`m?I86>^=U{#U#g(Q=tB*~x;NN$tH=Co2`36< z20Be8c;0wR4X~Tj^|8C!@_P2a4$9j^tA@{N^@)&8sfA5^FP0K!ikG_?+4&|`_qi)x zEiBh=n&Ha(ce24w-|}Z22?`TlO^fYSFzT)I%(a`@MGlKZg>y{TcuBy1=i`(qF9${PyeIJyUnj z)c=%c>fc`v`0da7e`h^F0}WAU9H<8j{~PK7x9{rzxE^4>v?+k_U#bT5!+ma41L5tc z1qMq=J6;wkW`U_7hQO*AiR3fk1+udBq?BPZX(L>59Z3bv1V=EjJ+EUr%TUtfC3Za5 zZlg$fFIn1=t}D(Sy5Q+~ccSbMmXL(9nQSlB;Kkd{$efU_K9S7lm3iWw8&?gPJ%0uu z1eOu_9Y~mR^5tg7UJ9ez%0)#32my6PsakRw3!K=n`U%%ZrW{TR-x3{y$zhgQt35Zx zB=E`4QPlIdE~yM96-1O0`4on|QiUIwVMaz^4|8nR5LreUMR0-DAG;)G+B3$!I(68{ zo@5Ia3G(x-N?)JL8ens5OvZ}Aa?J=R5pXkGR30|_Hs8qFM@y9>>lH_}nsqRIO4*K} zMWv+==*z(Ygn;Pd*4f93Y9M`inVHh9zWfy@e)(?O-}L1&I^+DTCM#YhNL;o(9h>A@P^n@Il@ePQO7i1(JzGKYRXed_Vt<-5m*7_;sNEh5In}g>EY^*Q zs_QS3>{JbT@YJ^i0`I&JkP{P|A(297WGfL@*K^7oKwo|d=*zbN zefjc-8-2O!4}JNGRX5m=b^y+8JAeSx4p^?`OfWvVX$NG;XAy$h0o|Z>fHPJ;w9joj z0Gd`-$rlc;dL$oI(`dVJr8#5))7lLK1lx&pTIDG8i!Zb0GXgRjupu&sUS7&KfWO$k z9*Ns{sONPg6L$2RZ~2`pitid1TouG{^1F=bdQ+pyT%BIM_p2XybYs>?vcqj2lPTN9 z=Qc#r;Ycqsd`w_WWIb(uhLD@&#a@}+%!qGa6AY3Kfc)hT13I0V~M6hTH!rP1huij&mgE=1>Hq=w@!>`%0m{{qtPVt40ahj66}(=v%Waeggb$u9XEwfs zd#c`~Cxr`xhHZe~h?5^=6nktCcLJ`2^!Ivz43#Oe8I@P~nI{FwiH0mb(c{8)Gs~ox zpT2&6-YnDD+S5px2q%*6h;pAm_|v9lbBmiGs<|Wu?~@<(fHh2aSOgk^2Tw7oTlrsI zB#tk2K@-L$kblq(KZo0|2Im`!Od5(atB3etr4U?D*+({Y{72gW^4p)bfpk{a7FHdL z;al54+z;D8FF4mzn{{|Co($sB0){zg@*s+Pz6j){;tw4Irj^t^a?#XE#ce(d+~5Q% z_cz+5yFtg43P_!>2nc% zyY4q`?38ojj?0Pm@V9~l=9I0?l=1@t9w34F?AFk}$i2F`0#1;?+_<)zuZ05;m>1mR z#CR-7YqEYam9#D7tb}Se-t(dwZg}Z}A0bByTDF;}X}?`}wL`5tNMQcJyCD`KVft6! zz`_73as~``%1_@wz^!ipRp1xjfG)^4@al(e-~i+sX#eROC;@x}-pr2!MNm2hnQ)RZ zyU;QraOGR?b7U4ww1tScbfq~EKhg{S$MpcfH-ILPfr)=x4?w-G2UL0fNj)Gsdgrzt zQ1`g1Lf6Mp-^X$hg8kXsS+nBTpn3olTxK4q9$@q0wjSVl;8q6I1I*{#8(0k2{E1qn z;`*S14{XF$`g%BS>H%6}M1i1sfQ>l#?9^>NfD##MZS8;?R1fI?r}cp3o|3Y>rCrr2 z+T-c_w0(MDa=ux~9$9wbb6)5#G{#oB)Bji9`S5n_j>- zz@i?c)tP05U*-K&_(iunE2Wz;hnAPneg8EPeZJxhA8&OhLBlV+m%_hbusjpd+D&r9%;3ZK9S&^|=741%F~J;3~jV)2N`& zRMrZg*i}`6FnUKyj;r!6z!<%QT0DroBwPNuVnC~f6W|qyNq$$XUkMi~fthm*Us2-3 z#tx_oXk;Cr0?YMcE3-2{Sp%(wd!hF5Mwo^qrcC=@Bd`#zQnJ{a(;dNKXXiqZ~|__^1_-a;x?X%!`BQ=6?5tMTdS&J)HOkLAQk?76CZ=pZfxm&$Db4#6A^M2vvJw3T^fPh@I`K{8K zGqG)sY47wB9mPzFvBRyZZ?s_pc|o{Lx~h&S^q%u*GrnwYmE&F^?=E6(TEANpL3Li$ z?zRQb-s#(yN0*Cz`3+?q$GfD4DG2pf2D&99R(vTkyH3eDnmaizdwesTNr-O=h)!3r zvy$fIKvE}2 z&uuJ4OZY9T^drCEUtI(5NCBY0TV&=N*TChiYk&ge8sG-G2D*Q^2GBsR0Rg}@5CL)x z7=l~_lpxo@yIa?QgChmt8i)Y72EuP#0~j~1fhv$|po^?f=NH$2>-*qeTmw`^S%7OG z{}g=nlOnZmOItEifNf=={>uoH}ao()XqoOj`#HonyS(#U;EJ8?U(Av5&q zf;H8F$ouu!AHZL%rnBLpCyMHX%RhZ)Fc*|*U$jhT8Y+^!coR3`EB%Zc*+Qr0-CHCB=G7g! zkfOqK=JIVaOU=#70($?IZNlM##U@fn-!*AIFH zQqGxUHt6io0!7hb0yuF&Gn^WgN#L%Zp`MkP@0f> z%aGNfPCK2`T+cuB!)ZDR$P6}w>L>GS@ksEpk~Q_^=x43RhK)Pw^yhuWsR*9ZXtj*ikp9a%_<); zzYE6Pz2b6}P^?#s>7>MU?#+6I~xif###Y2ZzLL{>MQ(g{*@5jBqYUiu1c)YAX2`E~I6}K6( zW@1}=0E!z4xnwmdGwx$1cK(bTMVTzyl1p?!aU-{P$cdFCq^yqDN}_xtLe$fRLEu%s zz=iO=+mSI)Z*nkr2fj@;nh#K7H;a`bE)KgRpf6}SR|G#K&4kpHe48~GHYM?^2rqimmoZT;UHp$; zVwtgUGYX=@22Siw>vKquaM3hyfZAN%)eGa15o%qf>~p#~&S$h>xCQCVptSKFkT!1M z7kC-MzubIbN+~Ni-aeUAw@uZH6~MW3TKcA=$UqtTmRL?Mxz(X0A;yd*g!XitLY{~6t)nUcI%EHf^j7@ z#glDb7m{O^SE^|A1g6bvJT6(zl(oNe4+|lK_lv_gLOd^WzP!7-6{;jpDvk!G&5?hb zHYZaoBtwVWLHPDIIw6-prbJcKI378Y{~Kk?D1}RQ8C_0_BVab_g3QJ=v|SNb#<8V$ zvZ-S^)+z%Le(Uh})8?p`+W}awfNAqv7rNig#?^#5|2=z1S+on#w7H{yf^=EtseCjQ z89u^`M@nz0CUZVtV26_>KSDT4DohH)Og=DP9`~Q-oZVmAZk4wsKNw~O%tn=B z{q6Wi&Y!hg@6ASK_FRzJi1^cNq{+ko53`XodtLdUY_oq%O>Yq`*hB^BB0tkUcVlWm zZn1LyjxUTn_&B*lVX!nDCs0tl1wUYTFa*b~@r0!4l?}z0R=4R;Wofs$rl2gtt(MQ{ zIanSpl8t0isyyE~cg(4~dIo0-Lg}SYPu2pwyso?=TpkIt5vq&sCt{J3uRMnstuTHu z5V1cj=*&P6u~;*#^$uSx|9Q^6#fslg9Xw=JT-)g@CI0RF9WC6vA{C+Py^WsZMs-S@es;F13&7m z1w<`I$*TF0Rt5@6APMup@?^L0qX>gpv)F=rq67K6qFR`!a)DmhRSbL=Oh}_<*>4Wn z@M0f_E%C_ov?-P~%wCv)*QA7h+=+jocFk9GKz`kE=e#E&E*JZClT~(MpZGD>$No;6 zgzq~y2ai>^%BOWvy!N^ZU8hCteBcp;w+~(%@|}>m?wLN*!0p5I6`wo!K_yx|&EfOuspA~JglK?QiUIKlswHx} zSTx%)#1V}=q9QI~6(w8-;qj@XE|Sh+j#t)3mA^TSpM&i2a{OcCOJ+Jd=Gy2vyDZ7` z^t+EJ4Q^F<4kao+seOD&=W>=%wdNmhKO~Q&KEp4;Yx)$Ly21hR{9T+AI~(fmyfq-S|NTZxYX^1mP^HAHFj-dZmt60RWQO?7SgOHn zk~uCOt3z|m3u!-+vyKxTcqSQjyyn7#6in^-^vVlH60ZH3x?rw0J8jqdO?JfRTUIR9 za&Kv0>eCgVL#{_^ek@SMaTAmw#`&fNG8)%CebU7LbUB0hBBV-qnq%TEDhK_|!G?bG51l$zTWMYy*?d{jxX!)stDP`{DWZ*+$ zQZD}n6^78J+}tjEevs3M1P9z{VNzEYGREwF*1ULDc6olON*-_;*T`BDV^4i>i5km* zA~HXHY&4PWJIOFqs$=(ApBRLy%|dm^fMGw7)0l+)NSWb_Q8qYbRDEM1AAz>~lH9-x zCQ}m8x5oTB3ieXnBTlBt26Ad&zYlEpzzvqtEJ>PIhkXzX^i3Fu-~NqV9tFo0T>g_? zURC3A8F$mrQ1!z+`fC6Afv_AB;s*Xj-3tQ2SR&TF4D|e)717l=H0OyVQZ2KkFk zq+_KXh<)XLR(CF?cGf7wAUuiqpmfbkSU8uHX`!|YmLUYM}_);)tH5oJy`%)jfH^K_yMZ91h5(l0vk(`X>&kUqt9@ZJo>KH`}-nt z;;{2fe$Q)Q4Lo2e41FOSR7B1I`@M*)%<2C)d@qtU=2FSo4f4K-yhlv+45^c|JeN|j z`m*LN@|5lpPkUKWwPoyXuh_ZUkQd_?_gnTsGa17Hg^AH5BR2|%bldd4zTI^UTuNb7)0}baz3bB7n5RCB_A-1zb3GQ?es}qX%RJ+jFqcm8+7c!ma+h{ji$qSk zVor~J@wQ*a!(x#TZK2`X-^_-gpzaa~+@y-GksEFKXEz*Sh zgQ>~Y=O?>79138Ut3l5hgV^OCBT?(w*FZ&N`)DH*ECTgR6K}^2T}1LDjr0|gQ$2A6%V4~K~y}5iU(2gKV4M(TZ~2~roS^99q_XI z{;E}Tz-R=n|1X(cF@J-YlRz8E%MkeC@`rTZKw1kx#%To>?ldZ>LkNG|tUxyxi zd^Gf>DP~GV)SG(2YC%4Ou+f__Ych|vJ9LzP|9j88U?gdw6`^`KWd&`<{*BwG+xO#5 z)fd&b2kn!FL+s_Q*R@l3UK>-FO*quD4Lr#Y{3X7PdsOXv(??G%@vn|2mPfzU!2TlnB>H{EgwB zU7qrslP@nT2k{8+jccK47yp|u{Tu;9>=ZUWsPvo@P48~jSe1h`s8)!`Eyj)(xfNj6 zJW^c0ks_E;DWjn1KdQ*De2?0+G7pCdK(po__Ya#q^K`|HTi}!A_8R6qKY5$BfvU*7 z)Or6{MV|Vhs(Yj^c*KhD({2KJq>eKf@@ACst7#F!7F7vaN_zNYv?C^TLb}MwASfdlpXeI5?h!@>F=b+G;|5rJP` z`2Ws`K(qe5@i-6>==*CT0>D%KS0e&WvmjhK4D82U%Q+5db560)JX>Od>bg3LZuYY+ z&M_3i5Nw;8Q1D+1$<`Yw^L{0B9^rfQEu_|aohUsldYgGNn<Am z*Mg4UpqT`12&h+g=aW*_kGUeqaDw(ivT-wbhEDb@wUymYqKK+5FFpman$;Y89}hGX zWQNs|Yv;U){5p7*0ng}`>k?D1&4(+y^dnKyr#>>b@aDOgy4>{pS_06f`G&P=89_^8 z*k^CLn5l+O54Ih2&P~>rX9OMlHE#+CK})qMvr0ln7R! z1v&Ail$BKwhaFWsA$MCNXRI{qtTR@cz=LC?C^JPUM{US~QFHKy#s=m}T7#={17Or# z5g0X}EbNiVnRaB7i(9Z|aD6Ik5ag4W+XQtnkQAxj|9+D3wM1*(Bm2iu3Q9A}uRc+n zll7Sg`G3fw*d1UhZUe)urW)G2wWX3T3Bz_rU#ZUd7+gwW`63uOP+jqiEN?Ob+xVPK zEo8z!>vK>rM?Az`i`m}irx=MtTo9E7^N5?#?ySCca9=I)!ObbqBAz;01}Wg!!lD&V zhON9#UH5yU1zaV)r5hl)T4q%hnM}C1#0!Kw)v{&okzgg27UQXA;v=8QXL-N2WKvGe zgT+8M&6kT*IV1Nwb=Uc31m5rk{~BG8N$tj#SpCboNV6!4urn{ba88GlLVY0Z#gEI? z8$^cIb(T(7GQuNG(y$yfJW*Fzvw@Kzt9eEywNW}_20e*Yc7wPCl-zd`ph9v|p8Icw zWY=dvAvx=}LUJDeGd$}QO;8FL&e2EJhL1Hp`BkQMizcLJ;CFM@ms6lTC^%W<73+Z}LSR2z_j^f+;R z@Uy2uqvl_wjw5$%owzls0qY)$(-{gY$luEN=cxJe33>M{fGZc|&aP@3k9yX-iVnh+ zzxXG(a`VkiSf`j-pO?_O&*XxS?s4VxI-{~6T=}7KCPlUygKBCOlB8K5JFsqU#UN%d z46BfC(j9*v5x^PF+#nHSlxMDJ1nSSb2UizKpfYe?$aufQUd@X5^&@Lhx`QhJw+oSmo~e zxU9c{fZasIRfBysIu%wyhD%FF`OB%|n^(W$%9kaPbU?UrsQY>If^Q?D4NflrT)7xZ zEMgssPoYr!>@b%{un4-857edfNW`~tL8d`8gbTa%nxDAx*;acHu3RTvqHzA;H(dFf zdt7-ofGdX-dx}RGG63MpwSU8v7lCl)8NuohHq8gHnxB2--Icm@nm)!717Fg0v`!}0yT6?6f zUwe2KyGlw<4g1Fy&Z7M3`xzYfJNaF~z5QHZgll&+MQsu@jM-QCAx3NFrPcA4b2Lm? z@MRXyhhHn=X>8C_M8IX-hXf)bRa2`8L=?^s6{8KYW?-`km=wQ~$-!h}i36|KDWrl6N(7Gd%^Mq3)?{zA90iZE@QTmPtvziuz@b_%Dq)~VNxPo_jbv{!DkM6) zFD636e*>1gf`H|D{N(S;H95GW+;s-?2SC8`SyakiBQTlp96aBgbfQM+Z6P^~IMTc1 z?9FodV^B;$I%A#cY|~mzSZFUOH-IROz}bk&}(2Q_e^u;RNgIs`Ohs?fifN zw)oP)O1^2gJGD{i`@O2l#`va5hBI}N^Tdz1@d(N>2#(ojFMG=|c%0x;Gd~1=5D-*) zH_vD!d}*`O>doU~+xz+KF@u|PfH9LZj2Mdjh|<>=>W2`!an>8`NBs_1-h3&+Ch1*~ z&*lP*V8U1MKA)Em9&}9!n%E(?w^RzigR?^H4tWX?2qT%nU)t0hyoiX2!T52=WaGYii%!w8th02Pu0h?svX zB$paWeaKc75&o@^+^^OJ6p|&>2CL0gHMxnjIg^#iz)dyo3(4c!?=t2OB~dalLKIC^ z*NO6^&}(qWCn`e(?1Z0#*KY+7`6%0AmdAISGm(tP_RzLh&kTIMLXWX3OzpqPM+djM%1GbBMAmp~Av+n6b4 zS8}w8czm^go?2ZeQ(fBY)A@r z?Rk(v@PoYDej< zLoGu6BV?M^?MYifIIQW4UJ$K3_0;3Oa7Cv|2fE+1r3a zn}6uol&FQoCegegak(%($6AkHiv_^S_em1`Gt57WpIemq7w_2JPv;I;8xby-ayZd6XZ+``^#~v%@TrZG;nNG(ULlK&%U~|^gkLfOG`m(La!3^mKt`Z{ z9h4E+MbrKbR!(uhZ%%kLKNbYQ$}iVJ`{s_;g^n=xnE>UXG@ntg5Y{;jrr8V4h5= zTG#DP)adG!_2cqD5wtyG?qtuTs0VX;6qt2Fy})d%TVt}Z8Ej8VWEZ7WUR=?Y*WK(o ze7YS?7TDeA#YE3#*~5zKfA$8AxKwG@VpNSeO-_RQvO-DQEZx)9A)hpyY5j-Cqkp53 zeE((qZt(topPy3k*Dw7~8_9pT&;QCV|KDIX{^3jc?=%}LGM$NM|DtVVru(P*SIkCt zn-vk{AB1oB%ane6u0%M!_C;5M=n9B`hyH4$@Iyf(lI`GBiPcf9%%U1E-I7b&sav6< zC`$cm(&E5C-$2BqbxqTB<4|}^$xzO!d%IX89bdO`qtgo3N&mvQwUilZ0Kb6TDD(LQ zdZPv@shSPm3Vi82j;zRPBC6vYbIO8eh4^T}_3iogn~SunpjEmjYBR0NSMI1hkY1bb z_G1#NaIeJb$E~&E0RHg_#JoEg9kD6je80Vzfurc^8yU%X4tY_4f4qksAK|9*SkR*8 zO78^Ky%z&!6-|-GXwnNS6^G^h2`yT0lRTx>OC8cKa^zas&&C9klo0B zZ#Px|c4K@S1o`1D;!SfN$ZoXx#ctGMCX5MEMOi?qNO<|)Ldn%7_fsbq&V~;wSG)4q z+d8r%nCNsP!RSn_XrPb`tRo+R){*0%fYy=ofkN{B&voSdgYF?jQswUNJCp2?X^3OYzG)7KF-4M8#?2}C{IMl;64lZt9Yu6vkYH)RRZ3dAM^o+`OPGsH z;@$a#vqTs*Hx*1`Li!R|5vhjYVcb6qHFL0-{|EjU7jPKYG;JEuSB&TsTQzu>f zEBaZlxI@V5-M6b=aavAR6dB&clh28ss4Jo^huLAnVZK$zDa#Iy?%T2VSge1_j5}n+ z{J2M)aY4zxb59u2&O$g;qGR@(8#SMUInbMZbr~rO_GA_E01?cJU;5T!wSB7-SVs$w~LZTI}RkqrT&}IF6F6Q_M3N?w$CJ{W2WpFE`1Tp}Q(Od>7B!@)b-DJD!i&KC5 zwUC^d4I{q*jRQTl&nBlhsCa5_lK{|BBUhxzd2^W~ z3iW9=%k7ueu3O=FxN@~)NvH^q@p)^vyGo4G9OaME4J^efjyTN5yt=!qzvZ5 zF@dh{(na*=G_oUT8aeES@kyM@K`@K08k4@vJ6ROfufLk08RGEh^ZN87?K)Z>{XP8^ zLfE-`cZ<^Y(P902_Cc=;um;Cr>rXJeY2Agc!@~E4+*s}+)8ui*=5N#jg&W+i&y8O0{oZA{FLHxndiNd)lUCIq@Ybks2o2nQE zoQpW#It<<^{1!eNFT-oEZhPd&5 z(jOzNXA2RI<1uV~tW}dcI5|c*qG===a_(56mc0ozUHU&Cc`$G_^D88u!MsKJ-qHIe zzj6n0rhew5)%TS5h<83LV6@y(SbR+y8|+Ll3Ts>(>4ORe&{}Vr2*F2D>AU9MRZR}S z*^|442$K2CezfvhkqE(t$LR<-(kM}8qC#lY%ST0UKuM$5F#24agN}|x2`T)w-&8yg zCKChT5=%-j0S)3l8nVJiQUibm8La@`Y@jg-r=~zb7B43YKP>qf@C)sY%OyXJX--sq zM8(9a37!qhGXk*4#6N4va7PpPpjxs5sFsXHZkTy(GJ)#G7##-MTLC+C?^@qGgEvFK_vWHgwWhk9Ti*ZPbQptQ?gc6oU0kvKTw z;%LGX(8n29N=AZ*i6ucaP>;aLFhF9V3zC!jJ?b7KYb~#>L10^#g_9enAPd7pS1^a_ z9eY$3jiOCOQHJU|MM<*5LJVoW4)~46Zn5`%qlI|9au$0uf*o0s(pVfVZ!<@bL+K?& z9^z9-Z4MnPKO_(KmTX#4ngd6KPb(|v`eYGR9lbh3v^~xjI#LQhxL-DreQ)D$e7xw^ zj@Bi=Hgg-Z66>7_W+3|!&tG|(yn;w5v{LD=;;XG5{N3d8qR4?fYxcpr6Irj#=(Ue} zWe|r!%ndsfI$ynoGhXnX9PN`zPwq~b(xvu^9_!R69B}Nw^3_7vEPkO>cZuO{+(R;{ z*fu){YRMZDtcX=&1+3U-6$gLAM>xo`)7UV&9DrF7$~` zqSdOgU|}`R9^#z^3fs^n`su2;4VbNLqW+T)&_oi5fowsR4EHCc_)so$Fx;@w)&Ghej*m*Lho{{*|bTzQYrXW-?O0Rgr zAt5eOGa~`38&BY!ImnLqwx}`SDZZJ<&xRgi?+(gKWY7R3C zzE#U>Elm-*B+An(P5IV~9r$GcOV?2sUD$n=Oi>i^IgIg1+Svy;d_5@h=WMhA`D-;G z0y1C6`cDFKmGqKr&iU%8quq3hmOvedfSk_&*OenC9Pb#=!}3EO1r-;b%LmVCIxf82 zn|@adq230wQIvjzc^4Q$?sns1MfE&n3a^-e?>7Y$R(4DH}-&q)i;oiw$QZ+Z+ z0LAI#rbg`a(ni~Kmyu9TbhrG6Kk7XJxhQk~y_OQ{I#Vxx{PDcjkM^3gdHUt29(1Xv z`8g?;r_y@y>*R}Cu07D|+S)Q3p@Lr*wB!)^5ytk7)@Hk9Vz%82XkE4*3y-^8aJ)=) zYe})Xd$*n2ua=!G*knIkFF~r7rnCi2uS0Y_^M3qC9r>%c_|ul-e#e=qZ&=wEc;z3*df21w`4aOrAGZV|-8ISx@F_7ke)kgCD_5UUB zD~8+j=SDJB66KrEQ$jDxal=uOmvK5o&a?djLS|IS3slKagT;{Fv{(=9OQ5Bo`yq$I z=-Y7T7sNq8g!;VmXHwRyJ_>nv*q`FOLmdK|NWMGc1tyXs=fMheizdOqMZs)g9<5BB z1|3v@+d^J{Eh~-i!q;4A%ra0>p&i`wrmy*Qv9^BcNot}k(<_n0)?l~fwcXb>jEg3y zbG|^YHw&ok;~+rZ(yc2;GhZ)f@a z+bp5Ep|geCa(}+K1y-z-`JlO`@kcr1)VRcO!L@}GwwEPeItaro)=#AvKAjY_~ z()T7QexP>|>pX~MPX2)4c9P-h372LY)<@=%Q(gXM79>k9EO_fqB8>^CBkwI3bRG-Y zi5@8FwN&kj2{tP+EW4Qc6a5Cc+)%cQ6M@mMM*^dw&S;4O8!m-Btrv8#lABv|774m! zniH`Q6O+z*2|lZLZpu8Gn+?U+kuw>S5y`tXuTNO6+i2>5tpC!>bWRo+B#izW|O!=bIDJVv>NyMnz+z8&@Yn^OPB)AXk+ z%J*;kKX;aYJyn0&S^mR)9!}T8>H42{y8aE(fj_+U|DDkRTE_@#P;_A6ujnb?Kh?hy z9oVv7WkJ5PY1wbd_Wr$5Q2L+sl&6*3UFx;a$^2W^Ouwz#2I57$dd<1GgXy?#i0in2 zL14!~3oBQL08Z*Eu(%UvZ6ZC&2CEP<(=!4`=7yGQb3DQHg<(J|w;!kbSJ!G8r_vo&ZT^3cNz z>a|ME{H#r*k9@o3WxjV;=XP_qjSMg88=B4!(1m26+BAac-C&N(wvoNfc}XaMgy2EA zE=ewKDjwr5?l!~-Nhl!#w;0GZxpAcTJ@Pu&t<#rCg z@;4V2W?B;gddiQFf#Kx*mK>m`+z1*@2KAJs2(m#vWfkfo${-NQ-0y5DV3&l3t4797 z8?61X8bdbc{kjD(oSg8;hSmmQH&nH0Q-yW?v6Lg6mpb#M8COPle&GnNR6gxv^Bv@& z*s;k+iwKyj$`)JWTp!7S;bdzN$($3fdvc8+KyBBSj#2Ubd_v%Bwx7evgi=C17>D|i z0;x`w%)oH6735(nFq}-#;W!HnClhp1-jmFc|1g{!1dz;U!SL<(e-0-L{x+PvYb*Zv zo@6fH@ODI!E(>%O3^rFU=2Y4$r_(-j=mPRF)1Xj~@0N^FmmxjAkTW2X`4vDiHvo~$ z`F))LlDScaesJnGq{VY!H`z0U80M>R{3Oqee#&A_uph9SOtf1zKUT5~cUSMCImb^> zTgaFiv;u(4{m8gl#^Z!5us=M3eU*O9}RYNE2LHxL zLl?iT`HDR_GirQj7-ff~hUYC(3m*~II);L7^{zp6mhUq=J(1N8J|&?F!&)v2!o-n8 z2iS^$S;JJJY>YgvL7-a*BAKJgH*d7t{h_A30;&CNepK;iO&Q|3g$t;rtoa``WzS%~ zX&rEXaRh&T-{w|eHaWI>wHqO_w-0rNzRLsBMg6f1I%fO{y@ur@dd(XB!s2wH*R-X9 zICv-_qfTQRaS94$sX1ONhnNxu-t}h!-N=r4gia)VQX*~L9lA~z(e

tdE#mxqMzQ z2l1?gqrvKzeqRxk%{B#>?UG$_Vv^r4sTu)iitDoHOm0IQ)>L6y>a3bXG@fiKU7l@a z_`8;JKa0<41S?Tj1JF{209wif_bp|0NoEkpykp#uEv*t*O}1Ln8&3Ivrn`t%V8RN3 z%rh63^f_GbTgnz8&(edKW{uMqahTzQ6n&U~g3RmBNGwbNkoiF1WvDWLox2y3;MP}P zhkZ`k8`}g|yZG|#LDn~>+(~8=vphJulB4MJ?om2;%^A-K_)%!CCWdjp5t{|Nz_*@Q z)x@lAoNqeOWk?zCUvF~s4Hj3xtOo_iw1^!-v$cy-iL1+Ge>irb5G#Ld1u2JxGn6g# zJXqf}v5!tmO(1qn<|Um^xas#a1`%DN4Veaow|f2zAd>mxKak9OK_qkGPu>(+g>TMH z;qv1NLOjvEgtGkgLj>k_m(UFXk~vc;Kr$~BD7q(^PY@f`+>^}N3x;=hp6V$*UDnu= z8^G9e<{Yfkh%np*haC323%%W+%MZ(DlNhqmZCIp)DpAikUo7o&y=p^RdS783)N!$_ zsN7${bHAFrAo6oHx$Of~-D#^8JvPMZC>LgGYCCCzZT!yj8m<;0`V17;P~N4yK=9kA z(cf^O@}oka-oF!P+&U53^K48+FdpI0TEtW}BY|_FxDO7XZ*g})DUGsN&6XKTj4Hlg ziIR%QNhA84&|9^-=`;Gp;fo2`uO;Pghh!PVHH0v{NOyM=v&EgeFo%p-UrJZiI`&&_|EIM?&2O;ormHBBW$E+H-k_ zmUGaIL^J1L&6N?hsFlUu4+U%|BSgRMX#;I1gR06m)C|zxe6#ONGP>ZNe}fdpL&$+= zKabcrJ^-r9QTw7Tl_KzdtPp!Gt^zc|NMaD|wm?-m=b{``RaTQd>>BU+Syj&Zt*ZR) zb!_yC{(E3M8UN31Cv)C!Cs!4JoWdNYpzRvmbIF4lvKJO-Dz--%B?(c8K(|mA%c{*q z_MJb`L;*PI4r;xI7&tK$;#*ky8oQ?Ez@V~H>H++SZa0;Ym~hlO@MnSH>|+j53-${m8pTM^6%Tp0snM68Tyy)y{wQ+&)*RG=)hWnU!t0@ySsI0sLl$G0hhp`FZ zd#Ql3GJ0A5ZAG`oCryMw=!#{R^R1)FB0KL-cvPiWMXm2BtLu_9rJ;k=sY({ti;oX= z$9B24nUbjEkGG$jY^k`DFLI__8`nH`UX5A)K7V3=p+Kzi-3!6#T^x6WH>4|jVqg3! z%1}v3LQ!wgp$8rADgU?elDUSWG%xvm4Hwr7<;z>n9dGlXDeo%Kc=A5QVpP!2@noXq z{{2!hv~}UO)GnPbOhPvF;WtK-f;)o@2wu}nJy`Sz?$b;B(?^nuf(3)`|qPayR>M3?eT#vB236h7#VlD{fo$) zL>5at>PxvWolGs+p=Vts2@v7onWPVqD#Y>d$GpPk|C zQP>@IXKi%jeEn(PohlyoXRfO{x3i^- zqrtm@LjyzSQ}pd^t>QV46R#I1OMOl&efFETn-H^ZB=6tk;jRZhrR}!l5u=r)+ksMP zJhVPg3h4G*R&70r%#*r$HM1%3mCmpz@LhEuT^rSUa=O9su60^>h`?{=Zr%WLK7Z>%Oq-NF>9?jyBNfgpP@+mjO zjm@-S-&!e`p=Nc}}0maOjb1FlHvWD#`O zHeQYUL-x)zNJPUFe1OrMne=w5Q!zZ&4x(A zJ>jM&SA3dPgcPhQT3bZIp9o|PR7azRDfl;Sys%rOC^MlLX?#ey%xBU#K14Tgd`*D_d@sB0kz4=9%U%2Y0J|9hc0uRi z+jn+-D=t||NhX`LLngymYZ+(%&Qb0AiwV^AKt@xY&#t z$JoT6t2Bd=XFtdHsxAv8x94d=vUkG8Orq|=G33(uZ(LlEl9O;pgYflW8Cz7 zqIZo~+Xq1ub?bi9d#-_knhS2of>m@(G4m6sW|I_%ce1U$On(#UOUSWyz2>?a=rv+prIA1k?Z(Q<@2veu@(GT-bG`a7_WTIj z^5dBI5o1wSVlkY7?{n_fhlXZ8@?&#%E|?>HxqwiT^#|>&;|f5ZdJ_J&vkooJai2~A zXE+3(5%%A^eT`S5Z{k0|ok6lWA7hj{m%%B>_p^qbDMRZlln7YK8!NLm2(U);UTsmiMJtFGW3i zr;)7hbC)>;=84DHG4vZq#;7T*PUL+f_KDAkn-+Z+C(-Go#5RB!LtpHRm;7=b1$9N= zJdengCHJo{9im6V3+H%;rVI$e9a=1SIwpSS8W@fbWorM%H8=rr4V3S>20@^q^`BgW z&V%70MCf0*25!G{4Xl3Q8q^nY-g6B&f8!c>hZo*3B}<8-DQ&@%#!P}SJHeQWf7kFa zxxFkH)^uZ6poE=(e5VndS~vnPTCVh2R8N@^PZB}N%qdR~A91S8$k%B<$RNtzwS6iF zIsd7ZFqe{^2LBtnvEp)3`g!AasUx49_om#~$qvB<24YJ{c=;tUvc6CH1^Gf}`h5^x zZHcgJbo(ZrXXY_1C-MWG{r6D$bggbuWZFSu6p2G>Mv*J9sa*90eVFPMZpNRX717O^ z+5&i9SAXd8a9wW!@AoN7fW0j;$f;goQYy&g;|#9@TxFEv#UL(Pv?UPO06V*T#Y!18 zw0`1_F6Vg8f*VD<(>9C)5D6S?q&#&Dxh*F}HIAu&@OmdN3L1Ydw$JMXX4lhL^lU>w zv+GvsIKRxUn>84=95MLBI(7%=_8^Wrszej}lY8_mDHfZ24pl)9g~?$u%zNJ6dXe?K zeBujFMWU@dn$D(4_M|a0iW^kWC*7!m_c@dyWL72q_v>x74-;B4<@+;LmuzfhV!25BUF`c;87khmz%%H8r7O3g1q48Pif>r( z!7GO+QWTNMjrXQxK?S{8$$ffiw62IwWpYnZkM3G5Y2f>vqF%79>oJ`{(6qMqwwIYt ziVg_`Hjr`Ih47mys=Gjr1;*9U8Da~bhAY;;eqZ@Winx3(>|2>2(dLDY;{m}YkgMKJ#tYhPRi(97!ilOp!K4@q?;`gETkS~T{3pZ|DiD4zo z_jx0hN39HKXnkRW)5~_!j*Mq3o98Q&*pNTg)g{;s`3eg9a)S+iqk(p6Zg3~Eq|D4m zHqKU2=i6yVF3&|_R(>b*v_LXWY7Z#s5Z)Gg9(}zz7fh+N{B(e8Pzi7i7T!sUqx+G0 zedmu$E}?oZUQUXN-6Fzt=oY4TU~tyHEe217^#Z5G73E-yMlbRBFwl~*fA~?o=@gEL zHufd=lQ?1*J`J|26WO(#r5CVx=yK>wPH?2patdIG)jEWOV=>f~u}e2wDk#Y60~j*U zjJo*4oh$}ndPiUuzkr$N+1AXv4bR)Zw7@b&<1zdJ0vn|M5o~Y=fDPPvZysrL*wm=L zA#^V{Pj{BXdnPD2%yRRJOO{)lz#V6E0IIwW_4pI$6aD zrq|fik-F0)OP-2Cr$VJGT)c3=%L$4_bhJ|ium&;b#1hF?W~HY_cdQO82~OK)6;UnA z(=ro(pH1jnAmc?CDi$Q2CYxc=> z84;67Q;|`g=kx-%E^!C%;<@?V-_N@}@jM=DB^+W|N+LZ14|Y!B3WU-NNrmn_b~W9} zJRUk1)Kz~D<%{cg_SIE{MmW+A=F+DA6gA@_8k9_slfCO24*`-1tUHR?Ka&Ym39n=Q zfMh~uSM5`&?t9okLY&##JTu6EX-E)6J&B0;_g@bIh)*o_3or@0HW@oHd!sM zs>wxU&6pfd4sIHEpG**^?V{at$$}YT5QhCdnGgmf6Zo@gGeOA&Ng$cP#t0-6h;d@X z#g~C(LcggwfK&iHb$EFonP4a;7PSuiS@+2V@c~UxG9g9}t|Z$CwxtCv z;%lSY%NxnWkOcn#HJA>hM9DKBFQ(k*Y3A@>{m{VyKnr`$0e?kr1@1X|Swy^Z* zK@Cgm=f}NAus@2_zJr1Z!jIWhoR<_LU0{J=!e=0uaJ0_|1QX&shbTCVK*5AYvfqLU zTL&^PT=H<`Ttw?=n;pcCX2?{1FK(gs>U!!gN;ehOg0$~0+qd%OaganuJ6sMe&cUtQ zXu#e`99$vH4Sf+l+cBq09xOGU*P(j+V<~S29>PdtHFq^zfTCXG zGld^9V7)+Fab2#DZbJg1sNXKzLiuTJkuTafB|)jQp>ScNKRw&a zd7>**x3N0y@d;1!B;S8{Z?vOyGH1_YSZA&;;TBBA(v`C*`2?vdaWU1XxI)f*%DQor zDSZH|A_dH3D;^X~*uFNdhdf_dZ9THIXTJClOX=7Q#@W?F(An(Quo;;jI*e>O$r`#o zerh_Afmr|S*jUASVqBW{?KyP=n@7>j9sU__mEcbEG~w#);d$(SmjQN6wgM|h+`-j( zO)fCCt|z@ttA~@#ng~p-=K)jeNl?w!z|?wTV54<1t-;T!bzeDPYCY$EY8@Liwf_C} zo2S6kdM)}w^xsdd`&NYCMXFS+3wwKk-A}ETkWoF0%*Rk0!JwGE5fp~896ChSpAuGK z={dVB_GbUylypMSk-AYS%CJGceb~pq9nUVq7HRzLat-+1u+HVBLp%aOkx2XwesAi! zz34H{&eXC|(o|G~Yj)M3hY&$k?;VmncA+N=#Gs#3f>WGWY#Wuc>VUKRDca(U^Yt6& ztz}c5#PHIJaZZ1^__eFuQ8szJQl)#(e#fY9zq9@R z6QeGck|V?%=&_#dj3r&Zr?i}<5C9SU4@`q!g~gu^Cj4i@;_rhA54z$(SAduX54z$( zS3Ky72VL=?D;{)3&oEVpl@{%Tt^mQ(9(2WnuK3@oEB+0k1Xema#=i?C$k?8$8vIo} zgZu0Mmt4>VZEGZ|Z-{U?csqK03IreIVcb<-QBl22EUGLkm!$Xu;Ha<4>HA*e$DYd<-_hQ^9@A z$4@qvEf6!`dREwab0^xwKXtF?C+;hBt#h8|6eEvPO z^=6`tu&mj2q+GSXTyd}*#|WFbh1I4U%=bgtaJi<%^qsqF%0josJcYW5{vhg6Uv?Rl zYqaX?p!R@tqJ=Huz=+9N=05u4KB9`X@L(ks1+V#GCLVCB@AGTB)rmEU&Pf)12qbB+ z{Ta+sPQjAk66+@H@a3_~iEYSFMbx3Xo{dCBp5RL?Pu=+yk<)IdBM_kB<@KHf#)AVS z10L$&st{4l54A!{cJTPX$M68j;1+_6cM1}Ra1U&}ts~_MaevmxO|tbQ35@Y(wZXWb zHdvcgqSgIGCv=mvj1EC3H}=)2KjiKVRoS7YEKl$yM-fK*wHYAPmM1m4>=q(GbS=yexN*k?2IL5bSW5J z*>IG+QVUN(2N_wP^|cP#fZ^LstEB$%R}0vRN^p|C;C<(%MU9^X1B>4>0u7~gMVJOh z#L6`LLDLe+!+c5v1ZFGrktC2y2s-+d-`lm&-66yV%S+5U!dX2_nsg^l^-TEq56NTQ1tldmR164+8N*(z* zJag%etYpno`d5T@4amE|_QBcD?Sq)U*Yd#j!Dpo3w-4Y!+Xpkyf7m{lDkbkIBI}2M z;{dLr=^K;Jdb_1*p*&bT;6ojN({CFkllGc~K}T-7f{*c8>U)77-=_+8*`zQi$cChI zXi9hFA+FCqb@f8HeC7mPY|~FJt@4!tq5fV$L?L_H$ic>;yLC>?ItPo>$2(vQtsTJ9 zIt7Po37XI{dBhhgUnUd1&FVdz^Ki7wp4rXr--agb2Tp!(kYOSVElni4M zmLpUqHrC^#0m=x_be=b+MExxz5P6>wi1y@5An*54*}|{KT487AqT&hi&wPr|ayD$q zFL`UR`*IpIeV|UQ0b2nXlXiNgavk&0M2Qn!&1Yj}jd&n=e3mMn8Zzc_by4RgzN>r+ z-EcBW(NwhY!ATwZvO2RAKL1YhxmW`<6zXTPQeg66VsJVH%8$waX%&~Yk`T}CAZ;>f z-k5Um7t7@=OwuS*UNT%HO8_{2>Pzzclv5gSa#ft0)m@6-(8F|n{-ySk(ZUNUNU+{w zNGefe-7Bp9(ghh|(co@#vrK+Slo{t`r)64S{`blJpIR1|(%C%4QV!RWJB^H=9AdA1 z0O$G`NIGNhaFyDx?1N2%ORrR|B{VCCXl(!@7Z{KA4@}G7lM7y>1LT6n6M$R*pSO=h z()SYTc38=#{Ku=h7c`Rqxq!omk}im6H4Y7SCHeb`=TCA0>54H^bWkn#dq`7?sC8qe zpxvC$C8l2nB}$+6EnIoQEyBmQM*A_l(b0Tx>Zh!>eqyV#{pgHS`|UG;Fw%jND{DJV zT1PJX(VWqWToQAs|NpS})=_b#dm1k8?oNQKycUK4#6!1cZc8( z!QF3>bkFph?wNJg?K5{~?&3cdRP9Zz`hErP{+|83HlhzFpWTQwY~T^Y(n->Q?$Y^r zn;^DlK`z`?*T))wY#bD9Dg9ju#;wxaybUKA@DzY;D8s!~CP!0h+0|t{6p<08M+n1U z#=Eu(q4TIA4+{yKkGq7ny4Cwb8JABi>kz;^_jAMCu_jnVqI5PeuQm%p-oFhD>u@@c zbdyLXA`oWaHLs7k@5Eoc%8wn}@WNaSz9DtM$hx;b0_UK71gbv_5s_G*VsuI$c`f0b zS^8>E5HwT(fCdByOK4AgA{CYx1I4I7mT6&DU!76HIXW4BExIxmX$G|2-CocXs6X6; zTQ$TY2Ku8)-xAAB{zrzyXR1{ajV{uh_XdPPgz`I?iP=c?njGNRA|ez+)O3QmMWaQX zt|E}>#u9GY6la|B@o0T!_0HiHpTm!7zq@R~xGa=L9LAHVm;3qeFg|rZx*ST0%BPa< zurn+jp@XWH4)h$UZ1LQ!LLQHcG<6%?JCYS|iC~fvF|nYP=R|!4omxNNl?GjGT&cr? z^FL81fRmM5SJdHJy&0_VZK_#E`Tc{`LJUP0T` zvoVI+QX4RQjsr*6E>lsVfyb{<3<_=t8BQ#%5}cNo3=R7fL%eRnLaGWjDmg5ul8>I8 z{|U_`0ZrMLY#Y#yP9;`NQRmbW$C?*ofKA$sG!#b-Vuo%?H-IKZYoxtUr1x%4ORdoiM!o|(6Y`<3muz)`Z3x@woVF3UO_$e$Hg>2n#q7 zktM^iKQuM^62VDm$->)JgX6?PmYhxZI6dip(v^ou9e_3NOD>kA2r^ByRs;-M5aq6Ut)G_~eOQO?uaK_Sz96dZ zBY38Llzt`o(eg?zl=)EtJY1mG0LNNi_xg3tRQRwZJqGZOvU9Ce_VT3LnE)ck^8uPWrx~n@p2e^+M>gGadXL!0W2dA0 znG}5&wxc0i(=eS3>bftu+EE^N8iO_?4%538>}K_BToGi|H|KRD>Wx$C{UgJ-4Rbaf z#XsbI-tn~_J}LEmYFzfmH!^;|t}Bp!B^rBU2UL@?aIJss1*Ma(T*8yoR-eiQ_bJsyMi~JJHVBtNfw9q-kM6d2QmamUA z6D##HIiAQ974M*di|AjcE{9k1~zltsE5TbYo#2AqVuWk9U(Komm~Lv7QaVVYsLL6{PKRqf zj(s^X_M5}BPMYGB)~3CD#G2-20D5s3-qOT`?~nI+d7!U8HiK;DDq8n=5;CUft`7_eaZ|EC%!iMoNj&d@9 zbEsRgOrd0OmlVZdwIufov5Du|7QRPuHqvQuea6GE$JtiTArM-HaxqYP9->j9>`s!p)R@?%A%#0XQjRD2wv-@p4-i8|78$v!nbr8uMFI$alRWsg#l$+v(^`i zP*uL(%fflno9l%iNoR6Cvh1>W3&;_9B;1ztZ>+=RN@aO8I9j|~rf%P{eW`D}xj%es zXldxK|F~FOTw5;3w#p9s$*?fS)a~_%WQ-vb%y?^|e27(0cjLO};>9ww)~(fwW6MTj z2(K7aBI&9c0(#||ONgP2O!MLob$5M-nW}cUL{byZA1KtVS@*~zqt{^JrR-e`rOdXB z+lgm`B0rG;b|GiqA0m+&TXP>ymEL8fVPTVt0(uP?KL|^X$h(%c?cnxPU&{*hf<^5z zcSYv3C+!9hqI})66EA_k6Xpe+NIC;sW8CglKfzn?8dw&-B~U=QLHz~qQvC>Al0Rh< zGV^d+LKFQZB7WshBtUA1+^zy%H%>u(Apm@F9uI&7Fw_vnl9jXOK8>S*@eM@Jbh@hK zrs}YXYFdk%zDt`ww`#`7t>*Z0Eh)88mK)He?y{6aM$M_ER?7LdeXGP8kk2GU&si5Fn z?6iox`6+qJf3Coy@}nEe5vCYaaLuw#V&AbHTiDs(lDh-{??eKgm-}BM0e>8;zmEj` z@jNf%^)g=n3&-of0}c4&vj3k%1DaOO{f7Z)fcw7$4S0T4{|p-NR|3+~|E%1AFcizS zJ`BXT!qT4Q>>Y;?f>>^2nyoWzqx~6cqYG%pmj*&HiiN2}alM5v(EF$bIL)Yy_h2$4Tn&TVk`n$aiSU4K> z%ptJ_lez$jK%0o>XMt3*cN%b6?^9p#gDVCrB#)h^#}J%9qX8k(_aT>KnLaL`z7^`4nGZXpJn?q z?d7{hpzz_m+4o@@-1)dBbLb9i&F}YQ$OL@I7gKcl{x*&B8Xw=QuQ0~V^q~Owu<8H<2G58J~eqH z-wqa-L%Vht%qBNV5R&o^D2URYMy{5?r`(f1sN zVtj=B;G!Dti3$WrtJy04rmL<>@dhS?AMzm!k#)qaMHLaR1hFjS=W-HtxD65)*NrGO z5QDb}i1*Y`u0abLwoR1u1kaF0vz@s!r4ARtzR_Y;J3)Oel;$uQt;Cl#Z>N;5&|wap zc^3~$<_I{7D+u{W8ANr^bXmIk5wIo<>-_4PZ)1vCypbyeq5~3BuZas?^^TXfLj>* zG2imc0?ZGkbp(lXt6G?u!Wx|G;<69DIqYJsF5(TPc{|dzs~7_-8it!gDs095E__<4 z+;7MHAjFBL*WT4b`-5HB$0K367&-cV2ip*4t@p$BA&qjMWYIipOpr7 zfJ%cDjhJuQ*abZ0<+LJ5nS7%x*#aXnF(z8(TP96tLf^`Vnu{k9AHKI0B)!s0itycp z0U2ER@z8yjWLC_qP6E&J`IR6fK`PxnDZ}SU1`3R8-0!hQa_Zda-;cix(hv~@@F@Eh zupWo#dDHJ0^67#a)L3*Y%{il3d$>7auP44utfDKqCfCg}8K_tvZ7D3Gv zaE__TY50LObS4byt#xytcR78fdF@<*_bd%iU5~L~Z#LME2XbkF)^Ay_g{u1eLlMm5 z5)a`{m>j%FnLeNPxzylh%9R1T9#Cpv2`Dx2$i-c2$9yg|(9+CIcVNVBLv80hn$!f8 z8i=thZ+MRaN(~YweKlcnGSFGioeyNDN0*cW)8IpA5@Q^%?&AZhYGJo0UA)g%>8@gV z42?5vuNgJv*rf04qVU4a8AoQP|qJ9;k=rrEua__ol89+uPPHa7J9$#z6U*xLZ zb-itkD$7}m=8Tem_vH#K70t(2(dFw}&Bab)V^l%R>!wi^qzl&o#%F6laB$y>kytzu z>8LLVfDIVBR}7{UE?)b9X!SK3YYb>u&R6aVsw*{$-6+Mp3}RNfYntJ7{WZs@x7yhr zHGV>(grvZseA&Gs&?3l(&UO$?p`mY8lz0NgwX>XpPC^lQibJb3DPTFC$$%Z_%kYYl zh-2DR7YvxIrZm$+TMhB}G~Jn1Y{V04snD7`Z!|+2VP4CIi&#yHM`! zsEW7L3G#MV|XMK>JOfM~}0}1xkm*ADEGP-zE z3Hfxl(vh|?kJ!7jh@L$5o#?eluY@Xglvy`wjcQ}sb}##g_C2sQak?Av8-F{@cp{ci zhmEBs?{*SH#I$Y!B+v;MMyT&dH9}X=ZfLx@j2mr>!w#-%)S*~#RLTOIB!JKH_+Xt% z#fabd0EKB~s?hhJLW$R%S@Pb30qO%3RPtGq^Oey|RG;|(%upbWA?UJ#+35?(={TxT zVqXuG+>P^@t|O3 zI)i!Pcf}tKWQr-!RMChlQgkSu`2r%#q!Lj>1)0KoL91eX8Crm}AQ?4X0EQ;%6HOsy zm6kjY4gdNgh{lk5KMq{8oXM?k&1|ZO?ILJw^|m2?^Jlj07V7LP0jlu2v;f?9xAs$1lse@V>HpMq$6=O z)?p^p5K}Cjb=769h4*{-cpkLVlumsdr)S;ns9q}rz!+YO4nYN$A<99DAz7{)*yYVK zy3?44xV;1w9Mlu4Dc_Oqh*-7F_O_)d6CZAriHL{#yUrOj zcHddT$R+JIU5ty(orI1Z3&z&e&aTEr9)~jWXK%o;9S7)hp}`@b&>&!76^a0^2n+6s)jI}wyRfj=XkO|_4$o1N7(+&IJRAPJp1~<2Zzty_qW;|T)3QFHrwh2 zCyuR&+K3!dZA(%&OLO1ZoAAGM6ClPPktGCVSTsmpSylv;{CIay-3x2Vqa7a1-_)o> zLtie+Y|8Z`V6a%*O+=OZ!RWF6cD+%H|$s*a74dKrH zW!+e^{;*)qk8OeGAxj20Hv@^mvl+%X_f_U`^aePWRpzbX`V>DrkwqazVNeajKC082=oa3>N8j{W!^TJ^kLoQ4Q&`S2haeD)9Xpb?lcZbb_7F%XMH3| z1CA%+Tg13LDiOqU-0=;)n~__rvz1-cOqC>V1HzUWHz7P02@iz13`%!aQ0d?YbO+XC z@`%+-f9NyN>3E-WqsP`trE&x(s!n*iIQic5xzE6=lE=u=rpOV>KGRPzy1d|x481MU z@7jQYXuBQYnQ!-`GeZjiJOFO9U&MBJ(aNh49fIPnrE zUgE?{oOtGpU*g0|oOp>7FLB}}PQ1j4mpJi%H%|N+5#R>`0#cThl9f}H)n#yHV`pPz zW@6v~e92_M#=*wKW<>v&KV@KLGG^ptW1(l^Wc&wL0Hw?Zs3`ytNB|TV82t;5{?F}S z@|yj`1HPBln-V$rXLk0{V04J`q#)6J=Y|ERErI(cDpD#OQk$$z|1Ik9b%?(V{|^ut z3@Y<2Vk)&n!9YhBJ17+t^uSYo~EL z9qga?&pp;h1hF%Ry?KK;Z!k02+P5h;f{8ei*5c!wfQYk`^8R>oi z(10yO>%_tp-rEAwOLDtkwtzEm*v1A1c*(c^#R3`<+6Y_E6$rbJ_#5WYgH7`-8){@TbVEiXHae zq((Yl$jrXhYim3F1iQ^eyEj(qe8;LXkuxoJ6g^_PLv^@Ts}8Gl?`P`%saOrhF;QfM zxX+WQg(*RRGa64jQw%yGk@Q3`h3RPYO?G*f%f)|LMIin!Sm=KZ2K;fHtp0^(c^Rvh zvHD*&R)0nUO#X!n{(lk(SSkQ=YJvj-T4VwOGWZv~rhf(puzs!+cpQd%5=irIu*9{P zJH<_teh)f6N)iatcagvQRx`eXw{42;b%XBmC*4;oYOC%oyV65O#HB8Tr7GixlJ-p( zLlclPrB)Gj@kg90TOve~>;ihEQ9CIC1&hg*ERmgYS^1``;BYN4<1=p7cw^750EPro zXoper5l`p4A+CY7!>eV;!gUvrC^C7R2KD!%9aplBgts3zJu~0AvBPaZrb5!J+P|pb<5i4;0?g%~LpmyOuTY_rxUd zNZl~GK5ySqm`cibD#TkQP58wNU|FGa8PXeRPaZAF#F~9l18zL_jL%j@48FWQ?3Ao_ z!w7IE$ul}w|8Nrhrz#Wk8ZlTt`uUIXu9yhO_K|hi#=ek@lXx*QII-o_Ej(; zb&N2uVW&Uv&hC8U84S_|DaxK?d{>eWHaOP%Qy;K-_Wt$9=HobnIXbj<1cD4I)@c%~ zMW;DJwFHWCp1j^VrS`z2^*j7)4_RRC1c%uIwC+mTXfTo8%Dp;&2Z>g=eo|LwrsvJ zkl6a;!v@|J{DML?mF@fLKD(0Mv<}yMn#^y zqBmgM%xv-o?GD*7u%fw5z?p6bfrf^sta{^w3-_CEV9BtXGtc**pv^5p@qkqp%{3LM zfqZ?nIPMBS1d?e8i7a3~f~^b04%R75!-*GjRu^EIFlTOBm15n}0@XwU<4>VqVmqQG zj`Fc((OM4KQReJZSbv)caW6@ynj3PhHutG}1#*!)4>e%H{GBJFrS*t)J&BGUPoc!5 z`SHhtBav1|a?aGZ02q^Snb;nV6td@g+vD?w%G4DsmV*0-+CPqz$dDy+22M?97{LbP zj6lj2kmWcc* zqOCGAIO`M~^pk<28;kWw!?Ru4oi5S*!XDaVqHpl2BhBNWro)P+v`9#@8GV3Da z$3t=QjiVLX8CEX3RCMMWBTEdZ=FbWa9)T3Z*0*6{Tdmm2YRigNiis#4LAyGKO}86@e8G1mA4%J)CT2 z*bI$k@3^ZU)pyDyPFfl{k)gN)rLf}zn*IR}#5GxYH1!51VLl&0uY}{I_PPvu0E`5< zz~61=4k-P<;8j`0x_MIpDOvg^6WMJ}Bmqek>LYic%t7pbqE>*PSuqj_X*(FPAqyLu zLUJYs8Ev)`M=s?_H?c`sRohg(LQ8-mdGH)VZBJt5kivko-O?obt^y5ofs;wJS5}+n zod|tggOg6CW*x9}u&KskoT$+g3zl^uM5SeYH<8R61WoKC32xqK!a23JsHk|ziMCs+PG+4^ARm&1`vDc7Os%8#UVwMfEU0UXhSZ)f#Y&!2%Xu{rlMEUy24~*0}pM+OrWs>a%+%?R=5b3(k){GNp@L44qX>o%MDCvDDwK>zx~gbPRaFVY00s zGj5mXqOgVD#b++JySAyqY1Pu%wrM7v-S-gc$I;ExvgcoItBuh&Qb2zcecSwjkBi_l zLBZ8FnB#tDMYkT3G~)DKEtbocNx1iDI0shJu>#yq?8KfmF*3#<8h59_ZyB8np>PAmE5M?GYL5jZz%|snyVz# z8KB%dWYKXpiHr7=Lp6If>?JA-wGHNel*Lk{-J_DBWP6kV69N^W&EOM!UUaQYj(^@Jb&riGNdtg?NC+~v;>g7TZ^n(p z7x9g!R>+nQ3fsvi(KME$Bq9wOi&=yEk-r6iD*BQJa2hqU8Wcn*d%77Te%TqQWL*oo z^rLn9xzNGaV+<65acnUFXA)F#&_{#oW2+!O@y||vyJ7&=WY4ToCI-DF*#Kr`Gim=? zJ1HJbri{WLI;L3OZ}V(vGGs7LL5Wc^bU-qcjx}J@0!Xd<^BE6%BX~BX^v@G(X_3?UYtn)bTdYAE2l0Q3X6U8RoK^%=TH$U`r6>l7F4 zeCe1TR8vRy-65$~i!Lx!!pde!oB$InJIceVr#J8ZqlMYZV^7OXvj;Qb@O-JRjr;mo zw;9L4{y+>WA4C)Q*F(MQt*ruM9UTOp14KYw!3CI(O82J7kx8@fY{d_F2xg=ol87SB zZvB&O1aPY&ZPN7_tvH~UUpyF-hcE{ojcvyX`MjE3-{3pzBQ|_VqWADBn>}@Qbl-+B1ywrd)D(&J6z>V4xN@Z99S*-^#UW zG-k_~5hEUuwR^Rij@)$lt7?IJB%TFM4X(aIp`+JhWa(ksf7wEBmf_91WMVR`L#jF?OF7JniUUNAk zI)&+pBu4H}4dNVf&y@)u21OcOi5=46(~CsYf28%NZrhWeSsWHF4lq}ux`hevN8beU z>`~sm5!c7Md1fDYwde1ov-eEU0qn!Ug(ks#MjiCRS%=+HMnwM2UYY=XF-hCPUhhve z0&RRxc+0}?Y6SM!`q+J!e^Vp4iF1JXg}rO-tF1DjuRIc}v>z*$qSnqhS`;!pLTL}U zhyVQsj9+o^kI_m0zb88VBl+->oL-XCOLBTiPA|#nB{{t$r?YcnS!$wh)1XQK1FL> zcPkqcRezl>D4LpFR&BPOrW*ZhiHS*Go5*W=H27>*JZY^qMMCG29ZVPDN+wI4G0slLf)3vlgC++XfEz-g8K$viA!I zDErHsNH(Exc{2GNYesUWXl#wK7=9}x!ZFUT5vGI8Kk_{*hF!V6MfpNVmwt=ubtG;6 zNp|fQ}U5|6v>=AQH*Y-zq_$M$B99L99{&6_AxLRntooc;ppTUBx$WfgFUXErA zhDkbXl+t`mN|EsoPJ~gkc~=)>m51xEc3ZYEEj@+^(+H3}7T3xo1>*p+2DN<^7E)mZ zM5m@g%E867>GFiw+&4j#!26Glswjs}+>jtq<=@%gQ9}BfV}BoW8y%{ zNQ{~Aeb=g;aM9weNqwdzxn>Sz&s9jQn|#Q)3=&5l^Q}pFjV5#QH~B<`NhJ&&{;{T4 zynULnP}{Bt)6q=Huj4Y;`~N^rP@Zu6y^p1cP@C?MKj!^FAoRw*_iEQ+MbvxVrdBfn z9nzhhTfjvJN}3W!!KGSb3~X`y^(JU+UgYFQYl&Fy;Jlp2&C${MQUSC#!=fWqpTvGxB#9V~tb4 zXKzgsDxXuQ}VkvSaM7ReLJpfE^@BII_Btb2Yz; z)fbgRvt{bJFo%cPdP9u5a!6cA<0Bpuuj))0Igkk=bbQS+sfMU0{VnxPqJ-7bY#xIY zwO(iVwKt@flXFg!Oidk^~DvOolAS+LFIb=R+s2rFDD z;IIW+bDeKNZ+es$ufmys|HnWX9`L-6RN7AF^A)DH`WV3U=bq>xu`TZy}5n z=|@L4j1o*WsX;$c3bF=6?tFXJPtfg{f*f!T+#@yS&cL#bB;OOG$7dJQAS($@#)1e; zYrzi6wbAiG|GPh<=6m1d{y;+r{FK!=oYYRRebziz{Jf<0tmmVkOP~I5XV5eo+Dn=u zsK|SpgH3l@SluVQMNI{XVFnS{qQue0#b!Y*s~7|WQ#0{-fcg%t;|Vm|zA zPhkBwdjhH9rv#$h=%4n4#QdgT_JnX|-3{i;)ebyFmlN0_1%26g(|3XIyq!ZC?A;w;&<_n@=vAF=4{fz_!j*9q0L?O=tOkqUvjv1#<=)2!I2+OBld*^sn0s0pBx{+TS+j&xOc>wwr7=QIGl=lSmeVIe1 ztq*=LVw*4P>m`?&t{vcD<>&q|(045jbXBGJTi*hJZurZ-1!uNi-5QwjhXD^P$r*%H z&t;F*_jiL~)p6)vt+Av%d%eORWg9<7G0G^OuZVcR1MvxUg%bI)qa}8f_>30_fK9|Y zQ};z3k7@g`;ma+%jL9StYMLVVN5N+J#jYXRMMkN`u@HzVZWoeERDoK9%VXlah08_~ zW@M4xOD>}!k_;u+1I8Vj-0y>Vb3J~IT29UgLLVj!%0Umow@3=-z_%1_ozID*mjJKX z)f;BeMxIp^h-e1d6HgH8h2|}s6<`o5_}yj|%?J%Wi>3Sv)W;&hVwiPwd{-4xb#hdHsIK>C(=8K#YvJg{AzEya{&A856bcX?fCgXYP z(>&FYnzJnQptUZ~JE{$DiJ#*R8q=&I4wyoNO|!tC@SmVC12`-sdsN^gHsdQg;zCU{ zAXtpf-c-Uo-K=zKZ_l6g?fk$QGMgrUE$}&`M1f%Dl-vyPN0k1=Hl6btbUu*hNmvI; zfSv-x9Do(L+3{rb^dN9WdAjxfC31uuX11qvmnQD@Unos@)jfmGh^5r;A1d~< zcA-VT00!OxIgL@%IH)8i4vpiCf|AKbRMGwyR$#1=Wv(Hi?<^q?Zf0L59+Yp-5@w(| zBc-lLMHw%z05>KM00>mxZBgb0%_WPe!l%yReT>63z>49y-tWVYfjB0l7jwX>2XxRRt`yo4byHW_2nB_8c;t_V$M4JgGg2n_Qj@f#O60G^ z7*L>#th{Q#L03Bj^e%|~Meo8vHpu$AO}S(=wKAHk(lHeIf9ze*GUbZw9xRmZskNPGJ}T!>z?gnbpV6;E$Wl{dk)F<4EVBM1v7pWd~b_Mxh=_sJsu=7{LH`vgdK zAOCuVBuOxiSoJUi&GeocekZ^}na~jz02cVyi_-(Z0z$g;4j-<2Q0VldZ)i(#hsEXE zn=}22><<+FFJR@%?Yy*FrT}+P z&dt5W^g}n(t9!ZIGq)=fzT{fXH_PYb>t`os@%0I$dx`L^iK5h9qrn*Ed>`e2e^ZpVt(5g?Fca>SPmbeZeHmkuBcIz)W9 zunzdN@7;O#hA|(yhdk#90bYgr^cd>P7w-?I!(`WYJsF#@?c!}}6HZ&I zTW#w!?YQ{}Xhz6X12U)@6s~Z8_bP-vx&n$J{G7c2Y=L%^$-{01ER(JC=9c!s`7>Lv z&{f}mw5}G4T|kgoRlc#7#eKk5cz3(2v4d~7 zU5m=Gy7T19s;P6njfr#!Hxa$sJqU8@+DIzZC}^DGQwHS+&qW{z*R<0wI>nc9K`*w* z9=nv27?yeoFen)FrmN@oFkwP(j}7u<@Bo?^Fr$oyt2+#*dShD*lg_jb&2$3rxtn=V zxnt_ZYc7+bdUKrTo&;coYDa=s)JG4;pL-Vo{wYB3g3iO&`pZSWRS{2)WJHtoeb0+w zy|^j)WoxHNNDUpWA&dc`Z;#eV2m%N!JKGy6yK)o7+`aU!d!Q0iM(13w@x0nE*nIk& zsCRlRqtGd;!YItZQfk%knFB$xbOn(d)e^;#VpN5Nn#0y@s#Y?t$$rdl! z;w4+WWQ&(<@scfGvc*fbc*z$3Kgt$=-j3w|+uJd0|6p0TlGMO50c^hW{R=D$tPE`b zWC_D>mW8FVqzRK@!4RZbaDe~{oeK0zg}_{K+E7A(l`@dOU9dxY#Ma6nmMcOA2Dgdd zZdhCxsf+;(jRkTBig?(c@O?V=ax*}(a0^Xj>w35F)XZ+n=M0${SgHYjOylL-0)!+| z_r}+S)Hi3A9jV9`Oek8NFy~*`W zLuT@;sI*c79L{<)7TucqBUk2T41DvY4CEv7o;F_HQdtD=wku9-^#|9LLFjj@6Z_=_ zbacFl9A3x$l9-P+f}HU=#MHIKIW_H$Xo7e7qC|D*TlMzT+9LPhCc8F`Rh|pySgIR93^G*{&wuS@kJCMai;(M>b)RuJ}-=?NRZUR>(0hN=;@F4o=TG*Lw1`r6}LvhWCdim@o~E z&-n`IUqF;Ja1uuN%7_oBtnkOcW-sg+AHenfEiqoNyubS z+MBan{|+{L=7+*D!NZKgEi|507iJ#X_@$meJsYGI59W{W;X(PIS&g2?iNrlsGC${? zl=O167=+i&M-Q(9^s_gvv=ZCz>~V#^X7d4$pgsmJi3u3rnxJqa58j zY`Gq?0RRPj8)zi3L<)G%<__5RX~LS8eF$?WkH82dvRUk_5kB}InLjHQWZL8iLCH@i zoQoG5sW?ZA=Pb{MVf`pYK)0+^sN*v=<8zx0)%L{ktt6-pck+V)iUn=!`dj(?MAu?g zsMwj${(qrZz&_v~cm-DnvpWl`j(O4KG64VuoPFtdGV*q&0t(w&n<^%((nW}ba@utm z9rr6e;=gMTx&$G3==Cmo-p>-Hj<-;MeN&j{ro&HJjantjSf7&M z{6>D2kWa{O6_g}p(AiT(5yX=v+wd73aD9w^%}URcHya5HUJ=lvo%hWh%Zbyob-hY?447uM`bhoYjg6ZSpYJ~%&$Ee>#H@ku9ew|qLNr^|z^YFqejSi1Q6 z7u(s7$;xirsWQQaB8PC_)=hz(f}?;*`@Eo!Wo-GZSQ1R|Q>3bs=HMFqcFKB(?C$7P z(M(vn{46O>^Rb8fU?I`4*}EQCus+01Oc}Ct5f7PB?@?AYAqzuI(Y4fP&psO#Vq7Vc z5gP%9g}qQJ=x+h9lMD+=u%qMn6y>Fhu}AYYxr4o7fesA$iyAul0wO_Bxq8SPjasnj zjE(T~hFlwq@QVv1WSN(&<}+xO{M;3+1C2|uZPLH#EMFy`&?I0YP&zZ~_*{B7A`R=M z?bV*V0*QJjeu`x}@fEgtaG|P(lSN9Bb{?q#o8vU8r4KAUr)vH_7O&&25Dt;EwN?r> z6I&omXbtlf3E=nX=&Y1V0f!xHtw$HZ973g6`>>U!lhWHrd@M{4C0sdLIAjox-vIz* zmN8fKizeNRC$mAGxP20r1=iY1#=GwprPA3T-6bYkG7h8>^PRJTz>Q-V~0Nukjxxr5Jb%1R7= zBKeM?gQG`cqZ5Vpr(;0|c}3(3x(DrR=mSP}_NYmFO7U(cy;^y1rMonWdzKIVUK!C; ztbzLI;&<4IFAeo3rSwymKCu-|5uekvCBSosxK=2Uk}?_>i_r_gHf zly_zUR0Ij@0gHgzwWT5XoEUJbyrOJe+p|-FTHkaEC!NkN!6m0}>JtTUZ0^H-DMcAE z+p@!l2*07UO@5MYjNE&~xnyv$@eBAa0of8N;;;)$%%MxB0pYA{j(CPXe?4L>AiMXs zk-98xo{+<90NujqTMHPC=`j5y;kb`A*vjQ@mGVD$-kiLekok!rNMN$mu}g>`zpe^+ z+$mz`%QU?Opi4xMp+7sY%sPWcX~xwvlosB4Wk+JOo(QRhJvz8ufSu9Fe*4!gd}rg z9OqRXcxV|r@SseU2}th)OA!S~FDD-IjKVCac~kH;B-O53hKYa`8tQ?xpzJ&#%?>^8#5jdHYdu1)8&%T9o zz?+cx%eSz>Bwf5N;hzWaEu>mc-N=dP`+s^v>i<=@-kj5oI&^@~^22npQ-PDJf|0)A z!##(gSR?EuX2I@!@Lel6{k>g+TLmiRrFMCRWfFe2czM%jF(@g;nhRndmtwbI*GB)| zGHdu2`YT{8;4@~g;L7HBWxh&G_i-8tA*q(ajGO)na8#H!35tA*E zI6-f(qgyo;m4Z0SS1S28Q(TUaD)FsiSg#~^3spvSMp4wr555(jr;YIsFKNd&)3HO! zHun1jo`A`+qK+O{fau^QyD^ZzWP^{Tua2{-`Q@bV8Hn&$B%)=^000qePg3_ssXgIY z98#mUdd$(^~+(~#K>AC! zP!kDlj`ft!A0+c3JEchdR4-ut^S1cjhW!x7JZC2{L1az_Ndu^AT2IsoSkDSiFo-z~ zTY3lMGZIm|=ne$}4Z-uY$?Eww7SW<#K!*3TIV5Y#=haB6XWc?k{6xeVa}KD=D9sN0 zw;k!dcJm^T4A0cU;BnyMEM~aZ>g@dDA0JVhj+Y@JTVJVr@ZtaREyR&QUBoE&lW0Cd z-~;|?-~$i!C#Z4qW5! zKpv+4As@r6A{z}dSMM3N;aCn;PlS)~_8L4fhXKRe95AMn5!<^(5W#koGNc=gVh zHFT%su}Ljt{$eBAIi^C5NRTDOo^)dV0d&gIkWLY}uzu$;#q1*RppX87;La1z1jfps zu}l~3m{wsf+PWZZHMUIO^FdLUu?AFfIvFWtYL=2Si9MW8GoO~NJTD*+&N21_=N!@8 z=L}k)-yH7(#kN{Cw0BY2hrL(SWBv!S89@1Y67yMCMssCEI5dWKS zp;mtm7tRELMG!de4=Lt9Ug$y5--={EoKIm@^el#r0qQ0$={;f}k9QZk?*Q~dO3yPE zvF`xDB69ZM9jO7Zh?G<(wjTg^qea$powI4zA>O7T{Io@5^{j_4&6Z`8X|SLyX}idYjNe6T0p?pI3-rL#xei%75Y z*(TE)VnI;rijRJjH@Yy+VSt~DBia%p6ydehj}8+uii-O(G*7Q~IEus4Q``3qh^tAJiWFeFkJU6UI9K4$gORK=aa zxChD^T>^1a!>M*P!d52#`(n$*iGQjacgX?35C3m&__85e#4j0*!@tqZ3W ze=sf(SF;p@z(QX6fc}2TuQ z%Kwvc2n;k;_U!BKi>7o*o)j%ZeN0%=r*?D9Ei{8sVuR8x2B`TV!8q!*2-~G*L)(X+ z49MIOfC2ITfxr*EFpK4Dx(kX2?km}S33;3c#1P~~a(sTgH6M&QZ9$x*}e zIy50*j&LaIqSM}Oq^a){F0(DnQ3~dC5wnTz+1Yfdq61>NV{w>b?XKS8!5JiZ8DWx* zXG&>0Z!}y6p%+gJgXiu_Qf-*793k$ahxN(z)hBZD)g!Vv!^#*_bDj~&7(oAbmX{(b z(j1HwYmeyA#SCbIH@#h>ilemA3^Is`JXd@mvC2K$iIx;9rUt&0TumJv1Hy4Rg_N8DgEHsiYPu;tfB|DAPbO4q1IOXvqMgu2x*1sHRWicHNE zP_}f~%cHM?u`@X1KD$V-`J|#}#$8o%Q+1d`HLb->-=)o;TQ$e$R&#tgm!9}GEAX^D5Ndlbw=SjVpev%n?hoJLgM9Y5Sn!r-phLs*u#eRy9$2FB3Rv1oIr!&HE>JwRx>MIdpb5XA( z-eRJ|5Bdnwuh;q(@Z!7ictAboDl1e@%;i^}X0L4ZiDc|YA&um;Cry`{ZEHbmV8kI4 z?>unnWExT#Mcp6lU7ybmeg^J7LTr_0l|(D&U!+qDAZ14`JXhxS-aj>a@@^Y4KEerZ zuZ{zcJzlEF;G3V9E%-9-qwJ5YE#WT8JMyt(h_Fh+%JCnJpI<<-o2sSETr@q+&_rXh zqii)6(?FL~o>WIAL1Zi1l9#T;VR}krRfk#tD{Os?W=jiy=^5E;t4Ph5T8(0)P>VB2 z5-N+hgcUqB4Lkab0-t4l5;1#p9z^lHh^j4*vJVP_8+a5=&&X_!s|`&Pm4W~#okTX+7#p~uOOL_!)Lt9)v~C**_;SvP{WD7sb6YL zj7qa~dtWtUwVSk4GYCB;!47`@8Dcrc?52M)?;XXOG7Muf472_y(*z6t7yB5B`K>dtM1(V%irSmAT$ ztQM;XRlikFvA2cor^eYwI(Wu7hO%Np(UxHq;|qFhyr^q%62LSgp~%bhguxUsn)4m; zZGeJ_dJWSC;qL9cctmd29%(`t6Gz_qGAtY6cG1BIZD7NiT?1UN%Cz;_lmWV#6W7Cs zmLin02?{S%`~AFD@V{e(ra#BM*v!P1^h;rJZD7%*U|J6?bc(!E9VW1ISRlt-mfj)2XqH-}204qq`~#okRv6U9gov_t1e=Q1VgvlWGO({}39Ic`6}J2faq z%mVced0Rv3v^^@52~+ zW8(1qh;RdH@&xMJ6dPv;R?b8%ZfHNWWf9MJzefRUBz@y?YaC)oEhL!pe$DHKqDb{> z&XHr~9GJR>SCb4b@)8 z?pVnV5SRA}`fPg?;wTYMLMY70XIvR^Sw}E)k`+0$?20|(cZOq)m3nEq3(ZM&4d%ZS zAS$uc#blc_Kqg_AQb7DoNZ244-Iq8pRabGuMju`Q0*O)w3{XYzykz&)i4xfFCldpm zj@|80*u%FZhH|`0Fb;v4)NdJQJV=`qh?G}u7BBZ>5kqO?M-WIG6l4-5F|V{lU=9qF zk5|?7d8(YM?7JU`%-a)DszrIor4SA3GODx-F3t(wqr);pgKb*Ui!(?Yn|yP z^lJBOOmN!I!w8z&!-$i)f?mht7L@tSAiJQp(+z2rzMvnb2yO8nrihU^m>S!rJ5xj% zFIHkwdv={=^cGbmZ=(oPGMZzMzV!?bO>D z3W^5~)c7lK_}>vX2$Y6i%?#Trv)klsNVbtC;EVGJzj+*E(mn*9?YRcJ?!@ol6qXcM z-M-Q@Ux=+^5DnLNn|`+2b7`^K%CJ3djrw$c@A9!l7Z06&cIHlb`G@GwBg}T{t2l_W zUM1c`AS7B{^-tu&!ph+@;7U}u?rE#njLO~u;WrqOd&wyDUnL89lMx3j2HzX-38DKq zbuq69(z$!tN!EVHy)=mP7D%z}w3b`;Mcwy$6zHemmnhzG=xDi>64ZG@s-yl0CKa#Q zZoZB7Bfb0-CpACT)(x@@xIJ;X!a7Wuw@j_24OL8sKa$qv|=;ze^J# zcBhGm!d_OjuTz9Fs(wU{t5O|cjL}9V9>`XZA+Mt5ittVXGxO*{ zNr3??+wG)_Q(@9ZBKVH%Q{Fz!JN(#3_&WQbIzHn+_aC>e|O ze5Y)ReJ|Cx5~A%CK~%Ph}UTyGi#O`qARJETU34R5k5U5$} zu9&#LOO=B1QQ37+#-_Ufu1wTP`MT`fG8N@|WFeV(Pm?2SFZxK{H6{Y9LbnQP-yduz z>tpR<(Yp1Pxb}W^i}9fOJD8R(7uK5!XZT80Rj_7qhbt`eXA6stPBTRP1`{JY4AI~V z?q3u7YAVYX%4g2cK5-Cg1^bQE)l+gUI0y1P*+TYPtK7wQbY;5C6sU^}EquIJ{E?pC zsd9;H3n^$;hY`A|@JMruKTD_pLn}UHi)IX*{LHUsxi({IEoP`P~w+jUzgQjOY8U zlLV?M;PVK-auI3o6FMl^ti2?c*b$(Z@hs7;2FnTdtK&A5EQgbTwj6d${S>(mPYdg- zs*GX}-gwi_h(h_PRU#}Q9q*94gNRav3WluuJlzwWVP}wa_y}Q_W=4JoOV82s)kh1w z@o{UB;>_3^i{ZVF><;<3j-~cMMW%5%+20K26-GiTgBhpC<0p#C@8$PZR%=bnZS) z+^32AH1WSRP5dLw{QGAC?CgwxIt!3NO0S*+d=q96|Atux*4xMbm*8a>Q%Ex-NaV4{ z)3XJrRCTjByk#uska|It=^#gJc*zhjbfgvgm>rfmWKOstrXez?q>`6-vHQjvDF?gw zr(nfXr>77xID2g+av>E*@rteAwFbUEIn`bWZ=?3-99K2?X8KmDaA;Hiv*cm~>DU8n zIRmT*wXNP^`rdzJo?w?x&KIi|49E6AoSO_`hOCH8s|=2eFZ>h@4p3v z-oC1T1%x_VFS4WFB;$Pc=Du1RW*^;!Ws&v=s~$v;fRLCr<{lk~{L1plB!PEl#C}B_ zkyE8g+k#t3pZV$LOtMPe*lW7#pZ0vMANG7FU5|)ugQeDi^@RFi^FAYVUqK-SB{c`U zz*)11$b2?$1NwZ5-}Lzs+;S}*Y5VPJ3O1WV;<$6k z1Ba6S{0gm~hy?8R*v%`iEy`F1s3}urgC{5#)Au8G9=8N1QO;(CY>wc9dflH=G|q@B zDgYgLy1Xq#{1`!KzxjRRoD#yu*kCSq#>mOK5-Hv2=oTod{VU|lhAaT{SJJmklnUZ|p0)8Y~tA^46|F3w=YZpCkX0a`

6ns4Y5xLLK3LpimT9 zs9O}u4fRJ9S_t2^$tVGh{6YDcvQQ_&aKd{^2tc8<_8x&k?+mI2v-{aG;~0wYpQqrU z+9@tv{t1OD0VtGYpc~3z%4SOmF}%znA<77T?aL*hDClc_pBSsU=|n|dAN0)!fxcZ5 z6ipSJ{+HKbhTI8^oNc;c?P1HbNHgPF!jWu9FDWoSv1%VEJK{WnsD34)sPAuFL(>(} z1mbVw{4UD>lBhqh$wsMIY<%>@cZr^3KTr=%_q|^os}JWx0alT5^+`i43~si4-$Uu6 zcvXyr0IP=&u->ZU7N-Sx^6K9XPTHpQ= zuXw?Nt{~{rWV3Zc99+|^F67bdI7fm3Ywb~VV6$nH&e~Pe%7V_O+8CiI)_gUmTgb4% z_h*Vqp+T~7)xRHJdB6jC@f@57UrUBfh)u2&VU!zo^|yTVYC zH|P(aeZ&DhSjEeFESVJfm->9kH9()Q0_gMe5_7(-^vQb*3t0^ZpO?O&Mu=t^mE)b& zlUTM;)h5RA>OX4f_o?o(Wc<7(hw|dhN$U!33dJ5Ir=s;bhBl8U@$pA`ekk%l3NT+p z^4DUdV>{|pbWfDt(gI9$3-ykPsyp`S*s+~py0AP)poiu^H_%kvp3a}FA#c>O-~gDY zI#itUF~CHryjz5aro3NA1?8qOs(ElU5TZ~l8HksE#U;e5kK@MMa)$W6g`4>D!RY1- z*>*#Ss+bQoX>f~RZ zBM5?oTQV%4kx2zaY`ukoDMpj2BYX*k&*i-Moy;${Jpjg18_K0d>fx$O9myAIYt}}3 z+)sYt*kW#SLi+H8gIKb3e4sPR(*OuqQ4n<1Of!5ZCAE-*iWS-;ecx!zb{g)ze1vZE z)ZR4_oHz36Gt(^1rL4`B!;y(pU(G7DZ7T7*rlF^OP^K7;8?2L+0@GN<8a(&i7;vgy zYt6b>vKsFC6X`_vf1$%#=t#<_I`OB zHpRrMRjIwX*>Ldo#dJY-pO_c?z;$VK-Gt(?`ZsNKQV!oN~cYpr$V=}QEq9Sy{(b6CO z{3eSeZor=p!+Rp44TfeBDLzCj9ez0Pz>g9_U_*HB1}9C^N^B!MImJq7#90Dm%v$g!~B8aptUPYdgo>D}IgHH)+5TRdsoLTK{dq#v} z?+-8v{GsFzFp5>0k5XVjD?Quitg<&SJe0~GI~VW82etL(KcMWmrTi0 zkm-HIBg-)9cj&Z-&R;xUB3Ga)7kD)r2{L6G6iXw4(cml?D0oJ7&S={Tre!pyCyH~X z#u1XoLziYP$46u;8x?OMB2LM#*sg4^sTx{7sd(NoO0v`_g}rIE=g9#3{78QQI;oIE z1td!%w(23;wYwIxf_bf4HtLSz$q)!*skqyiO}GzA169Ad$>3a>GkikyjOHRm*`_-m zZuU_<<&Bza)gbK6=AIm>Lm{4mgH#PegSEuLH05*8(<>PB+U}myqIIQZf9>nD){U$g zTomzq0mL(MYBTdx`82Z{`4UeH1|-((0R+gq%rtJQu#lyPU~ zCki!Cb5^r#KEbKgSg!xKEnbud^ogW0xg>8*W59Q_b;gUKrFub1W@29hkmhJI#GhW77c6)7eef z(co3L9-19AglaUw5wtS)-Do@+xt93QK-GMFOjh9S30)nxOWx%*!LdMv@K(bV(bCmE zN7QcT%ZHI^N*vr#d*>&W8E+3h>dLMFMe#I_Sg~v7ERtixIG6@=+?AkMzk2iAqBsK2 z3y&dB1<0#IKg8XdT+ol346k!cs~B(* zA*|@REsB41y)BB{#n?qjylpUX;` zJ+^G=j`BY#ivOA}{yrD|C+XtPT=YI%+=q+%aB&|l?!(1>xVR4&_u=9`T-=9?`*899 zQn>g}U{VfNu0LVYAb%0Ac>t4&|64HW?c@JzOpVXH`3cCU!^84y5hIpbas%%aE7#iR zYh(DE5}B}+WjNv?`On*5`Bt~5)k)RcaW&@pw?eU>?{9DeoD|mqw)o50DNH5iURMc9 zi0u(}j)CHX1&#bS0W#_Hn|;zB=&ZWfvbY~O{zgejS%Q4E7V(T0I$y4Nt;RMs_cE1X zv$loe$81@tYh|4sTG1BmmS7J<_X?`M4x!ORU(ZmM9eVVZ|4Z4FulfS3v1s-FWN$ zla=w);D;8KK@j@rKKMui$cBC`Xt{Qq3EN)gUtQi3&NMzY-|0Z>R?%J0Vpvc3Fl;Vk z6y2&Irl1seMk2b~yp>_}PET{bLc_J&C|=Pkgl42`hNFj9t_E<28<4I0@XIdI8aTps zES!+J1$s@A&lxhLV#BJ{j+twX;jhmuL(N>EG3w{Y)sN{3D%psS1j|WBb1RB}BA3~D z7#)(B_c^sfqn^`I;;IdudkLf5^IMxSdUhL#yAvMb8KXXBCXNgd)kb6IAdU@YcsS7z z{Wn`8^I?bZ8j_kl$oN$IfoQ7(%LRio)=<(wztq~4_5N%*R@bW7=qO~@tbhW3x2<{Q zY4fYOd=@%t%5?L<7|MmR{W5@(A|_F3uM}brLQ)pHON-r7Qe}XW7UY;JX@&|yXU$u) z;1};S#RgaZprkUo(JIX%T<~7Vm-Q5Pl+;uSprk_>P;D1!&ab&B>`S`qiLw~fWQCO- z9WrtUT;iiWIKH+;kIK|g?!!kU5y*JImJwxLlq6g4g8g37sP(Eb-A?;MeQIu9iEzo5 zfke{cW8p8!6In%tTj?8x=P=WeL~MCg{(=ZQUerxHIWADh+y7KuM2(P|~k)$hZ}m6K*xBx0KZDj*@0PkL3A{ zl9tgSnYcIm(LKm;o+AqMp;>A}_O0qOda#&>paH+=or)Dj5V*lc>NiCyyPCG5W3Vcm18j^#a{9tYn~3c*_rLKJ#s(hc zG2_8<7Dt?M-(uW%FKWSBP&^ z0a6Hy(+=7BkdXSsbJ!C?Uk>#d5lI`WdMoLL2cc3tcu^^j9Yd=%%3iSp5ps(GE7%wD zyNU6rgw@-L@o5cqU}Btt$JR;pB9gE7qa9@_*g(sMR0Ky*rCl@!(ByTi-(_E5*`%rHEw3Dqz$%^F$IwJ>VZ?O%v>piD-Fh8@p|$bO%W}a*58X zZ=SLU!m*+VrO?2s)d!uZ?mkZI8+iqLw=piTH(w5Hj0KV8Y<71NWxEt z(bb(%7kO+KsVH&(T53nu{tQeW;}je}xB3W&Vdg37#50s#Z*)-%4cH3p7W8LN(_e^x_n(Wg#8vKs7GX0JP=i2Pa{)*293+yss#@>3$0lxR%1Y zM`dY#v$XYH$Qc}%3p(|SZ8>Co`Ev>KpKKPsUNnXB^DetZ80O<2e#kQ>m@3_qz~*{5 zLMt5VhX1}}_pUkGQvx(c&y1r6vj7cU8Ccp~>LF9AxLzSzqhs$li}6yhf(T`UJE zY0ZFP1X=B%3hMV1a5_nl7p0${1m8#`xroHR2n6(GfWb8mKuN0|79sK45lC?x&*1kq z2z6r*_x(&+`o_R&Ur*wSxg|mwqJNY+3Q)0py^&7#WJnxTO_@sByp7eL5}NktJtig! ziK42JmTp}dX#nDMZ&oC|~s<)@H^uPGUmNQ{$oEpc;=<-4`j=s(;} zjAy?zq}|3mH+u_^LXYfrg^)&tfj>@+s~z4#(*CfoR7Sr*(smq0?wZ%T*wzm^c!dqb znJ|@9Uf}$sq-%`t8|T~Ph9d0MyJe+jjE#BdT(kAJ%6nO$cZkTRz%p~Ghq*se^-v^N zH_7Nse?&rx1!=0jP9gnrE(h#S^E+6!RUbhzb2bQK#Pj%Mz;SInT0$#uxGj!Wgt&}+ zZ6g|_UVQubfE3PN7e^?aQ+y|V6PB0RZcr2-iiwd9)w>FbiO1$enD~$quJHL6^MV$P z7YYC$%|)Ola#UBo<)cZjS$k{milY}blA`;?iVCm324{i1z|`B+j-!mEb4mp%C{MiAL~H~>5X@|3 z;&x!X0&}^7Ya9fwPV&^(PkFWt0Hi7`03cPMETj}k;iyLiN}~N~Mf#<OLc1e9VWD zfrOT-8LH8*5DF>%6qTTm6$2E!G2JZiEZb96w3PGG7}XV|b8+%fAsb(dRjEAFar?TB z>9(k?G_TM_%4$R+{?0(~h0=laZFBVFq7%iXd0pY>^UH7evh@Z%?`vK?JUcV34&>ik z0So#}Slv9r*7~uTs#Ts*Ybh$`@bLWlI!}VI&c88+jE_^ret{>{1`#;*b_R;0hoLMw zh#$vZ0>x44asZGP_}=6*@jmpvu{pIz;~kQrtb4>aN>u$y-wc&51_MLQ6U+{Z3D^Npk+VrlAnvqd9){h4BpOw|vxR zC`l3EqnYvq)jq_rw|unQ)(02hqvas&h&w)t2Jq3OTRy75PCOX^*{ z2=3R40@lSxtq~5kPqX*G^DSfZe)r6H&FVmaj?6c&ozSpc<7oYUvNu(;dVMA{fo^~u zSQm%?i*@l|L&e|cqyHpS{F#s5XNvnwai1yfGsS(TxX%>#nc_ZE+-HjWOmUwn{vXH` z|A^H7c6*eKk%{F`Sky0|NInF>qVnMXhW6;)j|Q$fL^TrHoVSCJYH{9 z9XN${{_8ZU5U{t{l(kc1$nnHhJto@m$=9ICvvNB5Wi1GCFd0b7IOZ}444zj8ZHaGL zV2f4?4jlyr*2v{HP3sI6WlCOX?|k1RubxKI4R#&e5$rP0_%KQ@YaXb$WkN+0ArDPb zX}1*Ds-gF?*J5X9WP7IR+VS@}q`<;<~K?0#cz^Yl;0(_i-4pSX69lO*ejOx z0GgSAq&8AN@oO@VG5Y`@skNHVr>yzDPAaoAuy!k{rPNEfmDEQ5kklUDNov`Clhmd^ z4&?YnbOKNNXOHzAd@9n z3l-ZPbClfYmSk!2=?5M~b$)s3yUwS<_%W6|0v)MTF&52bCBw+Ky{gZUX$KMEcyb3D zxY=LdGDif2@{yb#nu}ZJNLdOn$DI&Y;8*Ch+QsN}3wjB2=>cA~*idOhdbNdGeb|@w z*Q^cxya0@}Bn56&bTiE%S3RjJxbCW%?Gj|S)lAq=ch$_uFrb|dttSY z=_kP0ns_~E*!=kyDliZht@EQn$Dol1H-}j_H|f-t5L3jq))r&59Do5Qq;%vrWIpp8xvlH z!bVyhirjTGKS+N7yGVM%R|~T?3Gw|rCUQRxY)3zPRuO8SH)D$8@UlHemoo$6tKy%# znMCCX!&g0Ah?yp^JN3Kudo8Z3ZED?t{Bu+wd;AvejWqstR+%Ah?6bD*3#vtM&_bFC zLH$eZ2!jBBRB5^C0s+#@UOqV>iyYN}da z=41^0r)KZ$Oa|b3y5Z&|<=zxpR?avL&AcHq!KMr#Jb1C?zQ%6|YE$!agIv1OX0jZs zsk<@P@1I2x@QAssW-k4xX1@0Us+quy?`<`6L$bsVcfsFM~u z5K#BWYNn{S;?vByKU6cJRpPrKk`R7YGa)O*v-&Mu^!q$CpO;Y+PAzk)qjY`HEW{Cq zO@v8O;uq!$8M?F8w&?B5$MU_h19c7|9!7n>&g0sbs{IavLg(bY>CrgQmYOojb*3{b z%G|98u8*GLVdE*y-(=@oF&W!gk1#hHl(#J=K+OMm0I3XUN1prKxLPg{{NBhMe@rHr zlbo+eICAi#ky&Dq#04}meRvN=wBf)RD7}mx>UTO?@+Nn*BXftk2tZ_E>Y-MV7{T_l zyrFWEe$?syr62~ZZ34vf@L9K4pm?E*3N2E-ZZ-mvHQEOz4SnDI^!Ffa8gkM0J|oGy zqNQ)XG!3f^4OK5a)kiR3%QtuMS%`sx>82Bvi6nU&vt%F%F4e77wqG-vDq6j>=96;M z;sKgf!caM|+xw;au911*b-5UV9SBCJnjz9cjm>11#<}veBr6IOD20GFDKqe6_qRe? zC6y^R?Y$exr?KFy)j$Au!VeHbNB1g5KLe@JQ_*9k?3;rZEYiM0g3&G}Yl}FWlv!P8 ze^&J{kumCaw--HFq8h4>c34V|89D|eoJ;8i5A61Ot{l#?&qoN;i7Mx1Fsds8z>!uJ zvXNTMp(v+Oa(P61#e#<#ftT9B2f6Qi&LC|V8~Mb0TC*Snrm<%reZz6(UH%4cZ4t-Vu6qs0H;i6}HB7!N!>-?>q|`^n zZkKx@9VV3P18)NP+uW8hiR2Ptw#OYfl@IXhp+N^eT;+}0g9kHE%dRf9rPu*wyE9Qq<4DG5) z4$qZi)~*t|Adda?-8mCIbyS_Gj}x@An#L@lP+;@}>o1HTCL?#w9N1sb!eU=-=#*dB z>~DV0;dya{&2gyj-iWC&8&X7ZB}})zWL8DsD*e!EB|2$>h z122%?Pf1GokI^n-lA%oWE9>V;K#{?(6L2(F-iu zUtF~o#~lvtmnnd&HuyJJ?ag&GtAaLLZ|)_zwD1wkNau@o*4AsO&YID^N9KnwiebWbv+W6s^wT6MA{(`%NBO zRu0|lzy4IWKEOcy6(@_NrKA_)z@dg*szyjZ!95Gk6N#Hp2(fm(TWpL!`8$L73`gW_ zdTdbQ@zd2u`g}=hSpZvvUmNP>P3DcLeu^D>JKp>9cD(oH?Rc+|wl@J!9WMq?MCH@+ zL z=@g+Ni7bo2DGb$vu+7SgpT10m(_6rtpnMvp#SjSm+DvyP6ohsDI75CFgi*ZL*gTA% zHT0|u>Q#8yeqVz9R)Hi`7v8MfG0$#a0#Plbe4|PMghMoh4g=UT>Q4=Da|mFO5WUaS zk8EzbX0|sj{F7Pxx1CB{DzpWztS?48!e7oNF??8!>N+VReAg$}OGo7Hx;HhyvPSbo z44eOL5$redV*woqNBX?>yW%eo*A98I_%kdD-)VAMub-dzV^=oT ztkQHSk`KJ08<0$V$&2jisE#EO63lcjXF-_~p&WDUIU^}u0HpX)c71lDZXYC(14H|4Qz z5U^kNM5%ns`JN9J^nv3IKzrZ3^z1T0>T==+dpp3qT)~=z37;MFZb$`hSWWXWJ0D&V z`35aAJ>N)q3E9Ze&^8qJ2z=5lwRiql6o59!j@qb9$G(szq>6jR*lkU^VCB;k;#^6JWQbm0KFsz$s zFG>Vuu;n>*ucAY$S)Bd)gLQ%<(ZlSk-%Yds_+|S0Jo)yA{jYiQuV1Ra&y#;1-Iwb>aVqfZ5B>k-slfY<^7(P#RG{PEaw>59s{YST1@8B3|99`%s!fpJ@7dn( z+5Ss=wzHeBrsNs9bZVV~XTu*?fMWo?lAFG0oE%jgGxMx2!A`v#k&vj_MPM zI#?L=YRaNmFTuj(GE5{WprHKP0_NkRc=D?=(Zj~~(}{Nl+iGY`j3?W!Dsm zr&l2u9p9fS4;+7@@(V`kTS;hrP}l36kxL8}UxB&~C!}(-cr|vBYox@iMpwd`L%e!H zpQw6C&Y1Izg%ax&?<+<&gE32z=3!MYEeWA_uc}A(*q%s`gKToy6as3CK514rd!*4w zPgA1@sgTul@OjM}b`b4aPO?K|+wkNIhI)Bss1F+#AKJ4N61EzacLI9Yp2#qw z%**$s4mhm%NKNOHcX}nNNP{0Fo_m`xg#RgYwI&T*fT7-i(Rt|t z3D7vhC?Tw_Hvt7@wxTxG)Ux>L`e%+0!4$i->+HRu1!Zt69li{W68o^69pbc-xG3qlhb|NnrI2RO z3fQ>JFW*x_DIg+6Dvm^vi@>v{ctD$qDD4JMfzp((TOrwdS;bgA4)x|ow3->$mXM|l z;?u$Hri$5u>nM*0$eu;*p%pAl4hxrrHiuH$$V)2(e4$J93I-a=tC-j%ipoaHcMavz z44|Rx0yLE2ZyU;_wA7?74<6@KH_zB@D%U!lb#{zu9 zPX31Lex?$oh0_%H%XpZfrf=}K5q~)rI3=~lUqYlJSl4Ta)!;K)h zEyYRftK0}NxijVn8Byrn6eZzLJkhDd*OT&y4j(0N-cp?oz+%&LswT<#t#KGhmJyP` z3)R1hJJ5+15ah|6aYAw`>un+$|BHBZ$V=LMhyzzI4V*3G|bf0bd6lns+SH zKDVWInADIGy5P4j=JjF}pJM}>QWUYC@xG}j)iYlA_(1*B-;4?Pn-w+l-{1M0s{sM? z8>~|1f)PTNpHL$nq(OwH(9#|H}_Ryi})ufjOrS^~w9-u7gRcNkv_Z zepapu>TIX^$7=y^gH5Pexw!f`+p&r@)iq0Iwio21B);mGF1)5iAzv{{rU9?PXIZa=+F%w^gI+v-P*s&*m(h!(CZch&yvW&09 zCV%V_Zv`7L)3kSaeD$b^!LQ-SpW|@oI~1YHSexjs9j|}A?hqbg7BNsz4!SKUyYoG4 z_I8WY01C>G$5qZu@%^ho*ZLO2MCJk?ZUEgv|7!i&w&~EObsLs_`lgk|i=e4($9`^t zW8kJCPd2^Fl)rx4I@-J<=Agdpv&AP3OLG2i4E-GwSIN}XiYFSy-uYXWmo%M+vqsEB z$R2jqJTElo5VPyMQXVkF*1kC`{B$l+Z?O=yps{kYTYQsCpm(F=9(>Xygk#&?(c(!yH<%t&ruSi7;Aket7;zG!Cz*?mS$=S!!Y z*8N9;a|UQO6vcXaeIP7wL~cT8*Mq0%Lt}~9ZpY@vVkt+hkELO(A7Uj2R+xAs(hq?% z-krc1Om9+OmHp#!Te&^k7NN9Ls2=^BY0|i$_um~1;s|>*$r8m`4qXm_^8qd12(AH` zP-RlN;}HFR>*{nzB)hG>1L>`&vyX;4I$|6KU~SK&Eh) z1_aJs@#(Dwh;7}XyYwGyY(K%He2{tS0e8Uho1g1PTKY9t{QYBr zf08Ty`(uIoSaBaKo-1>E@1L4IdAAK2AK?VISI2?J9xqh{SY5nq!IyC#Wq)LC33pN6 zk&hiigjEt&j{ji%`~s5QR4rxZqUkB{{}7WMWvj862D+T`q&g}IB3sdxymTcF(^Dd= zI@AJKVe4ZwTUz)_&&Xa|MPM7I8s*0}OsFj4?KaFb>>sybim2N1DEpu=fEgWmP0z?| zj;oFPSaBaK?qkJ$thkRA_p#zWR@}#m`&jW8vEm;I=ifdTU}xiE|5Hb~*&9z!@85MU zaQFEC8qwr40ttdT=4R>R%EGuXMH!1#Md1U)CDAx?x1bbCN{SVGAO(5st#Q*A#Tiq4 zu}D4;KP-U@Y)cGGOY=vkX~QS;4QMtcef)LibhVG?SVfe4na;xfBKc&sulI|V2ZVMM zf`{P-BqI2eYSRvHY=IqtI_rz8Xy1jE&4rDH&=>Y~1XFIAJnq&fgVRVavUs*FQ23Sm z2{@0xEpAS=_b*j`CUSBrb&%QOt1&JtGnrdBQwrVDy3))c+`^x7w|BYn$B0SOQJHxd zr|nSoeWvFv8{T7v0lF6VIQfvaH%Xa8ygd>jT@QVZCEf|XqUjyQ&wg!wDKtO)7$Vz5 zv_r&>fJ6r?^Q8o(-joIU$tasu>1^qdNWGbw4h(Q9Ko%XKKPP{kV`$_C(LRp1wlp4V z7`GOu)Qdx5>pMP>K%yb~>5(|W>QwN-Gpo?Phd7VLL^~;&Bmxlm#5bzHN%F~NQTpB6e@@C59p+=m|m)_K8O5y4ozIOR(Mq;?%vzQ$W$iXyfQ_Ysn( zbuq+6nfv)qx$0j9f0_>KU*xXXm~x?$FtoDVh|BWMjLV8K#~zH6Ey<%7tYt)yUf&os zPDr6joG@jh681#>RJb6Y*+(fLF|(Q_H47EsK3cm>@~mTSTODe(K$PBEk?C=vEjVvDGe%8a$}|QGBI$-Amz-O> z>L^7vsNoWqpjMij<@-#_gAeD$~`QnJ&l2pKqJ^tNhAY^?)Vk#^HR2JxaZml}4 zk=KrK#DQm*qSWiIPZ?cwEyD^YH5NvFVhn*V&@D=!bY1*D$=6f9O(!D~dSL5Hv?5I< zX(So>SW^9Nj@oeur+lb9qqr6Y4Q9K+BU*?5^U$_%52oDTwb_|Byx zJ9>;2jEC4nO~3EId{7i&uynKf!B|_6$`-v&go)@~%qIaHgW@cQD6T@e(3Hj-G#qey zJPG|X;fV6OQYkA<7|e%W9W$1#PGB#YS1+5S^$y$Vebv;#F$`KyH1>Acprw_D9ra@# zv8+Hz$b*PJ?tBzYb_t9cxv)BqFkqFB>UbRQ(3>s+?$DDx8NqFZ*G4EfJUz^oqw-8d z*j&UbiI0)!@PjA<@9WL6A-wo*JZDf(;lwhR6MK1!m6^Wn3aX6#D92z@eerCo@7gg{ zKb{At_87$L^76~*X3!N|qkjUd@WrEOhVwC*vnLocUdie*Zn)Cz-r*n1&(nuCJ#cxT zSjoTBH3se2$eYmB$7gFGj6;Xf1SEV^L=it=s}|Q);luAmRL(ug)FnWkEY|n5+r1DD zeh(?r z6_BP>qdERTF5mK*!_NY{J)ysW>psRjSM6vY3LJTs>IJdQ`t6{bU$odQIWS+^Bc}Fc zvR(j15H_udRMq6_31!;+4z#CH`6U1NPAA|Js7c}%BIKMi;2dZZPTGJ{a0p3flp^km z!>cK%^`kJsZI`AnH8%xDo(Y8@xD0<8dEU`WJWJzxN#xX~Q$zKfRO;JBvz2PXY4p#L zXD`lJ-Z7E!^x^?pip0@Y?DM#F@jtr+q>IE*X1=60dJKny>#L$ZOD1kZb!sK|_n=q$ z23|Dcd`#SG9daiy_i|zd;}Q8GFpqpiw7IbL`jaVDFBYQR^tKie@-b)Lbb2QQFZN>w zE0v;IgHltf*Z{M~!9x*bsubbbV#}RAB6;FJRRSc<6(Q|AaCVWf$*r(D#Nj~) zfmHIw75&k7DgjRJhdF^p(MJX`-yxMkRuh{|7uazgha34);h~sPd4-*LQjmPtki{nw z|F~po5u?|6T2Sqh;NThKD94KF^W=~cirXt}tk%W-%I(qgduhA(&vBoj9=c+i(_8~H z&)m$v9|-Uzxhz}7sR{AI#1(;84reZ@S%#ZPuJh5kOp_pX<^KJN@LDqVY7)jR*_MBE?DZL z>oTTBB~(?9GT0^ogJ_tee)1w*1alQHXofFGr6Tqdh~mLsR%Oeq(Q^Sbx)V5*AlWQg z4_CRABv+_gmq5)#`hqW*d6|+0m6rqIuxXT|o7pHMz9P6eRj`}N=-_4r$5i<3&U1du ztxI5O72j_-6Y^v>RQq&+>2Q%&Uo?4lezq{Pc3ch5mMP0PFsZJS!F+B24J8E*TWfQj z;4p$!nAb^q;+x@>#P{snu@gF~84TA?$og$I_3m*6{lXh9LvK}O&5dBWDX z0D-x!W6P_b=K-&?Xruzrjh=Y!e+kIa_E&JrdoQrhjZO;8KmSvg0Ku(GK#1m#E&&6` zziwE8`O*R`#?6pmQ_NC<8!X-mDda!b zm7%Yl8;;D<;X0;rxjwpdLh(d>T3c$)1jm`KjI`pJOo=`;tvPixytj%?aei7{bU&T3 zwd!-ftYx`t43oVE6#BY3O(%XF&97Z#PesLCD6Ryc{eorMSNiIy#_AHfb`lEEMsEtA`ewah4bsz?kWy2k zrixZjL>zj0dqQBfS}I*KDl}eEfPfVf8lVxHwGs$6tulTqE|0=qe#gTOh|3F~zV%b4 z*P9lx>JHZfvNQt$xYRpw5$klkkY4?N?7d}Fmh0NKO?N7tf~0gK-Q6MG-QC?tcXta&3rL4F zH;o8LBOOvwg6|DZ=W?#;dY}1ybFJ|_&-d|<0eaoz8sj{F?Dw%9+s@-0&(Va4P775m zSx7)LlMi8_KnqG2b~+I+)k)eT_bg1;f8AV3_p+tIEk|Bbe)<_@L=u`}DfG}ZNL3i> z;%{KU#q;94j(mU7tuf7LH~^TMqP_H;w_KA&E#Ol_rqi^?XeI6Pphdk@iC}PUG9an! zGq?^?)mB-SB$t+8Idz5rLW(GE%PQb&i@V#mX_AvA!R7EZf{){zpJPQCgDHfqKk`zJ zTqI+UK~IoJVsj;MNXm?8f-<^0E&vAe$t_lgN5u}y zR~1M6>sS>}b~^%Q-0oXlF5D4sE1k~tDhrU6M=jpaHYO|hUw|bYDKa)>`}fVxC7hY{ zheZM6wMQpfF3c@>NMvpv+V)+^*yp|<4v=XN7DrF6JU>g?*mB}7My%*5XX-c~iZFe^ z-B|GU0rR&q)7oQemTFDE1tB;cJas=Ghp7_XA6hZwNI$P=T3ggT-`<;<=l9^)9XTjE zv5ux!QNElC~3>r8yd5`7V{K`OUabrEtaC#_6W1k8?~a&%5;%S;v&7u^o=2`;I0u& zeMen1VUKwVB~c_I7?IP=FR$D)b)n3O8lMF{J)X~Cy<#d@J)L|rc4rYVv8^1xIWlH! z-;t^OZV}jpy)&05eK(iC1e(jY?#$(-G`Pyw_7klHbxTt2vUgy><2x|G(Kt105C{g4 z-+=)_cVIv)5DbvL0|R94z<_ul7_f5(1_<4O0VX^|(Q`)s00WvOJ<@-G0X`?+o1MYG zo68$6f#!0GGOD)goiOCOmZsF?`oLyq6`7_z%Wgpn+(%FRzaswl?%{h%`Z-VhZ7|?p<%$0q40wnW z4{_olPCUekhdA*NCw`?Sdx#ScapECPJj98IIPpIdve}_Nd{`r4#bZI?LkJd*h-FYhFw5#iz78cd!m+^{i>*LdPDE$Qts|GwG(Oiuj zeDG5+hM2;qZ_Hr2+UNw0HAwiDMY(QHH$6O8Ltv^p>SsZ)@*rIyL9|3~5Wi}Jw7mJe zI}24=JqLAz-_-dfB~f8{ZzIljdfKvqrCF6hn=hxq5tLiGaS^uCdE(of*i+fatpy3J zn*bD?PlNCp$tjuK^h+g_aBWwY5Pf4Mm?XV1jm9XFeSy5GLv* zs0>;dDfG6F`tC<$xa%RYAbSCr@!YUt1gT$%eyM)viy*QUc}i!s(h`J@C<7~EmU!^w z^umbeb8^;OHO`GsbBrf*D3KG-@MA;3nWQ={Z@52StbjHW$Ykx{YBeZx6skZORpRa3 ztX>QFY$X->vwap1|N0oFWJOW}R-9W^ZiB3&XvrUQv|7$QQ_oWh`tyZl?)x^ZNBKn! zg@zMBXLzGe3rE*#O}P8`CrkkFxF&!Q8N&Wr0y`B_B1tSrGQ2a2v`35~7Tj6pa1KtD zYtfUG3fWx=zH7J5Dvz?xRCgy|C*5$AB`P)xE|vMDjGfqq&usL5S_#P>WXldg8(Vqg zwG(e9P$QZBae_3OVC;J9u`y}On9>F(upkikbpE*V2J}ZV{_|1(+f(`bqxS2m{Le@F zZ%^g_@Hr1h`{8K+)6xD9jK=?PzJV+fh!h_+d`x!2hDvvG6xAD(@SKX~@DF898q zJ0Hs9zIgnGDvckpJIh)w4+;&l=kAekOK(&NqKL+o#PT_!BEgo%XLI@IJH zcgIE3K4y=G3xx2pg`Vffp#+PYIYv4CnAex!`OFbh6wkS zFc#LYM=UN0Q(F-)nIANG*^X^W^;}n~H-k4t+)~@^uG_mK5c}u`>8pn%=wyPU zwySh(s(l~{McBEr%XFSBPtV}C7q5>D6HdwC4Y)Md#&`ip%Z8$*bY^3?e)N-V@%lQ@ z1S-Znq6T9AXo3&Xmm|+0$=;l7d`6W11T4QcVkMY~?WnJ5s);V*+ySiMcTNFC`zAQ=Z+#IpFig+A*)b?pgd*_a z?9#?xyi-K4M-_q*1i*8mO<&UEM_ZB}y`@pCCEZXP( zgJ>V^%bjT7FIYSA?9Yd!{3$RBSI0P7n-TY$_P`cNq^-qd!-`K_N88BsN0g`BfX8k)yt^F943X?yzgS zO9w1Kf+axTuf3Do?kai9sU_#j`c^#6 zUUp)%Vn7KUm5F4hebm*@+fpihJQh-K^3C=w)pk^)CioP@2}o22 z-c{g?3`MBLvtO;ubN;k4|GEXZGQWFG^NW>v8!+I?JdOV_@BoR%2z2UYZx!&}t;`qR zt<1L*Ad{{ASecJ@{CQVtT8#$T@u*o9b=sS`^voJ_fGHMSLXR|)s>uCA&z-=HxnlS&csKCWKofGVK6g)%)~==-6yO`Fa0>1 zc1MfWwy$ZMU{3@$fHU!xMW(x%xXc1@Cf=KGu)}pmBJP}1@nq*XtUw_TMTkL3NXRl1eH;A;HRX1kAK;QHhoPUO@K3b9^qB7~BoH^Xmg=;?5R* z_kR5@Hm9<*(N--og$dvjCmr4qxrPo z)|ovgw_5KmAI3fg_x>#k_s7v)cEbb;kY1GE02vp+t#&vtSiG!n zpIF?Ai}t3bGSli6Ctb{YWdM6-__qE=9lFY}l=y0~i0RQEp)gHrDh6A61d3zCRFf=k z$TyaK2sInyG(C8*Gqv)u0aw7W_*uO2Ah`OXzjK!JF6n0g6SNOsdJK71KRnSKq%Z_x zKEiY4sLhj(5B!_4hoT*I0tl*Bih;_~3e)-_|{q(7Nr^wd`* z*Ayu!Q0Et5cour}ur{EO*X+8Pfm+)qk-tUjcb8(vq{oiq?pA z-{<|7fD|j<9=36I{8xJYh(GJ~8zGc*NsrAcJB*(yqnZ9muP;K1j|75m!ns=-K3F-j zJY`WWQzF=#n@saQ{l{P&o{NvK+><>BE3B+-89jM>Xs7L_Ol_k*qyw`LoL$LfxjDiR z4%q1Z7TD;06iu0fT&nCfX5~2e8m3m*UH-QA$~G7Ic4lRX;j<81(dRHn9j}Bqj6(TF zu%l}b+M?3%lgcf{JyGqW*WG4g){!Ck+xjgRZ#+O%RFXluNL??XDil}VyE(I90X9`? zzc+eMWRErjm*LA7t}cssv9qH^Yg^i=pRX8%Y4GhKiJGt-CcC*kzcQk4(vGMs8dF98 zg`=-h4k9z&nCZ}KN^}YTpy*}v|*D9`bO+@d~b%_O=4y2lz?xV^l zbXRNJ`pgh>X8?USC+@Vf;%?f0yuCp{v-`B{ju(6-;?lErpO72beUxkHYl9Zv+oV6} z^}WT?C~R;xlx`mt5xEDLtT;!nE1`V^$;c=!o)+EcnA{@Vd58E zT@PX6e`uKa^DOc2kHy(p{&_5}Hr^oe8n`Dv^=}!A-#!1Y%?_6&(d5zkM)#-}Aqfv8 zP~|0=w3Cc1lGTM+)FOxNiuSqX?&(^lN_*$ff>i)GjpPFI@nZvr z>m?`5>yRbPVBXf(r%{VpW>y&|4UtQhP4glu+15A*HmEwhme`rI?)qkSB}X4xn#XDn z>sZdn0&4r}vtWsG4n$In2P2sl2#RsvVLAFfT~dX1tr6fUejYb@lN`@+zc=(DjLSe=J-D7IR;inRoHAhW{8>)#wMEX(%DR!)Q29J7 zN$}Jd!zsee2k&hS>ThGt&(T{JzSZ&FK;YD@z#AY?dQ|0Pr9-iv(3oBkItXbxz|2e{ z$$1tLRlKSyfRT1rhoOBV#}RfSS0uXjT$v**Kqk6QT@}mBY3mrAYl7&YRA!k2Xyz~F zm{KRRMUUF8dNEX0Dg(IKaSW`W>t+P)yK$;?WS`K}oUwkhSlN_T^2X@Y|H#3}@qlji z4dtVQ(TN&YnYW{Oj$49s9>WqG!`3+w%qSw`_>Ocr2(?(+rfM6IS5&9OS9uqc-v80z z{@sQ7^>F{^i~0A5`#*oq!v%e~p#Pt|p#KR(;pdC<--#%!5)luN0ucrGe+!~;_f~%e zQP{R#V@0{O={W4j^I^4G+u=d@3m(qBG(3PO-bhS0>MQ5n^nHKp49g$_{H3Qd8^S~q zGyKaWbX)0}6V}pZIHGzI@`|Y*pu&g#rzAF!PczouXn+rz#>x3dQPplQu$57VH!t}R z7Q8!zAdtyp)>nfT?K~%Ohr8(~S}LaV!@V?Xp0?If#@kvrg;?+)qAxV%TR5{9f9xn4 zpMWft#GxQsPbz(Yl@#T!0xoFLa3%jW&UFYKX6TrQD5x?4kt&x0LX1B%^ z^h6}DqR`j8-h0bV6V^9NElfjH6ooSWDij;}M-vC+-3Zx~+9pxElQ?J>yu=2}2gI+a z?+68zddjGw95BJpjkxCJ9`s}eBZR{wtTvX4DTV0tdLo|f;NKP%I+#f_f&Y+EF)9W^ z_^55CLj820SoL`;p)sAA2)MGFYr)Gtt~4}XHqWrvC68U?_fSc=EsP0E(b30aaAR}G zk%#*{O;W+4=iD4lgNu%Pk$P&#~4YJ3T-rM-=)g0o#A17zYeBAx)>l*Tqf(+VdtBuJK3r|uimq{qL@gbng-=H?4SbykFV@Qhs?{E( zAa;PMsUUPNeY8C&(in8A zVM(^tfI~T<&INd|anow8nTiegTTYKGZa#v>4~Fcrzisc|0}2CbSU&*@dMz7e$HajU z_MQJ4PJ$1Of`i$!ph(0I}Zz1yQk|0EM#Cs0H|601D1O z00qQ*K*9Z{>}NpX(H)>5lZ5yyK;fVX?FXRn52-&`;``Cru@i(sCBNmw5WodRm{6G3*i6`YSN5*TLlK_6}DWfET`4w73k)^{GPX+DNnp zc&K5M##1wiwYj>_MQ`49QzZ4?x^D-?5p78=9ZIE$BV6T|EgF7HbQIOB05$h_1A*2> z^6I4`M|;OI-E*BIG!BsyBl`|uN`h?XApt+8L_7pAMVc3N&>Hv6PS$2hX+64uYQv@u zpoDZd)z$pHsq;N(xl79<{te&(dMcK?Tq5hJkfT1WKPQ($-I2Z!akVCYB2@PgNR70L za)5r}_H%be9I1xfIjiW+cL4pkE7O__v+5>R>$GthDc@}?2HBWPf2AfbX!Cy2kY!(5 z_=6g+56v?%EGlZUl%cEsh>ZOo}$-~02)wOJ@38e6YLc?m0G~LN$NEC1!07^|oG+&}3F1KJ^ zI408%U%Cp`r*4?~YOz`(KBWu0VY=Jd7qVd2Kb70d|NImVA59T$)fxU5JNwj>^FcrH z3E_7;`=j>ve8TjCJ&6S_MJU0E&YsU^n;}|{n!h*r+Ko1Y?Q~PiH*2Gj+B-f$s}9H~ z$ePrcYdgw6A{G=p;T0_~lpFqjNE+hIi zzJju`paFf}%ro@tkxI-IK}u=jCdKxfyR!vsv0vbB>N_Nu)H)PbC`6Y_OvDaTJR?7Z zSy9!z!b!4J;;I?2t79T@v43lfhi{AHDzn0yx`t&Uw!Kx_sxwT37k^$z5m&f1hwGL4 z8>E2r9a5liD=yrto61b8pPX<}@0A(iQsk(b9E8G>uJ3phte3(Vp_w@TY9ZEAe0(J~ zuj{Gq7<=}!8*YvD=jB%PKS#Y{&i~||per>$31|isen+J2SX-SAp)5+>M`$Yfb<4U`E^{E zsW?NSag`<_NEy}&ft+7re{n0Zpn|sivV7-LN7D+?AY;FB%C|*^X1L5ym|7KW+`FaC zKulp}*`iINL{J2{zpt|U15@~Ye;;zU(zVCxDzC}*n|a#hA<^d^JHnA^{0sW0seB2< zGY8pdCSNV!wgSwR2^}A2+EaB|#%d@2w!iOm5rV)q6G_=Z%B`eRSRibLMa%z{$hY~` z&dyh=E4;h?{XJWpI*t5JTSh{F&%Soo{xrI;Ev$BX5Uz5gOP2O|NbT%d-F3JT-v!~h zaqYprCA(FFciVoXC}#c&vkjeu%thKN5=wKx%H{sGu(l3@&o;8nM*c1=S9xi8_~O1R zl1FzQ8&3V^bO;{qBk?tp53`Vb0z@uW@xd1_oFw*w=?4pnE;QI z`Psag%`ln+k(sr{HjLW&lME-0Jz)EQN~TEstf%|@CiQ|j-6szduO-WdWde^Wos8(p zYhGph!h;4~Xtmju3zeA7)^S4~Jdphj=eEW+Y#EPueoR9o=T942R%h|0KBmIrvUL$`%U3jk@t{BJ|?y ziXfm0Uz^i!GIB9`X0pe~#u;{HgdR~XD4F<4G#PG90hLnyrAZLVhnzLgcU40bmP-5K zW{2hs&Qa{AD2S@)RO?1Gq(2z$*1(g&6g(PyRv{UlOdgUzKrqa7Ets#^xOMa3Wx( zoELv#z03tJA1F6GC=K8lJ3e;j(Ai`9axmx!W1r(qN4_NEou;`Y=-sJEC|26r-9WUm z3{IPODOnNEBKi`56_yyjsKv3pWBHhXBRvKLb=~I2lEU|x^mCy2`;@}J2o(QJDLmwf zhdl9+Cm!+yuq5muPdwy_hdl9+C;o5T^Fy9^$P*8F;(vOc_%o=$3jzY7EF&o+t0JRA z@5;)?%D}`(&kp>NQJpI|2%dij1#$oUzcyrTxA@)`V9huKPzx=_+f#njY*ANbOQ#GYKn)?!j$-xh zK)fbi-FA%rr6@=FSSc< zHj7_B;QKzR7Xk06Jq2|J=WDgT2EWh*WB2!Z{9(qmw${U4e`yEb?%LvPA$j)f{W)@W z5utNb8{WKkxX+tXc5&H_<^w zCEptZJYVFLd~XcUzi$j!12zU+y3&Ym0viL~7DX1mEsC}#AA2ivq@?BVtcR9DKlN&o zm0z*3WK!O$TS@EqV#Pk9%%+^4L?%)q6{=btukd5o1m<4hNfPV*faQ{~S z@3@0sYCfa9u8^FBc!+!F_w)F$zjFsjAwRf-icHH$0=(b212!OcFnZ4&08GDg2Wqar zaR<`Gcie&CZ`{Gj>^|G>uek$+d+uQL2Y2uS$Q|rKEV$iq2Vx5VbK%F1lK;dVTqO$v zxdSNquNkgoEI{r+N$}rgMv(ZU8KIVG^qxDI`N17TWKk>{0=WZlij;4mQohaM1vOuZ z#MQNDi`Z!c;1D|3CT%;KpntCoVEs`W!1;S^KsvBC00vkaa9DO%8}PA5;=C=Jw-_5y z>C>$r8NrFE0*JN)riLQI!NuACq;yF$HKwIDvW+#TMy{LnE!D2s9%={TF5g{O@LjHb~d^ z+0i(FLX|9aMIdtilZvPO3>!stK0zz!9Yo|nA zV0ff=2yxhfHcF^S_`cvi(uV)Hk?f807+Bg}yv=IYeuvB_aI$u2#;^s?B?TLtX2uMq zyHf@NX(E#&l(mCn1Zc5im1gzQ4kT&}>4Rh$Mm%FjKU~-9(=VWv$FiJxtu&TtwG^oe zVHFZFMLt0yLq?1}d$PwA4x5>F(d9;V<)`v^CDbkf2IHkVc2!ZR|L|9R`lIRMt5q1$T7%~$#}OFa34!S|7{3jE7)J;q zW82%?;~S|u%GA9l)yySNHm+$iRKAkZmpJOmQK#6X04W5S^doHyQJ^>kC7OSOs$&xA zvyh%1e|F6!4obK3)1pCh@=^~srm5vnxeV6)w(^WL|4(>lkC7Wyajw%7F(ra?n7rDV z^sE{2BIvGx^zKJ|yGszc#}}Y@rO!`cD>LO#Jd`mH10D%K_7wm|@1m~i5XL9!zh_)&xja>u%+X4lK!J6p{nS23ITd9 zJ*=vh|29wgPLt4mr%719{z;RNSuXc67O_0jQJ&Bst!S$={Oc;jE!q)EnCg>qm$a2r+rU$$JQw@d&Fa%(xkCq&X1NWAJZj3gaqE37JvHnV z4R(G2`a!)0U6V$Xp%pmfxZrL0&Edz*h&*=5F&o{MB`T;2_2l!V*Tb{dE6^#0C(hwL z7uDot8*Z5Q%>g#QH3w7|`&nzH)MFv|+tDFI6&D{-(q)i(4AUUf%MWw^x;fxX=F`Z` ziJ8x{ee{1c2SjzqdjKJXxK}B<;?grTl9T2Hv+L~Y$OD-f?<4ZTWxz)%zmhxP<%c9h zRm@%YeC%TI=-=re)9wF4<#nUNb0pb(h6eFS>b^W6GpS}$!9{&eMsmpvo0F#2#F<)f z!ih&UUPFt4I#FXxq*z4s4NZ4&l76n@D{!+`+SG3^`7f5BF)N#xX<1wvi;Q3bmx1V;kaF1eVU$K2MhQR!c!1oR`y zbJ}LbN{$;m;s^U^-TIEat>C{b5U>{cTLl8&O$q8W7F6}Zb>lt#_&~i#fIFjo@I1JGm)V) ziq4b-$quVn?GX}1TXBYjFk;&n%}6-vb0C4B_zMC-Umi#xENHKoD4|0VpmTM>0?tat zsAE`2XA-Diiv&y?Q-!^n(pJ&(_I85WR19|#z-L5iwX9wYB)qWq71lY^T;0aeH(Ei{ zr*O`c!@xWp+ClpE4^cvi%d$rFKST-0%-=-`9KZ$v2%FevpLi>gF|U?=@NcakWStD) z=)}*bLuk$9af7H(+L4!Q%9CLixtB;LxOMY|N;=x1+n0uXVa}|Gd>B>AbKNRDADTa!E@-dp`MN=Ek{Nl`?Yt{oeB{`cvVg!Y z*)S)0x#-qtQ?Fsmz(YViN~RK!{p_v6Ic`-z`JU}ps{Zg>*Cs4PKWDF6Rc)7bWceL6oq_3O5}q z2;-0HRqR!&Et=w|4l^RTLUU;)gL{LmV0X2xzJ+hQ`Q|bE$E|O!EE?LUo0upE2$L}@ zQC(oiuIllmTDdiVcBQ}$D12n1U@b?ZeDmzltK|HHbn!#^VPP2$5{K9tf>G*8gVgZA z6I0_X**kSYxG3Z1>~gjF`oLoKup6xlb7f}~zIN72`~eLT_2yyGb@}a8%7kU)H0Yv{dF+>jsZ!fxpIz;v zQ6v}xj(GL_()eofbO-4eKI@84fd#u23AUKPwicjcpIQD~V#JedJR}RCf9)YzJS2-B z)npIJ;vrc)B#ZwI$>QA`-zd}H#`%9gS^Pz#!H-!!!R+n^H3_PWvjGvDK2qKj)jh~Z zGB{JA`Y09mX*BPM^>F3Ky%8EZWr9d)B(`?mmZ}!!H@A6CtE&g82jj0d5*^M) znRr87viB@+8XxZ>$9L`~MjEWC^exdY;$-rCJD!_s-h6$YP21_WAwHxKWAZl11Z5LT z*4Jin9U`zupjq$jSk=wzJn43ox+eLWh@Li5v{X_(wJ#(Lw$1N`@P%8J#1Zi;YfV&j zF;Yp5XLnJ-RTRAed$ybty794uJ%Ow zDc&;*1y@IT6&$L<^?gBpn|2IWF}=*tsn;Y`X+ddge6{@4U-h-?JNF*a(lCQ9daWW8 zv2MSuV!q22g0Txz!V&`7#VHrpCE7^?xS~;nRQZFJJue0yQvfyO;W#f%QFcccvuCUV zu{1J9okeX&uR~|-HwK-}H~#B3bI^XHjO%a4qEKOrli$1$v6xWPBqigJe!2gDwURF1=H-e821~X-@ zpDoMJpKvHm2D}$MtXh&DSFVekF`iT$PZK*Um5V(c&yC6oo}j#%z<)G>dtAVGKHjY= zHXP@gE1k-=wY!zRHGd_0{d))BpQrhve;>N}^(g=6+hpC~H^SA2H zlYFCp-+}+{9OHlB(U0jz00E(A0s+zc`>*s@X82Zj^#->i2;cZKz292k?qFUoGuYZaXBjGMoi(-OC4ZF9TLd71fo ztoIAIxyfC>0X~HDabVkX*R)7V$u$Zo>{5>n?T)eZCtm3@BB%pLX^}h*YH{>oG9Jd0 z={7IaFdEvw@rb=zg5!!4GFvyMc?7vMxkYsPG~GL!2U2Fe7$8z>r)HnSHrcTC9^Q{q z*lVLaSu!aHH>to=w`M9%y@pipZDBgjj`kO)kCvx-7nDayRHjmkdE82L5~~ygA!7ns zOQO#e!yYBo7LC5hd)R^xS43nZFw1&{)>27fku> zeAPP#?j%c4a!>5?6#NGHJ$VxD!MLDY%{Wx}w-}V}pZR<$Z0Hnq6*TCObQEc{pXboO z)=mi7;_vGNpKl;N#fsFwf}0D#gmWxE?jq`Ohm3i*tIjt&?YiQ-T0#f9sJ*arF;voq z^-?IhkBn2HmEsV3@<_Mf+3Q==Q{tSFbpt+edmV7knM_3U=|Z)>oe4|h_ktCj&1DkY zAFca6;Fxw+I+&G=w2(K~gTTXxXS#2u2*Uy=j~LSQV%_UV&y;$!;JF~`C3hDTEkX5T zti@VTUPEiiN1-^OOZs0v5#RVgSq4o~2-u@6QbsnNjKuG5g!KKw@MKzZC52za4=&RH zog+*eIhnC0Y{H!j-=c5TEKV_+E%UUq~O7lu> zbfK3kwlWe5=`tXRXRTVs-4)d1CcSSq7Ju!En>Ph6%2PX&+F?&$R?a(sD#cQODlpl* zA(QM8MrnICFQkIP;e5PL+0UYBRYRnd10!8YZK#E=nuiGi#++K3SY4W^ zJp65hz{Dk{gzn4sLiZO^*%N;XuBY-Tq%kWrjxc0VQAQE4c1An2j%~U0%35XvVMTNT zV#kW)y5eD<6L2Ww=|%Xr3PQ*~nQgHQ ziBh-IYXXUB9MYwX$U7cEIY;vgZ#5C`|C)r~Mrs#gl^=fRGeVtT)892r`X_ya@LY_ILcN8+UXj0&{z%;Asv2_b8x zscHcb8;{9j;fd7g>FkZtSd@J+xk>O8t3X^dLb-$9gKO)^TygWa5cjPzh?@r82ADPm zD@li;ciK8oNv&OtrzMW7t3DE;+@TY`?PZ_}HibtxVr;du337FZ97XvM-s*=KHAbZV zDfAo-8Xl1o2Ew#}IE%~{-skl`$u)&9)3dIZ$1_7}4K9>;)D_FyrLI+7%tCR_yDqYJ zkf9CTN1r~yQ)UvSYXJO&N@>I{32V{eA-vUIUrZ4QFX#+R0^O=S>EkOsR*;Q_kA|4b|k1kay|3KlKmF*g{T~yt!?Veiz&oTeX zP!^RW>}K(E4JQu|1-q%W5{MOliGR0ZI(J+mKHO?T#A~>c5r~{;iJ#n=m7j}r7t!#6 z^Wx6rQzj}BDq|pC*lojhJi{o|m4qN0jyHr=Sr*dhN1#RnTP)kopjKw4cvYcW>@kar z2)*V;le0bnmtzSJq4gSEHQlfWBBt4>t{CQtiLH?4Km@Y-JUW+X&d?N6=ppR#FkD8z z%WzY2{t72(hP>Zn;f)xh-Qg2O(3}^bQ__A^*;0_I=8*94N&RH1G+MEy_K-5DB#3OS z+h?vkEqEP^A|Pp)NR)YreUE3Px$&rOcCuFW^$fEB&0y?hVB`|(UBeB6jo%)D;Gpv< zGHZGWex-lByp7JKRW*0DkRBe}Z5APJ`K7*K@RF zuNR^3cZ`aa6&29+Oj^IX8cH_7J7X4a4+dYianiN44{?2XiFRGV_O&RNbXUoJUPMbk zH7zd^^K#w-!1V3}U8p|OVk>f&)GXNb9oe2$ZS4Aa-c~&)K5`%Ln{lUsLwbUjl&A% zZ+mye&~{P8={wvQKARyq!EUah&)Qce5`e)_#%IS8pIlg z4JTg9uV9*AVhfvwi5F<9rfbys2@=sY3G&lrw`TTZw~tflk>I4%5~QB+Dm-sH_Kgk5 zIoC-y9CDt_t^2(EmU)uEfMx=Fg_v;eG0-7wadJCf$ic~b3sdX3XxYf%w$)#1wKL)=bQ*@(9jL!+|gRt!8&}KA`Eous}lAhrvS*FCP z9rr`^b>fq}Id(o{SBD-TCWy*+iJ9Bxf@f!a3JGqTU6v)|5;rG1n_<&x$|cSG<=E7UK6ZYx8S9+1+{0U; zt{vc35AmD{X+dexsX8msOCa(v@ZfPtpm8L)^oEdI(MRJAlta+jKYGIh6W`Cl000P)XsQU^*6t@}7PH#F~GX7=JEUtJ&TEx81Ok?xq>n zd{uyUB0y71APs;7t&4lSh;55wh-PIb9{b6E73JQVATeU4u@Iz2j~=>7?|iW|MNRS9 zSk*bvy-qU|t@X?4JvVA3rXrEK2?Mn7xhtpwlQFF?*8K z;IqQ%;AMPlgbz5h7ro|}PNbH{cs5QW)hIPOBsCY}JSW5=j z!U7J#8q4U~Nw31Vd%f4Kc)xMLr$y@dfXsJZhJ1nixS<0EW79b_Lm6O+VeR4`FuP|y zcRM}Rc@y1Kt9I?qn!<|PuIVD$eX^pPHiHRC?y2Jp9=dI4d76;sO$qm=PulK^K}}gN_78Z#gSF#l(uPYartuo zGGrhJF}?rt%yN9+t`mc;yG;IEHEi~*8E8$|`jQ@*Ddh>y(RyH)_6WN;gC5ARIeJsufVr_R#*<3x*@{CMfcHV+pLd36 z)fu&xXUjGx2Ye|LKNKIH&-fy=VKwN^Q9CSSv`Cgg&UE5=4E#-#D=|=-ko62GO~@Ps zN)yOWb`D;34>46gc58U~p6CSDZOY-U+kyV;ED9IAdt2Rks?hUc#xDD|^s;lVI^M&_ zUp8+#%h~W{j;A?;Kbin-abWYR@pH?s+IKs=YLOpmYZJM2?wh|&2x1szv9 zzHB7M4(`|N+&1v0)}5}Ju-o}l9vh}})6U+4pvB>%j)1Sff8X*w8U7rjbpInU>YsUq zhZOaYq8?JzLyCGxQ4cBVAw@l;sD~8wkfI(^)I*B;-9O~V46U_g9=*eAwVT8Hscb%-UBcnX)LQkPJ%h?+Gp7|=4c^_o(&-JB z3-w-oBU;VpdkYQUIywbIqVc$$zrGt#EOx7|{5Cx6*XgiHr`h6oIXE_LF=O+w#p!xv z!Q-5e%k$K=@pOH=zjl*OJF3n7W@EqkoKWcEXmXQIr(Jl-=PUKMQZZjH8S`gNK~`Mx z3IYp&mEcs(xY-R72Y!Ek_{N>c2H)amrx*wxa7FE$Ruh~PBAAT9pk-JBX(@WaY9SUI zdvP1GX8OS?P9n?>^;4ICq^ULVn9@aNb!)#5GJC{dP&{5{U`23) zTR9o7W5clx#3hrQmr-Ae@y2`_496DwDps-nJncqp|FI@LhW*}xI`OHt& zFzr%AwD!&Td$h=;JmBx6@(7U9tRXm-r~(KMRrqGQ2gd2fd&J;+Vxjz8nyvQ-FqqaNhs zB(hdE8C%o_R|bK1KGVv$q8cKu)jVz7zGGhVUSuqM-3qnobI8#g!t*Xd-Pk>Yu1#8w zx;#;Wh6&mRTr3wHypb_2M><`+T6S$yTG(imiJ4_JwZ}nFwl0O?`|MI@p zKN=|h|73z#Ox;9JP$2KLKsyj6Ol!;VeC8G2EA*bc>Jpd3MAEYU8&v--V|}m z#ScaFl2p1~5f|Rjx2;9KW)d8gmWqZ&cto&at6tMuZ?@uPtL@#FMzbd)pi1q(@jZ@q zW2OYDyhQtl34(ON-(6UQdHn^+);Rbz!;)HIM}f08ep~LVmTJN3J!55pd{M!9LRFeF zs%z7x{5HQYTR{L;TFnMYyG4+9M@6V|`GwmSaEhlhAcqwP2>U}RZCk2rpSYDB;k|K` zFU^?KqsU4puw}?9!OblR#}cL*Kt``lr75&TO-Rw_ zo(v-OptHL6=Y5Y2wzUsq7PzptQhK1$O^)k_E-X7*=K;bIng zA5b+)O_nkB4)ZE?3%WK9Ml>Q{s7h>V(3b^RL9u}u-+X(fs>`?C;afumQ;Hm80K>f+ z=f#&y3GhwcrfGh>`W)I-wFMcPp9#lzKY!Lg&&8I4p$2qka-TBd>z0& zTeioN6nbBJeTcK)daYpQY%4ZIXfQHyoK}{+_2z7 zP>D==Rz@zrFqA%oB^tO|hka)BX$p;cvjo_h&@=I2sk}vw5h8Q@Iuq6*enr=FHv6D` z{UCG*+BZ#?pd&X;F#GcyETo+@shix~t_Vo!BQ z!^K0op6nj!GFoSaCVBXV2-_6N_OJ%+Vm`mT|^H4-}X6@IhgPXV+^1zaqLCWx4@>mJE9uBWfK=*1}gLc9H z{9YXMjG@RZjG(2T4ry5yH97|d(`$DN|0IrCkSkc%eZrdb5|*cFceH42`OZFb2oDH;U2c`2izEj@&`ih_Q(2;vTi0h40F0SaP; zsZ*SZoI0b$H?Qhcwi+N`qz!;&!HGTx6Wu3jH7E@u>U4|EJ96O0HYbg?w8wiLvMxhA z^9K<`L{uKz5d~h~9+C1`^6}E}OP#sb#ZO{7RxWiG<6P7SWh58O%s6ShijDT_hO_3X zrPS&>p431jjX5dT=H`})ZJVZ5VCg~$i@p$zGqOhAw1vpIJ%u(gK+Fnv!> z!e5eIu0SwxOm13Sr$Lu%llA-pd@hjdL`WOvh?YX%6w9dJ&6X=Wq!)=J+LITo2wfkg zk;oK!gvp-LU5dEhXa05a#k*uQ1}vpP|1i;t7cZz0TlI?J5FJo688nQ7%JUP@FsVp| zdjX~rz#fQ1pm0HoidmY9a+sE~6hwLi*entDSW~9@^=@G~Wg^-T1!b^l!M(1*L9IyD zoM?CM1!VY;=sPQsNqb?C*GX^C=ZV!nL08DykO{R%>$!~mGww0-oAH02!w37E16>Sr^Q)FB)!Og3q>+flRHye(RBTF2O+8z zV>gh)5YK&9zZI7E^BqvJ^Y+~&%e%oY%6D>_n~;@_**Y&&E_48l-?$;#*a_jIk|z3FIk)crJ88d~iCM7E-!6C%n!wCDo@y zR^Z+pf;aA#9;~+K$yO7(^=v*a=5J;ph$;#{TAew7{1~hS29vyehTE7M6uvh*t;?LP z188bjg$n#X?45;Mmg%DPLAscg5b17^?(XhRK|w+qq(P8Iy1ToP?(P=+UT~c4 z)H!qZ%>MR1=i(3Wd9N4mTUpOq>$kp&cyjO0^$L|bY_BKW>bY^__8py-toZFSSO6Du z;3Un~YObBGZp1WgxX{(dH@D*x40A zZcMft=qSC^VXNGbf=J)Z4$&+Wn!QYGsEnhz1}T_4a&TkX+&86bVCzvfOusFfbr~|| zOrkMh0qGykKa;I@#NA8SMf)5Q2GLX6HMWo~S}=M8zJo`>ahIq_<4L9#Y~!nHSxXvlsHs+w=2) z8H&8$nW3ouHbYVUiy4ZFH!tj05PY=w=Z)XzP9Pejp!qDzI*EBCj0k!L$R~PKqq#tQ zcHRZ;XTIXm=!-_bxdij$XkpZ=Oe^x@Odi)0QOYqphDXIO;_cuI(neRG%9&m-yTng`XW_J3BGRo-7zUQ)A>E*xu(GMOD*R5ex-d_LFJ^QS;cI(l-0H|v*OQ&JM+<- z2rJKhJtXVnZW-&UeZTl*bHA0B5G>?t{s5t7b{wNdVj7Bc`fY}Sb+cM2Fi`Rd5}wbm z6BR$Iioaad`Xg2G>rlmmr~pcG<(3$#A?abQ;&B`{OBTTYFCh>QqT)eRJcx=1QSl%u z9z?~1sCW<+52E5hR8ZO`_dMw{Ez%8)G1L({LVGn%eT?Wl`tKDLe}BM$nULM%}^SFrZ8!bsh{)E}Y zc2Z_^Pt-K4NoA;8Fk5J7V7M1ph_x+zbuY9PVJaXo=WCri=9Xw6om*xGJl5-+k98e^ zpeM;ufjS1kCSibhwXQ;FDS;B3>fI+&%*0<$#7*_Nb<2HTw(OSEsgv=zX_?cEQ*u`TuF^8@2uE?Z4DuEffr$KWALs(9q%vJQ9 z#QJP9@EJsL(70;$K2>27YjQo&4A~?pqJ`7Uh!P(01>2pbEIL%9twKGv*Psx-&2&e& zpybnl*~JLAa#1$bFC$KBQ_vYMJrsT0zoa$7Ab~ALFY$C%JcT}K;lnhjehVqBb_Q~u zgio542FdcY--qgj!}L`n)pm|y4xA0WvAK&*V~c!oe*=94Z5Guq9K(MY8c6_fn8CYFr6gd&U*X{Qv}}* z`|qa+e!NtFHAV2t&w03950~pd?sEP8QGs6``hRCspb_J-C*Xe(prOAZD)8-FJwyc} z+#sKfp1VgeWRj+mN#K%hJ|Dn?Er;%Eg)v5lt3IC)DHBcnU-wpTKo9Pp8I7=-rEYTu zLFh;jeEudntB_25NE4*CrkbIQM)xXBcQ)!=eu(PASbjBo$c#NcN7RrtuJ&1}6=M(}Pup6gP_uAP)I_WdU>IajLW5d5=Qp-VxBvocd> zs!febvb1~knxosrz$t0?ghgUr3+L|8N;ncJ)5kVv!}hnjDAqVh6bI3Y@)=<9;)vs7 z5p45L8loXfnk*IiT?cv4=DiwZU=;-o;m^lWm*eL(@Sv;O)(is!k9rJCTH}*)1;iFG z_>6iA!Y*zY)+uhTgabd>)+?~>+6sX&9e9#Eo+{{rr+Fgb^(3sJQfX!utt#!Lv!_)R z&t%I-lRyHP1GPlX4rM?;Gcq$vi=aG-R!}TL&AB3LaDW%|O{X{1tMS(_1!5R|&llf8 zPOxLtJe!o*b3@wq_U5PVrpS7p*(X!EfAd+%8}S-|W0_@0SZ=uUCx&*gX_8R1`~JcCsBJwA`w zH%#jr(SvxE$qPm|@3>gIMB~ky3F52c-O$8keU-?(+y#Lf6Gzml`}Pw0pbUg_C_;5G z+pHeE)oLv0Lx~I0SY2(^YioW|$pjfqMM;S!o6xIQ5NecfZu+`mi1-HM>gVHV1F;^r z$J}h*itU9~x&h@tt^H#$VnY5;Ek^8KW7T6)`jUa!p7d2_Ohah=$;F7ZS4LHUB*%%t z7U<+T=++d3RVbBop(h*Wd#D8shpl*mpmqE{=D2khLAVxtR4obZlhU++xsP>SkIPs9 zI0oM@Z8>@b`V#-7798>Q;g_?E#m=%x&WCh?;A<>h*X9a@3 zWd#s_%nInnI{8U_}zy|_{|0@0w?BeWt!i8@?e z=+>CK%?J$d7>+dHM0Ak%dq@FnPc1u{M{wYZdIIvbR|JaZBc&CZA4Sr%gcVX1{11a4bLK^qsFNPE$wZ@c8C5vEF8cWTfGRO%4cc)g zAAOcesHEK6X9NFh+pXiCt)NUI(FP0c+&(IZQhv|%zT(=>%>jthX6>vFoySgBuJfFL zNDwSsTf)Y(!{?{0?mNaQs_385e0gd2R+|=17`a#dOZCF4Rsl4I%h#Q%Uw~PdPypR) z#tB;1H}Z_6{_^o6b#hh5r*6~lMP2K6hMLn|`#U19z%Eds!!63upnT$+T zJnAIw7;+KbTe0b5WnW-CNNo0`@1S$(+#q#94r{jV#gzqfC;Qr$cmbGnfPMspll*m+ z$~il8r))GSx_o5VQKen7XD7)ARYAR6yDS$tt4JHl*IqtW$3SS@p6`Az;#0axys=Hs z=GRv;_mdIqznP3E`aT)q`O{>?=G|n3GcTgh_sIy(e@sSfz=i)j8G&>+89`eA@&D^& zL^sS)2!{sgqcXK{B)B}a*0NViQP0}q6=g}O$@sNcxRgK#Mf=sp>6QK4GlFHW{3jI| z;^P4s0#p)CU(T2GV#=~IdQ};fFTL7pz{-M4-!fr10b4{+Rfa90irh~|F#RwY@g`iu zC4%hNaRHJizl{s5ev1qEzpqh3agslPd=kGcld6noDq29Mtny|p*N@jhcN`EG0J_8Zka^c1;sP0e7#DcjGy;eVgaG0K#s7#49OP23{1g{p zLHR{oK<(A{xImWw%%6%2gfadTae>mmEiRxI`p>-CJNivrK;dtV3oytz$^9lS@R;>i zae?d~;sS;L|KkEJzlaN*%qo(&|CzWz7sO|aKOGnNQCa-exWFGOi-)+tgRpoI77xPW zL0J6m6y1Zccn}s3!or3zL`QW(Oj(YcELuhu765i5@KUs1D-kaqeet`C5f8!wkVAeD z7XPyx@`JDdLr;#(jvUPQv6r`}+?c%X6C>9H8_Y#&&TVOo6=q{HWg zkq`+X+Cq%bY-oc5af9fM#8qe2wH@RM{PMHb;wtj0vv{(AZ6;ON%2y6eD~iNl$5r8j@e{sJqnc+t07&8)EO*Q+ZG) z;%@MaPVtnN+`PQB5ZWC%o};KjcGqlo2%4kvMfS~hc(cDBR~VMl@d+e7FlOE3HU}<| z<|7jTDihhb;dePQ^?$LSfB*K#SSavu`|LDoscc(;+cJ(g0jh*SrKg*_HT zOtMK$5$o95U>}5huI^`rm=rY(FyfEflg5!LW~_P3issGb?AeFgBSQuCPzeAy!9bnO zqI`$)Z1tE$!?a2DSo9$FN;*_EH2UE*B>{Q|;_ZpN9lt16zUgHsYP#jnxWg_;dutL|94B2i7J-+02hx*(p zmGH)3xq9jOKC$6O)BViFRskAJe2Q!Q_n8YSfPqtFH(Ixctx`G^vJ}&*O391yK9%a% zGZ*p0E3YEZPGFn0^4`9#eOoS5c;l47AJPgnn7KZJQm3lgKDC?~X)rl z#yzrfXrm&pVkd#9>i%W2IWJ@CqQTiPUP)Rs36w^rS7@Zegj9t)vN$okU;zu(EI7rujj^xUJZU2*Ym3FSqZJ$dFb{9gzSMt16zs_A zWhLSP5CwccBMNvVHHQI+f};!mZ-@d*0HQ#a#3Ft2nXn2)Jos2}uus~mkjC+3R7I?CZ8O@( z9(VrClM9ZKiH9P#)0j%Hd_*E;;TjpISeUH53#1Cow6#d^o;^=ouRhI2 z%iHDoq=^6RSh0245~D&+%5#o4)wLy3h#%*(2`G>kR`({eG19u0z+i@usLL<8f=Me~ zdGWBQ%ELZ!9D#l1QI~p(51(kskhs2tKVSzKr|7sFr&#HQn;lo@i)4b+B}QguVZO}e zgva+zWFYuZ(!x0VPOnP~+L5l`Z78uAzD|dB7Ug3&(W(1lWuAna*nRLo<1ToRY(lUt z^HcBu=0^M^U0K5KS-T9uOF|RFEd!RZ~Mpd7^j2ApH}tNOw3w18ve@hp~)vr7Do$_7eKItHZmG? zVC4DZQxV`kt^SxoG~l@e@kDh~`ZtYH>1^4ws+AJ$B7`d1-R&T%!FVg~DI&r*(a0Sg z;ajXTGnp9l9;Vdu#2O3wbI1~4_=B9#-l2GUr_}SB4ex`Pi6Wm6MT4WZy3PBK1UG>{*#t|zbcUimfF2gcukx0*41avC1~Lng!@uW zYwcd}s>!LlL5iYC06}Als)Y$2AvmU#0Z9;*sD-T+@i9)I!a3C)Y&GrV?^hh0YGI0# z#im=f6OC~n1?Q_i`n*c+bs8E&& z9}oqgcZh=OiS$K(Ad6Bt%WsH+cg`N>_lN=uvezDpql4R@Sf;|yvIurQ#xxkAW_0uc z5Ct)h6J2>+76UteLKOJg)RNTu(k+MikiTueJI@%j@Wsw$~)>G(2YR^ z&5OdY(4>e}^cb zPJlyOUJv~kA7lOvQ4stMQLr8gUj6ACqCgTCx_@BV_6|{y_+KIl*kV*Qr8;Jd?WBJ| z6aWkD;??PQM;A;kAoCSdsWN{I7Gh=#9p|;7h{@|10?rOt$GPpq>Da)_%*;E}rgOCF zef)FmVCp4=H|XO5&!gzt3E4B1Ee)|5(@j?@-9mkbm1u&NCRkWSy72KwhDK;FrJ07< zI7{%u1EbASZ4cu0$f3(nPI>5{zg{jhGp!FFcP%WTNf?b20Vo9tl(M+v07^k2BX+_8 zOCQb`;QSZKZUi)bvFIq)jIZfeIN6d1T6AI51?!&zk36CannkDpSqG~^;UYoIXzXhz z7Ch7!fCYb7lCl(@_YPHz&vNp^ixxG0!(K&Y{B2UAwl-0baBHskhjS*$|y6{8r|`-BE_#Gbb;(x66F1VmVhRYAtcZDc~hO!*noYO+C%7B2TRgsPAFCD3m~P%}?p zit}9X3{=HNKkcNl>=f2w_mm%N!AmVz(7&M+;OP4* zsSOU~aeOHxj{A!HNE7FLA!p9pk}HCapUh_YR>ZoUXV8l~NAZ-m;v1#FIQ@&^>Ees0 zU$Wa8-Yj%kh%Yj27GDh#QJMH!0WXCCt2ruE9BK~P?+9re-n2Ron!#TC9-6UUe{u&y z*O>rnCUUxYOl`bK?rJlFEuPI1c}5cryy!WaBst?a(ggTD(1`n7nv-TNpP0!2SvI4G&PRtm^*OC77aYWP32|OX9?%apq&G^?)bhxJotjbj%@EDad5Cmy*gqO<#rk4s8A4h!)Hs#^}t1|g<* zXU#lpIb!WPZkRi3r`{zvej1V5a)+UTpC@nd47`!rMYy&+>u~b?qQ1&;ghQ0EGx}zL zsP@YZm2q0FNv!RqSZu%sQ&xDxYvZ6B<*cT{1i?#!EbYRCwH}Os=6-Y?J1rCe*BMfI zp~v`;f+tC5A6$~Oz)kR3>HJw%E7;6W429b^vrSVS8%BI<1r3z89?OVd`#r2k+VHRTpv7U&AI+h zyAS*AJZ~&<@fsFBz!NH@H*LSQIs$f_`9d_&wUyrL0Nd6ruwRg9H#HRyIL=J?9P|?V z``e0dYUxK^@t0!QXYufz@0L#SM)gg1`i;0U{DoHK*4n z2&p(oKFf@}Q*0L|hs$*r#%WzH#zkQMG(Ov$d5XSEv)D5E;OLN(Z#RH7i`&F;eX8K2 zdIA2E#YCIQi7HaI4tj$CCUKJf$!=!iuWR5>ivoRbjvjp%b-(@T|78pM{-^)l8vgz{ z-^AmOe+z%vg8s$l{NMQ7_!k(GzxXNrI}J%+>G{q9fFarbcNmiQ-|E4T>`g1PnU)99m^SMw0dEO?TMLDVET0TRyTh9 zUXEo7m#cQ2H%!B>Tp|mQb!{%#sFCqGl|R{)sTVv8e83slj>buD!jU&_HP}~^(+gu- zOnAZE;jJ)105N?B;hvaIQ$50)pMPQ!YC-lA{dobNL9QqlPS?aTuD|lB6)lZ?=3Hce zJ*!qrG}v_AKDEmwPHoI*^-xH_~+aVoV#&ralj)=ym ztX*m(nU9d;1HI5bZ390!T4|-VXo}6}doH2hOy?VVYSoRH*bExNl<9<-8K?DP{T){@ zh1JnYIZK@J=~kS=$-Hci3_SYfsIor6G3q-Im{E{sYVwo9&^PI**&kkjflV8auD){* z#g#>)71kSdDW< zSrWm2{jT_olvwpc@p-MCSn1t5K4F-xAfbXoY*tMKC8qcyb$c95Ji}S45^Pq24^v4- zJq?cICx1&aG(dR)-gy*kYz5?}nSo(_c>Fd>Fw2))t@&v^%2fgbIE&hc+&G}8MnDch1~58X zniM2m+~X}%V`fvbu~Zm4WivJ0I6KygpM=7}oTw!=mOg6K_32H?(jv}CVx%vgYt=Os zUaZILrn=z>5ne!uiugNolA-b#mKeHF$TnlHErV4v zvX}ibJcmXhnZ*q%PN{m3>?80T$ZNzma|hKN+-_a7$T49+Oii3#%Zz~qhr>S+)7dxf ziRlGGwukuNiRoPNEsyVs>8H(k5TzCM^UV{!`m~u^q4k(C^4FadkIUMb7)6;90Q2~8&i7nN$x6ipxOLFROTR*>BR-Th>3F6GA5;cd{bjVSV5c>hy)bazj~YKQ<-^&e(8wFm?n()>fT-EWUqoVejbsq8TC7U*GG@vQg;A19)( z$etwfzx~RLodDT}j{4v7(og?@m;PZ;KGZ{p8>i&p8Z zE>~z;IzqJG9x4M+)MvV<5nco-I`hs|>hd9`tOiFJy<8>8l0eDEAsa7?cwsGq|EOm3 zuI6B~RubJs&Pc2fHB8f5zBM#@&tPA~%xH{I?v4m1=m8j{j~M5uQWO9L_ohY|VmYd~ zu-S|P3qJplChRQPu;^_WA3CxauO5QB6GAyF5xS^gf>^vNEYz3W`{p1%l59NBt0J0> zMCdYIiqznM@-P-PWW3*XX4f@ac9KJLk~{f5?mNvHqC)tn9 zt}CHi?J%hlkK(rs_89aiTzJz!ygX4DAWAO4S45MvB}3Gb&|`06*3RjAtK!q}@kdGP303p`Y}GN1!?y3qT= zVPojj#xmG`FbJNo3k7-AL0^Llba{?~;Ys>^4Rj};zBX)`D%_>0gsTBZpl;fBwBm!Q zn2b!A(_*iSEAuRdh5VYnXE$A+@R+!-eZX;c=)i_Gc4gPO3rf@AGl)(NPi3Vm&%pL^ z6HQ&yu9*`>C^>%rs?i>{alt z^%Z=s%}er--B)$8zaOCA0SwSjdY1CEUoTsd&xfy*;_GKyxKS^z?pul=uPU@8_GmUU z@)y#*`Jyk*w=+Nw=P}FJjZO#WI?JfpPK)ADkB|2C`m) zXBwn89Qz(0Y>i2e;8=a4T_MCSOXOT+Y{=aLJ%K(~l5$oyJv!8SS1;##&hRQ>bSb_5 z(k8jF&d55sxMQ_FJq_O^_F7J4j_?ZMva>j;&UA;Vue{KFp9TUJln3{Q=M0d>X!D*# zAJ5KzX{|V$Y`0+w?q-Tb_%5EK`{;F(P>gCV`iuQAx` zosXLh6i_lOovvrT*0NY~J3!zC=F0*fP`Z0P0g|Skx#e{02gYfsPnuNXQ7{y zr}5aq&ELmVy*)~IS!?QcTfaU#m($H;$t+CI4*SfbRDEFMaALoHu-p~6pSAyF!%V%} z^s+=JNzrD5eAY9s@WXw>ZwWfk>!c?^Lb~Eipq*ZZOwCm?VbF0t6DZ_9(1WV zFsqayW0XDC0oHJjuCq)KrlDaZIuu7vHG67KdYrQpz&c)9u)auEej6%~8l>MKmS|$S z^v+>m7C@(qnkPbt2pTM%BtG2ba+l&r9){dOfa~yVxxCEVj z3$Mo_HZvG}N3fHWnVdhM_!WrW0-NZ-Y1l=;kxl&wUhD#$d)5ZKXkr}q1)9i5aY!Ba zW|A$afnnV%acz+nZ;TVKqZaPL3nP#mT;bEkQ3Ia(qHt$TmfF)1ckkLgdc_*!75K%;|93_O1VB|-{;qv>=KF8;&qW15{dGC8D?%fuC5O|<)LsSV z7Zixvgt}inwr>q2n4Z~9dyYwnFU0UPkYUA&KX>-Zpe6;IL^V~Y<2)$RSte-M9)YzB z=E?vt5GxnoE)y#|D!-=je5eMGt4nnma@}cn+>1V*Fe+ua+sx&>kGyAT?|dGD?2yAd zFp~7m%kd_e1Fl!eFL-P^&o{*u1U;rLKB+39Lb$MS@t$iyij!eUJJzWUgU${Su7X5n zhK`1ti$rn+WTwxJH4aYad!RHB&e?!9Ux1pYT*)8_iE#Tp-n!)Oj+2cVj3N$;vP&^U z09WXj=?}C*qc`%D};H!#Xi4YlO*ro zzB3PArq5|a;M@zq+Qxm|6?+W9@Tw1c2F1V_Ogt8Ge!p>F6*@L6c96pTkFjgq?(LsPzF{=F%bugDthN0?sii!*(Toode%Tc3S zuVXaXK~55jkfjm1<&HFEjdEo6M%Un3$EWbIckYa{GVm!}&f2A~U2ba2tWz$y9`F zOmh)V1#MGaH`>wK5nj(lRh5NOn8t`Kz5#fOHJD`b+)1`=zA{(oG%z!Y31f=@ zxBYlrr<;KOz@t8|qDbhQJl*v2AG*t8fbMd~Pu=Cr`|h&XeRuiE&)wzi=`pvauLH@3 z@NXfgnKAq24&NHG^P(g#k@g}9+n@zlY!{?<#Rt$uLaAaDUgp+9;(M#n{Kz$Om{WR8 zz@y$7)aIRp&W7MDjoYBb1XuLoA*8S|0UEY`Uxb9c{Eop6&VbE%#cxb^38w%X^fmER z*noZY@r2VWrR%M+(%dJ(l#RC5M@WW!TXmAraA1)j{W%>QPn>13X@}ww^Clw<4)&_e zTK(ti>|qzGB3<9Nx@zHtha3fyVXR!SsSZ7VTS=RKrjtURrab&!lM!D0 zLm!*}RI@p~B*9R;w1#_iD&&hfhI>PK{Y7*Nov6a~%#WEGq#@c3(~*g(2TPG`&L=08Kv~{u!Fif_WmORM&M6O;-aM z1w94|9mTnNtt45Q(Wf%b{PG=XJP-u@ zmiqZdmTzeRT)@7%`tf~vd5j%UURJs*FN^)6yo`NUUM@|L@#HiC?5nG`w4|}fku=tm zNDmY=v6Vlsn;UboqxN#0{lJ34%L#8>-p|=UXM*wg0}#v4`|2OF>OMenY_HR(fNd_G za=~U&K=ju=tvzVrTWeG94(6V3s!|tXJ_PKm)86f?*LBiJ&I6d~fPHoK@62?+Z_M;V zuIhaWlJqXXzB=6TvpZ(G@*>RLzIy+`-M+dnfSLYYAs!wkLK zO)?4}jA=Um$ummwXKoZ+Jyp%K4%-TjJ>ehCQ}A4Rzv_PFI44Rc?MFJn#@Ig(_Rbq$ zy>X(?TK;FtLIshJ=>9x2&)1vb-(StyE#bn=UBf!LqXt$!HRZ zT)U~@X=Qp1`RA74D?g+@_YBCW3TQIUNaH2T7#3&0A6O@@d-bbF9vOB} zxsvReG>$X0fmloW;L9tIN%n+~Suakt!w=j^sJIa}*hjK2v_LsH`uK)~d6DO-TIH&m zGdE`Pdr+Zj{3|(^Vfmgy-|^x9iEBF!(EA0vK@Vuxw$W>&F|D zyy)TkLXBnourFBrb{m~}sRg7&KryXqPO;K1atXkFMU|xwJIA_%GgCnvatCSAhcHVO z6g$~P0VQEsS-sD%vsQwERJxQqyUSjTltnb}M5I9vuBe4WORO59wUrmdlw`@vQl@8M zqyhdp2g+aS)sNHp;Q!H76_t|uDPjetL=T|R{N`i+B-#);O=sbrQzqn~jescQM;pWu z;$XQ@6jK$E)XEG5@7WVTIDmr9R=GzH6)TclbQ4`iwa>@|P-s?2Jb;bR>Y~&a5eQ$6 zSkeK;+D8LK6JCsKEr3aP`1Fu!(Ai^?tHI9Ey)!6N3qyJ>QU$7pzL`l9=OY%JDv#0x z+BKHbc;sw}ZPl9^otCR0i$O(}H3}P@2dstq>@y{K5z=LulAbUH#jg?reiEj>#Bv>< z)JmAPb7uw$`xm`T>P2(-1XE-Bl(r8*G#?jj`#;kc5e0?ck@Bej- z@pztZA!M05ag^iWgAlzpsX)Oj4_W`kIp!e5ST6SlG5e~b-xNU|`B!E4%0Y;)n+HhzoWxvm>TN|rrfJoDF8F{d)W`I{D4npKJuAF$TVgb-5cFNt`UE=v(w#IGrdJ}TJP@|X!&lwq2)H)A?U{UhHmbur^00@rvMZghyAh~RG|kCp+po5 zoGrO0)CfXd6XQ_~9b7R_595XT2&rZ(gXeLV@0mCn_R(FoyK8$)UxBt zar!Qlw&7N|eZ9wB&*DPt4u#h^u{jmra87YVvkk08bM@gFTJ zers|5_0RwV3;nM`15}7QiQs_HfXd$z8n}D@pR+W@EJmLLVCfy>Cp*)Nm|7`)6n-5# z77Ja$*hOoQRo;C-j~v)ugbsrsQQG>wj)Lns>klE7s1w8m5zR2lRk;1)s1S3#2#%qh z&<6xd2QmrbRg!Uw;}Hflr#;Vo);Bm0vh%spdHXD>rsjN)Czji7rKdwGncKDgT<7a* z-h^eNR!y(0Xpwy>FDqFfAD$ zX=cy&z%yu53e6jVY6^S-E`17bJ|>`$>y2f!KdVDze|ED>X+1}Z45tVs7)Q1%x^d9s zwontwmY}k>$f(=?0Ut|0tBfD_vG_djy3%^%@;1x@fK{GrX*U};OrA7ML7~qzNmC_u z64-A{?$l9G7U1~^n8^(aAMXPMO!sHd$rIHg+b74yInT;sjNu=@2ZQ}27QmmkDIgkd zr!(83E4F!avGMZU`t6Cvar3msaq0+!PNC{&1(6^mL2oG2+2Aa{&c##<7AF6y>XF0k zO~MaS+M{=@PLrK6IY?**(8urpJNozxci-y4WdFZtvY$5lmQ0m5Y>-v^9zS$!l=YI6F*oYH;<0EBaaI?W}( zVdrNm9oz9WRRh_;S<5NJFACQaJCgRA1o+0KlK0g!e!Kz3E~gyayU`+)EeJyAKv`l; zr+Sr5ZblUZ9}utPK$wgwozn_oeVX0@H0eN&MfT4TOpDF zYnXPkT@Vv;A|+jgXZ5ChvTpONTk1c(0rDOQF(;c zfL(he!8VR_E-RIp^DY{RjI+LysTW9QJ<9pp>QdwH>Zr3YDhjg zvCdN%U7jy{`MMVhJP?SCB_{0bKC>%xB!{>d!YgUDI?%o49{q}p2!zzVIdvHKef)Lw zJ`gz*TS@J5tAy8)!ezu!6Urrj(qY#-{bPqc*axkW1OUS~;H+BvM;$+J@l|tkBDY~F zDqcX3AfS#EK{CcvxqUK zUh!JEjp6Zp?+?47z>1ZKoTaC?@9X#$g0_d;-|P4c@hxZfb^P_r30MP5w+3%Z@E$GE zCLAt|82OqtRMiU5$~=3Z?I(r&Z=LmHmLMbOSvgUXxN;Of#WJH1!yFi}q~AJ?aw1Yy z1pI>zuI_7V=Iv6KcetSjbY3lIN$TT-J8YKZ?4kRO4o-Sc2T%CKqAcMmhv+aqpjiez z+_DXzgDc(9!JQTZ1An4}%f*cq+izxsxL}Mh3WRB_pl9!A2SG^tg%sGIggT4F<5%$-43a} z>-?Cq(&@9)bj@k>%@xC?i4>pBD>UpYaJr_!q0>6P@SHW+YSITUQSvr;A9@sGRGI*~ z&lU9RQ}=lAX)3hkYzAc}nrc$0@YGbNC+>u}Ik?$UhFBZpU=?jz2(Jf@q^(@A-XAq9 zmt=oF0zz(c6I`LX^-92k29SZ{O)(M$$+4ndkoRSj-mQ|G4JQcyYL%QJ!%=)jUYllA zT$v74V501g9QLTtg6ZqF&&_nsn$?+&%?fiHJzp%>T4{F2Z4rbQ4!)3Bc5zVYXJ_t} zl_f>jkI*})ti?@-Gg<+|DuyFeN{!gJ03nlOv43KZ&%!3=ltZ=4wbw%1q-O~^egD$` ztDDtgvhC`no|A`f7UMQz1m37vG+CJGC32bEbpFHzOV1r9oG;lOfC*1QNAbSLgtI3P zEbBt3^WR~@k?0`j5Guc6!if-98h6J{-!5$jW5AN@^R_)xqM(Qlc>GIDIG7}-Xz=TV zp{RQc97Z`#(Fiak9;+@Z4;-I(zZqVc_$NmMrv=9q%|eXcp|2=8*2?}5IN=6AbHa`P zfD=wc2UC#l)HZ6KV@2oGBOgCx!zD^fyozL{oe`6)2Te^DAS(lkOsJIpsAs*-ypcCh zB{)}6M7t~_R+iyq0l1gKYpaT!M$wfK4Qubbw8nHFp^ZVcFzCKV%5pXmUBk>q<)&Ut zPiz^sbFc5b_MrdLYoA>}WjP7iLi(C#yw(udh~DAOn&-Hn8>aV2CRnY;Q#SFChA{;` zSHXQy!mc|XvQ)rD;kNY3Di!{AWbvucff-BILGp>T`(^~%C+$km!$6?Dn%wP+!VTLy zN;q(v@u0;U@Rlw&#;>1Tp;&a3?kVAD7RHOzt}e4r`wb>W_UJ#LEDjezt7SzMB_b0c_p@b znCrDluf>4v_+}A{5#ah_Nf;b&n!hi#%d3mpPdarko%N|Xl<~CYuHXAA-}SC~-sg#) ze&DhuZ}Pcdfk66wnj+C~^Jx}^fi*y5H40VK#&|ZyGA0s-CGGFru zYv-IzA#lP>YfLAIr(qdF|}G*J!FF$8m_5bx9SeT^u(v z@=7I~Hq2f;;(yx!{QYIYH_7y)xcKW{`yYsl2e18qdw};rTRdos2W`P~_@FHww8ewA zc+eIP+TuZ5JZOtQ)E2)rBLBMO&dU7jeexPP$r8iAt*3wY{6A+rav7oA_4Ma(D+0;Z zT3-M0zJ3mwI{B5NcbyomY&z|&)51o_JB}|#3sCw8>zk+h~y_vl-WwRZwD5K0&C7SSP!>Pv(Gg@W%qMgO73%xeUVM_sCK(W z{AlWJLpgEuk@4tb8(TXc-fjYx&!A$gF}ozQ`q$YsvG=6xvy>d|I(>-2y(Ly3L4#i& z*R)1bNz~4YQq`q=GEvq-i_& z)5AUa)LV+Z_8|?o29ZAa4RpA+na-=IQ@bPYWKs2^;s?T3j-B4?Evw0Lju4HRybO%UTF>hR$y} znYqAqRoHfd%sLrBBTAOB+vH=fda@cZlDLqGaN8K_(Rslk*v-187R9fWKO{JxH@2Z{KRglOkxnFe>+2ShE@Tcv%Ugn zd26Of0$}NLQlR(SMNHfX?e?3>^_|Q-atXN+3@%82tdZc5k`7P6Wa%Fo#UDs_!YHpH zL*76rFAW{_JZ3|i62*Y5cCfsc<0Ndu{3P^p#slQLO#kgw`s<$l-BJI2Pyfd&_18W9 zA3x{eYCT-7|FEm|uLuqNc;x?`p@9yTpz*s^@qxc3G;sH={<+Wq#(&k!Z@+8iqyF5? z7rtxepYu*gmJ7m%?jw>Mry*n};8{f&p7hO)So9fT32BSUjFcWc3Z4Vo6wyfFXYDYp z2#6XYOa*;%-fLJf|FM*E&*Q86TcieLC)QWPLHbW{z~&=2=uVymy1nOyuvp37RjjdB zwoY*@MYdb_Z;VRAw`a*il^CRwke#Db-V%N?70p!=m=jg;j_+p0A^L;URKvK3S8m-jP}omi5tLtE6#KG>)SP-A_jA&uM6p9@q{p7Oi`Be` zWpGJziexL0GL>HV8YJ#j6OwUs$rn*pTO?+!1`f92(=jWp%jHFfX?v?hTnw-tnK>;BDt8XBGMG#KMe(d{1J5lAb*20 zQ~=1|92Bux`nVYY@=pMO{DC{fhTMJ^s z4ILJzO}TptDyy>tS1eVT!D+7v+@x&I5G(-XKcxo%`TK*wFoHCz+=Kk5UysPA`aIfY z+&XIJ7NGTf8eA*x6;q@8UMC1V1pOnwT;stACpB*wh;3%3xYw7(TLuX zKwFs>E41a7%-3NVtvKWAnuGw^z*QID00WCu)@HZ16jc9d90p^SLjZ0=g;MM zAsJ2a2NC^Zn=Y?=&KZW%^h#88jHP*d&(&EAFT}K@KNv_;9k}XP1_gDf(7t{4DJ$liFz?k)vnYdRX!1qw!)1~qb z$CwR2kt=rql?+^?vexU z4gPn@0pTVLcLwSY4t@6^|A_>kH4cpsyyNC?Ab+=SAb#yW){QCkMXmihoZIFf(_u0IK=7`cDIfKY@_UpKDw! zavv{I>I)?7>#a4{_cUK*gk0T42jBtG0g{94pg=%$p#6Jvfd5-`0P^YVso}`s2_QP) zcUgQF9jH9Oyo(O3-$w_u0nq`M2tp2NB?NnC0iAo4KWgOkJ<9*f8&I?&M2R|FUFz1D zFK;FyV>fkv?B=6>8x~hCz8@BMMaoS+05)Hk{M~Lo7@(VvYNVi5n*uVBo3XMHnBQSbsyQrgzPW_LVfFZ!8s&2!$9w_iJM9rtVnWfF-tSZL?=Q9+dQduH|( z*LLo^`L%c5{GF~`=Q#n9AXvDzgpFs1&rez1cZ^e1(Lba4^3v|DHZ7bma<9T0cH!Fg zfQX|UBZg00z*v|#rEu{LtFy+{Ls1$KF{-Rhc$wpYD`KQl&wX>?%q|7`Tf^NmSp)P;@^3#0TSHvSYhN)W zXJCu2f5^!4z*oS)OWh>R%=yy8bX(0|Q+MLQd8d(v({p}P%@0@X^isWs+UDLKk=Tnj zK)QBkA(r8JizUzu?@x~V1m`6IUf*g%kyr1-*${UlZ|r9CHxc32n3zaeze3Z{jp}e=xr#HPZdBp-Fvf};$kzo%O^_fV38~x(F0!kSeaT$^5 z`qAi$?xd^!3Wk&-CFJEcH4)6|VY)aZEhxtkHz5Lp$6e?WG%qwJv$d_x{6F>>sshXP zW_o5Vfo(wzPn1zGVr zlu6?!@~>|C{;%yqAtm%FBq;rv}p}=Wlx=UZo*o8Ap`+#A2No5QK zejoF{_+iW+`|Fthjv06_`;eSMnK)b;NlQdr!%Jq6T;10>!jSq82tQNua%Pe5WzV5< zFpZ`Ol<8_=>;5x4yz_G3~vv;(jmBUP3EVZ`Tv(LUwI54*9nYuOO zdbsL{B73?|SH`LeNZq;D6GIFRTV7fMl8~NMSzy&^hEyI3yIC=6eTG&qTHZc29^f6) zb$u08();8}r|LL$(4Ir9+Z-w(T`e!&c{{ftej8IgCEwYXG~6%nh5@I3K*{n$bUZSiG88>kIWClo=J+b?2mgSHJ({OIyx3@Sj%a zZfOwXgHVBv8QL~TgTrE~P<~e7k201#PuyG>kZ-DRe5mr}<&X>GzuL{8{@%?`y6NUe z|J=>rmfkiam9;5R)nT9A9+q)7nl(eSoo@pEE_7dOwZsmpCb##@Jm(cp|G|QB`7;8B z&lX+QFfWt&dC6ua-QqN-`CS|22}QF>(?*Hsr@(j0&qzl*;?kPSkz2ZjcONHMPfz;z z_WmAK{6}5!*Yg5@pez3Syuh8TxRVukvf@rw+{ubNS#hZQt(|`-EAC{)ovgT%6?d}Y zznT2{pCl`O>u>($r~oqy`>!Yc*W+H@_Xb75kf$SdzDNFlnJyBJ7lU(R*mr?G(vmYSNhSFPPDC9B=rajb3)jlu!Z)Eec^ zEuD%vqt*o)6|POKQt=h0)8#I0y&6>~ThkR^>Kg=oL-4q5FPl5$Gaa%rPrAozuV1aw zs#jZ|b=D7?j9N@p+g$WcJDm`6IUm^mI83DFB$zfsZc#UJRNlv`ze zCKrOtpY7OFI`yC^a*TiLfh`(4{pBG->2PR~1$i}7muno?heA9euct2w*L@j|LKF4c zsRy+TB;G|A1wlo_U;;=h^#pyiMxc4#8ewi|^kg`y$q%Xd-+bNQkldZsC>#kRvSms-8t(w7o!0NO3K}Uv+pb;}NU{NBRh2Eu#tY)&a?6R2 z?m0*VKKA6VW&zKKIe$j&6a(|o7fEWZsE?*?(H4Kv{9PALrSFb!;B(A2_`J@e)RQ#i zWaQ4eZPtGN7Vz^iWnfan_l04KlQEdW5yu0$08F+K1r0KoNfKM(-GkIqXrV~hv{ z01Q9%BKJ#sL?{4#>_WIKNg-}19u6(e(a#9ul_$WkFEAnOwR2^2FYg{1-)f?a{LxMa zgY-_{JEnL8Sy2F+r4stI)(rKEvM)nfQzAfSUc-6JBm&xCAJDA z1$0L|e8ewXT~L{W>2g4!B)xla_9_m*r?^9CxIiC53OUD|q-(O#tby(XAtqC7Z1S|= zw<&`rV9J2i_NSD=1$d60jUJ(t-4JU(K~3R!tM{fYMelugwizZM0f5OxO2_{icW!$4 zU5X3NAQt{+Ms=pYc|+Y3MOWOOj5NP&YoG9rO?TW$XeN?ln);G!=OM$#HE~(Ykegub zh(gkeMm`VEvZqq$a&V9`e6pE12Ma$#n~oLpRh={yiGF&ZyY=+VU|{)!#O%T#A^~h; z&GD2Nb4J}zo;iC8Rb-!)t%n=W?wx{@#csY=&=z<_*q>_4m@G(;fZa-iT~dbpAxn}? zzrP4an%x~p0H^^H0MdRS0B9iV!`~7Bz>VRUBa0WI3x^3K>-0ss||0Kjq%Bmh)8@e>_**YK)(t!HTO=Ku#kFXCu-w$1t{>}r4kNS}ZfJ=*0SdBnTqQUS34ZgBo#@v zEI-;KMgX!tGpZw$h@bY`50Pmm{^af5w4`=dn??2R10JAy$|wqiL~SUJ%_JA@kLBY) zX>Sq-&99L53hfDzJoTACCPhjh>5mJ7!e0=^&uFq#k5i3YAoOvhVGO^){N-x6 zJuw8{3YU!-{5K~jttM<$8Kt30a$~eIviFRp)T(FpZEWH+;8RyzK0CtN5Ag>cYNRfH-Sq_!eBnq-;6CMxBdUILB5K|A8DYxw5Phf8rF@RJK=xI7~s6EI0ZL1Cht!o zHp*3_lT&V28hi{YW<;A;SO}jV_o)?g<-~BkQqz zIKx5&k(K_zI1>Gdgg*td*RnClvlbY;0JvNso^3@OhE0F45IBMq!B^arOzawieU%&6HyMNTUt|oT!Ku%)S8p>0@R=xrMVrZTQvli=lgk4A*e?WNT6oBF zrqdpM++h?#6fc*r#jINE0PZ{=l#cmLl7SHewcCgRGS>M`#J~Zf4;V4n6+0QOcx)tl z-!I+GiG4Jz_0o)!`p%=%cH+f$WxIu?ogTe$x2h=jo_UgM`6S~ZN=dN%!bYWPPUQCP|)EiaRb+|)7z zL%|Wx+0XRP2ah(84&W2d`Q(^!YLH-|2`xYMXuW)w%Pv0jb(3KJ{iY^90f&vKJIujP zA5nZ&NvfqHk5Zk$hZmdd;87B36q5KSBWx3n2&ZxpTWmSe95$zZQoy590{1FoTw8YarEr+ zJwy=Tjq5-pJ+ez&?o2sBOnw;ijyAhBn%PPIeqS=^PBQ@wZTKKF>mCR=_Oi0YKj}o@ zJZHb}MF05O{B>q+aG32BA^!P2_>`<)p^${VI`**OtF~T~ovQt(m?yiP;2T9xmh!<&dbh2AnZpjtZ z^?&lV;{6(FGBQ&YXMAKNlFR!ydAzP$b2cO9SF_cOXc!Ulv`thI2LK3%lW-lM5cC50 zKIC;!^iy8q=W{y`(kb1@{fQ|j(fbUZdJscQAwuUm(Xl+AA?zl7Y+))N^E`siiodZC z{0l9G_N0FY)g*ePk%*{gs=bzt7VX87d~V!~T}ftj^4t9B=|O63&>r!6DxMalA&Dw- zL>M^&MG^XB&2ZG9PZ+R{F!ip~M^Wr_>+i69EpRx1*mArIl}O*E28Pej2pNAdC$ybXX2r#4oud*PK zz*Vy$v-+gO(Y6NKlzhn8M?zpD4?gy+vojGg4pfIW@_e*;q`{xjI?MCkHp0eX=VRew z*WIpaNl&t=B8j3G;UsUOib>SXk2uj)tdUbiSyZO~n4CwY;6k-Zl9=jn8{}?0@Iims@Fq2ffKgIQ79+rDs^ue$-mBK> z6aN-Twc;mAObF?V`F8t=EyM#i)o3s)x+;q|xj@&FU6Lb9jQp699_U)W4aO#meerg! z43rgJB{cS3h=r5#LqE_+aPaKfM;~ScgNcvd$b1HM$zTT8Tw>i)@?XWD(>de869zV; z%R^SgbvLw3XsLkB=ugL{<4p~GnTA=M;w?k7QX7ANi@Xcv`!E5F?oJ{!; zMt{NPBp$Frym{Ra>XL?&AFSl?_C;uyxTSX@C%Q~={FKk5X>f2@;!dh^q4eYDMX7He zS?P>4#Czm-=!?0zj&RX!Yxf#;N1BHlMYWT@`&_NdiY^9pElXm2@M)#Kxt2u=mlIr{ zIz7qBJ)Pnt1d?4)z_`WQH0h#=}OJ0J@f9hndwl zGTeI~JMk!PTuV;_ygAg4%f!Jp-Ey#I`|&qfB|VQOjt({$T47VzES|V%vfqbOg4`e@ zuq@(29PJ`fq82k)aWxp2deKj)aYTAS`-yX512ma97TWT|3P7a#KvztC&<{r3XfQt?2>MkJL35Q~`Q(ZVWA@6XYNWQDk7;1`HVXs6EE9COv<>z|+K;70nm6f{v z0BoPgbA8g53Qgp6t(^5;An9(^8V6?Eh_Gj~)jZlQw|pN}qPVrmaDzLM(tm?rO>oE; zs+1f6lZuVYqE}u(`R3lf5Gee|H!BSk&$*m1WIW})b&TnBLDWORlGf2~Y|9Ui8M(j< zb9_v+(H|MvXD3%SpBN&xMS+S7qPqzd`O5k0PMOc+yiBnI#;^x71 zRT;aC+bL+Z^@w>9I&VUDrOSx0N+30O`sUI@SiWN>H#X*5+Y-`C+nLg{p+n5E5#E4; z;Po;nsn}T{%J)%q3LguVgeS(h5ptBY5rb%Dx1;LhH>2vh%ifgpSyrVFEsx}1*qSyK z6Nxd+qYtqtwpbYx46m@YQpj-%IsKJy04* z7v}}Hqw3GmDdsHq$y7I_B_@s5Icc6}>g|-~zKiPNh6)%Nt~bsOmQDy>;D~E5TT4aD zdp=%i>`uaTA2f42uDnU@OOVRxEHvR`PGx>kpWXca2uyAPhS!ec467beT>PBr(~d~) zC5=sl{TwT>NQp}=zxl)ZqxhQT>(7!wc^_=y9EmdZ;#eU?K`Y5rvJ^#foZIjWd44}g%C zN>`D(c8^JsTrO=LuP0@Uxkr3NiPHbMBDw^N9Iy*LoFEWo6s*~Ko-g0Duz|WC4?su( zHl$x@^w_+Sb>eriZDSPnBt_5aFYFaIjW*O|mNUi1@Lup2cx21yeRCf;l{S55TzO;h zWvm5`9>dC~5dFr|_E52fy2{1xGd>s#?-xM?*})q!8&H_g?|JsTNjoS4_gWY54rmC- z7zrdj`cNP9;L%)fdoEW8le#Q*UWO>?o2O||XooXpbGd>ALN=MHbgHtZ={S-fK((14 zs?!?Zu**jq8pNeML`Xu0QUpS9dq7px_RU)8Sq$?#5WL6F^+$%4leKERno7?o(+F@{ z`02Is7LlFV>r)Gy^7kaci?S`@ikK|Im7+$E0?tW+gX*ZYzV*==E^PTHa{(cyH-qZu zZgT2-eZWC=$s{3h}M+HA2QD|NPg^Kx5Yd>uzrVM0gFPg@;UQS%K6cJs9 zIF+cJII<*^tMO``w5F8+EGZ`f{Ly#@KY}*zXrJz!UkMChHEEqU<(#d(1Vi53Sje^G zPHdVfTtkGCN7gdhzBfxtSD&NI)A7A4#~;Oc2gx2@PZ{t^MqZZV&*6FlAC9Pb|#4Sf_M03 zts=$Af5)1+H#VafY_OAiBb!!4;&a+vS)dw6@KkWKCsGc=& zGpNqZUz-SImsfj#XP46oHjYD2SpeDP1%|=*;^`xR>~i*#gW>f*V3+@>E&jTB`3KtK zzcMfHq{W@IxRVxl(&A29+)0Z&X>lhl?xe+?w78QN|GTBdKVV|AurvRfVBV4l){_e~ zFTMW`6Z7`^f65>WTAf>+>`$=J+ z5`ni(iO+OKmufCaDt1x$AQ+1`zve*o;TOg8JZLsIHYvV|8N`%V12dQJv1rY5LGbI* zb;FeDshq970|*p|@LYtbHc+;@F{b#T9j}Jr|3L%u_WAmK1M|n%Z!>nwLOb+_sfXMgR*>iw$YQdCB%* z*xaQ=tG_Hf58$=v)Z9@`F0@Vxldy#2^6KeC9*)!^xg>=#B|L5Nnp9|QkJ^uo%fZfn zsd35Z6tGi`5+ld-en-D76}B>6tP`440zd2FWEiO(f`rIbS4v8mnisjNboDUq>wUFS zFI*upJd!h@dAWN*ZXhlzARou|bigB#AKMfo%nxheF|PG)LAYTg8z{$#b6hH`Ow|78 z>nX7k2TX7DAaDa=K%NMp(MvZTT1xzLA=F9d%dv*|_tWQf4hD(JPsQIs6v%dqET&J( z_~3BMR(IfyW-^oSxe1ZhPYcVbT!%iQDcF+7i{^*)nX_UYdKRKB*_yx`BW5}?mPsc; zrQH~K>I!|WC0EZx@=p0P1%teFC@~ZqeMV2f6+gKp`?Yb!p}UVd z`{!k$*~xC9KH~29T<_^9{Df&q>CqYh`~rxBPOpD&tBF^el2vWRSG1+CNRTEX$Vo6J zt)v_buoiKF+y=nMo2h@?30%mYgg`tW?;%BVqKazlw{}^Dk60j2JvW0Qe+ziUi+J$e^*k0iD7k({^%Poiqp z3+&8X)HA+b$vBAh!GK$4+v1~fput-eN5ctM0_pYc1UkCSE6+d?8ePSGbzzCUH*R=R zItm{Wt!Vo-J??eL$odZ#nX1C@EP)kSGOLH(d%V$%LHYpzPQILAOcsK87hFnU!!Cg> zUnJYHyg~-pxSaU0aj63D5lr*~v3FLhHp!2LBz*XugcqD{?QWw(ix!xdIJ1|oM_mKA z)p-KTVh3|bSNFXI`gUhXdsRf4(k09ziueLhdUa;qY*SW0+nVaiKr10~>3G=+Dg%** zm%-lY8evkhFSOa;!HsJM!iY60PT|9)tQa~5UYEi- zMAH_tO;0Or=aw#J;CZJEG!xQu*A9bBpTo~o#T=La*tj&foplB_E`4r^&_Z-BljbC6 zs63UMeHn}E7mq7p51(&R3!GWaGk&u!1Hx{sORnQ@L}&qU)!SKTL^csR4HbciC7DNs z?m>nd$Jh_)!Vk$bWprbV0}Vk|Tk12bUhDL>-KXQ}0f1DQj^RGhM8DvMRU~odyU$jB z^mHq2?;#vMx;*-VEqo?X+6S0)hZf;C3K*)2*ad6#C6p8w-V8}-dZOk*wwv`ZU7awq zjj+b~mKD z{9jj{JHD+tQv&%dR6Q?1WxUf8+|xdX&d_71EQ?iUPlQrsw?>Juum_I_z9h?JUR-k@ ztbf&NK;B00D7wCu?V{ezjaTB^9jr^4kz3n8>c&jwYE+Tv$p_}U>gFK9V@Lr_bDW%x zUwY&fW!2B%WN^=3@U0Yv82)gf!m}C!ZD*CY%yjQlA67kYqAa%;Jd+7*_`>tivgOlf zX9h>RAbqAyG$03BMu`I1;0(`L=aHoHIit@iwxda-F;&XPUn~oGF;v_8$;{L?A6u<#!%3k#- ziYV3g%5ueqg#%Qpct9x-BR$zM;cteTci>rV(-!rBuM2|$P}nIf8BZ?FE|&}JaV~@j zK-do6OgJxf>(PWO8cJr9r)#}2V@}KZbYo>UGPb*slthqV2uDfy2S6HDtMTQq!K-+A zU`b}Epd2R)6qySGZOhH{pLd<(f7o@7`MT@8YX&aO_S;=&31LX32T7lk86(1eQ@NZ> zq1ao7!edpdQc>1$c0ESwt;XDZ&G7=yaa^|smUnL%B%pTVQ}ZBmb7vz(^HX(~0A=-F z+MJ7vpG%jaGakEKKbJ0fd%q^6?En-N54tgpaxM*y=LHBa3!3Tz=8ViG=ONc?&)Z38 zjMFS37fwLctrfBMwE&r8A=L|$ekIA%xX2=dE%y5+Ct&%Fk3nBc?42X3_chXd-ZG|( z>nqTo)}jV){PLbR$ zeQjK0Q+6fS?yMwcAuIJo(>wx1)qs4_>=q+pzRyE@I`WduD-pE%MC-n`k~3ZQk83i} zX;+y6S_LB0XQ_1`V`(qI^T!Tsotf7OP3Y?!qQ4G1mkk?ny`$A<1@9fm`z%*$H*(Tr z3;(#K&1<>p$6;saKN@z<(fH(`>~sYjcHSG<%R9KR8~ZYZRP@EzE%2mmR<`zGh^#=T z^z^A@oP}dSL~*B`2g6uOzfo|l)q_Rz5uo^6Wf8UOR}5RW!6pWGV7*w z$xzTBebc&p*A8r5`gW5o$zJ@>x^y$zW$-hO8Aj?lGcRymP`hwV+Pmh)>wzxWx2bhB zpzGXty<5&P4^BgyuOF~X|NKk2q%RRP?$N7*o}54mD@xM}6`~$WnJ0r`lyO%te*vh7V7X|wE`hUt63;#}m zPOKPx&CX98wr2kPDLi*6D)r}lxM$Cr?L(hX(+qwHZPbtv7WM{jXeGr|)kuNCWa*_i zMMW&4r-WgD3FF^mN=$7(b-L2S`5Dtop#A>L^=IDQp7@YyP;%`YB~Uy;ENwUt&-x>* zc_+|h50{I=0=V^*wfgDRpv)XJcz7p*pt>`5W#cWW*>h+EX@W$@J*yha!{!2b&gfcm zHO+G-rH{11k1M2I9PD-{cRs~_E!C}V99wzal5r>1MFfoB{A7>~XT@W41L5fymb z28y!Pq?R$LhW9Q|(yx!(lZYBv6|To-1d+sMgqV{)jg{V0F!Lshz%6;dH?ya^3h4LQebe zQnfFvyWNLy;#uKy%>HMF)uk65bZKP%tg(ydrBJ^bYS!>yWcW~z!nNary9pZD5pxL5 z=+|?<3SHj_QZfd0cDH`l1TH4y{Y@uVzY{eqnVd&qS}}m<44o?T>nOA3+tY+(hR z+;Amv^V-HA#7h_vH!bUZXy8koc<}-vs2;Quc(e5wQY~b`O~O2Qow5?i?Z3|Q5NaJf zI6C!M+pw27HJHSM*D~yrv^XRw6EY}`F)KL7QiGq)lqbEKuX|kQ>*rAT@$(V535^h& z%<1;{>9N`ZtH7&JSsrXT(y1BtY{U)|6sA8-!+Cs=Rnj4}LPZIUX$bYYMqy10|9%-p zW|jaXnE8lOPvH7zjgYL`13{!`u9T5wxYReK}Fab(vMz)^o-Ljh-kP?{To>m8*v36vyLS zlv!CKrTQN!@4Z)v;7cU0&udY_Kr0IIE+TYA9-+U?zDW_NFynt6 zYCZ+|Hq@*?$)#t43yk;a5B)gQT*jVBr}j~*RqT-}T4xvaxZJN}0}{U;YW{Cy1OA?v ze+C9k1}KmI83x_?8yK{82BGawFzC~;Dze9;Aj}P1?t;v|Jo9B}aJmKJ2g%m`K_Chw z#Z!SR3xZ6khG0zXb_@DUzWAx1@(t@{s0whpXU<*WXAz=I}cmkLdL5P)_n-z-SpD7?zy*jD|h z2L<^-Ok$~;nCt71o%51)`}5iW^Tx|Dj)14G>Zb?^=x*+>oSReM@6*L`$Z(5=;TuxD zsjN<6xE*Tt5&N*-c`p?L_h~&COKR5Wb4d@wNZx(Nd#0$k4{_@q==ati>%<)H`0nxGxUdrvTQjRIqqgWP zxax)IlTaN3c;_;Fz^-t@R&b#*-}*zPhl(?1*-_fnCdypMuP66gz~?fBLvmpRzk~>$ z5Oi!Sq>=Eb&!OT#mjL_`3pye=f5NwAssXsvyuGHaGu*Ga-gRkl+jy2o5uMw+B(vyn zqR}fz-zh7tiK-oC_^hhmw_%u(PjwVg@Bnh>p-wm5OJRXI3D;f&K8eWrw?v3}u5XCjz?c5_W>>-zP!~1BuX)#mNhAb0RS$1TDt01e(-^ z47!z6h&RbeAd$Gl{R86x5kTvoiXC1hR>?3{l4b<-{>vlFFeV?UE<>KR;M1ams^*LO`6xct zoe;9>e5)%(MS&iT{-7{E5jg8iV({1`Hdo-eoG`_efN2hnR1a_}+8-^EACo#ZojQxW zSY1w?ns0F$OtnR&9T%ZmTh6q>486dx5)tDu6m6_HqiVhgZ0mb7}`={w|VoGwfXM-7U~*vS=j4E$;^_C}0KEU;kI8|@&EJy)1C1JgDmg%gdz&2S zHJ_n9Jb!uArEOh_?c7q+;kPVu+N zfq#Fm`Qm1;x$1}HfSr*A<1dl}=1F^)JU=D}5`f8p)o;lG;y+Ff;NR=zo-_ZR90>ql^nQ}7I)I(PFmba3&=ZZaVIVAq(wfC2sCg@ zN&fWV4G;QGTHHyCJ85wzE&c@*%>M*w@!RkK|6d$dW~HNN{?%?Xl)AHjA}~7u0Aiu_ z{*KH4Icrno)gT{wTN1U*(q!Cy-|luYpR_uUFtk~BMlBGSnujf7q5_CDf@?J=wbDc> zzB9x=PX)AOA+c#K0z@$BbbR(Ffg4+OyW4}9G<*nZ9EjR5aUkFzM3MKdtk!}+5n5|K z#-a&0OznH#yiI!&g2QQk`Pwg>R3>)Au`IUo+{Y+Ls%OxkJAv6rx@*ee5Q|#9)V^at zuS+>sy{yuvXToNa)pV-Vp=-o!(r#<2%&Bk2BDyMHy~g&cwMVUDcdEwjOGA^$^rto%$3z~d>(rCwoKcIJTBp8CWI|q->jUP~ z&sQSX1|Ey0KFRmT&KY{yBc`ddV?>2xbNv~Xh1V3lXl4wV*-`~eo)nR!oyRXy))41g zlcub_^?cCGj3z{HB-;@Y8;%#D7Zxi9^WH2O>tDteK7E>$y6 z)BH(^W{FsdaEW5Lv1475M=1k?C3-BrUawzRrSOXS`%SA2BK#01mH`%Yzm#(-$;XGf z83Wozo+(Dgs_ep^T2at5Nun84G#zo`@?na&o<12_MzEdpL`Kj=hwr%B_sv0H0AbM| zEY@t|H_H8JG1wD5f!?ogxVx z#uE=%;cY6Kdoc(iWm?(7&y>gnfzTyPl6$1KSnGSp*3Z(oUd^4KZGI*W({)3rP;1crxSKV+}qjc?XPv84$!ob=jj)$ znA1ul;0@9r1PCc|G<7W5@CD(6#f6I;(*~vhbO_|EO#n zEU7i{Dj&hf`tqSmyhm~qRfNCLc;oh1zLj|=MarNh%U;OGNVJtI@MUA{LmrzH1|@mF zblPL!t^~y9NlJS=g#9PZ&lEm}#r6&2rLO~MTtgnfZEK>uc@nT)Y0Ip&_vJA2jC;ww z%gpxh8P}4EG>Ug78(ay*y@d3X$x0K$;tZYc7mZP^68V(0f}#Y`fuh-4bW(OCDhx4= z8i9;jOa@zm1=y0TkR~srT(sDBjNxbHs2>ClgoZysfe!ceX;+26=+eYRf3w56XMr*rT?_46#@wrVGI?a!T;379YSyoH5w1BQql;jTGC?t9ZFx; zyv{xk9t3cU-S&+>JaCKsK3NBFi+z09bX+cm279ZT_ahgcDR<69T00mQ7FnMa@HrAU z-ayU6$@hma!XybLgR?X#Qfv|0Letsuo%OOosM}a2@_eEsB_dK7KXvwq2L#+tJwjR1 zW1K~1JPyjU*&C;96igAdC#+$i+Cf{~te2u2(>&bjo}W_80fR*O4+QDWx7mr?+j0mv zb{eOI?MK%q%k?Bbo3pT# zN#M!sv47dK$WZdy9)Up%G*PJu&D$H&rE|rE4?#I7hH_Fm)r{7{2Nw_3e^7rYIH+JJ32 zfgNw*COn59+SHP6H30h<{mxMWwfQhqKfe3$ewxpGD4eB)&QVFK&rEJjhw((be_;v# zb*f_Mj@HcWokqu_bW%3>l8^tw9+sPYYu|*svn?%R3N1V6(XhFTNYX;%>1|vy?V40HZ_soRk z3)*798c5t0jvx6TcE5qL)I@Nul)zqbt|p$8e8p7%_zIIqOZC0v{i|yRArP6F`xJj-&7kw!ngRLGYX*28H){qSTYLj^JOVyc zFq5A02masp45I%9f^V&4mtO<_OEkRnI-V{4GH(9<6+~6vzQ4LCtBZH&^ zmq`Kqoj882q@=_bizwJHXLF5LD-(wuYg@QIh9hK;_&+4&$`K45kQoAVeY6c0iR`D~ z6R)`rg*0JMX~|O!vGv*=EV+`P+mJXyoO!`AFmzEq5*tGIGQOm6lzhqWeq0p^i!Q-H@so zqst_fQs}c%BV38ghXXTKZm86-eMFE^-EvV1=qisX9%Cj0m1N!m^$SEOO}bc<21WFO z54V{FiYm zCn%>2_8_ZANX|=dC5gq~Qk}^7GhXXK9RdGGK&}ju{)C}ZE=t?!rbPJosKJfnG7Tni zy%l}t?M@D@`amiRoHCIsVZDa34JvSj-T$hciYI{$aUyTul1U>FtIn2oj%DlK%?kT$ zJtEDNZeKoB+S#S?$W;pi(WT7!p~HzjPh6QA@9YuT;^DqwR7ErinRBca{F~|dwXKya zh5}lVI)o>q0sF(~1WLop4qx<(-D`Bl36Ttl#v&8_uk@phESd2dy!d0E@AAZfe17l5 zlh}jR)gbJ~fxXS6ap}mt(TjD}(&Ic%XxS1~v6v(FRVXcI&6wp$cyj=i(Ue%;K?*j z%I8x`5MfdHuc5w|B);mTA0>tE-=UL!M^fA+68^V`o$nOIouar?6nBc^b|39dQQRqt zJ4NxEl=GdUxKk9;_pfl|tj^a}*YGV@%h1^V|56mcbwdAg5`mSK=_jN0t6)iOTdmao zwqo#?lL$AL|8vggw-E#VkjaNVriG|n(|JPsUWaLglkk+vE#wnpqJQ z#Nf86^NUbXQPFi5)xqE>ss&K!g^}b9abtsoFz+$cIvfVqD9XY*bWP4)uhuv)9@=7Q z!xX3@*3(;qeg@;i2FsPKP9Xep>M-9n7Ve$aq?M6h?Nn-FYr8a5Vtv`N6zjVU-&QA+ zz`gIdJ@zRQIUpJ{vw-`fTe70tFdM^^sX_)Jw3ecijm=3AH|M1wS)E40gxlWv`Plr% z`TD1wiL)-{BwiQ7MzT|_!}oe5)B^=rIHZuIX(%yd>~L?h`ps2(OSevI!ldftiz^k2 zB%3oxB4RLf)}6wzE4g*k(%#r{#-=RVups!xkm!4_J9Rbp4@YR(G4;ss#XGW|eWY12 zTY2=#XIx)S+3+gWsMzcUrb>2lyQaeXz>BSxb~XTmz!N`duorXB;M#(tHKZH_^M~i? z8+0lq3k)bM^&ICpA&Zob-}GclC@8k|1HarCngLGV?tYMln0&TR`jmUBI%{|DlSW1x zdbc|c{i4=+S)a4#noS7?c>^y^N=SX9`YBPmP#h|?;fcNnRsrNgwIV*OGS4Fm4iFDJ zLVs1mwl@)jE_soFIBNpsEU~^-Dt?X-FR4CeeCi(N8tW4GP8)xXGT2TZS#1HWOr>}T z;rUc)=rUM&n})-SNkDlmY&=B5Nt@=lW&U6)foa+HXn7n#sooLNMIM4ii^S=qH8(~b zYHT7JWfUj}6QD$tBb~2OkGQ6o4ARk^fJ8tys+n*iB38sLU`AMLpl(v;yC(nb3Hr-f zf}6Ma?`H{qJV}2!OYq}u?oQO*iTa;%qW*z2z>jbB|704#(7B!$089gP{~c+7n+Nqf zAKkssd-eRKk)^efh52J^d+TY{b@N3QlxvIn-TG9w|DsK_ur+A+p~;}xzDfg~-0RVj z;mV?=4;~T)^ZnT^OzX`T5=Tp?1Xc{RaI%$fU}O&bvs;n+&jkkA;N<-`I=kV?9kJdU zIGCW%;}wjr$v+8yea~7oR(hvSMPFs=`uc*1#Fc8#@?JV>mns`vEg9g|nh4Svj|=Qn zyG(qL{$k|<-!7@aS_8ZXg|N#;J|=uzvQyl9XYJylFx6rjqnBNU)HOkh)Wr|)p@=9wB1VUvWoC=|ZI51IwSe&7&$&s0-jXe}q zJu!vN#=roC-hZ2HfZPp?1H1(bnQ#Pdoqvr3Y%)6pCj#RD>OaQ;3}|y%t>!;{jRPo` z0pkEPbzkEE^D7PgwQrUKTyNq4Lclmc9w{#(>0*PZqUsf3?dLdvupP&TvM9}-!P__h zMzfS+mhZ!}xSKct0g}E?_Rz)8ae%87(N7OFfpGx&kaD8L?7~PQo^NpgZrxCxdHctz zNWU8g;7%4yOu%lX!7lkJ4nQEy?kOLm{V4;THjN2Qa;>^p#0pY6aq2TEW1c2=$pmOQ zy75qxFprH=Y`e4Yay{6wdto@-RnGro@2#Wa+VgE++%*u~g1cML;KAKBxVyU~kU#># zU4jO8cXzko?yd#FZb5qQv%7cSb9?me_s)H9z&}*|meinFtHzi$=VyKm)=WFi^5g{k zoN=7oj8ci!nq@^)$XogsN@baZBRkwf?%&rgcXc}%<5=*BU;f9 z^^>mCUmFm*ck0zqsgX$T-n7}NCSJwpqrQs@Y+&{0jN_RUp2{d0rX^3B=)n9Lzb*F1 z@dl4Q1yaSL$P07dT71XCL5);Vlv0U0QQSMof_&)}cR`ECJuZnl972yvTnUl<-C04n zh07tCE{dZg4GH&F_RXs-fj&Kg^X!2(A<`x1Z+QR)JC))^<1$OCxQ|v8pGS{9N*0$@ z@9>02KH|lHHNE(#Tp_{2iO3*aGd21HSX6Mj9Qk`u0d?WjOvFkKtM*5yoGcnh6GLDQr%Q}b- zTltXOvIElD%hOHfF4S+Fg<=Z@Npz6?uXibQY)V-#RpA+;5ClwqzB6f?&s@UQap?{U zn&-88dARrsPM{EV z3*Cp&;b0v1#!GVUu|=i#$rq;qDgy5FNx(dSF%LjOb2}@!Cfg9& z!Kn2U6>+%%>&h{fap2ljs49Nb)K{C`5|M-<_%8H)-V45OFSRt>DKF)(P(L6AQ^DDl z`zd~vS9(9zuu3eP2Uke_S=Dh_Jt}HJFn;(Gb7qxjd8x^JH>3A9S(U&*fHgaNoo1-v z0T|?{;yvNbQY{0vh+RzDQj2S|DuPxe`%$xYeEC^B@^V(caX{x)ElK{S5iZ#)W>)m# z^so-_$+h#^3_oitTTKM0)|$v5|Fg5JB+Q`*-mMtuILb{HVw)4_`3bo+exWg~_GMOu z(KK`gGjgY)jj8EzI~Q7f^q*FK(Lkp(r%hg_MV|YuO?+^{DY~|@RS&wdK|4tzp4c8y zZS?rAonuSx%IhG0=58jg9#blJ{IE8=0VD-TFRF*Zq^qnMHE2Hwq+y@an1*SEOO0I} z$vKN14?2TlBm1!U?7RR0Lr5w*5qV2+oZ!%*=omvaI3N9Vhr%q}vh2;mhYs@FtpIqN z*Rd(GP?*)Gg5~tDUIT?DgwqJiD0tddWuY!xI^%=iMLB0&rDlAaLac`G-iL*(} zWl+@zr!GcCMXv%ZDA@aJ1qD-oUr^w-7K$k18$+Xz{w_Ksj$J;JrbzIVdfM?^)l? zqtQhrgQ+G1Hq1fPI$>=7R#1Qy>hMp~0G|Z3{4Wj)@)y0moj@^l%Z&u_nGqT-tF%54 zUfKJK=w4{8?%?Pft)S~uhSs*yEDjInt6u3!Ge7V`G;tobN;iV1x|14wR9Nr2i(LKe zlM3o3SGXHsouOzg5=S>CdOf_`{(X&z>PTD8{0pthIZ<&bjf}{bL#+tZv-w z#+oaR6_NvyqpMK7Xy3z!B-wL|`RaKF5Ic*j#b4BdPVRb9R^hy_doTpIzbSpyp1 zEgk?Uhf=rM+mjOumwVVqs6#x=EbF8(#ZXUDhOKCwD-k&5fC5m_pW&eykHM{><`N ziS5+zNNJNNmOFl0F9(TXxI<>0?nR;3CfezD?WdXS2TwEE>np0`h1mwofiu|w9FH^E zt7SO@0np=%hOUXli?E-|>bC2P>47uZ^Ame5y?cH%GK>Rfvb!%Nd2-yFd7gn>L&|y) z<>Daf1icSIcC8#lu9Zse z6ve+826z?}&w}DvP&^BYXF>5SD4qqyv!M8|#Gc1ib7?)th~7;o-FmJdx4?y!mYtqqLu9gx$OV9@^;4@B znWGcyk>AEJ?Z$frRpyw4$ZO&?tUga|;$~KMm8`+mdE^YbA6+RZE zcMc@()h|RJh~A6Vp0-Vq83VuHuf7?$Eld5_b#U|v-Y7$hO4Fr#-*V-)kZPV^@S8iK zV=eav#fIue^r=RC)X5Qx9ydvjPMpx7kS+_N7y;BeisWv%7cCP}0IEC5futs<%{!3* zMSppXEN&Ry&;jWCJ{As(?glMQV;$Ud;3|o|i(VisXLB?3AwLhubbGI&SH@nIM9z6% z+J3Z9rLO(nHuA!l(lI-qS-1}vDDPFcf}jFCMpP~A@o4Gth68Psh6xtoI4Dn(=J!g5 zz>e=bR#fqh?|8e<-tIU&?5hvkeLYt{YwJ=!`!){ZHbrunM`{S0(egfnKtxe+)3&f% zQTkocVdaAzm&mSS+>4SWAAm$#Ie~>&-DH`rNu|BH%eKcw7@9kQ^~vmf4bSbl;`QO# zS1>NEbXhNE>9@{1k(zbuqu}m@UTp>MF%$Z3-#mQq4)E5zujKzt82|Y?{;Q7s(}niW z9r-_A&wtgC|GSrYzOJ9I>%YIQ|MR~1-(7J3lfL*1tF+e1|Bx^K^hf=BzBt4O18&^v z(8yVtv2-e}PeFx6MH2R*UO$nXg!zbP=MK`}{6m3%c^WQ-<~K1QkQwPF|8dL-g|ip_ zr*VFTreZ>ue4N6B(x%Rv(Rw1@Ud=U_E!Tr7U*-hTsI;{{OLxE^b^q!iUkyg>;{=NA$|B*`yduJH8!qT}nVCPi_{aE0SRa5_#x}Pv2b0b>% z_X2<3DSWI*rY&US7l|C~R0Cshaf~EQOMXk$=#0|hTfiL$qDV*u~?6Qdq9W}mlc`H7597$oDYWJb<^YDH#DsW&o^>1!jyKI05_G@`C+-%<}`=C1ws@${m98n>ng^jH$%Gm zc-ffhcAblK*HImPPuDyymXA&i9PhO)piXXey=719at4(a=Y?=xOhm*T%u;2k%+}Ke zsSWJOr5>~;)s5CfH)d;Zosf$*Ho=)X^hMOfFa>xszMxVS{!9mFmoOUBq4=^2Ll{PA zkVX@I+)5N-Obm}fc&~LNNn03S63l0r)FC+vPRjHUOk=_t%CRQ{t-S`)pvoDPEgH5P zfs4JJ%EJ~8tzbH8RXNJoA2wOFin6GscRcalv4}0-M8)Hc^fyr!t#w6{tO3t(+ z2rwSGBh6gwmnuowa4*qKbL3-HtEl`hZq(L|z#8W9=YVC@>J55S8f~4T%_68GE(|cj z8J(9+&K^z64<^Iq&^-{CPN8Q?JnOZ;aq?qHAO66}V{}<`Q8Ng>eTDf?IC<^Aaq=Qh zoIGYR6$YxPS&tOS$ADe~A;X0~aPmzY`JZe%I3*xLgbNYW6oH()^XsOgh0hRBQI`mm z_5Nu;VO|H0kkHRSIwJ2U3J|?R$>owQVkaUmxW^pi$Sr( zS{63@p?Vy(0PzNJs28=A#c^QKQ^PaCPrkT^4OAX+0@>ZQ$XQEN;~xwB^P$ayiPpW+ z#NXb9qIKVdoAb}jWnwY&vBuiGc;w{6AARw|Ctv(0=27vYtO(E-zx>S?cYE^1J)mAf z(g8X7rp!Ut)0A!_W7rcc!zM5uD`eS<_099wiG?6cTI~9H1u4Q#4A8Mmp)j3hEW3Ms zxm0RH^86>hAz7u(I_}>LVYtR!xY0Jr1Mau;IA*+h7hc2yelPG}i$;T6P1s%4mIIdd z%k{_sOZy{&YVfllO@SUcu)zP|slb0&5?J70!oHjL`}XE z$R2*N@K-mZ#8sFGW==lzWZv&8m2u{9k&v$CiSj-?<|!Xz>VtwrY_es1y=2o;8lks- zfL*w&u8r1$96IF`QTe+Pj9DhTc^gbH;wgYmp^NgDy-8*k z=!(*Mp1B}#O5*9blqe$_3D9=L-Rz!He}B5xhPj-11)j7Y+InC`d&==>?Yae(g49>{_#kW9);J~-|)hhcnj$SOHW_wSF z{)5ybCqIf4O80-_h9zNBx zb;n6PZBsAHnLh+}>|r@Qw}#DP0Ed7EH?l_W}y6D3GJm|3n^dv;+tmiU(YgSVz$ zRy^%;u5A>F?F37vi_{<^k@&<4`ox4$Z`o6U|15R{cdZsnC=w?kPtLK}CTAD60#}{+ z5rzYJ_c~|YtG&QeQQe10pgX?cjsymam-4Vq=a!#kSvgS{Q#CnOt!HT{&EcJ z**xhRvLh;H)jA|gv<}D66-aKIpBhlwwB_E9F!p^t+jiv(`;701dhHD%CD}n_D>Q?STgMI<29R#y2w!@psPR@{p$X zMQ=Z3+p~t~Yfek5D^gR%$SWX>0)tLK(|WT^s&qnds1fZ)iOR6i#8`fslsQGr)LskTre`UjRZ8hwOxc=cMQ2ni~a~V<5Otk-k zvNbMBvc)J|$323oCKF3S1Xb#*))zS1R6rGI5S}?zo(9>6(FlEsLA_cW5EZ7j#&j^6 za9NMZ58CDFEgAk|+ap?GaD!m#iuTgIW9F>UwK!~!m@?|o5E%_P`9Db4V4n9kk)yq1b6S_%Z#W(!Q_F0G3deG`K zt5>RDw;D$c`S3svHl3Slny_U&A_XuFksiHqt0z+4;}4{K>!UZ`ob4%=lKws_x$Y$Q zy=pTd&>K$-d>#GhjW6o`mp5MZ%Nwuy-5ciydgJY)-?;2y1Q^qgDr6`3U|8hfTkWVC zND2S3yubX*V%YR}r;&{_>K&fFceq)Zh40M@>PjIH~7bQvD!1=XEDbY zCrdmScX)$qd(6TN=@q8d;*H#C9l~u11_#c1N#a8sPu_0w;PR+^;hEu%c|E)ly2=QYnPj+-t2?~4D0KcTtA63O)^~V2qs^b6bjX#Tu zXHoGiDxO8fv#59$70;sLSyViWioj=4@hmF-zb7jG>?{6NfBf}pCYFC-D)H46sAIeH3C5OL86jlo@!(*1Nq2vw5dwcBx-MTN$w z5E81qFc`6Eu|LO7CL}yDRD&cKEQR_Q&|7Xm@$C z*&f0$Yr{Y2ZR4X>*w8S`%?jF_NI};xkP@wtB9LUD1-;bJ%k@56Fvo1heD?lEB(X`W zqE5Z)bLYs5;DNG|0@nzv8t~QYBI3op?7-0J1r}PykOAiMRV!3*RYmW?QC2=EtKEgw z1NL~AIGO>B^7c%{Z`Wtpy+~ipOmlB}px>o17I#(LY`5|J`Bduw7>vJ;>Eg)BZh%$i&-UglWI%D?O#dK}~btGCvFJ|*yX*ZluvO2CmV#=aYv z67c*F(DP4!)W4Dv@NigVM|nuaZVKSK+Ztn^ID%%83IeGec@Y67K5ND`F$F$BTp35PqV)o9glBRGfVy@6ehktvvcWS%!gm=|Y2R+>p4MOJhbJL95 zY$3Mv8l@DKxjV++VgeSCPceb7zhVL@*ZY@=PBEPeN6p9zt1e*36!JKw1pyh$9xr$U zz1P1Ujc>Jlxvf|*ucoI#I=6QAKWspWQ(({6&n20QAa_BK6uayH z_N`JgfYMv0VG`&43GA#OVmfJPgeMIC1i&kbC5!SKl{5k6&YNK(geth+4tO(6#5%yV zc!fj~NU{f?^k_XrKW8n!%a~<~$SaYx7Ik^Yy-~4*`PAVM!5}{Q4t7F*=VNlS>U*2T z_$|mN1&US+^s`Y{GeG1!QCV~w=I#qKM7UeRa9CTHa3wyUw-GUzI*LGk9yD;-j$=X% zpeNOp#2+VaspBU78$XY9>mdm`9_6UxDjgng|DKdG7@+JjnJ&xM*|+1x?<2#4^S$p5 zT$*QdG!vv@Q_)g7xh6zEjA%z(g$}mwCHCl7&2V6!{{B;+e&np1!xa#q??VFi=_|Vd z`}D1R^nd{Uj2N&_A7nNIlYOqnc7eY0HOR*`X_7Qi$#EMhsnI2{hWa{|3I>Cp=>`i? z0Hsm7D>J2yoKZ`zgzpk2obe5a-%GvTC@LU>rd(`gh&t>{N-Zdq(EHB6SyzfS=8P!r z!-p$RSkW{8E>X^cXyMZmNC#ix!H*XbMMK<$^nr8Glx8&-ZVra{{kP2z_`y5uBv3ox zp|R-~dZt5s>7itP{I(IbG7^yFtN>6ta}IE>_0~`C=KYy8Z+sK_-Wx#SC$2={B(*{8 zv1Pg9XT|FYZUN6iV|%*q&ZucRxEnu7P?9B=flYs!Tiz?YNdxDBVG8xWQE6KjAGh*l zPOcy%gyWs0sf?+j=gd;{0EXzjj{fF;eWe|}=04qeMqTnT7tePl_53`)&m!;T4 zMaKOxZI-QiTX(G+_j-HklSm>M%e9 zkeY|y=*-a!CVKN*I^d#4VR%qS5doVp!EO2zrfWRljiNvcvju2BDnwlC^-Vv3WfVid zOasSMPT>8eHmCNLq@G-^u^jC&M-7Ec>bNma?WSG4x*!jfTONpP{>mqe6MsIVGd7~Y zd{L=rD~i#o*Z@CJvG=PL*cV0{mcP;goWa0!fV$gLIsm|pX8fYP^{R}2!G~-CHP*s6 zL64vXHBKn?cor5iT*2vtk5Zl$lyV)-js>SzXg*~Oj5WH)o+Y9Ea#Tx|bvY+`8o}7c ztNDWsRKK1?D;_UatWy2vQ#xQz`Y|0K^40BK>?(``CFed`GWugWpbDKF{&;hGt<`Xz z2bHcmFi7Mm{8u_aJHWxx&;72y_eu%`P^M_}D;*H|TROm+>a(}X#7JT#hr0A*I)J@L zHw13%u3r;PVj3w)amiyP=;pU{K({4+y!_rDYV@}@ay|yhy$>1stwvw?SB-uP{vT@e zUpWA4^lguxYV>msA8YhSnSRyi%c-I`xrs1S0kQe3TxgLwMB1;HQF0jUFap9z?`f)_h7Z1Kv2 zlmvA9d{`*F&8k!U-+%>e`M60h=2CI9Ipt&@Oq?etlq#}#Y;=9_9y_pI>KU@BBR`bHA6l1E5tYNG6^@Se$A1gaqGs8 zCbvgw9_@*mhX7LZ>5tTWE0CJU<=*Cbq~=xrM$Hccsd=VHYQ9Hox zL%oF6vE`po^NIg0HIFr~+n1mqUivvg|D$LhumV4rCDtf73!|*aO1Y%QlGvIhAqHsd zYpQFO(xofweAS&l5kyVf2#zvU+aS)CM$f^cnyQEpv=e^?R=@KYE3n@zi|M6iC0C9b zW9X<#7@g2UeUs1m4KYHmm)1yJBzz-cRUZ`R2xEkLNN`GT88R|HW}w?zA$v}4S^qdR zmo;Oidd^mVM1jWxfk_ zeT$`=N<0SFJKa|Q#msNCQ+3EOdbQFVj>k?$->8-k_#pc+ghJaE9k%3P_oAnx*V;d1 za;_~Yz9Ce~|Cu(o9i@qC9CDt1YjUw7NO)V^&Tq6_Yb~`xx6|~Ko{UZ+!xnNC06H(N z?6Rdhn)4&9VbvjMJZ%97S!}%1^~3@IW?f7V`d;$*6mkB0Tj$xnIb*_bvGIZ~EqL2Q zCV#4n&1Qyr{l%HI4>KQOn6aCex_uh}z1sH&e&~?(BE#9K{dvEhV?L-d?z*$?$p&eEef=Xk(d8m9b>aqN5wA(v z`vK`Db@tUI@@2QH&#lM?_bC=x=KjPNS+a)vyRWSBi>w2=w`5X6=TPH4x?QXt_q5~7 z)zTTBsN*Ho(q~2pLhrWVnPypn)A8BiCc}kb{87Dfyz+F!;`}sVkfc`Ft{HQ_+#}?2 z-Z|2pBh{RZ!6sRs`!pobG5kD(hj9rs>#-Go2kOSN5V7L*rH}og1O*J&k>@>@^Jw&! zJa4`|-OxJdf4e~6`LRG>r~DxRJ0tEOemZW?VbQT1D_mD^}?Ktma24JG_L)>c8*!6c*65r;M6>h8XoG<)#-lvO&-&_xFWSu<7 zi>wzNm4WZ*zw*;!fHtWFi=H23o|*7Ifz13T40?$9LesdXT)CLEFwwTm&Zfn5QFM1G zex$Opa`JGS6C0a(9W2D49Gk9$q@!ZbaYlqfHNEJgc1xyC;LKG zRh7#9V0Rdyk(XEFXJO*pt>qNoxxNo)?s;zciR|p`eU5>MxW<4~n&qk+bHO(C5XWIA zgRUM&92}g2%igmw?G~$_m0_IW-BTx8UU7PmmzO1Y#g@{)VP<@1Og1j z#JYXvn!WEdVxpq9EqqoQQ%wx}=2aBQPaQP)RatSOcM3GChnfyyL5tN8scC2qFc955 zMFDd|0RB{dpP0KFKy~qJnHCzAfT<~!*M>bP_1)5Jjl!2zbKJUI(8vT8#TRldk}A*# z8~w3m>FI5U_9Xo*Unhq+^gCc~xXvIN44q0ET~CNF5VZPN5eys7a?ir+&Mwf870MnM zhEw@t1E7(saJ74n5qR{s&dBmbOk`8}DxGWAml*PQRyu}qmN4@GL6<`uN-Y+>_df2Y z>!0vAZPUD<=yR#=x*d{60qV`(jTfBGe7dFXw~~^QAqYY3&gJkw5!UO@avu=+htZZ` znFA-+d|rGK-o@se-a*(OsUD7J5nGB*9`+f#oK8qgROByyoj?4hihHRioaCUJ0fkXS z^sX{HJ9~n~R%1}XnQy7TrWqrw+sMtWcHuPt-tFr6UHnjidij30B`Tx1%3US!o#^qt z`zh|+^rok-86%|AkP^MmbSpnU-(ZVHRpzd;-sQ-+;w;NEREbV6A?e11xc2O&y>Wyt+$)rz8^tE>@o& z0vG%9fr|`V_Z7(RlYWl#F_s<5-n{9}<39kWSOYF*eg-aMpGfIf!s@xM5dFxzzy_7n}HEgrKN<&z1I1GB2P4~ph^eyW8b*p^YNuN^jRS)h^dMsAB=T&>U>+v*0( zrttK7n^)q55%6l9=?X3f6=D};9%D$He3#Gg_Gtt-?2M5$UMl9|`4Jx4LSbgQ4yW+W z53F{ET-43MYHaG#$IivKrcNgn>oyznhY|8`YSEh%0YuCx1^RDAxLG(!JNKpv*Nm&I z=CY@`1W>3SzOul04qk8cV-heMe$+AH64<^K8X!7m+ZxRfyEv(a`Mz)qZhR~kESt>L z>Aicw1^lf{Snu!4)w^T^^-jlOvBpk_@JzxS1k@>^c^Dxj&M8-E)i{Phw}`Mgk?3>F zO@{`{vP$u5-3HfIa43YUJ3f%b5Lh}!9}lR#>EbP8=fnA22QFz8mG8GsP=h)S-Zz(D zf{+P|u7}BBXdLegkjj|K`E|{`8Amiyl6m9zIb7s&ilMn;*(lXM{=> zQ%C@s=>;du~93$#*u8MBmU!^a;2$bj$$;; zoC{DO%Y7HcJ6)_@Z+s~B9pL+#oGq~I-D#$HB>-OU15Yr zjSrdkb5rtBp0pZ9w)@8`?UpQnw-LJhVmmFsU341&qzT+EMc0jPQAo52iyrMfOCERL zLsH1r)0=~duRC}#EAq~L)^uC}hsis4`4fUao9!kF7AZy^!ZIe7ZUFDk3Ctc~_j$|i z3l}LA%51A&%zI4VHTyj9^)|XpJ^-)R3P5j^);w%JfGWyzz6kwd(fNUp-&;!Y$m+u8 zg73>%K>PL)aQOD3&_(L%BKVE0+mUG8;<#tA$E9MSO8H3rXdVDN%G>hhd`B_Ho#WO$ zReUCVV-fNG_S!+kgQEhV9wnW$vglLk!pERa|5@C$DFx;O%y%J`8MNSOy77aX{JZs|8b;wmVNeBGyZBQ*oZS(p% z0^RY$!W>55{N>nPZ!ryCAA`*fY_?~ZQ%=|?!*DKC29>X$vUAbC9k#M&Q+~Z8_)M^k zB**05eUAp>clhlv{Lrpj2km^LF7+$gE`ie_1*rHI-wS&oYJ;PXBR^P(*)N0R#$4`m z;=PEowRt1APF#5i!n)Uy$E%v(S9x9~kC#ICsDfx5UnVb*9ov{Dbh5dm*_&4T;0U^%^rXD-_KZ-=0mV z-xfB@zU5ts^wc^%b`C|r`Id?R!ftbQqjt?r+C6{1GR-{n$wOtc%@>d6`|d9!`SUj?HuxL`4o5T1 zlVxL#sy>CSb2F6*(LPYZRY2 zL&#pRcsn%yL0_16WZ~Ak^sv`fhm0K(gyTDbp>7Tv)YE&bHYof$?lXG9_|H`ujiWk9 zlY!2NgzLJhz=1f0R3eHliQwVL>8}2Vl)V$CFnn0&k5PSA+F?`P&esi1oIO8`yh6jw zv{|b!V28wr_ui~&i}(*4jN27ia7Uy%#ihChAuO<;xrHtaU_$#H;ff-9@#-r%@yn7| zi^yM3Ha4<)H1OOu2i0v565y@JEYLO2aQ3m)OL`y9MCdA2tz$;hU5gk=ddvUuDe_P6 zrlsDcgfuQO$d}sk+4|JANT@HB-@H^1QDRaSynz1A==!sclmLECDa%O8$g0ZdGP<&J zurskRGjakSGV8N*vNN+AGW^r6zbn*VI`W?*|JeAboEy7F09 zKI_V7UHPmlpLON4u6)*&&${w|MpyosE;Id)>b?I-yzD_YuXh%Rm&F6|GQNf!Mz+PHbi|X%Uem#(x(YwH`~{)v1Dj z6;idnbJ)EW?!pscUEMUpu-(-=y*&!+xxem>_stS5Q0Aw9(`(9usn3Suct#Lx(H{t3 zoYN01o=uTna_ZExkw#@wwQg51r!IJv51nP++yUMN2FPrCm?d?x9=Y0G@rI_R6FDCP zW+b<}1g3tgq4fwm1cvLGSxJF>88KBIiCGua-|=PnPkb4toA@1&FKYytLbH7wCzZKI z;rdPp@sY)dk_=m%5ccqiFAF~I2zv|U%aA$D8YGfYw68#WN9s-bT_0>$46k{@Nc_9L zl@o6dQOJ^d)x=>&Be{`(wC3~Lbxo{T_}M%-l%y&rnlz!A@%~HKa9t`Qi#z!uxy!uo zM4H~c0T1XQeMH}B5UE*1nXH`_+)FI~;p}f+?hpnF!4D(KpUS%UL|(arqHS=(a2*5K zAf*)B3d&^Vr7j@E`uTGg6!~`YbF=*$QE_g$86UQ&WOq-7&v8YC&oSOfO@%X5)GFN-= zy3?C+KBx-(3%ZuGdrwkERYV09h_ARGlk&!3a`I1^lJe9BZA(~{jK&d6z8Y{UzAy#6 zMJ41m+$|f)BG*vD2|_QIimVD`Bu_o| z0EPxjl0tx@5s)uK`dHp8vdNNc@J1{=5%e9y%i*IbKNk!}9l7>sFI~%1N;HkJIcXkX(**{;%La~9L{z{h81pIxH4ExH)u6BH41Oc#N^M0TMTpBPqot^W zdArjmqP+V`yRq9yB56hoGk>xlQCbXM;`V;dlU+?2reHPsZa%hTWy#qS$LOuI`T7De z-BgCbU|Kq_(|Xi+DB89e#O+_UI-~!TMUj>+MB?R!n@m7G0#Cy8^MhDoRqtehOkdma z9K|#xo@8Z$Ot4HjV}pf!^`_{c!8Qr4FrsxeU7b6t%7t z(c}&%ipu|y>nBkMg8m{U6MOJNZ39NvH(OubTGU~iDPb=d>bBuDv2}l8{%AR|)m}}Z zM05#QO{<*2 zLcz7m^$qh1>|!4$$pC(0PglBY3yd=#ilVOn=$~r zOi}HBUc&q1o8>`^^3MQ5FVCJk(qYrlEpBJDAK}__?n@$G!zAi~1b3X2Md!mP@ZWl9 z9*b#rbJRoCP)>SooM|>}z_y$C6GL+d>$cff0n2WmukP01ZC@Ob@E{Q3u@_1 z@ZWl)DbVpDP>QM*PP8K+Q2eE~3z;w@Ynm^lr7&}|m{qzz-pwk2ba(c>KH~B%#FZna zV%SM(przv5WYBuc9|=LXoUraM@+8hbvfCo>W{|!ar9gj8`HJ#%mW~1Z5k6aciTO%P z`K|J|f^_iVyv%(}L2%J1G7;w4LU0mV8WK-<)iSLW>-x&c1$$BpLdwsC*AF_!$u|*b zQR`Gc5kCVwI$MhF-piC4xYBWly_I(I7|XqzD7;@GyEV>h%yN~25|DT4=Rx0z^GDU~lz zas{XFVAwDUFMNH8be)P7c6YtqhPyY5e7t=NHTZV1n^WX_Y7sNW{S~I8+-#v$T+&u3 z0M&{(CYzYw{|6Sv345@^IuDn3OPeXQc8358_&A*W$5WIQp)JT-2;M9v(*A=f_82BW zJJbgWb-9z?$-dyMZyftd-`u2xbG{bVWzkl_1)Ie~c8(Spvwi^bWsoLRGzJQfB-%G; zaV7{;X4OnV7OVu3@B1TggEUmupEhTSS&LxOqLYa9X{tU{_F11!`D#kABy_!`8s&-p z6vwWDhyM~?nue-_hU$lf==c+gX0P6#`4T6ZTH>`cEl%ze-G)TcLtDyFKu-f}dLw0Ah6cVfNj7*$ws0U58!d@Vh;UaBH)O~;pUX4Z<%BA%0?4JZF zi3lI06n>c=lb)xnKuJZFJ%P{#Tn$EDv}C+O($s+Km!N_3q;`Fe)_3uJg!U`jyN5|F zs~}^GlA0Akhw9zD>apUX6=sW4nNI=T;i(K$iQ6QaEz8-;!(;@m>~!!M+u3<@nhmSG zKI**JK9yQSr^^_NT=1qJh0KOLV^m5EF$HT@^!(mxdf~p)6^mXVR&f4tM5b1ifWo=O zqr~ss8$3(tj}XW6{uo4scf>~|C6eeeWJxLM!@-m*X99g!h;DuCv9L2Fk(B?Wdd_hj zZ#}{1&9gmq0A|1Mcb=W$t%bR3(<$pa&$-mk3|$%6HVl$7SEF6{M9x7OXLHDsI=Z3W z*q^O2*7m483-bCy?hgz>UwODa(o)zg(#QCYg6!EO2 z-LM1Mv(FznX`a|KH$<5m)jPsslm7nu+ZS!gt=_&M6tqNPIoxFhaYfeDH4FYNQ25BN z0=1ou8qIYFeyV01Cf06?4~XQs5j%v7rwk!{TKzO2Lf{H~wwc^BP+p@b-5pt>81IJU z%*>FfmUCK$uq(VsEWl;R_v&HBgrB!@CYI~9$Bav_Hk90#tXXXArG*PwOUcC}NTl{B z>TJojI1$v@snuCkyTnf?cDlUtG_KS~HJj;cJ;KiIdQ)f(;u~k!T(d*;!n)kv$S}Y7EjRG zv$S}Y7SGb+Sz0_xi)U%^EG?d;#j~{d|AVynbI9-C#L!q6*^QVPIXHgD#QuEde-lId z{mieKnO?L1e*Ryg2-A4T^3z|#(Ej24|599V!NT;*BZju5wHYzf^@6S%Q^=#;T%?ya zwm~i(udpYp=itk!xjISuaaYJIiBb+2Dtqx>BeMbHsd!W-24fx9SBhmo5bc2zxm#<< zXxPnq>n2yXJ}LQZqUmAkI$1{A&=(;_yS{_j$~3fKgmAj(?&Kn#D_rBQv9IsP!I^M& zQcpNGi+*+NN7|i%aPdfeUCfW3IIM57cZLgt2ExUN z;Bym}%=Gv+t9gEIa53*7>ETgity_L8de@~MUS;!Tv=!S-B8?~)wE5tW8Hab%S4u3S~(_*~u^d5KK=!@R9ad&rD($-Fc^cb{QRYyY!jzNzzz@vk&1pRBor{o=d2S5GjHq-kVZ=NQ#q^2 zkx5qgButE2|3Kh}xxeI-A!O1rd)*a^pYQJB@i5nvpD&4s!`h>D13!Gnld-y)lESl- zdbU|=ZegKJ%wEd45XbaT{xzBJqnYKX%5B{FG;oO-eQsUyt(25-e@CN=<{88Y)40QtrU&NPCGq6s}H(L z7HYzM!N8)DRXm*Ux!^`BzTF~TUJEt%ITwk`S$ZA`J3o+(5(@sBo+i*YtJZh(WThYfT z1y0Tg!Kmo~c)Q4eYH(}SysF+^Vt0X{WHHyj z{E-!YR?vI*p6jJ%0nPlDMlA1MM1kZ!rTt(feb4M7!!U!^UQz+gK2g(}jw;XIDZV~@ zbl#y;>F#bU+`7&d)i6eSi_-=$<`63;|L)`KxY#lrM;s;Sg97a&gOiLoUu(0YKrruxntAzz zp1%$b$%WT)i=XGwBJX0Q1!frD>#-Ce>D`(MC4U_t{RL!ijV70thE0Z3HXz|KemI!k zx`%-jD^Ju4C>&*89WK=GZ%q|yCOjbL+Ck`C&>NS?2X76;w-4g+xXPV1i!KM%$F+h} z@j30H-{em3@wlIx4*J0Q5mp(OM6_vAc4mlv`FU}%I1D6PFXo3c?IFBt+Of5wR(U-x zZCOGv8K%yxDNN&myp@>=luyy?r3SZl?-U-lwpy*Bq@(-^IscgJ5NBgswczPO&F(?V zxhm;lrwAgY`&T9?u7lSXd#aC^TFUR3TEf|nQiGqja}X2O_n<7Uq@6jksmAVkHoiXH_<6Me@eX2=`=QL{pSAO-r7ogkj1?N zY#Us%56z~BtuVUCq|oghw>0tpV(%-1;#$*nakpRrf=h6BcMl!{1b26LcXxM(;O-vW z-Q9vaLBj3qeP-^KnKN_uIaTM>Eq-*>>Zbc!Eb4n%@6(UGgPym?i`ay!BDZaW9SSzo z@w>;mqrAO$9M$*4c)~CC!!Gs*5%}X)>+*7z zp#AWbn6r-dEM-dDw&`*HFvvkOm%c5KKJ=v8KF&UNGnv^|WPo#q|A}ds}}OAOsUg9pM$%8lhT0KKU(nUt0d}=;NpZiCaccvjbPv`c>0lzrC5v|p0A1i=C`Ht zL`};aRBf6(16kZA-$UkVq1NHCx)LdS25hTl0;k`zBOd#H@eXwIG3(|RqngL{fn5D+ zhv)jWXMD_&{J<7YaO1JE-&xvqJCIn17^ZPU%zaVJ)gGm610gfd4jk`e(@~53yz~&DFeG(vwy+k zaTBvSQ@?q+*cLr;XCQg&*!|5NhU8rXrEpur>I)n$os+ zOOI4T@5ijpc$Ya-)8FTiMPx2#7sG0w!$QLz#iURAW3g_-8o7b!GPQfr%4YPoS?l`^ zfIw>p($mAg`4AKgu;%N;;+nu&MR`YEx4y=zQ@!9pP(g;J)^_Jc1Fu z99FgQqhBB5nC=&<6-Xwl_!tGfPliI0?#mt~hY#?nVIRQB(%Y20fbm6r;{--3c#r}T zD&|1}Dm;jr;wHHt#tfQrC*BdF$aNGNJiwG=aS2F8y2g>7AkrA9~h+wsh;ZBfLFA>~a7w$51{Z3ApA6y{dkw${cV zyDu;ad{>Vi*jkp&A6p;Cbz%1AKPk~eA7t2zqUuL z)LUM8_rsrNUaR}=y9zM-n@2pPcD$t%mdi)S`wWNCj+x4uHXPSTPmA5&${(gJElsX? zb1#uDt1xFh_b<*?TH$y6&zZFmWtTibFJt1v9B1y2XLet%*D5?!+wQj44bHaK75~!* z+*h_J!E{h!pk@xu>F;jP&|dWE1WXJ@-7SD(d1P%IZ*s#LD=8xM-hp&O#`(}vcs4kHw*YY;Q!BnD#ID#Q0CBwP0;9!-*mDXe%1Gd${ln+x% zL1Mys+|1>1lwv&g^lrU^5!qo5SbCevz!|dt=uG?x!@o+jeLQ2{1KZ%_Q;WTdahBus z-2qJyAGsjtH_HUclpNI*gI3*=DLIakQVf%Rn-4QB*vcX;vyrj;Ov>e*7#*UVMILGI zttpx(_}l1&1jq%+M~xo%#34UJ=$$DT}`eZ$yE1f$Maqx=z46I7nA=tuXQF%;>dCP3HOk5iQnkvHQ8;o!!j(x@4*;2|md{3A`yTm-(Q=Xhs!NmC8m@OTy zzj+QbtiJ+u>69Sr=+F`{GR;6RxWOc<b{O&q`sM71eHdw+pX+BK$@(!6K23= z8+E76MSlA^5S4n11=MAyOA;jct^H$Eb~e3nrnfF5?`)A2pJufhV~CRVT$myG7y-9p zBHZP5GjIC4QLE4J(n@6pjcj>q?-QHGZxMjGrOYAx(m(RFFN3#Ud6h{*ODtfTaXvdB z4?eh)RWm?mkR3}>E$TtfNvgPAn81!rlhlwXSLnC(T}R>QFA-q9c-}I#1aetb4O`)c zCUQ-y^iM)Z6S*JdwL{h3J+#|bmW%A~X*iUSmNw0ujsQY^J#+%;cF{qgFu=ahnU7l18gqWF1 zq;;CS_{@~a(L&6Jw8g&ra!2kMwuvw76PF~~H^4D)--C>p`2fw-r~+K6=N2@aNR{-Z_A*J|-XbDWM? zF~S4U6cMIlCvieVx8=I3ShoAJe1~+1BYZ?$qxUL3F6QvVgjz38J-dO$Ok2~R3t)2g zsEMyPAGT?O1>;i$tMpp6onnsJO}{Fb5+Rf-h4kacCv0Fca}g%5+djmNfAYehen)T5 zFUD@PJ38R6D`5SezibSN6Pl(va=evRR|VN3fj>_<=4-v`s5D_Pq3@4_YF2hG=CkBd zX1>KS7)Lu?_ijqs&r=2oJUn0|DdfQZex$}CL@jl-MAZD#!6huY&c{fjcltOUpCLxI zPA!fd&quY`KaeNoT7D&2Eej7ZZAM<1HGl_9Q`3u*fR}e@&+IbKJ7y4cEa|I_r4#jG zZNa_i&)o|?xM${~;{4`fiVcD6VgWy9OLFa!xILK+Hdfp{UZ9^$^x9p2E^a)ojZyj>7|B*}VG7QbU{Yt7ZS3uyZJ=6tb zno1B6kn4H(ois=kFiNdn>N*14IDrUPkj{PGB7e&lsQE~WG;UYl=Fke`H?;N5h9YH z3OBBHV=fqR062_$sOS>DQjl$M6uX4{on1kd0soR5@=q;w`+mZ^ewOj1ib#N2YO1FZ zg>1Cma~Hn%c!BHR$JvF&Gji5Doja6Z(mp3Pte34gKlC8dN$j7XOP+5Rmn`qA$B7Iu z$W{mQMgtX*E^ZeCuQbz{L9>BvD^!7Jq!E)oZBl&CJ?HA|h0c7F^Hmcp*b1T6kUYRr zMNNe7D|?W)ty$%e&F;0(i5qw7_4}bN!4B%mYPI+yDC`p`>}S+u95#qlD+Cs`x0hg| zjP)EPqt;;xc@BPGF#EyMAktCpMR(ce$g4S07V~ngu^&+nW9n;P45Xi?EV#?&Vc;6? ziA=s}NG+Ehx-#ol7@W?2QLrl8OJZr{b8O6{R-hfS=%1vT-a&gyVb%3bIfoF=oQ_Fx z6(~5n$5hGQu4RImBgG&oqR2{UTAmsBdnQ}t%lCsG$T>x%n9W7zl&Mxxu@G5Wbpx)a zU{<3u;rJ9 zrTCXgP%`z9k&IB2G=oW@2~jYm=dz==6sRmMNswEAk=Ge?843paoKJ3+ym#PVcE*85 zMWgwq19KEf2*}*<$fR5_%mj7j#LA2WnTbD7sE32KNiDKDdz}N`h7I!;v{mj@>{ylSeAe}YopzBI&?4yUyS1K zRt?$@1-w(cj6a%+pm0ghiN%8@RV3|-F~BDxOO_JHKoc5$)Y4gNLCP)CNckpBu3a0q zAi4t{0@%cN*Kw$`K)b)pjzsq%NLU}%KN2B$t5Q1saf$o9`v1

Oc+voK zn~Cul5m2etAq_rse;1fsz1vT7o8mL!sl&Ytt<$$uSvICsrH&t-IYO3c9mZ zRPGE|(&|-t*RQ|kUQJq2d<&IF@p!R@4O;CwKi=yRhf;+FhliKS69w@im3oSj`tYyWt>)IPFaGRV7b*SD@WfONReg1)i zz}vu&-M)yseRAPD?6^ZOExuTknMUSx^Qbx}r zEXOQriL=e>+`H{rJL}0*b-u=$`wC2^KHv+ZYLuf8VdlPoXB?1sOk7@o!D@If~C2KA!kZ-bAbhlDj;TB{`@6=|x6a^sz+obqgIrZ~Xz8JwbxdHC2G^iU$JduTEb3!}|Y@>aZ-9J_v;$HDG=1YpNPSEa)3{&{V-F zN-7Y-5dTyyZIYm}ET8nxV6auoZBBuXAvQ3#^U9PNP%I3C;yRU3CfQoi1Bxb$p-^we z!z|ZYD^<{hn;Kf5Z!_=qMn{&_y`Wo%^nu2wAQxbP@_k$0qAW~5E4$x551wpKG+#Ts ztc;Guy=*+BDrDZ_d{b*@T`tc!Ejvl`yg5IAM#;qOXs)oD+QuhYcP|;d zil6Fxz$Ily_IG*=Rm+S>RYMxO#3afQ#rO99bK@xl%K``jqBwesh&3N4gPx%<`$YT) z=vb`1;J8E&n=ZuHW!L=9n4sP}eaIw#h(J~@5bt?zP*3{Hra!tTbFoyOF<>pBxk{P^95!N^63-32t*KddX71H%?oJ!R@ z>Ssn8&9hh+Di9{@XL{BPDD7rqK&Rt4DRjj=x4cD zIe=~F=S0cBn6vv&w)uZ9OP~(nN8qDF1;0afbP^@&>XsHl)Y4ve!{g14uMfr53|<`3 z5eY?nv#m`v=Bqr~8-`rF^f()@Z^ zN8G8;2LN5d$Y0kb{Nb|x9bLkq#Wp~fVA*-r`9pH)>#REl6imMZ%PEJbIjQj^YI$$Z zr`*z*G`7cUoNqyh!eI@|!rlx}9}oiZ0tLsc#7b5l95}Pzk*em9_TL4?I?Dx3DI&2A z!ag{V)~TYTe3eU*pNTWj;G2|-!rjle_Oty}lYlHSp>533^yrYRZ+#bt=M#6I-q|A_ zCqi|!L3ZygG@gyez7u#&VnxJj-mp|Q90H0X6*1ZN7DOQgVn&@Bor&L(N&I`KUNMoq zp6b+2g!W;PBRgHKLn&S#ZE%CKfUa8@i|jL5a4s>P0OXAu-tGr-2_uPEQVEU;MkWY# zf4yV>+R%s9z*OST#L`}4+?fRjM&_9Pi2KqhQZ;0GMyPDCA*WmqA7TTqjH3@Hn1#)5 z4iz9PVjPZMSU9J-eC59pI|b|TV9}m#WD+Q~L4a75Y4F#9+<_pTok8=+r9uSsl-m;W7CN-&tTp{2`D201rQ8RaB z(+PXRp8t4Qn`jT&3-z#9Sc?^E*eH~XiR>AiwfaJl-sSYflJ)f#SW4U-@%#%b4vUFo z#oS?lk3H}X%u_)LQ&05Ddq=VnlK|iNY>H7^W93Is7Bdz6pRxpEwM|+FvR-2mRU{e3 z1&IwjIOg$V*$)kv^kSJ-TyK+ov)LbmI1<3Fykke~#ZsX+B2$teaFaVOT>?RgGW|4t$ZXq$L#DXqRikIJ zLSw72AklUU<&sLNus=A}W$^G3(kuzn_H$xHIrvdCHpoVhp=|d4BVjjyJ{CIlUByKS z7b1aI8Y5wGbq~{OyxyP|Or}oS_Z(*3v+dHA;A)v_MG7?xB%p>(VSWqkrn;(6=EXZ z`y8o3y}Hh+ERf8z7Aw_@M80f!schw+p}N)&F)TkrbrX|GdUcV$!<^S*Wen^X*riJ) zdSTFD(JR)g2&HPQG3#Q#37IySQ5s&9txU`H*t!p}A0`FyJgI+X z@)FfDtyT_f;$sh_WP+f+osR%R)0rr+PU^rDH29|6a0s2ocoK#-*&?UDoG# zdULW5=o?a&BF`5^&IF$=;1NTm3#7f=W$-i9eQnLWo!W*k4n6?gH7i(>fq3FhnZ-MM z(Tjg37R?1-P7}d&+e24q-^P7DHbQHME@kTqg-lPO&2eWkShkn2HN&k}Wo5BCJm5 z3v#+9Kkaw-IuT{`l3%^l(dp)*-uC?{_A5c<$wpHvawWT!yNC8i2q8kYFm+Frq;Z2o99>1+d3tSvt#`}GT*Qf7d+jA1S*Wi~36q23Zrvz`gBiA1okH}QZ=8dbtP}-(q~U*N`%a4q`+lsIU_32dKJbDQ{_slN+ODgk)WJ?_a2=sfdmto0E0EJ6l%t>Ni zn0FQzmL8)L|07oWvP1MO?rdU)On@P)kw6VD0klAyUbKy9{CrmWj71wqt?}N5Xe~_B zy08Y61{E2XE{6Vqvkg}!XDb3nq#G|t0r*hEJ}USatPQz~G~t5$a+y*^54=AHT!)Ki zoYEWcx0rB>X9vYXL==#dm|=6&{C34zNeL?Ql`~-lJ3b$c8qFwCKG)}e64!PRev>uW zgpY=`Yg8|!Uy^8^{7FukKf8p4Zx|f7Hm1gCxJaSizLr8)5z~9^S}h8O8joCP->Ou# zp5!w>eVTkM5(3O*7AGGiduV+sjz%q|q58(WPC+SgdT^rA-JfZ@xK3ygr^w>y%2<79;3Y7)gh=6%a@r~r zQ*mkv)wS>ml4hgXAC{6tZor;LF;{rT5}@q|$gZmwZP0iwg+U5rZ&bGqv2^seP<6;y zT>B__Vv>~B<=hwtpAa_?wi*$~Nf6vDW7WJ*VodL3LKuHU!(H>&l^`}(EeZtE)M)s> z;*~^(PZ6@hy`6X>@FMO178+!Ez;R1daUZZtY}6p)yE$vd z^av0qM8+fnb*r8~QFF!h?1RM~{jlO_%dqpTg0l+QUb9&px%zg2VL9a6?*=w3KFs?P ze7qTUvS~4aJJ>$`Zp4s2`uMi3^oLc8!|l;%C1?7LLBq6j#kg?ldU$z%n>%|!gCYBo z-om?D)e8CW@`9Q{^UNB%Qtp5=@|)+pRUbrDk>~G=_suU=CQ3sduqjdTI1vDS!rVLc z(Ew0D`tI1?JZq2mnaPAd%bCOOp1S!>tjjuo(o_27xhtVJR}I7$d^-xfo3lws|b76r7GrBvi%l<=+iO=ifW zp19}p9c&=^XbG*GW>U@rn|PfE$a=hY%bXVR4ETth(1gwba?0fh*Z*TpWHi-!kOMr|1by7eX|{bOllSRED@7YLJ1*MBcc z_$|`-i=u>ojWqr!N_YhtuR!A!XuJZASD^6J_m*zT^D`A}(lJ)8LTQb-p!Vm%2Zu;KH& z=gr)~o4`OUSMlnn?T4L{{qW$`uBTYWnu}%dDz+=LzO=RHW>)(jkIYv(g{~Icm#K+{ z6;xDfO$)`28oZ}&&Cd2WSF0#8mgZeA0M)?m=ZtuRj5@adMsR>?fEu70$gkIJIQfc) zs_s&FVApbtF`P|=nyi1Q{3b;C>aiD=TPp1+KOy4)o(gt^ux8{-kh#t%Yux%Z+-PLi zf(xVD3X5%mbLOHx4Sg|Xt;ZVNA}|9yj(wCN?}&mh(Jhf4>N_;To`qguhI8!v{jZYk z*{wdm7Y%rPKt59BPb+^AQoo_%E*M8mV8RLFhl#^O@Y)j<%yMaTR$bq=ef-cBH{ylK zkgNG%KLijBNVTAmb@Tos(SYbJKr~`ip3w;uq0C%}>z)3qUlW0uT)p z07L@?zla73{wNyQ|FdX-7a$s7OyBuMG=T6^G?06@aF&0-vDCY6AO-M>ei#jziH4cb z#^Q#LSAvVvjFE`*i#Y&x!I1PRVss?`D-2YfL z@Y^E#uc`)qf1cN3dM&2^@nZUwTo0qpHvjL^4E%nR|0~S^J&YF}5}0cj?=gyWmjLIR zDjLjb) zK=Sl8;fazh`w>XvO*U}KG%x~e#iE#k=HuOnm@X&=mZ3{b@4+=17<2`s`_#B)^uG~|MXJDP zzFp*&w3OM?&+f;?*h-bjbkU1-;CyLVOnwU7iz^+={yn0Fg3`wfg+|>tIyq_IEXWsHXszWC za=;rY<`ImbePY}vx!aBvsH#ky*T?W`()^npT>IrSAE~H;Y5R~>8Pl%iwiNQXltIBm zn9-`l$f9#x@n-r#TZgGt&8mJCr_45%J29CrkLnB=b=R7&$sDo}%Om|jai79ID zfN}QfL3LaLQ7{_xM#gxuvTYBO_`f=^l>rx82R9jnec7f;q&mo{6uck?4CciiLlpLogzz!!`C^dQZjnsOdT^`{5<4v zAz!(=Z!3^889H(K2|;*o<(V!nJfTtQ5X+XpV;}KKH3&3u8EU`XjhqlLmN!BSdzT!H zU2@n?YMkL?558Y%9Bo;llcKr^5+4n_q8*xT&o!!IRpa}Dq#bXw(ZVh; zxiB`SiJ=xTp%%Fy7rHk!^8-~7Hm{h z)^t6wcZO$%)zrOv;dB!^$cQ*jQL6WnIkNfLvV_T&Ng2ehBTE-EU&BgQqPMJr6iA#z zKxGViVQ-_x=e;n>KGWN`s|zh_XxPIM7li4Z6v-sil-#ToU!g*cqHU zz7HoB=^0$yaC;GJo>nsl!iup6f~Fh69l#PrmMM1C!;3Qs07Kmh&cg{ur?HSRf=-cE ztiyr7a%UQkg}>L{ZSZYcZd&hd@ZGJ<(+Y3@mT1>NPg#B_W;LIRbe#T0KT23T(T9Wp zHSa+$8DzCM+*oq61kBQd9aEb01a|TQ%Sp%~qL%>LE!fEd6rlzA0>W^5kP~`kTDmP? z?8&+JQtA}4Orxi}7Gg!7?UArTyI#`rD&V^Q{fU_}cBsVE$#gNazA2o_H&xyTr_@LB z3~TXB_|iIk=TL0yMm&<#G+(k~9%XuKM%1Z{=<{)I0L& zjzWQw+YkrBX@P3(>o&2OEZjBLfMP7$E}oIA&yV&iR^$t6WuC z%E8=pwFl_-<<*m1NTCFSXj0or7ka-7}av% zVfS1YRg$yjj_ofR2;~JKCBoZmhq+)gZ?n_B-&AG}Rm>yUZ2%s z*e6ST@-XE+ywa51QUo;1CtZIXNLv%2v`lQ!SW$LsZ`wBt2#y~?78L!FK)+ifV^bD+ zn9C%P;2k6N6#Rhi60-`M9MAJX6$FMLZ-Rk?Ln5M=Ncr;72ZGL; z@RN`n3awwsrnfY8-#L}!gprhQp;`Ry5WP?8d?N0xdT{)1iC^K@NrcWx#7_E%=xIjm z{`w84Q>=|?`yS^lIdgAao{Pp57)Vq!g9W;JE|C5bXS2Rpf;OX;${O|-wp;qC<=yWU zbG@{yV}ckIbenyeate+nOVU#7#h9GTwuJ^KGsn%hnQ#hE?$;YJ9w(4?Pp8PE$~;+2 z!bVZ$44XwEtVa8X4jI@>T>U$MG=%OmLS7JB^n?uh5L>^qN<65*c|lTZq~6Y20b!u% zY$RU7$m~a^04cy<4PXzKE$SPLy%X)DEQzk>+nA+vDVZpu;roDK$WQ@7A0MN`=^#uX z!I|<2Nl^tBENYntvl&UtBiY&lkzp_`5YqmtsOd-twaLC4|*Rfp(gRG|~kKrEC-S z0b7oXNqH-gAjSv1&nv3ZVug%6Tny1QtJ>fI$EMF!oi3`V?Qn*49_i!IPm(6&)%?Ob zDOx4giTcfhl53i;)dkG|bINe$`A{TH!i^*5`pD%5ccU*cX7>$jz?tKeZKb-)=JTK! z4NtQ-Pm|=Tbq35`Pzdbv5?mpIG%NVCMc-F**P1~}g z%e<@D+g53~x|-GEU{4M+6n0m!?iOX8_gcUUUsrF_MBm-LPu#q>p>JXfOtiOlW@t>I z>C~lx%$_dUBU zhkfUQtK~7zFihDdoIfY`>d>)khKcgEw0@?drRlHf`d)-+u5mI%+3YeWv*!t^ed)M# zwjR4-%Sqf-`fNR!88p;UXeCmhSg2u>7j<)1QCF}O8p1B$5nxiZn1gk5R20yxnTK^* zZBkp2gY~1@q&-3>3BnqM-&JBVY(5?&8?*qmE2y27N2wfi251vrf9u0NM`7rXup}<3 zE9`5C#?UEMwp&Dx<|Jwv$SVaa#{~0Y4s2L2F81{pbBJIJReyMN?00rtAb1W-N;l0O z4DZsyA1feyA?XvV*1Sjb$sE}jg-jqB61^8TN01D02GsoI0tpl4ro2alk?im*f~*}> z5TUd)YF>N~yfHQ52tcCtS?X4MkND?QQ#V@L@9}SE_T9TTEtoP84P%G9%?#*0T$Hj=#0S6suDn=8c@OEr@)Rr?~ zN^c@nA+0R3!C`TE>Cf7M-y)9xs&?R?B98w=JMaoPUIE7|;CKZbuYltfaJ&MJSHSTK zI9>tAE8zJ55^(&P2F3m9`jnQGmQj+{q;q1`XVziXrPKT6kU^J;l}_*PxdMOwEb+hm zEImCtGuz)+_?2K$?O!mo`45GG*uS~Lzejs^nEr=`AQ@$5(T4%thab8fk(y@z345~noRyLB46yL{VD%5m^2?08Ms2l-lLNXr)RWc>NpZNp2 zmce9VYv;E$>&}*IPYXC+AoV6_oi*3M4j_E_I**~}bwG4}?w|`w!o0BO*E16zpO-7N zY|pQ*pNrTXj)im!>@IKXe2F3vBGp^%eyp4aGG4J7K;DKiMVPgCJgv43+7G7BpJg)f zSZcm}%P#4EXJ}!5|6}iD)xAdajwfk>+Ja}T>ZbGlN94`kc_FnX&2h@v3vlTNvVM7z z@vHCqTnLM80%0V?r+J~Ev?OBBR9ChMHp zs%s(B#p+Hf2FVdVsyCGF*-t5kfZ10Yn7mqQQ*Qkn6<3v(@+!34lNX z*Ixq(un>AHLF4eKLBk`JyuNL2nY%~coiKtcFbEp-hS~1#o`yaPnmUj>MgA~`eg;FR z-wc(9F?OxYQcVSA$$))$=@*Ed$C~OmL?Y$^{Y6_KFO3*B`RU!1idrEH_qz&`Ln;Is z?&;bprs?a+6EKcx@{IooBxvTa{~1WIZ@*OfGmrpxUHv}-2^x7b;$aOrMvvBV9ro)A z3|!2i+xk56eap9nTUlTQ`f2t0xnem!5paa%I1=un3GUvBlRN;#1q3c}VgPXgZ7uZ` z_A|)?$U}~bdB@+0!#`IB)xWu~|FL}Fw-qA$|G3g?rMy-O7v=xfO8NB;fI~}DA@g%z z10KJZ;ryff&#(88zg5b=&;|_ABY5E>flsdWay}7J`G=>|+W^73R+l#i`vAj4&|+zF z>M|FEU07v+D`+>>K&<=1Oc$D_daKBH=WNcyd(=k4p~&Z-4B7m{g=Q1F^L$`Ee9gHCxojyKe& zES}fD=PF)Uw*!^0foH7RVI5^Ux_5kg65uoo;K_`^_j z=^7MOWpo|HEp^DQGAnN<3A9K6qZpI}0t2qdf$h{~Rd$mI2Gx%H z+VH;YGZA@HadSoY=HiOObh6u4QCDr_hH$@y4xAM8G7%Rh)|0TCTm!w4TVKoTBy!|w za*>Kw+4h@aP9a$ob(Lb*RAT-VKQ{SM)dST0%zu=EhRRW*Y8|NeqWq040c}bJ*++R^ za3@dK3i1~~V1TotI#;aFNw*RpVnHNy(TGAaebes2n9n~0^qbEU`bNBQI96SLg2!jM z$|3I+{*}0V12)$6SW?s_^8nECsC)xelhrG5(}02K(`T!0l=7grq^R>2BFl{#RFgQQ zJVrJe?AZs>j5<*~n@*$42q`+5L?y}_3!tRQx`lqZ0?*i$l3@mX%kI^>%B+T?tG0Z? z1uM+HVWU>^@X|SHCn?CS;ZtGT6VAJSTUKGMNr>o@`6^s(T)-4ClPQ~onF}pph3z>u z1>OdHY~oF~idCPMtwTo8qKMK3us^Zq8*y#BbOnSarf$bg?SgF+4x4J2TaRSQI&}d8 z12U+?u4YX>&a$^RkhG7hQnP$3En7@*SA{$Rz8tcTr#}gmPGAR@a|+I-lf*avY+91d zkwQoT^Yx?M;b+%T&pvx7=);s|AF8E~aya~`OceBqU6`6WT02324Ld5#Gzd zN7td>8YkMMFWs=N*b0?7*A3UfMIev8kCqfvLe+?>Dlfd-bL*DNl2yn$u=4qal82!d z%67`0b@jCg6AYWFB_JT*pf>e7V(lsqw9%H!7e&Eyc~Shf3UiFCEk8%rmncIY!D6hh z)KHNWHQIN7V~2e#r7w0h#i@J>PU&=oDHM4Cg}t$EfkHRYQrF@*aD0&`Ao9r(i9g3e zN+i`bW#!Sr4FZDbGW$!8?MywVo+`2x^4pSGTsXbpeG=c@MrUpL(S2eQtH?pNU?*1r zmz$W7ZfNI7V(8%Ys_jPH;%|#<^uj0?s_k4dt)0WIq%k%ESsJk3ETnqyU(YPpXq^HJ zrA>qLMcC-q9XIN?SR(}dQv{s(VMkC3$Bh{?lxrHrTGY5;l4&7jiZ?I1yJN5!OksmI z3*IOc#G@$Iv|^fA?I5SIUUu^ySgm+*$E(3%Ah@mCbe<2~9~1^t0+1E(F}1dPKWng@j3syR8hg~*36{sK z)qpOy+8rDa72qxD9odeVsF!PiCU|0F)zAWT%ei)me>Ftjw@0jRaLZp|@P2r>B)vfwQx{|IK(&*CK={*OdWB(^h9&#tfQ2%D7<63B$N$7*@(j zf)|>9Oa~hCjKQJ(=U9!z##s1E$XuW6^M@6`sWSNg8x=66Gv?^msT)J#Nb54to0LcH za!J_H=+PlW0R%0` z_Gn&LItTJNi4+j$RRKn_eV>3H^R>w^oaK)1z&|FOL!WHSO$k;-c1I3;C5u4vuxPM? z(Iv*rW~yL=YSQ-U$#F0#|?Y0Y~#!n$wy1Ktw)C=Brp&RfI(k%OI(t} zc#xEOH!nYwt{GNR7EUM}(#e>OlUWGl#f}@^FHHyxFJ{VV8Fj;?dP^ z1AKq(YISlJn_A4E*}^9(*-RdN{1VqreyMD}(NLeoL#QPxKYaj}U;$hh2tF5XQKo*s zrg4FPd*F^pYY87l?j50n7B5j?mOC>4<+4Q^M4|jwu2Thm)MzMwoGB=t2@+YrV08(m zIu5RH_@XE{Lnhe~2(Cnf5lKmWHkY#P8q%RlWPZA#Twqp%YVDwpVc0snmmv)aiTo|h zm=OlUgO`D8%xZ$`Kv3_xzEL_cgV08yH~2>DuhO`zJ2J~Y&(wZd8^WSqDm(kMXUC8c zhVJb8+znkJda=7(q(Q+t^7+JyH-xw+4}~CD>VdD`}i6f zk-f@Qmv|F~nuO3R@(S~YjrXF4tNZqxx5q`Fy$wMK{5);SAE2ZuZx=e~}O=wTNgL6tCtufQLo}c{i z#F4`{XG!!7_8J;OZ|aQIeftlD>^E+^z%TV2J|tA;Ff!ajY#?^Qm%GX@V$+VK%AJi$ zxsJ5L;Pn_Gc6??-ue14vTu{rj-O}>h>2{0(&cutY;@hW}QECAd>5b$;D28>Co>`^U zD}W>UG}K~e7tiO@AdG$iP2<6;t-el^aHN}-f8vj6jk&U+uSS1tKQmkqkj_PSMNqmJ zxOl>S{HETUfa!y%r#Kdy!U?fqU5&w!(h~W{&^7ht!+Oo+3WeljAM@q!Gik|vQ}tj? z6+ZeCIr&z%p;j6p_@V)s%bl(oi8x3!-k&!7kwzMbmjz_vP&e_|o1VmC z11kL28_+*e!LR-2YybJ$f4=sgul?t1|M}W~zV@H5{pV}{`G@}V&kV=E=KdI%+36Vn z!2N;ceJJ@`D*3d$F|bum3sU|}?t}hm z$eS=^pj=L_>f8*qiZ0#<_<|B9uuq6xhM!FcsRb4{2)(c-oC?{(?P|||w1jM^?YH*f z?$Sx1pZ4KVps17KJq`OgP0oj%Z5&2bPM(X0Es+*bsnopu_z@%otMP7>mI@=u()3yk6lCb?@I9wA>?V+jj@KYasG-U)5 z9pzLN1!~plU9bYT6xaGN75C&j<%A^Qn(i+lBs#0VI*4UD7hDRzH&XAZ?1AsW)r{tq zPdo@S>Xi;q+01B1KNpFiAudKnTkCxE3qy|e8HWLGNC0z$u}Y ztZ|=2%wpohrhXONyr<#i8^x=k42e&QI=NOQbw;G73zq0Xz2`>0eO9oaZ@3Al9msU6gcZYHXXM z?(n-CwfMfZ)nQYCZ+=rjqQ%>ZCh4kD8vYhKm=74=W{gv_$kk>Ji|VyYXqr&PJ7)iRCb!Jt`LiNpZoS`{E^lo1k<%N`RPgNWw+xKqc@c_12-62Dd9C;# zJya;<&?RyL59A2Z49K6d&6D>Jt`1-iLidy&|4Ss_uN(Mp)Wz??+;2lU+J|Z zUQ6PCK}q}-Ht+Wv`G1hjOY$MxdIMndLjEl_@7G`Z-(mBNZ7%`o-(zqu{OKOf(=6qd zpo|~-H;s&-voT_D4`o#oI>RfL_QX7YA@j=PGp3U%Ag5ezjOtoGmys-$$w!>%{D!66(T^x0`)kdNU2L>(4r+-9Nx6O;5tj;qhU|Bz0 z0p_F#{6kVxJ8kFs8MGEg&R2>;)Zih{EK;ZtT4BdHoez6D6{pX7ZF!i`sNaockRx4) z$$|Dq`s#Zl01>xp#JG?;kR>E&(NW}+!jOnFqVBG-Ad!Smr^oh++Tn~6h09cf1RMw7 zc3Vr@Q`~|J7Kb>EAZg7$S!*}hhCBnZza7K9D4b{AgtMz}UA-djBAXv7jM_1j81rDo zYZ2U-Brb1^=-)}9sbEMKb|4l_N%9GPTmx;TFO$oyubq;igqdTD;tWa+S%KT%GrbHG z;2gEuzzkV2lWenP*KVV<&U>_B+k{r?4P^{5Wz98LlZifzK*6&ksYsK9D+Gjp-?3?2 zCHR&vB?e)kv)^`#?=6sT7ELsQ9Y`frv)O5|=dxiF(eC;7$(y5(lR0{Y2wWR94v^l`Y!_D)sTpNqB00#HyEA{8|CCl@ z1->Izh#aUmMxJ)lLR-y%pkWbV8!~2#PWyk@I}@my+ArXjh)Oa>&pEeyy#I5)Z>`UNt#|eA zwf^gE|Mq_N?>;?exOZP~2{>GwMh&;p|K=PLA)F6$b-NT$yIM5ovN7VnIiG~m>#)nC2^ zv^GeQyxVowv2QQWxv>+9 zcJiU$7xQ{q$Gu)Ob6R4^vbY6{_!sjWeqYR+{9y5kM}CRY8Qr&-Rb2>uxa{Vd$tJSx zXUZ0+ELy(c@%!$6g&Tc4#Cfldve9_==*E)?lrLuOLm3;G!=0Wqm#4ftywqJ6;3h#oA z;Wm{wcUqaw89nFS&S2e^&BxB^p4O@OT%31idSHqA!^mx=vld3yn&irKF?QE?$q~4m zryRG*zgXKXd2ve($~)?%P%2FXQ5%^~Ke} zYUY*)I}M-7Z#BQGzC>4hxZUhmqqQpU1-$%Gv+}y#R;3xe`WAj)S`e*nnhc0zj526MUU|f<6@H@rq~4OZo8WIVwZD#(u5gpE-T1Q zUb^wo43i5s1|vG#B}XoPF)~)mK`X+fXyAb7!;eR`Iad@m-pOz8H1CMxuQlVAuZh_G zKxUhqyp&asn*9<_3tkTonzVo3vKYhN{ha;UADXP}*1lW+H9ztqF1LMI+GFe3d-eO<`!vO{>Z6ryp+a6=kW>@zXn(fW@klv-4fDtTGoYjr6E( zvmnZ1%KlYNtm>1W*O{f9=q^8^w0H4^pGP%AXBA)F8sczqZ?ka;wknBjZGK9bjOgMM zu5lptPN{+Q4a0ptftR{AcQbJ>-;b4t5YcuCsj@Puc z&bsq#i0UQnJ}Q>q>^7YZOH@5xc7I`>`N^#*%`S~98{JxO9o(QcgEFv9#fHDW;D5P*{64<`P=0el{~FHr?O&s z#~ljq(^BUi8x+>#r(Cs<-q)?K%a%#T{W`n7Ec0i2i-#LEJD*?IUDLC6{HLf789tTa zMIDC*Ju1Pj;EmXF*jMNG6+Hh%f&43YryO2YS}(esE1Pt_PGa&nllE{0Z_)8z319B^ zlJyQV$&!w`G+=yX>jyv8zYksC`=0rrY3CwVnr(Tt*`}_p$Ff}is6LO|O$v3(KY4m` zpR&CsBP-(5P_f~{WAGk}eyuItOcWI{jQE7fMfe)Kr*=aqp>c#jf-j^5nwtSei ztllloPv8n({zk1{`GW!jzf6d`8rEaiYi0D0KEX|A<5%!#H=V*)@c!*N|Lr;d?K%JL zIsffB|Lr;d?K%JLIsffB|Lr+>_lNz>RXal?9X$h~t9D~UkEQ#H{lp&rUl8*W#qYQN z_A9Tiy-?Uy$2Fow@`e14hwesg-{-Qg>5HavgUn=F$QqqW95L!hMEH&&gY6GSMXb}h znx8PkVJLFr%uUzBV1Lrm08SdxVl>fZmG0DM- z*_zgKbV|rn0@NaquT3tZrXhMsQTtwo{P!X>Gf5GE>ArJ=i40|cv9!rkDoQI>7wfcR6?mb_tlM(e-QcF$B2qLGQqKBkG3Q2FDM*KJ7^}$1hexR$A?9Ti4cN z%u3#O2P@s%vS8iMR*Pj8mw)&9Z%^vs>zVo@p5SCOei0A-Fa4X4e-rZm-h}+kH9d4) z|6jbOXWS4vPlC~3 z-hX{UFLB7AtjdEopPr5Uex%Yj$A3ht_x^L1y*%AI-qAqwnt!&2%*k%Hmpk;3Ro&HX zUNh?#-mBJJ-L@A#XWfZ9&)n^%HsxS%tbQJHr!tpPZW1o!psqS=V~^jV>K!!XF2f zs-B47c;ar409N`wnKL5*ezz~pS{1iRMw*Tt!7{Pp6z|Jv*G@c zeJzeAPuVPWV)?~hBZ~w4^LpE9-SS=~RmOWnZ<=r6m++ℜ(26DENrp5aJQNmveG! z8=8+ke7%ixpMV#<@AN(Fl<%-Btd%!h*1J+km)0q9|Y&T_3b_&mN zNSLEyc5u7BO7sS$cjr9P45IeN%@}O0F;Ra~O}j;LZ*Gkrd(EJvWs4cT%JQ`D_?nN| zaH2`zZl{RzyvwH7epV_i=+wNwaZxYpYSSpCSs|{+P3r8la_e3;lbn6@xNBUdmmKdx zUV8J3P0O64-;E8iGRitG^Jv*x=Si#A58++NyO=z> z{p~hGEmPX+>s|{@ydHc#BiX_E>5C10-zstgBdokSTdIuuh&`j1W_e;v z!`DgXr+kYKxV>C6XH$St%HZTzcwD{T!GHh9M^+E-wEp+e!tfo9sWJqKIFYHEfRMOQDJ zl=jrCNOAOq*$W;Fc+;f+yN{Yrn)W%};n1uxOFON7_%L_!>*&@y?%Wu>E}-j?S7#gY zXREA~HC*Wtefr#hIbXLMRYw{|McsPz*x{m+X~+oqn4BkDYSvG19o*7*UA$h#_I(LY ziv8Ahi+gmW(}%fF$13)z-M8ee*_zbDXDUK=?VQuY>3YvjL$i6}1Cjr+@L(*r7MOts!o{6h9E2bwt>}Y6E(O0s!Z1*L- zefJgLs6W!Rpjpg6eCa(OV8pQkhT>n>{ zOk~1VjGR9-W%rxf_`9p~v}C)k437w^vx?Jr+;3RZE??VvR!evA96G7)(vzJ{x~9#) zP&;I~hg))HlK}UYZu_ep_sE5&Ys^dY=)LsEjXG_3I4>Y(UO-XZuDdo>HlEWIZCVV< zaWz?~8@tv%VZ6$U`&mOS%T90KKE$a1rs^U4u19qJzOf>sUH9~n-9u%{b_hP4cjWpY z%gK{Z*ok;J@B1yK>5K1M*+v*ND>zk`QopQj&evPxo7&bbE9ZZ8?vDW-Cb<{JrR!{Y z(W`6#@4Iu~MdTKk#qZyB_Ey49lY~NVf7|7bYe(qsTGDIYz#OmIQ6{}>t~BXgJhYWv zWVauZDkoxYMfdBK?7MG&A7AZTW7BHd%w3i8e#6~MMTXV;_!skJenqylsqdDSa=8+F zIB)IVnGwm_T1oLEe+fRDcZvLL-s(?7EXQ}ZPq=G6!lrb0zgyj#_1Ss0)O%?MPpM^Y z&L1VtP5f1CG<8r+tK1R(77tb3ic7;iQ|o)Q*m|kQbj!Z4EP2nhFO&}(=T&WUL~g>% z$lTUl-R*~#>ReubI>#cZSy8LbHhEnnZ%R9~sBC>q>RTt%rWW1Xc%E&zGjj#+(%$kx z?T5CBw7+Y+?vc{TrfVLQI7Oz8>p5Jt#yi<+Lf>1ZQ?Ez7*d8h4sip8_TLAyk-gdVd zjirmK-c~->4~*bl+Dq)*|Iej8h0`;So90QjHVVHz{&j+6%)qD$-laW%rPHtE<;M;( z?0X<5Ygp90`cs=tcdYH1V*SAVOhCSCt*ZLRRVfEz{8z&wzxmLbTw$ulcNnCa=VR| zu0Qas;gOZ;TWkK6y@6BFD|;!D_-y)p0i?C)HWbf)dkm0!ln{21~1+u+rE z7YW`QeYDLD{dW}=1z+zS$vihLIN22Cg&ApPcd@HV(-oKsa?`QM=?L7bOJpb)H|Lr{g?L7bO zJpb)HpZwc-{@Z!}-Ss^aeI4O9a%x1$%KC|aeGmIDFuQt@xYcTfX+hU10SDJdwO(n} zdRB0M^@zK}*GC*aEbp@0{z9Q!e`$Hy#G}QAUA+f8HjB+SUFo7VR53Yx{c^>L*JPi! z&0mMTkJDLk2=9HIIlp-C;|zV#YOthhhV-KeUwJQ*+c$RBk~VoABnl6|QvZ0nr2no( z%Gq{_8DrEoR6p&I*T>@5m*AwZAJwmaZtT`>+M>McUB10eHOvkDaPGdx!n&W)C!~~$ zu0^C2-<Q)H7&d9>x`&=yyxbEQ))V1$>e>}XZL3= z9oD$KF~8vCH#)bHch7I>gCl)(qOP{h?sF%y{X_e(N_~TY($nfIYZ{E=bK>X6kM@eP z-8)zA+<4#g8N&Of&&7Yf>GS@A6W=_3 zm7H{weUS2N;;2E(miv89-ZbQ%TA#W*wM*AM4X<=Pe75H3s+!4W5|P*SYK|HtwwKu( zw+??BXHVp9oSMJi#wi1D<6LMq2Y(yqjf42xI9=gwoM*7NabBwb$$uMXhSyg=)zifT zcO=()%O5OWQ&O5Ws#q?qTl<~o6&H5aKG;!f$zW|=^-V(+O3u4zUv&)OJ*O8}cd%r9 zN!it;k8<$m82O@i<1gbh#FjMmB|gF75aSXb@?ZKlB>#rw|H&cwtE+s-(*D1Am2cwE znXlXOuJVl#?lmIi?VZR%FLWPK-LmFD@GMyocJnxwY+{Tj~EH}~;g!x{ECr0>J-bK+O@@!L@H z>z+(fll~X3m0il7z1sc8ECXfZX83D3{Ut`pbaq^nQ(n@svecxi-NrpzZpEI8?UA!K zI+}NpZ}g@^!&&a&pO^~IJc)M zmte2qoO3+#a7d=9ZH-7zxB`@7DuwwdX^?C$BCr^z1c zGw^<|S+_KtGul`J3IjiZ1@U`A&kJjz% zsr0^RK(6glTffDDUst8REtJ`FGehY~uTZ@s?;qx|3>FAdy}MZ z-8G%!>iDopu3m;i#>w~jP9tSYoAI9A+rHmX;i>0=w=43^J_J1Kyx(#5sFa|AQ&W1& z?Orr!d&G(>-3nz2&VBG!E^=;vtliKSR>j&qHyv|}sq49@ZH9IIxsunW$zwE^Sq$HP z&tzAV_Q$SEnjdjhh}dBfJ>@~T>HKSwhMQ%cw$!_GzE^vbl`?l`4!LAB%5j<1jLq%V z^woLmG0>&Y(S>jB6{y)e?sHI3TB!KSal_ZQm$ynkmz>(a{k`!$hfOc=*>691S#am0 z3!ZH1>T>4Wfd1_sO|LcC)3NJ}IX~8U%RE*7A!Dsr>Gn{mcuVks8_u)Noyl1KL1OEp zlUL^?zFj?_?9KT{u`4V)TP0*0z0dSlPDuAzp;JC}X0_q8&1I6i*UzjSzJKl3)QZ?X zokmsl=#kd*?beqkoLi>mG@I!;(!$QW#i1n)yiUYcI&%A2G|!CAz+6>evB8r@B?8b|~28ZJ~9rgI2F_i4Vi8 zmoDt9VtxC#V{vhGuT`TSyv<$k;;aAjmp)xvxHOD7n;*VZr{kG33(mCm)9@Q-DV(XC@F6SdFY)DB7Rp0j)Pt$R&84y6^0 zo$zev6Rp|(rnNQOr1@dr!QOj!w>Guaxjq8s%ht7k+5;)as6G*y!Usz^1(ZPM@soI z@BG#4Tovy0^_!euwtUYc$44o%3%eh6Jv?Iks}=z{=3VZXm#i*`E{ z_wDe|-K^L{4!_EG%iNtg__oyjO7ESrOZJRnYV1#v!4@E440m73QU+O7#{t?@p&JR)0a{-3LS z&B`@`Iw!vf;9ceGwP1zQ{0sTVKi0)Rwwk=9`&LWKTLa%$IoR}Y3)eDz@6-I6d8D8E z^RpXAwd$dfaNK5AD}(ryvo=yD#^E+68+0<{LUT3dZ(U`0Hq0m3F#NvG+plf4M;x*- zH}MR1sM+=rEPb{BzN89*DS@@(|comcdPTZlFM9V{ zs2Y<$=icJovW1R6m6JZ_m79FdYbt#`ENe^X4aYGPpWBW!_j%T{Z}slmFK703_PJs< zez?-IFJ@EPNTv2up0fN{dVcSs=@0BTW!|rqe>SL8=GTHFRqlcH3$NArMt3kURP8zJ z;#y;w7~k@C!Hx;*%Iaq9i64;cb~f9tM!NOe?*rCKPhIm`?UY(fbYFv37X6#1%6qiV z)d=|Zxl_5KMS(`m+2X>P5!#+t^9OD8>~zWgv-`S7QZbsVco+DVrN%89-oD0rr%Z5q5aDRVp^~S2lwa@hzM&y>lr!#l)O< zf$zccvhe{)l4ZmNK6B|m&+Zi$&j0=FUi#^fEvh8=SNM7lof-7!?VBS?f4_axn*a7qHL2q_W*bFY_uX-FX|F!TUtanT z3g}`!OtM(P=FSw|tuyv3=U4Eq@U;%K$$jUjwl-v6^|Q%yc1CA<41ag*VzOHIFK5hM z%5tKfeC;?RvQm9dtJTW6@2{LX{c+)hTZdwsd)=9C_)X{3>D7k$N;)f6J*(?)D`nn0 zT7TU3JFaJLjmez&{$=N$6=6Pk<9xE@@@74C3i7ITs&K5ymEAHVs(pTyQq}#YmZ>d& zb(f0EZuL-IMYiuldG+|&J||c9oVtDW63-cL-}UPiw%f9PKKwHN3p{I}`+x9R-1>HN3p{I}`+x9Q})Fyh~)^Z)Bjr(}~s5{i^h?{$^nzjc%U zzt;E<32PVoQFgXtEr*P<=6z+Kk+G4kzMhT=?_YHcjd|ajWMtA`Rze;7|4K@9lz34( zbe!S*GD+PLYsT|`LTo>h{\zjH9}zt#Bf)HO0N)Iomp$Ip%ZW_**qb#L{6=aLc< z1EnP-M*aECe1cUBezQ22T?Fd_+4T)7nP$YR3&f)8qVp#^elPCvuAYip7r4wMm;rQx zzBA9cLazp>{q)M$i`xH%Tkg zsz|wu_}NjZ2s!~Of|$sFTpv_LK7Ww`(>g&`+1b0WQHNMKODo;PkJKuf!JBt+y9jj> zUqz75aJ#J{^V<_5=RK6CqDYd8x@m}?A2Sufn!2m0MYG264h!ans^~iJmI`reN0A%7 ziXgQOM%px~HKv7yCSs+gYhqxEXhB#=kcseuii&@*{T1a7XI3+8naUki|rW#Iu#3lIzE7j^&DVJpfV%JPBY=SMMmp3{S-1^NU8`^@(5 z7aS5S*kM>xUsU6Y$P$c1onN`Y%f1=ca+BorlGt=b`*~ML~#OeYuksY}%s1}yEh@Tym7N8!mTY#9z z0M~+GeNZhF|3wCWTc=k`lrSyOW%(>^!A9!cf{`opI*G3Z$me9BqR9MqEK^@E;=zP^#3ktecYIOjeY`wM172L2P0Ayz*5m+Kg#oVp1|7h1m=V!nmg|=>Ple?5gQy>ch4Q$ z(X2zf`GQG0B1ujO|KB7@uQVv+4TaBk)P-!!DpJwRax^wI)I-D;;euOb#~l2W7|JHR z=#CkAb*TKkMTFlV%;_%@<4(waWf`e^E_}Bj@^QAqNvpjL6IWtO9< ziO^p_x0G$La}}5oate5v_CDU@@tJzB@;50koefCSreQADO^8KR3bjhxXMa&CDyyh{ zKs_u@#ZasG{FhXiRu0m&uK0*q1!AIdza>a(mHYMop>pC|1rqxh|59Y4&kEfeEGVtA z{l#A-N-?k^&Q)ODz4w?$vkviU3MPqKWyI(IO_KChfkLV-@WOJ0nCLj!D(IDxPg0Uh zj*9h6_0hxHr$bPwK-Gv0@G2E-sEzyfTPo<466>bSGhjLyUwrT^jiy#(b%LykEXj2; z`Ey3bKda4>W}YRLQlLH{VTg%L$n~1^ClhsECM}x(eI`un26d8C9T?5u;n8I)_}9-k zB-_O@f1j=RLiv+dzM058ua-+KvE&J5I&YhT&guYJ=6N#n3Dk02+bo(jh<9EvM+c;q z4ekFYInwI{Qp`HAmnKE>n4p`K9U6>MG%z*MLvL7VxdHVFOs?>Jxa2E;^~0`pC(%&O=m`DFbS|^@=i1_tiF^F9vD*Y-SNBaOVku|vw5r48)=VdKD zn47Gb_5(;ZT^pCj?+3)fWP+v+N64awa6=}()PccKPc+jE%iFug^Q2zMlX@7!w7`m8 zCT9MJ8F|$Cmyf6(3GysPcxKsg&O`rE0qseBdyoc){851_*xi*q9DO77nBGKsIQD@t zCmz400Gc5@AirwX1%IVf@LiU(WjgXe^rY)dOu-NnMCAIT3J!2*xBgTLhPpH91FGP+ z9A(Y4A3$a}Wk051h>3oXH_NDkW2bV{5AhWY43;I{BAKjOU%on)r{GeOf){(R%fw8< zFeAHu45gVFyhnmOsDl0cIp?8QFyQ>`FoXt&tN>KOlNPduqpPEf9zRYRiz?WrFCGgI z$dP~#lUwi4 zJ_Le&Ko$IxqpX?s14t6@U&V9$O76Sr7~NNRS6raCj8wJoE~N^fe;0X>iC2KovYIjx`)T9b@#wHaHno zFk~-W{NXw}c~z9V;98cmWjgXew0v5m*=1s; z;6F3+Iue^1;1lkVAP=fw>;0Vb&?^|yx47Ml28XNwRKYsO*u&8?L{F}BE}^6Urx}0V zfP;^|!2$2E>A$}b1KkDhXE|G@BM(Gz$Fyhhcfk-7%ZXfnRKXc1*sVX6f+0)T1&h-M zRKfjEa+CGn_T!$h${Ff@;46$?!DgqqAroK0&>hw3N*EKw#2UkyG8Xz-PUI=Lf~4T? zdF(PVQ!uQ)9_j69W`@jzDp>h4=REWZ2AqvMeqsuSm}n1K0jPpo-(d|$Ur)~nxg57o z$rd>a-twCIAmV6sfr$*Ig4eK|Ez^+)BE4Ug*m8ncRQ*u}>z1=ye<}q--9f<+6ItU! zAlL^~!Py*T&9omtqS9c8=?Y?DGI|Aj+~=kr;wu;!DsJ@=$s`+L)rEf$5kpe&Xx_7$ zjbHEo^Qe2{|JOga2JqfF$eVFy3Wgc^l@?AjGx+Kgj(C5jE&H<;5J^Uf+2h10XZYFEP?tUVmr&(G97s!IzHFIkH71Jm>?q8A62k2??(Q{ z*Zkj&2fzMQ3eFmc_5ordYkUX<`+zEV2S-^m?FW#kx0r_M3Swb0dIf9p?t$i_AL1(* z7>eY^iey^ZzRO%E%3ZL+cXpYWDHvwt)GAe)nZZ||AP=hGpUs=F+9L`cdIdv!nw(O{ za3Cg@99aSAF8D<|)^H5;4bWHdHe{ot56vL5#fvX^28kX-cqy`*Ez^+)A_wKuSp6X; zh{*Lv75t*M52%7?C~=cD(|!P%T}d>iD~O4H;46$?!7n>;Lngk0fx+Qi zm`El?WyNm%7yPa!?SjiYv&%%GED=vm0neCCss8+J3&g@b668S@e7XncJoE~N^yikW z!4v>7fkRdRs^Fb^?BN)jpa&5j@1dhl78X7rP1<^ngKtMh72H{$-E5hTJP=IEa80roO5fBqully=wcrQm;GwlbE96EFZ(-p+RWb_I?Y06DM#8)sd ze302HlIhXui@F{>1wSMyc#j#oOw1GvGt%PVRhpT>SDzpcs^FAiob%8t7;w%OH>bgA zRKbp{;TY-|pa&66nv6isf+2h10r8riEhR;H7Tnp1-E5hTJP=Lo9WtB$i4HMAM6N%o z;8V`*5>Y7_vIGT-(+5<+7UQ_d`fvMjII98E6_67BXlxf;>%tA0_zH&Z94@KDm>?Er zib^Qc9LG~|6-mLR6WC>9reNqv@;FnPnZbJ`$b%~QJnvdPONT|6vnY7z6%07HX04~e zAu9mg1s|Ei9*&+KdJxga9#^pWeEg?UFZ`$QVmdT#vvfz^O=;6e_XYP0WH(!;BM(H5 zHrKuQ3Wk^K*Z$64-x{=yaf`1l#hooSI`Rp=LC`-ga1kA|nD5V+HGlQ=_K^|1W zKf^iap;s{Als)|-wgONEzldfJ$5=IEa7(N2wr#O8;73>|$P1a2N0Yup+nx5v5H^f9g8rucG-oy==_zDJw zowH723WiviNn5wS$4H)nqe%*`*vu{yGX+EbO)bV?GXt?G9#p~kyEx~eS1_c1+_^su z4p{-Hg7;;xhGS%)i=G8L6yOS;c?N$#nJg@PKyuDMDVfFF1y5`${B&H`Om?$nI`Tkd z|Klp5dH_UcrD< zfBPg24p{-Hg4bVR56935Rd7eek=R)9PO zI1m#{j;sLJKW`o4zo{$sIcqq^hUi;*_Dw|%480(d#cMBk4zc7Sr^Ni*#RfQ@{Q>lb388)W@1 zL%?ERa{?y5eF0&MmIr2Ex{0w&ZjK!T^Ebe#twP_hio{I5fb*bt2{tbf3wKBmClu+B z?+>nV=-mt1XKy=8Lqnc^bo)DAMvAS=ipIt!=*uCpBG9oXy9%Fz0yq5-U%)84Q3XTxM7DVGUk^E))t`3= z97nnp;yTOOG9CGXJ2;W{v4>dwfsh~~*B@2zc5Qa+Po-eU5)>>>A5aCW_2wpPru_i2 zn7Qib_#cT76aBzf7`=ku_2Gt0d<6qTvks>)1w$;%^svjs&nf3!n6mwKD1w$-MMz7#cBe@|HU%|j|y1$A@rmpiJsX6i#OnxTg@hEngm?;=$ z#Pr)Fnwh~@pCAva;1U4*3V28K3Arif&!3p&+&TK!~_w!{-}aq?`4;WO2LpNC|I06pb8G$$4%CM+mExK zw_~~jQlcOD3Zqx>xBc9ZiLYQ_i1v-cnCQBdt5to^nx|m$-DtH3*kxj-VBk>+Sx+-F zc#i~mPz4v|aLz-oV8E%|6-|RfRsgEtz2{lO(KR$g6+E*JS8!l0{!B*VIXo5~kiwX9 zUw_Jj2#pKuX3KQsfykoiXRQ7Z6GY_tqYCa@#4Zt)f}!qA`hY6;=KhK@#>@qP^Fw98yf+;jJgZD^~2UYOJ zkDT++D;V1G%hCzMftY9ySplemPc&)D(tW{tdOCXOO=+{;Pz6IXh-~rV3qF*Ao(1bm zv70T^k)OK)CpsT_468p75=7+sqYBP$#x4<+f+0&#usD4{6>KQYP1a2N0c4#Ov@r!k zO!T8M1)pxg4Vm}~1_qg=o){Bdx1Pwn>f_AY1wSI41@Dt#mx-Bzfk#hiC(X>@Jrd+W z6}+`Q=REWZ2AmY9BpMvD0#F4@h!a1e?{6_(k?i}hFvCR3Wgc6S~-Y# z^a=(X=l8v6aL5Wk6>L43H5`3?BV**zj2kv%kh5UOUU)#tf4H+K=k~44px7N2_ka+Q3c{HgJ5S{%Yo`4Gl61XH zTvs$?^a`Hi!3`M$1^;Hq>y<8&X@2ha5dH(o>qrWoG>u&*W(tNGNiEN&nHhZb3G$!{ z9yXhE9(o1ClG_-Og5f|+3=>%asDk@1VhzVo-xR$s_<=t<`p^s_TfF#FBTb5^zb+$< zhrIS;*pA$`T35@IU=Rj_3OYdFTbLN5ybl8Y+1ZZjSW7r%#1^jO}vqf(p&pJF*% zrXvqTW8cli>JKqN)R=;&>|nS4R0@W=gMuL@vc^Rv*auX>k2%VkX+MC(KOlTWaRqi=#9M0Aj|Lk=P!dm>xB_<1+y_W411Ij)@L zY?+Qc5IuiZfz=;kf{0vybQc_)%WnOt6x_51{V0T($eP>-RKXuP%9?3EfW+k2EKFAr z3zN|+c@qP^Fw97KufsGmgRee89#p|T zS2^dQS1{mIJj|rQAu9k?@aVhj;TW45AZNjr6Ho>B)Wc)p0ckgTaK|9tIq)vhS#S}{ z*)kn@AX;^7zM6@3Z8h6o2>t~A4fgc zVY;FtqgQZH1vg~kD;OA}^}|In<(jMxrM@G={XV-)%oGeWGGL|_&CKAdPml*yuw5PJ zJoE|%oI?lSUW?b;!Y6j?Po-d}JCi=33Lf^Eo2;4k1ITVSDZq3EG0_iv zyy+D@;Ttz(;wu;!((`geGL2R?(s1YPg2^wd9QvJICT0qT8EHRt3(d^nJrd+W6+Ey- zGq#>(z??}9TSIrX&=M{5xM@Tf_0SGtv{85r(Z)q3dQLIs^Bb+vS!*3 zAnSA982jE%h>3nQreM>~-1I|y1p~v0P;HEfu3PD)ZJfqZDp*sQT_y@;iTLVdn2|o( zYiVW%?~x!6s$j*Qob%8t7~11i>y6<+Oe{IF0?=Ksls;QH`Z~HM=mW~2Uib;kAhN}a zzvu8HbxF$0af?~bmg&d?$%~@F-u#0IhzTNc{ZR$07_nP_Dh01m!9N1wr#O8;6`aUX z)=c{WMA8ksL^4^P&gsj)DXo%p7OZ2&E)z2a!;G}M zFNe(x@Co-wkOx(8=V6@l&?^|y-+5V<28XNwAq6|KhNEk!hbmYj79V~13C$2LKK%pA zi&@T=>Bs|#Ev<0RL!n=R9k z2clCoewczGCWy%OM-{v@mR%w$1wWHU`v5VKH7+W_KA;M2vXPstnf3!nQly$+;D01S zEKEj!IWBTDH)P@~7#Osyn~G%mRdLgo|E9G2Bn1a=VV8-Sf?-CKqJn5<248)GJg9=b zk~!z0S1{oGQ0Rf-K)Z+~M^*r;;PIL4;TY?nyWrNL=;%ZCM7E9Xf=gM>mg&d?QF=}p zR)2^IB69sv1v?yOxBgTLmUc$_05Op@xeusP|U;9*DEWn!jan2{~Dl{7PhuRcK@RKZr~IOm~PFto>K z*h35lVq(dW72qnN$-Cc{|G(C}e+Ct^hNG{8KA+qr1)Y581(7UXd%-WwSn?-XbzZW^ z*-e(|zyr`R<;4s5doG9xAaeDm{Q=@v-=u`q>Qng_st$jOKujb}?!xLnN%OmKf}5n7 zb^}1tS0!Ppf>;<#P`}F%Fw2{qbVGdm0>bJ8Q$!+}cX>0`rX}wUJ^dvlP+RrB#VQgr z`NDi`7^O}#FZj|E#0f<@Bwxif4!wJU#w=EohK4--==S$z1A8>a#^~K>zHdU4%m+WTCbl!nT;nXp#{ty#H@qPk zFwDraP6ugb248)GJm?3CvZORiHw5eJ^PNS(L$6@KX;m^0!+~}YOOC7nbo<*$lkRx&i49OG8;YG97pTnxm(+kiY$fm;fSIAKm_TZOv-+ zsr>8F5$yuRMAGCgpxfURZjxr&4FHjQ`vOxH#KK^L`bD?D!`pGv4e{*@2pgwXibU$R zO=8v<-u8DDY5S|E$SM+rtVCRagZc2d+?Hlu@TDh+gKmG7HMqtR;ojdm>#Xz;|0ww# z6YGsU{iu7T`msi1po8vy*RR8;ewzXQI2^QsNER=>^V$}JB`;rHI_X0nv>i+$dFYeX6}Xga67O7n-_6#gxouXYaDv_LiRVp zd}wIM(~r9M;~4g6gubFk|0p{3&f>j@40*G9F z)V&=XSp}kUFH{{q0U;)m#@#E}1=PK9+$7Dk8vt^>k0It>h=sxE-8;;glWvIbUO-s3 zw692{QF%IB__v<%zn%#FD_v(Ct4Pe;3-giUaGYjd@TDh+gSuDEgKHdm_X5pBm7_E? z)=c{WBtFw(Fj+w?OeW}G^w`%q zn45lxFJNHUbU#8Q)8}j1T_*AbOnwi<;JNHFF*7jCh-ZTn&CKAdPml-wKrvdzIS;*p z0msGYJEmZWi6uu?0IJ~L>)6B5Gc-ls198_LRd9JPJSMWmi+@mk*tTDk?}6CEa<)uI z9*C^=9mbXu!~_w!{-}b7tY^3WR0@W=!$%>+MAqa!pbEagQPxcR0VJ6=C77-t7AB)t zu+K(r`XRo8fuWVj29Zp&W1GiND|qZCcA1zd7-rUZQYg|-+A1bI*e_xr&)550mR{h$*CG&p1hpbA!% zY0lOi&Bpo$hR811+#FRfSy=dh2)=&+eGfz&%h@s=c_8xDb6m{dbwNxlCvyE!1$Su4 zZvCkg40VTHFvLXGi5eJ^7oLx9vx{EAH*}&;VT{mXHCd(u4?wLV^0DeeOaPIqkKT>;QkzvE zD*ul0VBQ7vZnW9GIZ2vnHvnwlwo90*ASSv&-T|XeVJP?G1WbJU0>a>N1sD?D#3(nU zRgdD?H=1-eTC@JFA~BOM%*VFHXK3aH?~ou)DDs%%3p1{9=-ms=Q9S03(LhYBH}dqO z+us|**rGAeHPSUfw!fZ-@Uh?Jia&+{y&$s1YhRVU^7&WFL*P+1>}Jb!-hs$rX1g%{ z_7`G;h+Kbk`&(nnE)kV}q3%rjfNp=iMsSn$-}b|4`Y%jYKuYw3>|gY5H0jaYkclr~ zV8~u^O(auBVBc^2>u?WA+ut`VGchwT%*gt&3N$l=_ehWj-TpqEz;2Hyc<2=jIJB*0PgKEk%kWruKyYaVj^pN2n73pD!87bteN%$NGcX87x6z5Ar>a1KY@_; z;iezrD;O9yK2Q?L6tzY+!jbY2_zlZU6v`6uC^F2*^9$2yW(Hq zBM(GvX82&s31U(8M-?2E%x?Xu6#OKJc^^;(%cpRYHPe0o*@ZPBn64lu`q7wzGxu;q zCcc7!A;-pDBvX&nnOY-x3XUQjL~KoEmx-BzVMg{JpFuM-c#i~mPz5i|;+%(G!GLp7 ze;S4Z?IM<3V+!`lV-d#yJqxa_Lq{L7C$hzhPk%SsBbKveI`TktH1rKte~1Ypa{W;S zPdUeK{izgOc8+-;Pz68cC~Kzu0J8ejL`+u@6a8pR!M+!`>4*3V28IOn9U_?)O~?x4 z-w=F{q+sU)cA1zd7-r-}Tn^35;5`!LK@~i-lye?>1w(r(TIXRn5EDy|tN?TutXIh% zj*&5X5b;4_9C8o=%^>oX&E#Oh+Dw4*ASn%0GyJm>?q8 zA62mALw4&=rC_K#90);7WKHe^s^H}uW&OAPuvMeDw+Ppb9?Rz&Q`Sf&s_d=p&|Jh>2k$D`4WE z`#bnw%CO}NdpO3({Sfl*sDR12;-%l%wVBnl-*4v$`;)6WFV|LI+02#cxC777CArvA zf>>1TJ^t|UYcKzUO&%)wN*Ocn!Kyzw^Lwz4lbo6M0=O#rwY|vyD1?~k1-`Zf)r)?( zZ<1)i(v9&3hQ|G&7vhT-2!f=lF!9n&OI%f#?k+s>mh<+$p-86|OR`DCOuInS{p<;B zRv;Gck08w=gl4up$29cPh2-CMN~M7zOBdbuPU*xNjIo{xs$J7`bmYmJ!bf9W<;!I1 zH}c$LIa{W~4n)J+sW0OXJH*6dBG(_?_s&;gxBf8hvJ!k{N=Qgbbd=Cq$-EEfzV{19 zSu^bikOie`VDg2S=m%N8=xu0;UAXCo`1*w@nb@ue#ssl2Q|-*?&-@4B$ghKlRA-lo znSh}uzRMM`nSodo54!JN(1&v#dIdxJ6Wo+(aL5Wk73^)o8jgvPKC0mHU(wMg3kx5R zRk04v-zo0|e#~;VOh+DwevP?~)gNMFIg#s+Dmc`f-TG50*x@GgKA;Nz$x+r!`vGLd zeP?01f|%$>V+!6mkehypuV9!G2WLl&31VTUmBW3m^A*hB0i%B}Mh#+@iJ5|-C#u>B z*vvpIiU(EjqLG~Q&?^|yKeHi@28XNwRKdRES;H~a(ML~zXK9SbPJa)C;}2tyg@q5u z!La9Dno_$J6Eg+Fj3|{E(98_p zBS9Wi!4bZk^Uy2!4^F`sOu-NnOOC7nRKbDs*u&A)M{h$rKO0prIa|E=@*6DI!NbVt z8Qlw(vt>H+K;(IF1-6_Z7FB;#!5bE^TYoAAhYd&j05Op@xeus<+b!fKYo`4GlCH-K zFkL|`OeS~=j2=Xs4dsSRd<6r8)R%mbOywHWHo5T>OnxKJfyL}HF;g(`%#v7!%?!lC zJrd+W6}&r=a~^sHL;4<>!8ACHDR}#4wr~t}^!3q~qHWlMjy_pf_~@UJSe8&lc@WWI z3%l7e9r?7=I8jE{H?00ZNGvCE{ZR#Pj%SyMO2JTf*absOWKHe^s$iw9++@wPA5j0y zPTw(I(UH+BIB^>{Wa29r7+hPv7RfZk`qQ!r)Mvrl*=1s;VCYd$bREsi;HyuN2UT#` zKF)dQ6%06QgI?0$kQE@b3qHagj*%Yv<(yaLT#$nZ5SZ}jA8L7VUQ3>WZKZ^7Lwmt; zwoFGJh_b_im-7!IASQ^&^+y%FTCtiLYQ_*m=LHNT%!k&3f_ghNvVRL>xWAE)z2a!;HLfG^CjsyhnmO zsDjf9IOm~PFtq35Nj(e)Vq(dW6@cD`w!M@!96j`6T!kJgU}y!AD_(k=7v7H~c>>nt z2^hVspm>ALT$zsh_=z}==GOwO_P|H*kZX_LhIaTSn>s%5i{)qO``N!npwg7BS?eZhL%*#F%7+R0p`Z~Fd7*0;G_HAu-B}?=Vbl8JKf(3^ih@73&R`B;(5EDe?`lI{akaz6X zpGv*(alxby=)U(WM_DuN2ar|Br(&vtnCJ&tzUb+1_(yK~A-;Zr;mi3HkxVgb+Ivwy ze&P3tT_$D%h8aow+>K^t@E!^Bp!;4YDH)dT(>BDMMZrU_V8BVQ?S$b#yND%6RsgDC z69x8gjC9b4kX5du3Wn^7Z1LjDq%RpmeH&U9%h@s=c_2F7eK%HrhzTNc{ZR#vYRhi@ zsTAC7AKC|qiLA+eKoxwAqpX?s14tz9KE-qeu`n6^(L+FcZu%jDZui}9jIW#DcW@hl!C&+^;*s&|;JoE~N_PoB~hv7g>EIG0Q zPz4X~#~O}-@Yf?-sZPL7e_{6p%^1`co-*%|}$h;`9Mka0*9RGwlbESyZ&V%>SzdVxk}T3ZqxBtR6T0 z5MRN-aOJ(UNT!Y>P7IzzdHVZ-WhQ0{h8gL8={3#F;5`!LK^5FEklh|p@X#w5+OvDl zX$%KqV#$#efGW6V1ba9phUhMM^iWj6&riO>tzPX6pNF;g(ih;6`Lnwh~@pCAvaVAF-1^Uy08+GBHR zA%+7nvE;}KKozXEiZvV~6CGXTWjwKuPz6IXh-~rVxA=TGU5=+;bJA^S@hoS{bmW0( z*vHnZ_`6_;2_ka+Q3YE@uv>pB1wTB&ybq{?&vTSD(|!QifkRs`T|rFr17BhE3JzYw zO+Um}Fic6_)Abk=#KKHfekJW4cnZEvQt;#`cA1zd7BZLls$+NxUQJT))cx!-F;g(~WPXt|&CK9E668S@Jn|UlJoE|% zoXf}DXmA=+ut7e1IQj=HL* z;wu;!w(Nc^k}1YO;x7LyI>|5Q>3*4ACT0qT8R_)vG|kN5t51*zRj~3M&Uxq+4DC6j zwh_aDm{@XT1)#g&){j}kG1W6ccfp0BsDhyxM7DVGPnt{4tL7a<43ri=3tq!=woFGJ zh)%uMUd=y>>A5aCa<0$LD?Z=%fqpwi+17BhE3hq$H zO+Um}Fm$KMJ4=iSVq%TqOs-ddoaa9eS4G+dOFmx-Pa@;zSf^Roxmx-BzVMdCAX4A|JzWM}tPz9fA$2kwZ zf&r(xVIB<*SplemcXnY9$50RbqI!u=uE<$1WG_4*T{1eF2J`NSNaX#49z=9jXE$4> zBM(Gf_W!`@4>3VRu0N{aJ{s&2Q7KsBE&5RiF_ASs1cH4)6`aXY){Oh{n{4I2I80Y` zWb_KY*p-`ph_7H^P|w&bk}1UaMpOQ~(a3Lw$nM526Eg+FjI7*NhtJIKo(Zo$K^|1W z>AWjU_KtQ#EQgGmFxlG0ew3ZW0)Or4lLVKQq$*-rJYsoGXg|bB47Ys9^ zooq@oGkA{#c~AvU9nCopy@CP9eQ|dh9I^sX1&^A*9*&97J0c9CQ3XTx!UOV2T`O-E zKOMhjTO(bv~Scfqdr(b0$Og%^|LP$!cXlnOq?a<)uI z9*8v8y~pYgF+oJGKdRtyq3qV5O2M{A(LO*-WQ`AjU>{Hg-{mN4ru_htU+=9k1w$-M zM!ySQwS=2~h_7H^=%+PUBvWka()Ij<2=ceZ%~{GW6Eg+Fj9fnZl4fS`)hEb7CWy%OM-?2njotcFDHyV3(g#$*?>Wl)Z~IaDsYM=jKN{Nw$0l;q z5AhWYQ?fJk-Dy4(#KaoInYN!cAI-lncqQp_+~Op5nV2aUR^P3xuQW45=0O!a;{fM8 z^a=)?>O&1QIAjH&3bxN-4Ttxg$>_@}mpI_+g`beU@M6;4(r_V?w+qfC-IR8jA3-?Hn2UT#` z70!9+6%6TThfJcuAu9k?uzwkAI3~Kf=zYN_LU08?{DeOpM-~=7`bu6OFYw=zM!qk& zj^%8bjyw>_PyRo}ooBe!#Mi|y9Tb!pAYr3&PUq1bJ#^YM#|^I>M(f(|8VB{jLdrkV+^^|PxLva zeq}GuG=H#Dd^>K++2D>zErQ{Zs2!?}1Rk7PJv1kecX za5s3viH)E)BAV@>5e#~#L3Y%+Hs*%wjfg*jOsi^njA-_oOPKzs`G`dQX#{tB5M2G; zB6$8cbRJN1YRd%nd7u$||2a{s&Id-4A@fxhSE!vMlSlCIN6%+Iyhkv`a4hqDpJUpY zW8N(DOKIZwg1bKs?wHgf7#=BFd4R+-R`=P*LnF9FiWh^mDJ|B_ESK@fBN)@Obzo~Y z9Mrt!#0a1fTs=e3h7%VSOFve*^G|AhOa`a5#7}vD@{$)_SHXLOOsi`75g8h=yW8{D zKVkY~gnUGz{xpKSW(uzUZV?Phtb)DF1C8K&&xu-fJ}|P{m+!NM(f(&wus# z%!l^~#_Zh9b(f6^wR22Eqv{#^v=i;uvW91c`kNk4>Qq*gsR{ZyL z5!^2xHoF1)Ah@uqhR1+X)~YznybXbx4@gwMS^R)Z^~c5pReiVoh3YD^FeDz@oP`Xr z&jtEfXQSxmclVjIfr0Yb5aahVGO#s;pUc3!r!R&uCFU)kLpnMmb%lyX`kGJTXj;vD zC#XYG3t#x-#Y^QRez9iAKAb*ehK81T-oue+FGds9^-alWMEBF|ZC@jJqlu=U=Sez@ zW-s8K=CFSof@bg4;KHi99Ro_4Y8q1?H6M_uKF!|NwS%g@TlVH^MrQ#vhqer0p9Pw| z|9d{rsJ5Zb^;RVcw_w2(Rq}1b0rz-g?FtdxAJ5wd{pIDwY~9@r%`Z_TkX%tMDFt7r%2C<+*&1b{ky0=J==Q11Kvlm0iSaX2S zA#FLICc?~K^Tsb-_vYyt)FG*5FZ}UW&3{;0p?1!YeK<6GGY)#*!;xn%=<{CxlZ^(G z#YZE$pZ-F9lF`8$jq^3Q>v~eTzUHML z8mTqmdCZ0P*u@AoG+ya*ME6S+A8)>aJk*F?no~t526IGesS9spSUptY6|3*;qoKc0 zpKtba9*sP7F*PG22eZMT=FKJ=pN4LlAA&ZRD7xRQVkH{7meLDtogBzhKBBit6Q`yINE zOYt;y>0O4{!$E~rwK@h=a?mgqyQukqMD^)ihOg`U%zN@;ZaQ5`$A*O3Ii!KFH5_9+{0JE?+-0~I+##t& zFJ|O_`$|asV$G0!ICS-X`BG44$YnV4?8Ru3?|Mfv8qxhUdk^0V)@b4)BI(YC@&BXQ z``J%c?d&A`4X78@QgE}C$?1k#cUep}gGJt&+ zX!e%>=eayt|OYQ z4@+fynm9wkkOA?$=GLpvgU+j(O&HV7<%vd_7v!jY%|XlfF`2zmGh49d!0lu)CpDc5 z)SO$Ki(&EH=3Jb3ZrrMKg0YM$mg0apC#aocv!5>plCdo<@Vw^4`zZsXhz+m9&Vs0& zqdM~Y`vbo;mg_m+bbi=-dck0i$|YufoHdTcSUtFA*Y1(#JfZeABD!qc5%>QvBKe5} z1E}`x0?B~Hous-d4bLOB|f^}l#jYuY~hHB+ap#tSg(lZ1qnjX$cn=Dg*9?~Eu_#xOaA*< z(o>dZcCONdt5yGJ=8{JZu)ge(hG9WIK9&BgKXABTtk`JB2OtV}u&n=IX=@KKDELt= zF+R=TY5$I=@4iv%Z})gq)z$`Cvwb_69;i8)s0X$F-y^;0;b#2;<)|*G`O!sPsP*3+ zrFL{xeL(bY`&-OjsGWpz>vtNhM(Ex8V3}0uhEKN66&f!6(Xf6M!TN80?Tt;%`skrD z|8AA^lr^h%E^7UX)1R43Zhc@4ZucX@f_!``#a5?h{k9AJVTFfA#L;iR)cTROI4Jm0 zEiqD!ZItT6rw`_-^_O@&s%mS4Z1}BG^~|#xYECBVL9O5JdvAKUS-;!_stamDxwpZ|Z~ENhr5|zaP}}@os&vL@Y_*ldWg(fmMzDK_Q6+>&Gnh#-?U{ z^w7c<=_Ng7&8nS?TEE7|XXcVyA97XgosMC}*A)^Zd@m%uv0M{dom#)$F8^3D;q-=o z*OX1zf*)snh~sRa`VC(%XP)(6HtyX}>;K^KsH&|EvMUKUGd)mqGEom|{WE*K>EUMm zrkAPpz34)%pLeg?(N*;UVZuhGnY~bReXKT?TfhE(HA3&!2g`&174pgUW{Hy zGLND5#YL^3@qstZT)5=c2S%^8$0b-|t5fSoCQ0Szwqkf(cobdmubfY0Ah9bkRb{OFdk?7C3v zpI1D(sy~)F4X#K6_2i}4+yX2 z*vagLn(O25tp8_jHGRBWA1oujtFhQzv7vUdm8dqWg7J2f%N_nXdAzZ?Sj>m@(L+h6 zkCXJ2rJ0?JT7Pr+GjqwU4|#4C8_lp#bGgJ;r`A7J)E`zvsPTJ$#QKj)H6_>j5QiVt z5<|Y=&-$LXqpG$x$WE^-(ZFmU)SOJzgId2_ac^X9*1zzYx-QiEV-%0Bst*XSoJqv& zg_`T*&-yz{s_En1`e6BO>0=g4sGV$8K54Siyu&Xp`1_ag#-?U{^w6#L51GeM`{JV3 zpIP;px#ZS|Jc%dVWLT&qE0&?sS**lr^h% zE^7U)?Vg!SZhc_QpIA8kT$XOqTbGEqrte>s7x1*}IHpqS& zf0XHgnv;ooQ0rId>y6CK`Y{)%^}Xmqtv^oj=&JgF@IlVG%wDLuKK{=7yZfo>fXx5N9 zj19Gu?QF*N<;?|uO~Lwkr+Z^lvpzK1Q!teE6lz~w)cWNXJ~Nlx`oQ>TWM&DL*y_~! zAFuL@6%!pppX+z(OIuttnAJc(e9)!A0pkw8`IRGjhkudBqpG&{^4S*Ingt`79w6n@ zB0Ah9dL&qH9xwj3$^}RYt)Xest@!?(DWv=myA%p;BUQFjnKRG!P0Kc zHJ@xrPyd$LJnR1}Ecmmp^TwuTeP~uT$xum8S+i>AqSi0G{h7Js)(2Ma$Gs$2Vyjc@ z*EsAK%lLLQz0Egyk7clz+FBcVVK`@t%NP9PJRViGwLx|`(H*7-YECBVL9PGOQEz&< zSsyy6=t8ZZ@|fDuRrLYkYZI$4F;_*Xxjz2R`o)i{5qh^iSO!Mc_sN#3<7b=PpX)#H z$fjm}^ia9vM$WZ!N ze{-?s>{35n;uh@hKew$UaQ2V=*%uSHy{ZZ%g z#?0HE)Nu1XRB-;~2e&%Ju1b~ogPW>cQ#-h-I*T(~(^k0NSoUfeK%Id0Gk!S&nC*^| zI^JCml$y<(_(W^8;aqoft#5ARqwYH94b8<|J|62qvH#}mWBr8MshAzB6jAJMf|va4 znqls8!IFC(6kmTmMM5QZIX&HHe91pmlw%v;?<1}5!C%o^R(s1&_aAsXs%l?@sO*aL zHB8r|=CdT~K~MLCQhU?G&G!3SS-Rk_7hUM-{($1qRrLYc?dUbkT&TG|{!aIa)2Zp> z-S}Wh-C`zVld0Dv|G;;a8ODDitn@c{WOK2Y59fnx#JRMrr%*dJvvbivI{dmf&0M(T z)(6J4TrWwm#8#))zw(xUte7x*k$>!r)#CUo8q8{-PH`2F|7P6ZYbI>o&tJgXQB_+T zM18UkV|t+G(5WwZ)9%PpR&r*1%JKhLao0+@#w1hfUM%?Gt6G7xjz1^pDIjE zAMe%&%gAfLGB%ldaeM!Z++tB7>n`SOt za_d8`kjI}gEYy4|#a5@*f1$iztmyD?dTYP-vX*R#kG~LyAJr10(ZY!0ruEAR*01RC zsH&|Eq6*au)HKifs5zOa2etmVir(~avwrR`EnRStKf9S#^P`KpQ0t#lJi4krARM)` z+*hVPsGWrN)joYuKeURPKHjYlmVMLzWY$ORWII}L$mK1D^=k;$zv_|A#bQ3Jj~=Sg zVGr{dYF}K``l;%B)69iSZhc^Ep1wnZCAK=XepqY2Sh10gw{_1wp)C#yrx@}De`k+J zRc&pM)t_FYk=fd)Ihm*jwf>Bcz3Jg*{Zl8XE~xp@E$iELq1OLH@#w1hfGEK~Ie#$q zLG2`zTmSX8YWjG$K3K90sIkNsTfOQHvbcYv!X>vpFsfZhFToO9omxNbV1HOq#w&YqWC!oE%B|R0A7?kwU{;IUZ)MS^dNn;B zRkgK2Hu%6SrUz<1O`;yu`u)G~riYvLALUWkg<5~N;?Y(00bz&2Va)odxjxp+$*uq2 zFg1O=TOTZ+ult8tU)EKrK02LcgK^fcCY<$Ged&$O#bQ3J53WorN3fnk?bOW9MXmqK zglFcGTOSz1Q@500iLFj=?cbT@7b_}?Uh3zbN;_Qim(@R`27G>_!P8H4&|CY_vppSD zwXp#<`M_DG25LS@q8jwp{{6Y0z}$Qf6_AIh`N2h1=&k+Y^OO#*s!oNj*0e?UJIrh^ z1GL+o-r9e0p%S2X*8?T*iIP6i8n5VgdYj?;TEeaUpS+=|nI4LD{_ZsEC)CaBl*W{Xwk{3TFe!tzYDVx1*}IcI7m!*)>Rk z$BUUBAmwDD9@P3D{pO9#&H6YRtdE)>-JkWBD;`}{9}sPwcZt~xwUbb8{i~PN^zm+e zu*BUu>XWVC)w7+9A6E=XB&_sj{O*lS&HCW#@}#Gvr>t4Eb5ZNBx&6#sa_a*t$;ECG zEV0$8^$+~#4=Xw}*0I!o5^EU@Ee^vu8%TbUpXQ0TqpG$x$hv-&pow|bN6pDZJ*f5H zP4KdxZ5NgvZq|nmD!S0K{t(5ZtLg*7atmHtYU+cU>tnUC-1_Sisp;e0`e139(l^_q z5ASU=Kh7cU+V7m$8=IQ-(L?Ev-DMs_?bOW9MXf(J^)qwHtq-~Oj@iPnP;)G?)v5JY zWc7;`6Xw{pzjd%>{VZdxt-CTY1{FzIuaWDAIPZEqs%mS4Z1tH6%=)N(=|Qc({&jD9 zxLLn*BXwP<^^;^*JG!bqAUrvF5VJmNu8%+KAI_mh=-v8Y>2osDCtH#ccMF;K_dzS%23%ez9Vs9G~Qx{5@@P z(O}}jmR{?>Sj5{=Ra<+}QH$(K-xW*`kn(8~^`O>|E$WTT&H6YRBGHR3)cOMykFKf@ z2>&cLme~t6*TZ<@47F1;I~TQn<4>NM zOKyE&Y$<#Yj`&~cGO zni7QOOn@|Dq0!M%^MF&=NGq)Er;ceErpQ$8?@{|C|wzcis*OX->#He5!+7 zEj-b?UyRGS%$MGFYW}O|X1^R779?tUv_k4EyVFac{e@ZBgaDzVqN77em?fJ?jR#?! zjeGx>3kO;~z0*R&Y_t|8Rl|XM=cdg}OVpfO)RKl-pUFD3bPKbnj_R7yFuSCcO;ua) z&;Gi`Y13S&xwcjq%fsyWG@aUd4>OQ|+>{}ts7Ejkft`=sXK0EbC z*2}1!dfTaKm?irzNYwH$1LVu4+Do8C1JadQqt$^yo4?vlzwVghcWOK_6s*R*lPhnR zdahx%Neh#z;lMqna!a-{L(LmN)RKnT^mRJ4bPKbWHmPe$!z}4~oouSwfLdxNU(z$5H*Ju4Ol$>ir&1>)Baw7(9z*^18>Cv)OTVgSbdu+ zYsJljjVxPd+%jtsk7Qo1@7IB(YByll9XNnZKWbk}@?GnulE)uvP|_{QiqunAv@KDz z=)W4#RFwt(-m2$W9H8dPib2+j;8*!iBfj?>L+Acec0L0~?F6rX>4pBkKE1-EiIDq= z25^@^@Uf#9>OOk1XO$UasC_{uFR1zMhBV9Zf59rGS)&Mc-F zU6P%CB~a$*F#27wtp_dB;c0}J2Ugb>%iS$qXCubu3U~gCWYWQ;>NarqirvTNAGI$n z>5?qsRUO=JK~{eO4Kgp9(k0mxt!%2=g8#_rdn^!8b8W4jkY8U;&Zbja?@dPSWv7YZ`| zHCbjht7sMEYmTqCTtc|*+G|aAOWmDA_{Krc4V3B~DYisqy z-8?zIcMr2)8|c*5dzgWA!+Wh6xvZNqJw%~2i zelv>%)J}f+2D3}w=+xGGn1Qs^d+U9YAN(tIiUUTNRTWld>u2a7cZmfb_sr0{^Antv z^s?12c4``CDZdXAwLHuKy=;`Vnt=4YNkjwEm0A6@fk8({$HmdD|1CbHuOonwGg(3| z8d!KqDc8%)4O*B~4F~R$(`&3Y@9UuE+@h8=%m!}Ip`}}xRji|~DGjshTG>>!1%KM! zmsljA=Gt04@%zJsuUB!sXSQLJPHnx18AzL!+vSt|Y^Bu$b{k<kiJ!w@8mN=hqnlei>4QtkuMKoxBfq9 zVEu)pTtbnCM(cn8X~IIIqUjcq_xI8m5Sc6+^_yI>U`y9%y{Lsr)&AhVGp_V#Gg?vm z(vn8&-qV52tfi$}w1&@7*OW$UR?he9Jr@; zPxZBFIMke5)RKl-!hdyeyM-B8aM9~UQyOL;Yh`;@ZPU*m#v%dZ;oABOvu2NUYU@4B zKzi}=U`8%ezW3krsvk7M?0^tvagTM7yTpQzi(XK_pK=q+1=LQx?bI~PzD$wk**3jB zU2=u7TyUY5hZ!L24&Eq%77a*OW~Va*2pt~ncoCsj@wRNWSo)&%4t}dFR_zq>L`b=7 z=0=gd!X3OK8FetJ8V=mG-fqak3^nH#wWMLTAd?Pmw=jc-Dw@(TOOshAo2s_pFSB4f ziv-kMTYq6T_*I?!-op%}rKXMWN#3PLl6B_eh=W3y)z7Mf+$9!#gc*8wTj38Ry=>`i zr>0@HGGCCW=&>IUXV8$IH;HIK8fJxS1qdA-9!aYCCp`$H?6s19iAJ2efnC#{1- zEe|tDz4UNG2926GiD*C?W|g`I3LODPpUDMX^EP1i(1k!ThUF2mTqCTFR{9&G|aMg*U6@;E%+z4?7$)cHP_Z( zn7!3QC%^YF18L%ZRt(F!dG^(&FPiU(?iIo;K~EjzYGH=ny?EkF*2@@$Q*S#p4YP)W zf-7J*n@Yt5e6{b8a8`iLo%7XWTNQ@4ILI zS_6`*-JZ;_upjRKlPQT|aBNXY`o4RzaT>7QlI%)#bw%m>?(KAEowr+n}40 z_uWU&2@bS8#lZYdt`ibw(R*}Bc6Di>%+Zct;F%E8fh@_856-U5z4GJt@MD{FNmh25 z4klH%fqU%Ku4Bz>Ak>^&)RHdA@~_mv?G|L|chVs9qA6XHjn>MhsxA0;_3gIU`5yB=7y`&d6VkC=(xJR$Z%uTrJDKIN6?g@Y@d?uwF*( zi<$=T{B1#^mWLUdqHO#63>r0u77a+l?8%`3q2t1%qsf|VZDkr}VklUR8N!4)RUVruxv*lXZRJ8^FzBeATNI=cC^%rLI zPUzIudzgWAU+2|6$@}!WR{zA)bs7D5N8gh=$koCOy}M=77D+E#dfTaKm>s_yBx-q> zLF%8|u4B-sd6W1Hv(VdtLPy5ZpG7@3l^PGiawbd2jLq+V;{Mt0ue30!8V=m^veX-A zuFOz#Zc$4bX1(v|(9$i;Hg%<%qULO(rZmic)5@l*EqD)?eEpEAEovvf{LcR`_jPLP zJB_8J+CZV>!fBW#PTP@OW?uf;GNQ9_H^eM`r5Tp?rUXJ)fW8I*S*6c0X5gwGM7Beu4K}w zt@kj4(qn7IF>=&S^8BCGJ7<2j`;ZW38#C)5R|_-rZs>`>Sue}c0kRsMJ4H-|1D7(lypn7%yCrF__{)ZgztrWbaHkeQqLzmlAoG=)Ac6K5X1h8D2ptv?LHGRs z(6JM{zQmeL3VNi~hH9bsnIl!n<|t!%2=jw)~QzwpBv76~$b`SoS9o;tPl9%dk&wsMJ2^1C07 z|H}OZrnp`@$koCOy_@F!9FktPJZPt;VfOXlAW_T13{6rc%Wo{qQ2R0SJ8L0HaY3Hjrn|4uSjW*-YHv+`qfFsT|2+%1+4WDS6tbNdUk72|YpyM@`J ziB!}0+7V`UO=*~A9j}v3Ra@}R$bOqe0&1?Uzm?g@i8}echZ#uQ-#FxxyxZg75}L1; z_ZL=X%_r#~R|_-rZoj+zB)x3uZKtMTwrWn0sO4b>sjI#^jX}rP@l7rokcL^ZWdTA* zggSnG_++ZiWMu|nosC<*`Jf@4j5|GBh3{mv(!!)_IB@sq{mMjhWrmt_i(1l^S%c*| zv~&xzh$}SA;_LW%wwlwfDGjr2TG>>!1#h_*Vh)?yqUPHA3$veB=+xGGn1OWDkeoir z%l^In?;}Q-?GeIk(n=lVYGH=nedECIEEiBa^|n*fFuSoONYwH$1LWBhMoFbVYGDR_2T$uS>1C0chFRu|L86w28KB2CDt%rf86$?rYPK-%Y6XP@L-vdsuHcgu<^ zvzuDT)xr$D`$@?il3up-wo}tEE0-``KpV`$SuVIx%fk%N<@2qPK#K;XVK(!n0HKYa zQjZ~9|0D0yFax8ram!Zw_PG0ZG7`S5gGtqJ;C``ao=N7V5NggXYDvTFk2E^C-NG#I zA$3h@m{m`!lTB4y@IPp>kVOJ&uC2c?E0IAbzxOZ$>5Qo}e3JisAn`-@;}WtJ(U z4sw@R@bNSgy_{kU1tSl<{B|}T)4h`uZj*PRkwk=Pwd}JOVpfO)RHdAKB}&R+bzg?jaAo_ zF3ApQWmDA_{GX-!n*{=DuC174bc0!<+B&uM9%Uf?uf<`ir=|g1sF@DEU8v<@2B~jeS;3%D^Cl4uNS9;-+Xo6A8%8cKAB1*g zOR{>Q)}DXp%8@J`>lRr&-~7GKl*axty668l9Z0Hn1NP&cr6-$Lm#8_ms3cvI)$FW6 zNw*{$b0Po@pVAnEu1+2M-`RfD{VrM3(K?t^-3IOn=jJjkQFCrlOS&Yx zF-8ZsTafLlLp4Rs*{me6Yf6`7wa4mYQ`Hu{WeyHwfq>e{FModd{sf);-lGhp1y@%0 zNj^S#zvbqqvBj_bWSyvkTrJDcyZg@%m-MpLFLr7gz#V1>iCP|Jfd2e78MJ6Xx+MGg zhd`m@=*MIe{X>1%Wv=@<;dsUmZsvErOO|7)1|(Ix0sEbc*{7Hb2h`kdqLOq;wtu+> zY_}wXf>@HF=4e)D+7+csvZxgr(NvYavDa#V3k629IFRAngN!c8{G)RyI{_!GC=HVHOCexwckM*prOjCA)A!r?%ds4BeY! z(m_U!+DZQFqzC2AFJp+`#9n<;2f137LEos$jae_F_C-yXWa)kn616SiS{o+w`v5T53D+U=|lBIs25#M``0d(|*lPt$j zJHZnsKTyQ{w!e9|pC-a(9pGv)hQ9sp%f*sDw$!#m(@?SUq+qU zdXF-YF0Y=^C;5WKXBWHg^8Zf@xl1hgxZ{uBy)*T|_uZx?ELm_h2H zVc8foYThKG0qK%#UZFstqv>6;0R_5~%S-6Wkt`k4H)%8Nit#S_7-JI#U6LgY)qtdG zH()pWVI@-%HOCf}q)W06;To{rlB`P-swirXCMrsoWXE-)sVWQHMJxKSI6&>hw_jV* zC0V&Bjmmn@F@R>-*uy9Io`+q2-D51t%(s@bV;_da)8W{&R>pO-iw-UX$`C9OqPyg{y3fVH)Bcm zt*|7^P(=rms@uR_VEbdHC2GzsYDt%5eX8o(thJltJlgiKa1f)K2n^N2C5{-X+^FZ12xsLkGE9mOg)r;iUI)2an4x#8A8#$` zWvgH8)HKYF_YM-ZJj?){qgfpZv}iyYW(B_p6goDBZYjH%u?M-p1f#QYi?vL0y@l)Z z%Mn_bR1F92sK{TKmZ&+ms3i@vZeQxq(k;vm+@vQ6FPhRYJFAsVRa@}anVR63d7?ng zwe`0$J1|nGw%)@Gq`CXvWMPKdN#1Q=mmB6qW*;HU=8V!ot`=tK-LjjONP5}Q+fGfx z?Dmu(QOm;&(2vF}WzeG3q5)}`6`da-bZn^O2jmj8u)?f$9c!CE7@gDq@2XQ}JGh3~ zbS+G(h68uoLXp!=!=dKfqLwtwzWz>!mTqCTu_)CPHD|M$)2=BEvxi#QRJ8?fuZN*5 z%uqY|Z{NRa@|8%+heUjHpo2rTVf&arom|fFCt`=sX?sjWB>t)nVz3tRA%u1ft zp|=aQJj?(&Vsj-4v}iyYW|OZ53LO_ge{?DO6g8e03RdGDNj2@aFO2(TamKSu8fFi* zFsT}@Y=WNb^7#Dx7rrr9W*7%=08vXCW=a3hp`}}xfd#8wFPhRYYp0b>Ra@{UxH^TMFK4vkcL^JBpCwQ6c-sD7fCl|d{V^<1sD$@;S{oS)|q?V z@0m5z!lY_Aa2Ff)Aqz9qoLkhAhFQhrI<#~Pv$OfsHKk#;LMxl9w&1_rZWD_H)LdJC zVK(PQo!WX2GjwmqX0sSMYA5-ore|834*L^S()(OQyONEwX&&d3;t>eF0e>I&9(IxW@+>3)Yf~L zfwaf@EsR{&&C6$W&uwn}7w?%})k3ZoW}x2Me+%nn)K0za)HKXWN9oYpg<2kFfE>4E zrUY6vAPuu`iw6iD85J2#zVlP)IyIgc3RdG5uQVo!`v?9Ll+eMXYB+G0xlwwCd6|it zH-M-m4YQl2ba1Kt%jqC@i3J~*ndseg3v)<%+0xriO~b5ztsqg$!wgd2Ym$aRqvlN_ z8jyzB=_Ua}M@7blk}!*H(u>`D!eu6er03A00cn_Z91tLMOsL~WF>fxW#uG!qGG3JqcRpz5x;5jF7A950f&0eXdrV8z zzOF*_#V=@_P?6khUxSnNRZd=l>aC zep0rV@H8`Ip$>AFSnzR~iQe72Dpu0Vmfm)18fH~j1&LZ7X7SL!L^5bd&znRvV6ph$ zCP;1Ee*fmD0HNdP%S=Tp^d=XXxpG-GC$ePBU+GdJ^P4{tjEl_X@kH4TqQ@GDRL!=n zlSSF2{(7b(M!~5?9m~d3n>zl!EpQ#(VhsA>q8&9S6ZLEpPiE>_al1Y;Rb4?lDA76= z1*o0$_7xf3rt|JDee~WV44hXltnkTwc3w!=^~NU{&xD7BG$pF1*&R5yT7aQvFSeQ_ z>0zr=?95FFbH(F9VV1`ikWY8$EkPD-M=vY~UkVI4Dl|MMf~>`wZMLG|(@(8E|A+=> z%U(MhS2?8-V0DDMWWQ@+Qnebmldow#(_D+8=G>x|bS>8HiViK^LhSM+bxrA7?5tKc zRc*na^Y%Y14p4J#Eo<3hjJ{gl?GK&WdJi&?{#WvEpX50wPY5?}`HS0RD_+w%M_hT6&faAJqnyPkdy zo36#Wz8E;ST7aQvQ>I%b>0wK2J2PF2{g^2z%<}kxtRbtGFl5wRX3=(ZEtWJ-fXK$T zu<0)UR|e7myB%fKoXL_gNAiD@BEV?Nw$#F;YBg|2>@6|Nv>Iy8Eow>EVpa3&(9$i$ zpdn5Qs5zUcDP4=L(aNT(?d@7L9P~M(EF{JM68!lJNv~>P1j-v;(|mi4>LeEY4wDK8EOtK8jyzBYwrgN z9UV=#U+h0b!%Pf?r{~{Pv(}z7?%T9AR%A5H`f6cPH5|AjcQ0TKfZCUqG|bMI(V?YV znC)Gtt|<+(vSoF$scH-UM|r-wJ?LeZ;zYHdKtAZY8qx&Y6pp09%g{NFuIfk+FzKJ zY8EJTOeB4o{IA#hl1oc56s*Sma!9GT^G4H_5yEV?7A950f&2TS515vyc>{=A(lATj zLWh=aVRq?04KpvA(lG0wl}%M!@Yim3g+&5tuC2c?JKa*Jw%)@Gq$iUsW8^aBuZEVr zWquQTm+-`LSt}jnYGH=neSOYd*2@@$Q*S#p4YOojfh%v0 zIw~}b-ttf1j)ob8bqYE7izQV@8evvdcx7q57A950fjjTrKC{isOw^oP)RKnTzRz@M z=@w>-%cyHg!z^lmPBv9-!QV8&T^0$bxwihotjgy)`Mrl3NXz%Q?~{Cg*2xdem&tbv zVU~NK4sx|HL+?I_j+OMXrMI1$hFR~gfej*^EVehVV)>39IHR8 zX_$Sll}%M!@HhFhA&UgmTw8x(HsxoX+IkN&kiIv%s88~vYhPj;W48-o)^V#2a0ebtoJQ8TpfHcffp9v5;CMKLd&0IFuGTzM+{aC0W zB%F=Ad~UuU%->$>A?z&cpoK}*aMku(+(r9+@s$~77zgJTwWMM8>p2}-x`o+@e(IXi zFe`apC!4Ca;9oIg!+uj+)LdJCVYcd`PJZuUhVE_pO@ad^Icg_)$>HmI>@`+qJ%unE z{+kYRwJ<~P=9@G~(#w|Kc4``Cr)~y`S{`PAzB;oWgBF`aG$0MLypIBfj&*F!IPt0# zV)%=Ya8Cb+hgQG;y|FSoDume(EljG0L-?+2d5mcZe$FjwNyBW-6CGN*g<07>lvoG3T9~1CxBqus(#w|Kc4``C{Zj{tS{`PA-o0y&1X?uUd-1O+n6KI#%o-px zefjdgudF2da*nm(9|^&`Rs^EyTJW_%fg)n*TU75Q?a!8oU;-m&vSxPBg#EkSH@=O~ z!lar2;C?(ka;~{3K+U;DEor)T&#psDB-jff*^Pz?2}ux=DP-arI?t#%o2V&G*K=Cg zRJF}^&f?EGdndbkl<~_qz8%V`Q(N!p3escQHv1&6^7XcSCyjI!KcY4-mkx5ZbVcv( zc>E8$goOUiez8;2bWIo*Bx-rO0&?Bxb3UQBuIxXu_0t<>6uSPqfkGEj?QEpmo7+w@ zXw+P3F*VANQ$p!t0Yke*#;uQNWQeB*D>CeAei9F6M$bZhV5+JD{!YaS%yp=_susLG zFX&G_PbsNQRqtT|jrXqT$goj6u}>6j`qfTjyMJgzNC@3J->y`^*lJ0Eel4~83rYW4 zO52eelQvmdEf~o1m_RRFe{~2WM$JVQ9Y@zZ|27PeI4&}b-s}J7mCwkU2l>mHEEN;) zKfi6D5nbzrE6RF}bTFy<4BROWeaqH7s5!T&C0+A0YpR3WEx=+6(siU4P3f9vk5)ES zZNcC1V1kq8dJ;9)R?INEKlaxaI<@s4V<7$M@&y)SsGa1w9xmBq?!plF$1ZKDgIq1i zzPe@gOOmmJSudmZMNO9v$vOv#S{`Ntc3IFITQER}mTqA-v#7eJG|bX`u9Hnw zTk!9@l#PWMYObxnFiSdEC%^YF18I%YseF=e&h%2h6GoUF67Kb%)#B9urj-;g-O+L;C?r(?>uw$fSPlQTGB9kGE;|^Zeg}-xVok^%v#OT$)>6;_#gGD z!Xg1R*VbQ{^_#1c-+P#Ww8;I!KFJGBcoJ%EDHHET)taY++$9!#e4Y%wd*fj)NiSP^ z+o@@oeZM?N)bcQc)K^xdWzeX3lZXbSE3?F#1B4Ebh^D(R?j{&OE;Au4XR?G${@?uZ zlZ`t#9}AoPn`>cGH5|AnG(W(!M9sNHEoqny*rG#Aw=jEniiVjNO=+0@p_NTlTkwCh zvoDJT)LdJCVV3%5o!WX2Gm!qBvo<4_DgSxZb34rkm*SSP-?fmdg&BJHqp3SsFJlx= zz3tRA%wi7e(A$Mt9%g{d)AvgWv}iyYW?I z>20T`Vb360jYR)ZcNyBXJ6CK=cVFnEmW~e!v)tq)sX_&oaY@Mi8xkBYC zbt*Rs?GYUl9TpKD8f*M#c+=?E=i$8D{i{FrZmhhYGqT^7W{=Lr(t1+nrrKC zWp*rwPHnx18A!_xdWn(Cx_L*;7r&VI%nk?-0KUtqgIq1lK%J<69P4G&PQC5aG|Uo( z28mi8W`LaA{Td51)ErtgAPuv+MFND5ijJd~nLE;b&hDAb*=uc)6+^*l-2YAP{OTYh z%zhNYY@HS+Rl|XM_=zuA1EBV$B@MHm-_xO`TbMyZ6-{ZFy;V#no2s_ppSP+Oiv-kM zTYq6zq@+%M?_mbgHnnQ{B;Q>sU9Q7Mm>m?tENv+r0kTTP?hNV7u@DAaes9 zOsa+hcY;Cpn3kw{1BhDEFssy12e(_8bttT^DGjrgTG>>!1^=yMqgW)M=GyuTv%ebY z)Yf~Lf%L=M4H&tso6|PjlJJxfW=DiD+tFADxmuWg*Tm|V{O_J%y^Pwax1E}XSQR4%Ij*D=7A^VqH1IcBk7z$S77R{KcP8-*IX5+LlsTvO4za&1%v_#Dt zK-7|k*`P@}v~&xz9gk_4q2_F&rZmj{)XJu+EqDiw2>I1KQJ{A6%O3z-o~lz@?_mbg zZ))AMR%TCU!bx7T^^xz)m6>?YZ2dGH;21e47C%yW4WFM%-dz=7BiX%b$-+Ut`=iZcR}&ItdCLq zf^JIGUbs6r(DD=mK)gBr0O+bzkYERQxY|weNjo8Vnt7Bz;;Wqj9b(dr71Q?Cz`6Vz#o62F-tMjTv>l9 z_SG4U%6d;RbneO?jTks;CwS{Vo8LQRq?q|WCQY#xXElJUr5O6Q`20z%k7a7xp=pY( z{v$Zh@)QH($=u^5%%b;biY31n7;|hy6iuj=oZ0k+~K_&9Ox#X^I_upg~Eu6oZ0zc!`>$SutQ&l%`nBLyc&v$^tjvt=TLL zP&@JM7nO7^Hvf@EeD5g+(1s7D`vgzhcE*-tt|`{{u?BFp6hq(6O>&PV0&1t)c4(Sn zM^a=CXb&Pw1Q%#|ih*(W#_JMh(R(z-@?{K+IWEreD8C25Lv&a6R6w-hT8O%+AW(X14+D@s%Bluk5NWr17qoAWFT zP&@JEDYieWMrFOH7(m6y?-0>@MdGi5&HG~E(a*#j79P_yDki)+xtN54EB>~2 zk)ifQQ-aV850EA%DlCjXKkfdV6#;T4YgXrUTQ|FTs*sTB84@~vl=He4CROiGIc#x{ zdKkIJTpMB>zOY-TMj-D0)XKy^*&BZnfTb+V~y3;r@Svz#@xMa{LfdcvNo z^qqqOHFWZO4_1(#tCG$q`IANqcbShICK;a zg&S}C5T;dS2D7VfIg>T5ue99XW~ghlcGkkAYJYHN`Z?oTb7oQd(vn7N|K2*Zbc@!h z4`{TC^DJsgqxGs*HdSrG|Kj3NETB+xZT&^-7BbO;ZIz{3Z*NkXQ z^R_cuj||g6t`@CVvs)hg?CfwBt*D)P+o@@^7MlX1h=FOM6#cx@Ck})hv@o z%f=toyr&a#+21IwqpF$|WHXM`X<-H+YECBVUm%{$)c?d4Z)9!}mo8jgm#XncH+9Kz zRqg1i`hf7aavj#2`k?0eSTpxpp|_V*F?h@s89zaogbA;y5qgg)bWykYtr;6?C)*2o zbA`V4LP*G%Tp=Ov6ZO`5WK#%+rq9!~lE;NE%dX}3I? z4{H65iM;9IX8q{?>bg+tCrhk$bX9#o7_m0t2Gjbexjz1^e=w;Up?B+prP#fW%=)sf znm8ce#WaTXhY8jnlFS>Mi^Y6AU_}q5d}E@dr!39vT-5rH(mXSl-1?BKPn)k87HU3~ zVyjc@cgX4wD=IoPoNigeS_5Z&h{KO+iBYr9szo2Wp7ob`JgRDIgRJF*j4jR9M$O4Y zJ*f2uyzWg8H|y8lPp$7o7i#^zibq$~2ZV!5zs9VOn(O1w`m=MW>Eqq{U}-Y#Z)Sbe zPPUjo`*eH7uzp#=`t@>pV^gy}ILbB5#(E01FD`2RUkW}mm)!cm7+e1&vp#B$CAK=X ze$`mNSg{eI^kX|cvVK7>Gem<~4fMvBFTBv!)%st1JgRDIgKYnTc5IqZ`_hA2zr{P= z^l-C2bU-Ac=0_KGq1Iobcyv{LK-92peP(^sPD1&De^^m9eY{&AEN@tjhzS+i>AqSjws?wPsd)(2LRQB53Yxg^Hs@Q{!@N$w>1 OE-Gi+-{w@g+5 literal 0 HcmV?d00001 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/14180/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4829aeb6efbe9d40819995fb40793a4c9c9a4072..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 170 zcmZ9^K?;K~5Cza5EoM3N1j)*^H^`N|K?+`Mw9qa+f`S*wGQ05$T@?TD_zVmKG@M}o z+|@161BemNd+a|4m-%O^W>d+V-_z<#{z$b&O4dLasU~%gplv7WJFh~4(o2+AYJ0j~ Lz3EFUZFJ8Gd+V-_z<#{z$b&O4dLasU~%gplv7WJFh~4(o2+AYJ0j~ Lz3EFUZFJ8Gvofd(n z{|rY)Y#^J$w1*#m&Vvt0L^t?tw?s}@5q%`0*12hN#BOptO*Anx1cQ@whz!@kV_TwoII+oI_GsxXF0^CB&bs}KWe@1#~!aiA31ek7dbXy;|hZ-^UI1g?xrf5ypf#d5miQy z736dQI}p|%f^xg@%DYXa%o`_k#>(i8A(Q%>ku<)0#gd5cC(?S%B=sFmfgxfFy)hUY zV`uD*3gmr4$riSQIkJ}w<9AzxCq`1B$B z&(g3A2X>M)tk)V|GiT8#UDC~;hY~*L=U{sFldX2rdaz;rM&qGl{Zd~(7NP;S zS^`uDi7o-EH5)s^4n-qd{jY<>55c z!Npa}eO@VyI_6)mh{{U3w*Z%+j diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2a45cd3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,171 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(125c.18d4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=09426fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.3829 -8.28067e-039 -7.57965e+025 5.85741e-036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003f8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003f8000 18cdb8fb 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003f8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_description.txt deleted file mode 100644 index 2a45cd3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,171 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(125c.18d4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=09426fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.3829 -8.28067e-039 -7.57965e+025 5.85741e-036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003f8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003f8000 18cdb8fb 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003f8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/17952/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 01c8f768fb77b11ea15d8c9045bfc67cf8be645b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}5VR}b-*M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y#^J$w1*#m&Vvt0L^t?tw?s}@5q%`0*12hN#BOptO*Anx1cQ@whz!@kV_TwoII+oI_GsxXF0^CB&bs}KWe@1#~!aiA31ek7dbXy;|hZ-^UI1g?xrf5ypf#d5miQy z736dQI}p|%f^xg@%DYXa%o`_k#>(i8A(Q%>ku<)0#gd5cC(?S%B=sFmfgxfFy)hUY zV`uD*3gmr4$riSQIkJ}w<9AzxCq`1B$B z&(g3A2X>M)tk)V|GiT8#UDC~;hY~*L=U{sFldX2rdaz;rM&qGl{Zd~(7NP;S zS^`uDi7o-EH5)s^4n-qd{jY<>55c z!Npa}eO@VyI_6)mh{{U3w*Z%+j diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18125/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index fee77bdb94d4b1168edfea8fe2a41267fd4b31df..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+>L91@5E`@+q6{OS+C|9|TZ@`V5AW7#V_$aFcNJ<~U0(^mG$HL&` zpV^^d2}qH^D-FMS?}JOCEBtmlA}4H!-V=0Y=aj@ek(-$Ccaxj&cQ8ap8f2P?rJx3( zO^AxyF>(=82bwTT-UN*hfc`JT=bF9Rp0nLod*(J(+nBB?iYH%Fm%;l(<=vtBzc1j# z__C<>VO5#Jq;-iF##KnjOVsL05^bB4+8>Wa`Smyooj*PcuZ#=h%GmlRjc*&){JmqX zPsAtGeS*k1RM2PRH{+f0-k6QaI0I*`$Ngp;yV|eBbDqpUGxs%~`%{ls+$YW**dR&djc~?!f$s5UO9Z_TSm_c?IumWNGE+}^!ue{kb%Cf=r#62@MMsExSR~7L% zlIC~Mm=bnBk@jOI>5u!b`)G{b7>v=_8GEAw^&il33)w>)*(HPi*O3rOi4=H3rJOS; z9yF9SVr>dMq3ZXv{+|)~ysFS}=D4sU1%z9gbE+NKiDOu=HN9mnVxx5}w|E(9`dnXv z*>jw1wijDBHmqOScn%sUZ}xlwk0!Sx^KI!L@!351(*Fu0 s{|Kee5kfbRvCD1|bF&QDFMSS>2L91@5E`@+q6{OS+C|9|TZ@`V5AW7#V_$aFcNJ<~U0(^mG$HL&` zpV^^d2}qH^D-FMS?}JOCEBtmlA}4H!-V=0Y=aj@ek(-$Ccaxj&cQ8ap8f2P?rJx3( zO^AxyF>(=82bwTT-UN*hfc`JT=bF9Rp0nLod*(J(+nBB?iYH%Fm%;l(<=vtBzc1j# z__C<>VO5#Jq;-iF##KnjOVsL05^bB4+8>Wa`Smyooj*PcuZ#=h%GmlRjc*&){JmqX zPsAtGeS*k1RM2PRH{+f0-k6QaI0I*`$Ngp;yV|eBbDqpUGxs%~`%{ls+$YW**dR&djc~?!f$s5UO9Z_TSm_c?IumWNGE+}^!ue{kb%Cf=r#62@MMsExSR~7L% zlIC~Mm=bnBk@jOI>5u!b`)G{b7>v=_8GEAw^&il33)w>)*(HPi*O3rOi4=H3rJOS; z9yF9SVr>dMq3ZXv{+|)~ysFS}=D4sU1%z9gbE+NKiDOu=HN9mnVxx5}w|E(9`dnXv z*>jw1wijDBHmqOScn%sUZ}xlwk0!Sx^KI!L@!351(*Fu0 s{|Kee5kfbRvCD1|bF&QDFMSS>2?BfG9YudUWZ~Dt z#B~1f$Xpm}cKvi*n+K72B-dIRU~gwsU~kECv`-X(PITZUBC{Q&ATAn zZoKevQwj6NF`cn8dSl2W@pdA~?;o)w@`opqex(ricQ^&6$WeM@Ft*0tI2Z+}`+$}m zYzK2>9~tI<9TAZjNq{G&lu`oOgNFDgY)F77?+t6w`d>y{POCDFCyq1SQb4$QUQ2Z- zj*G_iTGE?RGHbNfa*O9t)93meOwVz$)t5XvD2*g6P26njl)L zu_Nq|HL4{(YwY=@meZ9SWC7$O%n4GCdJgmPNiN{*Zq`}DlEaTYK2K$GcGY}eZ#ndP zv*!bNFuR&cxyr*mel~YL4?n|HzK1-d7Dkt_sZXwMQ?(4qFMSHI7S_j*kd?}@=T<*p MzhHN;d)WE-16ysxCjbBd diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 3778cc2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,172 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x224: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x224: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(224.13e0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fd2afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.6494e+016 4.33799e-016 -8.63169e-006 -2.41058e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00295000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00295000 a4ce6aff 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00295000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_description.txt deleted file mode 100644 index 3778cc2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,172 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x224: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x224: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(224.13e0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fd2afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.6494e+016 4.33799e-016 -8.63169e-006 -2.41058e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00295000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00295000 a4ce6aff 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00295000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/18495/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c062402c84846514022f5b98110f5ae694b04f7d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1568 zcmb`GJ8s)R5Qb+(LaT16E`?BfG9YudUWZ~Dt z#B~1f$Xpm}cKvi*n+K72B-dIRU~gwsU~kECv`-X(PITZUBC{Q&ATAn zZoKevQwj6NF`cn8dSl2W@pdA~?;o)w@`opqex(ricQ^&6$WeM@Ft*0tI2Z+}`+$}m zYzK2>9~tI<9TAZjNq{G&lu`oOgNFDgY)F77?+t6w`d>y{POCDFCyq1SQb4$QUQ2Z- zj*G_iTGE?RGHbNfa*O9t)93meOwVz$)t5XvD2*g6P26njl)L zu_Nq|HL4{(YwY=@meZ9SWC7$O%n4GCdJgmPNiN{*Zq`}DlEaTYK2K$GcGY}eZ#ndP zv*!bNFuR&cxyr*mel~YL4?n|HzK1-d7Dkt_sZXwMQ?(4qFMSHI7S_j*kd?}@=T<*p MzhHN;d)WE-16ysxCjbBd diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/19852/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8315df2973c0e12f48e160dd639d416f0d7ae89d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8l~>5Qc|ZL933tT?zqI6{OS+R<3d#-(VRzL6Xi#@KLA)NJ<~U0(=2(w}r8j ze}=PyB_Kc$c%grAZt-VQ|P5$Al@A z*iA@~FT;NR93!(zZIO{qdNUUyq~E)yEg%!nic9jZOWm@omML zzjv(lk@$qVPf(FV0ev=pGu|5?jL8^{Ggw9LTI3BlcBM}ampqw&X6j2k^`{=|_K{Nu zc9CNMgDdo|_*WHc-l8ft)kbn!M^qVWtRScJ*nzNl=asunt-Re-%Dllt#ltgJ#@gsJ z-X!8-B+c($uq5n$BJIaa(jV_u&rum`qc;X)XY7p%)PF$BEp!icWRDE2rPdX3uf5)y}paY-nHE_|dU`=`Vj4q5-#B64dsRT@uvRYU~I*6dTnVpKa{~#U;BP>TcRx!kQyP9?nypTwS%?*IP5Qc|ZL933tT?zqI6{OS+R<3d#-(VRzL6Xi#@KLA)NJ<~U0(=2(w}r8j ze}=PyB_Kc$c%grAZt-VQ|P5$Al@A z*iA@~FT;NR93!(zZIO{qdNUUyq~E)yEg%!nic9jZOWm@omML zzjv(lk@$qVPf(FV0ev=pGu|5?jL8^{Ggw9LTI3BlcBM}ampqw&X6j2k^`{=|_K{Nu zc9CNMgDdo|_*WHc-l8ft)kbn!M^qVWtRScJ*nzNl=asunt-Re-%Dllt#ltgJ#@gsJ z-X!8-B+c($uq5n$BJIaa(jV_u&rum`qc;X)XY7p%)PF$BEp!icWRDE2rPdX3uf5)y}paY-nHE_|dU`=`Vj4q5-#B64dsRT@uvRYU~I*6dTnVpKa{~#U;BP>TcRx!kQyP9?nypTwS%?*IPUPy>Ad`Q}4m z?k7bDO@Lv*P&xD`l0PZQc8FHE_In~HEQsC{QQH!{lGr(hOEY6O&$F8y=C}}dtO0^( zo|zDv(E}Gsgfy!L1y1`&34*9c5_(xtL$biXMisMS(_XSZWPf2BvTqDG)JP=WP#3|6 zW9I!a$G?{dVtgsHf81mSKWkl}(zx*fxVG^X<=4|Bbk*raxH6W;jj^tt zHQyGj`h#Pw55xoNKEY%hGw8GNoAKWGV2s9KT);Z;YTk-dhfe61noABAUl{wGkNwa? z-v^Ez*aZ#^*tksZa(rE|>Q+VesWOt&I-)Sm%U*v+WyaI__8X|coDer8}dlk=e4r$*-6p3-KxB1PU53= zF1LIdvwW#f-uxv`w%Xa(gN@r)K3+Q3&;8}kLNwy3W`X)%)LEduR%1ulq4=oQ{NiKJ zuYEloC$9@YkF*H19QBfxL36B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 3baedd5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,172 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce4.16a4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.10802e+037 -5.0116e-041 2.41637e+033 -1.99859e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00298000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00298000 352236ef 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00298000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_description.txt deleted file mode 100644 index 3baedd5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,172 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce4.16a4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.10802e+037 -5.0116e-041 2.41637e+033 -1.99859e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00298000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00298000 352236ef 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00298000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b33626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x2b33626d) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/2930/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a0e784e72efa96d55f936ea16b1dba08fe5468f5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`G!EW0y42G%Lh;x&3+aZ8`8g|SZI6duk`Uck04cl&ggg%P00o$>UPy>Ad`Q}4m z?k7bDO@Lv*P&xD`l0PZQc8FHE_In~HEQsC{QQH!{lGr(hOEY6O&$F8y=C}}dtO0^( zo|zDv(E}Gsgfy!L1y1`&34*9c5_(xtL$biXMisMS(_XSZWPf2BvTqDG)JP=WP#3|6 zW9I!a$G?{dVtgsHf81mSKWkl}(zx*fxVG^X<=4|Bbk*raxH6W;jj^tt zHQyGj`h#Pw55xoNKEY%hGw8GNoAKWGV2s9KT);Z;YTk-dhfe61noABAUl{wGkNwa? z-v^Ez*aZ#^*tksZa(rE|>Q+VesWOt&I-)Sm%U*v+WyaI__8X|coDer8}dlk=e4r$*-6p3-KxB1PU53= zF1LIdvwW#f-uxv`w%Xa(gN@r)K3+Q3&;8}kLNwy3W`X)%)LEduR%1ulq4=oQ{NiKJ zuYEloC$9@YkF*H19QBfxL36B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/49829/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 83b51d87a0c8688f0bec7a5c5024fdf157cced31..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 148 zcmZ9^y$OIo3!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e85f7e1..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF20: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF20: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f20.1988): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.66825e+013 2.14048e-029 -3.32877e+035 -2.28233e+015 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d2000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d2000 bd702b4e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d2000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_description.txt deleted file mode 100644 index e85f7e1..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF20: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF20: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f20.1988): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.66825e+013 2.14048e-029 -3.32877e+035 -2.28233e+015 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d2000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d2000 bd702b4e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d2000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10083/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a35f6883ba08d3d2f148906c1e29660d7c91f3b2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GL2lbH5JiWUVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n ze}*F?Hc%8OLVNu9Xa0~9EfFp7+3kp&up)X-L~Tn@NRi`-ott;KQNt z{!sGYmq=oKSr&a*7e+s6U!G zK62{7E^-WDaE0EL{HkL0EvllaHj>jmqRLof2e~_sD-bsCymGg#mABhUnYVcG@E{s1 zV{P;qj~(h^B=vVM*b=&*NY`T~S>NF=XIqy}pXD3a=W~26oIg7^9 zrQPazDE7HOd((5BY`3%48yhySH2!q#U)GnGg=oO37K3Up?qX1_-MAuLp=fk#eb%_< z*IMt6v)2vaM_CNoj(#c2?UNqB)!A%vDXT|*@^GH&SU>(h~J1u#1rCr`~kCA B@DBh0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9555e2e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xB2C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xB2C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(b2c.440): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261350000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.73563e+036 673319 -8.84287e+015 261.193 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0031a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0031a000 96d8f2d8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0031a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_description.txt deleted file mode 100644 index 9555e2e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xB2C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xB2C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(b2c.440): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261350000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.73563e+036 673319 -8.84287e+015 261.193 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0031a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0031a000 96d8f2d8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0031a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/10365/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a35f6883ba08d3d2f148906c1e29660d7c91f3b2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GL2lbH5JiWUVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n ze}*F?Hc%8OLVNu9Xa0~9EfFp7+3kp&up)X-L~Tn@NRi`-ott;KQNt z{!sGYmq=oKSr&a*7e+s6U!G zK62{7E^-WDaE0EL{HkL0EvllaHj>jmqRLof2e~_sD-bsCymGg#mABhUnYVcG@E{s1 zV{P;qj~(h^B=vVM*b=&*NY`T~S>NF=XIqy}pXD3a=W~26oIg7^9 zrQPazDE7HOd((5BY`3%48yhySH2!q#U)GnGg=oO37K3Up?qX1_-MAuLp=fk#eb%_< z*IMt6v)2vaM_CNoj(#c2?UNqB)!A%vDXT|*@^GH&SU>(h~J1u#1rCr`~kCA B@DBh0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c4cdf5111a78fa3dea24ba972a62cee3cc09f205..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 816 zcmb_aF>b>!3_K@6Jj!~3Jry1E1NRl3`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlKc4 z6LsWKln4VG{tgGAQojWr0CXM5cKF@^&x}1XMhRYkqy`MdnkGRe&)RMEw|Stan^u( zrd43&tk<+YA2xv1Y`o;OX>^geY;Cg|wa)85Eq`xiz0$uG9H*3yGMwv6f2w8pbW?hF pGK7}ED>3z<+O=W3ccI?b!4WOdk1kLZ(xumkM4XAW{Qv}(;MM>D diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index da23160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC04: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC04: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c04.5c0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0f672fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.23878e-006 -52.1459 5.1465e+008 -1.31833e+014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00392000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00392000 24a9c5fc 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00392000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_description.txt deleted file mode 100644 index da23160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC04: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC04: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c04.5c0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0f672fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.23878e-006 -52.1459 5.1465e+008 -1.31833e+014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00392000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00392000 24a9c5fc 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00392000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/11010/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c4cdf5111a78fa3dea24ba972a62cee3cc09f205..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 816 zcmb_aF>b>!3_K@6Jj!~3Jry1E1NRl3`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlKc4 z6LsWKln4VG{tgGAQojWr0CXM5cKF@^&x}1XMhRYkqy`MdnkGRe&)RMEw|Stan^u( zrd43&tk<+YA2xv1Y`o;OX>^geY;Cg|wa)85Eq`xiz0$uG9H*3yGMwv6f2w8pbW?hF pGK7}ED>3z<+O=W3ccI?b!4WOdk1kLZ(xumkM4XAW{Qv}(;MM>D diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 3bfecee..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEA4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEA4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ea4.16ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fc6efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.81445e+017 -1.24458e-018 -1.94726e+017 -7.41111e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00274000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00274000 952fced9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00274000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_description.txt deleted file mode 100644 index 3bfecee..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEA4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEA4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ea4.16ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fc6efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.81445e+017 -1.24458e-018 -1.94726e+017 -7.41111e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00274000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00274000 952fced9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00274000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12079/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e58cdfec6ef0c748e3845ad88e83a556d6a00f67..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4r1@_CV0$WVZ@p2t?3QHvusbL6kIFXh1lJc{3Ms2O>!3?#*xh^FHQdcZo{)4Ga(k zmLX9u5v3_XmFZ`RUMwH^_WQ)~+V;_hi<4I`9_Us5hYmkkJ=*taB>8xKes*rUxbooi z!tnR_%%jn>FQ2c@p4)ff>A|nB$KHOpeE!R};r`KU>F2#;J5R;4i;t&omM%pj_jfP< z*l%t;JJvV%>(z}NC$Zu`TBKY+CGBK9=yaQ@blOu6QDSG*5M>ISsXI>9-TY)3lW2F! zPS-1rQmk{Hq_Ss4NW@8sc_)(6u*rJ3p_z9ZEz2NktXY;k%bpd_I9g$U8XArt3=HQ> zGEL;&g4tGgpxd7JJf}QoJe8;PY{PIP+A_8>ltMk7bh7E^+f=#ptGt;bK9@#iU?z=B zz$9=Kft&9M4ab#2rz!HJfb)n#&j>5n(+TXrGTtSa1GR`bUJIGJ7FY(Jp=abNG_gNv z5yxk1SQ7F1I&nQ?$kq>V3JekB7^d~|7nTo%+geJOmyjl1l;k)T22cS*rcLb+ZG#)zEclGVZLR8>ZT>xugqg?=N&c=?gL#vU^{=7#JiIjjPuuKYtC}o3vJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index dd9c3e0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1510: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1510: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1510.904): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fd1efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.70154e-023 -8.70512e+024 -3.0155e+021 2.27217e-034 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00338000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00338000 bfed9877 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00338000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_description.txt deleted file mode 100644 index dd9c3e0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1510: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1510: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1510.904): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fd1efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.70154e-023 -8.70512e+024 -3.0155e+021 2.27217e-034 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00338000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00338000 bfed9877 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00338000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/12254/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e58cdfec6ef0c748e3845ad88e83a556d6a00f67..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4r1@_CV0$WVZ@p2t?3QHvusbL6kIFXh1lJc{3Ms2O>!3?#*xh^FHQdcZo{)4Ga(k zmLX9u5v3_XmFZ`RUMwH^_WQ)~+V;_hi<4I`9_Us5hYmkkJ=*taB>8xKes*rUxbooi z!tnR_%%jn>FQ2c@p4)ff>A|nB$KHOpeE!R};r`KU>F2#;J5R;4i;t&omM%pj_jfP< z*l%t;JJvV%>(z}NC$Zu`TBKY+CGBK9=yaQ@blOu6QDSG*5M>ISsXI>9-TY)3lW2F! zPS-1rQmk{Hq_Ss4NW@8sc_)(6u*rJ3p_z9ZEz2NktXY;k%bpd_I9g$U8XArt3=HQ> zGEL;&g4tGgpxd7JJf}QoJe8;PY{PIP+A_8>ltMk7bh7E^+f=#ptGt;bK9@#iU?z=B zz$9=Kft&9M4ab#2rz!HJfb)n#&j>5n(+TXrGTtSa1GR`bUJIGJ7FY(Jp=abNG_gNv z5yxk1SQ7F1I&nQ?$kq>V3JekB7^d~|7nTo%+geJOmyjl1l;k)T22cS*rcLb+ZG#)zEclGVZLR8>ZT>xugqg?=N&c=?gL#vU^{=7#JiIjjPuuKYtC}o3vJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13226/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b12087eefc2834f1033fb74e444a9cd1c130536f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|VR@sxbub`JMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&}vUH?2 z4FRv;9Zx}Qpi2?TrysxjM~aq+7PxjhA}6ef-V#yQ5!90YEQmh9_YOX!&_|ea%sD%~ zm??91&cW+4!JkFrBAMole3mdIxy&pxmKKh(L$SoNIAPih&5;FlKI&NXx;tmHFM4Jd ziZ+HTYQ+<;sE^>?q44%l{NI;wVtiQ^eOMO;pS3Q~(zx~kd4U?;NuaJeseXS<%CE;s z=<4H>aA8~;*T$xP)Oc61=Inuf&Xf6P#-YUHa2k+51dct}2M#URxjiqRLof1$jD;9SEB@ zUb)-W%Ij^VOk2EGcu9?wu{Qcd8gD1k{Qe0`B7exF{g_Gm>sts`cpA8nQ|OJYu{RDz z1@h&4>0o=9BYVj(|K|vZgg^@1F{KzIC>}J#PreTY?y@JWMVtQ_EuU8<8qXXTx+RZr z^SoBko}Cnpn~kP7%t^spAz2Op6Y S`P56RpRnJsd)Nc)a{L8>?q44%l{NI;wVtiQ^eOMO;pS3Q~(zx~kd4U?;NuaJeseXS<%CE;s z=<4H>aA8~;*T$xP)Oc61=Inuf&Xf6P#-YUHa2k+51dct}2M#URxjiqRLof1$jD;9SEB@ zUb)-W%Ij^VOk2EGcu9?wu{Qcd8gD1k{Qe0`B7exF{g_Gm>sts`cpA8nQ|OJYu{RDz z1@h&4>0o=9BYVj(|K|vZgg^@1F{KzIC>}J#PreTY?y@JWMVtQ_EuU8<8qXXTx+RZr z^SoBko}Cnpn~kP7%t^spAz2Op6Y S`P56RpRnJsd)Nc)a{L8>uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 741847d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x4D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x4D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(4d0.480): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0fd2afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.62612e+025 -1.12466e+035 1.51057e+031 3.80787e-029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032a000 f90a9d53 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_description.txt deleted file mode 100644 index 741847d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x4D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x4D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(4d0.480): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0fd2afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.62612e+025 -1.12466e+035 1.51057e+031 3.80787e-029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032a000 f90a9d53 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/13760/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 37750ba..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B8C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B8C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b8c.dc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0f6f6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.#QNAN 3.19256e-005 -2.71259e-007 -1.2645e+020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d4000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d4000 b737469a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d4000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_description.txt deleted file mode 100644 index 37750ba..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B8C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B8C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b8c.dc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0f6f6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.#QNAN 3.19256e-005 -2.71259e-007 -1.2645e+020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d4000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d4000 b737469a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d4000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14348/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/14786/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ecb707f95fea5cb3382e7529ddeb03b3a976e461..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@&E+vj-Li5_S<$n@F_KSZ!isDK=suqF72uI&EYpmjsh8jTlg4 zND;6REVQw3&Ol5f0Y$|~$U!7%H-`!b2^s(MW-jC|*huE?&2RqiW4?BmsDNKzA5mZ# z5*;U^G$p7a{U{J!f$t=INFnp)_s0|K*GDgW-kMq4>Y496(=|La@#ONWkq@PXpTnmg zfB7@BI{UJBC>~$?*86n2fACXv^XBsRqnn5CJeptpb+7ii^X%P2&w3s%ox1km#;yJr zw`VUczn_}Cy1Fp&_1s3+`RB*5%>EWB=PRYHj0c=_cZ7!X3Zc^!c~Zc2M4@Md73}E*c3>GF5zM~sh&j?7GIe)g8F+@C zk*Cna@uWeVpKW7F4K>j7e_@7N8 zA|)}g6)0$Hr)@ zF|{lAab0)m&3Y}oZpO*4wyXJI_3|E#hmQ5#{PtrZs^eB&0&8KjT>@*a#*VNg zhB0G0U&m*&66t(NG|XF}bCtko1lGt@P)tY496(=|La@#ONWkq@PXpTnmg zfB7@BI{UJBC>~$?*86n2fACXv^XBsRqnn5CJeptpb+7ii^X%P2&w3s%ox1km#;yJr zw`VUczn_}Cy1Fp&_1s3+`RB*5%>EWB=PRYHj0c=_cZ7!X3Zc^!c~Zc2M4@Md73}E*c3>GF5zM~sh&j?7GIe)g8F+@C zk*Cna@uWeVpKW7F4K>j7e_@7N8 zA|)}g6)0$Hr)@ zF|{lAab0)m&3Y}oZpO*4wyXJI_3|E#hmQ5#{PtrZs^eB&0&8KjT>@*a#*VNg zhB0G0U&m*&66t(NG|XF}bCtko1lGt@P)t%4NsG z;N;EhP_P8J3B1zq+c$r^T#`f!{I**nCoG6Q5>eX{R7rmqL|@?h1Rpa^j@{(kL`=9q zO$@gKMKh*o;~Zs;OiUR`G85o0>C*(ilYVeXFG-V1tn$XFVh*g@bJn}8XSN}0W4NM5 zJn@RU2;S{8Z}-{%tArEddztlql^Oh`b%9Fb$_L~Hs&yxU+Ty7C^C2mJ97dt54llxm zu{5rXb@id_>(>n2db}eKY1-&uI9(D$#J}xX=xGgzM8v z-HgmPsei&}^H`<+!H@jgr#?0?x`vHibY&BZrH|FJiXPU$y5J+SA|E?xbr1UkdxSl~ GF2_GYrSyIP diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5280a89..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1860: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1860: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1860.e38): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07fe7b19 edx=00000000 esi=00000000 edi=0fc6efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.788897797823939680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-9.80512e-016 -2.24991e-015 -1.30083e-012 -1.15438e-035 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080c8130 08045930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00361000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00361000 82fc4ae1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00361000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_description.txt deleted file mode 100644 index 5280a89..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1860: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1860: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1860.e38): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07fe7b19 edx=00000000 esi=00000000 edi=0fc6efd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.788897797823939680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-9.80512e-016 -2.24991e-015 -1.30083e-012 -1.15438e-035 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080c8130 08045930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00361000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00361000 82fc4ae1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00361000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15040/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index eec4aa8b072eed74ce1fd2a4da48f7d3a1f76a41..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$&LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N;EhP_P8J3B1zq+c$r^T#`f!{I**nCoG6Q5>eX{R7rmqL|@?h1Rpa^j@{(kL`=9q zO$@gKMKh*o;~Zs;OiUR`G85o0>C*(ilYVeXFG-V1tn$XFVh*g@bJn}8XSN}0W4NM5 zJn@RU2;S{8Z}-{%tArEddztlql^Oh`b%9Fb$_L~Hs&yxU+Ty7C^C2mJ97dt54llxm zu{5rXb@id_>(>n2db}eKY1-&uI9(D$#J}xX=xGgzM8v z-HgmPsei&}^H`<+!H@jgr#?0?x`vHibY&BZrH|FJiXPU$y5J+SA|E?xbr1UkdxSl~ GF2_GYrSyIP diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15228/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 07ac61a090fcd8c2f3a4bcbb8d0da0a3400b75d3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 867 zcmb_ayKTcT6g*jmRZ^OOu7Z@_K$#+QWCIECVoU-grAM#@j8cIX=3gXFE!@MccztccY;Vv^js|9Du~BW(U(wy|aU9i)Kgc zP&K2?K5O=TtL=3XofV)z&FWy`j90ThA2xv1Y`U1u=A&Co%h3+2QR}?^bLH=?>{s$@ z!Eq8f#^Kyt`co5!4>!r1i$m}PUWlm=)z*i4=R&h@j8cIX=3gXFE!@MccztccY;Vv^js|9Du~BW(U(wy|aU9i)Kgc zP&K2?K5O=TtL=3XofV)z&FWy`j90ThA2xv1Y`U1u=A&Co%h3+2QR}?^bLH=?>{s$@ z!Eq8f#^Kyt`co5!4>!r1i$m}PUWlm=)z*i4=R&h!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index bf6eb9d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1850: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1850: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1850.198c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=07cfafd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.24072e+019 -9.19119e-027 3.48742e+011 -2.62667e-038 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002a0000 4d38a954 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_description.txt deleted file mode 100644 index bf6eb9d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1850: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1850: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1850.198c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=07cfafd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.24072e+019 -9.19119e-027 3.48742e+011 -2.62667e-038 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002a0000 4d38a954 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/15718/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/16416/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d058f4ee32c08902bcf30736f4e510ef13269605..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1114 zcmb`GJx&8L5QU$!QMPopqln~Gh%z@Yr=aEtxq(;WVg@8AbA&{qq4aiJAk3SwH%hia zLO2MyTF@aZBpMH*~$6A?q97f{)Y`ww1QhRr<MyTF@aZBpMH*~$6A?q97f{)Y`ww1QhRr<NvI3Dg!x^*N&QIR_IZn3P$=3%P)^B{gbgZB2%g;hI;8e3feJ|=PP+zmLBkWLoWNUo( zvFEqGJ{>2o3qX&s2s9n}5|+m&J%Ed|S*ILUjdW=^4RvsF)N)?$+4A>h{R?<7yBV2p zQvZzK=BY~kqaXRFPkn4)bPXH3=*lJ*OCPIc6+Nthb-_odA|E>`^#JNvI3Dg!x^*N&QIR_IZn3P$=3%P)^B{gbgZB2%g;hI;8e3feJ|=PP+zmLBkWLoWNUo( zvFEqGJ{>2o3qX&s2s9n}5|+m&J%Ed|S*ILUjdW=^4RvsF)N)?$+4A>h{R?<7yBV2p zQvZzK=BY~kqaXRFPkn4)bPXH3=*lJ*OCPIc6+Nthb-_odA|E>`^#J!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 589d5c7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x920: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x920: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(920.15f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f77b19 edx=00000000 esi=00000000 edi=0f68cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.769194549449606240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.71562e+035 -2.23495e-033 0.236189 6.40688e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08058130 07fd5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002fe000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002fe000 fd76d4c9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002fe000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_description.txt deleted file mode 100644 index 589d5c7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x920: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x920: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(920.15f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f77b19 edx=00000000 esi=00000000 edi=0f68cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.769194549449606240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.71562e+035 -2.23495e-033 0.236189 6.40688e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08058130 07fd5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002fe000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002fe000 fd76d4c9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002fe000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/1755/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 02ea87c91addb5f773da226ef5638561886084c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&@VR@sxbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yKgzY@jGmg!bvj@BUGwB%&+)wp$`6tcczdQP&aFf_~@hvSWBK!NqaLEEBPV$V?6* zb7uI_K^+c0$0)*&vxKCK88SNz$^?ykX^1Hb|2^tha#r0rn_bZ}yHK<-TvIEacujo- zANGa!`{Mt$fD_}(qUimqF!-!>ffmM<56BDD=$!=Ws-xUGXm~*1W5#XsV6mw2r7U)>uJy=Wz$Z=ABn=H?{I+Qz_F% z-zaCSjJ46H^2W6jX@38LCDCrkr2Uvl`aA3bQ{)uZMsIA5y>T!qQ1<~XJJ=59$X+tc z|2hI9A&>%BOew|)iU$qx$HOep4@)G|`hP~t=T(WuGslH)$s^pH)+*YwlcI6G*7Sxs ziAL*EZt*mh^tnEH({r3`wUgG3jq6t$4;|~5{_?R9jX2ekpxR4zNl>lTxFg)5XjE%_ z*0|@_T6f3E>jKC}SQ4}x^%9otlODju*{o9uYmQvfc$(_u;;7}k-g1=p&92Yj!R&To zzD>guKAXon4L|+F-+dZl3!@v@)JL~yW3}|LUe?jWT38=^L{{WuFRgySe!(7LPq54J E2j{r;=>Px# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e8d766e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1bf0.1fc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=07cd2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.26939e+034 -3.57004e-022 1.20434e-018 -1.54323e-027 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028d000 70f7fb2a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_description.txt deleted file mode 100644 index e8d766e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1bf0.1fc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=07cd2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.26939e+034 -3.57004e-022 1.20434e-018 -1.54323e-027 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028d000 70f7fb2a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/17789/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 02ea87c91addb5f773da226ef5638561886084c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&@VR@sxbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yKgzY@jGmg!bvj@BUGwB%&+)wp$`6tcczdQP&aFf_~@hvSWBK!NqaLEEBPV$V?6* zb7uI_K^+c0$0)*&vxKCK88SNz$^?ykX^1Hb|2^tha#r0rn_bZ}yHK<-TvIEacujo- zANGa!`{Mt$fD_}(qUimqF!-!>ffmM<56BDD=$!=Ws-xUGXm~*1W5#XsV6mw2r7U)>uJy=Wz$Z=ABn=H?{I+Qz_F% z-zaCSjJ46H^2W6jX@38LCDCrkr2Uvl`aA3bQ{)uZMsIA5y>T!qQ1<~XJJ=59$X+tc z|2hI9A&>%BOew|)iU$qx$HOep4@)G|`hP~t=T(WuGslH)$s^pH)+*YwlcI6G*7Sxs ziAL*EZt*mh^tnEH({r3`wUgG3jq6t$4;|~5{_?R9jX2ekpxR4zNl>lTxFg)5XjE%_ z*0|@_T6f3E>jKC}SQ4}x^%9otlODju*{o9uYmQvfc$(_u;;7}k-g1=p&92Yj!R&To zzD>guKAXon4L|+F-+dZl3!@v@)JL~yW3}|LUe?jWT38=^L{{WuFRgySe!(7LPq54J E2j{r;=>Px# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/18162/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4df378a8cbae0d7b823e5a2418e3577ea9495149..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 919 zcmb_aF-`+95FF>CxZGTi+os^Fmkf6*H5{ZV=*Ij`yvuh_xu0cXL z8IQ+1Yp+)aEcn}Q0jJymw*WR9P%ZJf03Nt^$30r`2$ybL=BlaeD@%gyhY5|wyDxa< z{u`p4GXmLV9Zaw6D@)~2xvSh)He#L@vLWsX#{z#H10BNvBhFkR#z@v39>~AeX2e-* z<6UU~GD5!2N*J#;W;#F^UZ3wOTC&rmv2D%1&N->((Ivgc(^%}M{3KPM;;6TswLNTX zFEq4(bvZw=55UN-7K3R~cQKf@Y*xeyRWsY-C(W8KwY@GUu?y&DSPhoWd=2aKVGWq| zrcEVm9-Y#7UfN>TYVFs5j`F?L`Gfpiv72(CxZGTi+os^Fmkf6*H5{ZV=*Ij`yvuh_xu0cXL z8IQ+1Yp+)aEcn}Q0jJymw*WR9P%ZJf03Nt^$30r`2$ybL=BlaeD@%gyhY5|wyDxa< z{u`p4GXmLV9Zaw6D@)~2xvSh)He#L@vLWsX#{z#H10BNvBhFkR#z@v39>~AeX2e-* z<6UU~GD5!2N*J#;W;#F^UZ3wOTC&rmv2D%1&N->((Ivgc(^%}M{3KPM;;6TswLNTX zFEq4(bvZw=55UN-7K3R~cQKf@Y*xeyRWsY-C(W8KwY@GUu?y&DSPhoWd=2aKVGWq| zrcEVm9-Y#7UfN>TYVFs5j`F?L`Gfpiv72($2#wJu{3II0EoGQYt3>@X=l2jMm+h3x(q(-jrV)= zf1ksN_GNB*zci*eX0x#@mWD ze-~Km6Y&vspJ3AV2Kwy$=Dc@4II}Z3Pmo(@w%dObj-Aa{noAzte`4+}p8I2u_4~xR z1G~hj0h?fq!TgJgHE&j#rrJqC>xe36jTPi{5jzmB-bLkhQ!8&bm9lJtFgPn`?Tm#q z-i)OA-3yjPem{}U$4oMRz$q|9j^eL|7i_hRuvj999O!bi16yXmg&eriiY)C(^t$zG^Vz4kC(yH zPxU3bKE=sbJ8M1IuzscSr(=DaUp^M10k>)is-t9Ef@-bCj<7?~sMh#NW6!U(o{me@ z1(1)hBxpJ6B`n7$y@0E`Sr-dyj&x->4|Q;L)pB2N+3bDu{uw;D-Hpt5rGLU_^H`Vu vR~-3AEPZZZbPF519Og}~7BSb0I!9Oo>r%|f%6#l(s-Ljmut(Sv?7IB{51IM( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 76d86cf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cc8.96c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=07c02fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13408e-008 -3.00814e-038 1.23715e-011 -3.38996e+036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036b000 13824aac 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_description.txt deleted file mode 100644 index 76d86cf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cc8.96c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=07c02fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13408e-008 -3.00814e-038 1.23715e-011 -3.38996e+036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036b000 13824aac 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19411/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index cf8b867ed9b4d785aa5799eda251e13606525356..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(K~%R=mqGwp1u1m{%2lr88*n2hNYeQTKFTTqlF~=80AFC)u`oFK z=OMuo5FiM=)a$2#wJu{3II0EoGQYt3>@X=l2jMm+h3x(q(-jrV)= zf1ksN_GNB*zci*eX0x#@mWD ze-~Km6Y&vspJ3AV2Kwy$=Dc@4II}Z3Pmo(@w%dObj-Aa{noAzte`4+}p8I2u_4~xR z1G~hj0h?fq!TgJgHE&j#rrJqC>xe36jTPi{5jzmB-bLkhQ!8&bm9lJtFgPn`?Tm#q z-i)OA-3yjPem{}U$4oMRz$q|9j^eL|7i_hRuvj999O!bi16yXmg&eriiY)C(^t$zG^Vz4kC(yH zPxU3bKE=sbJ8M1IuzscSr(=DaUp^M10k>)is-t9Ef@-bCj<7?~sMh#NW6!U(o{me@ z1(1)hBxpJ6B`n7$y@0E`Sr-dyj&x->4|Q;L)pB2N+3bDu{uw;D-Hpt5rGLU_^H`Vu vR~-3AEPZZZbPF519Og}~7BSb0I!9Oo>r%|f%6#l(s-Ljmut(Sv?7IB{51IM( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 94120c18cf4f00667c431903e852a09dbd14dc06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9uM}<_;kQ64*8B83W282!h34Y%Fa=5DN<%g%kmcfS^0xDaI6% zMzk|ASQzjh2ncgV6a{ww~O&F#MylJvDRa=$XpMjj7{{OW)TU`ufR<<(<_p2VYz(uAEqW`eAJI!1~hQ z$fvpS%I{Zi>GSQStBq$L2eHmyTdbVBnD(+%bGpk^I_)VZDX|_kNtpr{>W=eu=YJT% ziFQA7x?XgYVu$M_MV>_=kteCdJCT%zE!O9on)#sFu?*towq?OH@+^9m;!TdHq2c^m zV7OkAX`${e%(l7%-SeFFocCPtRG!ka3&V|Q-`L4873R}PFI(Q3D#-746@ytAPPX_Aj_maYDuz>tahVeg}L_|tr zpvRDuQlRxJnHBo9z-+IH9E#L zbiRSlW-ZqFJJB(3gw9n0qiI+tQ$duda6qVdAXWmFz%nTmvXp6McB)m_d)OLm1J>XE E0BVWwhX4Qo diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index d1b480a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA08: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA08: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a08.1714): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07fb7b19 edx=00000000 esi=00000000 edi=07ddafd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.780453548520653920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.832483700000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.01676e-026 -2.85655e+016 -892.959 -6.85506e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08098130 08015930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021b000 5ef4e14f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_description.txt deleted file mode 100644 index d1b480a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA08: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA08: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a08.1714): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07fb7b19 edx=00000000 esi=00000000 edi=07ddafd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.780453548520653920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.832483700000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.01676e-026 -2.85655e+016 -892.959 -6.85506e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08098130 08015930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021b000 5ef4e14f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/19480/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 94120c18cf4f00667c431903e852a09dbd14dc06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9uM}<_;kQ64*8B83W282!h34Y%Fa=5DN<%g%kmcfS^0xDaI6% zMzk|ASQzjh2ncgV6a{ww~O&F#MylJvDRa=$XpMjj7{{OW)TU`ufR<<(<_p2VYz(uAEqW`eAJI!1~hQ z$fvpS%I{Zi>GSQStBq$L2eHmyTdbVBnD(+%bGpk^I_)VZDX|_kNtpr{>W=eu=YJT% ziFQA7x?XgYVu$M_MV>_=kteCdJCT%zE!O9on)#sFu?*towq?OH@+^9m;!TdHq2c^m zV7OkAX`${e%(l7%-SeFFocCPtRG!ka3&V|Q-`L4873R}PFI(Q3D#-746@ytAPPX_Aj_maYDuz>tahVeg}L_|tr zpvRDuQlRxJnHBo9z-+IH9E#L zbiRSlW-ZqFJJB(3gw9n0qiI+tQ$duda6qVdAXWmFz%nTmvXp6McB)m_d)OLm1J>XE E0BVWwhX4Qo diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b100a30cde7bc9d9adb4389f1e247b48fb562574..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1753 zcmb`G$8!@g6o=n>Jz3vm-#BDu_W&Vu(>v?XLhpnQp?3(qvx<|Dgc^E>(0lK7WSD_t z{)Bjj3&-`%hfKs%aVGW*IbC;c|J?Tli3lP9xGzwq{ng9g=;5Y!CyA*US?AEC^uF#dd%2yDJs2L&@<0yn>B@`SpDRptem#j{t1r00FBpA>P zYKAn!)*tD2OfKVN2ABC1coOr<(L{?YK&57lW}RleCex&v8Q?RJkD3h#=A|pCB}QrAlKs@#QFxF0*4r*XlW8nThrC_G$k-k zd@l}K49x)jlHvHjjiQHAkiZ^?z!*b{8C($mfCWilFKWZRAkv;@^Xx1iQdtu@+6IE| zaLZmw6K;s4R3sw9!<_p<x>`tZY^3KEEQ>`@uB1XYJKss0Hp9% zRe;n)M5_R)Wj0oX6$*{n(x1^-b89V6$9*CY!Yz&u@&a=1CgLl%j1irm zY8lEw&Q**1>d2=2F5iit(f?mimeI8?6DY5iPg<0}>etv;Y7A diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 32a85a9..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x970: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x970: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(970.97c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ff7b19 edx=00000000 esi=00000000 edi=07df6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.791712547591701600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.379550400000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.11343e+033 7.64276e-038 -5.77468e-016 190.194 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080d8130 08055930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f4000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f4000 14b9186f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f4000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_description.txt deleted file mode 100644 index 32a85a9..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x970: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x970: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(970.97c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ff7b19 edx=00000000 esi=00000000 edi=07df6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.791712547591701600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.379550400000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.11343e+033 7.64276e-038 -5.77468e-016 190.194 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080d8130 08055930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f4000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f4000 14b9186f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f4000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20056/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b100a30cde7bc9d9adb4389f1e247b48fb562574..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1753 zcmb`G$8!@g6o=n>Jz3vm-#BDu_W&Vu(>v?XLhpnQp?3(qvx<|Dgc^E>(0lK7WSD_t z{)Bjj3&-`%hfKs%aVGW*IbC;c|J?Tli3lP9xGzwq{ng9g=;5Y!CyA*US?AEC^uF#dd%2yDJs2L&@<0yn>B@`SpDRptem#j{t1r00FBpA>P zYKAn!)*tD2OfKVN2ABC1coOr<(L{?YK&57lW}RleCex&v8Q?RJkD3h#=A|pCB}QrAlKs@#QFxF0*4r*XlW8nThrC_G$k-k zd@l}K49x)jlHvHjjiQHAkiZ^?z!*b{8C($mfCWilFKWZRAkv;@^Xx1iQdtu@+6IE| zaLZmw6K;s4R3sw9!<_p<x>`tZY^3KEEQ>`@uB1XYJKss0Hp9% zRe;n)M5_R)Wj0oX6$*{n(x1^-b89V6$9*CY!Yz&u@&a=1CgLl%j1irm zY8lEw&Q**1>d2=2F5iit(f?mimeI8?6DY5iPg<0}>etv;Y7A diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index ddbbf62..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1600.1a18): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.16689e-033 21.3692 7.8805e+030 -3.06649e+030 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00260000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00260000 8d8201e9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bc 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00260000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_description.txt deleted file mode 100644 index ddbbf62..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1600.1a18): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-7.16689e-033 21.3692 7.8805e+030 -3.06649e+030 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00260000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00260000 8d8201e9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bc 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00260000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/20920/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8beab90da82cfb9407e023d341e7920561a733c2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`G&1(}u7{=ethHjvTNs1H?gGQ8e)y0=qeQ>&-Cr2$zL504nEEpJWbdt|()pgXLnqgI5A=L^_j&&L ziQe}M556w--#xYZcy#^FpG@reP73eVUx^~^jOsI%Wo0vmt@fnx-anreYY4!e)uH- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 542e916..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,175 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x290: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x290: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(290.1f80): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0f7b6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.77375e-022 -1.#QNAN -1.9253e-036 1.46293e-007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003c0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003c0000 657810c5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6293 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003c0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_description.txt deleted file mode 100644 index 542e916..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,175 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x290: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x290: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(290.1f80): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0f7b6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.77375e-022 -1.#QNAN -1.9253e-036 1.46293e-007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003c0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003c0000 657810c5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6293 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003c0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21550/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8beab90da82cfb9407e023d341e7920561a733c2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`G&1(}u7{=ethHjvTNs1H?gGQ8e)y0=qeQ>&-Cr2$zL504nEEpJWbdt|()pgXLnqgI5A=L^_j&&L ziQe}M556w--#xYZcy#^FpG@reP73eVUx^~^jOsI%Wo0vmt@fnx-anreYY4!e)uH- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1bdcbd40037235bf193168815b5e8ceab9f0a143..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p;G6iJ0Rr4|y<9)*8zRm}cXd(L{7^~^S8Z46h` zh$miA7s0!I=IuWFf0S^deJ!)zuQG$5v@TF-T={^!K(+29P+J^Te>^1Rx5FrO)!{|B zFqX!Zv96vq-WII+JI7idh>xiI43oCcpfASn##`f^F&cw$25Tc+wX`?j*yVXrbIzmr zXU0CqV}I7(vVB<2q%l>7-nztyjrpic8>xc?tg%#v<9y<`$@4Rxmsg&27 zLYX#rZg|Yb!dMx7B8@jAX@2*DC6V7xr1LS8%#YWs=O~Po(Hk3MXY7p%)XVqM!ger6 z_Q){)XA6jgKnnC2Qj8H44;GvDpI0Rs&KwuIA&+o6I6T2&Iziu8au)c zMWb5dv&NoZYdsw&uL~d_VM)+()Js^7PkI3tce748tU1!9;WX62#Z}9Fy=BYq&H88X zV0JSy-=zKtpUq>H`UgMqPoMhOz~~w_cF~nhES5f2%PM+U1M7m1$clXIWU71EFW4jO I33l230M|VBoB#j- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 935f94c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x13DC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x13DC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(13dc.123c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.00534e-005 -1.14946e+010 -1.82285e+030 8.65871e+028 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021d000 b8f44b89 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_description.txt deleted file mode 100644 index 935f94c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x13DC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x13DC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(13dc.123c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.00534e-005 -1.14946e+010 -1.82285e+030 8.65871e+028 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021d000 b8f44b89 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/21991/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1bdcbd40037235bf193168815b5e8ceab9f0a143..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p;G6iJ0Rr4|y<9)*8zRm}cXd(L{7^~^S8Z46h` zh$miA7s0!I=IuWFf0S^deJ!)zuQG$5v@TF-T={^!K(+29P+J^Te>^1Rx5FrO)!{|B zFqX!Zv96vq-WII+JI7idh>xiI43oCcpfASn##`f^F&cw$25Tc+wX`?j*yVXrbIzmr zXU0CqV}I7(vVB<2q%l>7-nztyjrpic8>xc?tg%#v<9y<`$@4Rxmsg&27 zLYX#rZg|Yb!dMx7B8@jAX@2*DC6V7xr1LS8%#YWs=O~Po(Hk3MXY7p%)XVqM!ger6 z_Q){)XA6jgKnnC2Qj8H44;GvDpI0Rs&KwuIA&+o6I6T2&Iziu8au)c zMWb5dv&NoZYdsw&uL~d_VM)+()Js^7PkI3tce748tU1!9;WX62#Z}9Fy=BYq&H88X zV0JSy-=zKtpUq>H`UgMqPoMhOz~~w_cF~nhES5f2%PM+U1M7m1$clXIWU71EFW4jO I33l230M|VBoB#j- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 6ab0ea1..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1024: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1024: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1024.10f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e47b19 edx=00000000 esi=00000000 edi=07c4afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.45776e-005 3.41279e+019 2.81528e-030 -5.81041e+026 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d6000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d6000 9ca3dc4d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629a 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d6000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_description.txt deleted file mode 100644 index 6ab0ea1..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1024: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1024: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1024.10f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e47b19 edx=00000000 esi=00000000 edi=07c4afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.45776e-005 3.41279e+019 2.81528e-030 -5.81041e+026 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d6000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d6000 9ca3dc4d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629a 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d6000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22022/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 237fb331580750fea7c4affeb1d3121b57dd72b1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p?=d5>G&ul~1#&AWAc;Xdx5xm=H-tM#i zR|zND_cH7KDl_;=>jIU=l@G`ZRO?OxwZ&2O=R;EdIE+G99bSYBV`*F&>*`tKZNZwq zbFB4&_=vi%FlqY?`eyuTyfxk#qcIp~ur|U2koFE7yF5>7&UrNd%-H96?2kRx?E}XS z>;i`dY+R;y*}p7U^A<(cR2j)>9Z_Mdu!5Yrkq}6M z9z%*Tg5tr1_~T(_pqIU2En2^&HGE!`XgG6R=!QJP^=YlFJv%8H)@x0#nUiQtoy#qr zhMYdvCvSR=ldX2rdaz;rO5>qp{XD;XEJOotH7BU{lARM&Yc+O+9g0S^#%GN^zt(y> zPF@#4KEjfq<*1ji9G~<8F79TXa#(YuOT%fXgNv({`+Coo-#6=@!Gqb&$b6IfCww-K xRq7x7$iIE+V*{gW*w{r^HnCXxSS_pQVGXPcJ|Zjfv6HFpVSiwcuqW7M`v(Dt-NXO@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 27a9046..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x12BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x12BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(12bc.1cf8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07dd7b19 edx=00000000 esi=00000000 edi=0fcc0fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.696011055487796320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.49164e+008 1.36605e-027 1.67181e-018 1.52717e-006 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07eb8130 07e35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00232000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00232000 2129f15f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00232000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_description.txt deleted file mode 100644 index 27a9046..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x12BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x12BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(12bc.1cf8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07dd7b19 edx=00000000 esi=00000000 edi=0fcc0fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.696011055487796320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.49164e+008 1.36605e-027 1.67181e-018 1.52717e-006 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07eb8130 07e35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00232000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00232000 2129f15f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00232000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22260/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 237fb331580750fea7c4affeb1d3121b57dd72b1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p?=d5>G&ul~1#&AWAc;Xdx5xm=H-tM#i zR|zND_cH7KDl_;=>jIU=l@G`ZRO?OxwZ&2O=R;EdIE+G99bSYBV`*F&>*`tKZNZwq zbFB4&_=vi%FlqY?`eyuTyfxk#qcIp~ur|U2koFE7yF5>7&UrNd%-H96?2kRx?E}XS z>;i`dY+R;y*}p7U^A<(cR2j)>9Z_Mdu!5Yrkq}6M z9z%*Tg5tr1_~T(_pqIU2En2^&HGE!`XgG6R=!QJP^=YlFJv%8H)@x0#nUiQtoy#qr zhMYdvCvSR=ldX2rdaz;rO5>qp{XD;XEJOotH7BU{lARM&Yc+O+9g0S^#%GN^zt(y> zPF@#4KEjfq<*1ji9G~<8F79TXa#(YuOT%fXgNv({`+Coo-#6=@!Gqb&$b6IfCww-K xRq7x7$iIE+V*{gW*w{r^HnCXxSS_pQVGXPcJ|Zjfv6HFpVSiwcuqW7M`v(Dt-NXO@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e071b77..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCF4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCF4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(cf4.16f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=0fc98fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.61332e+010 -4.0221e+012 -3.27532e+031 -2.90794e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00393000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00393000 00964c06 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00393000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_description.txt deleted file mode 100644 index e071b77..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCF4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCF4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(cf4.16f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=0fc98fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.61332e+010 -4.0221e+012 -3.27532e+031 -2.90794e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00393000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00393000 00964c06 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00393000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/22512/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 98ffecb6438ac825db2a4538657b967434f2283c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^O$viR3R diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 4e4e38d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C78: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C78: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c78.468): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.70224e+023 -4.45512e+010 -2.96433e-017 4.80855e-014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00212000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00212000 2969609d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00212000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_description.txt deleted file mode 100644 index 4e4e38d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C78: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C78: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c78.468): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.70224e+023 -4.45512e+010 -2.96433e-017 4.80855e-014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00212000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00212000 2969609d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00212000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/23367/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 98ffecb6438ac825db2a4538657b967434f2283c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^O$viR3R diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4f4b64a7a2fdcdbb5555d26868b956fdbb766648..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT+cn=g1p~by~FD@(6hpx&hKLj}QY{I#Qd4 zK-d3{CnGjc6ez;v`0?)kJCc%2w7}nXOXP$F(R(6lTY^{8?*-AP!nw&2Pm|1U!pgCO z906Iflp;(_&LJ~R1R-Vwb>SQls?ZiQgviK0Pf`l4)c$K!F)LQ>IqO~aXSN~x#&AWA zMB){75xm=H-tKe!M~NWD*E0M2Rc7#$)&(k!D<7Z>RO?9swZ&2WkB6lEb{K`OI=l!M z#?rVl*44A-+k#cUbFB4&_=vjCFd6#{`eOWUyfxk#qcIp~unxSEx8m5L6Z)m*oJWh# zjD60>{@6p`2aX-s1r80^xJ>VId|9yS7De`{GLq9eqQY2V2f3Zc354}KuiS1b<@Kge zri~LiV_~d}K9S~|kyPKkU`y!xiL@UxNq>CRdXK_b8NIPFcE;YQK>Y`_Y+*Z?Bm2m( z{_6{0*# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5ea50e3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8bc.1b28): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc30fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261480000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.47446e-029 30157.7 2.1071e-038 -1.56831e-018 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0024d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0024d000 aa94bc96 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0024d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_description.txt deleted file mode 100644 index 5ea50e3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8bc.1b28): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc30fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261480000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.47446e-029 30157.7 2.1071e-038 -1.56831e-018 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0024d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0024d000 aa94bc96 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0024d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/25396/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4f4b64a7a2fdcdbb5555d26868b956fdbb766648..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT+cn=g1p~by~FD@(6hpx&hKLj}QY{I#Qd4 zK-d3{CnGjc6ez;v`0?)kJCc%2w7}nXOXP$F(R(6lTY^{8?*-AP!nw&2Pm|1U!pgCO z906Iflp;(_&LJ~R1R-Vwb>SQls?ZiQgviK0Pf`l4)c$K!F)LQ>IqO~aXSN~x#&AWA zMB){75xm=H-tKe!M~NWD*E0M2Rc7#$)&(k!D<7Z>RO?9swZ&2WkB6lEb{K`OI=l!M z#?rVl*44A-+k#cUbFB4&_=vjCFd6#{`eOWUyfxk#qcIp~unxSEx8m5L6Z)m*oJWh# zjD60>{@6p`2aX-s1r80^xJ>VId|9yS7De`{GLq9eqQY2V2f3Zc354}KuiS1b<@Kge zri~LiV_~d}K9S~|kyPKkU`y!xiL@UxNq>CRdXK_b8NIPFcE;YQK>Y`_Y+*Z?Bm2m( z{_6{0*# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 3ea70a50e6d2aebb82c42237aa0a0a01988a59ec..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3N`R#F5iGz>%4NsG z*vUV$Bf}Dq6oFS9e*4d3UtAF_@Y`;QoUkH#OGJH7P&NHt5Pg7;oy(M6c6hPiCj)lv2PLsEV@%tF^3o`efy zZCn}K=27E)#hSl!to4ETh`Nt3Y5M~DWc+HpHQpJcF&Iz4L8IZjy%y)8jF-A|9?gGZ z97{Zo#}V_7f#U!UfkOv&uF$*UUskMni>hd9jO4VAs4_N~L3Zb{0%7~cE4Q0QdA+HW zX@iS}%WSNSjnOAuM#Q_BG=F%)l+a@)9gmr0e1~12i=4v7=#8CmFpfqA>fT|<9=3xy zvP*{kUt2&V1XAFQF2xu@@nAqa_?QKF%i1s(t^cQWd|s7kI&)m;jy%Hc^IS!Hc2YF0 z*P7lkC(#(Xlv_MaCH+*Nyy;V%Y_?~u8=KZIG(I}!FXPLfg=oU5mIT#avP*($t;UM5 zLeZ$!_(@~UFSYKDlh+B5kFX?YIqD@W+b2DMi?dm$64o4frRlk=or|NE^Louz?wh?I z!Gqb&%zTr^2mEdBn>7CPGk^DKj2(=wVe=4O-NkC@W3z0chjp+a_=v2?$3cer0s95J Jhdsb9+aKgX@LT`@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5e572cd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B6C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B6C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b6c.14c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc44fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.17933e-017 -2.45855e-020 32.8508 -9.80754e+007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00342000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00342000 b34bc749 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00342000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_description.txt deleted file mode 100644 index 5e572cd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B6C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B6C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b6c.14c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc44fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.17933e-017 -2.45855e-020 32.8508 -9.80754e+007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00342000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00342000 b34bc749 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00342000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27116/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 3ea70a50e6d2aebb82c42237aa0a0a01988a59ec..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3N`R#F5iGz>%4NsG z*vUV$Bf}Dq6oFS9e*4d3UtAF_@Y`;QoUkH#OGJH7P&NHt5Pg7;oy(M6c6hPiCj)lv2PLsEV@%tF^3o`efy zZCn}K=27E)#hSl!to4ETh`Nt3Y5M~DWc+HpHQpJcF&Iz4L8IZjy%y)8jF-A|9?gGZ z97{Zo#}V_7f#U!UfkOv&uF$*UUskMni>hd9jO4VAs4_N~L3Zb{0%7~cE4Q0QdA+HW zX@iS}%WSNSjnOAuM#Q_BG=F%)l+a@)9gmr0e1~12i=4v7=#8CmFpfqA>fT|<9=3xy zvP*{kUt2&V1XAFQF2xu@@nAqa_?QKF%i1s(t^cQWd|s7kI&)m;jy%Hc^IS!Hc2YF0 z*P7lkC(#(Xlv_MaCH+*Nyy;V%Y_?~u8=KZIG(I}!FXPLfg=oU5mIT#avP*($t;UM5 zLeZ$!_(@~UFSYKDlh+B5kFX?YIqD@W+b2DMi?dm$64o4frRlk=or|NE^Louz?wh?I z!Gqb&%zTr^2mEdBn>7CPGk^DKj2(=wVe=4O-NkC@W3z0chjp+a_=v2?$3cer0s95J Jhdsb9+aKgX@LT`@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ee55c3fb10e696a28ff972e1a9f6de008d610003..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g#RB$R)=g?~@;Z_yL9}h|S^)L%vb9fdmjJ0uPY?~*I z_Z4gY&au`9;v?!lK}Gfj^x1f8yffY#qcIpyU=_JrkvHHxls>6D=h6Hp#<9fXcpS0r z7&s2#5IA&T=L)?m{$<6Qx2TFujgg$z5mm+pE6C|Qb|7rudF6J~D6cn_GHvj#@V<CzDrWu@FtT)smpLm+X?DwpL?D*rC{{*7(WB zo?qK~I!;~}Kt95fpyjBSupFQC0xs@mol019WJuG?R3{f#E%)`7Qr?@5PvF7yW@f%g z<0C$shbE0b{mkEe8e<2gYv?>gS9h^m`q(U+=%F2S2tFb!@^O$>KcK&$570;GrThW9 CF6#&Y diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index a7e32d0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1be4.e1c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=25172.4 3.1873e+032 -5.45931e+017 6.98932e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b7000 ed247313 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_description.txt deleted file mode 100644 index a7e32d0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1be4.e1c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=25172.4 3.1873e+032 -5.45931e+017 6.98932e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b7000 ed247313 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27387/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ee55c3fb10e696a28ff972e1a9f6de008d610003..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g#RB$R)=g?~@;Z_yL9}h|S^)L%vb9fdmjJ0uPY?~*I z_Z4gY&au`9;v?!lK}Gfj^x1f8yffY#qcIpyU=_JrkvHHxls>6D=h6Hp#<9fXcpS0r z7&s2#5IA&T=L)?m{$<6Qx2TFujgg$z5mm+pE6C|Qb|7rudF6J~D6cn_GHvj#@V<CzDrWu@FtT)smpLm+X?DwpL?D*rC{{*7(WB zo?qK~I!;~}Kt95fpyjBSupFQC0xs@mol019WJuG?R3{f#E%)`7Qr?@5PvF7yW@f%g z<0C$shbE0b{mkEe8e<2gYv?>gS9h^m`q(U+=%F2S2tFb!@^O$>KcK&$570;GrThW9 CF6#&Y diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 19cffbbd942a0848c76ffe816d238da495d56360..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 161 zcmZ9^y$ypv3oqht;L{k!+KssGiVM4qDV+t47o{PK7*$ Sw~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e75245c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF0C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF0C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f0c.1fa0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0f800fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.69701e-016 -2.51438e-028 -1.40994e-038 -2.75203e-035 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002e5000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002e5000 f271097b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002e5000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_description.txt deleted file mode 100644 index e75245c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF0C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF0C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f0c.1fa0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0f800fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.69701e-016 -2.51438e-028 -1.40994e-038 -2.75203e-035 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002e5000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002e5000 f271097b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002e5000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/27794/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 19cffbbd942a0848c76ffe816d238da495d56360..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 161 zcmZ9^y$ypv3oqht;L{k!+KssGiVM4qDV+t47o{PK7*$ Sw~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0e06587b4eb25b93dfeed31e285d1d52ff6d57a2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YV>hBWiJ;^V+{J?wL3UXp2`ZX9M?&4DI8Z+p&o&Uz|O>DhtdMzm>crI-ry>A0H>@9$7$F0QghhWtz# zm4c}>G6v(oQ3TH47aGpXg-%oCNdeapg`N>su%{E)fn~8QnAJ+e9I1p%T?s4$&(JgS z6q-05w}|u8HkL$wwnjXkF=Xcta0(2O;~04g&)75d%sd&Wv)@Ys8-NAmUowpU*(4%T z5(7Pkq?7`!2NU9thv|Uc?hR{E>3>>mx~nubyBs|_CV_BqeJ!Vj32afbRO0laG1_WO z?aF;zH(h$CUJI`~aq_FJYd%=Bv_a#cV|_Qj{aA>axK)?HTG(utz?!SEBka&>RCBze zvFDANPiM5?1(1)hP2h6W+ps-8@dfnUO-Z{j=h#j+*M~glxoUe~o7vp^=KB?}?roxF z%!JOC@!2dzI(s8p=9SQyieWSYYo#j4$13a-D(Z`rfW@#>3WY3X8mXP?HS8^H3APOD GZGQmD5b?bL diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 0f9486d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bc8.11fc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e37b19 edx=00000000 esi=00000000 edi=07c5afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.190183400000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.11365e-015 1.30524e-026 -1.49569e-037 -5.66586e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00205000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00205000 6867a6e7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00205000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_description.txt deleted file mode 100644 index 0f9486d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bc8.11fc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e37b19 edx=00000000 esi=00000000 edi=07c5afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.190183400000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.11365e-015 1.30524e-026 -1.49569e-037 -5.66586e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00205000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00205000 6867a6e7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00205000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/28527/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0e06587b4eb25b93dfeed31e285d1d52ff6d57a2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YV>hBWiJ;^V+{J?wL3UXp2`ZX9M?&4DI8Z+p&o&Uz|O>DhtdMzm>crI-ry>A0H>@9$7$F0QghhWtz# zm4c}>G6v(oQ3TH47aGpXg-%oCNdeapg`N>su%{E)fn~8QnAJ+e9I1p%T?s4$&(JgS z6q-05w}|u8HkL$wwnjXkF=Xcta0(2O;~04g&)75d%sd&Wv)@Ys8-NAmUowpU*(4%T z5(7Pkq?7`!2NU9thv|Uc?hR{E>3>>mx~nubyBs|_CV_BqeJ!Vj32afbRO0laG1_WO z?aF;zH(h$CUJI`~aq_FJYd%=Bv_a#cV|_Qj{aA>axK)?HTG(utz?!SEBka&>RCBze zvFDANPiM5?1(1)hP2h6W+ps-8@dfnUO-Z{j=h#j+*M~glxoUe~o7vp^=KB?}?roxF z%!JOC@!2dzI(s8p=9SQyieWSYYo#j4$13a-D(Z`rfW@#>3WY3X8mXP?HS8^H3APOD GZGQmD5b?bL diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 177ba6b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F8C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F8C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f8c.db4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=07cb0fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.33377e+036 1.11267e+033 7.27165e+010 -1.32248e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b0000 aaba19ba 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_description.txt deleted file mode 100644 index 177ba6b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F8C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F8C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f8c.db4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=07cb0fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.33377e+036 1.11267e+033 7.27165e+010 -1.32248e-037 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b0000 aaba19ba 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/29083/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 22c25bd97c982dd31ffec4a2f65356017ca71f94..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3N`R#F5iGz>%4NsG z*vUV$Bf}Dq6oE&Y{dS)FAW5{qZ@VRO!iwlE5%oR6s_FNF=!45SGedKB?3jqjxy%F~ zW@2S_lu;(5!{24pIEiUNh8rCSEeI3%wSl#gDtP`aO)T+Mf6jJS>=XM?Y-6~hPCW67 zh6vv63vc(u|E-1-^0_YdepMKJ*1ABoapeQ@0=2r6Kz(&o`~4v)zZ_a{oz=!AZ$JLl2-C&sbF z<9HmAKL(BiI0OzI*ttUQiho(L<}IpXQ)48jbwri1!3uIZj~xixH(t5jG|KBurA!-n zt;iWGV`KD*G~Ugm`NI>IME;mb`!SRBcQ^&6$SG`$-q;xj<7iZ%?j2h8&>hr~y=0jG zRRSU*kOCv76k`O%gNFFyVHRMNy&|lDd=mYdp F{s0Kp?@|B& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 402be9b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19B4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19B4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74b80000 00000000`74b99000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749e0000 00000000`74b7a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19b4.f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=07ca6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.31409e-005 -4.1413e-005 -3.10809e-024 -8.02e-030 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0027d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0027d000 52f0fe91 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0027d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_description.txt deleted file mode 100644 index 402be9b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19B4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19B4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74b80000 00000000`74b99000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749e0000 00000000`74b7a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19b4.f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=07ca6fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.31409e-005 -4.1413e-005 -3.10809e-024 -8.02e-030 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0027d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0027d000 52f0fe91 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0027d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/30181/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 22c25bd97c982dd31ffec4a2f65356017ca71f94..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3N`R#F5iGz>%4NsG z*vUV$Bf}Dq6oE&Y{dS)FAW5{qZ@VRO!iwlE5%oR6s_FNF=!45SGedKB?3jqjxy%F~ zW@2S_lu;(5!{24pIEiUNh8rCSEeI3%wSl#gDtP`aO)T+Mf6jJS>=XM?Y-6~hPCW67 zh6vv63vc(u|E-1-^0_YdepMKJ*1ABoapeQ@0=2r6Kz(&o`~4v)zZ_a{oz=!AZ$JLl2-C&sbF z<9HmAKL(BiI0OzI*ttUQiho(L<}IpXQ)48jbwri1!3uIZj~xixH(t5jG|KBurA!-n zt;iWGV`KD*G~Ugm`NI>IME;mb`!SRBcQ^&6$SG`$-q;xj<7iZ%?j2h8&>hr~y=0jG zRRSU*kOCv76k`O%gNFFyVHRMNy&|lDd=mYdp F{s0Kp?@|B& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 387b5d5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1148: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1148: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1148.16dc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f77b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.769194549449606240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.88434e-029 5.51803 1.53739e+019 -9.02742e+027 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08058130 07fd5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00274000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00274000 358b58b5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00274000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_description.txt deleted file mode 100644 index 387b5d5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1148: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1148: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1148.16dc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f77b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.769194549449606240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.88434e-029 5.51803 1.53739e+019 -9.02742e+027 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08058130 07fd5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00274000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00274000 358b58b5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00274000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31521/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 02b221e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1110: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1110: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1110.1664): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=268593 3.35981e+018 1.68414e+030 3.45606e-036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00281000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00281000 5874c64d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00281000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_description.txt deleted file mode 100644 index 02b221e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1110: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1110: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1110.1664): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=268593 3.35981e+018 1.68414e+030 3.45606e-036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00281000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00281000 5874c64d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00281000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/31724/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 848d346..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CFC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CFC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cfc.520): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f87b19 edx=00000000 esi=00000000 edi=0fc88fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.772009299217368160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.45973e-033 -2.99922e-008 -1.42958e-021 -59.5689 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08068130 07fe5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00380000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00380000 d48f1d49 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00380000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_description.txt deleted file mode 100644 index 848d346..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CFC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CFC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cfc.520): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f87b19 edx=00000000 esi=00000000 edi=0fc88fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.772009299217368160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.45973e-033 -2.99922e-008 -1.42958e-021 -59.5689 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08068130 07fe5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00380000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00380000 d48f1d49 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00380000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32031/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 53ead25..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,175 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x488: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x488: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(488.4cc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0fd2cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.32939e+029 0.346757 -5.543e-008 1.98871e-015 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00328000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00328000 8806d182 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00328000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_description.txt deleted file mode 100644 index 53ead25..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,175 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x488: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x488: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`001d0000 00000000`001f8000 C:\Windows\SysWOW64\WINMM.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(488.4cc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0fd2cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.32939e+029 0.346757 -5.543e-008 1.98871e-015 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00328000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00328000 8806d182 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00328000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/32704/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 889de9d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1564: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1564: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71960000 00000000`71983000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`03380000 00000000`033a3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`71940000 00000000`71959000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1564.1928): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07fc55f0 edx=00000000 esi=00000000 edi=0d436fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.783268298288415840000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 1.000000000000000000000e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=2.76441e+033 -7589.13 1.98478e+006 -1.14908e+020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080a8130 08025930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00246000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00246000 c29c7899 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0cd 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00246000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_description.txt deleted file mode 100644 index 889de9d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1564: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1564: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71960000 00000000`71983000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`03380000 00000000`033a3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`71940000 00000000`71959000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1564.1928): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07fc55f0 edx=00000000 esi=00000000 edi=0d436fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.783268298288415840000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 1.000000000000000000000e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=2.76441e+033 -7589.13 1.98478e+006 -1.14908e+020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080a8130 08025930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00246000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00246000 c29c7899 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0cd 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00246000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3306/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1dd1aed5684993d95270b5eef1190c93f04a4c01..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$&LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N;EhP_Trg3B1zqwM->Dt(uKaij4I~jsy%1D%X(%TvNnb* zY9te{sEgp;KJ#{;^FK-?F}{{r?^l_@Pudr#G_HJrFHo&J3Dg!x)gKQ@`Ry)S%p~(WTm??y$*hdt*cdxwZ&aX9zLyrU zLpZXR4CntG0hJI)fg?^S#t2FV6XK80Dg#H^8`h%r|BQyuyAlm&i3{D3N4Y+&m9=Ll zO~ZPv_L@0~#?-mp>S@UKxj%W+bDeCplhz9x)~_@kI@Ztg%f~`A;I3waYA^0=P_5nA z5q2mV-CCbD_WWAw)p7E=0Q@M6LEF(UWx0IP8*p)N)+v|OBZoAcPW9yCR?Gc*%aPwV zJ3fO4i<^=8CiPGFY#yuBKlqV<`qak;LDz_}i>_>9vGlQ8R?#CGL>GL7EAp|EsqPWK L5RZr_#O3${h@1GK diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 7b6f195..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBCC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBCC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bcc.e88): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=07c90fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.52078e-026 -6.59487e-039 1.85023e-016 8.29751e-032 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028a000 d32fab83 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_description.txt deleted file mode 100644 index 7b6f195..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBCC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBCC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bcc.e88): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=07c90fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.52078e-026 -6.59487e-039 1.85023e-016 8.29751e-032 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028a000 d32fab83 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/33773/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1dd1aed5684993d95270b5eef1190c93f04a4c01..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$&LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N;EhP_Trg3B1zqwM->Dt(uKaij4I~jsy%1D%X(%TvNnb* zY9te{sEgp;KJ#{;^FK-?F}{{r?^l_@Pudr#G_HJrFHo&J3Dg!x)gKQ@`Ry)S%p~(WTm??y$*hdt*cdxwZ&aX9zLyrU zLpZXR4CntG0hJI)fg?^S#t2FV6XK80Dg#H^8`h%r|BQyuyAlm&i3{D3N4Y+&m9=Ll zO~ZPv_L@0~#?-mp>S@UKxj%W+bDeCplhz9x)~_@kI@Ztg%f~`A;I3waYA^0=P_5nA z5q2mV-CCbD_WWAw)p7E=0Q@M6LEF(UWx0IP8*p)N)+v|OBZoAcPW9yCR?Gc*%aPwV zJ3fO4i<^=8CiPGFY#yuBKlqV<`qak;LDz_}i>_>9vGlQ8R?#CGL>GL7EAp|EsqPWK L5RZr_#O3${h@1GK diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 53428ad7df0a5f88a39ec165b6df011da191b519..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8l~>5Qc|ZL932ZmqNg96{OS+R<3e`oWnO*Moy5V^AUU$DglzxN3Z}lDXDG? zV<-PS*02P)2~2zV@#j4F5SM6%zwMSN2rHuZMAWtfHK)HbqEDC`IS>aPnXL~aGzCQ% z89w3>M1X__j3ky(%0?qeCj1r@q|6uqDTGQqO6cpY&gNUT=UnYfPi&KEXS$+BX7Uwv z8NAyYZ}&F;V~$C*uXEG;r7^`(^AgRS%a{W zxvC%4-&U;gyTF>Ch>yto43oAu&===-=dJV3nVrcwLGE5||IIjbRNL)?+5AA8-l`5o4^K(b+gVXYW)X?*mG%??i!K_J*}+{XebY^Q=Orvxy7cP=tH+yq4+6L6T1EwT7>l zi)fU#boZB&g-`h E1E{M0L;wH) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index fff0b0c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x14C8: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x14C8: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b80000 00000000`71ba2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b60000 00000000`71b7b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71960000 00000000`71983000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`034c0000 00000000`034e3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`71940000 00000000`71959000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(14c8.2e8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=080655f0 edx=00000000 esi=00000000 edi=11714fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.811415795966035040000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 4.261280000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-12.1126 3.82341e-013 -21.3023 2.11288e+014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08148130 080c5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 0027b000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 0027b000 3b1456a5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0d7 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0027b000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_description.txt deleted file mode 100644 index fff0b0c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x14C8: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x14C8: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b80000 00000000`71ba2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b60000 00000000`71b7b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71960000 00000000`71983000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`034c0000 00000000`034e3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`71940000 00000000`71959000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(14c8.2e8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=080655f0 edx=00000000 esi=00000000 edi=11714fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.811415795966035040000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 4.261280000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-12.1126 3.82341e-013 -21.3023 2.11288e+014 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08148130 080c5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 0027b000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 0027b000 3b1456a5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0d7 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0027b000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3384/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 53428ad7df0a5f88a39ec165b6df011da191b519..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8l~>5Qc|ZL932ZmqNg96{OS+R<3e`oWnO*Moy5V^AUU$DglzxN3Z}lDXDG? zV<-PS*02P)2~2zV@#j4F5SM6%zwMSN2rHuZMAWtfHK)HbqEDC`IS>aPnXL~aGzCQ% z89w3>M1X__j3ky(%0?qeCj1r@q|6uqDTGQqO6cpY&gNUT=UnYfPi&KEXS$+BX7Uwv z8NAyYZ}&F;V~$C*uXEG;r7^`(^AgRS%a{W zxvC%4-&U;gyTF>Ch>yto43oAu&===-=dJV3nVrcwLGE5||IIjbRNL)?+5AA8-l`5o4^K(b+gVXYW)X?*mG%??i!K_J*}+{XebY^Q=Orvxy7cP=tH+yq4+6L6T1EwT7>l zi)fU#boZB&g-`h E1E{M0L;wH) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c7d5c404f7039eb2240a5f7b8b791fe6ada894c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVI!EvgxRDbi>3jqqWt9L)=_6Qxo0Q9r zg~7=`vqM1=kS6fjv)}&n*q4?>3;b=jL{3-`y(OZyC8(1AEQmh9_YOX!&_|e~iD;S} zF}jIh@;^iDV?Ir77 z)-&6XwK3dKBc6CeT?8NYnfLqb|6an0_NB~vzsd}L(z-yUapeQ@0@b>cKy7hU{r-@Y zUk{_uRfiYh!dMzt#=3gecw4aM?;LA=AU>k*6HMAZgFYL-8Sjk`#%K)28FKNsfBgYo zg=3fJOU)&Z=ARk+9FP66$NGKX*nwT((14B0^e+3C1#8}-$eJo6Ijtiqj1^Xp(|PPb zSikYg?WR)RZVF}E;IZM68Vh4(^ocayjHLP93zkHFKatMIOfo+nrJkcORz`1ZjGeJJ zDo`)qOAFh<9N8no_@6Bx5&|jEV@NSZP&}AW_K3YHqjNG=6lfpXZm4g=oO7<^>TcF4hc!pKG@OPyxVmb& zuh(q(y;=VZ9?b4W=DXBC;j?+HQvb`3{KKa{HZZz{ja_tQ6N{yf)v}5n*1)>pBeEhN RJDKVy>^JNY_5{0be*tU0`}Y6< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 4294beb..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x14F8: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x14F8: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`719c0000 00000000`719e2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719f0000 00000000`71b89000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(14f8.f58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=081055f0 edx=00000000 esi=00000000 edi=0d454fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.839563293643654240000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 8.506050000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=8.84274e-013 4.08383e+029 -2.9974e+034 3.7612e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081e8130 08165930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00245000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00245000 613c583b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0e0 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00245000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_description.txt deleted file mode 100644 index 4294beb..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x14F8: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x14F8: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`719c0000 00000000`719e2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719f0000 00000000`71b89000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(14f8.f58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=081055f0 edx=00000000 esi=00000000 edi=0d454fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.839563293643654240000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 8.506050000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=8.84274e-013 4.08383e+029 -2.9974e+034 3.7612e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081e8130 08165930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00245000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00245000 613c583b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0e0 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00245000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3403/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c7d5c404f7039eb2240a5f7b8b791fe6ada894c5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVI!EvgxRDbi>3jqqWt9L)=_6Qxo0Q9r zg~7=`vqM1=kS6fjv)}&n*q4?>3;b=jL{3-`y(OZyC8(1AEQmh9_YOX!&_|e~iD;S} zF}jIh@;^iDV?Ir77 z)-&6XwK3dKBc6CeT?8NYnfLqb|6an0_NB~vzsd}L(z-yUapeQ@0@b>cKy7hU{r-@Y zUk{_uRfiYh!dMzt#=3gecw4aM?;LA=AU>k*6HMAZgFYL-8Sjk`#%K)28FKNsfBgYo zg=3fJOU)&Z=ARk+9FP66$NGKX*nwT((14B0^e+3C1#8}-$eJo6Ijtiqj1^Xp(|PPb zSikYg?WR)RZVF}E;IZM68Vh4(^ocayjHLP93zkHFKatMIOfo+nrJkcORz`1ZjGeJJ zDo`)qOAFh<9N8no_@6Bx5&|jEV@NSZP&}AW_K3YHqjNG=6lfpXZm4g=oO7<^>TcF4hc!pKG@OPyxVmb& zuh(q(y;=VZ9?b4W=DXBC;j?+HQvb`3{KKa{HZZz{ja_tQ6N{yf)v}5n*1)>pBeEhN RJDKVy>^JNY_5{0be*tU0`}Y6< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3422/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d97913afe2833ec1878fd8ac8c6db7d71dd3f1c7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT+cnxsQ-H5bHE(yX6t`D0B<7V;&&}vUH?2 z4S}xzJD!Z#MVBJ9kH7omk(5NVz;C-Ha>9b>EfKXX!7AzZg6IQ$@8ClUeWZ!?KM_yP zIRN6=5%UBG^hu|QB|uE@K?R^VMix6p6(}l6F%%F^{_+wtasU-*@kQz z!xc5+iC5G`@P40px6l4>C7c+yWw!UL%-|=j3sf3cJ|Hhptvd_xU;;ySz?n z&UrNd%-H96?2kSA_km*vc7a0!HZIe<>|YkFd5a?3R2j)>9Z_Md&_Pb;u>)cK#w)j* zN_o90lxgFH&R7^LqfdC@5N}4({O%boVfPd1ddwv2%bN-nIhmEw8yjP1?2QW4$@kJi zb`VGQl0pCH2#AD03d~R`#t4cB3*wK5nSojMhF-M(pV9DnRifd{abY*)5w1_YvhCSP z(Xd`?dd-}~#?ram;%Ug~bA9q=&vCMDCtD9TtY6r8=;)u*+XoZGe1)B|*zkFJU=8=>=Te%{t|<=E#(Wld8(aRm*+7=E(1x z%}?OL8nu5XX;}V0ojwbub`JMMuAZoT+cnxsQ-H5bHE(yX6t`D0B<7V;&&}vUH?2 z4S}xzJD!Z#MVBJ9kH7omk(5NVz;C-Ha>9b>EfKXX!7AzZg6IQ$@8ClUeWZ!?KM_yP zIRN6=5%UBG^hu|QB|uE@K?R^VMix6p6(}l6F%%F^{_+wtasU-*@kQz z!xc5+iC5G`@P40px6l4>C7c+yWw!UL%-|=j3sf3cJ|Hhptvd_xU;;ySz?n z&UrNd%-H96?2kSA_km*vc7a0!HZIe<>|YkFd5a?3R2j)>9Z_Md&_Pb;u>)cK#w)j* zN_o90lxgFH&R7^LqfdC@5N}4({O%boVfPd1ddwv2%bN-nIhmEw8yjP1?2QW4$@kJi zb`VGQl0pCH2#AD03d~R`#t4cB3*wK5nSojMhF-M(pV9DnRifd{abY*)5w1_YvhCSP z(Xd`?dd-}~#?ram;%Ug~bA9q=&vCMDCtD9TtY6r8=;)u*+XoZGe1)B|*zkFJU=8=>=Te%{t|<=E#(Wld8(aRm*+7=E(1x z%}?OL@IJ`N6= z$T?_74sOSonQ3y!6p37PWdsSX2}?+|o17zbLMdhp1kwKAql!7cYR_5kvYy$7tc~G{ z8u7#{>LPfz&%E7d|Bn(*jIU+Z`&DM}lhy?)jVm9J7pT^q1Zs<;>W_z{{B{_Ht~$I3 z7sk@KGS=0z#@m85f9F{11Mv}cpJ6ig8T7^Y-FR!fGe%=D&cM-Q;FRBrW0(7-=A1|K z&y0PJ$Nt!3{XTH)z%FoTz{X{Im;K9vHE&U5O_hx&KRR~kP$*3bRr&q6fdRC9uAFWEUkwN_(C z*r8}tYkbz&^J}ed$I0sg$VXTbv>f#kme(gefQz$PrySNCnbL52)Q5|smh*bck?)($ z&)~uAW@Nre{S*E+k5%d){K!9j>SF_=YuMODS2nR&`dBTi=wS`43qB$%^0AXv_po2E KN7xhWa{K`nmH9vb diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2095edd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x518: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x518: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73da0000 00000000`73f04000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73bc0000 00000000`73da0000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(518.127c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.522760000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.88221e-033 -3.88319e+009 6.70415e+022 -1.67688e-020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00233000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00233000 a6e9ca18 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00233000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_description.txt deleted file mode 100644 index 2095edd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x518: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x518: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73da0000 00000000`73f04000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73bc0000 00000000`73da0000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(518.127c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.522760000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.88221e-033 -3.88319e+009 6.70415e+022 -1.67688e-020 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00233000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00233000 a6e9ca18 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00233000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36074/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ad061632f6f1a336138f7f8791be9171465b7a15..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|V0ojwbub`JMMuAZoT+cn=g1p~by~FD@(6hpx&hKLj}QY{I#Qd4 zK-ce%CnGk{4n=4mfBNnpDVio);IrKlIblKco`~9(pi26^Ao^4|V)&+si6>@IJ`N6= z$T?_74sOSonQ3y!6p37PWdsSX2}?+|o17zbLMdhp1kwKAql!7cYR_5kvYy$7tc~G{ z8u7#{>LPfz&%E7d|Bn(*jIU+Z`&DM}lhy?)jVm9J7pT^q1Zs<;>W_z{{B{_Ht~$I3 z7sk@KGS=0z#@m85f9F{11Mv}cpJ6ig8T7^Y-FR!fGe%=D&cM-Q;FRBrW0(7-=A1|K z&y0PJ$Nt!3{XTH)z%FoTz{X{Im;K9vHE&U5O_hx&KRR~kP$*3bRr&q6fdRC9uAFWEUkwN_(C z*r8}tYkbz&^J}ed$I0sg$VXTbv>f#kme(gefQz$PrySNCnbL52)Q5|smh*bck?)($ z&)~uAW@Nre{S*E+k5%d){K!9j>SF_=YuMODS2nR&`dBTi=wS`43qB$%^0AXv_po2E KN7xhWa{K`nmH9vb diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index abe8862804aa17db577a436797a370bac19aa30e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yP3EY@k3~eO*Fr;v1&Y3A^WKni- zX2%2vqU?~0hfJBtAuJh8D1*`xQR2)9p(msGUq%y4)~Y{eyDR#{J``;XSJa6oUeOT2 z`+ecvzWBe@aAJI^i{7sagU?zQs5Y*AKwh9$cM_3ISn<(#Q(){5WOG1yCv>!7`f4RSyBB!u1dShoCjH6M3x({gC!*(!7cF8dR z>j;R1KngrDr5Gb99yG*1K4t-)vNx;D-YpI0TC&KwuIBad+VvR2WaofJ*$wWhbs zNiqro zKWXgwwbr-eysY9#o4S=32Tl#()2Rb$;DC2dA;Q*_syP9;KA%> zX1+<|BYrjyO&WjtnZNrq#tuf;uz85C?qap{u~|0J!#dayd_-2{;~=emz<$9VV2`lN F@ds$E>jMA) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index cbb2e34..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x16C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x16C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(16c8.1da4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=07cbefd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.244900000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.94629e+013 -1.34419e-006 -7.45101e-028 0.00800155 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00395000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00395000 ed3ac922 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00395000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_description.txt deleted file mode 100644 index cbb2e34..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x16C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x16C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(16c8.1da4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=07cbefd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.244900000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.94629e+013 -1.34419e-006 -7.45101e-028 0.00800155 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00395000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00395000 ed3ac922 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00395000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36259/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index abe8862804aa17db577a436797a370bac19aa30e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzi!(w5XO&|V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z-yP3EY@k3~eO*Fr;v1&Y3A^WKni- zX2%2vqU?~0hfJBtAuJh8D1*`xQR2)9p(msGUq%y4)~Y{eyDR#{J``;XSJa6oUeOT2 z`+ecvzWBe@aAJI^i{7sagU?zQs5Y*AKwh9$cM_3ISn<(#Q(){5WOG1yCv>!7`f4RSyBB!u1dShoCjH6M3x({gC!*(!7cF8dR z>j;R1KngrDr5Gb99yG*1K4t-)vNx;D-YpI0TC&KwuIBad+VvR2WaofJ*$wWhbs zNiqro zKWXgwwbr-eysY9#o4S=32Tl#()2Rb$;DC2dA;Q*_syP9;KA%> zX1+<|BYrjyO&WjtnZNrq#tuf;uz85C?qap{u~|0J!#dayd_-2{;~=emz<$9VV2`lN F@ds$E>jMA) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36262/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 25a185590f49becd4dbd2206c8f4588d88d23fac..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k3{%pq>L{;Aceq^;XaHv6Jywy|hqyrCeTbVFSN9}b20 zhvNUfgcI${vgpIQF#1XBA}x(;ACVWS(VawUtCQ-F$E^H%9EGkvz6ck_rEzU+>Sv9& z6>I+9vDQc86Y4&}q#X+Av+N}zZ!q3jWRQ=rFCzAbJ3rv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;Qdsvofd(n z{|rY)Y@k3{%pq>L{;Aceq^;XaHv6Jywy|hqyrCeTbVFSN9}b20 zhvNUfgcI${vgpIQF#1XBA}x(;ACVWS(VawUtCQ-F$E^H%9EGkvz6ck_rEzU+>Sv9& z6>I+9vDQc86Y4&}q#X+Av+N}zZ!q3jWRQ=rFCzAbJ3rv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;QdsWyj423zCVR<+5t_uUBRnetyAZOL<f?N!;r#+*fAzd#N-@ea4>;Q zJUPc04sm1&MbMB$k(3-nZkk}y4-b^0nS=Jmlk8_8)MQDv;Lf}GA{2g2r^SMIj8@^)J(^Hx79 zXRM61(dY8fg^^U>ynGBF%q0EwYX&Qv1|et)y)hU&V{cSI{{byq*dFG{J~GVz zIwCSLk^)amDWwET1P$?zmsx

QF+6h z#YgK>ZuvYE`COm9`E#CZwX?4W8#b?eymYKz`pb`nXuz!&f%;z5MWDV`V@KGb_^8(W z>|@WbeLWp#uM0qrv}fYB{%?2=oCRIPlfS9S8R0PCVpP$fQf(&{JdH|!Di1iK!8 E00h?a3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 320b5b4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1934: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1934: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1934.1318): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.52109e-022 -3.48357e-025 -1.80443e+018 -3.05669e-016 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002e2000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002e2000 9490860e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002e2000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_description.txt deleted file mode 100644 index 320b5b4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1934: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1934: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1934.1318): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fc6afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.52109e-022 -3.48357e-025 -1.80443e+018 -3.05669e-016 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002e2000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002e2000 9490860e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002e2000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/36850/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index de06d6372a927abe3990bdfddee3e1bf9a6cf984..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO>Wyj423zCVR<+5t_uUBRnetyAZOL<f?N!;r#+*fAzd#N-@ea4>;Q zJUPc04sm1&MbMB$k(3-nZkk}y4-b^0nS=Jmlk8_8)MQDv;Lf}GA{2g2r^SMIj8@^)J(^Hx79 zXRM61(dY8fg^^U>ynGBF%q0EwYX&Qv1|et)y)hU&V{cSI{{byq*dFG{J~GVz zIwCSLk^)amDWwET1P$?zmsx

QF+6h z#YgK>ZuvYE`COm9`E#CZwX?4W8#b?eymYKz`pb`nXuz!&f%;z5MWDV`V@KGb_^8(W z>|@WbeLWp#uM0qrv}fYB{%?2=oCRIPlfS9S8R0PCVpP$fQf(&{JdH|!Di1iK!8 E00h?a3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 92b6696..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xAC4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xAC4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ac4.1d00): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.83821e-010 6.71027e-015 3.06806e+018 6.26868e-019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ba000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ba000 464cac96 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62af 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ba000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_description.txt deleted file mode 100644 index 92b6696..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xAC4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xAC4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ac4.1d00): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e97b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.83821e-010 6.71027e-015 3.06806e+018 6.26868e-019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ba000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ba000 464cac96 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62af 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ba000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37329/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index d85d562..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6CC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6CC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(6cc.694): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=07cc2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.95102e+022 -1.21847e-010 1.30967e-011 -5.56208e+013 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003cf000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003cf000 f400acd4 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003cf000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_description.txt deleted file mode 100644 index d85d562..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6CC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6CC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(6cc.694): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=07cc2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.95102e+022 -1.21847e-010 1.30967e-011 -5.56208e+013 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003cf000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003cf000 f400acd4 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003cf000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/37345/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/3814/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 5f83f8421f9a1a6dd40190503f28be993afb8899..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!SY6V>tH~dijKa4oT)eHIdTKBPK&l%j*z3!4UmpGLJVZ-NNpMd zvH$lWBR1Nl2&Km#-zPsr5iRg+w?vLv5WOd&wk2pK{az4#g6#ur2qEXD$?q(S#$Q?$)wpWUS?^Sz*#^~(;fflz z#4G9|c(+&H?$!RIgc0p)srr7U41SWlK&5fz1L6YJvXVe;aTNXIAql@7My9I{FU*Cp zG_H(w^(_9j$P&MES@HwrBl12&xa}46#rWNLYrHc?V=&IZ*`wja--=_W^-^=rquFQ1 zUj4B@_L#p9Id)(da%jNDDZNwsvd9v*C{(A)NKW#I3S)&Ccy}HvVAk)vaJ#95*PB9^ zHn?NBa>l|~8GYhAh=q(K@!boigx*gi^>QYz@30FD5u>b(-q;vBV{a57kN=kzvV%CX zONQ}3TYx775}?PBVvHbLP!KOZrUE^$4Rg`@e_E5zvl0zwh6}wR4|jchcG6{I!}^tukB<4ZKL0F415Q-~ME4x60isJbR)iI@ zj%@MII@bJJm)+&$Wdg**%>j~*e0KBpNe zlbbQ;o76wyw|T5m|KP{`)2BW*5W0qpU36s=i=~g%vWgzkK)T=~qGCRFTtH~dijKa4oT)eHIdTKBPK&l%j*z3!4UmpGLJVZ-NNpMd zvH$lWBR1Nl2&Km#-zPsr5iRg+w?vLv5WOd&wk2pK{az4#g6#ur2qEXD$?q(S#$Q?$)wpWUS?^Sz*#^~(;fflz z#4G9|c(+&H?$!RIgc0p)srr7U41SWlK&5fz1L6YJvXVe;aTNXIAql@7My9I{FU*Cp zG_H(w^(_9j$P&MES@HwrBl12&xa}46#rWNLYrHc?V=&IZ*`wja--=_W^-^=rquFQ1 zUj4B@_L#p9Id)(da%jNDDZNwsvd9v*C{(A)NKW#I3S)&Ccy}HvVAk)vaJ#95*PB9^ zHn?NBa>l|~8GYhAh=q(K@!boigx*gi^>QYz@30FD5u>b(-q;vBV{a57kN=kzvV%CX zONQ}3TYx775}?PBVvHbLP!KOZrUE^$4Rg`@e_E5zvl0zwh6}wR4|jchcG6{I!}^tukB<4ZKL0F415Q-~ME4x60isJbR)iI@ zj%@MII@bJJm)+&$Wdg**%>j~*e0KBpNe zlbbQ;o76wyw|T5m|KP{`)2BW*5W0qpU36s=i=~g%vWgzkK)T=~qGCRFTtH~dijKa4oT=Bz4a7Pv+HN^QjzYIUJLU*6kPA?ohJft< zeaMIn6ex-?dHnJJzDUs$(E@+F9g$;JMDK~H>j=u_QXEls8MA}RNXqQYL+X`xUiHi_s5XWhYS|NSsE^>oL3w{r z|Mw-F7+;pE4{K%cS?U5UjcXr}7pRew1nR1j=#R%F{Cb?2u0Fmn7sjP=ZEWgiiFZ|z z{JkquAE=yA_X)=1prFsjZ^nD$gE1O|aRx4#@0s3=Q?LC}d&!geXU0L}aX1awe+VV^ zU>{0o!PY6gQ~#5P@JHu{A3 z5b<^*$?spVCG?O<`jtZ5pWjj}k)y1Q-q;#@<6sn^?gLtOuszI?y<}Mbbp%90AOU79 zDaHu02MzI$A5+2K7`rfS{%5r1vMSMd;keQ*d4!wuUaEa@Tr_SrlHQb(SfjO;TRe@L zKG!F2dXAIrcGmJ>=P*A$$pu{9%_eDBa(GJPc`1vltLFQ9%c1X^&ClS`>~1RME)7rkY#!@0 w{PI)z;nNUX7~R6AKDuQatCf%Ss*WDk!usGNvSK;)-0COnH|!Di1iK!80JK%}2><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 31d547b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(125c.954): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fc54fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.489530000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.34663e+008 -1.96489e-032 -7.40458e+030 6.83759e+031 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0022f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0022f000 4ba9418a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0022f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_description.txt deleted file mode 100644 index 31d547b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x125C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(125c.954): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07df7b19 edx=00000000 esi=00000000 edi=0fc54fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.701640555023320160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.489530000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.34663e+008 -1.96489e-032 -7.40458e+030 6.83759e+031 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ed8130 07e55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0022f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0022f000 4ba9418a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0022f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41618/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 941dab1d64cd581690aa62c46661face23baab07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPe!}3OX>tH~dijKa4oT=Bz4a7Pv+HN^QjzYIUJLU*6kPA?ohJft< zeaMIn6ex-?dHnJJzDUs$(E@+F9g$;JMDK~H>j=u_QXEls8MA}RNXqQYL+X`xUiHi_s5XWhYS|NSsE^>oL3w{r z|Mw-F7+;pE4{K%cS?U5UjcXr}7pRew1nR1j=#R%F{Cb?2u0Fmn7sjP=ZEWgiiFZ|z z{JkquAE=yA_X)=1prFsjZ^nD$gE1O|aRx4#@0s3=Q?LC}d&!geXU0L}aX1awe+VV^ zU>{0o!PY6gQ~#5P@JHu{A3 z5b<^*$?spVCG?O<`jtZ5pWjj}k)y1Q-q;#@<6sn^?gLtOuszI?y<}Mbbp%90AOU79 zDaHu02MzI$A5+2K7`rfS{%5r1vMSMd;keQ*d4!wuUaEa@Tr_SrlHQb(SfjO;TRe@L zKG!F2dXAIrcGmJ>=P*A$$pu{9%_eDBa(GJPc`1vltLFQ9%c1X^&ClS`>~1RME)7rkY#!@0 w{PI)z;nNUX7~R6AKDuQatCf%Ss*WDk!usGNvSK;)-0COnH|!Di1iK!80JK%}2><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 21777a12ddafa35368cd0c320fb8bff0ff0611e8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^Jqm+B5C!1p4{kZ+1Z$Pr8|*D|4sWmlFE)vwrAJUmlXA=LCQq=?yy0VbFbq&~ zx(+DzT>*ChZ40&<-x7G-F0peyEU&|m&4v_Lw}r)}I7zm*q^O?IQx00xUaLmbHBN;* Tg{LU5)V8p{8fm75R{GBmhz(u! diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index c42ddd3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x120: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x120: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(120.1bbc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.70563e-028 -2.39862e+026 1.43291e+034 6.51304e+016 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002b0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002b0000 73eb3761 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002b0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_description.txt deleted file mode 100644 index c42ddd3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x120: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x120: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(120.1bbc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ea7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.70563e-028 -2.39862e+026 1.43291e+034 6.51304e+016 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002b0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002b0000 73eb3761 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002b0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/41664/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 21777a12ddafa35368cd0c320fb8bff0ff0611e8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 177 zcmZ9^Jqm+B5C!1p4{kZ+1Z$Pr8|*D|4sWmlFE)vwrAJUmlXA=LCQq=?yy0VbFbq&~ zx(+DzT>*ChZ40&<-x7G-F0peyEU&|m&4v_Lw}r)}I7zm*q^O?IQx00xUaLmbHBN;* Tg{LU5)V8p{8fm75R{GBmhz(u! diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/42112/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 36b2940a3a2868d94920c8af0acab1162a519a7f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1052 zcmb_bF>b>!3_Qg_JSyHg1W=};V}9U1DL;^bd`xYDcFYqJpdXMo4@KD%#RQ3$0!3w0 zrxTB)#KgdY&u#~}f(`HpV7mp`61|83ayCq{@)XaJ`*D!e6Z=7iKn$*;cXfZ&i0T$i zj$s6+q8=NO{17MuAnn)3|m8=q5d#I_5Bx1QXjve`9x6i zJKlmzYAUvd-Y^*UhS5-gaZgOSr9IOeyY%ZAs2Bz)aOM&zC1TlOLcZXE6gZc&u@<_& zj3D<>8ROl?j0bqS*VkH=dvPUb>^haNMRMUxUBk_v$11sV??|zb3pJNI%>}gY<+%lwQb>!3_Qg_JSyHg1W=};V}9U1DL;^bd`xYDcFYqJpdXMo4@KD%#RQ3$0!3w0 zrxTB)#KgdY&u#~}f(`HpV7mp`61|83ayCq{@)XaJ`*D!e6Z=7iKn$*;cXfZ&i0T$i zj$s6+q8=NO{17MuAnn)3|m8=q5d#I_5Bx1QXjve`9x6i zJKlmzYAUvd-Y^*UhS5-gaZgOSr9IOeyY%ZAs2Bz)aOM&zC1TlOLcZXE6gZc&u@<_& zj3D<>8ROl?j0bqS*VkH=dvPUb>^haNMRMUxUBk_v$11sV??|zb3pJNI%>}gY<+%lwQvofd(n z{|rY)Y@k34hpfG7+Ex_0wThA;X*ay z2v1O)lYFSm?C>HaF=Rs(1trok{Quf~Dw*r{lJ&mWGuv2fW4xh8Jn4qI1U?)J?+?ZQ zeF-Ppmu0aJ>%tf&t&6lYu0up#q*_-JsjW_Ge>`U8*W)O3{`ewX7?;MivG&gzZ!6aP zy<@G9#3$5!f=D|Q&}ZW}ea>mN&jUmfT z#X?5X{O$!)!tN*1@t8@*$34}3R7P(M#>Utgd!qvNA24JK*+U%JC4>Ig77>Y&6zHK+ zN(mGX29z~oZ3_7n#f5J3Kds@*s!YR$u_CNcY*cG}wz1~dw(gE| z&Lo1OCq00xv)SYl)*R{ba8^~hI%+wuw`}FUS^o?kP3}hKyWBtFw|Vrr v{}o355ptgz2;D-)F1clss#QpSOVti-2IhWZKl4S9q-L9W{$SA6Xg diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e145011..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C80: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C80: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c80.428): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e17b19 edx=00000000 esi=00000000 edi=07c22fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.707270054558844000000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.300000000000000000000e+0001 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.11502e-007 -2.51798e+033 3.31953e-038 0.00628942 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ef8130 07e75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00381000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00381000 8fc0791e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00381000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_description.txt deleted file mode 100644 index e145011..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C80: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C80: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c80.428): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e17b19 edx=00000000 esi=00000000 edi=07c22fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.707270054558844000000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.300000000000000000000e+0001 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.11502e-007 -2.51798e+033 3.31953e-038 0.00628942 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ef8130 07e75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00381000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00381000 8fc0791e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00381000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45316/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4f119f7ad9fc1ee8d125a0bf1b1a6bab6ab8bfdf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR}b-*M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k34hpfG7+Ex_0wThA;X*ay z2v1O)lYFSm?C>HaF=Rs(1trok{Quf~Dw*r{lJ&mWGuv2fW4xh8Jn4qI1U?)J?+?ZQ zeF-Ppmu0aJ>%tf&t&6lYu0up#q*_-JsjW_Ge>`U8*W)O3{`ewX7?;MivG&gzZ!6aP zy<@G9#3$5!f=D|Q&}ZW}ea>mN&jUmfT z#X?5X{O$!)!tN*1@t8@*$34}3R7P(M#>Utgd!qvNA24JK*+U%JC4>Ig77>Y&6zHK+ zN(mGX29z~oZ3_7n#f5J3Kds@*s!YR$u_CNcY*cG}wz1~dw(gE| z&Lo1OCq00xv)SYl)*R{ba8^~hI%+wuw`}FUS^o?kP3}hKyWBtFw|Vrr v{}o355ptgz2;D-)F1clss#QpSOVti-2IhWZKl4S9q-L9W{$SA6Xg diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index d8ab56f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x11C4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x11C4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(11c4.11ac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ee7b19 edx=00000000 esi=00000000 edi=07cf2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.743861801539748960000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.37652e-009 2270.98 -3.79295e-022 1.13502e-007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fc8130 07f45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00332000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00332000 03502f7a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00332000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_description.txt deleted file mode 100644 index d8ab56f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x11C4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x11C4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(11c4.11ac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ee7b19 edx=00000000 esi=00000000 edi=07cf2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.743861801539748960000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.37652e-009 2270.98 -3.79295e-022 1.13502e-007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fc8130 07f45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00332000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00332000 03502f7a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00332000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45348/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/45672/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 236ec72f59b0bf68bdec183419e959b0f32ab3c8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 457 zcmb7;y$!-J5QQ&4ip#?jBo(4$18>0`Y!IX@W8Mu>^#1JNgUz zHN%$a93Ma)wgkdFUu*<0M|PKNX=Ax$FQ}dWwy_Co)Ej%_{*CzMuU=@cv$`pS&b5OY uO|M-0;3?eLwYG-n3{A#nWo?U!t*Vq|sD{jiEmAg&Mn>JCC)7g&w5<0`Y!IX@W8Mu>^#1JNgUz zHN%$a93Ma)wgkdFUu*<0M|PKNX=Ax$FQ}dWwy_Co)Ej%_{*CzMuU=@cv$`pS&b5OY uO|M-0;3?eLwYG-n3{A#nWo?U!t*Vq|sD{jiEmAg&Mn>JCC)7g&w5<C%oT?iH`!A&F*B#oj%ny4ru2trU0l)z3diXR}v zMk^(vSXkM`LUGPOBvru5Ld;1ZD5B0;T@f?>=gnNm9S9w{P=Ix~` zpLP$u`gL~X*_OLl>fc(VoUWXY+JryQWf&Zq&(6gXXVoT|F{+eJ*G-6%T0 zT6UCTmGdMOJJ*MrB|ojZDBK za1?=?FNKD6h0ysFc~Zc6M4@Md73}E*c3>HA6U?5jh&k33GIdvA8F+@Ck*Cna@uW$t z&sMM`^!X}rJ!8n$4{!<$p>d2ng=gZKdFGxBk z+8GqY9}m+3z1ZxNbOk zD_;xmx8meiTl4u~jmkP74;|~f`u1ZXYT#C#fPG=rPQX5AV@KGb^^wi-mXAHJ_xW^2 z3tj+vgsp(nk#EEH_{0~`aW@t1!mP2KZmbP?&~erFzBaPC_s#c9V9ncP)0jz}FXFRV yh;%+Dn&z$0xk_L(25V+2C?+Z_2^EzhC143GlR`nIOg*!uW?}DO3$R64XZr&Qf$z`& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index ff884bf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF38: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF38: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f38.f58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e37b19 edx=00000000 esi=00000000 edi=0f694fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.161401200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13732e+037 7.1048e+017 6.32737e-008 2.50983e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003f0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003f0000 1aeffeb9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003f0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_description.txt deleted file mode 100644 index ff884bf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xF38: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xF38: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(f38.f58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e37b19 edx=00000000 esi=00000000 edi=0f694fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.161401200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13732e+037 7.1048e+017 6.32737e-008 2.50983e-017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003f0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003f0000 1aeffeb9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003f0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/457/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9a6bd65bf820825c6e333ff447bfe7bd0cb6f13b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=BJBvuC4VU>C%oT?iH`!A&F*B#oj%ny4ru2trU0l)z3diXR}v zMk^(vSXkM`LUGPOBvru5Ld;1ZD5B0;T@f?>=gnNm9S9w{P=Ix~` zpLP$u`gL~X*_OLl>fc(VoUWXY+JryQWf&Zq&(6gXXVoT|F{+eJ*G-6%T0 zT6UCTmGdMOJJ*MrB|ojZDBK za1?=?FNKD6h0ysFc~Zc6M4@Md73}E*c3>HA6U?5jh&k33GIdvA8F+@Ck*Cna@uW$t z&sMM`^!X}rJ!8n$4{!<$p>d2ng=gZKdFGxBk z+8GqY9}m+3z1ZxNbOk zD_;xmx8meiTl4u~jmkP74;|~f`u1ZXYT#C#fPG=rPQX5AV@KGb^^wi-mXAHJ_xW^2 z3tj+vgsp(nk#EEH_{0~`aW@t1!mP2KZmbP?&~erFzBaPC_s#c9V9ncP)0jz}FXFRV yh;%+Dn&z$0xk_L(25V+2C?+Z_2^EzhC143GlR`nIOg*!uW?}DO3$R64XZr&Qf$z`& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 362623d65ca18e9a836289c22b90480b0d879325..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g!iJp?&=EKKUu41%BHtkrP%#?}@1I30h6R7sSlu*f}E3IlG)ea+xU;IYU9cW#06?~C4u_tsQSl4Qhq(mLf0Igg$rYCTp8Qu zN&S7r8ozU_`GNR|yiX8m`vUrGyfxk#?~TzIj3?mIZIVXC#^@7X9{k-*8b3T^O6X%It;bAK-(eRRBBro0dShoCjH6M3ybmbZLv|2H_Q){) zYYXs%KnnC2Qj8H43ku?o%Pc@IYr|Z${-4(Ic~+w7%y6N1G&Gw?}#-{Zv9hZ*zOMUrRh$ftB2~gcjbO}&hv#}zqP;_Lg z|DYrRim;gNvh<^Loox-kbGL;KAf( zX1+<|BR-plCXGM+%-?+)V+WyY$UH<>cd=Uf*esjqAsu80J|Zgeagb6!Aip3FkVnX6 F`vdZ@?*ae- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 336c0fe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1864: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1864: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1864.1fcc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ff7b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.791712547591701600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.40581e-007 -1.71109e-007 4.44117e-038 1.18406e-008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080d8130 08055930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ea000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ea000 a25c3694 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ea000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_description.txt deleted file mode 100644 index 336c0fe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1864: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1864: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1864.1fcc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07ff7b19 edx=00000000 esi=00000000 edi=0fd18fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.791712547591701600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.40581e-007 -1.71109e-007 4.44117e-038 1.18406e-008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 080d8130 08055930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ea000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ea000 a25c3694 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ea000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/47287/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 362623d65ca18e9a836289c22b90480b0d879325..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy>8nu5XX;}V0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fo*v|}D22C{UdHVpx< z|2v+8*g!iJp?&=EKKUu41%BHtkrP%#?}@1I30h6R7sSlu*f}E3IlG)ea+xU;IYU9cW#06?~C4u_tsQSl4Qhq(mLf0Igg$rYCTp8Qu zN&S7r8ozU_`GNR|yiX8m`vUrGyfxk#?~TzIj3?mIZIVXC#^@7X9{k-*8b3T^O6X%It;bAK-(eRRBBro0dShoCjH6M3ybmbZLv|2H_Q){) zYYXs%KnnC2Qj8H43ku?o%Pc@IYr|Z${-4(Ic~+w7%y6N1G&Gw?}#-{Zv9hZ*zOMUrRh$ftB2~gcjbO}&hv#}zqP;_Lg z|DYrRim;gNvh<^Loox-kbGL;KAf( zX1+<|BR-plCXGM+%-?+)V+WyY$UH<>cd=Uf*esjqAsu80J|Zgeagb6!Aip3FkVnX6 F`vdZ@?*ae- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/48637/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 2d3b68ec23db1620d7216789f2dffdfe09386539..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1D6vrPU!}3OX>tH~dijKa4oT=Bz4a7Pvnr=BljzYIUJLU*6kfkHFX$Z*v z--nFYKvAFw?WZ5#H%U=MSNLtWM2=Yzy(glsBWMfyopZ^q6i20G!i@NrMFTK_6C)!a zyDT#h#h^ftot-1fS!^&Njw?9Sau^bfhW{FM)QDAg&St0j%r2;I4A<1MC0!H2!_ zey{d#3m7rJEL7jGl)-1o3$!q83qrcYYkA-N&scL}eo})EDbjikwutL_6E&f@@ znqTX(yOO*#Ks?+WAnC|wH*cTh04~mEozyKc{7BIdW(tH~dijKa4oT=Bz4a7Pvnr=BljzYIUJLU*6kfkHFX$Z*v z--nFYKvAFw?WZ5#H%U=MSNLtWM2=Yzy(glsBWMfyopZ^q6i20G!i@NrMFTK_6C)!a zyDT#h#h^ftot-1fS!^&Njw?9Sau^bfhW{FM)QDAg&St0j%r2;I4A<1MC0!H2!_ zey{d#3m7rJEL7jGl)-1o3$!q83qrcYYkA-N&scL}eo})EDbjikwutL_6E&f@@ znqTX(yOO*#Ks?+WAnC|wH*cTh04~mEozyKc{7BIdW(%4NsG z;N;EhP_P6fMc}n(znz&k`==$*0)N{rkrNg~?}?~w30_IR7et>5niw%A=E)IH#BPF` zoP;rC$21``O%oAZNE~8NK%i>p5P?)0bSz4A4n`18jD{8d(W;n}tM;7rF8edvkbPsg zqDCU|in<8i?K5xpIsT(W5bbN3{rxI4_(|&mmBy71&;_b>CxP1HsQ$-8Qhqy(LRTGL zgbQP7Tp8=?S@Uhds^2-*`apa{-DjAzeFl9oemCA4?~KtHj5FjyT5N2 zgdK{HYR%6+_Wat{({b{;0Q5+UK+91tX*oXW1zgeXN#M^solj1s|b`eC%YZd)P17 KBkT!w+5P}OH26RO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 50db6ec..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x11D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x11D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(11d0.1fb4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.26061e+009 -9.44837e-016 -1.09029e+023 1.61814e-011 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003bb000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003bb000 49cdf9c1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003bb000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_description.txt deleted file mode 100644 index 50db6ec..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x11D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x11D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(11d0.1fb4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ed7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6.26061e+009 -9.44837e-016 -1.09029e+023 1.61814e-011 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003bb000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003bb000 49cdf9c1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003bb000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49032/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7a46609254dd62acb102480eae4e88ffa9692f74..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$&LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N;EhP_P6fMc}n(znz&k`==$*0)N{rkrNg~?}?~w30_IR7et>5niw%A=E)IH#BPF` zoP;rC$21``O%oAZNE~8NK%i>p5P?)0bSz4A4n`18jD{8d(W;n}tM;7rF8edvkbPsg zqDCU|in<8i?K5xpIsT(W5bbN3{rxI4_(|&mmBy71&;_b>CxP1HsQ$-8Qhqy(LRTGL zgbQP7Tp8=?S@Uhds^2-*`apa{-DjAzeFl9oemCA4?~KtHj5FjyT5N2 zgdK{HYR%6+_Wat{({b{;0Q5+UK+91tX*oXW1zgeXN#M^solj1s|b`eC%YZd)P17 KBkT!w+5P}OH26RO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/49136/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 702a0412faa708d5e58cde31d1950ce8ef1d9d87..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQy42F4@V0k-v>tH~dii~~(IaA-D&yhFK)oGD-%Om7b&MnZ6d4w3q(($xu z2*m#6QATVaOOdmw?@0dSolX+b0>AB+$O#Lgk3`hA1h1sO3!=}6UD3o$#LNzcxtknM zx!UXLmc91~?twYA?kQ6!~#*U;&q!5er?NP;?Teat`ciErWhU^=| zH8m26*VIMuVV`-w&+#86f*9Y*?C)2Z!B1Kjs5Gv8fG$w2I|KlXU(?-tA6KL>jUu-bzfjI_8Iim_}zGKd@x31FwVe3!q5lyJ{-H;CpG6h zT6|{gb3XRR9_#mkV+VGDLjyK0)4LpB7Oc8Ok$tL+YBBM&3hm#==+`eZt#^d^3{jyB918zn@6^F_ZL{w;WSwGApAuHpb4_8x^R#LdzDm zgE_L74D&ZfKqdrI;EE~57(t1kA^!4RDR7m&VJ%w!&uI9(D$#HjxbPeDNY|&evhUeR z(Xd{tyk<_~qjfH~d>XQRu20_lIZw9Q$=4ej)~|d#bgZBI%f~`A;8e3feJ|=PP+zOD zBkWLoRBL|rvFF#m-W?~e3qX&w2(%pal9t;iJ%Ed|S*M&~>_nP5l!-o5w2kzx~KRed=QaqZ`=RMOQYlSo&BktLR}3tP4Iu75Ugnt6#7` Lut(Sv>~j1A7XtH~dii~~(IaA-D&yhFK)oGD-%Om7b&MnZ6d4w3q(($xu z2*m#6QATVaOOdmw?@0dSolX+b0>AB+$O#Lgk3`hA1h1sO3!=}6UD3o$#LNzcxtknM zx!UXLmc91~?twYA?kQ6!~#*U;&q!5er?NP;?Teat`ciErWhU^=| zH8m26*VIMuVV`-w&+#86f*9Y*?C)2Z!B1Kjs5Gv8fG$w2I|KlXU(?-tA6KL>jUu-bzfjI_8Iim_}zGKd@x31FwVe3!q5lyJ{-H;CpG6h zT6|{gb3XRR9_#mkV+VGDLjyK0)4LpB7Oc8Ok$tL+YBBM&3hm#==+`eZt#^d^3{jyB918zn@6^F_ZL{w;WSwGApAuHpb4_8x^R#LdzDm zgE_L74D&ZfKqdrI;EE~57(t1kA^!4RDR7m&VJ%w!&uI9(D$#HjxbPeDNY|&evhUeR z(Xd{tyk<_~qjfH~d>XQRu20_lIZw9Q$=4ej)~|d#bgZBI%f~`A;8e3feJ|=PP+zOD zBkWLoRBL|rvFF#m-W?~e3qX&w2(%pal9t;iJ%Ed|S*M&~>_nP5l!-o5w2kzx~KRed=QaqZ`=RMOQYlSo&BktLR}3tP4Iu75Ugnt6#7` Lut(Sv>~j1A7XuzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 666351f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BD8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BD8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1bd8.1668): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0f7a2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.10744e-026 -2.05415e-019 -1.09522e+025 4.17592e+013 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00279000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00279000 cfec6491 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00279000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_description.txt deleted file mode 100644 index 666351f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1BD8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1BD8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1bd8.1668): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0f7a2fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.10744e-026 -2.05415e-019 -1.09522e+025 4.17592e+013 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00279000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00279000 cfec6491 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00279000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50339/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4332f889c4bc09aaab8dd9eeead12da021d4b313..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 841 zcmb_aF>b>!3_Qm{Jj#B7G8G;31NRkuM}A-f`Iy=Q?U*MdK$nix=1n84JbdurHT>En) t!>60lyOSY!0!L!%L$&px-nr21n&1de^rH(@g>>z;)CciJoQVsuwi~pH^?(2X diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 154e10a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F9C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F9C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f9c.1028): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.05662e+013 -9.68311e-019 2.89621e+025 0.00238314 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0020a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0020a000 f187a052 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0020a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_description.txt deleted file mode 100644 index 154e10a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F9C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F9C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f9c.1028): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.05662e+013 -9.68311e-019 2.89621e+025 0.00238314 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0020a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0020a000 f187a052 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0020a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/50623/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4332f889c4bc09aaab8dd9eeead12da021d4b313..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 841 zcmb_aF>b>!3_Qm{Jj#B7G8G;31NRkuM}A-f`Iy=Q?U*MdK$nix=1n84JbdurHT>En) t!>60lyOSY!0!L!%L$&px-nr21n&1de^rH(@g>>z;)CciJoQVsuwi~pH^?(2X diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/action_1_Output_Unknown Action 1.cur b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/Initial/action_1_Output_Unknown Action 1.cur deleted file mode 100644 index 342baa22906afa6383612d5c15396d011c8e2371..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 804 zcmb_aF>b>!3_K@6Jj#B7G8G;31N9YsM}J@g`Iy=Q?U*MdK$nix=1o0PvXOWxP?YwO zI`b$>gnY;7U;P|jFC~l za6`UeBMbD}QycexF`w_N1nKU>ihDSwyQNp*E;m|~`rhPS&Z3-Km-3pIROEBLxXR}| zYPW^k#ZrI6p$F*7{=zu`iBl~C<4)B@VBD&CBA!q=t1Ulsp81yB?Xoy)Kt0ncuyWRG zTCWcqz-l(Vl(cEoNm`b+SdCie^`BP$x9YzbUn@>i&LOJ9D&}j@t=@@G;!IqKwfz8bjo?}U diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 002b6b5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FFC: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FFC: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ffc.1cf8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f555f0 edx=00000000 esi=00000000 edi=11720fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 1.065350000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-0.0814406 -8.43683e-035 2.11172e+007 -625073 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00242000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00242000 17c39c98 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0e2 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00242000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_description.txt deleted file mode 100644 index 002b6b5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FFC: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FFC: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ffc.1cf8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f555f0 edx=00000000 esi=00000000 edi=11720fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 1.065350000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-0.0814406 -8.43683e-035 2.11172e+007 -625073 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00242000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00242000 17c39c98 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0e2 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00242000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/527/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 342baa22906afa6383612d5c15396d011c8e2371..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 804 zcmb_aF>b>!3_K@6Jj#B7G8G;31N9YsM}J@g`Iy=Q?U*MdK$nix=1o0PvXOWxP?YwO zI`b$>gnY;7U;P|jFC~l za6`UeBMbD}QycexF`w_N1nKU>ihDSwyQNp*E;m|~`rhPS&Z3-Km-3pIROEBLxXR}| zYPW^k#ZrI6p$F*7{=zu`iBl~C<4)B@VBD&CBA!q=t1Ulsp81yB?Xoy)Kt0ncuyWRG zTCWcqz-l(Vl(cEoNm`b+SdCie^`BP$x9YzbUn@>i&LOJ9D&}j@t=@@G;!IqKwfz8bjo?}U diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index bc6bf60..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBD4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBD4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bd4.348): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=6.34543e+022 -9.89521e-005 -1.31053e-038 -3.23185e+029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003c8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003c8000 1029f6b5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003c8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_description.txt deleted file mode 100644 index bc6bf60..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xBD4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xBD4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(bd4.348): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=6.34543e+022 -9.89521e-005 -1.31053e-038 -3.23185e+029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003c8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003c8000 1029f6b5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ae 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003c8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53026/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4e04b596a2658cb49bd6f7b2d03a034c41747008..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnX21RCu`iNDGyK+TBF8L<-V;&V5>!dQXG9<2yMPZV^a8jl`b7m}!3u9e9NxUtxu#!ScnGPswRl`oUI9>r5ZcJ4q2mG;*-XnUu!vCPF@y3KEj+J<*4T{AD`p`PVQ!z zG%PvXrQtA?!O2zgeZ6JV_s#kzaA$Ts=6s#{M|?I9RqB8GF@N`|j}45jU}G0u*~DV* dV>Pd$hc&P+_=v2S_Z?651NIB{0DFX;wm&GF$u$4~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/53608/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b3abcb15f639ba9a8f7f609df6415e2d707d9aa5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GL2lbH5JiWUVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n ze}*F?Hc+4_LVNf)Gk-{mqKFpw?RG>?SP{J^qP8Vsa+6~wc04ijL?pl%K}3-g4ZCSV z>4YByVG_D<=5jVboKE?xG*k_YhzPC zYrd^m^?S!!ABj(>`vjAAD4@^AZ^nD$gE1MSaR$yD4e#fzICf>e94>jX_{`LoeCkg< z*6$;y4(uYw00vj+U5T$MR^6g1KGjBYT1QkFYpfto=dlA}^Uf=G+gf?Mt(1AIx5^nS zV{P;qR}|%8B-M8>SQ36ekR+)J34aR%1ulq4=oQ{On`T zuYG+w&R!RQ9%&J1IqD@Xk5764S7)=yC9N9i@^BvN;OeO5yxy{v`)2(!cr?2kneTG{ zgwN)&&iyYx@(-W;6kv1<8@uF|Ayq4%>Q$XQEWovofd(n ze}*F?Hc+4_LVNf)Gk-{mqKFpw?RG>?SP{J^qP8Vsa+6~wc04ijL?pl%K}3-g4ZCSV z>4YByVG_D<=5jVboKE?xG*k_YhzPC zYrd^m^?S!!ABj(>`vjAAD4@^AZ^nD$gE1MSaR$yD4e#fzICf>e94>jX_{`LoeCkg< z*6$;y4(uYw00vj+U5T$MR^6g1KGjBYT1QkFYpfto=dlA}^Uf=G+gf?Mt(1AIx5^nS zV{P;qR}|%8B-M8>SQ36ekR+)J34aR%1ulq4=oQ{On`T zuYG+w&R!RQ9%&J1IqD@Xk5764S7)=yC9N9i@^BvN;OeO5yxy{v`)2(!cr?2kneTG{ zgwN)&&iyYx@(-W;6kv1<8@uF|Ayq4%>Q$XQEWo{2~)?P~OPBPd*v`Y{2~)?P~OPBPd*v`YuzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 81189ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x7D8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x7D8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(7d8.f54): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fc9cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.73653e-020 -2.13021e+022 1.54428e+021 -1.05342e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ba000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ba000 5be7c0e9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6293 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ba000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_description.txt deleted file mode 100644 index 81189ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x7D8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x7D8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(7d8.f54): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ec7b19 edx=00000000 esi=00000000 edi=0fc9cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.73653e-020 -2.13021e+022 1.54428e+021 -1.05342e+008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ba000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ba000 5be7c0e9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6293 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ba000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/54858/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 3265dc8c25165adb0e3a25426478bbc754bb3e74..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 473 zcmb7;F%E)25Jf*iq#X7HP#H^az%8sjf;Yf~i>;by=@B%sv0OU3@y{X}=$y^Z&fEWI z09f#BHb7!`3akKB6-XIg3t-E)HQyM)PPKEQiDLyaAkGyUe%x`<5Qx55dI&_0(}mgw zV@^kZxe_>#h&>T925rB9dQ^JVUZDyjM)o++=7+E$&ZD|Msp)V$tK C)tAZu diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2f95e2c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D20: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D20: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d20.1674): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0f7ecfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.11735e-035 -5.38276e-033 8.11732e-028 1.53084e-021 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032b000 e72c8648 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_description.txt deleted file mode 100644 index 2f95e2c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D20: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D20: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d20.1674): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0f7ecfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.11735e-035 -5.38276e-033 8.11732e-028 1.53084e-021 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032b000 e72c8648 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/55136/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 3265dc8c25165adb0e3a25426478bbc754bb3e74..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 473 zcmb7;F%E)25Jf*iq#X7HP#H^az%8sjf;Yf~i>;by=@B%sv0OU3@y{X}=$y^Z&fEWI z09f#BHb7!`3akKB6-XIg3t-E)HQyM)PPKEQiDLyaAkGyUe%x`<5Qx55dI&_0(}mgw zV@^kZxe_>#h&>T925rB9dQ^JVUZDyjM)o++=7+E$&ZD|Msp)V$tK C)tAZu diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bbac3015c6ff546835ed3e67a21eca47861e0fd2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 827 zcmb_aF>b>!3_K@6Jj#B7Jry1E1N9Z1`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlO}k z6LsW~ln4VG{tgGAQo98n0Q5b`cKF@^&-6XgM+sht3P~5>iyewJL%)i9;)$qO5%jS)EL*>l2_{@3dTW+sQ z;;aGn46DG>nXh4eK5PK1*|d_wrqNB}as;5empl;K=o{Hd1V t(@p8!$q+gMuf*g-wd=xm??Sz=gCjb^k1kLZ(#31358{hB5ocn(egN=&<`Dn@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 912d663..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C60: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C60: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c18000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c60.1ce0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e47b19 edx=00000000 esi=00000000 edi=09376fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.89056e+030 8.9796e+031 0.0112942 1.#QNAN -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00362000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00362000 b5ec9645 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00362000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_description.txt deleted file mode 100644 index 912d663..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1C60: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1C60: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c18000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1c60.1ce0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e47b19 edx=00000000 esi=00000000 edi=09376fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.89056e+030 8.9796e+031 0.0112942 1.#QNAN -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00362000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00362000 b5ec9645 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00362000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/56801/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bbac3015c6ff546835ed3e67a21eca47861e0fd2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 827 zcmb_aF>b>!3_K@6Jj#B7Jry1E1N9Z1`-J|$2J$hr1==xBNPsLIsm+^uq+}!UQlO}k z6LsW~ln4VG{tgGAQo98n0Q5b`cKF@^&-6XgM+sht3P~5>iyewJL%)i9;)$qO5%jS)EL*>l2_{@3dTW+sQ z;;aGn46DG>nXh4eK5PK1*|d_wrqNB}as;5empl;K=o{Hd1V t(@p8!$q+gMuf*g-wd=xm??Sz=gCjb^k1kLZ(#31358{hB5ocn(egN=&<`Dn@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7f9d67e20d575707c69915de96222731dbde90b6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(K~%R?mqGwp1u1m{%2lr88*n2hh|~E9KFTTqlF~=805>U@9SdV8 z|I7{zOMsieE6slU&tqRCi5B?nc0^8C5q%`0t|O=={auh_qMS3a%b7W6=nMzL&FBD> zGTe+lt0GCmNMn@QNgU-aN$Be1vv6Tt8rR0A ze$seXvF7g`YkeR-q3#Pz+M$5H8gGqv#(QHl2ICAo8F@JJgx-f!U*<{eIZx)F8HW;& z!)d_!L*Uqhec;f7tt<4d_*WHc-l8g+Y9l$VBdUxwR*=(q>_FIj@XFn`R$gx_W!lOM zOU_ssYoky4LQ^}D=J(H768S?WosXGhe!R_kj>=dYy|Fd+#=)pS{U=P>!S*mm_L5=z zW($afKnnC2Qj8H449F8gZ*7LA96clAv0vu_NqIG^#Z| zYwY>8*3)tFx&ZPKmIN(Fy@ciXq!(~;H=9(#nj>8rUxqrkxN5nt_iW{Tv;GM@n%zvy zH)(jpXY){};kTdor%yv{VRQ|f`skKztX4kOt2%mE3+scA$clXGWvXAWKd=YbBkZ#M E1C%rE`2YX_ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8b0035e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x7F0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x7F0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(7f0.bc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0fc20fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261410000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.0827e-019 2.06242e-026 -4.02561e+026 3.0346e-025 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00308000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00308000 2c60ed41 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00308000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_description.txt deleted file mode 100644 index 8b0035e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x7F0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x7F0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(7f0.bc0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0fc20fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.261410000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.0827e-019 2.06242e-026 -4.02561e+026 3.0346e-025 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00308000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00308000 2c60ed41 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00308000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57060/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7f9d67e20d575707c69915de96222731dbde90b6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(K~%R?mqGwp1u1m{%2lr88*n2hh|~E9KFTTqlF~=805>U@9SdV8 z|I7{zOMsieE6slU&tqRCi5B?nc0^8C5q%`0t|O=={auh_qMS3a%b7W6=nMzL&FBD> zGTe+lt0GCmNMn@QNgU-aN$Be1vv6Tt8rR0A ze$seXvF7g`YkeR-q3#Pz+M$5H8gGqv#(QHl2ICAo8F@JJgx-f!U*<{eIZx)F8HW;& z!)d_!L*Uqhec;f7tt<4d_*WHc-l8g+Y9l$VBdUxwR*=(q>_FIj@XFn`R$gx_W!lOM zOU_ssYoky4LQ^}D=J(H768S?WosXGhe!R_kj>=dYy|Fd+#=)pS{U=P>!S*mm_L5=z zW($afKnnC2Qj8H449F8gZ*7LA96clAv0vu_NqIG^#Z| zYwY>8*3)tFx&ZPKmIN(Fy@ciXq!(~;H=9(#nj>8rUxqrkxN5nt_iW{Tv;GM@n%zvy zH)(jpXY){};kTdor%yv{VRQ|f`skKztX4kOt2%mE3+scA$clXGWvXAWKd=YbBkZ#M E1C%rE`2YX_ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 01a146f9c3948a2583a35640e1fe3c33dffebd55..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GPe@cj9LImpxB2!qyFs8JyuBE8k)?Y)Jy}tQ@LGosMG}-CK^J+`x>A9lP;?d( zA*hfJAwe;#P(*|oiRH!K-(UKNs{`-HM<0F| zFD_i3ez9@p=MyaV?-m&!lP|TiFz9uQCGE9P4^ix9%n&68oU3@wR{Z>(9467Ga$Z;R zo?7j2o~E2IuQcK`6?i9_N@1P#a4lorsx=*hsJ89cCCmx)!a}sg{!(Z;elW0{ugTVt zcN6AX#e=HC+rnAloX`lhum#JFXy4dOPzv?3xSe&GZ_%XQZ_;{-_*7eyfQhy`2IIg} z1%AFev>ewJdQFj#0?s1}g%MV8r&HL0W1&Ye%Y6}ZtS@9{eSu>j426+UWyJotNgSVS zV@brPJH+*@C09SdDKJEgXCzd@SeOV?Ap?0wP_hIYgasro8ODEY8Xm2QfgVFL#(-`H z1@Xtj^g!?ShP9~pKP|THSs69jCOULX3hu)0T3#y~xTHq0$l(QRGpAA7r;9&p`0!SK zrbM^=B&+ReK3Jo;N8_PmeP7>wEJO|5st;hTT(l2h&Dq!ycIY&++27LG^IpxTvzg)r z5D&Kt;B@3Ww>v)Z1$5j^G4pPYab4Ef9rB>#s@;9 x^p$Gb6_uqXhS3$W7Q+&)45Ey!C$7{g>@{o+wh8NOe*m1p_2K{k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8a8fab8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x320: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x320: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(320.1848): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07f27b19 edx=00000000 esi=00000000 edi=09382fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.496587200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.15874e-015 2.39134e+033 -100.546 -2.89265e+019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a0000 89eb1eaa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6299 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_description.txt deleted file mode 100644 index 8a8fab8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x320: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x320: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(320.1848): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07f27b19 edx=00000000 esi=00000000 edi=09382fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.496587200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-4.15874e-015 2.39134e+033 -100.546 -2.89265e+019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a0000 89eb1eaa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6299 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/57342/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 01a146f9c3948a2583a35640e1fe3c33dffebd55..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GPe@cj9LImpxB2!qyFs8JyuBE8k)?Y)Jy}tQ@LGosMG}-CK^J+`x>A9lP;?d( zA*hfJAwe;#P(*|oiRH!K-(UKNs{`-HM<0F| zFD_i3ez9@p=MyaV?-m&!lP|TiFz9uQCGE9P4^ix9%n&68oU3@wR{Z>(9467Ga$Z;R zo?7j2o~E2IuQcK`6?i9_N@1P#a4lorsx=*hsJ89cCCmx)!a}sg{!(Z;elW0{ugTVt zcN6AX#e=HC+rnAloX`lhum#JFXy4dOPzv?3xSe&GZ_%XQZ_;{-_*7eyfQhy`2IIg} z1%AFev>ewJdQFj#0?s1}g%MV8r&HL0W1&Ye%Y6}ZtS@9{eSu>j426+UWyJotNgSVS zV@brPJH+*@C09SdDKJEgXCzd@SeOV?Ap?0wP_hIYgasro8ODEY8Xm2QfgVFL#(-`H z1@Xtj^g!?ShP9~pKP|THSs69jCOULX3hu)0T3#y~xTHq0$l(QRGpAA7r;9&p`0!SK zrbM^=B&+ReK3Jo;N8_PmeP7>wEJO|5st;hTT(l2h&Dq!ycIY&++27LG^IpxTvzg)r z5D&Kt;B@3Ww>v)Z1$5j^G4pPYab4Ef9rB>#s@;9 x^p$Gb6_uqXhS3$W7Q+&)45Ey!C$7{g>@{o+wh8NOe*m1p_2K{k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 3d7f83d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1304: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1304: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`055c0000 00000000`055dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1304.1ca4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.53047e+007 3.48169e-015 -1.73171e-032 -5.00572e+025 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00316000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00316000 b43c2d5a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6295 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00316000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_description.txt deleted file mode 100644 index 3d7f83d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1304: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1304: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`055c0000 00000000`055dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1304.1ca4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f37b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.53047e+007 3.48169e-015 -1.73171e-032 -5.00572e+025 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00316000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00316000 b43c2d5a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6295 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00316000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/59280/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e021bae..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1700: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1700: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1700.1b18): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ef7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.27524e-020 1.62753e-025 -2.2406e-034 -6.58752e+029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d7000 feceb43e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_description.txt deleted file mode 100644 index e021bae..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1700: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1700: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1700.1b18): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07ef7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.27524e-020 1.62753e-025 -2.2406e-034 -6.58752e+029 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d7000 feceb43e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60149/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f5cc8e17affc94c16bbbe9b693827fb7b48050eb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipNKLVdgt4} z;^!;>5~-pF7ws|Yjp~VQP;CsC)UYRBQWwGdt@3WG{@W5xw3|}(cA*UZMd|{T#)S{a z3slQW0=30n^oLy%e%*~sSM8peGh=C780+du;%$*7f8(;$2g-ZYeTH${D(H*xoAJ(g zZ;ZxZoWPgF*Ysu_I~^}I$K0ELV(c{@`+bl3`;cP?b|HrbY@E_N_0Nked9y+_RYr1B zM^qRq%)qITMfXunTmN zqpXbH*cdxwZxo=8zn2!afjP354E?h$AQA!z@I;qlj39e3ApW>a1)jV%%tg!pX-z(^ zN;DifPIN;a;rcL_YM&h!4a=pZ*EuKF7+T9Mo(4^y>XSD;#mQznXxZ4Xe5G;em|w@| zkA-N!scM2~&)J$FTB@-ktdKRTB|d4a`L&ka<>X}oSF_=E7;gYS2nSj`&iAZ a=wS`43qB$%=6%OQ{eb;~J-{Aer|l0ahsiVm diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/60524/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e28c3ad9876453e8eddb67386107c4785efb394d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 158 zcmZ9^Jr08~3b>!3_Qg_JSyHg1W=};qkrJOqVLELY#<*~Tc92Dgaqi)QQkZhRgV-CBwh*> zl}(*aJdzTf01G~C3pl|FxCgM^f^3P;1@OeZ2kx~)$bfe_cEnYcPd#x_6^_~vPW?b- zSf51C$RzQ=`pzr1n_6+VsT9-32|B~dur~Aw>JJlC-+i$p_5C+AU(S&HF3Vtb!`jdr z2E)#&Blxe zc)Hh@T7~=UBxr0Jm9KM7!kM~+n?H?3evVJx_}LGucHw%lvAN>>=&WDzC-wmt+0`OY z?nPY$$~BrN;t7Q_TK#9vGhcJPT~1yLP*1lAG@S9`mg_?sFzZc|id!`@rSY=V#jMrR zum2q7_h$14@!4!Y<-AY*k$;;*o%%OFb>!3_Qg_JSyHg1W=};qkrJOqVLELY#<*~Tc92Dgaqi)QQkZhRgV-CBwh*> zl}(*aJdzTf01G~C3pl|FxCgM^f^3P;1@OeZ2kx~)$bfe_cEnYcPd#x_6^_~vPW?b- zSf51C$RzQ=`pzr1n_6+VsT9-32|B~dur~Aw>JJlC-+i$p_5C+AU(S&HF3Vtb!`jdr z2E)#&Blxe zc)Hh@T7~=UBxr0Jm9KM7!kM~+n?H?3evVJx_}LGucHw%lvAN>>=&WDzC-wmt+0`OY z?nPY$$~BrN;t7Q_TK#9vGhcJPT~1yLP*1lAG@S9`mg_?sFzZc|id!`@rSY=V#jMrR zum2q7_h$14@!4!Y<-AY*k$;;*o%%OFe1X3ICy`l zRMLr}SO_9>1`G&E1i{LXlOv!QW!5GqgpB`rGZ%7)Hj=q}^PB(sn6KR>D&RLbNEBFx zL<2-rsSs2|UkgMR;5!5#QkD%j*|c2R`ADvkk+IXvf$}F%{<1NhcfL-=@l3TxE?6`I$5- z1ygBc0w#f@2%NtsG@Mrmou=560&k-m_r`vS|rGxUr- zg(i+CE#mxi14|-5+a#XP7_##RI0c5tag05MXX2T9W}Xbx+3%$StHJ{EFB!)FY!VSE ziGdzNQc8i=g9-7+!*oDz_lC8o{68%*omHCh4o8^Mq7=k zUAd3z+@-hcweY$fC%@X3=7Z(sZ5j_9>$~~w$3m3jR$T&XVY6KVYp%wQutTd+&GELz zp0{g0oza39Kt94Yfy+^E!}j>Z7tnP#W$nV8V>_L14SCRY)%L!2vbp!o_f4?wZLDR? zn9f%4*(}96dna1vte1X3ICy`l zRMLr}SO_9>1`G&E1i{LXlOv!QW!5GqgpB`rGZ%7)Hj=q}^PB(sn6KR>D&RLbNEBFx zL<2-rsSs2|UkgMR;5!5#QkD%j*|c2R`ADvkk+IXvf$}F%{<1NhcfL-=@l3TxE?6`I$5- z1ygBc0w#f@2%NtsG@Mrmou=560&k-m_r`vS|rGxUr- zg(i+CE#mxi14|-5+a#XP7_##RI0c5tag05MXX2T9W}Xbx+3%$StHJ{EFB!)FY!VSE ziGdzNQc8i=g9-7+!*oDz_lC8o{68%*omHCh4o8^Mq7=k zUAd3z+@-hcweY$fC%@X3=7Z(sZ5j_9>$~~w$3m3jR$T&XVY6KVYp%wQutTd+&GELz zp0{g0oza39Kt94Yfy+^E!}j>Z7tnP#W$nV8V>_L14SCRY)%L!2vbp!o_f4?wZLDR? zn9f%4*(}96dna1vt%4NsG z;N+j#p%98#o%1i0XrTtpoP`g^Nl_OIG=*1N1{wjpa{ zxS~cp@rt?#-t9AQ_u2oWgcI#+ne~2^8T_PmflA}b2jm5+btQq?;;8!LAt}EdMxmV9nn-*7`tvMBQhYw0#DBF@87R8t;tJ7>qOUV$kqb-il+F$4kvQ zkLI5l`y7w`vB&&<;Mjp(;Lw1L%k(b$mj!FyqR5&mBRQ=jDvT9okllH#Kv=)?%I&67 zUT+Fz+TcRsvKk9xW%LPm4)JCr&F@|?C3HWLj>k+gJ}#{8qcB!RZ)}X6u{SDEFW*ZG z+rb>!B}4z8Eg%vCDey#>VvL}8FrcgvYg6EfuDn}X|4(c9yeiRf=D5%ed4%iJTv>Z| zQZ%gBnqD&}(HJ_HTRaUpeXdX5^c*Lf?WA>M!}^uROUL|qeEC?22Apb6Q0*lc4v%{t|<=Ex%rr>=G`j#|#^EnB{C z_Iw5pW;Y}AP3oWU**sRMfAAy!^r?>xjILp07hT!JV(DYGtfGfCurBzBtjNbshPsFS Lf<3~XV3+L=LpAe% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 738e570..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1488: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1488: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1488.1fa8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f27b19 edx=00000000 esi=00000000 edi=0f668fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.228190000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.48972e-037 2.95982e-011 -1.86528e-007 1.40467e+017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ec000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ec000 90e013f4 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ec000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_description.txt deleted file mode 100644 index 738e570..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1488: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1488: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1488.1fa8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f27b19 edx=00000000 esi=00000000 edi=0f668fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.755120800610796640000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.228190000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.48972e-037 2.95982e-011 -1.86528e-007 1.40467e+017 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08008130 07f85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ec000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ec000 90e013f4 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ec000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/63313/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0f457411f7f07d4b668e1088b5ebee048d40873b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1u1m{%2jTVbNB|_$O)2kK7x<3iUFte5iGz>%4NsG z;N+j#p%98#o%1i0XrTtpoP`g^Nl_OIG=*1N1{wjpa{ zxS~cp@rt?#-t9AQ_u2oWgcI#+ne~2^8T_PmflA}b2jm5+btQq?;;8!LAt}EdMxmV9nn-*7`tvMBQhYw0#DBF@87R8t;tJ7>qOUV$kqb-il+F$4kvQ zkLI5l`y7w`vB&&<;Mjp(;Lw1L%k(b$mj!FyqR5&mBRQ=jDvT9okllH#Kv=)?%I&67 zUT+Fz+TcRsvKk9xW%LPm4)JCr&F@|?C3HWLj>k+gJ}#{8qcB!RZ)}X6u{SDEFW*ZG z+rb>!B}4z8Eg%vCDey#>VvL}8FrcgvYg6EfuDn}X|4(c9yeiRf=D5%ed4%iJTv>Z| zQZ%gBnqD&}(HJ_HTRaUpeXdX5^c*Lf?WA>M!}^uROUL|qeEC?22Apb6Q0*lc4v%{t|<=Ex%rr>=G`j#|#^EnB{C z_Iw5pW;Y}AP3oWU**sRMfAAy!^r?>xjILp07hT!JV(DYGtfGfCurBzBtjNbshPsFS Lf<3~XV3+L=LpAe% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d435baf9dacd2c3c5392b8262b07cee87b838d6e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k3$!1^l%r+Knj5id-lWwR>;KQNt{!ski zmvEweSr&a*7e+s6U8JRP?IZFcHM)~XZFN%p@tBogkE77l#~0zkxHPVfP5rF#wqniS zJJ$M0d_vtPn6yIyeKvkG-Wwl`$rz0@Sex9jv^U_`m3eZw)S%p~*Ut=4l?#@gtO!PpslqXP9GFl7td!yMU5hVfrpL?lL1pvRC> zN}zZ!q3jWRQ=rFCo-J+urv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;QGE(M>fq|C<-XpsmG{m1XYgotH!|Pl{t2JWW1ah7 ue&ioM_bI^W7B+UtEkmkSKGmx_d02pT(I;djK6NtHPuOqRBkT!w-TnaQkn;xs diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 22f6545..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCA4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCA4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ca4.e3c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=07d80fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.489660000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.99336e+026 6.24616e+022 -7.39333e-026 -630888 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002b3000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002b3000 0e75e9e8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002b3000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_description.txt deleted file mode 100644 index 22f6545..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCA4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCA4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ca4.e3c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=07d80fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.489660000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.99336e+026 6.24616e+022 -7.39333e-026 -630888 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002b3000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002b3000 0e75e9e8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002b3000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/66004/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d435baf9dacd2c3c5392b8262b07cee87b838d6e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK#gR5Qc}AVR=V+*M$LURdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~>vofd(n z{|rY)Y@k3$!1^l%r+Knj5id-lWwR>;KQNt{!ski zmvEweSr&a*7e+s6U8JRP?IZFcHM)~XZFN%p@tBogkE77l#~0zkxHPVfP5rF#wqniS zJJ$M0d_vtPn6yIyeKvkG-Wwl`$rz0@Sex9jv^U_`m3eZw)S%p~*Ut=4l?#@gtO!PpslqXP9GFl7td!yMU5hVfrpL?lL1pvRC> zN}zZ!q3jWRQ=rFCo-J+urv<*O$~0U!u5=)eaC2U(XwOcHhRsIP8|Ew;QGE(M>fq|C<-XpsmG{m1XYgotH!|Pl{t2JWW1ah7 ue&ioM_bI^W7B+UtEkmkSKGmx_d02pT(I;djK6NtHPuOqRBkT!w-TnaQkn;xs diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 801295a75dbe43d98f532f4cc000142b0e74cb70..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1724 zcmb`GH&Yuy7>2*oX*hK&buO5>t2{3G2M3k^fhz}`vyF51EdmTU;+$=qbIy5%ZE(gp zRA`3A<*8G_uzoj)L7FiI!%E*i`+i~5-4P}5tEnM!6kVe6L=*%Bm88E3qDk;gfDb8D z51Tw?>a_alGiJ`3J!kH``3n{!xvrP5UU&DrdHe4DhmW6nKY#i9?fZ|PzkdI5u+Nd2lyao-=whBQb*Z47 z=~|;p47kyjypDY35p@&_urq7ekv0DIB%Ek1Nu#qVL(T?u9jByaigDy|O6#3)3f#Qb z6LYaxf)S z4=bqCG3-DwJ&tMCRC}5Y)vjh-?I=2yuBB(mV$yNHNIE|pz>>(121(B+C8_xxoB~7S z7(zgsPBTEg`sjoGF)xsRIFB!)FZ5$EKNdrBGB!mE!2NU8?*pLQ#wKuFqnb9;~ zmRH48D05V3pBTdFp|y-=(osc)Oh%`trHqxv)TZ3VCAh(3+`ilc2S(#*VN-?nu{aVwj2d9Y kP&i3nxK&JeRi0ol9~N>ZkR@b3R8zf#^}u>zeXz>*5881NQ~&?~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 792a175..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce4.10f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.748550200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.13113e-026 -23.2166 -1.23471e+037 1.18594e-008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00372000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00372000 358a1353 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ab 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00372000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_description.txt deleted file mode 100644 index 792a175..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce4.10f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e87b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.748550200000000000000e+0007 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.13113e-026 -23.2166 -1.23471e+037 1.18594e-008 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00372000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00372000 358a1353 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ab 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00372000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/67286/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 801295a75dbe43d98f532f4cc000142b0e74cb70..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1724 zcmb`GH&Yuy7>2*oX*hK&buO5>t2{3G2M3k^fhz}`vyF51EdmTU;+$=qbIy5%ZE(gp zRA`3A<*8G_uzoj)L7FiI!%E*i`+i~5-4P}5tEnM!6kVe6L=*%Bm88E3qDk;gfDb8D z51Tw?>a_alGiJ`3J!kH``3n{!xvrP5UU&DrdHe4DhmW6nKY#i9?fZ|PzkdI5u+Nd2lyao-=whBQb*Z47 z=~|;p47kyjypDY35p@&_urq7ekv0DIB%Ek1Nu#qVL(T?u9jByaigDy|O6#3)3f#Qb z6LYaxf)S z4=bqCG3-DwJ&tMCRC}5Y)vjh-?I=2yuBB(mV$yNHNIE|pz>>(121(B+C8_xxoB~7S z7(zgsPBTEg`sjoGF)xsRIFB!)FZ5$EKNdrBGB!mE!2NU8?*pLQ#wKuFqnb9;~ zmRH48D05V3pBTdFp|y-=(osc)Oh%`trHqxv)TZ3VCAh(3+`ilc2S(#*VN-?nu{aVwj2d9Y kP&i3nxK&JeRi0ol9~N>ZkR@b3R8zf#^}u>zeXz>*5881NQ~&?~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 50748c6a7d62bc5a380180b33ec2b1b24ba9bb0c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fozq+=c-2C{UdHVuKU z{~b?8Y@jGmg!bv<&-;(0Xqsq&&vr}Xgay$@B5GTLD(Uxvh$lz*qVdFzoq(o^9HWn? zBj=oqIHbhjCI>M=fnI|0;8}&VCjFgDrU#3J!iekdS)B4Hij!|WF%fu z7s2~|=G{Jz|0pqt_N~l%zsd}L(z-yUapePifok1Jptd-w{(MNv?}t(7s>7>rVJwX+ zV_m&yzAae&JI7idh>xiIf{?b)ps&VT&U=180qfU+ld&c6q+kobzboGh?6g zu|M`$zYiQcunQa-uyL8*RS|9Q)MKlbwq`+!V2W!iY`2vmC+j;V`uD*3e|AFE{*J)%K$!AH0vA3K@q0r3m*gm^|= Fwm)-e@&Et; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index cebb72c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xFF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xFF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ff0.1098): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fcbcfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.278060000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.27649 -1.75353e+006 -2.54852e-030 -3.87364e+024 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00227000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00227000 66558037 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00227000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_description.txt deleted file mode 100644 index cebb72c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xFF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xFF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ff0.1098): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e67b19 edx=00000000 esi=00000000 edi=0fcbcfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.278060000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.27649 -1.75353e+006 -2.54852e-030 -3.87364e+024 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00227000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00227000 66558037 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00227000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68110/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 50748c6a7d62bc5a380180b33ec2b1b24ba9bb0c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gv2NQi5QdMIV0ojwbub`JMMuAZoT;yqHxTQzXu9PQ@+fozq+=c-2C{UdHVuKU z{~b?8Y@jGmg!bv<&-;(0Xqsq&&vr}Xgay$@B5GTLD(Uxvh$lz*qVdFzoq(o^9HWn? zBj=oqIHbhjCI>M=fnI|0;8}&VCjFgDrU#3J!iekdS)B4Hij!|WF%fu z7s2~|=G{Jz|0pqt_N~l%zsd}L(z-yUapePifok1Jptd-w{(MNv?}t(7s>7>rVJwX+ zV_m&yzAae&JI7idh>xiIf{?b)ps&VT&U=180qfU+ld&c6q+kobzboGh?6g zu|M`$zYiQcunQa-uyL8*RS|9Q)MKlbwq`+!V2W!iY`2vmC+j;V`uD*3e|AFE{*J)%K$!AH0vA3K@q0r3m*gm^|= Fwm)-e@&Et; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7d8b427b829d204a4474a0c3ba727aa1eb168bb7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$=LR7a@mqGwp1u1m{%2lr88*n2hh|~E9KFTTqlF~=80AFC)u`qV> zW_Bc40@4H;Y548inb}{G=mx*dhR6vkqK`z>_XJf_CPu)a2c8{t&e<`#vivDC6T>pQ zjGUYq6;PsKEEQL=CYE8A{W;rh(MR^7Xk)mgPI}@k4H10W6+Z4t|Bo7-uy1wIyJcbU zS?dDT#-$I)3)JdL0`=8F_2+$3e&5eR*X-YfH^$nyG`7vF#`}sjf9qK51MvZMU*KZ9 z0{UuvFg_ZejL{g3N64MvYV>Zd!g(m;rS6;u>pwD%B_7Aai229BaR7(Fp#wWt=w0bw zRIGV7RngQK$!Q%?Wo$5m?9O8a!uEq#Zq|+RZe1zU8m}i_MPp@bj6RXZyO}h9c*B&) zA2aEA%p~JG>;g^X6gEb0?2LnPG%8T{2}AbqE!>g4WN81>0wN)h0#7t4#t2Fe2E-qi zS%9ak4Rg`zf2`y4szlRS$A#|5Bix?mD%!J?qG`3#^p-h^#?YnQ;%O@B$NJ<=ALC@R zowROjTD{Y_bj)AImyd;L!l{-7)n2kof@-bCim*b_sMh#VW6kfi?v9h!36PJlBxpJ6 zB`n(~J%Ed|S)~%z9C@Va)YQhsQOkK<)5`m1&sT77em^tcr||`!&2y8+-+tzwK8>-1 n(;a*sqN}@DEqrViP4w^%J_H|;75Om8P`}`R;Lq?E_@(^?LOA3V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5866c46..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x330: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x330: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(330.9a4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e27b19 edx=00000000 esi=00000000 edi=0fc40fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.51208e+012 1.19615e-025 8.14344e+012 -8.79011e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00372000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00372000 9c9c5cd7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00372000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_description.txt deleted file mode 100644 index 5866c46..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x330: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x330: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(330.9a4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07e27b19 edx=00000000 esi=00000000 edi=0fc40fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.51208e+012 1.19615e-025 8.14344e+012 -8.79011e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00372000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00372000 9c9c5cd7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00372000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/68834/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7d8b427b829d204a4474a0c3ba727aa1eb168bb7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#O1T5QS$=LR7a@mqGwp1u1m{%2lr88*n2hh|~E9KFTTqlF~=80AFC)u`qV> zW_Bc40@4H;Y548inb}{G=mx*dhR6vkqK`z>_XJf_CPu)a2c8{t&e<`#vivDC6T>pQ zjGUYq6;PsKEEQL=CYE8A{W;rh(MR^7Xk)mgPI}@k4H10W6+Z4t|Bo7-uy1wIyJcbU zS?dDT#-$I)3)JdL0`=8F_2+$3e&5eR*X-YfH^$nyG`7vF#`}sjf9qK51MvZMU*KZ9 z0{UuvFg_ZejL{g3N64MvYV>Zd!g(m;rS6;u>pwD%B_7Aai229BaR7(Fp#wWt=w0bw zRIGV7RngQK$!Q%?Wo$5m?9O8a!uEq#Zq|+RZe1zU8m}i_MPp@bj6RXZyO}h9c*B&) zA2aEA%p~JG>;g^X6gEb0?2LnPG%8T{2}AbqE!>g4WN81>0wN)h0#7t4#t2Fe2E-qi zS%9ak4Rg`zf2`y4szlRS$A#|5Bix?mD%!J?qG`3#^p-h^#?YnQ;%O@B$NJ<=ALC@R zowROjTD{Y_bj)AImyd;L!l{-7)n2kof@-bCim*b_sMh#VW6kfi?v9h!36PJlBxpJ6 zB`n(~J%Ed|S)~%z9C@Va)YQhsQOkK<)5`m1&sT77em^tcr||`!&2y8+-+tzwK8>-1 n(;a*sqN}@DEqrViP4w^%J_H|;75Om8P`}`R;Lq?E_@(^?LOA3V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/69188/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 61a94030f1a6dfb8f93c2515eb2c9828ed53073a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#HH@5QQJLf>#}-E`@>JDoE)YtX<^>sdEJ1U>P||e z_Ni)Tx^mUW+K+SV2L?EL1ub>2C%GdT~?1LX(8t8qWn z`AT=pt@{tmV~yu=J97OoNgl`{N$SWhRK`&KXN_3itf?BU6T#|$#@TWOeY?mVD3@=d z@#4HSUY|F{a<114!Pz)lXDoL8(CuOQ!xNWe{y4$r6M@dp+imaBI9q3QcFw^$It{GX z|D~s0(gOUFas1Dg7)c2R_8cPTOsaK?f_1A7kj+hX-Ut&`)bg58nhM0bb`FQ3<{ zI!e%@-D+j&OOc|QQ`d5jmt9Ri)R*Y`5Qne!tnI~is~4Ido$J^6^=AQgJk^?DI%;-J zFm2V`5qGGX)fPW!?)jy*x04cW0p>HT30BT}4eRT}4&dZ$R;7k5N4v6n9@^mKsP(*F zv(@|N{UfO`#}-E`@>JDoE)YtX<^>sdEJ1U>P||e z_Ni)Tx^mUW+K+SV2L?EL1ub>2C%GdT~?1LX(8t8qWn z`AT=pt@{tmV~yu=J97OoNgl`{N$SWhRK`&KXN_3itf?BU6T#|$#@TWOeY?mVD3@=d z@#4HSUY|F{a<114!Pz)lXDoL8(CuOQ!xNWe{y4$r6M@dp+imaBI9q3QcFw^$It{GX z|D~s0(gOUFas1Dg7)c2R_8cPTOsaK?f_1A7kj+hX-Ut&`)bg58nhM0bb`FQ3<{ zI!e%@-D+j&OOc|QQ`d5jmt9Ri)R*Y`5Qne!tnI~is~4Ido$J^6^=AQgJk^?DI%;-J zFm2V`5qGGX)fPW!?)jy*x04cW0p>HT30BT}4eRT}4&dZ$R;7k5N4v6n9@^mKsP(*F zv(@|N{UfO`WyT5QT@9V0lM**M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~?aofZM7 zZ-yfyHc+4_LVNV_%^xY6CR*UL-4Z!rMf9GC`ktU_a+!(PIR+hNa+tD^vV)(XMCP2C z9lId_>(Rn2db^eKvkG-Wwl`(HM*~aM&1f%5TJJKqK@^-6fCapBcvzkK=Jf z{unq8;1D=;VCM?GEBxe32gB9fMJa!;#-+ASB(VKAUQX&J(){5COCo>Fr2Uvl`pdn>6gh>B(HlGCU>uDK)O|q99=3xyvP*{fUq?VB z1XAFMDa9B;@t`5T_%RFcl)YgsTK~`J__8X|>B4cPJMsv(=e3IV?4;GoJ6B_ zDYtk!mGrqjdDC;8Y_+r27dx$AY5eF|zx0Bc0Auom?HYoYz~9a^LLv3?9txCg!^| zKH+ck*rf57pZJGQW9(pb3!8@M>MmAGADd+pJ*WyT5QT@9V0lM**M$LTRdnea$XWF|xq(=xMcZADkfYEo&@OX?7{~?aofZM7 zZ-yfyHc+4_LVNV_%^xY6CR*UL-4Z!rMf9GC`ktU_a+!(PIR+hNa+tD^vV)(XMCP2C z9lId_>(Rn2db^eKvkG-Wwl`(HM*~aM&1f%5TJJKqK@^-6fCapBcvzkK=Jf z{unq8;1D=;VCM?GEBxe32gB9fMJa!;#-+ASB(VKAUQX&J(){5COCo>Fr2Uvl`pdn>6gh>B(HlGCU>uDK)O|q99=3xyvP*{fUq?VB z1XAFMDa9B;@t`5T_%RFcl)YgsTK~`J__8X|>B4cPJMsv(=e3IV?4;GoJ6B_ zDYtk!mGrqjdDC;8Y_+r27dx$AY5eF|zx0Bc0Auom?HYoYz~9a^LLv3?9txCg!^| zKH+ck*rf57pZJGQW9(pb3!8@M>MmAGADd+pJ*g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f179a27..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1AD8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1AD8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ad8.1988): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0f6fcfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.07022e-038 1.16598e+010 3.89754e+024 -1.62196e+019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002cc000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002cc000 bea1af64 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002cc000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_description.txt deleted file mode 100644 index f179a27..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1AD8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1AD8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ad8.1988): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07eb7b19 edx=00000000 esi=00000000 edi=0f6fcfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.07022e-038 1.16598e+010 3.89754e+024 -1.62196e+019 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002cc000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002cc000 bea1af64 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002cc000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7962/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8964a84..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(914.1cac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.51886e+020 8.0308e-019 2.65018e+017 -6.46187e+036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036f000 3d0d5662 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_description.txt deleted file mode 100644 index 8964a84..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(914.1cac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07f57b19 edx=00000000 esi=00000000 edi=0fc3cfd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.763565049914082400000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.51886e+020 8.0308e-019 2.65018e+017 -6.46187e+036 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08038130 07fb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036f000 3d0d5662 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/7998/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e0eca22388461964e336b494c58025351f63cd45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipJ0wM8aij% zUxR0A{^_owrYzcH)*ICm+o0MQE~#NpyreFI_gm%NR{ggnoM<g_@q{EO5DDvb*t zkQb};wz330SB>cJ?nXcMBGiS!qxG>h$lf>I1Oa8`XsSlL*sQV1#wpGv<<2U1- z@!lAX!8n0$i0|mlICeT-YL2-#|HRm9Joft@^Y4cIuPcj})PS@LFuYO0Ln zq>iXCR+xcz=dl82{mu*5t4esaDuij}n9f)jE2B>&@n$5+@18Lw^7|K(@p2{}-(eT% zB1c&ny|FQN#@;AE9e*z^Yy)#-FB$r0TR64ZJ3Le|I?a$ zT$N}za-8UfJi_&1F4aCeE*h3gNw0HGtTD8fTRaV#KGi30dWw_HcF?l1Vfjkq(lNh| z&mRlXfK$~3(Vnw4L9|q3MOYzgR7-r)So3QwyUWST1jt926QmsV9Omtl9KgxhER%*M zhaYJ;bft50)O=oV+4Oz0=M%UyyB>4CPW>Z3n};g(KmC}$`_#t_>9G54{W bSJA^7SQmUmR?Pd3hx!5g1$%%!!cN;CB%jGO diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/826/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8e233754ef271d692ff9d90e8e33c779e2fd96cb..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ#HH@5QQJLf>#}-E`@>JDoE)YtX<^>sdEJ1U>P|{-MSv;S&suC7IY%;ja(2llCI zXSzbCo_vKNlXvUN+jaGSozuzoXH+yAh zH&4o$bM9O?m+hm)`$jDPGKkeD$d+{U&eW0E|OLz2{yU8szq`p+7%yjfEGQ50VtLi90 zi*~D(r7uN_YEE6tJzjP-{ZL<`>q8vA+OxI?+pYf4eCb@j&aWQ}u;Z!L1k+KoYl3O3 z=8m{S)vUJoL37W4YI`~<(H3An!m^&g zZ{9zW8@HRi$W0j^_}SdIW&9EM@-3DzcQjnn_CpTyE;nZ}w`XmRw2n5Un3#}-E`@>JDoE)YtX<^>sdEJ1U>P|{-MSv;S&suC7IY%;ja(2llCI zXSzbCo_vKNlXvUN+jaGSozuzoXH+yAh zH&4o$bM9O?m+hm)`$jDPGKkeD$d+{U&eW0E|OLz2{yU8szq`p+7%yjfEGQ50VtLi90 zi*~D(r7uN_YEE6tJzjP-{ZL<`>q8vA+OxI?+pYf4eCb@j&aWQ}u;Z!L1k+KoYl3O3 z=8m{S)vUJoL37W4YI`~<(H3An!m^&g zZ{9zW8@HRi$W0j^_}SdIW&9EM@-3DzcQjnn_CpTyE;nZ}w`XmRw2n5Un3wh*EO_OOs(b%hWSWG`3*f&@emEL0F;9n{##PA>5iBoP#p z5Ij;Uf{GS4GN+=I#LhxACu!0svmknE$oQW(b0K$-MlyGAe)FIAF(122RKTxVB?>G< zqP;{^sSs3=RtrSOF*it!!;9m;|BgQRcw=??)cboQk6#?TviRfV(B10I!nvPgyT0uH z_U76CC%5*sj@W@aw0A(|P^Sp81`# z&oBP!pITUYI^H_)=+AtNg|}*va-LG9o8_9*9af~%o^qHHJEMjvRbZp;I9GS`*Nd1$ zyIgd-UUHOTo%19WJxf9&PEwh7BB>I#SdTO{^J=qg8AQ!B%YtXov*cNhR@h$&4ae64 z!}*d-3wcv8+v*N9<9W?<&a>gEJf&v`h8xkgv7Mq6>glALEkEC(%A8+itqk#*G%5vC zX=DN>fujiAd|zldt`Is+ktYS5M-+NSSizo7Uj#pq)WM{P8dy(A&LXEsFoAC8j$|Q{FYvqZ1Nvmp9gOTA08l<#Ej6Wn;9}DDBd{ zU*|5oldpx>9Y6WiHZ&hBk2h&Nbgb{{+mD4P$E~^m*1|@+0M?w19bt!7Bb)sljXiJH zd^)2AFMxQsZ2+eu-@5Jbi7%k%Zes1+9Ai73Zwz_RbJg~~wzIkS&G#!{)7y00m}#9Y zRMZzK0ZU-16bezwv{GB@HS8U13APODZT|p* C>Gl5r diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index af37c60..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FAC: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FAC: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fac.1974): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=080c55f0 edx=00000000 esi=00000000 edi=1171afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.828304294572606560000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-5.91807e-014 -2.0281e-038 4.7562e-014 -1.43245e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081a8130 08125930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 003aa000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 003aa000 62fa94ce 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0ba 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003aa000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_description.txt deleted file mode 100644 index af37c60..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,190 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FAC: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FAC: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b30000 00000000`71b54000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`71990000 00000000`71b29000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fac.1974): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=080c55f0 edx=00000000 esi=00000000 edi=1171afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.828304294572606560000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-5.91807e-014 -2.0281e-038 4.7562e-014 -1.43245e-010 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081a8130 08125930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 003aa000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 003aa000 62fa94ce 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0ba 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003aa000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/850/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 440aa0c8f8838c0f943a83000b73c65086a471af..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4sc>wh*EO_OOs(b%hWSWG`3*f&@emEL0F;9n{##PA>5iBoP#p z5Ij;Uf{GS4GN+=I#LhxACu!0svmknE$oQW(b0K$-MlyGAe)FIAF(122RKTxVB?>G< zqP;{^sSs3=RtrSOF*it!!;9m;|BgQRcw=??)cboQk6#?TviRfV(B10I!nvPgyT0uH z_U76CC%5*sj@W@aw0A(|P^Sp81`# z&oBP!pITUYI^H_)=+AtNg|}*va-LG9o8_9*9af~%o^qHHJEMjvRbZp;I9GS`*Nd1$ zyIgd-UUHOTo%19WJxf9&PEwh7BB>I#SdTO{^J=qg8AQ!B%YtXov*cNhR@h$&4ae64 z!}*d-3wcv8+v*N9<9W?<&a>gEJf&v`h8xkgv7Mq6>glALEkEC(%A8+itqk#*G%5vC zX=DN>fujiAd|zldt`Is+ktYS5M-+NSSizo7Uj#pq)WM{P8dy(A&LXEsFoAC8j$|Q{FYvqZ1Nvmp9gOTA08l<#Ej6Wn;9}DDBd{ zU*|5oldpx>9Y6WiHZ&hBk2h&Nbgb{{+mD4P$E~^m*1|@+0M?w19bt!7Bb)sljXiJH zd^)2AFMxQsZ2+eu-@5Jbi7%k%Zes1+9Ai73Zwz_RbJg~~wzIkS&G#!{)7y00m}#9Y zRMZzK0ZU-16bezwv{GB@HS8U13APODZT|p* C>Gl5r diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9d02d232b01bd87cb2c146b5d14fb17a656b21ff..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GF^=0X5JiWUV7a5*r7$2>K}z31-YPdpog?fG#CQ`V>GlYF6gmNta*wbEwn<5K zDi)gj8IBCwK$>7_j~+kg4@pTB(E`8imdFVUqPIlUwggqup9RqejJ?AcEc6lKXmXPy z$M{d^GK-ofWYC~!V#nyoj~H%t6TA$UL#4R2gA^PXnA8LpN|BWL84I1aDrU86FIn%h zp4o=1jp2qG8HqR4Met#tdB4x&-%AXleJQivuQG$5v@TF-T=@WBpjvkls4b4F-yf3l z>tPhS>hL057)#^ISXa-QZwprc&au`9;v?!lA*Agy=(F*g@!t4gjK*M`!PhE5#By>NK&c{qLKTfOOM`5gt-q;vBV{cTT zUcQ$Wu|qhrLx%o8TRu!Gy9$>`j3yy7F#m{XebY%c?}f#lV$r$Rk~! z*2>zmlcHh0R(s8yL}Th)ZuvB1`&^&A={Zlf+DYq;4eK+FmyY%G{PM974S1^ApxTQ& z8&qpGc7z>@Mz!W=jXj@hy*o}`7l0pWF=#pJB`vp4`T(w;%{t|@dgPLZQ&&4zk6NDB zYqose?D`BIEbd0;yVO77vw5si|I3g3!>2wr2)ad#U36s=i=~g%vWgzjAiCfqT#=8R PO!X7-8}W#ELR`1MPWtf~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index bddc5ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x3C0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x3C0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(3c0.1750): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.506180000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.65886e-029 -1.62195e-021 -3.41593e-012 -7.14089e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00216000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00216000 243a3f72 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00216000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_description.txt deleted file mode 100644 index bddc5ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,173 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x3C0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x3C0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(3c0.1750): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=40000000 ecx=07e57b19 edx=00000000 esi=00000000 edi=0fd1afd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210216 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.506180000000000000000e+0005 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.65886e-029 -1.62195e-021 -3.41593e-012 -7.14089e-033 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00216000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00216000 243a3f72 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62aa 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00216000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/8890/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9d02d232b01bd87cb2c146b5d14fb17a656b21ff..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GF^=0X5JiWUV7a5*r7$2>K}z31-YPdpog?fG#CQ`V>GlYF6gmNta*wbEwn<5K zDi)gj8IBCwK$>7_j~+kg4@pTB(E`8imdFVUqPIlUwggqup9RqejJ?AcEc6lKXmXPy z$M{d^GK-ofWYC~!V#nyoj~H%t6TA$UL#4R2gA^PXnA8LpN|BWL84I1aDrU86FIn%h zp4o=1jp2qG8HqR4Met#tdB4x&-%AXleJQivuQG$5v@TF-T=@WBpjvkls4b4F-yf3l z>tPhS>hL057)#^ISXa-QZwprc&au`9;v?!lA*Agy=(F*g@!t4gjK*M`!PhE5#By>NK&c{qLKTfOOM`5gt-q;vBV{cTT zUcQ$Wu|qhrLx%o8TRu!Gy9$>`j3yy7F#m{XebY%c?}f#lV$r$Rk~! z*2>zmlcHh0R(s8yL}Th)ZuvB1`&^&A={Zlf+DYq;4eK+FmyY%G{PM974S1^ApxTQ& z8&qpGc7z>@Mz!W=jXj@hy*o}`7l0pWF=#pJB`vp4`T(w;%{t|@dgPLZQ&&4zk6NDB zYqose?D`BIEbd0;yVO77vw5si|I3g3!>2wr2)ad#U36s=i=~g%vWgzjAiCfqT#=8R PO!X7-8}W#ELR`1MPWtf~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index b2df285..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x310: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x310: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(310.3bc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07fb7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.780453548520653920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.37361e-024 -0.00109016 -8.89845e+029 -1.3452e-012 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08098130 08015930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00398000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00398000 74bbdcad 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00398000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_description.txt deleted file mode 100644 index b2df285..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,174 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x310: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x310: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(310.3bc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=0019f4b6 ebx=80000000 ecx=07fb7b19 edx=00000000 esi=00000000 edi=0fce4fd4 -eip=005bdfcb esp=0019f4a4 ebp=0019f94c iopl=0 ov up ei ng nz ac pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210a96 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.780453548520653920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.37361e-024 -0.00109016 -8.89845e+029 -1.3452e-012 -image00000000_00400000+0x1bdfcb: -005bdfcb 884c1602 mov byte ptr [esi+edx+2],cl ds:002b:00000002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfcb -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08098130 08015930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00398000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00398000 74bbdcad 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00398000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x2 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:WRITE -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05751964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfcb -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfcb -INVOKING_STACK_FRAME:0 -DESCRIPTION:User Mode Write AV near NULL -SHORT_DESCRIPTION:WriteAV -CLASSIFICATION:PROBABLY_EXPLOITABLE -BUG_TITLE:Probably Exploitable - User Mode Write AV near NULL starting at image00000000_00400000+0x00000000001bdfcb (Hash=0x67613208.0x05751964) -EXPLANATION:User mode write access violations that are near NULL are probably exploitable. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x05751964/9347/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a451373b1e3150d56bf44a0bbed7f3824dd0572c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ8s)R5Qb+(LR7a@mqGwp1uk_1%2jTVI!EvgxRGNd?tBCvWt9L)=_6Qxo0Q9r zh2hOV4+@q5B|zYnhTs14*e6Le!*9JNa?FD0JrT7nL6!7-M)VQB3;2*ipI{jcINSaa zK3n(KKovE-XpdQMR8MS!YGb&hhCT6;x(MEHm3Le9-uzMaYWK{X8B62BSXWOHZ;LGX8<(X%P~M~NGmP6-L0^pDjCaO+ zV>AZi1imA_r8nc)>3FF*=HC1hW3Tbp?|aPOha5Yw3pq4k zq~Xw&&dE{pdA()R_syP9;LhxN%=tR?kN9jJs?`7VWB%?_9~&55!NxASvWdmq$7)_h a4{Kmu@DW)t?>ipq2kaN@0rm(xZGQkJi^((q diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9258160..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Writing To 0x0000000000000002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/PROBABLY_EXPLOITABLE_0x67613208_0x2b33626d/PROBABLY_EXPLOITABLE_0x67613208_0x35647477/2022832/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ed12e7e5394082a1bc3f520fda03c2210d22eec7..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 136606 zcmeI5ZHyJw8OLYXh1JG&K@e66TpI;}rY$sD=!@Kqe88l!_Cv80h^1|4)=JW*pM1f+ zYiw<7O-z&~{n7?(BEGamMFVL-siZ+DxNdNfKu|%l8Wde#Qg>y!r_VEY&g_}lx%bY@ zo!2}6NzOgznS0K8p6B;J_wJp!cV{$hf;Lg>?bVEJ-etOWC$-kDt=P|O)U+Pj*VR?A z=iRDlbN`}i3m392%4MOKsS>)-w6a#FwoW^AV~<|uy+UwBJG8RkHa}8dvUPf(G4zDS zBQ)I@OmkFbAk*ktag0Y0009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X z009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5CDO=2rMH znj`g0Wicg!XfLNZKc*t~?%iwC-OZRYXO3J0cSR5jrmRiizw~rR?JmBbT}LCt;>C;I zTN^Y3*jLSg}It|8S#;V0<6~lK);B z9mX2yqIpDTXQvn$8F7=`+IQ;IDbd>6%Kk4>!Dl~$kiaJO=lVZX+8d1F?=)WY^z>Ld zS8F`*zys3vvkm&h@Zbat4GM*V)M5`!74#gP>oK33{=>t=V(QeX(&u-AhmVmB5->D) z_uY5JtXZ?99{;8}zZ78JKhT(}$9(EK*tBVr^u_0gu_Z^q(1Eo%e*CzYIdi7eWjBT7 zXASr|=3BIAk@WME zJ$h7JbImnUqkmCoUfu`ZqJB8$OHRk2p2z9WYv9O{BgQctYf5DYmCI^4=%VL59rN*b z0sNf+_2*+g{=A4SSpu&5^BOpO_^_BheY){Hg}9x{q$;8QgZ7J3sl>x-ZaC(vLNK}A zRrO~f2L=Yjv}x1i8hC}mbglu<$9#M~NLf!ylS>(%6#_N&=QVKX&>?jVyyRE|exdwb4^WAjQP4a!@r|C&Q_mOzgpVvTNU!S@L z_&o0~sd)OH5666|U1y&4=QVKf;6X8E$`tuJ9%cQXdg>{Ds^+$G7I!G&^{V51I!w`{?I;vO3@98 zRexw7osa=%j!l1PA5fuahsB~lw2xNA24;_3e`w!;I?)e}RDWn6y?_mRh)jQI-=H$_ z439*AXdjPwA$SR0e`p_qD)CJbs{YVEKH)<06q^3fJ|sorohB6hp?$ofh3Kte{h@t` zYQ#TPL;6Ge_yr5uV_^NEeaK2AGhHD4p?xx9Mc~!9{?I-G6_T6Mm;TT`IiVu*>{)+k zACUsdPU}g3XrHV|5qhtyKeUgKe)3b-)F0X>FHpo0RMj8aM@&8))4S>q?b9Jn3{i~J zAKJ%2Jv}aL`a}El2oqBzmj0~$?Afyon|$N?dNB!*up2{fXrHhO$+bnI=j+hyHh zYxV)7T8FKJ-7bk?+w(<-T_C%ljPDRbHoJ{%)nAKv-)8G%mz43E*lo8<4!gKpQ@RVS z&}+9ldTse?ZJOO~(OPWdwYs*AC%u0Yi=YJ=>~# zwpI6R7aa2y9d^lKt0s-NxhLD^o@|?YvTg3kE;!~ZI_#3ewwc1=UO3zfhkN00Pp=2Z zd_{*{a@clL*s~YHp1lzE?1ivrFGRsHU(sRDBZ1aZ*-b^)uA@gy>)mKncmM$q009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5C8!X009sH0T2KI5CDNV2;5ChX2jtLKE@H~qCNCK+1dz|EmXcs z1zUUso+DSxUoHJ)cT>573byD7%%-U?PMS1H?Ay0b+<*W5V#bUast!Z+{F7AXM;Ah_ zXZ}59FIKHuWnBSbWMo7<{q)n~mRoL7btqFm{u_bKPT)s&)0cHQ_5PTO*t>VH#b0gg z+Otw{l$Y1KIn$t*tcxiGCB9J@&wdpt_Gu0sU%r>(ZKr5IXF1z%70*BKTYmnh(0uUlmLm_S=bh`)(|1e-o zc^c-*pTWAk7j-fFTAw+0?%XNae?Wa(^8_+ru2uQFXmFVM_w@9PTlaFu9e3Oz`ELjq zPu_;rOvR_uebl{@=X0 zMlT}ZiNDmK+Ii05;bAd#>Qu>p3CMaT;F=Whha(uz@?7w7_BGi@${+0OvX6{E*n46h34aIsm7XKXXU9-K ze}cX5MHCwU-ringE{cH9rD5HBlOh!UVDAmKORt9cgS`t?@4Fh}5BATh=-{$TG9a*f`;`Gb88n*N{i#UJeb1Fkc|Gk>tJLo(RYp7=Z1|2UW{jB+7Rm;XZ# zJ!JHuv3y($_AU?`*j1B1*f&7d+t8}~!QLCd279^k2m1!8dLKTHKiGSR7eY@Pf3OdM zsJ|&J{$TG9Tu8kQ{$L*xP5;vv{An21_)8`Ml(WSa%lir)vc8juKZEKpe_*Kwm_TsiohT8>Ye^F_d zl(yOAzX_IOYRl<)znq@ia(ZqTl(9vnT~gYzN&T(qsclV9ZEJdJThmj!po}dl?UK^A znnIagDANmNdZA1&l*4S$waA zyl&s4#LrOap>kCYA#C5aZJTjFLdu=*0mJto(;H~alhb6GQ1fn)nRZOuXA-fefl)# zews?wKMPoC)nKswg%@71`ftD)O+lZL|Jyz@SoOO`C*{J*76lHs;Yd0fr+-f;fC z=T4L>muA_<5mw z4zE@!zMnI5=i|XFGBJ*=KUiXI*!> zWHZ-Ta$4_qzEvdG0myS8{LWd)>RP|DmBFexK*p zdo$-Z4+f2tFVE>W&?P_VwF)CT9`fT@=q?XWPUj&M2@fak2 zPKa~(;KT_dcJ+NL?mU9V|Iw*aiO0^Yg2aD@{>PKoOp@HC&VJ)RN59idOYDC6e=#zg zs@VO+f9Z>n)Wz;O{!5oq8N1i`)3n|>W_7Fg`b~4}oJXzr(;j=R__GjuwfM6VyIcHO zirpE1)?!!V&tmK{{;b9><4?oqNRB1QRynw`ex)RTt(3mnxH%5RY5V|6)5>N&+pMoJ zeh{T;t!7>MT@?{A$5nop#e|BKvRao+n=0OK+^C0YbKc7Rf5?{e6wH1_vo4u6S2VtI zpC9kP664=#T}P#hiuF6K$z)&y0T2KI5CDM`6X=}Sa&3pMy+hwG{*}J(S`>GvQzqyy zA31#3`0G1a*AGPHfAR#K&!1nIK5^_jCT?@??3`oh(Dlf^*Q4)#KIHTIY7Csa{Cy!r_VEY&g_}lx%bY@ zo!2}6NzOgznS0K8p6B;J_wJp!cV{$hf;Lg>?bVEJ-etOWC$-kDt=P|O)U+Pj*VR?A z=iRDlbN`}i3m392%4MOKsS>)-w6a#FwoW^AV~<|uy+UwBJG8RkHa}8dvUPf(G4zDS zBQ)I@OmkFbAk*ktag0Y0009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X z009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5CDO=2rMH znj`g0Wicg!XfLNZKc*t~?%iwC-OZRYXO3J0cSR5jrmRiizw~rR?JmBbT}LCt;>C;I zTN^Y3*jLSg}It|8S#;V0<6~lK);B z9mX2yqIpDTXQvn$8F7=`+IQ;IDbd>6%Kk4>!Dl~$kiaJO=lVZX+8d1F?=)WY^z>Ld zS8F`*zys3vvkm&h@Zbat4GM*V)M5`!74#gP>oK33{=>t=V(QeX(&u-AhmVmB5->D) z_uY5JtXZ?99{;8}zZ78JKhT(}$9(EK*tBVr^u_0gu_Z^q(1Eo%e*CzYIdi7eWjBT7 zXASr|=3BIAk@WME zJ$h7JbImnUqkmCoUfu`ZqJB8$OHRk2p2z9WYv9O{BgQctYf5DYmCI^4=%VL59rN*b z0sNf+_2*+g{=A4SSpu&5^BOpO_^_BheY){Hg}9x{q$;8QgZ7J3sl>x-ZaC(vLNK}A zRrO~f2L=Yjv}x1i8hC}mbglu<$9#M~NLf!ylS>(%6#_N&=QVKX&>?jVyyRE|exdwb4^WAjQP4a!@r|C&Q_mOzgpVvTNU!S@L z_&o0~sd)OH5666|U1y&4=QVKf;6X8E$`tuJ9%cQXdg>{Ds^+$G7I!G&^{V51I!w`{?I;vO3@98 zRexw7osa=%j!l1PA5fuahsB~lw2xNA24;_3e`w!;I?)e}RDWn6y?_mRh)jQI-=H$_ z439*AXdjPwA$SR0e`p_qD)CJbs{YVEKH)<06q^3fJ|sorohB6hp?$ofh3Kte{h@t` zYQ#TPL;6Ge_yr5uV_^NEeaK2AGhHD4p?xx9Mc~!9{?I-G6_T6Mm;TT`IiVu*>{)+k zACUsdPU}g3XrHV|5qhtyKeUgKe)3b-)F0X>FHpo0RMj8aM@&8))4S>q?b9Jn3{i~J zAKJ%2Jv}aL`a}El2oqBzmj0~$?Afyon|$N?dNB!*up2{fXrHhO$+bnI=j+hyHh zYxV)7T8FKJ-7bk?+w(<-T_C%ljPDRbHoJ{%)nAKv-)8G%mz43E*lo8<4!gKpQ@RVS z&}+9ldTse?ZJOO~(OPWdwYs*AC%u0Yi=YJ=>~# zwpI6R7aa2y9d^lKt0s-NxhLD^o@|?YvTg3kE;!~ZI_#3ewwc1=UO3zfhkN00Pp=2Z zd_{*{a@clL*s~YHp1lzE?1ivrFGRsHU(sRDBZ1aZ*-b^)uA@gy>)mKncmM$q009sH z0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI5C8!X009sH0T2KI z5C8!X009sH0T2KI5C8!X009sH0T2KI5CDNV2;5ChX2jtLKE@H~qCNCK+1dz|EmXcs z1zUUso+DSxUoHJ)cT>573byD7%%-U?PMS1H?Ay0b+<*W5V#bUast!Z+{F7AXM;Ah_ zXZ}59FIKHuWnBSbWMo7<{q)n~mRoL7btqFm{u_bKPT)s&)0cHQ_5PTO*t>VH#b0gg z+Otw{l$Y1KIn$t*tcxiGCB9J@&wdpt_Gu0sU%r>(ZKr5IXF1z%70*BKTYmnh(0uUlmLm_S=bh`)(|1e-o zc^c-*pTWAk7j-fFTAw+0?%XNae?Wa(^8_+ru2uQFXmFVM_w@9PTlaFu9e3Oz`ELjq zPu_;rOvR_uebl{@=X0 zMlT}ZiNDmK+Ii05;bAd#>Qu>p3CMaT;F=Whha(uz@?7w7_BGi@${+0OvX6{E*n46h34aIsm7XKXXU9-K ze}cX5MHCwU-ringE{cH9rD5HBlOh!UVDAmKORt9cgS`t?@4Fh}5BATh=-{$TG9a*f`;`Gb88n*N{i#UJeb1Fkc|Gk>tJLo(RYp7=Z1|2UW{jB+7Rm;XZ# zJ!JHuv3y($_AU?`*j1B1*f&7d+t8}~!QLCd279^k2m1!8dLKTHKiGSR7eY@Pf3OdM zsJ|&J{$TG9Tu8kQ{$L*xP5;vv{An21_)8`Ml(WSa%lir)vc8juKZEKpe_*Kwm_TsiohT8>Ye^F_d zl(yOAzX_IOYRl<)znq@ia(ZqTl(9vnT~gYzN&T(qsclV9ZEJdJThmj!po}dl?UK^A znnIagDANmNdZA1&l*4S$waA zyl&s4#LrOap>kCYA#C5aZJTjFLdu=*0mJto(;H~alhb6GQ1fn)nRZOuXA-fefl)# zews?wKMPoC)nKswg%@71`ftD)O+lZL|Jyz@SoOO`C*{J*76lHs;Yd0fr+-f;fC z=T4L>muA_<5mw z4zE@!zMnI5=i|XFGBJ*=KUiXI*!> zWHZ-Ta$4_qzEvdG0myS8{LWd)>RP|DmBFexK*p zdo$-Z4+f2tFVE>W&?P_VwF)CT9`fT@=q?XWPUj&M2@fak2 zPKa~(;KT_dcJ+NL?mU9V|Iw*aiO0^Yg2aD@{>PKoOp@HC&VJ)RN59idOYDC6e=#zg zs@VO+f9Z>n)Wz;O{!5oq8N1i`)3n|>W_7Fg`b~4}oJXzr(;j=R__GjuwfM6VyIcHO zirpE1)?!!V&tmK{{;b9><4?oqNRB1QRynw`ex)RTt(3mnxH%5RY5V|6)5>N&+pMoJ zeh{T;t!7>MT@?{A$5nop#e|BKvRao+n=0OK+^C0YbKc7Rf5?{e6wH1_vo4u6S2VtI zpC9kP664=#T}P#hiuF6K$z)&y0T2KI5CDM`6X=}Sa&3pMy+hwG{*}J(S`>GvQzqyy zA31#3`0G1a*AGPHfAR#K&!1nIK5^_jCT?@??3`oh(Dlf^*Q4)#KIHTIY7Csa{C1x~e|C3vXLf%BFYh;R z-kra=Y`s~t+vD`5bfDx?;rnBh$$$Wn6US^eJI4(PnOueT_1l{ zh~58KLdLdDO-)G{3sV^qitD#c`Hu~-Psh1juHV_?TI&jb5BpF1ZP63I9p}&N3H=VQ ze`fDuk2@V(|IEIIeaHAS`?~Bq!k^hUWFI?!X79^BR{qRBkbP|YnSChsvGDh>|17kU z{;b&6zdxCMTpF+Ya8uD1{>(lc>^ikt=FjZwPz_(y5`ShN9(046 zP4j2=4Twf7Zi+v%j|SPNc4Yp{-iK!NLy`D1`{;lJT7>4$>;p(PcQ_P(5BtxX8;V=i zArQ#_;K75c4z$JpYngo=h%FTP@@MufkPX+gA%A8c4q%J5>hfpyEm95NyoNus4-c;m zHC_CfeH(~I>%!sB?4yBeQ*Fhc*|&*i^llV?XofleeIK1)t1S$FWdB90opJlf1kAc; z_L0%Gr2((|wqR_o6Q7T#@S)Tam?6r)CviSk-4PiQkC-@D5l)<~RO@6&JW{Tf50^#O zv>jZo#@4dPnQ~De@we3vvx)5_hQB||CWK`|cyFfhAStJ@5M~cw1;e@)#>NcB8B(4l zagM|~#NP?dz!016vD|czvFRS;3~8GsagM|$g!)eR5IfyN>~s&Y(>=r)(l$%t9EqJ! zlI|txUXt!5>0XlVWpx&%tj-+7)$V0gy_8k;QdZSVSyeA(hP2I+cpHG5fRu-1iB0em zHuw}IZ%lv*FaajO1egF5U;<2l2`~XBzyz286JP>NfC(@GCcp%k025#WH3SBs&o5HBS(%n{xP_6v$rP)6e0&`Jzn>O^0XkjY=+5%; zvh@DG$K%i+re4{oeTwy z*WU5}!8CYptN#>wZ<~MO9ll#7Rh#d64s$TY-dmpkg@pxtpU2mG+UDIX(lAq8x6XqH z4~+M%rn400b-e`@67Tp?gEVhJR%?#;kawK78h?HT4<9}>Yd-DsZq}@yUDq+<{Wa6L z2XdFkMmyR&p7ZD>?>K#pEIZ{r>^;zbk9+s^PrSd56?=4Z);SFdg#y0MxVMHno$i&t{R%>Pnc&9%rhlKM%T;g zJg0LzbDkezo*ki^JI{>B=z3Y5<3I7Z`1e3E&xy#V^-Lak;Ef3|0Vco%m;e)C0!)Aj zFaajO1egF5XiVV6RRbTa5#sc^0c$VB?=-HN%p;)v?CjO6^5n0-$nPedbAG_c`0A+GCFG7`^6UpRYKLfKV!&F<|1-}9j7&gk&axL3s*OPsoV>5`GJ zax8mc(Awp#+pT@jez)}aF*03(_5GgFfiaX_uT(0I{=aYBz`|xD@AZJ3m3aN*&aJt`vG?ky9xj|YP322?ot#V3x<~D}QT|$R z1=o^y!`HcAvU}_N&pP_O(rfnd^{}$CBJuM(_?kvvomXy;*o=NOgdT3)ys5O)_pMI* zXjcEd+qb)}9a%M_e*r$@iEE~t+|4{k)xQY$X(mN`RQ^v&%Zbt+MgP+$rNn6ut^euM zL~0MKKS}EyHPbEV^_yhv=)+Hc(zW~PPlNVG`qQGlp8hmx_v%lZcB(&(+Kv9SYB&0m z@OLC?X=bzkxpMAOGIuK_FIQiV13J|WP(oC6zES7TsvDw&Sfz9OzA7N1+u8SJA)zc- zrg={9Lx$z*i+Ui}{o3FE1N)|*jINi}c~0k;L3{gqe!|}+hWBZ0f;0iixld~??C{0} zm;e)C0!$#m1V)DjH;h=~I$U4;8LoG|-D#=M4_K%Ex^_+d_FZdPf5bKZ+5rpCpD(>M zRK3Q8F?z?rQNxI3#dci}uKnD_^ZHZ+dNpC&q3xey7H+H-0C__Kx4_vFZ5T7~72B zt+CDcalN--|3MplzX=1x~e|C3vXLf%BFYh;R z-kra=Y`s~t+vD`5bfDx?;rnBh$$$Wn6US^eJI4(PnOueT_1l{ zh~58KLdLdDO-)G{3sV^qitD#c`Hu~-Psh1juHV_?TI&jb5BpF1ZP63I9p}&N3H=VQ ze`fDuk2@V(|IEIIeaHAS`?~Bq!k^hUWFI?!X79^BR{qRBkbP|YnSChsvGDh>|17kU z{;b&6zdxCMTpF+Ya8uD1{>(lc>^ikt=FjZwPz_(y5`ShN9(046 zP4j2=4Twf7Zi+v%j|SPNc4Yp{-iK!NLy`D1`{;lJT7>4$>;p(PcQ_P(5BtxX8;V=i zArQ#_;K75c4z$JpYngo=h%FTP@@MufkPX+gA%A8c4q%J5>hfpyEm95NyoNus4-c;m zHC_CfeH(~I>%!sB?4yBeQ*Fhc*|&*i^llV?XofleeIK1)t1S$FWdB90opJlf1kAc; z_L0%Gr2((|wqR_o6Q7T#@S)Tam?6r)CviSk-4PiQkC-@D5l)<~RO@6&JW{Tf50^#O zv>jZo#@4dPnQ~De@we3vvx)5_hQB||CWK`|cyFfhAStJ@5M~cw1;e@)#>NcB8B(4l zagM|~#NP?dz!016vD|czvFRS;3~8GsagM|$g!)eR5IfyN>~s&Y(>=r)(l$%t9EqJ! zlI|txUXt!5>0XlVWpx&%tj-+7)$V0gy_8k;QdZSVSyeA(hP2I+cpHG5fRu-1iB0em zHuw}IZ%lv*FaajO1egF5U;<2l2`~XBzyz286JP>NfC(@GCcp%k025#WH3SBs&o5HBS(%n{xP_6v$rP)6e0&`Jzn>O^0XkjY=+5%; zvh@DG$K%i+re4{oeTwy z*WU5}!8CYptN#>wZ<~MO9ll#7Rh#d64s$TY-dmpkg@pxtpU2mG+UDIX(lAq8x6XqH z4~+M%rn400b-e`@67Tp?gEVhJR%?#;kawK78h?HT4<9}>Yd-DsZq}@yUDq+<{Wa6L z2XdFkMmyR&p7ZD>?>K#pEIZ{r>^;zbk9+s^PrSd56?=4Z);SFdg#y0MxVMHno$i&t{R%>Pnc&9%rhlKM%T;g zJg0LzbDkezo*ki^JI{>B=z3Y5<3I7Z`1e3E&xy#V^-Lak;Ef3|0Vco%m;e)C0!)Aj zFaajO1egF5XiVV6RRbTa5#sc^0c$VB?=-HN%p;)v?CjO6^5n0-$nPedbAG_c`0A+GCFG7`^6UpRYKLfKV!&F<|1-}9j7&gk&axL3s*OPsoV>5`GJ zax8mc(Awp#+pT@jez)}aF*03(_5GgFfiaX_uT(0I{=aYBz`|xD@AZJ3m3aN*&aJt`vG?ky9xj|YP322?ot#V3x<~D}QT|$R z1=o^y!`HcAvU}_N&pP_O(rfnd^{}$CBJuM(_?kvvomXy;*o=NOgdT3)ys5O)_pMI* zXjcEd+qb)}9a%M_e*r$@iEE~t+|4{k)xQY$X(mN`RQ^v&%Zbt+MgP+$rNn6ut^euM zL~0MKKS}EyHPbEV^_yhv=)+Hc(zW~PPlNVG`qQGlp8hmx_v%lZcB(&(+Kv9SYB&0m z@OLC?X=bzkxpMAOGIuK_FIQiV13J|WP(oC6zES7TsvDw&Sfz9OzA7N1+u8SJA)zc- zrg={9Lx$z*i+Ui}{o3FE1N)|*jINi}c~0k;L3{gqe!|}+hWBZ0f;0iixld~??C{0} zm;e)C0!$#m1V)DjH;h=~I$U4;8LoG|-D#=M4_K%Ex^_+d_FZdPf5bKZ+5rpCpD(>M zRK3Q8F?z?rQNxI3#dci}uKnD_^ZHZ+dNpC&q3xey7H+H-0C__Kx4_vFZ5T7~72B zt+CDcalN--|3MplzX=5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|9l_|VRU81>h84~gmwX%~$o8~C?mqQW$IE+l^4=>D_ac*21TmLNaO;aU* z=c?2vsz=m)g|h4w^v(Fwcx${fW@9o=s3Jrk#<4>y^ege4NApk2y~cBY?2+H6nme#d zHAOHwWpL_WG*$9ujoRdmMsEy-BpyeS z{O$!yBENqn=~pXpe}_|GiX5dk24ggK#@;AE-DkAiKzC3__L5=#UrC6hL;{SMQqCD< z4;tc+hpE8Gd&63^dXL0bTSEww{+Tr{j!lHS%@*hXtDw|E&eeX1|P z>?uyR+R2uK4XZac9y-?7{`|2J4Y*ZJ5IbN(8EC%J%&yIB5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|9l_|VRU81>h84~gmwX%~$o8~C?mqQW$IE+l^4=>D_ac*21TmLNaO;aU* z=c?2vsz=m)g|h4w^v(Fwcx${fW@9o=s3Jrk#<4>y^ege4NApk2y~cBY?2+H6nme#d zHAOHwWpL_WG*$9ujoRdmMsEy-BpyeS z{O$!yBENqn=~pXpe}_|GiX5dk24ggK#@;AE-DkAiKzC3__L5=#UrC6hL;{SMQqCD< z4;tc+hpE8Gd&63^dXL0bTSEww{+Tr{j!lHS%@*hXtDw|E&eeX1|P z>?uyR+R2uK4XZac9y-?7{`|2J4Y*ZJ5IbN(8EC%J%&yIB5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOQwc!?Mr2|@%x zB#2eeQi$E0K`mpER&p2;QiVAzydq}&=FPj1I}k*iyEngi^S<}y&+ZZp;5Rx-6nVx( z!$g#2RNK0}c5nOX{e`Q==^w?3o%+QO_4&EO+asIf&#q11I(fdm(z^0(#-7c_9?V9s zHjiDJUc3HcWa{q1q4eeQg-^e3-dS2Ie;@ui_-^XP*X6C}Z|F?)_T2HY!DQ!sa&)}; zdf_rw`pcG>AgpA)tWE^K%S;Dfs3$4)GiH)<11>fK=Nn=ENePo^k4nLBR06fy<2+3z zVMS@^G*x*gnzFdX{#4U4A2&OmQPSM?91xa-6=5~m;CL20)=xx^^EJ5^@*cu`YXs1& za85WcTof9i7Ixvd5&buIa+E?noA$CL^Ie)E#7)sEpf9vDIhbpwQ!tGJRTSpSv18pp z9DGWI6mcF=EKIP1Kb^u3JgY|(b95+S)`w!I9f~|7VJu99$`Z%Z4zWJp#gfn$d&Kpe zBVRwlDKLa4FcB(YD$Iq2kb%5YD4D?~U=hhnhVdVpMnr33pvRDmF`%D8LHzMB1JL`u zVJ)itOG{mEmZf&jM4z9MLb$rWR`8XJd{VnsV|mp%>wT0C=@Pf?An)c|C4M(fvf94S z2W!_3_;~18Kh*ah3sD=l8U*YsuMPtCIU75|4!w_Tj(2_R`Jm6Ib5`*J&?D>xoQ`}S z_Qxl_fWEt_*$`%p?`(U2$b-JC_V@KaTX^53-vFCpGactQwc!?Mr2|@%x zB#2eeQi$E0K`mpER&p2;QiVAzydq}&=FPj1I}k*iyEngi^S<}y&+ZZp;5Rx-6nVx( z!$g#2RNK0}c5nOX{e`Q==^w?3o%+QO_4&EO+asIf&#q11I(fdm(z^0(#-7c_9?V9s zHjiDJUc3HcWa{q1q4eeQg-^e3-dS2Ie;@ui_-^XP*X6C}Z|F?)_T2HY!DQ!sa&)}; zdf_rw`pcG>AgpA)tWE^K%S;Dfs3$4)GiH)<11>fK=Nn=ENePo^k4nLBR06fy<2+3z zVMS@^G*x*gnzFdX{#4U4A2&OmQPSM?91xa-6=5~m;CL20)=xx^^EJ5^@*cu`YXs1& za85WcTof9i7Ixvd5&buIa+E?noA$CL^Ie)E#7)sEpf9vDIhbpwQ!tGJRTSpSv18pp z9DGWI6mcF=EKIP1Kb^u3JgY|(b95+S)`w!I9f~|7VJu99$`Z%Z4zWJp#gfn$d&Kpe zBVRwlDKLa4FcB(YD$Iq2kb%5YD4D?~U=hhnhVdVpMnr33pvRDmF`%D8LHzMB1JL`u zVJ)itOG{mEmZf&jM4z9MLb$rWR`8XJd{VnsV|mp%>wT0C=@Pf?An)c|C4M(fvf94S z2W!_3_;~18Kh*ah3sD=l8U*YsuMPtCIU75|4!w_Tj(2_R`Jm6Ib5`*J&?D>xoQ`}S z_Qxl_fWEt_*$`%p?`(U2$b-JC_V@KaTX^53-vFCpGact5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5hM?U>Hk z7`-tRl6V|R^1CN2iTwVVq+hMX{T)t$DRPwF7>v=_8GEAubsy1k1KYtI*++)?KSx3& zB@*C?Ddn6&_MjpD2^$jN$$P_EwECYB>v>h7;mmQNBL#%p(^{%SbzC&8R+8SkOh#BFegYk>N(8EC%J%&yIB3@f@{tTth5k}XrvCD2AbF&E9FMJNL25Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5hM?U>Hk z7`-tRl6V|R^1CN2iTwVVq+hMX{T)t$DRPwF7>v=_8GEAubsy1k1KYtI*++)?KSx3& zB@*C?Ddn6&_MjpD2^$jN$$P_EwECYB>v>h7;mmQNBL#%p(^{%SbzC&8R+8SkOh#BFegYk>N(8EC%J%&yIB3@f@{tTth5k}XrvCD2AbF&E9FMJNL25Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO#4A{#V|X);U0E;rWA1f+V(g1Q_WK^MK_7DLz%JzAL2nA3Df9Cx zOWdp~nyiwHeU15~h`58fB%lN|#9dek6(S96M+bR|=5F-%AVIzzpe2hVegJfF}eJpvRD6j3CcoLHr2^5}@a^ zVJ}*~rulrFm1sDcIMJRQ+|6OHqFpweG%S}A-sGHEW9gEv{xp>EDL*;Ylb>|AgOR|PzEPg&G+?|t-NpAKY%;6%Q5H6)ZgQ?xwEPN<;MKOr9OHXUBJdJ in%c)|?xLOB=wKe!1s4$&^S#4A{#V|X);U0E;rWA1f+V(g1Q_WK^MK_7DLz%JzAL2nA3Df9Cx zOWdp~nyiwHeU15~h`58fB%lN|#9dek6(S96M+bR|=5F-%AVIzzpe2hVegJfF}eJpvRD6j3CcoLHr2^5}@a^ zVJ}*~rulrFm1sDcIMJRQ+|6OHqFpweG%S}A-sGHEW9gEv{xp>EDL*;Ylb>|AgOR|PzEPg&G+?|t-NpAKY%;6%Q5H6)ZgQ?xwEPN<;MKOr9OHXUBJdJ in%c)|?xLOB=wKe!1s4$&^S5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVOWyT5QT@9V0uSs*M$Lk*`;s5?0TKtK&;as?Jh^iQRoIpmpMWNeU;4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index b321508..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x196C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x196C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(196c.a3c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f07b10 edx=00003879 esi=12738f10 edi=0fcc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.196060000000000000000e+0005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.04538e+022 3.15629e+024 2.21924e+014 2.96456e+020 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a1000 b614579a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_description.txt deleted file mode 100644 index b321508..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x196C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x196C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(196c.a3c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f07b10 edx=00003879 esi=12738f10 edi=0fcc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.196060000000000000000e+0005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.04538e+022 3.15629e+024 2.21924e+014 2.96456e+020 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a1000 b614579a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/33306/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b53b971e60e67ec6efc995361ad45b169245e42a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1374 zcmb`GO>WyT5QT@9V0uSs*M$Lk*`;s5?0TKtK&;as?Jh^iQRoIpmpMWNeU;4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/37672/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ebbf12c61065153f64b4d430cc3521aee6b61ded..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 616 zcmb_YF>b>!3_LeQJkolBJ9W+v{H6TB1@bYa1==xBNPvET+Ptwx%1Q#yrEn5YJW3>i z7p}tr==|IP?*QIX*l6`^yP`BV&J7Sn=ZZ1-?G@J=$uCaM`D?B h_d4d?UUI+hvk)UOeMqJ%+imivzK9>b>!3_LeQJkolBJ9W+v{H6TB1@bYa1==xBNPvET+Ptwx%1Q#yrEn5YJW3>i z7p}tr==|IP?*QIX*l6`^yP`BV&J7Sn=ZZ1-?G@J=$uCaM`D?B h_d4d?UUI+hvk)UOeMqJ%+imivzK9>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO8nu5XX;}V0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEud9ZyDVpg|Gj?BkF3$qz|H3;ecQBEzic|Ku&w+LlmK)1L*=2Nb@84}It()Zq7= z5*ACmCvVPYD4cwjD+wQ{9w?7hU>Dog&(WT_972h@Fnvg`}!v+|qr zT6v?4%AlNqXCRN^)i`yfU-G9M)IT%!B_8{s$7|4s96PWJIe5^ULT8G9S!KyvRK+H% zBqMc1mC|AbKApo3n9Um}+-|J!a#IP@#xRYtQd*@;Bym5Hj)#5P)&a*e04q|f!qsXfO@S3BBruyOsw#zV*Y zr9XcxL?dpsB#7-eyCjG$)z}es$Tq4aKHJ#yQ(I1#lamFIk1!`lIqEsg$0xafv%6WR z5|$hu(s-Q88Xa=uFa9X^{|oBCgF%0FD{qleNZbn2q1eXN!) c+NF&S>Y-h55m_-09k==k{SCc^-a*ghFEz@=IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index a19249e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1460: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1460: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1460.10f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f17b10 edx=00003879 esi=12738f10 edi=07d34fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.752306050843034720000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.66183e+016 -2.43245e+012 6.05735e-021 1.50998e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ff8130 07f75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0025c000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0025c000 f263bc90 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0025c000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_description.txt deleted file mode 100644 index a19249e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1460: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1460: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1460.10f4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f17b10 edx=00003879 esi=12738f10 edi=07d34fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.752306050843034720000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.66183e+016 -2.43245e+012 6.05735e-021 1.50998e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ff8130 07f75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0025c000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0025c000 f263bc90 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0025c000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/44712/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f0a7ca5d8ad7cbbdaf1355cdaaab692e342a76db..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1635 zcmb`Gy>8nu5XX;}V0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEud9ZyDVpg|Gj?BkF3$qz|H3;ecQBEzic|Ku&w+LlmK)1L*=2Nb@84}It()Zq7= z5*ACmCvVPYD4cwjD+wQ{9w?7hU>Dog&(WT_972h@Fnvg`}!v+|qr zT6v?4%AlNqXCRN^)i`yfU-G9M)IT%!B_8{s$7|4s96PWJIe5^ULT8G9S!KyvRK+H% zBqMc1mC|AbKApo3n9Um}+-|J!a#IP@#xRYtQd*@;Bym5Hj)#5P)&a*e04q|f!qsXfO@S3BBruyOsw#zV*Y zr9XcxL?dpsB#7-eyCjG$)z}es$Tq4aKHJ#yQ(I1#lamFIk1!`lIqEsg$0xafv%6WR z5|$hu(s-Q88Xa=uFa9X^{|oBCgF%0FD{qleNZbn2q1eXN!) c+NF&S>Y-h55m_-09k==k{SCc^-a*ghFEz@=IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 94f71f22950c098b639966e732453e02651c12e2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1607 zcmb`GJ#O1D6vrPe!SqIH>tKMIijKa4oT)eH+#}=$Vx0zUw;UlypUl+5n)UCQxHrt|ScA;oxxFFA-ctL#xZ+C?^yW;;*!-;lX7rk2*2KOX&fokQ- z1>^;4WG8{T>LB{#J_*0=C#JFcN9ICVD_6?KK1jT)vgB_~mij>XfVwX*Zo2~ds{F3J zQQj(}GAL)@8OURJGfsV(FZoj*)IT#0B_4;vfY)FMIrd;5a`2!xh0YZJvdWUTsEQ`5 zBqMc1mC|AbKApo3n9VyU+^ntea$O12+Axi>Qd*@;Bym5Hd_rP{-d(2iw97=}U(3e_KE#1QMXfkYbD=doUsXgbfMM^WLx)wXbPD zpH?LrPaJ33lS8;Uu2rN(8EC%J&LyJ=Gi zOAdEwJPu`WcGY}eZ`sQGru_rBSG$^WzDmPAKASt6hTm?=KV2H4htVZ$>Z7TBtd=g? crHu~eVSR8BSur1ap6VCu59|(h4?A!F03^G`IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 1358dbf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CD0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CD0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cd0.8ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f97b10 edx=00003879 esi=12738f10 edi=07dc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.774824048985130080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.363652100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.3219e-031 1.73587e+028 5.17119e-028 -4.84412e+029 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08078130 07ff5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00335000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00335000 62683d09 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00335000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_description.txt deleted file mode 100644 index 1358dbf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CD0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CD0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1cd0.8ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07f97b10 edx=00003879 esi=12738f10 edi=07dc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.774824048985130080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.363652100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.3219e-031 1.73587e+028 5.17119e-028 -4.84412e+029 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08078130 07ff5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00335000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00335000 62683d09 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6292 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00335000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/46226/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 94f71f22950c098b639966e732453e02651c12e2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1607 zcmb`GJ#O1D6vrPe!SqIH>tKMIijKa4oT)eH+#}=$Vx0zUw;UlypUl+5n)UCQxHrt|ScA;oxxFFA-ctL#xZ+C?^yW;;*!-;lX7rk2*2KOX&fokQ- z1>^;4WG8{T>LB{#J_*0=C#JFcN9ICVD_6?KK1jT)vgB_~mij>XfVwX*Zo2~ds{F3J zQQj(}GAL)@8OURJGfsV(FZoj*)IT#0B_4;vfY)FMIrd;5a`2!xh0YZJvdWUTsEQ`5 zBqMc1mC|AbKApo3n9VyU+^ntea$O12+Axi>Qd*@;Bym5Hd_rP{-d(2iw97=}U(3e_KE#1QMXfkYbD=doUsXgbfMM^WLx)wXbPD zpH?LrPaJ33lS8;Uu2rN(8EC%J&LyJ=Gi zOAdEwJPu`WcGY}eZ`sQGru_rBSG$^WzDmPAKASt6hTm?=KV2H4htVZ$>Z7TBtd=g? crHu~eVSR8BSur1ap6VCu59|(h4?A!F03^G`IsgCw diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/48494/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiUiy<12L@Z1Y zB!wT1V4=2Q?u2L;)JBk)gBUBpJw!M{$oQW(??UcC5Xs!V`OTa6e{Vi^m#7cFfdQhx zF(f)fL}_|;vGF1PJhA@b`H_#8Z@zr6Hn%pmxO?u#z8?!;9`0Jd|7~RWlU-hZ7VVju zJ$rp>=<#tnH+}GXYiu(3edXz|0~gPn|9a`?tJg<|PLIq~8&9U+T&OqhJ=z=3o_v2Q z9;1b0*Ra+#tR z(^L|cm4;4Jg?FMU4V&x_*9+!kz3mu8^$o{9VM$mPR-#por=ey2U|>04lWijJ7RimOaf08`1$_O zvaT=mK1D(bIFBe4Mp(g}PGJX*mHmo2P>q${JIsD)eg0``?tdjb2LjU8c!&PO)KJ3jWj-RINULh%C7BkTm6 zj(it($0xpkp1X+)A7+i~iq_VU2R&Eq?rSHTf8V5E1?yttZEMGidiy<12L@Z1Y zB!wT1V4=2Q?u2L;)JBk)gBUBpJw!M{$oQW(??UcC5Xs!V`OTa6e{Vi^m#7cFfdQhx zF(f)fL}_|;vGF1PJhA@b`H_#8Z@zr6Hn%pmxO?u#z8?!;9`0Jd|7~RWlU-hZ7VVju zJ$rp>=<#tnH+}GXYiu(3edXz|0~gPn|9a`?tJg<|PLIq~8&9U+T&OqhJ=z=3o_v2Q z9;1b0*Ra+#tR z(^L|cm4;4Jg?FMU4V&x_*9+!kz3mu8^$o{9VM$mPR-#por=ey2U|>04lWijJ7RimOaf08`1$_O zvaT=mK1D(bIFBe4Mp(g}PGJX*mHmo2P>q${JIsD)eg0``?tdjb2LjU8c!&PO)KJ3jWj-RINULh%C7BkTm6 zj(it($0xpkp1X+)A7+i~iq_VU2R&Eq?rSHTf8V5E1?yttZEMGid5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU8yiQC`59$q>!QG4^{(7S<|3#WE&+kNcj^UL$YOUJL%>f)zj$LA}L z_s(7W`C@owa&`3R#er{UPM0V5JS($IrOB-T{{7Z)MUz6j{(k|V{b;HTq`C53t z9Vfq9$LE7JDw}*fbgb{{+mD5)fm?L~_JvhD0sEYd9bt#oM>faXKK8uX=hGQ2cme1U zwgOH^z75;s6JJ2j-Bh#-v&MG1(HZif=c?^}ZDn)soA1}by0_`3G1EF3l&n t%`2gEmB45U*348;N>tb{RMa0S0ZU++6bdS3ip-XJ4SNe)hONPR+aDuk@vr~@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 67a8bd8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1994: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1994: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74a52000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a60000 00000000`74bfa000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1994.198c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07f47b10 edx=00003879 esi=ffd70010 edi=07d70fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.559468500000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=9.08357e+014 -9.20385e-024 0.0523141 7.66524e+026 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0034e000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0034e000 49fca1d0 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0034e000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_description.txt deleted file mode 100644 index 67a8bd8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,191 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1994: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1994: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a30000 00000000`74a52000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a60000 00000000`74bfa000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1994.198c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07f47b10 edx=00003879 esi=ffd70010 edi=07d70fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.559468500000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=9.08357e+014 -9.20385e-024 0.0523141 7.66524e+026 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff50b 0019f9d8 005ff787 0019fa48 image00000000_00400000+0x20d6fc -0019fa48 005ff1de 0019fa70 005ff1f9 0019fa68 image00000000_00400000+0x1ff50b -0019fa68 008ef1af 0019fa7c 008ef1b9 0019fb98 image00000000_00400000+0x1ff1de -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef1af -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0034e000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0034e000 49fca1d0 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c6 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0034e000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x2b68626d -STACK_DEPTH:15 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x4ef1af -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x2b68626d) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/67172/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 878c312d3c038fd9160c81223d52005440dc7d9f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL-cq?4?k_kX=E=C`iB$6b+k*qLmgAVqveH!BUGIFNz8l2WhM% z5UkQzSt-n^L?W1IAqFC3C8f=rS{xc~{Lh=YBX=N(WbWSl=FR)RHy^u8)Q8{52vJ}e z6746VG^NGSnM>8yiQC`59$q>!QG4^{(7S<|3#WE&+kNcj^UL$YOUJL%>f)zj$LA}L z_s(7W`C@owa&`3R#er{UPM0V5JS($IrOB-T{{7Z)MUz6j{(k|V{b;HTq`C53t z9Vfq9$LE7JDw}*fbgb{{+mD5)fm?L~_JvhD0sEYd9bt#oM>faXKK8uX=hGQ2cme1U zwgOH^z75;s6JJ2j-Bh#-v&MG1(HZif=c?^}ZDn)soA1}by0_`3G1EF3l&n t%`2gEmB45U*348;N>tb{RMa0S0ZU++6bdS3ip-XJ4SNe)hONPR+aDuk@vr~@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/68554/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a460ff68415978c38cb6c74df56306674d854c07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmd6mJ8l~>5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|o)_pBE=WKWCPuwK+jp>Ra&*UrWGI+OF z-tKk&*Bp~*-{WguP|} zQ_UUNrJ5oboiaF`Uo=&8vqpXLMskuz)EGTh;L`={fZ2Wu!tL4%uh)&RtR2%C8>2Ud zLK2T7iN1TmlF;|BB=u?~uJ3RP453kaV=zWzXY7pv>Nsgwtwi3|TG&TvO}BU% zR6gaGVEz;*TkYh_!G_fv9}gYtYkmG$hz8uM3d9erR)P4EjU8c!>?2#^laD>W_2qQ6 z1X%!jgjpcz$mcL0pX35A?q*dqEE?|0a2m?s;;Q++-m~fZX8kjGFuNIRy(#?@KAT5h v`ui}}-=Xw5!sr?{cG=BiZWbZ?h0g&NVO5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiU5Qc|ZK~%?8mqGwlrqm5qu5umUU>P|5{wX%~$o8~C~mqQW$IE+l^4=>D_ac*21TmLNa zO;bg`b5-&a)g$u0!no}f^v(Fwcx${fW@9o=sM3hujbn#Ws8`}Sk2XIs_ZrXrv4_4- zHFsc_YKmZV%HVW<(NxjR8uiH=$w?kjWAs>oPZzKQX8S1!w`(uFUN^$Bc1&k%jNTXu zNj#1u`tAiwLf^lV)T@=azQZXnghuI&!5EF5u{R2k_ZcNOupP{iy<`~wvn51QA^~~~ zDd!CG3<~0php9l%d&63^`kxl-c~+s}Y~sR?6cBDtYpEZq#FKc7z?Wk8FugKKA_9m($e} zWC7?AW`U$5pTm57k_))Fn^n=UXt*oGX()q>tLFQ9&!+F2_0QnJ>}IU>ru0wvY#x2- u@55MshtlT=qifjMWjBwxS%mBtJ_lHYbtz=1ay@oj>JRJz_6U1|UADiUG$=d;@Oe1W7s{!ADsoKvMb$7T_l3 zvSVR*{m<-Bumq?vywdEq|2+0Zl4yqCYDHw21Hm!AGkhQ6LkfK%diMOq z%U7>$-Mo4G4mAee<1M9hJowm16>{aG-DiE0^~Ba^t@Nkl*b`2v3*hBC^J1O-ze+gK zzL#0A7n$DPNu8%sxv(C2o@&{Nr?%LN{VG?naXQ z?iNcTzrQ1yFD2sn4Nid}axyEWRXSy-?3Du4@wd~$PGE-gCByh=^N4s)0`wSC2mxdd zCd8kxApv^c8`h%cG0mm@sz}40<3KyI2-mx{vbM=^(a#{xj`j2W{IL)XxYe8>+H!VI5G~c%5q8KL)e@gH_WV%G=~A?^0P+#$ z1Sv;7hxzy<7jSSlP0V4*;Vurlp$rbLn(yl=TYlfPzX3OD=VMCevA@P=b5+IuuN~8G q8~fm3bOsx{U`iK?xee943Kr&Iowos5A#FRJ>JRK6>G$=d;@Oe1W7s{!ADsoKvMb$7T_l3 zvSVR*{m<-Bumq?vywdEq|2+0Zl4yqCYDHw21Hm!AGkhQ6LkfK%diMOq z%U7>$-Mo4G4mAee<1M9hJowm16>{aG-DiE0^~Ba^t@Nkl*b`2v3*hBC^J1O-ze+gK zzL#0A7n$DPNu8%sxv(C2o@&{Nr?%LN{VG?naXQ z?iNcTzrQ1yFD2sn4Nid}axyEWRXSy-?3Du4@wd~$PGE-gCByh=^N4s)0`wSC2mxdd zCd8kxApv^c8`h%cG0mm@sz}40<3KyI2-mx{vbM=^(a#{xj`j2W{IL)XxYe8>+H!VI5G~c%5q8KL)e@gH_WV%G=~A?^0P+#$ z1Sv;7hxzy<7jSSlP0V4*;Vurlp$rbLn(yl=TYlfPzX3OD=VMCevA@P=b5+IuuN~8G q8~fm3bOsx{U`iK?xee943Kr&Iowos5A#FRJ>JRK6>HUS|bHWq3KHiC`VBm}jv*zsb}K+up@ zgrL2RXqCWRgv1Xdf{?-{7b0TkED_lv$@rf)b0K$VBbmE5zxlt9`PyBg5`K*aQD7Mo z9VenBA*eF_C=p$O?*x2}$yZOthAxet*_d0~8Y=Gne7|@4@@BGp^YQ5S3w@tXi7($i zPrek(J2zg)g{hsH-?#6c{na=Abo%*dBfhxsdS$79_Tw|T_w~(qU~XNLQ|J2n?`$lc z|1emY+B*5}>gx4;Y!K`GwMELgt4TL&!%laYNT)sJ2*uW;MkrO_V$*TH>HM>0IMHUx zPB*KLQtWe`q_SsKNaRVX@lGTqVVm`6OEVv~3d&FQSvw|}je&?cF%UBKKwueohMtk9(8Te$ zAkI&Bu_W@ded76yAv=G7Q(%Z3$H-H7#-6EX=E*>v{azB-Ff1Vdl41PMCJ~X680ax1 zr4(pAm=J$FOb7IKZ&-`!|I=dAU8O1Sa`fn!1j4n0wVW0vutj;j&gnH{wAGl}mHW8P zU3#Zp3$HtI@~a(aK3HBqr18+PzMJ2EEJQhO)g`bNHrpkz=4$K+JG2_r9PeoC`LO2G z87+7L!WT0X=t9*DlOCw$u5+kOw_iZSU(Sn|t4UzYVs$O&7*Y>ueLB z&3dG>RZ*A~p)(c3XaZKGDk#S)tOylVA|+rkER{kbOPO|Rr+N!pgRR3hVZH4SlP~p> diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 47644a2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x878: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x878: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(878.440): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14ff0002 ebx=00000e1e ecx=07ef8180 edx=000005a6 esi=12830260 edi=0da8afd4 -eip=005bdfc9 esp=14fef868 ebp=14fefd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.500026498502561040000e+0017 st5= 8.500028216489479680000e+0017 -st6= 8.500029934476398320000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14fefd10 0060d6fc 00000000 14fefd78 14fefd48 image00000000_00400000+0x1bdfc9 -14fefd88 005ff93f 14fefde8 005ffbc2 14fefde0 image00000000_00400000+0x20d6fc -14fefde0 0090e28b 14fefdf4 0090e3b5 14fefe38 image00000000_00400000+0x1ff93f -14fefe38 0090efea 14fefea4 14fefea8 14fefeac image00000000_00400000+0x50e28b -14fefec0 008d05d5 14fefed4 008d06ab 14feff00 image00000000_00400000+0x50efea -14feff00 008d0991 14feff14 008d0a43 14feff2c image00000000_00400000+0x4d05d5 -14feff2c 0042c0bf 14feff40 0042c0c9 14feff5c image00000000_00400000+0x4d0991 -14feff5c 00404c22 14feffcc 0040475c 14feff70 image00000000_00400000+0x2c0bf -14feff70 7572f989 07ffbec0 7572f970 14feffdc image00000000_00400000+0x4c22 -14feff80 770b7084 07ffbec0 e0dbe6aa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14feffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14feffec 00000000 00404bf8 07ffbec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14ff0002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_description.txt deleted file mode 100644 index 47644a2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x878: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x878: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(878.440): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14ff0002 ebx=00000e1e ecx=07ef8180 edx=000005a6 esi=12830260 edi=0da8afd4 -eip=005bdfc9 esp=14fef868 ebp=14fefd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.500026498502561040000e+0017 st5= 8.500028216489479680000e+0017 -st6= 8.500029934476398320000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14ff0002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14fefd10 0060d6fc 00000000 14fefd78 14fefd48 image00000000_00400000+0x1bdfc9 -14fefd88 005ff93f 14fefde8 005ffbc2 14fefde0 image00000000_00400000+0x20d6fc -14fefde0 0090e28b 14fefdf4 0090e3b5 14fefe38 image00000000_00400000+0x1ff93f -14fefe38 0090efea 14fefea4 14fefea8 14fefeac image00000000_00400000+0x50e28b -14fefec0 008d05d5 14fefed4 008d06ab 14feff00 image00000000_00400000+0x50efea -14feff00 008d0991 14feff14 008d0a43 14feff2c image00000000_00400000+0x4d05d5 -14feff2c 0042c0bf 14feff40 0042c0c9 14feff5c image00000000_00400000+0x4d0991 -14feff5c 00404c22 14feffcc 0040475c 14feff70 image00000000_00400000+0x2c0bf -14feff70 7572f989 07ffbec0 7572f970 14feffdc image00000000_00400000+0x4c22 -14feff80 770b7084 07ffbec0 e0dbe6aa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14feffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14feffec 00000000 00404bf8 07ffbec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14ff0002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/15660/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 2f76535b14f98cf8b3cb2a40987badfc6770071c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*UT&|OyG}@8w-SpK2L=%>HUS|bHWq3KHiC`VBm}jv*zsb}K+up@ zgrL2RXqCWRgv1Xdf{?-{7b0TkED_lv$@rf)b0K$VBbmE5zxlt9`PyBg5`K*aQD7Mo z9VenBA*eF_C=p$O?*x2}$yZOthAxet*_d0~8Y=Gne7|@4@@BGp^YQ5S3w@tXi7($i zPrek(J2zg)g{hsH-?#6c{na=Abo%*dBfhxsdS$79_Tw|T_w~(qU~XNLQ|J2n?`$lc z|1emY+B*5}>gx4;Y!K`GwMELgt4TL&!%laYNT)sJ2*uW;MkrO_V$*TH>HM>0IMHUx zPB*KLQtWe`q_SsKNaRVX@lGTqVVm`6OEVv~3d&FQSvw|}je&?cF%UBKKwueohMtk9(8Te$ zAkI&Bu_W@ded76yAv=G7Q(%Z3$H-H7#-6EX=E*>v{azB-Ff1Vdl41PMCJ~X680ax1 zr4(pAm=J$FOb7IKZ&-`!|I=dAU8O1Sa`fn!1j4n0wVW0vutj;j&gnH{wAGl}mHW8P zU3#Zp3$HtI@~a(aK3HBqr18+PzMJ2EEJQhO)g`bNHrpkz=4$K+JG2_r9PeoC`LO2G z87+7L!WT0X=t9*DlOCw$u5+kOw_iZSU(Sn|t4UzYVs$O&7*Y>ueLB z&3dG>RZ*A~p)(c3XaZKGDk#S)tOylVA|+rkER{kbOPO|Rr+N!pgRR3hVZH4SlP~p> diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/SystemDebugger_description.txt deleted file mode 100644 index c0f6084..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x0000000014f70002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0e9cb80bb1d9ef5fc6dafdc5a11d7a0971699123..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GKWG#|6vp3XkL)3u*=vH5!(BmwRXo(rVw1+yf>tW&RIE}4Q|x###8gJG(14iQ zGFXY|oPpQ`1A-tHW;Gxw49sDWBgTy1yqOER13@Hn_vSZm-uK@8*5uE@xB6<2FPHY0r6I+Mhojfyn zd;8D@EcI_KQchP+I~flYJ{A>x6XwxO<*UOGl>~fx@ zl4n^+=p@Cw6G>@Uus_<+%$Y{ZGKd;GmOY*&&$4G6t#dpL4eN&k!}*d-fxJ5~+v*N< z*Ylp|oach4@|2!!7;Z!d##V+>sHc-o7Jj}>mAkmgiyZn~8kK>WG%^8`z)=KlzBe?i z>j|AtktYS5M-+NSSizo7Ud2ng=gZKdFGxBk+8GqY9}m+3 zz1ZxNbUmJ6{X$x8vkj z+w=Kg&B{I>4;|~f`u1ZXYT{O%fPG=rPQX5AV@KGb^^wi-wvRpU_xW^23tj+vgsp(n zk#EEH_{0~`bvG65!mP2KZte|v&~?@Jz7Ddv_s#d~V8h!~%a|#hui>*&TIP+= qxk_L(4r^s9C?zWF6)NhDlz=6$ObP{+GDT)fEy3QxR$*(f?)C>8xAE%$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e2b50ba..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x460: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x460: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(460.1460): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f60002 ebx=00000e1e ecx=07e48180 edx=000005a6 esi=1282f470 edi=0da8efd4 -eip=005bdfc9 esp=14f5f868 ebp=14f5fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 2.539999999999999999970e+0000 st7= 1.990007000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f5fd10 0060d6fc 00000000 14f5fd78 14f5fd48 image00000000_00400000+0x1bdfc9 -14f5fd88 005ff93f 14f5fde8 005ffbc2 14f5fde0 image00000000_00400000+0x20d6fc -14f5fde0 0090e28b 14f5fdf4 0090e3b5 14f5fe38 image00000000_00400000+0x1ff93f -14f5fe38 0090efea 14f5fea4 14f5fea8 14f5feac image00000000_00400000+0x50e28b -14f5fec0 008d05d5 14f5fed4 008d06ab 14f5ff00 image00000000_00400000+0x50efea -14f5ff00 008d0991 14f5ff14 008d0a43 14f5ff2c image00000000_00400000+0x4d05d5 -14f5ff2c 0042c0bf 14f5ff40 0042c0c9 14f5ff5c image00000000_00400000+0x4d0991 -14f5ff5c 00404c22 14f5ffcc 0040475c 14f5ff70 image00000000_00400000+0x2c0bf -14f5ff70 7572f989 07f4bec0 7572f970 14f5ffdc image00000000_00400000+0x4c22 -14f5ff80 770b7084 07f4bec0 73b65411 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f5ffdc 770b7054 ffffffff 770d62c4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f5ffec 00000000 00404bf8 07f4bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f60002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_description.txt deleted file mode 100644 index e2b50ba..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x460: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x460: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(460.1460): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f60002 ebx=00000e1e ecx=07e48180 edx=000005a6 esi=1282f470 edi=0da8efd4 -eip=005bdfc9 esp=14f5f868 ebp=14f5fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 2.539999999999999999970e+0000 st7= 1.990007000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f5fd10 0060d6fc 00000000 14f5fd78 14f5fd48 image00000000_00400000+0x1bdfc9 -14f5fd88 005ff93f 14f5fde8 005ffbc2 14f5fde0 image00000000_00400000+0x20d6fc -14f5fde0 0090e28b 14f5fdf4 0090e3b5 14f5fe38 image00000000_00400000+0x1ff93f -14f5fe38 0090efea 14f5fea4 14f5fea8 14f5feac image00000000_00400000+0x50e28b -14f5fec0 008d05d5 14f5fed4 008d06ab 14f5ff00 image00000000_00400000+0x50efea -14f5ff00 008d0991 14f5ff14 008d0a43 14f5ff2c image00000000_00400000+0x4d05d5 -14f5ff2c 0042c0bf 14f5ff40 0042c0c9 14f5ff5c image00000000_00400000+0x4d0991 -14f5ff5c 00404c22 14f5ffcc 0040475c 14f5ff70 image00000000_00400000+0x2c0bf -14f5ff70 7572f989 07f4bec0 7572f970 14f5ffdc image00000000_00400000+0x4c22 -14f5ff80 770b7084 07f4bec0 73b65411 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f5ffdc 770b7054 ffffffff 770d62c4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f5ffec 00000000 00404bf8 07f4bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f60002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/22837/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0e9cb80bb1d9ef5fc6dafdc5a11d7a0971699123..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GKWG#|6vp3XkL)3u*=vH5!(BmwRXo(rVw1+yf>tW&RIE}4Q|x###8gJG(14iQ zGFXY|oPpQ`1A-tHW;Gxw49sDWBgTy1yqOER13@Hn_vSZm-uK@8*5uE@xB6<2FPHY0r6I+Mhojfyn zd;8D@EcI_KQchP+I~flYJ{A>x6XwxO<*UOGl>~fx@ zl4n^+=p@Cw6G>@Uus_<+%$Y{ZGKd;GmOY*&&$4G6t#dpL4eN&k!}*d-fxJ5~+v*N< z*Ylp|oach4@|2!!7;Z!d##V+>sHc-o7Jj}>mAkmgiyZn~8kK>WG%^8`z)=KlzBe?i z>j|AtktYS5M-+NSSizo7Ud2ng=gZKdFGxBk+8GqY9}m+3 zz1ZxNbUmJ6{X$x8vkj z+w=Kg&B{I>4;|~f`u1ZXYT{O%fPG=rPQX5AV@KGb^^wi-wvRpU_xW^23tj+vgsp(n zk#EEH_{0~`bvG65!mP2KZte|v&~?@Jz7Ddv_s#d~V8h!~%a|#hui>*&TIP+= qxk_L(4r^s9C?zWF6)NhDlz=6$ObP{+GDT)fEy3QxR$*(f?)C>8xAE%$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/SystemDebugger_description.txt deleted file mode 100644 index f286fac..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x0000000014f80002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/25142/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 86b8d28f71f8a701857e54ecbe2dc98d77fd4877..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GKWG#|6vp4)9@)cyb0;Z81AC%G1;IdKW8o%Ph=qk{qp1WDlpskZ1ZBsI!Dt~# zBc=;N`gDR(m{Uv&i-4xHxYO8*d!VpI$oS2hcOiEmh-B{G{N~O3-kU$WOH{ybaF8f) z42cGas9Gi3KYsId@AkdE@$YBmk33&KRQR$mxiWSs|GE0~`sZ7pKFm*DTe#?>Ep zhZ~jV%DzV5;i0#`9$dcj^7qHy@u8*V z9XS4V=KPg~DJ=DGEiztLs&=wG;{7(O+WSI1O0kVQ=ACG&hE4V_)HCMedhQrR^)1JOuqZ4E%h4vstD$B6NMJc%lWijJ zAL%@i*H zJ;F}F>Bx6scYNXt=(?Lq=EJOUUDnze@}TRg-F@w4^Y5GVn_yjRI=6N@OB?uX)}t(4 vRk?kqved*dnt#?>Ep zhZ~jV%DzV5;i0#`9$dcj^7qHy@u8*V z9XS4V=KPg~DJ=DGEiztLs&=wG;{7(O+WSI1O0kVQ=ACG&hE4V_)HCMedhQrR^)1JOuqZ4E%h4vstD$B6NMJc%lWijJ zAL%@i*H zJ;F}F>Bx6scYNXt=(?Lq=EJOUUDnze@}TRg-F@w4^Y5GVn_yjRI=6N@OB?uX)}t(4 vRk?kqved*dnt_dZVVq<0BR zx#YOM`GA=G=gk;_rEoxu{pL6SSElVQQ4N0e^+cYbPc)K`o>=QPcoH-EvxMT?g#UABD1%2ly!&bPF#UbD8Xeck#E8#it4*s^uo z_8mKS?cTF@-~Iy!4|N_sa`f2o6DLodK6Ccm`3n~>UA}Vl+VvYZZ{5Cg_ul;n4^`pO z<0ns_J%91?)$2EJ-*vtJ@bS~1iu%@*hEIhPWpln?_H;|bI zt1HY&s~u${g~p>ADNW^Plw;a46a3+L&expZ;AyUxq>HF)hMAVPpjO8=#}3C%N98CTE5I}0 z$1rRxM|Qp>9LS>cSEyneS8*}MYY%CtMzFxNagf2{Em4*&oF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9446dad..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6E4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6E4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e80000 00000000`13f5e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(6e4.ba8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f50002 ebx=00000e1e ecx=07fd8180 edx=000005a6 esi=125ed720 edi=0d9fafd4 -eip=005bdfc9 esp=14f4f868 ebp=14f4fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.545062494776266000000e+0017 st5= 8.545064212763184640000e+0017 -st6= 2.539999999999999999970e+0000 st7= 5.347487600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f4fd10 0060d6fc 00000000 14f4fd78 14f4fd48 image00000000_00400000+0x1bdfc9 -14f4fd88 005ff93f 14f4fde8 005ffbc2 14f4fde0 image00000000_00400000+0x20d6fc -14f4fde0 0090e28b 14f4fdf4 0090e3b5 14f4fe38 image00000000_00400000+0x1ff93f -14f4fe38 0090efea 14f4fea4 14f4fea8 14f4feac image00000000_00400000+0x50e28b -14f4fec0 008d05d5 14f4fed4 008d06ab 14f4ff00 image00000000_00400000+0x50efea -14f4ff00 008d0991 14f4ff14 008d0a43 14f4ff2c image00000000_00400000+0x4d05d5 -14f4ff2c 0042c0bf 14f4ff40 0042c0c9 14f4ff5c image00000000_00400000+0x4d0991 -14f4ff5c 00404c22 14f4ffcc 0040475c 14f4ff70 image00000000_00400000+0x2c0bf -14f4ff70 7572f989 080dbec0 7572f970 14f4ffdc image00000000_00400000+0x4c22 -14f4ff80 770b7084 080dbec0 ac870940 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f4ffdc 770b7054 ffffffff 770d62ab 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f4ffec 00000000 00404bf8 080dbec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f50002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_description.txt deleted file mode 100644 index 9446dad..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6E4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6E4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e80000 00000000`13f5e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(6e4.ba8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f50002 ebx=00000e1e ecx=07fd8180 edx=000005a6 esi=125ed720 edi=0d9fafd4 -eip=005bdfc9 esp=14f4f868 ebp=14f4fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.545062494776266000000e+0017 st5= 8.545064212763184640000e+0017 -st6= 2.539999999999999999970e+0000 st7= 5.347487600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f4fd10 0060d6fc 00000000 14f4fd78 14f4fd48 image00000000_00400000+0x1bdfc9 -14f4fd88 005ff93f 14f4fde8 005ffbc2 14f4fde0 image00000000_00400000+0x20d6fc -14f4fde0 0090e28b 14f4fdf4 0090e3b5 14f4fe38 image00000000_00400000+0x1ff93f -14f4fe38 0090efea 14f4fea4 14f4fea8 14f4feac image00000000_00400000+0x50e28b -14f4fec0 008d05d5 14f4fed4 008d06ab 14f4ff00 image00000000_00400000+0x50efea -14f4ff00 008d0991 14f4ff14 008d0a43 14f4ff2c image00000000_00400000+0x4d05d5 -14f4ff2c 0042c0bf 14f4ff40 0042c0c9 14f4ff5c image00000000_00400000+0x4d0991 -14f4ff5c 00404c22 14f4ffcc 0040475c 14f4ff70 image00000000_00400000+0x2c0bf -14f4ff70 7572f989 080dbec0 7572f970 14f4ffdc image00000000_00400000+0x4c22 -14f4ff80 770b7084 080dbec0 ac870940 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f4ffdc 770b7054 ffffffff 770d62ab 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f4ffec 00000000 00404bf8 080dbec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f50002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/2623/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 0482af4be5ed0abb1d93f7e6f1d48945a0ce4719..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1722 zcmb`GM^76;6vyAP7VF#Cw;Yhxrzl6h!NMuuAm{X6NblLfkOWdm?+NL>_dZVVq<0BR zx#YOM`GA=G=gk;_rEoxu{pL6SSElVQQ4N0e^+cYbPc)K`o>=QPcoH-EvxMT?g#UABD1%2ly!&bPF#UbD8Xeck#E8#it4*s^uo z_8mKS?cTF@-~Iy!4|N_sa`f2o6DLodK6Ccm`3n~>UA}Vl+VvYZZ{5Cg_ul;n4^`pO z<0ns_J%91?)$2EJ-*vtJ@bS~1iu%@*hEIhPWpln?_H;|bI zt1HY&s~u${g~p>ADNW^Plw;a46a3+L&expZ;AyUxq>HF)hMAVPpjO8=#}3C%N98CTE5I}0 z$1rRxM|Qp>9LS>cSEyneS8*}MYY%CtMzFxNagf2{Em4*&oF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/SystemDebugger_description.txt deleted file mode 100644 index c0f6084..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x0000000014f70002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1f6fe99dd99b5c3cb2e9a425f65e6e01abb81100..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1702 zcmb`GF=$gk7{|ZM3w;@cOF+RP@Zw;#h*;Z2(ehG3T%?;_1nJ;Z5W3g$&QwuRu%K>& zUEEYGNb4k*iY-nB5iK}0(nXvuP7z|y|9y8UO~4MNmwflT|9#(g-`&0Uh;sN14iX8+ zh^U{4Diwmt)6b=$;b+Gd$HeE;GmRhp(*u83FMl1IEWe_qUtgX~WDokUe=_UEZ$~~p zTv$1?JoA0=+{ve}<=LaTtHT!$jlVe&{kbrG{>JR%k%J>w2696O-d_8CQ$BjJ{_fP` z`^km2cv&vDpEpdFBN|8TUD<|<#nJMrNqtX zQA#y9U-O)+`T6^KOrqV%dtEDdD!IjZit>R4sSu~A$U9L~i5jdg)eZA*z2zw4dfPD< zm=7!j7UNC!S0c;tRbe?_k!>LF7R(WMP5@JNP_c-qQDpx-038C;8;8?nS?t7`g zsxU#}CByi?O~IoSG0BBquMh4ySQ>eDB`C!e`4vmM7`hI=)u@E(Jt3H6WbkRP5 zHD_Z-*rC(NW`9Rx&pS1r&Kk)D5D&Kt;B@3Ww>v)Z1@zoa$#^%%xXv`Uhdk)HYIk4z z+5Gz!`c1GNY_?_XtjRX;*{sDTTahihEKQ~p7)`-isTTP}M}1PqeX*9X1ePkP5v6S- QbxVDKt-{t|8?fH?4=afE$p8QV diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f567119..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x910: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x910: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74b80000 00000000`74b99000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749e0000 00000000`74b7a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(910.1af0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f80002 ebx=0000021e ecx=07f08180 edx=000005a6 esi=1274ac40 edi=0da8afd4 -eip=005bdfc9 esp=14f7f868 ebp=14f7fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.522544496639589040000e+0017 st5= 8.522546214626507680000e+0017 -st6= 8.522547932613426320000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f7fd10 0060d6fc 00000000 14f7fd78 14f7fd48 image00000000_00400000+0x1bdfc9 -14f7fd88 005ff93f 14f7fde8 005ffbc2 14f7fde0 image00000000_00400000+0x20d6fc -14f7fde0 0090e28b 14f7fdf4 0090e3b5 14f7fe38 image00000000_00400000+0x1ff93f -14f7fe38 0090efea 14f7fea4 14f7fea8 14f7feac image00000000_00400000+0x50e28b -14f7fec0 008d05d5 14f7fed4 008d06ab 14f7ff00 image00000000_00400000+0x50efea -14f7ff00 008d0991 14f7ff14 008d0a43 14f7ff2c image00000000_00400000+0x4d05d5 -14f7ff2c 0042c0bf 14f7ff40 0042c0c9 14f7ff5c image00000000_00400000+0x4d0991 -14f7ff5c 00404c22 14f7ffcc 0040475c 14f7ff70 image00000000_00400000+0x2c0bf -14f7ff70 7572f989 0800bec0 7572f970 14f7ffdc image00000000_00400000+0x4c22 -14f7ff80 770b7084 0800bec0 5d35c9c7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f7ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f7ffec 00000000 00404bf8 0800bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f80002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_description.txt deleted file mode 100644 index f567119..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,192 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x910: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x910: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74b80000 00000000`74b99000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749e0000 00000000`74b7a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(910.1af0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f80002 ebx=0000021e ecx=07f08180 edx=000005a6 esi=1274ac40 edi=0da8afd4 -eip=005bdfc9 esp=14f7f868 ebp=14f7fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.522544496639589040000e+0017 st5= 8.522546214626507680000e+0017 -st6= 8.522547932613426320000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f80002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f7fd10 0060d6fc 00000000 14f7fd78 14f7fd48 image00000000_00400000+0x1bdfc9 -14f7fd88 005ff93f 14f7fde8 005ffbc2 14f7fde0 image00000000_00400000+0x20d6fc -14f7fde0 0090e28b 14f7fdf4 0090e3b5 14f7fe38 image00000000_00400000+0x1ff93f -14f7fe38 0090efea 14f7fea4 14f7fea8 14f7feac image00000000_00400000+0x50e28b -14f7fec0 008d05d5 14f7fed4 008d06ab 14f7ff00 image00000000_00400000+0x50efea -14f7ff00 008d0991 14f7ff14 008d0a43 14f7ff2c image00000000_00400000+0x4d05d5 -14f7ff2c 0042c0bf 14f7ff40 0042c0c9 14f7ff5c image00000000_00400000+0x4d0991 -14f7ff5c 00404c22 14f7ffcc 0040475c 14f7ff70 image00000000_00400000+0x2c0bf -14f7ff70 7572f989 0800bec0 7572f970 14f7ffdc image00000000_00400000+0x4c22 -14f7ff80 770b7084 0800bec0 5d35c9c7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f7ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f7ffec 00000000 00404bf8 0800bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f80002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/26614/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1f6fe99dd99b5c3cb2e9a425f65e6e01abb81100..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1702 zcmb`GF=$gk7{|ZM3w;@cOF+RP@Zw;#h*;Z2(ehG3T%?;_1nJ;Z5W3g$&QwuRu%K>& zUEEYGNb4k*iY-nB5iK}0(nXvuP7z|y|9y8UO~4MNmwflT|9#(g-`&0Uh;sN14iX8+ zh^U{4Diwmt)6b=$;b+Gd$HeE;GmRhp(*u83FMl1IEWe_qUtgX~WDokUe=_UEZ$~~p zTv$1?JoA0=+{ve}<=LaTtHT!$jlVe&{kbrG{>JR%k%J>w2696O-d_8CQ$BjJ{_fP` z`^km2cv&vDpEpdFBN|8TUD<|<#nJMrNqtX zQA#y9U-O)+`T6^KOrqV%dtEDdD!IjZit>R4sSu~A$U9L~i5jdg)eZA*z2zw4dfPD< zm=7!j7UNC!S0c;tRbe?_k!>LF7R(WMP5@JNP_c-qQDpx-038C;8;8?nS?t7`g zsxU#}CByi?O~IoSG0BBquMh4ySQ>eDB`C!e`4vmM7`hI=)u@E(Jt3H6WbkRP5 zHD_Z-*rC(NW`9Rx&pS1r&Kk)D5D&Kt;B@3Ww>v)Z1@zoa$#^%%xXv`Uhdk)HYIk4z z+5Gz!`c1GNY_?_XtjRX;*{sDTTahihEKQ~p7)`-isTTP}M}1PqeX*9X1ePkP5v6S- QbxVDKt-{t|8?fH?4=afE$p8QV diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/SystemDebugger_description.txt deleted file mode 100644 index e7066c7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x0000000014fc0002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 622f62651a22f340deb99de8ff5a4c05fe3a815b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1843 zcmd^5Qc}^g{Y3JE`e-Mi9Y;~ z4VPnZ{PQj6d_MTvh>fLk(H^te6g{yGMJvN4dG^Fh>LPfzExg?p|4j`i+PAvs?V>Qa zXQ>NRD;F*xFHj>p3Dj15(I0n7_be)?8Ky~#PT#?+-;<7p`AQ+;x(r#R_q2Q3F1 zmM=6OI@T}q^N)pSz^#@9(T=lAf@rD6j<7@4sFwJovFDdsPM4FD1(1(0CrCN!In2i= zxqy?qS*8+}9PZL^7|P(}s`F9f4edNbg7RXMpv-0 ji>CImn!9M{HaeJxb-_hs#k}u$s$Z}_uzT18?6my@*5>YE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index afaca85..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xAF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xAF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74a1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a20000 00000000`74bba000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e90000 00000000`13f6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(af0.364): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f90002 ebx=0000061e ecx=07f08180 edx=000005a6 esi=12824370 edi=0da6afd4 -eip=005bdfc9 esp=14f8f868 ebp=14f8fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.483137999899839760000e+0017 st5= 8.483139717886758400000e+0017 -st6= 2.539999999999999999970e+0000 st7= 1.839593400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f8fd10 0060d6fc 00000000 14f8fd78 14f8fd48 image00000000_00400000+0x1bdfc9 -14f8fd88 005ff93f 14f8fde8 005ffbc2 14f8fde0 image00000000_00400000+0x20d6fc -14f8fde0 0090e28b 14f8fdf4 0090e3b5 14f8fe38 image00000000_00400000+0x1ff93f -14f8fe38 0090efea 14f8fea4 14f8fea8 14f8feac image00000000_00400000+0x50e28b -14f8fec0 008d05d5 14f8fed4 008d06ab 14f8ff00 image00000000_00400000+0x50efea -14f8ff00 008d0991 14f8ff14 008d0a43 14f8ff2c image00000000_00400000+0x4d05d5 -14f8ff2c 0042c0bf 14f8ff40 0042c0c9 14f8ff5c image00000000_00400000+0x4d0991 -14f8ff5c 00404c22 14f8ffcc 0040475c 14f8ff70 image00000000_00400000+0x2c0bf -14f8ff70 7572f989 0800bec0 7572f970 14f8ffdc image00000000_00400000+0x4c22 -14f8ff80 770b7084 0800bec0 3c978e4b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f8ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f8ffec 00000000 00404bf8 0800bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f90002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_description.txt deleted file mode 100644 index afaca85..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xAF0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xAF0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74a1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a20000 00000000`74bba000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e90000 00000000`13f6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(af0.364): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f90002 ebx=0000061e ecx=07f08180 edx=000005a6 esi=12824370 edi=0da6afd4 -eip=005bdfc9 esp=14f8f868 ebp=14f8fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.483137999899839760000e+0017 st5= 8.483139717886758400000e+0017 -st6= 2.539999999999999999970e+0000 st7= 1.839593400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f90002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f8fd10 0060d6fc 00000000 14f8fd78 14f8fd48 image00000000_00400000+0x1bdfc9 -14f8fd88 005ff93f 14f8fde8 005ffbc2 14f8fde0 image00000000_00400000+0x20d6fc -14f8fde0 0090e28b 14f8fdf4 0090e3b5 14f8fe38 image00000000_00400000+0x1ff93f -14f8fe38 0090efea 14f8fea4 14f8fea8 14f8feac image00000000_00400000+0x50e28b -14f8fec0 008d05d5 14f8fed4 008d06ab 14f8ff00 image00000000_00400000+0x50efea -14f8ff00 008d0991 14f8ff14 008d0a43 14f8ff2c image00000000_00400000+0x4d05d5 -14f8ff2c 0042c0bf 14f8ff40 0042c0c9 14f8ff5c image00000000_00400000+0x4d0991 -14f8ff5c 00404c22 14f8ffcc 0040475c 14f8ff70 image00000000_00400000+0x2c0bf -14f8ff70 7572f989 0800bec0 7572f970 14f8ffdc image00000000_00400000+0x4c22 -14f8ff80 770b7084 0800bec0 3c978e4b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f8ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f8ffec 00000000 00404bf8 0800bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f90002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/34479/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 622f62651a22f340deb99de8ff5a4c05fe3a815b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1843 zcmd^5Qc}^g{Y3JE`e-Mi9Y;~ z4VPnZ{PQj6d_MTvh>fLk(H^te6g{yGMJvN4dG^Fh>LPfzExg?p|4j`i+PAvs?V>Qa zXQ>NRD;F*xFHj>p3Dj15(I0n7_be)?8Ky~#PT#?+-;<7p`AQ+;x(r#R_q2Q3F1 zmM=6OI@T}q^N)pSz^#@9(T=lAf@rD6j<7@4sFwJovFDdsPM4FD1(1(0CrCN!In2i= zxqy?qS*8+}9PZL^7|P(}s`F9f4edNbg7RXMpv-0 ji>CImn!9M{HaeJxb-_hs#k}u$s$Z}_uzT18?6my@*5>YE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/SystemDebugger_description.txt deleted file mode 100644 index 3f00454..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000150d0002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/41221/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index ccd7bbd27974fe92e3efadd1a3e2b8ee2bdd61c0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4l@d%w3lvu-hc0GnIv4_9BRljRs<)#28epj0g%M?&M+;jSx~> zrAXr^SeQ!4oPt)8M$j$?L9|eqi$#tQGXCeyT*w`0A(^{3zxmJmn2+5h%HcOSNEBFx zMEyjRBm|YGA337Ykmk?r9(#W3#Z}RD=kSxQOP!mqo~@oZx_$lS$mWrap|^*Uvu9Q> zbZ>q8IyS!0e{X)J=hN)?$oaXxD?#>CD{lT#9+PM@ zd8aD{M=5qWPg35qASB`>6?rF;lCZ}5bX7CwstwB^s_t0kJoBCf&tkN}{vIoTUBb#Gu9c!r*lr_jXy zxIrAB?qEs8XS>Apj3HY;z$q|9jAP^}JY&z)GxKC1ZvZ6|SQ!?Of5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wrT=NMY0c79Z<%P*F$uVfduur@Okk7hr4ol1jnP)4v`hDX zU3cNld@a0g`pK`hr}<#@(msucj`dxA`>_z!ajPzXwXo4HfHh}hN7$j&$Yy_2W6%3F zpU!B(3m_hD8^Gzvw{ClU;tOcIo04{Jj zrAXr^SeQ!4oPt)8M$j$?L9|eqi$#tQGXCeyT*w`0A(^{3zxmJmn2+5h%HcOSNEBFx zMEyjRBm|YGA337Ykmk?r9(#W3#Z}RD=kSxQOP!mqo~@oZx_$lS$mWrap|^*Uvu9Q> zbZ>q8IyS!0e{X)J=hN)?$oaXxD?#>CD{lT#9+PM@ zd8aD{M=5qWPg35qASB`>6?rF;lCZ}5bX7CwstwB^s_t0kJoBCf&tkN}{vIoTUBb#Gu9c!r*lr_jXy zxIrAB?qEs8XS>Apj3HY;z$q|9jAP^}JY&z)GxKC1ZvZ6|SQ!?Of5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wrT=NMY0c79Z<%P*F$uVfduur@Okk7hr4ol1jnP)4v`hDX zU3cNld@a0g`pK`hr}<#@(msucj`dxA`>_z!ajPzXwXo4HfHh}hN7$j&$Yy_2W6%3F zpU!B(3m_hD8^Gzvw{ClU;tOcIo04{JjZP3!)vh>t3v^x%<`Yy%B7^Jk+-+RC;|+PQ2h{e$~!b z3k&z2jPmHlcwzsk=9c27Ra@_m^jxcJIItz&`1|AbZ}+@V(fs&mPSxqayZk2&&o6wc zXgWT)>GQ*a;_g4*t?_*whu40Oxx=Nqk5oL^JkJ_Ha&Q^4KdRUjRsQw>I$0DYrA29?CO;gj-BtFQvodTKfPT-Q5?@fZ7k8=?78+ZyFVveGvNi=Ou zSJTs!z&i2qJ7{HS2I!Xz$Ny{;Bb0&!_BaH_7*cp}Li_`6NCJDYH(U$Cb7?l8S>;1= zh9g7UKrkGdT1#od4N;T~hh=(*b6;qjT9xa#pH%7TdY@>Wj)PupO3Q;K!_zcAbX;G} zFFqE4B;Kk@keY~Wl_0gO#vS1fg~ng`QB5K;zPvun2iR<&{8fl j0yZZP3!)vh>t3v^x%<`Yy%B7^Jk+-+RC;|+PQ2h{e$~!b z3k&z2jPmHlcwzsk=9c27Ra@_m^jxcJIItz&`1|AbZ}+@V(fs&mPSxqayZk2&&o6wc zXgWT)>GQ*a;_g4*t?_*whu40Oxx=Nqk5oL^JkJ_Ha&Q^4KdRUjRsQw>I$0DYrA29?CO;gj-BtFQvodTKfPT-Q5?@fZ7k8=?78+ZyFVveGvNi=Ou zSJTs!z&i2qJ7{HS2I!Xz$Ny{;Bb0&!_BaH_7*cp}Li_`6NCJDYH(U$Cb7?l8S>;1= zh9g7UKrkGdT1#od4N;T~hh=(*b6;qjT9xa#pH%7TdY@>Wj)PupO3Q;K!_zcAbX;G} zFFqE4B;Kk@keY~Wl_0gO#vS1fg~ng`QB5K;zPvun2iR<&{8fl j0yZ1z!zQMrBZ{SfeXT_YIW&r^s=B$`=&bb#9%$T#X ziUD)4aaE*!9hPFZN)8mg`})`a7dp)hKmdPvc>tEA4bU9`qESEfyj zQ+xhGUH!#Nm#=o&0Dwc+`V`I!NW(7pFDlmn0Wr8>E)}}Z<^n}d;j6%r_Vh3 z`zwR!#8wv6Iu_ETq*c{X2pWb6#XJgOwG#?aJE3&XI9Du>rz9;W-Xa+= z3>t0u$b)Ht;+H*ucS>FIh-j84bFtk$O0!IF`78Xr2YujiK^3qTTY zRVOG-WVTLFT2yWL>qqudZzReKUO%GH$FSB}57L8}YMgaJXMbQlf@%pSfsIgqHG{6?B=MLzt7} bFoNcyd6Y2BVj|(mscO;c(HhVi(X!h=V|p{T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index cfd49ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC54: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC54: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(c54.8ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f60002 ebx=00000e1e ecx=07f18180 edx=000005a6 esi=12838ad0 edi=0da96fd4 -eip=005bdfc9 esp=14f5f868 ebp=14f5fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 2.539999999999999999970e+0000 st7= 5.347487600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f5fd10 0060d6fc 00000000 14f5fd78 14f5fd48 image00000000_00400000+0x1bdfc9 -14f5fd88 005ff93f 14f5fde8 005ffbc2 14f5fde0 image00000000_00400000+0x20d6fc -14f5fde0 0090e28b 14f5fdf4 0090e3b5 14f5fe38 image00000000_00400000+0x1ff93f -14f5fe38 0090efea 14f5fea4 14f5fea8 14f5feac image00000000_00400000+0x50e28b -14f5fec0 008d05d5 14f5fed4 008d06ab 14f5ff00 image00000000_00400000+0x50efea -14f5ff00 008d0991 14f5ff14 008d0a43 14f5ff2c image00000000_00400000+0x4d05d5 -14f5ff2c 0042c0bf 14f5ff40 0042c0c9 14f5ff5c image00000000_00400000+0x4d0991 -14f5ff5c 00404c22 14f5ffcc 0040475c 14f5ff70 image00000000_00400000+0x2c0bf -14f5ff70 7572f989 0801bec0 7572f970 14f5ffdc image00000000_00400000+0x4c22 -14f5ff80 770b7084 0801bec0 92b9af7f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f5ffdc 770b7054 ffffffff 770d62a4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f5ffec 00000000 00404bf8 0801bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f60002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_description.txt deleted file mode 100644 index cfd49ce..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC54: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC54: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(c54.8ec): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f60002 ebx=00000e1e ecx=07f18180 edx=000005a6 esi=12838ad0 edi=0da96fd4 -eip=005bdfc9 esp=14f5f868 ebp=14f5fd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 2.539999999999999999970e+0000 st7= 5.347487600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f60002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f5fd10 0060d6fc 00000000 14f5fd78 14f5fd48 image00000000_00400000+0x1bdfc9 -14f5fd88 005ff93f 14f5fde8 005ffbc2 14f5fde0 image00000000_00400000+0x20d6fc -14f5fde0 0090e28b 14f5fdf4 0090e3b5 14f5fe38 image00000000_00400000+0x1ff93f -14f5fe38 0090efea 14f5fea4 14f5fea8 14f5feac image00000000_00400000+0x50e28b -14f5fec0 008d05d5 14f5fed4 008d06ab 14f5ff00 image00000000_00400000+0x50efea -14f5ff00 008d0991 14f5ff14 008d0a43 14f5ff2c image00000000_00400000+0x4d05d5 -14f5ff2c 0042c0bf 14f5ff40 0042c0c9 14f5ff5c image00000000_00400000+0x4d0991 -14f5ff5c 00404c22 14f5ffcc 0040475c 14f5ff70 image00000000_00400000+0x2c0bf -14f5ff70 7572f989 0801bec0 7572f970 14f5ffdc image00000000_00400000+0x4c22 -14f5ff80 770b7084 0801bec0 92b9af7f 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f5ffdc 770b7054 ffffffff 770d62a4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f5ffec 00000000 00404bf8 0801bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f60002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/59510/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index fec656543340db0afbd68114a7a6e2236bcf9cc2..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1760 zcmb`GM^h9*6vyA}Y%zQ5-J1uhW>1z!zQMrBZ{SfeXT_YIW&r^s=B$`=&bb#9%$T#X ziUD)4aaE*!9hPFZN)8mg`})`a7dp)hKmdPvc>tEA4bU9`qESEfyj zQ+xhGUH!#Nm#=o&0Dwc+`V`I!NW(7pFDlmn0Wr8>E)}}Z<^n}d;j6%r_Vh3 z`zwR!#8wv6Iu_ETq*c{X2pWb6#XJgOwG#?aJE3&XI9Du>rz9;W-Xa+= z3>t0u$b)Ht;+H*ucS>FIh-j84bFtk$O0!IF`78Xr2YujiK^3qTTY zRVOG-WVTLFT2yWL>qqudZzReKUO%GH$FSB}57L8}YMgaJXMbQlf@%pSfsIgqHG{6?B=MLzt7} bFoNcyd6Y2BVj|(mscO;c(HhVi(X!h=V|p{T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/SystemDebugger_description.txt deleted file mode 100644 index dff9067..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000150c0002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 389ebadd92623dbb776ec0498c1bbad9f08c4713..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9+|V6yA%>6uv>{S7Uy5ENtMPepl8M{b@1$R1;o1HlStd2>v^?KBuMx@cloM)&mY-ocxLrva^p*-!gUg|pLMt2aH zsP0i2{yg;@zmRy&H{|=sdkhP$6G2aePlcPp9ibH(;Rv1^(YbL@pcLx4 zY@B_WAJLZ4Z_9p(_|kY=fQ9iU1G6MjCvko%^&D4Aqb4P!g!70}p~4E`bQ(JdY|dzA zdsZ=5XH%w|O#%~PDpW%4i2d1sIKDW-l87&liR*b!p?-o>V2GGVCDg)9SO`lY19?|a zGKVd|5|Wn;7M(LO?epkitQNGinM}CskPBb5^YMs(}=vY724<8Frg5~8e diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index d7c4036..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(1f98.1708): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=150d0002 ebx=0000061e ecx=07ea8180 edx=000005a6 esi=128382e0 edi=0dabafd4 -eip=005bdfc9 esp=150cf868 ebp=150cfd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.485952749666946320000e+0017 st5= 8.485954467653864960000e+0017 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -150cfd10 0060d6fc 00000000 150cfd78 150cfd48 image00000000_00400000+0x1bdfc9 -150cfd88 005ff93f 150cfde8 005ffbc2 150cfde0 image00000000_00400000+0x20d6fc -150cfde0 0090e28b 150cfdf4 0090e3b5 150cfe38 image00000000_00400000+0x1ff93f -150cfe38 0090efea 150cfea4 150cfea8 150cfeac image00000000_00400000+0x50e28b -150cfec0 008d05d5 150cfed4 008d06ab 150cff00 image00000000_00400000+0x50efea -150cff00 008d0991 150cff14 008d0a43 150cff2c image00000000_00400000+0x4d05d5 -150cff2c 0042c0bf 150cff40 0042c0c9 150cff5c image00000000_00400000+0x4d0991 -150cff5c 00404c22 150cffcc 0040475c 150cff70 image00000000_00400000+0x2c0bf -150cff70 7572f989 07fabec0 7572f970 150cffdc image00000000_00400000+0x4c22 -150cff80 770b7084 07fabec0 29eb16d1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -150cffdc 770b7054 ffffffff 770d62c2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -150cffec 00000000 00404bf8 07fabec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x150d0002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_description.txt deleted file mode 100644 index d7c4036..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(1f98.1708): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=150d0002 ebx=0000061e ecx=07ea8180 edx=000005a6 esi=128382e0 edi=0dabafd4 -eip=005bdfc9 esp=150cf868 ebp=150cfd10 iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.485952749666946320000e+0017 st5= 8.485954467653864960000e+0017 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:150d0002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -150cfd10 0060d6fc 00000000 150cfd78 150cfd48 image00000000_00400000+0x1bdfc9 -150cfd88 005ff93f 150cfde8 005ffbc2 150cfde0 image00000000_00400000+0x20d6fc -150cfde0 0090e28b 150cfdf4 0090e3b5 150cfe38 image00000000_00400000+0x1ff93f -150cfe38 0090efea 150cfea4 150cfea8 150cfeac image00000000_00400000+0x50e28b -150cfec0 008d05d5 150cfed4 008d06ab 150cff00 image00000000_00400000+0x50efea -150cff00 008d0991 150cff14 008d0a43 150cff2c image00000000_00400000+0x4d05d5 -150cff2c 0042c0bf 150cff40 0042c0c9 150cff5c image00000000_00400000+0x4d0991 -150cff5c 00404c22 150cffcc 0040475c 150cff70 image00000000_00400000+0x2c0bf -150cff70 7572f989 07fabec0 7572f970 150cffdc image00000000_00400000+0x4c22 -150cff80 770b7084 07fabec0 29eb16d1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -150cffdc 770b7054 ffffffff 770d62c2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -150cffec 00000000 00404bf8 07fabec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x150d0002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x05151902 -STACK_DEPTH:12 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x50e28b -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x05151902) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x05151902/66995/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 389ebadd92623dbb776ec0498c1bbad9f08c4713..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9+|V6yA%>6uv>{S7Uy5ENtMPepl8M{b@1$R1;o1HlStd2>v^?KBuMx@cloM)&mY-ocxLrva^p*-!gUg|pLMt2aH zsP0i2{yg;@zmRy&H{|=sdkhP$6G2aePlcPp9ibH(;Rv1^(YbL@pcLx4 zY@B_WAJLZ4Z_9p(_|kY=fQ9iU1G6MjCvko%^&D4Aqb4P!g!70}p~4E`bQ(JdY|dzA zdsZ=5XH%w|O#%~PDpW%4i2d1sIKDW-l87&liR*b!p?-o>V2GGVCDg)9SO`lY19?|a zGKVd|5|Wn;7M(LO?epkitQNGinM}CskPBb5^YMs(}=vY724<8Frg5~8e diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c45ab50b5450e1c56405aaf46616152ae3acb98b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9;EC9a@AC*sU}c;t8S_!sf8JCJ;pkA_x|yixNR>6n1inUtPdI z;L=z`R1gI1oQt4^MG6ZMgd9l|MPyDv77Q7md1o%<4z!TW-8;W|=KYwD-6bmFSE~^P zmLbtWB1%(&ifFS$G!>5gUTfSa8uiYB^;`9sg~fC2UmvGuC!Y;Zer{ZTGPe>y+3TRi{jWOHIecrkj5dVG`|5 z=>&FQSs510+Gxz29Sxa!G_VXjL(kY#Xkvd- z5XWa*SQ7F1HgP>;$kq>V3JekB7<&rO#542EJsHRwL&+324hzV?WElUoNqD3r26_xh zDFxaY6vQ77(*eER8`h%g|Fp#PXKCv8O$_LS1l*OKwVW0vuu0u&mBTB>Xsc1$rF*~b zy6|4U7GC%K>`b1q|FxRXaDw*iLtMhCCR!YI|RM+1&f)`wg(|ZN4yOUgvB0 zY*u5PzZHd95js~1jAmg)rh+I@;gC@AP^<(jfn`!CL@CqBY^gV}cd%918f>ur0STG( AXaE2J diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index ff2651e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x520: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x520: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(520.8c8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f67b10 edx=00003879 esi=ffdd0010 edi=0f7b2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.766379799681844320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.665607400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.19333e-006 -1.22451e+026 -1.11185e+027 -1.41367e+024 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08048130 07fc5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028a000 52d19e85 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_description.txt deleted file mode 100644 index ff2651e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x520: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x520: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(520.8c8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f67b10 edx=00003879 esi=ffdd0010 edi=0f7b2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.766379799681844320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.665607400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.19333e-006 -1.22451e+026 -1.11185e+027 -1.41367e+024 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08048130 07fc5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028a000 52d19e85 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/10563/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c45ab50b5450e1c56405aaf46616152ae3acb98b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9;EC9a@AC*sU}c;t8S_!sf8JCJ;pkA_x|yixNR>6n1inUtPdI z;L=z`R1gI1oQt4^MG6ZMgd9l|MPyDv77Q7md1o%<4z!TW-8;W|=KYwD-6bmFSE~^P zmLbtWB1%(&ifFS$G!>5gUTfSa8uiYB^;`9sg~fC2UmvGuC!Y;Zer{ZTGPe>y+3TRi{jWOHIecrkj5dVG`|5 z=>&FQSs510+Gxz29Sxa!G_VXjL(kY#Xkvd- z5XWa*SQ7F1HgP>;$kq>V3JekB7<&rO#542EJsHRwL&+324hzV?WElUoNqD3r26_xh zDFxaY6vQ77(*eER8`h%g|Fp#PXKCv8O$_LS1l*OKwVW0vuu0u&mBTB>Xsc1$rF*~b zy6|4U7GC%K>`b1q|FxRXaDw*iLtMhCCR!YI|RM+1&f)`wg(|ZN4yOUgvB0 zY*u5PzZHd95js~1jAmg)rh+I@;gC@AP^<(jfn`!CL@CqBY^gV}cd%918f>ur0STG( AXaE2J diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9cb0572c84018166efd4299f09295d1c6218e67f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 183 zcmZ|HK?;LF3t3C5LcZ!lNt4W{75qC&g$2nt?cma~gr=%NVz@CYA5fCs1V zf$H22=m4}W*qZy;e|DDfXDDVvPOIPI;&b{)u}N~$KzLD!T0MihTGZEGg#yL5D6iDE Nc)ptHOAD=Z%>h;hU5)?% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 80de83d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xE6C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xE6C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(e6c.1004): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07ea7b10 edx=00003879 esi=ffdd0010 edi=0f7d0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.26088e+019 -1.86625e+026 -1.56263e+016 1.36428e+013 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00348000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00348000 2d360fbd 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00348000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_description.txt deleted file mode 100644 index 80de83d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xE6C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xE6C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(e6c.1004): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07ea7b10 edx=00003879 esi=ffdd0010 edi=0f7d0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.26088e+019 -1.86625e+026 -1.56263e+016 1.36428e+013 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00348000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00348000 2d360fbd 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00348000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/11655/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9cb0572c84018166efd4299f09295d1c6218e67f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 183 zcmZ|HK?;LF3t3C5LcZ!lNt4W{75qC&g$2nt?cma~gr=%NVz@CYA5fCs1V zf$H22=m4}W*qZy;e|DDfXDDVvPOIPI;&b{)u}N~$KzLD!T0MihTGZEGg#yL5D6iDE Nc)ptHOAD=Z%>h;hU5)?% diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 01101a935e9b267b7f69d81d42c86293564a465e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1740 zcmd6mJ#O1D6vrPe!SqIX>tKMIij2O2oT)eH+#}=$Vx0zUwj3dc=mF>!XvZ8O2C{Ud zHVr}8|9gBgVgt<(WGL;&AOG)zUy_Js_^sDOhFKB4C!)3`sG9!Fh(5x11|L$s|5uGZ zVOIvfms-yGrSR)wHkP_Yd(382^u#t4tqkYn*%QyHi{S0H@Mc^5*EO7IS9Q_bMPYDH zQWvOJE?hufphk8QsIB&*KkSn5>uzKkyL)8Ll(ll9Z0v)?+bT=`#$>4vl=rCn4CA&f zpfAdA${XdaGAe^|0-k|9hBxEbmHCoC=3f01V_)L2-}iV8`jBG>b|D83dQ<33@z1L) zd9$i$vPv>iM^q^-R^Zb)?10(4bHeq?3NKcbFs%&JC@ZB^x9n8bJ;3BeO-gi9JPuOqR9qb-<+WrDgpeZ2$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2d71e90..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1954: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1954: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1954.398): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=000fed2d ecx=07dd7b10 edx=00003879 esi=ffb30010 edi=0fc3cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.696011055487796320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.17523e+025 6.63831e+012 -1.59176e+028 -1.11438e-037 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07eb8130 07e35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00220000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00220000 ae098657 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00220000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_description.txt deleted file mode 100644 index 2d71e90..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1954: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1954: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1954.398): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=000fed2d ecx=07dd7b10 edx=00003879 esi=ffb30010 edi=0fc3cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.696011055487796320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.17523e+025 6.63831e+012 -1.59176e+028 -1.11438e-037 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07eb8130 07e35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00220000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00220000 ae098657 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00220000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/12642/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 01101a935e9b267b7f69d81d42c86293564a465e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1740 zcmd6mJ#O1D6vrPe!SqIX>tKMIij2O2oT)eH+#}=$Vx0zUwj3dc=mF>!XvZ8O2C{Ud zHVr}8|9gBgVgt<(WGL;&AOG)zUy_Js_^sDOhFKB4C!)3`sG9!Fh(5x11|L$s|5uGZ zVOIvfms-yGrSR)wHkP_Yd(382^u#t4tqkYn*%QyHi{S0H@Mc^5*EO7IS9Q_bMPYDH zQWvOJE?hufphk8QsIB&*KkSn5>uzKkyL)8Ll(ll9Z0v)?+bT=`#$>4vl=rCn4CA&f zpfAdA${XdaGAe^|0-k|9hBxEbmHCoC=3f01V_)L2-}iV8`jBG>b|D83dQ<33@z1L) zd9$i$vPv>iM^q^-R^Zb)?10(4bHeq?3NKcbFs%&JC@ZB^x9n8bJ;3BeO-gi9JPuOqR9qb-<+WrDgpeZ2$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b94611301cde5b12910b98eee22415cf26685e06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9#8BT_L78-Bp7M7a{+_UPM#^f`u4NVJy^6j31rCju$^6MKEZQ z#uVBlHo;bKPC*+XAlQhIBe9Sax>pFR#2cS^XYRm~$9(NBQ31b^5hBmf zC)!U$aZFGFeJv23hVLMJNTGAV%*3}RpD&C}4pk52zb-93e{ptbUwU%y*mX_7C$@4$fZtPfW|E?UrqCS3_IQnzt{aAJH<%c_OZd@Ba zRSmA+tzMj3TRL%gcz$j%IkSj${%WDJu43HFQqAfPV`;Uc9Hq#3)F>qiT&P>l)~)|R z04Lg=!0LL@Qi?X$NeUc`LLyI6iFYC?_M5DaH8SSCMsDbZjZMRXW8heHEQRYFkA2Pg zHBWQBB;7>aEtqL_3%c!i-*MJ)!BII%#||_%qHSZIU@FX)MZIh~e}^iyag{bxK8IZ_FkQx%_?RXjt_(RU0T zMMfNta^n1C6H6jLZ4=L@HJSN6oB~7SScZ*{CQ%45s%=Z$*YA}!7ONQ}3n?yuP zVxY&6lv1GaU_$)yFfGuVy1(1)hN#JtSo3J@P@dfnVO*yk+&M{rq>JE9(ch%;;wzJvy&GqYG!`XDM z^>mi5;ad diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index bfccb48..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x674: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x674: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(674.13b8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07f87b10 edx=00003879 esi=cfe30010 edi=0fcc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.772009299217368160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.430293700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.97674e+017 2.50519e+036 -2.12472e-028 -3.6443e+028 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08068130 07fe5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d8000 63339234 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629b 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_description.txt deleted file mode 100644 index bfccb48..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x674: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x674: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(674.13b8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07f87b10 edx=00003879 esi=cfe30010 edi=0fcc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.772009299217368160000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.430293700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.97674e+017 2.50519e+036 -2.12472e-028 -3.6443e+028 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08068130 07fe5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d8000 63339234 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629b 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/14412/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b94611301cde5b12910b98eee22415cf26685e06..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edU9#8BT_L78-Bp7M7a{+_UPM#^f`u4NVJy^6j31rCju$^6MKEZQ z#uVBlHo;bKPC*+XAlQhIBe9Sax>pFR#2cS^XYRm~$9(NBQ31b^5hBmf zC)!U$aZFGFeJv23hVLMJNTGAV%*3}RpD&C}4pk52zb-93e{ptbUwU%y*mX_7C$@4$fZtPfW|E?UrqCS3_IQnzt{aAJH<%c_OZd@Ba zRSmA+tzMj3TRL%gcz$j%IkSj${%WDJu43HFQqAfPV`;Uc9Hq#3)F>qiT&P>l)~)|R z04Lg=!0LL@Qi?X$NeUc`LLyI6iFYC?_M5DaH8SSCMsDbZjZMRXW8heHEQRYFkA2Pg zHBWQBB;7>aEtqL_3%c!i-*MJ)!BII%#||_%qHSZIU@FX)MZIh~e}^iyag{bxK8IZ_FkQx%_?RXjt_(RU0T zMMfNta^n1C6H6jLZ4=L@HJSN6oB~7SScZ*{CQ%45s%=Z$*YA}!7ONQ}3n?yuP zVxY&6lv1GaU_$)yFfGuVy1(1)hN#JtSo3J@P@dfnVO*yk+&M{rq>JE9(ch%;;wzJvy&GqYG!`XDM z^>mi5;ad diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16249/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 77b8db574fee60cfa30d4fed8d2ac6e3343e5150..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=B)X?1@6ez^;vmSOnq+*z6^RCt7G_Cx}fdH4rQWVaJPNQV0PB zK|~^=f?B0h49ux$VG)~zG@64ng3TNjE*dia=gnNm9f%;AyEni2&-<8<-6bmFH#9^P zScXLVh$u}7s!ZQX)M(T{H+CJK{}B(LJT>uq?ab{jM-NWy9NqSC`_k28qxT*kIC1uT zb;s1Bi_^=^Vm=&LdVQ^UvNwEw{PIZi>DMD~hA#!rmVb?XpIfZF7(4Xf!s*h__g6mM zU%Yeo<=pN)G=6UB6;}L5i zbhGLx#X9FnDtlIiM4Y6UcOoeb+pHTc&AinrEQ6@EW?AwqdsaQ;XqEkGXgIze7|xeu z+Q_>Ov#sesH$102XFO*;m8bOV!f+$nG8P$1p`K29+4l2Ys@(Zi-p&!9OQSL{lSU?B z5;%&$%~wLhai!2{iaaUcJfhGu!V30u0z0sb2Ly9yFk+4mhD<#eSO%VjyXmhKO;DJcVcCnR(`(4CL)c$rM(H1>|2cjQ`psJW>(^J%*%| z0__Y6;*W>vfZpy6Yf#m>tY8#pl)~RjMc<5N))wdrDQ3to`0$2+h?E+YHHg<#^T8(V>cQy9BS@Y?P z7Q6uB;kE&sj(qF3$0xpkzPqVu=jIsO>CVQG2Ypvuq?ab{jM-NWy9NqSC`_k28qxT*kIC1uT zb;s1Bi_^=^Vm=&LdVQ^UvNwEw{PIZi>DMD~hA#!rmVb?XpIfZF7(4Xf!s*h__g6mM zU%Yeo<=pN)G=6UB6;}L5i zbhGLx#X9FnDtlIiM4Y6UcOoeb+pHTc&AinrEQ6@EW?AwqdsaQ;XqEkGXgIze7|xeu z+Q_>Ov#sesH$102XFO*;m8bOV!f+$nG8P$1p`K29+4l2Ys@(Zi-p&!9OQSL{lSU?B z5;%&$%~wLhai!2{iaaUcJfhGu!V30u0z0sb2Ly9yFk+4mhD<#eSO%VjyXmhKO;DJcVcCnR(`(4CL)c$rM(H1>|2cjQ`psJW>(^J%*%| z0__Y6;*W>vfZpy6Yf#m>tY8#pl)~RjMc<5N))wdrDQ3to`0$2+h?E+YHHg<#^T8(V>cQy9BS@Y?P z7Q6uB;kE&sj(qF3$0xpkzPqVu=jIsO>CVQG2Ypv*#ihjwoC;Cq2EGL~N5~C~l#4AOL75{Y5)Gy4+-=4Zg_V|BJ?+eD zv_Q=n2B6Bj0geFr9!xDhHE`zb#2YKP;7~{lpY3;-|BPDd&2alMCDkd0#jJidF+6S3 lyNy8{!AO#qs&&$IR!nEa5=Z>i3R|M9&#xZjMP{;)y*517W~%@I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 1de5a2c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xB18: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xB18: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(b18.e50): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e37b10 edx=00003879 esi=ffdd0010 edi=0fd2afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.000233673 -1.37904e-028 -2.10217e+033 1.87492e-030 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00350000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00350000 01481016 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00350000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_description.txt deleted file mode 100644 index 1de5a2c..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xB18: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xB18: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(b18.e50): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e37b10 edx=00003879 esi=ffdd0010 edi=0fd2afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.000233673 -1.37904e-028 -2.10217e+033 1.87492e-030 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00350000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00350000 01481016 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c1 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00350000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/16574/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f0e585e7d431dd85468b6d39d805cc9b9be9bd4e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 283 zcmbu1I}XAy5JV>*#ihjwoC;Cq2EGL~N5~C~l#4AOL75{Y5)Gy4+-=4Zg_V|BJ?+eD zv_Q=n2B6Bj0geFr9!xDhHE`zb#2YKP;7~{lpY3;-|BPDd&2alMCDkd0#jJidF+6S3 lyNy8{!AO#qs&&$IR!nEa5=Z>i3R|M9&#xZjMP{;)y*517W~%@I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 320c2b76c7cd99ee19fb5c5fbb50f9189fbd6cb3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1703 zcmb`G$#N4h5Qcj^u8eQ8ZyZuJ!xqAB_MLIq!VX~xJA{3QuL8*hBFco(;w4L$E$>*- zxpLL&HEY+cFK*blY4et?+qUo6xoh{Hy>Y2)-~Iy!4|N|ta`f2o6DLod?m2Vz-1*)M z7cX7Da`oEv8+|u#-M(}8-u(v;A3c8Z^x5BJqFxm5L~-ne`d}V@b2Y8?T<-b#0%h}ZQ8V);s~e1@)sC`@LNlYfC|2ND*>bdO z=YM1|i8h?Ix}39=Vw&?LWgT-uB2H4CcOohBtE{^#DRZP!H}rzalwrm(>zH%Q2b1iN ze9iGCPjkK`T}9pi%(Suv4LN>y9CaLXRF2ZI0XzeK3=773Y}ZS}W>(#NgDSCpl~fbF z28q-v24ksZ2!@`e@a%k>uQ@K`TTOu@d7MY&I|is=PA9Mf!~7z_EVc*C{&t_4wtI%2 zqwg3vij>$N)`{ceDU?KfGEKam)@0WAa0(0&V;MLK$Ivl$OdJ`=Gv7-DE5ST+FB!)F zZ4w?SiGdzNQc8hl1`Fa(*boD~*&Aw6VLmO?%~>hcnkHIwNCNKsOf9R0_DoW(P~h;q z)~V50+NL{yTC?Ge{8TvI@RO@HqxoR9!Yqx4j{0_e^RW=saH}?ewJ^~(fHh}hN7$j! z$Yy^-W6!fSpH8QO3m_hD6Ts=nH*Rx$;tOcGn?h>c9Amn)HZ$Zw%T=5ETF7SKH`h;s z6=#EWtq0R&0-w!zkS4!HUH=qmqCyz;!|Ji}vZ3emO>#)>1u42`UU#~ K8;4E6TH8MpGv`GB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2889dea..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F14: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F14: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f14.a68): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07ea7b10 edx=00003879 esi=fce30010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.122863000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.72153e-037 0.366256 6.90137e+035 6.0343e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002a9000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002a9000 623bdff8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bc 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002a9000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_description.txt deleted file mode 100644 index 2889dea..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F14: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F14: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f14.a68): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07ea7b10 edx=00003879 esi=fce30010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.122863000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.72153e-037 0.366256 6.90137e+035 6.0343e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002a9000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002a9000 623bdff8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bc 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002a9000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/1849/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 320c2b76c7cd99ee19fb5c5fbb50f9189fbd6cb3..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1703 zcmb`G$#N4h5Qcj^u8eQ8ZyZuJ!xqAB_MLIq!VX~xJA{3QuL8*hBFco(;w4L$E$>*- zxpLL&HEY+cFK*blY4et?+qUo6xoh{Hy>Y2)-~Iy!4|N|ta`f2o6DLod?m2Vz-1*)M z7cX7Da`oEv8+|u#-M(}8-u(v;A3c8Z^x5BJqFxm5L~-ne`d}V@b2Y8?T<-b#0%h}ZQ8V);s~e1@)sC`@LNlYfC|2ND*>bdO z=YM1|i8h?Ix}39=Vw&?LWgT-uB2H4CcOohBtE{^#DRZP!H}rzalwrm(>zH%Q2b1iN ze9iGCPjkK`T}9pi%(Suv4LN>y9CaLXRF2ZI0XzeK3=773Y}ZS}W>(#NgDSCpl~fbF z28q-v24ksZ2!@`e@a%k>uQ@K`TTOu@d7MY&I|is=PA9Mf!~7z_EVc*C{&t_4wtI%2 zqwg3vij>$N)`{ceDU?KfGEKam)@0WAa0(0&V;MLK$Ivl$OdJ`=Gv7-DE5ST+FB!)F zZ4w?SiGdzNQc8hl1`Fa(*boD~*&Aw6VLmO?%~>hcnkHIwNCNKsOf9R0_DoW(P~h;q z)~V50+NL{yTC?Ge{8TvI@RO@HqxoR9!Yqx4j{0_e^RW=saH}?ewJ^~(fHh}hN7$j! z$Yy^-W6!fSpH8QO3m_hD6Ts=nH*Rx$;tOcGn?h>c9Amn)HZ$Zw%T=5ETF7SKH`h;s z6=#EWtq0R&0-w!zkS4!HUH=qmqCyz;!|Ji}vZ3emO>#)>1u42`UU#~ K8;4E6TH8MpGv`GB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f3a356bd29df0355836e22095dd58d81d3e164bf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vy9YkK03wxg#J7fxQ$F11DUgg%+Ds>4JrwfuztPg^=2yJ6`-1QWz0L z3`i^lD?ucPATk$G%lrvB38*OIoI$xFWc<#XcOiEmh&Xp|KJ%UTV}9%|(Ext+I#J{q z6CEX@YL%c0_wHH6_Y`NYg2GkW6fl~Z(gc;(3C=<~JV#Vl{0tv#O1rXSg<;{5|J zU!8w=dJ3!kMN3QwDph+~9t*n5st#JH$0_wQW}Gqut~LUf8)1I2fJwCLg`gXyK&^H; zPg6lyQW|lZ%DfXz)wsoaqG_2on;p+6Y3_Iq2n)iJu$*kMzZyG^AB!C4YjQ2*U4{A9 z2%u}iTf$}Gs?Z3vunWhH=)bX(p%m)bw3jWJ@6zPKZ}L`-_*^@afthwX1=A={MPa@e zJB}NOgQi4C5$6%b!UQY$(<$u0vwT=F>q7~1ZYXBjp~y25#==CXEU`cB5XWabSQ7F1 zE^$5Q$k&f>3JehwmB#qPe|+K#=)0SW4Q`I{oo(+8dC+&&{=WWa3-6osTVPXcq2t_w%{TGcY$P^+r#fz3 r+1#WsnuB#R6BSYu7nMnhiBYf=mT6@WWn3%srQX2a!!}@>u>STN)M)PJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f5d3700..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x898: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x898: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74c98000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ca0000 00000000`74eb0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(898.1014): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07f97b10 edx=00003879 esi=ffd70010 edi=0fccefd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.774824048985130080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.592541100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.14332e-007 -6.4687e+007 -5.20067e+020 -1.74223e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08078130 07ff5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00311000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00311000 84563982 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00311000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_description.txt deleted file mode 100644 index f5d3700..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x898: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x898: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74c98000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ca0000 00000000`74eb0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(898.1014): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07f97b10 edx=00003879 esi=ffd70010 edi=0fccefd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.774824048985130080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.592541100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.14332e-007 -6.4687e+007 -5.20067e+020 -1.74223e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08078130 07ff5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00311000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00311000 84563982 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00311000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/18652/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f3a356bd29df0355836e22095dd58d81d3e164bf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vy9YkK03wxg#J7fxQ$F11DUgg%+Ds>4JrwfuztPg^=2yJ6`-1QWz0L z3`i^lD?ucPATk$G%lrvB38*OIoI$xFWc<#XcOiEmh&Xp|KJ%UTV}9%|(Ext+I#J{q z6CEX@YL%c0_wHH6_Y`NYg2GkW6fl~Z(gc;(3C=<~JV#Vl{0tv#O1rXSg<;{5|J zU!8w=dJ3!kMN3QwDph+~9t*n5st#JH$0_wQW}Gqut~LUf8)1I2fJwCLg`gXyK&^H; zPg6lyQW|lZ%DfXz)wsoaqG_2on;p+6Y3_Iq2n)iJu$*kMzZyG^AB!C4YjQ2*U4{A9 z2%u}iTf$}Gs?Z3vunWhH=)bX(p%m)bw3jWJ@6zPKZ}L`-_*^@afthwX1=A={MPa@e zJB}NOgQi4C5$6%b!UQY$(<$u0vwT=F>q7~1ZYXBjp~y25#==CXEU`cB5XWabSQ7F1 zE^$5Q$k&f>3JehwmB#qPe|+K#=)0SW4Q`I{oo(+8dC+&&{=WWa3-6osTVPXcq2t_w%{TGcY$P^+r#fz3 r+1#WsnuB#R6BSYu7nMnhiBYf=mT6@WWn3%srQX2a!!}@>u>STN)M)PJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 91d21a147f8657c4f546c49951ff16a8904ad4de..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=BIHcL*YQuxpACgkS{0!eTEVh=^DyRziY>U}aFj&YfHo4FL^U zh{Pgbr$y}2sLUxCtb$-6SmZDWiWYld$%#)12=2qKM($yOFu3woqn-#?eEIj z!{;{M7ry>@vV8yi)!}1DyB`)lU%#<@{LG$Ld2-^@=tOH`wmx)gcxm=xy83c&Deaan zJsKVQa{0*Q zz;eDO+d|$n%(aFG-4@;x&I=cXMyQ27SZ+kS#!iY-sF%n6Y{`6&Ci8xiwKBwK+L{zh zwbd~g2c9bM^QF*oTp{$DA|VBwM-&Pptl&4g_)3nyb+X4V0BnP@{(b^W7F_xO$_uH zk}(E!Gbo5Z9;OF+w>PXs)&FU+?a#`o-8V6yV^VNew$}1m*}x^Wt5puKSerYI(mq}M zdE1Bg@^dA+=O|#-6up zKAp`KFMxQsT>z&e-?`oKi7#N_ZmPL=bBycq_STRG16S?tYd4#J-=tp$n_@E^YiIIo z4WG?wlxOc$$G%Z{W?~pk!8)l4im?ex%0#8eC|C?jwK9k@ww1b4Z(%F2RoEJAu>Aui CJ@a`0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 4c26619..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1784: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1784: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1784.44): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07ec7b10 edx=00003879 esi=cfe30010 edi=0fcd6fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.898908400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.22927e-023 0.0025156 1.58913e+019 2.84958e-014 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ca000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ca000 936b8a8b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ca000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_description.txt deleted file mode 100644 index 4c26619..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1784: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1784: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1784.44): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07ec7b10 edx=00003879 esi=cfe30010 edi=0fcd6fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.898908400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.22927e-023 0.0025156 1.58913e+019 2.84958e-014 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002ca000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002ca000 936b8a8b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002ca000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19266/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 91d21a147f8657c4f546c49951ff16a8904ad4de..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=BIHcL*YQuxpACgkS{0!eTEVh=^DyRziY>U}aFj&YfHo4FL^U zh{Pgbr$y}2sLUxCtb$-6SmZDWiWYld$%#)12=2qKM($yOFu3woqn-#?eEIj z!{;{M7ry>@vV8yi)!}1DyB`)lU%#<@{LG$Ld2-^@=tOH`wmx)gcxm=xy83c&Deaan zJsKVQa{0*Q zz;eDO+d|$n%(aFG-4@;x&I=cXMyQ27SZ+kS#!iY-sF%n6Y{`6&Ci8xiwKBwK+L{zh zwbd~g2c9bM^QF*oTp{$DA|VBwM-&Pptl&4g_)3nyb+X4V0BnP@{(b^W7F_xO$_uH zk}(E!Gbo5Z9;OF+w>PXs)&FU+?a#`o-8V6yV^VNew$}1m*}x^Wt5puKSerYI(mq}M zdE1Bg@^dA+=O|#-6up zKAp`KFMxQsT>z&e-?`oKi7#N_ZmPL=bBycq_STRG16S?tYd4#J-=tp$n_@E^YiIIo z4WG?wlxOc$$G%Z{W?~pk!8)l4im?ex%0#8eC|C?jwK9k@ww1b4Z(%F2RoEJAu>Aui CJ@a`0 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f2c7ee1ec0c09c9d35428cc1bd33a71bca9aee03..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YLpCBZ30SZa*~NqQBmo6M#7*%a2*pd)gLo4^E>fu8gdI~w1;u(2 ztU^UWL2sVbNefy;=v7aR7DW7F7C|DEj{kWxDNUdk=_GG{^Pl%IAG=Fbz^`5>3M@mS z9YmBQ1XZN31)^h^8yf#$W;Tz^JvgxM?`Zw}$D=>*oZI;O;oT|uXKHEB?CH4+t-)aD zz|$j*&#&&?3{MV@ZhCop@Z$FS?;npOCqA7j9UR;C;>+Bv!{0VM+JAif^^@v+aikL*Z zT6DTuc9de7^CT5L%R(YfQiXRSDGA%G54AM&TB~CjM6D&uf@jgQ>{*Ex*`I`l;~RnD zd`YH_yvs1#nhtcu^SbAx=d`Etl%8D}Zba+GPKr{fr{i9>{d|`ybAFYzGsI`os1!`4 zkuewtjv{dLrO5LY<0OH}c0i2F}>$b-yzJR{FscPru7~AQ5WypiRtG4&Gp3S{)zF!1e-X=Q6Oz3O@ zpUr%vvp1q+W`xdE45KkvCsjc)R$)n~s1zvyi(#o03Q@|mQ(I~l_7*k|TY&Yqf8n+A Aod5s; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 0c019e9..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC24: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC24: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c24.1668): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00002d2d ecx=07e27b10 edx=00003879 esi=12768f40 edi=07c34fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.379135600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.0251769 -50586.9 -9.33842e-011 5.77988e-027 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036e000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036e000 e209bc88 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036e000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_description.txt deleted file mode 100644 index 0c019e9..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC24: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC24: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c24.1668): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00002d2d ecx=07e27b10 edx=00003879 esi=12768f40 edi=07c34fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.379135600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.0251769 -50586.9 -9.33842e-011 5.77988e-027 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036e000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036e000 e209bc88 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036e000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19488/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f2c7ee1ec0c09c9d35428cc1bd33a71bca9aee03..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YLpCBZ30SZa*~NqQBmo6M#7*%a2*pd)gLo4^E>fu8gdI~w1;u(2 ztU^UWL2sVbNefy;=v7aR7DW7F7C|DEj{kWxDNUdk=_GG{^Pl%IAG=Fbz^`5>3M@mS z9YmBQ1XZN31)^h^8yf#$W;Tz^JvgxM?`Zw}$D=>*oZI;O;oT|uXKHEB?CH4+t-)aD zz|$j*&#&&?3{MV@ZhCop@Z$FS?;npOCqA7j9UR;C;>+Bv!{0VM+JAif^^@v+aikL*Z zT6DTuc9de7^CT5L%R(YfQiXRSDGA%G54AM&TB~CjM6D&uf@jgQ>{*Ex*`I`l;~RnD zd`YH_yvs1#nhtcu^SbAx=d`Etl%8D}Zba+GPKr{fr{i9>{d|`ybAFYzGsI`os1!`4 zkuewtjv{dLrO5LY<0OH}c0i2F}>$b-yzJR{FscPru7~AQ5WypiRtG4&Gp3S{)zF!1e-X=Q6Oz3O@ zpUr%vvp1q+W`xdE45KkvCsjc)R$)n~s1zvyi(#o03Q@|mQ(I~l_7*k|TY&Yqf8n+A Aod5s; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/19928/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index b257d1d931247f2419c8f51197f937aa47f19a1a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*uGv$IxkXTm;BH|=ut}i^Y4!q&wICK^Z;>LgN|9p6iy?_c2+>vy zrV64(z)o?_1V4f#*rv%z8i^uvVDONT@jq|oLhe8d$=tp9&41pxakss=JTR^c{Kn=*Mt=d+q3j)w{Hq zj;(Bbem3{}!_*=c{a1^X^OmztR;o_7nMtQTyLh@7sK z9i`agJV}vfSxCf5s_;%EWnqK$wYp|b)?1cAT;H`Uc}AXP&q}<-{wy>cUkwcBOEL}Q z-GkXybD;a4Q=YS)^Pb96dbVM>5gi&^IZC0PPCMD~^KGia`Bl*<5MM~6axj-hreGR4 zionhHgofivq0fXRI@C-d;PoatZX^S{M z-^G%MFZPJ*8AG;yfKy)0w5I*)h?jQxb4j_SbS+n7}4AlZ3-7#%QZi+NFEHZo2Sx zz7}4${p45M*L<*MazNvuV|`cOek?>y+^P#;Eo`(4V9nXs5q4-bvf1C(*z-Znr!!jc z0*Hs(25>s^t=k@-_yW4_CehB#F}Bmq{UHy!uG-$$VK(=^`F;zmdmC>VGp>tGd^YQ` xF5Zcjc`J0GQW%ZETDc0MRE0f4#XYeSuoRX{p%A4^Be$iNVeetLgN|9p6iy?_c2+>vy zrV64(z)o?_1V4f#*rv%z8i^uvVDONT@jq|oLhe8d$=tp9&41pxakss=JTR^c{Kn=*Mt=d+q3j)w{Hq zj;(Bbem3{}!_*=c{a1^X^OmztR;o_7nMtQTyLh@7sK z9i`agJV}vfSxCf5s_;%EWnqK$wYp|b)?1cAT;H`Uc}AXP&q}<-{wy>cUkwcBOEL}Q z-GkXybD;a4Q=YS)^Pb96dbVM>5gi&^IZC0PPCMD~^KGia`Bl*<5MM~6axj-hreGR4 zionhHgofivq0fXRI@C-d;PoatZX^S{M z-^G%MFZPJ*8AG;yfKy)0w5I*)h?jQxb4j_SbS+n7}4AlZ3-7#%QZi+NFEHZo2Sx zz7}4${p45M*L<*MazNvuV|`cOek?>y+^P#;Eo`(4V9nXs5q4-bvf1C(*z-Znr!!jc z0*Hs(25>s^t=k@-_yW4_CehB#F}Bmq{UHy!uG-$$VK(=^`F;zmdmC>VGp>tGd^YQ` xF5Zcjc`J0GQW%ZETDc0MRE0f4#XYeSuoRX{p%A4^Be$iNVeet3P(}J$AUX%%IDANIedwg!@Q?=W<)A;zk_25Zi z-^uIq2Y>v!@@;wS*vz9-Q_t_07GAG3;;Z8`-6Qdbg|YV8=-JO(2Tm^?UHh|o&+dJC zt-jWN_<3yl^7Nti%NJgBf1fv(u+V6WjQ5ml!;B}r9^dK|7nRGuF9!5H!9Ce0;4*tpPHbUn6RWwREms(C9qU0gDhh^shjF8>>aEPTZfId EzZ$Lf3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index e656e7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1DAC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1DAC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1dac.1244): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07ed7b10 edx=00003879 esi=fce30010 edi=0f670fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.84264e+030 1.36725e-005 4.7536e-006 -3.32605e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a6000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a6000 85d78f35 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a6000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_description.txt deleted file mode 100644 index e656e7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1DAC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1DAC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1dac.1244): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07ed7b10 edx=00003879 esi=fce30010 edi=0f670fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.84264e+030 1.36725e-005 4.7536e-006 -3.32605e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a6000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a6000 85d78f35 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a6000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2015/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1ca80aa95b07918064f18e1c40ccf64abc515e62..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9=9h#X0H*!lf6PDjSxW)wAe(DR5k|0!oo(dusG1pV&^XYNWj9v zA__u`{sB=iB3jHT#6sm7Nt-)UC3P(}J$AUX%%IDANIedwg!@Q?=W<)A;zk_25Zi z-^uIq2Y>v!@@;wS*vz9-Q_t_07GAG3;;Z8`-6Qdbg|YV8=-JO(2Tm^?UHh|o&+dJC zt-jWN_<3yl^7Nti%NJgBf1fv(u+V6WjQ5ml!;B}r9^dK|7nRGuF9!5H!9Ce0;4*tpPHbUn6RWwREms(C9qU0gDhh^shjF8>>aEPTZfId EzZ$Lf3;+NC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c61f816cbb6a8a7c565bc3a22d8e6da5c00d6cdd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1686 zcmcJOv2NQi5QdMIV0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEudjwd5F&Eb%*&B|lIekoO73ZC^m2 zmEV-t${S@=2IUMq19=Ru#;GgoC4b66=V!*g_+vlxcn$iHV+VF22M>Bv=uDYkR$1Z} zRncUXWF(KMQd(5t(>d&b*}QSW?Zyf(Has*2|fA zeS=eAh?qjFbV{%6l)X}bJpNu<*bZh$UowpU*#bNvkN`b~6k`N=1`Fa(*pL7{?+vwR z{gUSMX;z}~Wa3PFa&R}tT1C5TIB8t3CA`TwvBuIRUHxe+;d6d+s%JlGwWF4Ujq4{G z4;}T(`uwpFjkwhkAlh+s2@oyW*b#Qf8rkBXHTL{e%jt4*QULLAbAY5HpWS?Xk_$My zn{_H~iQz7d$Ds_)uA1-bHCuV#w7&-rYFAUvSE;|lXLD;)|I1DJhf96*FuH_IT{N|i f)zU?~w9&yltP3t8D(0c%rGCPG!){@Bu=Dm8Mn=kF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 02bc50d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x16B4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x16B4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(16b4.1204): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07e47b10 edx=00003879 esi=12768f40 edi=07c70fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 6.417186000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-66.9745 2.37794e-008 0.00331845 1.54077e-017 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f1000 445c0d89 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_description.txt deleted file mode 100644 index 02bc50d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x16B4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x16B4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(16b4.1204): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07e47b10 edx=00003879 esi=12768f40 edi=07c70fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.715714303862129760000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 6.417186000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-66.9745 2.37794e-008 0.00331845 1.54077e-017 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f28130 07ea5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f1000 445c0d89 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/20989/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c61f816cbb6a8a7c565bc3a22d8e6da5c00d6cdd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1686 zcmcJOv2NQi5QdMIV0xpxbud6pMMuAZoT+cnxsQ-H5bLyPyX6t`D0B<7V;&&_vUH?2 z4MEudjwd5F&Eb%*&B|lIekoO73ZC^m2 zmEV-t${S@=2IUMq19=Ru#;GgoC4b66=V!*g_+vlxcn$iHV+VF22M>Bv=uDYkR$1Z} zRncUXWF(KMQd(5t(>d&b*}QSW?Zyf(Has*2|fA zeS=eAh?qjFbV{%6l)X}bJpNu<*bZh$UowpU*#bNvkN`b~6k`N=1`Fa(*pL7{?+vwR z{gUSMX;z}~Wa3PFa&R}tT1C5TIB8t3CA`TwvBuIRUHxe+;d6d+s%JlGwWF4Ujq4{G z4;}T(`uwpFjkwhkAlh+s2@oyW*b#Qf8rkBXHTL{e%jt4*QULLAbAY5HpWS?Xk_$My zn{_H~iQz7d$Ds_)uA1-bHCuV#w7&-rYFAUvSE;|lXLD;)|I1DJhf96*FuH_IT{N|i f)zU?~w9&yltP3t8D(0c%rGCPG!){@Bu=Dm8Mn=kF diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 78a800ee409cd5953c5a50bddd081a7b67a7db07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1797 zcmb`GS8xgW6s_+A)x$F7npYEQSp4|mVz+XxVfFWoC)B}KE z5K#HxVZxUU8a8URwS+N^ntuhPG6*{XG$w(Z(?=-8=qm#!Jzy7%bWt9PHi{WALx z7&vI~kZ*<#8$ROOk)uXujTt*`{Dki&PMSPr>a^)IT$&xq$(=bXFTY^+obTt(n_swK z;iAP$mM&YqV&$sUYkv5#XzjZ7KW*5!Y4gv&Z29%Kt=qQm`2CMR|Ju20_ny7`_8&NS zh=mUyIeM(PRJbd){$^|H3|SOXEDWjn0v}Fdo9Rgh@@yBAjAEfdqU&VDqZ`%s0xqgdqnHFAM|cjS{4=!RMYs- zaeuYG_*ejn|j}LUyclG%ZYKGQh$EIdf>wf7idKeJyL|-qx;~8n diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 4915f36..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1748: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1748: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1748.1a0c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e77b10 edx=00003879 esi=12768f40 edi=0fd1afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.021269100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=9.2142e+008 -1.50371e-022 2.13457e-020 -1.21802e-021 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ad000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ad000 8fe7cc9d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ad000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_description.txt deleted file mode 100644 index 4915f36..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1748: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1748: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1748.1a0c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e77b10 edx=00003879 esi=12768f40 edi=0fd1afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.021269100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=9.2142e+008 -1.50371e-022 2.13457e-020 -1.21802e-021 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003ad000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003ad000 8fe7cc9d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003ad000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21332/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 78a800ee409cd5953c5a50bddd081a7b67a7db07..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1797 zcmb`GS8xgW6s_+A)x$F7npYEQSp4|mVz+XxVfFWoC)B}KE z5K#HxVZxUU8a8URwS+N^ntuhPG6*{XG$w(Z(?=-8=qm#!Jzy7%bWt9PHi{WALx z7&vI~kZ*<#8$ROOk)uXujTt*`{Dki&PMSPr>a^)IT$&xq$(=bXFTY^+obTt(n_swK z;iAP$mM&YqV&$sUYkv5#XzjZ7KW*5!Y4gv&Z29%Kt=qQm`2CMR|Ju20_ny7`_8&NS zh=mUyIeM(PRJbd){$^|H3|SOXEDWjn0v}Fdo9Rgh@@yBAjAEfdqU&VDqZ`%s0xqgdqnHFAM|cjS{4=!RMYs- zaeuYG_*ejn|j}LUyclG%ZYKGQh$EIdf>wf7idKeJyL|-qx;~8n diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/21803/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 7c4f3374b43be8d2d4fae95af26fb4c016d946a5..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1642 zcmb`Gy>8nu5XX;}V0xpxbud6pMMh6uV{>+Fz!FL89Qt0!C|7gfJ z_`TF}&M$>u7qhX{E!tx?o1!PSp=f0|C(oXEPF)0Vw}m&`;=iupMEhD7yh<2P^5=2Wic7z?WMzzEzjXgita=M(HEP#B3IYG)%&tX13$pxI; z%`%m+8nu5XX;}V0xpxbud6pMMh6uV{>+Fz!FL89Qt0!C|7gfJ z_`TF}&M$>u7qhX{E!tx?o1!PSp=f0|C(oXEPF)0Vw}m&`;=iupMEhD7yh<2P^5=2Wic7z?WMzzEzjXgita=M(HEP#B3IYG)%&tX13$pxI; z%`%m+U3YGn`v zL5ra2{J>5Gi@5}pR3WVvIgO}bggF#hBxL;0o4JrXw2{o+o8SE3$9(NBQ31bNjVQ1T ziH3+MNeHS)UkgN&@D0OPyMJKhQ~vJEy@hKV#Xd~#*=_u;-$a&V;deecCb zqsw=nU9AVNhA&M2c)omm@!W$CCtfao9(wWf*VLgStJOUlM^8;0d*8Qj>s$75VYG5~ zcJlJmrH2FR+7`y2C^|?J378wjMQ3sRHL4j&lv?zg>hA zZMNuiqvR;X7S~BCdX|Jlo}@DGL{bvASf6fc=FMhq8AQ!Z%YtXov*cNh);XSphV#b) z!}XF(3w76Fwly5+hUYEMInQ}dj7e_@7N8A|)}< zV@OIV(0VW-{&<)U=Gr>2bU3YGn`v zL5ra2{J>5Gi@5}pR3WVvIgO}bggF#hBxL;0o4JrXw2{o+o8SE3$9(NBQ31bNjVQ1T ziH3+MNeHS)UkgN&@D0OPyMJKhQ~vJEy@hKV#Xd~#*=_u;-$a&V;deecCb zqsw=nU9AVNhA&M2c)omm@!W$CCtfao9(wWf*VLgStJOUlM^8;0d*8Qj>s$75VYG5~ zcJlJmrH2FR+7`y2C^|?J378wjMQ3sRHL4j&lv?zg>hA zZMNuiqvR;X7S~BCdX|Jlo}@DGL{bvASf6fc=FMhq8AQ!Z%YtXov*cNh);XSphV#b) z!}XF(3w76Fwly5+hUYEMInQ}dj7e_@7N8A|)}< zV@OIV(0VW-{&<)U=Gr>2byxwG+uz^-7#LP$VuB(jN(7N)U?;uk5cBvsm-oQfYPNnvLb zO(BRDb|GM#%Ry465Ya9NLC`|j6N?o>#{ax|7jg%t2${P#zxlt9`PyBg5`IHNM1f;S zbdrdYgrLgwqeL_g-zoTzLdVK8^XDcG{<*pEdvN*1uV>A>gRgHtw->LjP8BQP{~n)t zKYwW9Q!#w>%g5{Y#!g>3u{87fTGLEjZZ2IId-|^Oc5&e4;)l5d!>`8IzTUaD^7GBv zvH1MJ;WKvn+l>h<5a734v)1kw-dij(zOIsVvpV8+hl%!Ds7EPw9y3a*0q5$Tvvu!( zQic=lVcF|?#Z#*-uG3T&R+L7brYi45QxdjVUuxvcM~%WUh#H%YC1F`u5muuOjwhkz z{E@(Ny(Zg2-89U#x(7WFJ{Haj=Y&S6g&p7-@MG9F7O9^vkGt6te}^XXag((&yat)J zCIwS%bqvOVrwY8kFSMLj3caRCNCDRog~A9cxYH@@z_EHnF^Bpi=45}!%=-h!Ko|-m zp~{KlaY3A)ZemH~XIsScSxavI0H?qZIi8VF31eX@%!CZoxsNe{jlcqumki_oHjRkZ z#6XWB8Dl`_!G!n|HpD>h_J*~nwwD&$?y8*HU5*|dlR~(30sA&!Pa5D F?H`wj^r-*< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f6bd738..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x10D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x10D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(10d0.f50): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e27b10 edx=00003879 esi=12768f40 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.855072100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.412816 9.20945e+021 2.14367e+022 -5.48874e+018 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00256000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00256000 ed60f1ab 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00256000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_description.txt deleted file mode 100644 index f6bd738..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x10D0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x10D0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(10d0.f50): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e27b10 edx=00003879 esi=12768f40 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.855072100000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0.412816 9.20945e+021 2.14367e+022 -5.48874e+018 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00256000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00256000 ed60f1ab 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00256000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/24310/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 9531c97013e2bd283a4cd97401ed7be80e419fa0..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1691 zcmb`GJ!lj`6vyA*9@(>yxwG+uz^-7#LP$VuB(jN(7N)U?;uk5cBvsm-oQfYPNnvLb zO(BRDb|GM#%Ry465Ya9NLC`|j6N?o>#{ax|7jg%t2${P#zxlt9`PyBg5`IHNM1f;S zbdrdYgrLgwqeL_g-zoTzLdVK8^XDcG{<*pEdvN*1uV>A>gRgHtw->LjP8BQP{~n)t zKYwW9Q!#w>%g5{Y#!g>3u{87fTGLEjZZ2IId-|^Oc5&e4;)l5d!>`8IzTUaD^7GBv zvH1MJ;WKvn+l>h<5a734v)1kw-dij(zOIsVvpV8+hl%!Ds7EPw9y3a*0q5$Tvvu!( zQic=lVcF|?#Z#*-uG3T&R+L7brYi45QxdjVUuxvcM~%WUh#H%YC1F`u5muuOjwhkz z{E@(Ny(Zg2-89U#x(7WFJ{Haj=Y&S6g&p7-@MG9F7O9^vkGt6te}^XXag((&yat)J zCIwS%bqvOVrwY8kFSMLj3caRCNCDRog~A9cxYH@@z_EHnF^Bpi=45}!%=-h!Ko|-m zp~{KlaY3A)ZemH~XIsScSxavI0H?qZIi8VF31eX@%!CZoxsNe{jlcqumki_oHjRkZ z#6XWB8Dl`_!G!n|HpD>h_J*~nwwD&$?y8*HU5*|dlR~(30sA&!Pa5D F?H`wj^r-*< diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1f4feb5c5972c7e864345bff1b4e02e6a5a95c2b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p0{T;yJ`_aWHuHdR;CdfVK1Oq2x6n9g_Tu^g&id`rzqx~C`!X7>l2NFd85&`45G${Wy!PbS@n#gRraT$;rLo$IA4)z zBJV29wz>md^StRf={e=8J(Xt%h8xk2v7Mn5>J_q^O+VkE&YfT9%^dN$GCBh@Wt0SE z;3xt&UkMGzl|rW}@}z+Ch(gZ@E7;Qs?7%Ya6U>o;h&etGGK+!0GVlyNBTrEf`(>Lr zKHI>Oh|f2P>ls6~et=V8h#1GnQ+P_x%rp07Aa58YQ&BQMalm(X}YrtYIRNYXh{O@cxx@Eg$Zm@D@iy!Hm0x|rCqxB7cCdw z$uET09Y6Wiwlp8Cm2A^^=vd#?w;u~p3%BY5SPL8N0$6i4c7z>TjcoRJH1@n*^XW_> zcmc%2Z38$R`POZZPkaGAcas#(%`vtsT3bUN^jx*Qubph}ee?Y)*zh*dHfEy8SMb>^ yMMb_K+UAWYaxGyr4r^yRC`%nygpMka7BC6Rl+cLMrkUANZ()nDCD;nAxBUSDV(~!$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f59777f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19F0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19F0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19f0.91c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07e27b10 edx=00003879 esi=ffd70010 edi=07c50fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.189523000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.47424e+019 0.000455349 -5.33222e-030 -13.6578 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b3000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b3000 a7d1f5b9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b3000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_description.txt deleted file mode 100644 index f59777f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19F0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19F0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19f0.91c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07e27b10 edx=00003879 esi=ffd70010 edi=07c50fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.710084804326605920000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.189523000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-2.47424e+019 0.000455349 -5.33222e-030 -13.6578 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f08130 07e85930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b3000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b3000 a7d1f5b9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b3000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/25147/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1f4feb5c5972c7e864345bff1b4e02e6a5a95c2b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p0{T;yJ`_aWHuHdR;CdfVK1Oq2x6n9g_Tu^g&id`rzqx~C`!X7>l2NFd85&`45G${Wy!PbS@n#gRraT$;rLo$IA4)z zBJV29wz>md^StRf={e=8J(Xt%h8xk2v7Mn5>J_q^O+VkE&YfT9%^dN$GCBh@Wt0SE z;3xt&UkMGzl|rW}@}z+Ch(gZ@E7;Qs?7%Ya6U>o;h&etGGK+!0GVlyNBTrEf`(>Lr zKHI>Oh|f2P>ls6~et=V8h#1GnQ+P_x%rp07Aa58YQ&BQMalm(X}YrtYIRNYXh{O@cxx@Eg$Zm@D@iy!Hm0x|rCqxB7cCdw z$uET09Y6Wiwlp8Cm2A^^=vd#?w;u~p3%BY5SPL8N0$6i4c7z>TjcoRJH1@n*^XW_> zcmc%2Z38$R`POZZPkaGAcas#(%`vtsT3bUN^jx*Qubph}ee?Y)*zh*dHfEy8SMb>^ yMMb_K+UAWYaxGyr4r^yRC`%nygpMka7BC6Rl+cLMrkUANZ()nDCD;nAxBUSDV(~!$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 35e88306bde3b8ea7502a358d90b60c1c4b2f282..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@)EU?h3^sxLZjGC|9HlxEBow`X4B!6}w<1HalLFC;fPi zYLD|Ym4y|h5vQrfJJFPc9oA>sIdit%bqu2Ru47497FL9{Xp8+xXgR(aSkBjEJIK2Z zbFJk;H-xu@^TI`;5o%!%mK)K3V>d-9)XU?3c4WRslX<_%IvL_KZA}WM+UgjL15XwB z`JvEqTq*RLA|VBwM-&Pptl&yLt z&rh=2zUG4!^#d9Y9qar0?qeY;aH~FmwQ|uufHh}hN7$j$$Yy^}W6uXQpU&or7eGAR zE`ZaK@7(VA#1}AdH}%}RImUH)u|MR&z*W2Z`k&3eZ_;mpZLyiIwKI9PiO*&&%Ci;K uwQp3OnHWaXux@ICa%{pOWul?TC|C?jwK9k@wv)P2Z(;9XYp_k&VEYYaru3-* diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8c98922..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA3C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA3C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a3c.37c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e87b10 edx=00003879 esi=12768f40 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.919384000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.48667e+037 -0.00321306 -1.3262e+011 -3.95582e-005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00385000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00385000 e90b0275 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00385000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_description.txt deleted file mode 100644 index 8c98922..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA3C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA3C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`743e9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743f0000 00000000`749f4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a3c.37c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07e87b10 edx=00003879 esi=12768f40 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.919384000000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.48667e+037 -0.00321306 -1.3262e+011 -3.95582e-005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00385000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00385000 e90b0275 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6291 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00385000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2595/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 35e88306bde3b8ea7502a358d90b60c1c4b2f282..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@)EU?h3^sxLZjGC|9HlxEBow`X4B!6}w<1HalLFC;fPi zYLD|Ym4y|h5vQrfJJFPc9oA>sIdit%bqu2Ru47497FL9{Xp8+xXgR(aSkBjEJIK2Z zbFJk;H-xu@^TI`;5o%!%mK)K3V>d-9)XU?3c4WRslX<_%IvL_KZA}WM+UgjL15XwB z`JvEqTq*RLA|VBwM-&Pptl&yLt z&rh=2zUG4!^#d9Y9qar0?qeY;aH~FmwQ|uufHh}hN7$j$$Yy^}W6uXQpU&or7eGAR zE`ZaK@7(VA#1}AdH}%}RImUH)u|MR&z*W2Z`k&3eZ_;mpZLyiIwKI9PiO*&&%Ci;K uwQp3OnHWaXux@ICa%{pOWul?TC|C?jwK9k@wv)P2Z(;9XYp_k&VEYYaru3-* diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1b7da8c7e33afbda01bef1a7bfb5338f58065e35..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1751 zcmb`GM|Tr35XWb|ep%mS-#FyG-4l;vzQHCZz5!=$bO^n(ij$Cp8hVG&d+%LNAap|S z5JM=Tuc-z?#Aqbv#eNSCyvQE?^w-QtBke9g1b-zZ0G6T+&>H|e4^Ty+Jp$0r9x!mw z;2}eY4IfcHa@6QCW5bj ze8tLDtJgHFUAKP2#!Z{IY~8kf$Ie~5_w3!b|G>dRhmRaRcKpQ2Q>R6$vFXg&=5yyS zT)cGo%GH)@*Kgdsb^FfUd-oqaeDwH9Yx?Q4w&yQizG{E{=Iy)pA3lbePoKYh{q{Zk zqg1F8&b4eJdX422;#%mJSPJ%%1**4OKWZa&jyK1UH~zX;L+ zz6Jr8!bkdCau?}Zn#|JkMYg24h^;j^hG0=1fNkjD4(fCaD^QI0V#JbShge>06T@Ol z(K56R9YYoZ`Q0o~yx)OaVtmjEw4Rip*0=B!IK&uD$B-GihQ487NWeVxy?AJ)Xcm~4 z499b`oi z>G#d_ZOD|d%B+-?VbF@7O^Xu-%`7V$Sr`Zx4a(87zObUMu#1>*iX6evTr{6Efl)%H ReYI2*+Bviqv{tmj_6G#KFhl?V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 311410f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FCC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FCC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fcc.750): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=007fed2d ecx=07e07b10 edx=00003879 esi=fe630010 edi=0fc40fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.704455304791082080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.00441e-007 -5.09727e+018 -1.96785e-031 2.96085e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ee8130 07e65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d5000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d5000 09200898 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ad 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d5000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_description.txt deleted file mode 100644 index 311410f..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FCC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FCC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fcc.750): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=007fed2d ecx=07e07b10 edx=00003879 esi=fe630010 edi=0fc40fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.704455304791082080000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.00441e-007 -5.09727e+018 -1.96785e-031 2.96085e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ee8130 07e65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d5000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d5000 09200898 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ad 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d5000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/27102/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 1b7da8c7e33afbda01bef1a7bfb5338f58065e35..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1751 zcmb`GM|Tr35XWb|ep%mS-#FyG-4l;vzQHCZz5!=$bO^n(ij$Cp8hVG&d+%LNAap|S z5JM=Tuc-z?#Aqbv#eNSCyvQE?^w-QtBke9g1b-zZ0G6T+&>H|e4^Ty+Jp$0r9x!mw z;2}eY4IfcHa@6QCW5bj ze8tLDtJgHFUAKP2#!Z{IY~8kf$Ie~5_w3!b|G>dRhmRaRcKpQ2Q>R6$vFXg&=5yyS zT)cGo%GH)@*Kgdsb^FfUd-oqaeDwH9Yx?Q4w&yQizG{E{=Iy)pA3lbePoKYh{q{Zk zqg1F8&b4eJdX422;#%mJSPJ%%1**4OKWZa&jyK1UH~zX;L+ zz6Jr8!bkdCau?}Zn#|JkMYg24h^;j^hG0=1fNkjD4(fCaD^QI0V#JbShge>06T@Ol z(K56R9YYoZ`Q0o~yx)OaVtmjEw4Rip*0=B!IK&uD$B-GihQ487NWeVxy?AJ)Xcm~4 z499b`oi z>G#d_ZOD|d%B+-?VbF@7O^Xu-%`7V$Sr`Zx4a(87zObUMu#1>*iX6evTr{6Efl)%H ReYI2*+Bviqv{tmj_6G#KFhl?V diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4ade6941214172061ce924d32715a6fd39cd5a31..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1804 zcmb`G-%C_M6vxlqyLk5@nB97)z`84zgrP{3VTD)wrH~m!NJ2lX{(!890;%r!TLVe# zhed^!LG%>XTa=6miACf~1yZzWR0_tdA}l6NXMU`xkPp)Ap83po&N(x4=H3esz+X-d zfF)@IWB@=k3NTULarFJx;pNxL?(&;6R|Y?9nJ7AE<(1yPc|EUVbZXDew4sf!%Qt7( z$L=?DKW%A0Q*x^N^RJdmS*<4qBJC%CZyGqhWB9KG3Ru0xj(uy!)%bRD6scvktEabmdpQ zEy}$7X{hAkvKKwOFZOhV*4=oqcUxPk73!R12d~|_da(aT_L{Y)TMj&VRNh!O`uuFx zvkQkF4>#4$@Q(5Ns=)vR;b#D#3@hA#6=K0qfo9=vu_lCA%)K<9!*pIKI-lVJt&@yW ztqo}*xN?RSg2#}ZHJYt8dcHY`li2EmTGxa$Dfy%FCGzE8HSw^<&WAz#TQsYzb%&SI|twsat44VvF4Lc2)AvH__pMiP| z|BVSxugBf_jG6f)nXmoKkNNl-_*5_t=}|#lq-$vsOV6j+Ld6Aat-&z_OXUIBh7Rr^ zt0Q;<$?z(on3L)#R;JpDJk^r43~fWlkZ@3bHvuZ%o53wH-v0w?Jt07@Z($WU#28J- zkQlm#o}q83fO+zJiJ}#tSzul=9RIUX^iT>4*y9iwV@NrJ3*sN}KnmE)v*BJ4SxR%o z{45Ufc@qn?3k2Qa*}b$T!jehxNJNE)h2T=-(mLJvd0dAl^Eoj(=?AmhtX74^BXcx9 zblhLBFFzK5INqubP@2eS9iX(z#uMQQrN(UKPij2#T&=1ToTv>j9^EoPrDMKy%kn{8 zz=FGpaP3wxvg7gDp&Bf>YI$G(v+4KE^drb#W3>q(YPtUfKbv(=L37bON*G2l5%c6yeQ5n?@6f)WEo^@QAOI}l diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index bf85e7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1EAC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1EAC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1eac.1998): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=001fed2d ecx=07ea7b10 edx=00003879 esi=ff830010 edi=0fd04fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.20437e+037 -2.93917e-025 -1.9995e+018 1.33324e-016 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d7000 14aff16e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_description.txt deleted file mode 100644 index bf85e7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1EAC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1EAC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1eac.1998): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=001fed2d ecx=07ea7b10 edx=00003879 esi=ff830010 edi=0fd04fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.20437e+037 -2.93917e-025 -1.9995e+018 1.33324e-016 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002d7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002d7000 14aff16e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002d7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2781/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4ade6941214172061ce924d32715a6fd39cd5a31..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1804 zcmb`G-%C_M6vxlqyLk5@nB97)z`84zgrP{3VTD)wrH~m!NJ2lX{(!890;%r!TLVe# zhed^!LG%>XTa=6miACf~1yZzWR0_tdA}l6NXMU`xkPp)Ap83po&N(x4=H3esz+X-d zfF)@IWB@=k3NTULarFJx;pNxL?(&;6R|Y?9nJ7AE<(1yPc|EUVbZXDew4sf!%Qt7( z$L=?DKW%A0Q*x^N^RJdmS*<4qBJC%CZyGqhWB9KG3Ru0xj(uy!)%bRD6scvktEabmdpQ zEy}$7X{hAkvKKwOFZOhV*4=oqcUxPk73!R12d~|_da(aT_L{Y)TMj&VRNh!O`uuFx zvkQkF4>#4$@Q(5Ns=)vR;b#D#3@hA#6=K0qfo9=vu_lCA%)K<9!*pIKI-lVJt&@yW ztqo}*xN?RSg2#}ZHJYt8dcHY`li2EmTGxa$Dfy%FCGzE8HSw^<&WAz#TQsYzb%&SI|twsat44VvF4Lc2)AvH__pMiP| z|BVSxugBf_jG6f)nXmoKkNNl-_*5_t=}|#lq-$vsOV6j+Ld6Aat-&z_OXUIBh7Rr^ zt0Q;<$?z(on3L)#R;JpDJk^r43~fWlkZ@3bHvuZ%o53wH-v0w?Jt07@Z($WU#28J- zkQlm#o}q83fO+zJiJ}#tSzul=9RIUX^iT>4*y9iwV@NrJ3*sN}KnmE)v*BJ4SxR%o z{45Ufc@qn?3k2Qa*}b$T!jehxNJNE)h2T=-(mLJvd0dAl^Eoj(=?AmhtX74^BXcx9 zblhLBFFzK5INqubP@2eS9iX(z#uMQQrN(UKPij2#T&=1ToTv>j9^EoPrDMKy%kn{8 zz=FGpaP3wxvg7gDp&Bf>YI$G(v+4KE^drb#W3>q(YPtUfKbv(=L37bON*G2l5%c6yeQ5n?@6f)WEo^@QAOI}l diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 5a2b5498aacfc0948159943378798936fc1b76a6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*F4=2z?kX)#b}eE=6r!aTdnqJhX(@_<*ohDYE5RKvii%C@U=a{8 zphO}BK|$ssnnsK^YGKHk;8!8cHFD^g@jq|oLhe8d$=tp9&41pCAfEfBq*-8(RP_tE^Vog>Q+%2ax_@6F8d(=#8Aw!cgq{{D1sWo_=>lMD5? zCl208mMW9CFHMh(&VGD%leRuTJ8<#*p&i2qrmH_b|JwHW+?kjCpH`0iURvni-#;1c z`Pts``sDp%r@lSJlK*b8a{gl4%~I9r4pZs0ryQch&Zr^E6gX9LoT$0^8xbbau0~GR zijGpOah{~evnV9uB$aq4lG3ojdbqBc*Xk|HAg;G93!af@(X$kRfubVEs zldpx>9Y6Wi)-@ljS>B-W(6PR&Z$B2ICT`UQuogDj1+eC9>=brjglF&tMC%Mc6W|xBUUo1NMpl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 242d0f7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1284: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1284: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1284.114c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f07b10 edx=00003879 esi=ffdd0010 edi=0fceafd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.2226e+030 -3.95979e+017 1.38711e-015 4.9275e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036f000 1a9f50f2 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_description.txt deleted file mode 100644 index 242d0f7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1284: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1284: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1284.114c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f07b10 edx=00003879 esi=ffdd0010 edi=0fceafd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.2226e+030 -3.95979e+017 1.38711e-015 4.9275e-023 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0036f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0036f000 1a9f50f2 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0036f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/28687/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 5a2b5498aacfc0948159943378798936fc1b76a6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*F4=2z?kX)#b}eE=6r!aTdnqJhX(@_<*ohDYE5RKvii%C@U=a{8 zphO}BK|$ssnnsK^YGKHk;8!8cHFD^g@jq|oLhe8d$=tp9&41pCAfEfBq*-8(RP_tE^Vog>Q+%2ax_@6F8d(=#8Aw!cgq{{D1sWo_=>lMD5? zCl208mMW9CFHMh(&VGD%leRuTJ8<#*p&i2qrmH_b|JwHW+?kjCpH`0iURvni-#;1c z`Pts``sDp%r@lSJlK*b8a{gl4%~I9r4pZs0ryQch&Zr^E6gX9LoT$0^8xbbau0~GR zijGpOah{~evnV9uB$aq4lG3ojdbqBc*Xk|HAg;G93!af@(X$kRfubVEs zldpx>9Y6Wi)-@ljS>B-W(6PR&Z$B2ICT`UQuogDj1+eC9>=brjglF&tMC%Mc6W|xBUUo1NMpl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/2894/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 72d42ca57e782efa81c39cbbc846618082db294c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gzl#$=6vy9YLpEG9Np;6vU>6jzGo_7euCn(Zuo7&C9zw_p8xCCq@lf3!NcixZrvAaYq{DwoK$TKE7Lqu6d zP`@5;w61;o`StmitA8%vc=YjsK6hdJ{H1cWe4Vb`eD(6j`ufxTE2|r8Z$ABg^7+NX zQ`@Iku1~)|+t0hGvDB8BP_CQJvo{L5VWxu?>P<@hjM=2zfO}=&ZW-q9w=s!!ryX?J z4b*DNd79e7uF{Cp)Z?9K%Hj#@i(|{YJFY#WWPI$|61Ih1VJ|sie-=BAA4QJyHMt4$ zZozyj1L(H!o^V&VCp1DWY~Z*NEsb@KQmALsc}`@$p(%pj6q5q+g?1(fbM15rrct1Z z!h9!o9M_72rbI{)=Mlxi1S|N{DeS`@LZ;>ik|bVwJ!twMN{Z6jzGo_7euCn(Zuo7&C9zw_p8xCCq@lf3!NcixZrvAaYq{DwoK$TKE7Lqu6d zP`@5;w61;o`StmitA8%vc=YjsK6hdJ{H1cWe4Vb`eD(6j`ufxTE2|r8Z$ABg^7+NX zQ`@Iku1~)|+t0hGvDB8BP_CQJvo{L5VWxu?>P<@hjM=2zfO}=&ZW-q9w=s!!ryX?J z4b*DNd79e7uF{Cp)Z?9K%Hj#@i(|{YJFY#WWPI$|61Ih1VJ|sie-=BAA4QJyHMt4$ zZozyj1L(H!o^V&VCp1DWY~Z*NEsb@KQmALsc}`@$p(%pj6q5q+g?1(fbM15rrct1Z z!h9!o9M_72rbI{)=Mlxi1S|N{DeS`@LZ;>ik|bVwJ!twMN{Zb5F5K- zECj(|X*U1XZLT1){5%8(Et8K0G?}?%wV7g^T;kf40ut_;vIBsc%!)YcD3Zw=TcF5H_Om zak^8TSb6hz`w3e=3yVaO|b@%s1 z;bZu9bn5>4&$C$e=oT68D<%Cb*S+pB(OwJnG{tVlOjByW#ir+c)6YLGViN69(d%Z( zQ>%T>(^M3elt!GUGVerF61G{-v~uR-R@X6zT6>NKVNqBTmZM$vC!yu|dSE$UlWimK z0nD|g2R#%%5zY%2g+{1_Jy>o;$Hs1oQmB{5{cOv8k0$eeleII%XWE(+OtsZ97zdsz z@bg2V<+wuVHAO-SIFBe4Mp(g}PGJX*<&%mzR*jgAYRJs1fny*Hg^^I@#QwNT9G~uC zNyKOS#PzHtS3kfhFhq=JBvis!mr@VDJanw@>${JIsDoSe0j!ma_5rLp8#}@doklkMdm4K_tod{{SG)k? z;dTL>j(q2K$0xpkfxD^X-pw(t%R2`{9t>QyyRYMH{(X~v7i@{mb*-JtvmJakn^B&9 vQeC^E^323AYQVaw35u}^hm?tiBBNk2EY->&%Gh@5N_~K>!Zu+$u)+2ZZWQkS diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9c1be19..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x734: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x734: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(734.1dac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07ef7b10 edx=00003879 esi=12768f40 edi=0941efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.231657200000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.2499e-021 -1.91944e+037 4.48043e-024 1.44424e-029 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00376000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00376000 c093980b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00376000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_description.txt deleted file mode 100644 index 9c1be19..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x734: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x734: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(734.1dac): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07ef7b10 edx=00003879 esi=12768f40 edi=0941efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.231657200000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.2499e-021 -1.91944e+037 4.48043e-024 1.44424e-029 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00376000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00376000 c093980b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62c5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00376000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/29415/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 5962a074ed9744ab564e99331271f63e744d103e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4lVK+@-QO+^vF@CY%@~kiB4$h}epS2%=znm1wo&MNz>b5F5K- zECj(|X*U1XZLT1){5%8(Et8K0G?}?%wV7g^T;kf40ut_;vIBsc%!)YcD3Zw=TcF5H_Om zak^8TSb6hz`w3e=3yVaO|b@%s1 z;bZu9bn5>4&$C$e=oT68D<%Cb*S+pB(OwJnG{tVlOjByW#ir+c)6YLGViN69(d%Z( zQ>%T>(^M3elt!GUGVerF61G{-v~uR-R@X6zT6>NKVNqBTmZM$vC!yu|dSE$UlWimK z0nD|g2R#%%5zY%2g+{1_Jy>o;$Hs1oQmB{5{cOv8k0$eeleII%XWE(+OtsZ97zdsz z@bg2V<+wuVHAO-SIFBe4Mp(g}PGJX*<&%mzR*jgAYRJs1fny*Hg^^I@#QwNT9G~uC zNyKOS#PzHtS3kfhFhq=JBvis!mr@VDJanw@>${JIsDoSe0j!ma_5rLp8#}@doklkMdm4K_tod{{SG)k? z;dTL>j(q2K$0xpkfxD^X-pw(t%R2`{9t>QyyRYMH{(X~v7i@{mb*-JtvmJakn^B&9 vQeC^E^323AYQVaw35u}^hm?tiBBNk2EY->&%Gh@5N_~K>!Zu+$u)+2ZZWQkS diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3089/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 48c7986fce095969987920dfe94b102bb21aa58c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GOK1~87{|ZOhHemHlAB6#*F#0o~SR(u>(*lFSu6?&<7 zELAU_1@ShiSS<(zMWmM|+8#W3n4r*zrQ?6TnUp4=2k9i={N_L3V;;Lpl*6xFCJHP= zqOC-fBm|YGZ#kk}*RI#D%)NMddF=V@ku5(S@2`K@{Q1kr>E9do&HkEPys`7#&vl!Q zO`V>2|LXq2`t<3=;}dg_-aP1k)^~N`=!LK63-PD#hbtpH;_Bk9nUDq}a}=K}r=kUU3|)xcPf|OrqV& zJ6$O_O0mp&lJcGfArU93$UBjggbmgQYMObc*0Kzu+LC3?Gw)gOEJpL}PeQ}-1A*au zNv46k5twZi2fFEb*K^c!+*5f<&o&Gol)5xDuD&~RKXbebYh3OJ7_^o+2AJ)OV~EQ=civ)mgohkHY&?hPyh&(JgS6q?u{ zw}|7@B`k^fY?-*8F=XopI0c4?ag02LXY84JW}Xb>Z9~ZfHUJCAzhoHywMlrSBnEm6 zNht-|85G1H57Pm?-5b`T(*LyBbY^L4c1(2Xm;~I#m9?A}Ca_7(Qi;Qh#%QZi+NFEH zZo2Sxz7}4${p43$(R{FGX_dx9$NH|m{aA>axK$UxTG(h8z?!qMBka&>WV64mvFFvA zPiM5?1rQIn4d8U-Tem$v@db30R$-4&QBR}o~SR(u>(*lFSu6?&<7 zELAU_1@ShiSS<(zMWmM|+8#W3n4r*zrQ?6TnUp4=2k9i={N_L3V;;Lpl*6xFCJHP= zqOC-fBm|YGZ#kk}*RI#D%)NMddF=V@ku5(S@2`K@{Q1kr>E9do&HkEPys`7#&vl!Q zO`V>2|LXq2`t<3=;}dg_-aP1k)^~N`=!LK63-PD#hbtpH;_Bk9nUDq}a}=K}r=kUU3|)xcPf|OrqV& zJ6$O_O0mp&lJcGfArU93$UBjggbmgQYMObc*0Kzu+LC3?Gw)gOEJpL}PeQ}-1A*au zNv46k5twZi2fFEb*K^c!+*5f<&o&Gol)5xDuD&~RKXbebYh3OJ7_^o+2AJ)OV~EQ=civ)mgohkHY&?hPyh&(JgS6q?u{ zw}|7@B`k^fY?-*8F=XopI0c4?ag02LXY84JW}Xb>Z9~ZfHUJCAzhoHywMlrSBnEm6 zNht-|85G1H57Pm?-5b`T(*LyBbY^L4c1(2Xm;~I#m9?A}Ca_7(Qi;Qh#%QZi+NFEH zZo2Sxz7}4${p43$(R{FGX_dx9$NH|m{aA>axK$UxTG(h8z?!qMBka&>WV64mvFFvA zPiM5?1rQIn4d8U-Tem$v@db30R$-4&QBR}b>!3_K@AJkolBGj+}n{H6ZD1@bYq1==xBNPvET+Ptwx%61cvMQNPGGw&pd zz>eSP1T?mAl`npknJ;zBx2-%LR?;1ZH_+Adm2&_JCsYN&#nn|1JlyPv9Xh8w>I-Mj_dH%_ zDschzEW04=^n2N#j~KvaHc4waG`?tA(?~X>_Idqhu*={0X8JbcJei$!ytcRD((3pr rlf8?MxhL>KOhay-`n*3#ZVzo1q9=w|$y8;#4Sv)I@kLySE3u6q5qQNM diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 58c18ec..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B40: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B40: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b40.1c58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e57b10 edx=00003879 esi=ffdd0010 edi=0fc06fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.84297e+036 -0.000226134 -7.68579e-005 -1.90985e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00366000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00366000 2cb6d8a3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00366000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_description.txt deleted file mode 100644 index 58c18ec..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B40: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B40: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b40.1c58): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e57b10 edx=00003879 esi=ffdd0010 edi=0fc06fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.84297e+036 -0.000226134 -7.68579e-005 -1.90985e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00366000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00366000 2cb6d8a3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00366000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/32032/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c9bd8476e543b1123dd5a175e519f8fad690de1c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 690 zcmb_YF>b>!3_K@AJkolBGj+}n{H6ZD1@bYq1==xBNPvET+Ptwx%61cvMQNPGGw&pd zz>eSP1T?mAl`npknJ;zBx2-%LR?;1ZH_+Adm2&_JCsYN&#nn|1JlyPv9Xh8w>I-Mj_dH%_ zDschzEW04=^n2N#j~KvaHc4waG`?tA(?~X>_Idqhu*={0X8JbcJei$!ytcRD((3pr rlf8?MxhL>KOhay-`n*3#ZVzo1q9=w|$y8;#4Sv)I@kLySE3u6q5qQNM diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index fcc40aad6125718156f12f18a1e967c776797d57..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1683 zcmcJOy>8nu5XX;}V0xpxbud6pMMl4YoT+cnxsQ-H5bLyPyX6t`D0B+6W0vkQkfkHF zX$Zpp?|3p|173oZ_VLI6eeg>X(G0)!n#eFKqW479wggqv-x<+I_%7f>3VnhZ`tv`U z!PMtl&iQ=swGkUj<)S@ivnhIF8;VwjOY-cAm()e@c3XI}E&d-hoM>O`qPL5};GU%} zP_10JfV@DB>?BZI?L~jsCE>T-$TW8M#GEN>y;H=ttw$!8KzNIN~?5(kZ>NQ}#*$>i8pUVH=nseaSFB+X5mXkN`b~6k`P0g9-5`Y)F8f_lC7- z`I_eQaaE$>$Z?`QIfR?TT1C5TxM)}|CB4ZxvBuP;T;pjd=~I1js;4;VY6mR`8zE1rEKAU@+`d@C$cP{nO!{`b&cG1*6 fR&y8a+(rlUur9cWteE#5PxTY_8+H$SfStB~Bftx- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 658fde3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce0.1f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=000fed2d ecx=07ec7b10 edx=00003879 esi=ffb30010 edi=0fc02fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.07389e-017 -6.14522e+018 3.57577e-037 1.00975e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0030d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0030d000 58e383e1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0030d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_description.txt deleted file mode 100644 index 658fde3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1CE0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1CE0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1ce0.1f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=000fed2d ecx=07ec7b10 edx=00003879 esi=ffb30010 edi=0fc02fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-5.07389e-017 -6.14522e+018 3.57577e-037 1.00975e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0030d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0030d000 58e383e1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6294 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0030d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/3264/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index fcc40aad6125718156f12f18a1e967c776797d57..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1683 zcmcJOy>8nu5XX;}V0xpxbud6pMMl4YoT+cnxsQ-H5bLyPyX6t`D0B+6W0vkQkfkHF zX$Zpp?|3p|173oZ_VLI6eeg>X(G0)!n#eFKqW479wggqv-x<+I_%7f>3VnhZ`tv`U z!PMtl&iQ=swGkUj<)S@ivnhIF8;VwjOY-cAm()e@c3XI}E&d-hoM>O`qPL5};GU%} zP_10JfV@DB>?BZI?L~jsCE>T-$TW8M#GEN>y;H=ttw$!8KzNIN~?5(kZ>NQ}#*$>i8pUVH=nseaSFB+X5mXkN`b~6k`P0g9-5`Y)F8f_lC7- z`I_eQaaE$>$Z?`QIfR?TT1C5TxM)}|CB4ZxvBuP;T;pjd=~I1js;4;VY6mR`8zE1rEKAU@+`d@C$cP{nO!{`b&cG1*6 fR&y8a+(rlUur9cWteE#5PxTY_8+H$SfStB~Bftx- diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d06cf59fae747b8fc8ee1131d06a11ad88f1187c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 673 zcmb_YF>b>!3_K@6JkolBG8G;31OKA$=nq^VA5&YP9rJ_)=+cqeys<~gb`wt>O5mh_UG3DuVxdp%EjZ0=4D$pt5N&B{xjI+Z+vn4I^i^$opiXg x*Z$n<@FAnUi4G|ecqYa^HM^L$dr9rSO+rMXf00C2vTN_9-ic4*Ok9X{`~WnUy7~YB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 645e2e4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x17A0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x17A0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(17a0.1fb0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e97b10 edx=00003879 esi=ffdd0010 edi=0fc3cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.42775e-035 1.853e-010 -2.15672e-028 3.68682e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028b000 a51b0824 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_description.txt deleted file mode 100644 index 645e2e4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x17A0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x17A0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(17a0.1fb0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e97b10 edx=00003879 esi=ffdd0010 edi=0fc3cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.42775e-035 1.853e-010 -2.15672e-028 3.68682e-010 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028b000 a51b0824 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/34574/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d06cf59fae747b8fc8ee1131d06a11ad88f1187c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 673 zcmb_YF>b>!3_K@6JkolBG8G;31OKA$=nq^VA5&YP9rJ_)=+cqeys<~gb`wt>O5mh_UG3DuVxdp%EjZ0=4D$pt5N&B{xjI+Z+vn4I^i^$opiXg x*Z$n<@FAnUi4G|ecqYa^HM^L$dr9rSO+rMXf00C2vTN_9-ic4*Ok9X{`~WnUy7~YB diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 238e1ff733396b2850b12111eeaed1f716917341..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 230 zcmZQzU;;t|0|o|05Y5cMpvJ(!prF720EmCsA7EsWKfuh!e}J8h{Qy4@%LB1}1OEY_ YsssNY*n^BZ48+HQ_&gBb2V!&p06?8#VE_OC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 0990e75..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xE50: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xE50: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(e50.ce0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e87b10 edx=00003879 esi=ffdd0010 edi=0f6c2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.69098e+031 -1123.44 -1.5599e+024 -4.79373e-022 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002fa000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002fa000 b24caa90 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629d 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002fa000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_description.txt deleted file mode 100644 index 0990e75..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xE50: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xE50: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(e50.ce0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e87b10 edx=00003879 esi=ffdd0010 edi=0f6c2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.726973302933177440000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.69098e+031 -1123.44 -1.5599e+024 -4.79373e-022 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f68130 07ee5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002fa000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002fa000 b24caa90 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629d 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002fa000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35711/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 238e1ff733396b2850b12111eeaed1f716917341..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 230 zcmZQzU;;t|0|o|05Y5cMpvJ(!prF720EmCsA7EsWKfuh!e}J8h{Qy4@%LB1}1OEY_ YsssNY*n^BZ48+HQ_&gBb2V!&p06?8#VE_OC diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8a9619cdc429fd18e203eb9a930a7a7bbf7d2339..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@#6DxeW?I0(+GNYyw6t_fo}5k$_?>Y=l%|ENrvmC1MnWU}Iqu z1sel`1R+hxTmmWx#wK-60+L49laL$|Zv4-icOiF>MlyGAe)FIAF(122RKRa|m?&@z ziOv&Ir9x0e+9?p-#N5!C*Zu1GqaCw;ZRLh~@nh`m-|?mEpYD9zoL=akU)^6`8PfaT zzMp+_`N8kq`*vb>Z}rsG$t&+J{rYqJ!q@fo2R;2NUQ2F`#}7vamhbH@Uflfo{^iod z-My95W^uAzof{iDhjou_k@2olrJLod*Bw^0*Frr?iJLK_lp1iM<~d*U^UsQyM0-;7 zx>oYks?B+tio%l8h|^T&ooK3r4c24zocXlgatxySfnz~f6qbbLXq)|&&~kh=u$-^S zHjwui=332zW`%RYdEtW42(_>S%Z=#7*h*0f_41^f4VmxIWZrMGMuzxITa$vRwmJcm zz*7Z&zAv;KR|vhPNJs(a5rx7CE4b4s?7*=+pqRsh5p!xVWafi`V;~HLkx=Et{-i}5 zpB`XI#Aj{dde)MwAK(-iBE~ZkDq$i_g_)3nydjjVz^br-64+JWLPtZf{tN;{R!h?as=n*)`Fl6H;)O57+Wq*}x?=?tz5JZV9nXs5q9V_vf1C!*z-}%r?a`@ z1rQIn3*dC*JGVPN@dfnUO`Ll-$G9$U9u9fXbJgy?PO|y;P5N!HE;iG$b|%lZ@Y!rc xdG=Yg?3&6mlfY;S)=EuKOib9POw<<{1xsM5Rt8bVHd0q=9rgvb0o#K0wtq~m_HY0I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 753f8f4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x3C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x3C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(3c8.1a38): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07ea7b10 edx=00003879 esi=12768f40 edi=0f6d4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.14604e+008 -1.06635e-028 -4.15529e+007 -0.000126988 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d8000 a24c799b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62af 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_description.txt deleted file mode 100644 index 753f8f4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x3C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x3C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(3c8.1a38): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07ea7b10 edx=00003879 esi=12768f40 edi=0f6d4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.14604e+008 -1.06635e-028 -4.15529e+007 -0.000126988 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003d8000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003d8000 a24c799b 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62af 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003d8000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/35877/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8a9619cdc429fd18e203eb9a930a7a7bbf7d2339..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@#6DxeW?I0(+GNYyw6t_fo}5k$_?>Y=l%|ENrvmC1MnWU}Iqu z1sel`1R+hxTmmWx#wK-60+L49laL$|Zv4-icOiF>MlyGAe)FIAF(122RKRa|m?&@z ziOv&Ir9x0e+9?p-#N5!C*Zu1GqaCw;ZRLh~@nh`m-|?mEpYD9zoL=akU)^6`8PfaT zzMp+_`N8kq`*vb>Z}rsG$t&+J{rYqJ!q@fo2R;2NUQ2F`#}7vamhbH@Uflfo{^iod z-My95W^uAzof{iDhjou_k@2olrJLod*Bw^0*Frr?iJLK_lp1iM<~d*U^UsQyM0-;7 zx>oYks?B+tio%l8h|^T&ooK3r4c24zocXlgatxySfnz~f6qbbLXq)|&&~kh=u$-^S zHjwui=332zW`%RYdEtW42(_>S%Z=#7*h*0f_41^f4VmxIWZrMGMuzxITa$vRwmJcm zz*7Z&zAv;KR|vhPNJs(a5rx7CE4b4s?7*=+pqRsh5p!xVWafi`V;~HLkx=Et{-i}5 zpB`XI#Aj{dde)MwAK(-iBE~ZkDq$i_g_)3nydjjVz^br-64+JWLPtZf{tN;{R!h?as=n*)`Fl6H;)O57+Wq*}x?=?tz5JZV9nXs5q9V_vf1C!*z-}%r?a`@ z1rQIn3*dC*JGVPN@dfnUO`Ll-$G9$U9u9fXbJgy?PO|y;P5N!HE;iG$b|%lZ@Y!rc xdG=Yg?3&6mlfY;S)=EuKOib9POw<<{1xsM5Rt8bVHd0q=9rgvb0o#K0wtq~m_HY0I diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 997f27d65834584d7d129f0bb9275156f90c6968..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edJ+g-ub0>l#f!!d6Scu7Aut`7!5fp@=Aex|sl>|fxBJ6lE_*EFt zGD0MUwjwBM;avOz5dz^FQOHROQ&`Mdm@UGM&%84iatAh&xqIg~&-*c7yGvBSZ*Y(( zundX%i6}`3sz_@EqA~ae;6n z`MB@M^Ygo|eqFwF_Q8q9a&YnP=|?}FKKt`)ZtBXn)tUPf6F=7$M|OM|9T@sPu&@3$ zf7seHR6lh6%(2(I`wo77b$I;vg;Q9lyG6=*N=YZn!%nxENT)sJ2*uW;MkrO_eARKb z>il<#aH7o=ovxM~rD$=Tq@rg@NaRT>^G+lsVT1M2nr7ar<(5HI+psKn7ClRz5LY<0P+#G30#hP8@9(MzJRW~sc0AG9NX#U=8y+nS8eZWJDYpoe7_3T zyiMoEOzUg~pUqOFvyUP-i$Z5AhS4M}PgPKiRoEj`)DtNIi(#o03R%iDQajZ<*eBQ$ JYz5Zc{sKq|_bvbc diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5b057fa..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D74: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D74: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d74.1a54): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f47b10 edx=00003879 esi=fce30010 edi=0f80cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.60997e-027 -9.84549e+021 178.868 -2.99452e-005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0029f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0029f000 a6c6d3fa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0029f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_description.txt deleted file mode 100644 index 5b057fa..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1D74: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1D74: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1d74.1a54): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f47b10 edx=00003879 esi=fce30010 edi=0f80cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.60997e-027 -9.84549e+021 178.868 -2.99452e-005 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0029f000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0029f000 a6c6d3fa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0029f000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/38066/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 997f27d65834584d7d129f0bb9275156f90c6968..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edJ+g-ub0>l#f!!d6Scu7Aut`7!5fp@=Aex|sl>|fxBJ6lE_*EFt zGD0MUwjwBM;avOz5dz^FQOHROQ&`Mdm@UGM&%84iatAh&xqIg~&-*c7yGvBSZ*Y(( zundX%i6}`3sz_@EqA~ae;6n z`MB@M^Ygo|eqFwF_Q8q9a&YnP=|?}FKKt`)ZtBXn)tUPf6F=7$M|OM|9T@sPu&@3$ zf7seHR6lh6%(2(I`wo77b$I;vg;Q9lyG6=*N=YZn!%nxENT)sJ2*uW;MkrO_eARKb z>il<#aH7o=ovxM~rD$=Tq@rg@NaRT>^G+lsVT1M2nr7ar<(5HI+psKn7ClRz5LY<0P+#G30#hP8@9(MzJRW~sc0AG9NX#U=8y+nS8eZWJDYpoe7_3T zyiMoEOzUg~pUqOFvyUP-i$Z5AhS4M}PgPKiRoEj`)DtNIi(#o03R%iDQajZ<*eBQ$ JYz5Zc{sKq|_bvbc diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bd3426e5f8361577b2c99c9a13a6cb64f6cc4c8b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!=#}7{{NzJ#J4d=B|+-f!$b$g+=VF+>4E1VH1c77AG2P6e4yuJGn%BYl5Yq zgdBbVF^v+;oJx#E$QOv@AWbUS6@)`V#{WF?T*w`0A(^{pe)FH_WnOldsD$76I8opj z5}hWZBq69W?Usn9LR!9kj@rN1){mW>THagP-TFS({CR3)CfZ-V_4e1*)yo_0=ErA0 zP9)8-_1Epm`PR$m!PcAfnwtC2e0RP3s`vcG((F|A?zgtOar6Gl>g4pr;_S%r>Gu~Z zExOaV^6=jIFH2bUA1yN8Sxp96Yk1vfqP-UC35wl}nV{5wi!INEmY;uG#w6OKve&Ju zr&jx%r>QKgDvdZzHQtG)Bg+j|gk@n>Sc`VppM;j<8-e9~O}2}? zS(s}r51JP~5iST9g+{1_eOPWpN5)=?QmB{5gY3$DpCa$G6&nj#?uoJSN2Bdp*~r?3OZ+K6I~k4DUy(U6&s29AL+6h=ao6Z_*HaeTUm zB@v(P6W6nrT>Sv2zz{K>kx&U^VJggo4CI|b$pqGb1tc#S#(!-Z9<7Oi9z!z5fNll_ z@yEmTK=1a3wW$6-Ew+PMITZsFLpmk}ckN&;uaym4Qceo|za%Gq7H2f^uxaiZW3pG71*MQmqW4jP0hb)MwaN*d}ZnHr)OI5jyg( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9b0b8dd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1618: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1618: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1618.143c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07f37b10 edx=00003879 esi=cfe30010 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.13089e+023 5.23556e+008 -1.16365e+024 -7.51305e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00266000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00266000 20d0ad20 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00266000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_description.txt deleted file mode 100644 index 9b0b8dd..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1618: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1618: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1618.143c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0fffed2d ecx=07f37b10 edx=00003879 esi=cfe30010 edi=0fd18fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-3.13089e+023 5.23556e+008 -1.16365e+024 -7.51305e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00266000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00266000 20d0ad20 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b2 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00266000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42799/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bd3426e5f8361577b2c99c9a13a6cb64f6cc4c8b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!=#}7{{NzJ#J4d=B|+-f!$b$g+=VF+>4E1VH1c77AG2P6e4yuJGn%BYl5Yq zgdBbVF^v+;oJx#E$QOv@AWbUS6@)`V#{WF?T*w`0A(^{pe)FH_WnOldsD$76I8opj z5}hWZBq69W?Usn9LR!9kj@rN1){mW>THagP-TFS({CR3)CfZ-V_4e1*)yo_0=ErA0 zP9)8-_1Epm`PR$m!PcAfnwtC2e0RP3s`vcG((F|A?zgtOar6Gl>g4pr;_S%r>Gu~Z zExOaV^6=jIFH2bUA1yN8Sxp96Yk1vfqP-UC35wl}nV{5wi!INEmY;uG#w6OKve&Ju zr&jx%r>QKgDvdZzHQtG)Bg+j|gk@n>Sc`VppM;j<8-e9~O}2}? zS(s}r51JP~5iST9g+{1_eOPWpN5)=?QmB{5gY3$DpCa$G6&nj#?uoJSN2Bdp*~r?3OZ+K6I~k4DUy(U6&s29AL+6h=ao6Z_*HaeTUm zB@v(P6W6nrT>Sv2zz{K>kx&U^VJggo4CI|b$pqGb1tc#S#(!-Z9<7Oi9z!z5fNll_ z@yEmTK=1a3wW$6-Ew+PMITZsFLpmk}ckN&;uaym4Qceo|za%Gq7H2f^uxaiZW3pG71*MQmqW4jP0hb)MwaN*d}ZnHr)OI5jyg( diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index cb630bcca192389de30c16cca03a0b8f2bdaf903..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 313 zcmb7+I}XAy5JV>*#pTK;a4JNZ8~7HSgButr7h6DrGDk=x8cNf-GZTrzNyn_7Rx`6& zpymt%P_4TG4gmTdbS>UBaAJ037V)vAqLj|sxUFs8)^=C#+P`fs^`g1{7*oz;46|AM rWMX(o$~TEY9l@C-uT|@`=|oLuREQ(~BFZbxi(g;e$&*ZECVPDWpqp&T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5fd9fd7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCB4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCB4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(cb4.74c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e67b10 edx=00003879 esi=ffdd0010 edi=0f6c2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.0596261 27.8754 3.51782e-008 58023.1 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032a000 4a8e11c3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_description.txt deleted file mode 100644 index 5fd9fd7..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xCB4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xCB4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(cb4.74c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e67b10 edx=00003879 esi=ffdd0010 edi=0f6c2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.0596261 27.8754 3.51782e-008 58023.1 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0032a000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0032a000 4a8e11c3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b9 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0032a000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42935/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index cb630bcca192389de30c16cca03a0b8f2bdaf903..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 313 zcmb7+I}XAy5JV>*#pTK;a4JNZ8~7HSgButr7h6DrGDk=x8cNf-GZTrzNyn_7Rx`6& zpymt%P_4TG4gmTdbS>UBaAJ037V)vAqLj|sxUFs8)^=C#+P`fs^`g1{7*oz;46|AM rWMX(o$~TEY9l@C-uT|@`=|oLuREQ(~BFZbxi(g;e$&*ZECVPDWpqp&T diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e6960968fb4c750f4ecf2ffca861d5802d49b858..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@#6DxwEo3+!G{N<}YwBL{N#X5kV|sB_au;AV}QF#gN3t^cDsJ zHpX9th>greh`}bQZE})A5sNt?aDc?h+O78yFypJY%AM zBC6F0sz~1pL?iH>h7T$9CV9Vp$9#GG;q8!J9=oD0kEJWu7w;c=GE|+2X{3H_^3{v& z-!Hemj!fK`dpGgu)VFr4acuqW$zUygzwR;=~bV>^0^4?lOD;N2qcBR7UW#_Edm^ze8+_pn{ zx85qz-8ji=dzuf{uI$rz=vY6@?>`ozHf}W}uvR`hB(Uac>T= zcmd=i>=U>g^*-#6PkaFf?xtcxm~(t*+j~PE9Jp$KUx(Sk`zHM+*c6-UI5%bU4SY6h yiOpA3$1N+Hn-oUluuf*8Vrt?(Ws<(cC|C;1v@*ytu9f+zKEgi1)?gd3gY6H(w)Bet diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 67708c8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1A54: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1A54: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1a54.1474): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=03ffed2d ecx=07ec7b10 edx=00003879 esi=f3e30010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 5.319505000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.95689e-016 -3.08892e+008 1.43673e+032 9.71226 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028b000 7485bf4e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_description.txt deleted file mode 100644 index 67708c8..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1A54: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1A54: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1a54.1474): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=03ffed2d ecx=07ec7b10 edx=00003879 esi=f3e30010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.738232302004225120000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 5.319505000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.95689e-016 -3.08892e+008 1.43673e+032 9.71226 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fa8130 07f25930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0028b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0028b000 7485bf4e 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0028b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/42944/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e6960968fb4c750f4ecf2ffca861d5802d49b858..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@#6DxwEo3+!G{N<}YwBL{N#X5kV|sB_au;AV}QF#gN3t^cDsJ zHpX9th>greh`}bQZE})A5sNt?aDc?h+O78yFypJY%AM zBC6F0sz~1pL?iH>h7T$9CV9Vp$9#GG;q8!J9=oD0kEJWu7w;c=GE|+2X{3H_^3{v& z-!Hemj!fK`dpGgu)VFr4acuqW$zUygzwR;=~bV>^0^4?lOD;N2qcBR7UW#_Edm^ze8+_pn{ zx85qz-8ji=dzuf{uI$rz=vY6@?>`ozHf}W}uvR`hB(Uac>T= zcmd=i>=U>g^*-#6PkaFf?xtcxm~(t*+j~PE9Jp$KUx(Sk`zHM+*c6-UI5%bU4SY6h yiOpA3$1N+Hn-oUluuf*8Vrt?(Ws<(cC|C;1v@*ytu9f+zKEgi1)?gd3gY6H(w)Bet diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f7b5af65e7f55a4572abb91484871eb1f4255b3c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 294 zcmbu%u?@m75CzchB#KMR6F3#3%m&_qni1H*NLlOv3CfI+NHmmA=gxdf6joZ!diMR( z$w0$1j({p}3mgCp1DHB|8sNm)ku$E~ObXW8xbdngSAA)>UH&uXy50=8pDE=$#jxnr r&pL*uN%?MK5J$LB@}fE?ZEr;PS`0bzS0mh#y!!IhgI+Y#Li_pxZir~& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 15eb071..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bbb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1600.1b88): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f47b10 edx=00003879 esi=ffdd0010 edi=07d52fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.209682 -8.59939e+012 1.56848e+015 4.05108e+036 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00273000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00273000 a099fb07 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00273000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_description.txt deleted file mode 100644 index 15eb071..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1600: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bbb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1600.1b88): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f47b10 edx=00003879 esi=ffdd0010 edi=07d52fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272811000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.209682 -8.59939e+012 1.56848e+015 4.05108e+036 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08028130 07fa5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00273000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00273000 a099fb07 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a8 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00273000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/43368/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f7b5af65e7f55a4572abb91484871eb1f4255b3c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 294 zcmbu%u?@m75CzchB#KMR6F3#3%m&_qni1H*NLlOv3CfI+NHmmA=gxdf6joZ!diMR( z$w0$1j({p}3mgCp1DHB|8sNm)ku$E~ObXW8xbdngSAA)>UH&uXy50=8pDE=$#jxnr r&pL*uN%?MK5J$LB@}fE?ZEr;PS`0bzS0mh#y!!IhgI+Y#Li_pxZir~& diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8d102c9931e388787e42935806458ccdb57f894a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA(F4-%DxwDB#WH%ZmAVM0&M)#tEg^Jo(DX3T|5{NMfLSQEsKQB#e zQV2pUB8a{9oT63|5G(>h4$@eKxyma-#{ayT3%LUu$=tp9&HsJO*X|OP@EaQ=5{?nk z5hBVmf{N*PiRc=9qwpbxZo&jT7(8)(_3F&QSF;<7&t6|VaC-Xf!{myJj&2-!)HpYM z{MN+a_x<-woYiN}mM5Z-+Ul9Z_dk3*_4Cc2jgk2~m!>XXSgtP5tWP%{pDfQGyL;nD zv^Y9-`~5FDytnai;oX-~V-FVE*%IwlIqPMm=5?2u@;XqBQ|df=oN^5=)jb#L-v2U& z6YXj2b-nDV&iF zuw1Xmwoo?AE(9(G>Od9Ph2=)HYwYBh3iFw?m#yIMQWrk1i&laBLRp=I zxw0w+Q{gFv_YXvt^GcD|lmwFCI-)2r!3yql5<76L?32u~p@ca(6fw<^a1?=2U=k<| zaXjr1=jWSP68Xgz@qE^jn_u7*7$V0r36z0pU>;ZmGEnEfmkd^e2?{S6#{X;z5v7QM z9z)VvgU*8q@yEmTK=1a3wW#_(Ew#N>hT1)jKAn<8xU#*L*U}1C)UH-Jy<)9#8dLl7 z5I1d~-mNz>=x&_CYTKF*)~@c*c<5N)&+k4KqBd^TC$N?-+b6K*YU~I*bQ;wh?`rIM zr{>dHBY6SjBkU5m9Q7{jj!%36eRoqeKFm3;Gwtmm5Bjd!-Pdk5|GtHO9c%`h>sUKy ziZy&TD~Tz-%8vacO`%g5O~N|47ICVh0jZOLL`zr-%azo~(zcbmsXoKL!B${vu>STJ Dn)>R| diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index dd484dc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xDD4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xDD4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(dd4.1f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f67b10 edx=00003879 esi=ffdd0010 edi=0fc6efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.766379799681844320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.953578600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.01517e+032 2.60919e+010 -5.68867e-011 1.32178e+032 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08048130 07fc5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00369000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00369000 830b876d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00369000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_description.txt deleted file mode 100644 index dd484dc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xDD4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xDD4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(dd4.1f48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07f67b10 edx=00003879 esi=ffdd0010 edi=0fc6efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.766379799681844320000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 4.953578600000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.01517e+032 2.60919e+010 -5.68867e-011 1.32178e+032 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08048130 07fc5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00369000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00369000 830b876d 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bb 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00369000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/44546/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8d102c9931e388787e42935806458ccdb57f894a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA(F4-%DxwDB#WH%ZmAVM0&M)#tEg^Jo(DX3T|5{NMfLSQEsKQB#e zQV2pUB8a{9oT63|5G(>h4$@eKxyma-#{ayT3%LUu$=tp9&HsJO*X|OP@EaQ=5{?nk z5hBVmf{N*PiRc=9qwpbxZo&jT7(8)(_3F&QSF;<7&t6|VaC-Xf!{myJj&2-!)HpYM z{MN+a_x<-woYiN}mM5Z-+Ul9Z_dk3*_4Cc2jgk2~m!>XXSgtP5tWP%{pDfQGyL;nD zv^Y9-`~5FDytnai;oX-~V-FVE*%IwlIqPMm=5?2u@;XqBQ|df=oN^5=)jb#L-v2U& z6YXj2b-nDV&iF zuw1Xmwoo?AE(9(G>Od9Ph2=)HYwYBh3iFw?m#yIMQWrk1i&laBLRp=I zxw0w+Q{gFv_YXvt^GcD|lmwFCI-)2r!3yql5<76L?32u~p@ca(6fw<^a1?=2U=k<| zaXjr1=jWSP68Xgz@qE^jn_u7*7$V0r36z0pU>;ZmGEnEfmkd^e2?{S6#{X;z5v7QM z9z)VvgU*8q@yEmTK=1a3wW#_(Ew#N>hT1)jKAn<8xU#*L*U}1C)UH-Jy<)9#8dLl7 z5I1d~-mNz>=x&_CYTKF*)~@c*c<5N)&+k4KqBd^TC$N?-+b6K*YU~I*bQ;wh?`rIM zr{>dHBY6SjBkU5m9Q7{jj!%36eRoqeKFm3;Gwtmm5Bjd!-Pdk5|GtHO9c%`h>sUKy ziZy&TD~Tz-%8vacO`%g5O~N|47ICVh0jZOLL`zr-%azo~(zcbmsXoKL!B${vu>STJ Dn)>R| diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/45480/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a826fe34c7f22ce3799d07e77b1dc9b98e434fcc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1732 zcmb`GO=uHA6vy9YLpOME65E26%B~3FMW}f2B5r$7FCL{xt60B4Z$&|iAUmclS}*oc zyhx?cgOZCLm4ZwZt0$|_gIJ+~Xs|_OBU&S*9sl!@(gf_Gbdoo}`OkZA=FRLbQ3Ah? z4kAavDUsX(4CM{EzX|JgLfh%=xO$VJR%RWes=+`Y~)8E1_90_Ul=&^EHad_(fER@ESy1iVzIB zGh-}wZ4N>V2Bt)&yrdCmZ4>2sewH8y#%mMm_zm@!}!0A!^1gg zpvRDe5TKgDg7^~((m=0j!(NoxNb_ZVR!rr(i3aTxgFC&tm(ff*Dyf{w=%D zq+5SnHsQ7Wm|0!(lih7q>w}duYcw7@_BZRRkAvDUsX(4CM{EzX|JgLfh%=xO$VJR%RWes=+`Y~)8E1_90_Ul=&^EHad_(fER@ESy1iVzIB zGh-}wZ4N>V2Bt)&yrdCmZ4>2sewH8y#%mMm_zm@!}!0A!^1gg zpvRDe5TKgDg7^~((m=0j!(NoxNb_ZVR!rr(i3aTxgFC&tm(ff*Dyf{w=%D zq+5SnHsQ7Wm|0!(lih7q>w}duYcw7@_BZRRkAhR=)3*}QJm$ve!Adq+kB3@oZzi@EE^L@%v^0BhbZF9!5 zw&&NbzHCiyKKhA8|J5Sny_K||)hVxgOtsfSJxz(5G1HV8aJBBaT=(<$%9uo3Dtle8 zcxtuBd78??iqeSFROOv$O2anmnP$Pf)9gA1QFGU^BrFRn!fLd`{xq~4KNVQc*JRts zy9slx?m@SNcZJKsRiP1TVGouY(V?-Mp%m&BNk7{%-=oRB-{kEa@wv7p12b)P0w#f{ z3jF+VXgRJFdQFj#0?s1}g%MV8r&HL0V|7F^$7>ODu@*9mTHqK6Lt!LT1+hQr631t| zSQ7F19&tTu$<+^V3JekB83~mz5oW?%$Uxp0N~W+WSU~cUVf@#o;nA8H=rJT?4CrQ1 z5Pv*O5A<$tSc~HSX^HL6DyY*pF`yGta98)&@>iU7PNTF>7k|<5;l2Dq ziSGGHR@>KnuugnH=6!4`8iav=3m-+1L?w=rpp~-_zLhLCvSLh2jMe z54Q{8bmTj?J3jFR4BSmzcsIwmuITI!c`$I*?!FGQ`S(rw9k40Z=vvz-@)kaut*FR1 vRoAYoA~y+)7Gd4Y1m(np!^%X%kx{S&mT6@WWo$chr8Z!1VOy{kY_RhR=)3*}QJm$ve!Adq+kB3@oZzi@EE^L@%v^0BhbZF9!5 zw&&NbzHCiyKKhA8|J5Sny_K||)hVxgOtsfSJxz(5G1HV8aJBBaT=(<$%9uo3Dtle8 zcxtuBd78??iqeSFROOv$O2anmnP$Pf)9gA1QFGU^BrFRn!fLd`{xq~4KNVQc*JRts zy9slx?m@SNcZJKsRiP1TVGouY(V?-Mp%m&BNk7{%-=oRB-{kEa@wv7p12b)P0w#f{ z3jF+VXgRJFdQFj#0?s1}g%MV8r&HL0V|7F^$7>ODu@*9mTHqK6Lt!LT1+hQr631t| zSQ7F19&tTu$<+^V3JekB83~mz5oW?%$Uxp0N~W+WSU~cUVf@#o;nA8H=rJT?4CrQ1 z5Pv*O5A<$tSc~HSX^HL6DyY*pF`yGta98)&@>iU7PNTF>7k|<5;l2Dq ziSGGHR@>KnuugnH=6!4`8iav=3m-+1L?w=rpp~-_zLhLCvSLh2jMe z54Q{8bmTj?J3jFR4BSmzcsIwmuITI!c`$I*?!FGQ`S(rw9k40Z=vvz-@)kaut*FR1 vRoAYoA~y+)7Gd4Y1m(np!^%X%kx{S&mT6@WWo$chr8Z!1VOy{kY_RDoQs#$E|a=jT4Yy;=M5d<*OJv`9HwPI_4xa=ObzI_)WkDYhOpOsN7F>W*`D=f7Ws z6K$sGbiM2-#Xi?bDteZMM4qGy??h4(wpoufHS=DxV;MxvJkx^OdEAmFx%=5bk}p%bIxoO_3)BTt^goMp(g~PGAR?m1BZAI1n*w10hon1eSqk=oxtm zO&pIq#QEtSmPCHGPduM7WakfX3Jj6s76XK7D>44tu4Qo;Le_CvMt2E_3jy@feK)7?eU2(pzm&~+J!mCb~-;8@}Tdk?R_0(bMKq)H^8R1>5ehe zI$OtQ(~5MqCOYPw(3y&1RD*R=6%=C?mV}B*krJ>NmP(STJ D1*ZE; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 7992fbb..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1234: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1234: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1234.167c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f37b10 edx=00003879 esi=fce30010 edi=07d60fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.040999700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.46716e-010 3.86889e-007 -3.93392e+008 0.80813 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00355000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00355000 926e44df 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00355000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_description.txt deleted file mode 100644 index 7992fbb..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1234: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1234: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`749c0000 00000000`749dd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743b0000 00000000`749b4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1234.167c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f37b10 edx=00003879 esi=fce30010 edi=07d60fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.757935550378558560000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.040999700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.46716e-010 3.86889e-007 -3.93392e+008 0.80813 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08018130 07f95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00355000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00355000 926e44df 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62bd 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00355000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/47308/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index c26ec41192bb7e155ee0359eeef2f08a780e00cd..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy-yTD7{=edz1&_mcbx@sHx_EFs7$nQp`tPd3lfbQ;y=I@CRVt^ArWIC5epM7 z(8dBoNugdcr+}5YN@FFbfFW2oYbdTj#%JD{Bito6hPiv^H_!VqU%N|Gz;AGnD6kBP zP7+a)5LA)23q)h^orVu7G!6?^zr0?)q^FMGdc3ssWO?Vxoogd6Cw|S2es7)qwDD*$ zAHQC>DoQs#$E|a=jT4Yy;=M5d<*OJv`9HwPI_4xa=ObzI_)WkDYhOpOsN7F>W*`D=f7Ws z6K$sGbiM2-#Xi?bDteZMM4qGy??h4(wpoufHS=DxV;MxvJkx^OdEAmFx%=5bk}p%bIxoO_3)BTt^goMp(g~PGAR?m1BZAI1n*w10hon1eSqk=oxtm zO&pIq#QEtSmPCHGPduM7WakfX3Jj6s76XK7D>44tu4Qo;Le_CvMt2E_3jy@feK)7?eU2(pzm&~+J!mCb~-;8@}Tdk?R_0(bMKq)H^8R1>5ehe zI$OtQ(~5MqCOYPw(3y&1RD*R=6%=C?mV}B*krJ>NmP(STJ D1*ZE; diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/491/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 20cf21eeeca150a6c39d1c3737b7c5c0e7bc3a13..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1687 zcmb`GKWG#|6vp4)p4qdIxdTCk$SxMaMvP4m3pcS)(89`KY*f@rgjlQD@nZbbMS>{U z1jH_&V4;#`E~0{kDMUz@gCJPR9HclfWc=pMyO29DMabN}`OP=)y?HaUyF?}Y1_y~E z&zNX{h_a06)YSv87M{Mi^KfWj>D`_iFKtvh^!eHGj~AZ5S^abK-u3zAxux?zMkXir zoj&sR{n-<@?WJ?KevZyxT=}&+^3!iv&}(^Tc1Xv*Ry>oX0@eAH-rMoDAMvm`7FE5d5B!u~9F z96ua6&e!Cc$h!~otsX!RgpY;O!damaYGDU>2K*RyjO{$EXVY#rWxhjG1ivYo1zv+f zJClRCb~**qC{RUVzAtthSBitCL`V_m5yip;75wQGcHmjvub6}V33I$ZX4?M9GZMza zM5rvWKW!7o=W8g5_+p)SJ?F@;AK?@jA|@~qDq$+jg@urTJpa99uwht4@{(cv-=^Ww zni%LYBx4NdXRsjtgbgv!`@NwS)wa`8*PUgl)iu$hQ&MnOH);i~T;!8lwHk+4owHtJ z>5wjd+X~^Ge5*uv{3O*jG#{*0+obW(Q9rEjKNg}EZZ!n3Rz5leu;y&+2s`u|+3fFV z?0K{1(>bfS0OH~H0i2F}@Ak(hzJQ*)soCJ>7~k2}#*ha+SMBd>CtG;mq+bCWVv}v> zCT+2d&t@^P#TV6f3(6KIh0!>yotvnfnz&Dyq%ScFmcnwa45Ex{=6{U z1jH_&V4;#`E~0{kDMUz@gCJPR9HclfWc=pMyO29DMabN}`OP=)y?HaUyF?}Y1_y~E z&zNX{h_a06)YSv87M{Mi^KfWj>D`_iFKtvh^!eHGj~AZ5S^abK-u3zAxux?zMkXir zoj&sR{n-<@?WJ?KevZyxT=}&+^3!iv&}(^Tc1Xv*Ry>oX0@eAH-rMoDAMvm`7FE5d5B!u~9F z96ua6&e!Cc$h!~otsX!RgpY;O!damaYGDU>2K*RyjO{$EXVY#rWxhjG1ivYo1zv+f zJClRCb~**qC{RUVzAtthSBitCL`V_m5yip;75wQGcHmjvub6}V33I$ZX4?M9GZMza zM5rvWKW!7o=W8g5_+p)SJ?F@;AK?@jA|@~qDq$+jg@urTJpa99uwht4@{(cv-=^Ww zni%LYBx4NdXRsjtgbgv!`@NwS)wa`8*PUgl)iu$hQ&MnOH);i~T;!8lwHk+4owHtJ z>5wjd+X~^Ge5*uv{3O*jG#{*0+obW(Q9rEjKNg}EZZ!n3Rz5leu;y&+2s`u|+3fFV z?0K{1(>bfS0OH~H0i2F}@Ak(hzJQ*)soCJ>7~k2}#*ha+SMBd>CtG;mq+bCWVv}v> zCT+2d&t@^P#TV6f3(6KIh0!>yotvnfnz&Dyq%ScFmcnwa45Ex{=6&qvvP6@U26sGXIu7wb;3*RhOxKuZ(H(Ab; z9$4F?g?5ij^te509C*A)JX$3Gha66{w|UZwNut%4TxTg4PP9dyrIL4Ism@lcA1^)g z-Lj8V#quI@B+P{qVOgAWyv_pW&sE@hOJRk&*Ra?Y3G_zzUU(!t7CNC74!|?u$8c-x zn>3#{n_P*1plegywW}7dL2H9+z{Un^K%)}1O8#*cIB%3CO@)vY*AZpH0xQJRY3v}f zyr-G7X~8_0W=ua-kxG~e3!(PJanlp$Hy2nE`Ryg~d?8SrU*QxOA}6sBYM~J}!dA#Y z9X=$gVRM)wdC4&TZ?lM4OAPcFl5-A>9!!WoVM7e`ac@|Qs+%+uHmf{!8;&h)NF!XX z*GgIk6^pv6;`A~EA2p^<QfAK77}{bp}QUu)c9BH!d4%SBwj%VFuP%?U3cd Rs)&qvvP6@U26sGXIu7wb;3*RhOxKuZ(H(Ab; z9$4F?g?5ij^te509C*A)JX$3Gha66{w|UZwNut%4TxTg4PP9dyrIL4Ism@lcA1^)g z-Lj8V#quI@B+P{qVOgAWyv_pW&sE@hOJRk&*Ra?Y3G_zzUU(!t7CNC74!|?u$8c-x zn>3#{n_P*1plegywW}7dL2H9+z{Un^K%)}1O8#*cIB%3CO@)vY*AZpH0xQJRY3v}f zyr-G7X~8_0W=ua-kxG~e3!(PJanlp$Hy2nE`Ryg~d?8SrU*QxOA}6sBYM~J}!dA#Y z9X=$gVRM)wdC4&TZ?lM4OAPcFl5-A>9!!WoVM7e`ac@|Qs+%+uHmf{!8;&h)NF!XX z*GgIk6^pv6;`A~EA2p^<QfAK77}{bp}QUu)c9BH!d4%SBwj%VFuP%?U3cd Rs)Hu$LkvMQTxeR4R%P0s#vJcf70}nV9=|b8O$OXU`WGM(-bfwQy~7eD2-*qlc=Y`1^J7 z)SZbJ%V(!992>b(IXQH7DQdjk*ni;T;97dR@nkCgGCunI&1z-5|Igze`OxaO@@9<6KUgL>OCi0k$kvfvqc7ClSx2K&>{aC|i| zoG-~Vk#`qnTg`!HJRf?_dd_<)PwCl#;YPG)Y-cEidOGQ5)6aLPa_3ihGe>+bjmp4G z8kvAe;3xt&-xnH=D}+u{>`4LV5rv*HR`VtWa@#yGVlyNV^5)p z{YjfRKHJ2Sh|jl(>ls6~et=V8h#1G%Q+OtxnP=|FK;9rqrm!k3ApeqKyla#2NJ$Lz z7?M&7v@BQMdkl#iRsSL)ash((FqB-OWSKXElgmOTIDi_myFR?qqIx+ ze%*56oqR34?)b^CwypVKt?~|yhmQ4KefzNxwQ#F0fVHsEE`T*>V@KGb)yQUlM`O=B zHJ{FC!3!WBZX3Yq$hU5LeBuk}xtp?fZjP~?Zfy^F&~w%HzV@=Y_s#bkVBOnv+n8yc zuj8|6#5!LQZSzv-TqQ7?gtapjM2QOfgo^uOC143GlR_a%nPz57EyG^J8nAU(Z~F&V CmGgQ4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9c9c2e4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,210 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f98.c30): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00002d2d ecx=080d55b0 edx=00003879 esi=14e295d0 edi=11718fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.831119044340368480000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 2.731491700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-7.14959e+011 -0.256385 -473.999 -1.25267e-030 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081b8130 08135930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00324000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00324000 165ffbf7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0bb 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00324000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_description.txt deleted file mode 100644 index 9c9c2e4..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,210 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1F98: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b90000 00000000`71bab000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71b60000 00000000`71b82000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1f98.c30): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00002d2d ecx=080d55b0 edx=00003879 esi=14e295d0 edi=11718fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.831119044340368480000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 2.731491700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-7.14959e+011 -0.256385 -473.999 -1.25267e-030 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 081b8130 08135930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00324000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00324000 165ffbf7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0bb 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00324000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/506/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index cfa3e5dcfa041071534b6f0dd1d394c240e5ad9f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ7^R^7{|Z8U9+dn+!aEEz%B?HMDc>Hu$LkvMQTxeR4R%P0s#vJcf70}nV9=|b8O$OXU`WGM(-bfwQy~7eD2-*qlc=Y`1^J7 z)SZbJ%V(!992>b(IXQH7DQdjk*ni;T;97dR@nkCgGCunI&1z-5|Igze`OxaO@@9<6KUgL>OCi0k$kvfvqc7ClSx2K&>{aC|i| zoG-~Vk#`qnTg`!HJRf?_dd_<)PwCl#;YPG)Y-cEidOGQ5)6aLPa_3ihGe>+bjmp4G z8kvAe;3xt&-xnH=D}+u{>`4LV5rv*HR`VtWa@#yGVlyNV^5)p z{YjfRKHJ2Sh|jl(>ls6~et=V8h#1G%Q+OtxnP=|FK;9rqrm!k3ApeqKyla#2NJ$Lz z7?M&7v@BQMdkl#iRsSL)ash((FqB-OWSKXElgmOTIDi_myFR?qqIx+ ze%*56oqR34?)b^CwypVKt?~|yhmQ4KefzNxwQ#F0fVHsEE`T*>V@KGb)yQUlM`O=B zHJ{FC!3!WBZX3Yq$hU5LeBuk}xtp?fZjP~?Zfy^F&~w%HzV@=Y_s#bkVBOnv+n8yc zuj8|6#5!LQZSzv-TqQ7?gtapjM2QOfgo^uOC143GlR_a%nPz57EyG^J8nAU(Z~F&V CmGgQ4 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 343b067532522cd0cd33b2f0d1d6474cdb6def2f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GzfTlF6vyA*uI!;Cb7w3}xVYD-ghFX7jGBdlm{?g6)C8i&Xl$UM-|^5OHqcnu zVWHt4Ksz$02@)+Z)+!f?iFSJlnk$g;J8#|*?-Clr+`akCcixZrvAaYC{Dy{z0>_Z( z6cJUc1QpSb0?`=e2I%F9wOjYTY`^+8|GxLxXm8(gUtGKqP5xQ=I$v0>9Qri6dUxVO z;q%JX^_dBKWaazz{qs{#Z|=@4jMc`YsgJLpoV{~$eDT-h%%!8c|H|O=@wxu%$1bj4 z`+4E?;NjZ~XMV4~IERJzYq9a3VzrZ{VXxb)YOjTQgc3JnMkqDlQq6O*=I7@lOrkxC zysi~Jwc6!8O_8vuG~zUscqf{wVT1MMdd{4yw;Y4GzT;RBM#7@76mPM=8d{DY4lL(u zvJK=tfVo!lpohZ8!bRbd&_YN^loohi^~7g65E-TQ?p~DODCk@F72)5wX%UrYL?3!Ua~fK8l`=@`17U@ zZ|CPqblXp|+MecvHOv2KJanw@>${JIsEJ$k0j!ma_5rLp8#}@doklkM+ZucRSM%v? zu6O~&!|eh%9r@1fj!%36U3XK?y_;iPmpAu@Jm|V=cV7qD{QD;T7FZXXZCN{;XPfwJ zHsU;6Q!V>O<(WxfG!1K|CWsOf_9zqg#74mqSgMsll(CJ}m3j+%2it&c!n)gElUnYr diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 776de2d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1980: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1980: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1980.bb4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=01ffed2d ecx=07e77b10 edx=00003879 esi=f9e30010 edi=0fd20fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.221162800000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.28162e-024 1.78981e-033 9.99924e-023 1.00736e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00345000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00345000 85091912 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00345000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_description.txt deleted file mode 100644 index 776de2d..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1980: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1980: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1980.bb4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=01ffed2d ecx=07e77b10 edx=00003879 esi=f9e30010 edi=0fd20fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 1.221162800000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.28162e-024 1.78981e-033 9.99924e-023 1.00736e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f58130 07ed5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00345000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00345000 85091912 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62cf 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00345000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54155/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 343b067532522cd0cd33b2f0d1d6474cdb6def2f..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GzfTlF6vyA*uI!;Cb7w3}xVYD-ghFX7jGBdlm{?g6)C8i&Xl$UM-|^5OHqcnu zVWHt4Ksz$02@)+Z)+!f?iFSJlnk$g;J8#|*?-Clr+`akCcixZrvAaYC{Dy{z0>_Z( z6cJUc1QpSb0?`=e2I%F9wOjYTY`^+8|GxLxXm8(gUtGKqP5xQ=I$v0>9Qri6dUxVO z;q%JX^_dBKWaazz{qs{#Z|=@4jMc`YsgJLpoV{~$eDT-h%%!8c|H|O=@wxu%$1bj4 z`+4E?;NjZ~XMV4~IERJzYq9a3VzrZ{VXxb)YOjTQgc3JnMkqDlQq6O*=I7@lOrkxC zysi~Jwc6!8O_8vuG~zUscqf{wVT1MMdd{4yw;Y4GzT;RBM#7@76mPM=8d{DY4lL(u zvJK=tfVo!lpohZ8!bRbd&_YN^loohi^~7g65E-TQ?p~DODCk@F72)5wX%UrYL?3!Ua~fK8l`=@`17U@ zZ|CPqblXp|+MecvHOv2KJanw@>${JIsEJ$k0j!ma_5rLp8#}@doklkM+ZucRSM%v? zu6O~&!|eh%9r@1fj!%36U3XK?y_;iPmpAu@Jm|V=cV7qD{QD;T7FZXXZCN{;XPfwJ zHsU;6Q!V>O<(WxfG!1K|CWsOf_9zqg#74mqSgMsll(CJ}m3j+%2it&c!n)gElUnYr diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a6532a763f9c188e58812d773d1c15028c7168ca..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 621 zcmbu5F>b>!3`M__ARg(Qz?q7Uxq)xdbMyu-kc+7;(2hAm0(9v}ZQj^VN_LX~ol4_d zdg7-<30Uzv9Dv5hHShpnzXxf9?-lUGwMVYef*nJVeOTg-dk9lqSlv@ttZ~S-yfag0 zo42cZ&BZ>~t5lxzsHZIqm|5OkF}#7U?62$@$h=%J1dF?iAvmhp5j%8db>wGe&(|Ec zGnF`iex}_J<*fI#U;mG{D(Ud}PxCU33E$%;@(ukP*yV40ar#Z##H5?#qIgKzateNrdtOx?#1BVx9B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 45689cf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x5BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x5BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(5bc.1114): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e37b10 edx=00003879 esi=ffdd0010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.645580000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.58075e+034 -0.0132186 -4.31354e+021 -2.42232e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003be000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003be000 6fc6c1ed 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003be000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_description.txt deleted file mode 100644 index 45689cf..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x5BC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x5BC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a30000 00000000`74bca000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`74a00000 00000000`74a28000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(5bc.1114): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e37b10 edx=00003879 esi=ffdd0010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.712899554094367840000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.645580000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.58075e+034 -0.0132186 -4.31354e+021 -2.42232e-015 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f18130 07e95930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003be000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003be000 6fc6c1ed 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003be000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54660/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index a6532a763f9c188e58812d773d1c15028c7168ca..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 621 zcmbu5F>b>!3`M__ARg(Qz?q7Uxq)xdbMyu-kc+7;(2hAm0(9v}ZQj^VN_LX~ol4_d zdg7-<30Uzv9Dv5hHShpnzXxf9?-lUGwMVYef*nJVeOTg-dk9lqSlv@ttZ~S-yfag0 zo42cZ&BZ>~t5lxzsHZIqm|5OkF}#7U?62$@$h=%J1dF?iAvmhp5j%8db>wGe&(|Ec zGnF`iex}_J<*fI#U;mG{D(Ud}PxCU33E$%;@(ukP*yV40ar#Z##H5?#qIgKzateNrdtOx?#1BVx9B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d1f1f3278f24cee90e77eb66a56bc2956206ac13..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 583 zcmbtQF>b>!3_K@6JkolBGX)*<1OK9PpU@w;Kt856Ksx3L3DBh@wRvNYlI%8FOXDn_ zct_F(R(uWzpz(7J>;dd{Alu-31w8ZaiFcIXg+Qp$Lzsy*&Qk~qzB)5?Zk5k`W4x}^ivKpv$XhqvJdP^f3E|HYnKL@i>r$u^X%qE+|W7Qxju8Q`!kU q_8~gPp1>LBre32c#Iz^0kF9M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 3467afe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA44: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA44: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a44.188c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07eb7b10 edx=00003879 esi=ffdd0010 edi=07cc2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272713000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.68016e-033 4.37117e+006 1.07939e+008 0.0427198 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00254000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00254000 32ab7ab7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00254000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_description.txt deleted file mode 100644 index 3467afe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xA44: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xA44: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(a44.188c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07eb7b10 edx=00003879 esi=ffdd0010 edi=07cc2fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.735417552236463200000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272713000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=2.68016e-033 4.37117e+006 1.07939e+008 0.0427198 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f98130 07f15930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00254000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00254000 32ab7ab7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00254000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/54749/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d1f1f3278f24cee90e77eb66a56bc2956206ac13..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 583 zcmbtQF>b>!3_K@6JkolBGX)*<1OK9PpU@w;Kt856Ksx3L3DBh@wRvNYlI%8FOXDn_ zct_F(R(uWzpz(7J>;dd{Alu-31w8ZaiFcIXg+Qp$Lzsy*&Qk~qzB)5?Zk5k`W4x}^ivKpv$XhqvJdP^f3E|HYnKL@i>r$u^X%qE+|W7Qxju8Q`!kU q_8~gPp1>LBre32c#Iz^0kF9M diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/55013/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 4f4ca280aa747062a52894bb8c4e44fd07162bc1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 336 zcmb7;O%8%U426prW?6dzSh?l~b0uzo2^XuH=#nEq;swf%U3~-oM0R%a<-M2JG()t* zt81bxX-;$`qN*Y?b`udJnjpgNo-LVElmph1+FB>OjIH%MicKH882^p3sWOjIH%MicKH882^p3sWD-Zw3vkt2NHkR1}t!Mx3TH??h8IY_dMp$e4EIXOlhKTWugi06-6JaW3Ag>Q4tFU2MK=P7d{MV-8(V7_O zF(hLQ=w?t5e>_YN^loohiz@%qV%wROQLAI3OUI<(F0ZfUwX%UrYE>#6UbZ%K8l`=@ z__LM|Z|7%9blXp|+Pdb0wJIAl9y-?d_1(up)WWU$0M^Py`vBIQjU8c!P9vNBZH+x| z)OD-Zw3vkt2NHkR1}t!Mx3TH??h8IY_dMp$e4EIXOlhKTWugi06-6JaW3Ag>Q4tFU2MK=P7d{MV-8(V7_O zF(hLQ=w?t5e>_YN^loohiz@%qV%wROQLAI3OUI<(F0ZfUwX%UrYE>#6UbZ%K8l`=@ z__LM|Z|7%9blXp|+Pdb0wJIAl9y-?d_1(up)WWU$0M^Py`vBIQjU8c!P9vNBZH+x| z)OBAL54zxmJmn2+5hD&SYG5(SPS zQ6CXiDg+h1{{865{d=Fb&-E|fO3w9v`LX-Mz^>~nGk5m&ZQT5QVtMK3n+D1t}i(jgpsf)EX51#uY{K42LsFbnrs7k zBQV!$9&}!KNjNT?6dIuxwqdyuts7e@N}*n!bh07yZJNycP1eW|pJ{7SFx6HkU=nz$ zz|Z%Dmg5Sc*AxpW;5?#G7-I!@I)xoLmbNKowKrxC_lC^8H*gGup)eMzoY=2vcDuWFT)RN>*Tluz=(x!}zaF!=p7Z&|^r(7|_k2 zApUrm9_ZcPuojj7rzN&CE2n11M3+uT!ChKi%WGu=m((nmIlN?T?lemKbn)j+AKuQ- zmFTvgWVKbz2WytsXgqYR@9Vpdg{X;J^#QDvi}nGmIU75|4xL6e``a3OUaR?ZHdnj= z;^B4yoQ{0wcE=~afUdhK=ibdRuFIRNLmqTpwY#tNZ2oBAL54zxmJmn2+5hD&SYG5(SPS zQ6CXiDg+h1{{865{d=Fb&-E|fO3w9v`LX-Mz^>~nGk5m&ZQT5QVtMK3n+D1t}i(jgpsf)EX51#uY{K42LsFbnrs7k zBQV!$9&}!KNjNT?6dIuxwqdyuts7e@N}*n!bh07yZJNycP1eW|pJ{7SFx6HkU=nz$ zz|Z%Dmg5Sc*AxpW;5?#G7-I!@I)xoLmbNKowKrxC_lC^8H*gGup)eMzoY=2vcDuWFT)RN>*Tluz=(x!}zaF!=p7Z&|^r(7|_k2 zApUrm9_ZcPuojj7rzN&CE2n11M3+uT!ChKi%WGu=m((nmIlN?T?lemKbn)j+AKuQ- zmFTvgWVKbz2WytsXgqYR@9Vpdg{X;J^#QDvi}nGmIU75|4xL6e``a3OUaR?ZHdnj= z;^B4yoQ{0wcE=~afUdhK=ibdRuFIRNLmqTpwY#tNZ2otKMIijKa4oT)eH+#}=$Vx1Okw;Ulyp%b7T1M~thkfkHF zX$Zpp-{X@J8)yb2v>$)`^L_9`644C5^_s{qE28&A)V2gw)884D>>-@yn7k}*cJzj%8?Z)Hg<#^vPQP}CyhP7)N;CCs)n)^_H!?Z`wbCJGHAZ=d08|;Ip~6ssH81eCtvlJ&Z14V;4>B gV>Nft&TVus59@-9h>CgNaj84lZ`eKT0e0H{0ZxJR&Hw-a diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index f4739b3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x184C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x184C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(184c.1550): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07ed7b10 edx=00003879 esi=ffd70010 edi=0fc6efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.17786e+030 2.12169e+009 1.41531e+038 -11.8818 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00247000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00247000 e054a0aa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00247000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_description.txt deleted file mode 100644 index f4739b3..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x184C: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x184C: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(184c.1550): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0003ed2d ecx=07ed7b10 edx=00003879 esi=ffd70010 edi=0fc6efd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.17786e+030 2.12169e+009 1.41531e+038 -11.8818 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00247000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00247000 e054a0aa 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b3 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00247000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57725/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e63e93d2d45287a1dabd0df5aa0c3e5014ce0c45..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1656 zcmb`GJ#O1D6vrPe!SqIX>tKMIijKa4oT)eH+#}=$Vx1Okw;Ulyp%b7T1M~thkfkHF zX$Zpp-{X@J8)yb2v>$)`^L_9`644C5^_s{qE28&A)V2gw)884D>>-@yn7k}*cJzj%8?Z)Hg<#^vPQP}CyhP7)N;CCs)n)^_H!?Z`wbCJGHAZ=d08|;Ip~6ssH81eCtvlJ&Z14V;4>B gV>Nft&TVus59@-9h>CgNaj84lZ`eKT0e0H{0ZxJR&Hw-a diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/57855/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f7e6ab9427472e70a445009c5ce858cf95751fd1..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1748 zcmb`G-%C_M6vxlqyLcCTm|cp9TDmt1jUZ6`1FnW(fe=9i5utBE5J)|l!kt$8s82*}? z031yhpaB4a08qu@XAIyZ`VOEEQ=l7;-#(nbG&b*!&CNewT~7CR&1C^3DNfCmf85y{uDpIS+CDWgxb2&F`u?%2k2`0Yr(W#8 z^&8$DZ0YZ7T@1P7<%>N}7(BD{ICq zL{w`pbA)b8BMp00SsDRw;Z<2S_(^USphx+dJJ2}QfTIrel-i$ zU!jOhTttNkUxSD%5h6pbxR3N5L*^KNovSD><{Ay2B{)0rgwI*kt<*EjR)j|HHJw`vkd zGo5V`NK-ZL2zRJ8R#Uv9anI{DolZ$c3t&Embpn-Ry$s82*}? z031yhpaB4a08qu@XAIyZ`VOEEQ=l7;-#(nbG&b*!&CNewT~7CR&1C^3DNfCmf85y{uDpIS+CDWgxb2&F`u?%2k2`0Yr(W#8 z^&8$DZ0YZ7T@1P7<%>N}7(BD{ICq zL{w`pbA)b8BMp00SsDRw;Z<2S_(^USphx+dJJ2}QfTIrel-i$ zU!jOhTttNkUxSD%5h6pbxR3N5L*^KNovSD><{Ay2B{)0rgwI*kt<*EjR)j|HHJw`vkd zGo5V`NK-ZL2zRJ8R#Uv9anI{DolZ$c3t&Embpn-Ry$)`}~++@B0!J@ayj<3M@mS zGendm1XZN(1)^KR@- z3wL`*FTJ|C_Ws4}htF5B(qCGnoU@d)vpnc@i-~mFQw~vVJ!*(j1uoSb=WEVCTZ9ws zLDA`2$x(^}u9H;sED4D`NoC%Nq$JE)U#n~8!+O&)i0b>61<#^q$+H~oa6AbO=MM&k z>m`{Sb(1jLY7R8*IpaC+x#X!lrDqF<8_}_`nPMu;r{i|!-ru6iTwG;&hWtz#m4c}> zG6v(oQ3TH46&lVfgicfBNdeapg`N>su%{E)fn~WzF#D?!bD|nDbv3XIJVVdOQ)uFN z+$7FV_pv1MvjgJ!j3GOJfKyi(dOvTF$sjrhif@4Okj%|l?tbqjnP(PYFF;# zy5Z7W^;&q{ij!aMQ1ihWl_MGt9qYUK?Z-mYz^%Fj*1~4H1lC-Q9bt!7qnhI_jXfXL zd^)2AFMxc6Z3360-iGb*i7%kzZYtV^ImdRoaX92b$5q?=I?m?aH{b7ob#GHmW2SVr zjn8H?(%G75npL4Q6~kx()=X7Uj8)hrRMZtI0gGX&6bf0&dO3EPHswm+Pi B_TK;i diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2c7c600..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,210 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1094: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1094: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b80000 00000000`71ba2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b60000 00000000`71b7b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1094.16d0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=081255b0 edx=00003879 esi=14e295d0 edi=0d460fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.845192793179178080000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 3.851104700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-4.71921e+009 6.56294e+022 -1.27711e-030 8.98654e-007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08208130 08185930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00367000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00367000 5d905199 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0b7 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00367000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_description.txt deleted file mode 100644 index 2c7c600..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,210 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Deferred srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols;srv*c:\symbols*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffe`170c0000 00007ffe`172b0000 ntdll.dll -ModLoad: 00000000`77240000 00000000`773da000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b31000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1094: page heap enabled with flags 0x3. -ModLoad: 00007ffe`15390000 00007ffe`153e5000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffe`15cd0000 00007ffe`15d4d000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77230000 00000000`77239000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`71f50000 00000000`71fb3000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1094: page heap enabled with flags 0x3. -ModLoad: 00000000`770d0000 00000000`771b0000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`76e10000 00000000`7700f000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75950000 00000000`75ae8000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`750d0000 00000000`750e7000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`75b00000 00000000`75b21000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75640000 00000000`7579c000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`74a30000 00000000`74aac000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`76220000 00000000`76340000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76c10000 00000000`76c89000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76ca0000 00000000`76d5f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`74ab0000 00000000`74b26000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`76450000 00000000`7650b000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`74a00000 00000000`74a25000 C:\Windows\SysWOW64\SspiCli.dll -ModLoad: 00000000`749f0000 00000000`749fa000 C:\Windows\SysWOW64\CRYPTBASE.dll -ModLoad: 00000000`76d60000 00000000`76dc0000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`77030000 00000000`770c2000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`74e40000 00000000`750b6000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`748f0000 00000000`748f8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`71f40000 00000000`71f46000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`76120000 00000000`76217000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`76610000 00000000`76635000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`71d30000 00000000`71f3f000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.18362.1256_none_e62b6e72f8da69e8\comctl32.dll -ModLoad: 00000000`75ba0000 00000000`7611b000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`71cc0000 00000000`71d2b000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`74b30000 00000000`74b6b000 C:\Windows\SysWOW64\cfgmgr32.dll -ModLoad: 00000000`75140000 00000000`7514f000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`76560000 00000000`765e4000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`765f0000 00000000`76609000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`71bf0000 00000000`71cb6000 C:\Windows\SysWOW64\PROPSYS.dll -ModLoad: 00000000`71bb0000 00000000`71be2000 C:\Windows\SysWOW64\IPHLPAPI.DLL -ModLoad: 00000000`76640000 00000000`76c01000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`751d0000 00000000`751eb000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`76510000 00000000`76553000 C:\Windows\SysWOW64\powrprof.dll -ModLoad: 00000000`75b90000 00000000`75b9d000 C:\Windows\SysWOW64\UMPDC.dll -ModLoad: 00000000`76dc0000 00000000`76e04000 C:\Windows\SysWOW64\shlwapi.dll -ModLoad: 00000000`77010000 00000000`77023000 C:\Windows\SysWOW64\cryptsp.dll -ModLoad: 00000000`75890000 00000000`75940000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`71b80000 00000000`71ba2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`71b60000 00000000`71b7b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`71990000 00000000`719b4000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`719c0000 00000000`71b59000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`71970000 00000000`71989000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`71940000 00000000`71963000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001f3000 C:\Windows\SysWOW64\WINMMBASE.dll -ModLoad: 718c0000 7193a000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76340000 00000000`76443000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`718a0000 00000000`718b9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`771b0000 00000000`77230000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`71730000 00000000`71899000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`716c0000 00000000`71721000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`716b0000 00000000`716b7000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`71670000 00000000`716a1000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`71490000 00000000`7166e000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`71320000 00000000`7148a000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`71250000 00000000`71311000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`71230000 00000000`71249000 C:\Windows\SysWOW64\dxcore.dll -ModLoad: 00000000`71040000 00000000`71225000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`71020000 00000000`7103f000 C:\Windows\SysWOW64\RMCLIENT.dll -ModLoad: 00000000`70fd0000 00000000`7101a000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`70fc0000 00000000`70fca000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`70fa0000 00000000`70fb5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`70f80000 00000000`70f99000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`70f70000 00000000`70f7b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`70f50000 00000000`70f68000 C:\Windows\SysWOW64\MPR.dll -ModLoad: 00000000`70f30000 00000000`70f41000 C:\Windows\SysWOW64\vmhgfs.dll -ModLoad: 00000000`70f10000 00000000`70f24000 C:\Windows\SysWOW64\VCRUNTIME140.dll -ModLoad: 00000000`70f00000 00000000`70f09000 C:\Windows\SysWOW64\drprov.dll -ModLoad: 00000000`70eb0000 00000000`70ef4000 C:\Windows\SysWOW64\WINSTA.dll -ModLoad: 00000000`70e90000 00000000`70ea2000 C:\Windows\SysWOW64\ntlanman.dll -ModLoad: 00000000`70e70000 00000000`70e89000 C:\Windows\SysWOW64\davclnt.dll -ModLoad: 00000000`70e60000 00000000`70e6a000 C:\Windows\SysWOW64\DAVHLPR.dll -ModLoad: 00000000`70e50000 00000000`70e60000 C:\Windows\SysWOW64\wkscli.dll -ModLoad: 00000000`70e40000 00000000`70e4e000 C:\Windows\SysWOW64\cscapi.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`70db0000 00000000`70e32000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1094.16d0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=081255b0 edx=00003879 esi=14e295d0 edi=0d460fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.845192793179178080000e+0017 -st4= 0.000000000000000000000e+0000 st5= 1.000000000000000000000e+0000 -st6= 2.539999999999999999970e+0000 st7= 3.851104700000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 1.4013e-045 -xmm7=-4.71921e+009 6.56294e+022 -1.27711e-030 8.98654e-007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 08208130 08185930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 770e6359 00367000 770e6340 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 772a8944 00367000 5d905199 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 772a8914 ffffffff 772ca0b7 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00367000 00000000 ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77240000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bdeed19e0951d8db96b3fe724caab2b7fbd90824..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`G&r6g+7{{M?-^F)tvwH{)Hs03`Q4lFu5OjDIv<_Cs4qd!^^3o-!cU+D1q$WgA zgm|fw*Sa-pr3Wj+KOo)`}~++@B0!J@ayj<3M@mS zGendm1XZN(1)^KR@- z3wL`*FTJ|C_Ws4}htF5B(qCGnoU@d)vpnc@i-~mFQw~vVJ!*(j1uoSb=WEVCTZ9ws zLDA`2$x(^}u9H;sED4D`NoC%Nq$JE)U#n~8!+O&)i0b>61<#^q$+H~oa6AbO=MM&k z>m`{Sb(1jLY7R8*IpaC+x#X!lrDqF<8_}_`nPMu;r{i|!-ru6iTwG;&hWtz#m4c}> zG6v(oQ3TH46&lVfgicfBNdeapg`N>su%{E)fn~WzF#D?!bD|nDbv3XIJVVdOQ)uFN z+$7FV_pv1MvjgJ!j3GOJfKyi(dOvTF$sjrhif@4Okj%|l?tbqjnP(PYFF;# zy5Z7W^;&q{ij!aMQ1ihWl_MGt9qYUK?Z-mYz^%Fj*1~4H1lC-Q9bt!7qnhI_jXfXL zd^)2AFMxc6Z3360-iGb*i7%kzZYtV^ImdRoaX92b$5q?=I?m?aH{b7ob#GHmW2SVr zjn8H?(%G75npL4Q6~kx()=X7Uj8)hrRMZtI0gGX&6bf0&dO3EPHswm+Pi B_TK;i diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index aaf81b6f62224d15734beb9636001b12d0a0faef..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*Ub5HCT_Hv}*sCOV*Jxqk#wr9M7J?`QL>sY7>~$v>jiyWCACN*6 zEsO{XD#DzC5fvhcB8cQj1Z~tg5OQG1_?x14Z~M|zo&72_~7dOXAy=*G{b*)wkJ_krtl z%Qp7T-n}@vezRI%9eRaz{@M}~+@)GC%OgQ|S<^ua^$|+F#~h)|fD4Vl`9|>172!m? zQVhCL3e;+o>ogUGC8d$4smwdkREt}zN1K*;wb}8ElIDhIL0A-)gym$724>pn z6ilN)6$Srb>^QFw2Th5PBCaEfg$Y*hr&HL0XL(35>(zugS&f;t8hJ*-SeOWvC61>Z z;{0p_OCmqtB%aSX^7BVH1%}88OoU393Nv9YWT4J}FE!W*EFyWyF#c!Lh-gg=^ca#c z2J{|Gh(8`?0D8YStVNaoX{qb2vefQz^y!oo!sV^Cf>ti_MeRz3)633TuQ7Efm$+?* z^lrUXqPuaD)wVPrtXiBYf=mT6^>Wn3%sQ$2?*!Iohwu>ST3>CE+~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index fb013fc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x12EC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x12EC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001e0000 00000000`001fd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(12ec.16c4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07e17b10 edx=00003879 esi=12738f10 edi=0f674fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.707270054558844000000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.958619000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.86055e+007 1.02683e-009 -6.39869e-028 -0.765507 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ef8130 07e75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002cd000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002cd000 fa192272 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002cd000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_description.txt deleted file mode 100644 index fb013fc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x12EC: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x12EC: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001e0000 00000000`001fd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(12ec.16c4): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07e17b10 edx=00003879 esi=12738f10 edi=0f674fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.707270054558844000000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 8.958619000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=7.86055e+007 1.02683e-009 -6.39869e-028 -0.765507 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ef8130 07e75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002cd000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002cd000 fa192272 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6290 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002cd000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/58381/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index aaf81b6f62224d15734beb9636001b12d0a0faef..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*Ub5HCT_Hv}*sCOV*Jxqk#wr9M7J?`QL>sY7>~$v>jiyWCACN*6 zEsO{XD#DzC5fvhcB8cQj1Z~tg5OQG1_?x14Z~M|zo&72_~7dOXAy=*G{b*)wkJ_krtl z%Qp7T-n}@vezRI%9eRaz{@M}~+@)GC%OgQ|S<^ua^$|+F#~h)|fD4Vl`9|>172!m? zQVhCL3e;+o>ogUGC8d$4smwdkREt}zN1K*;wb}8ElIDhIL0A-)gym$724>pn z6ilN)6$Srb>^QFw2Th5PBCaEfg$Y*hr&HL0XL(35>(zugS&f;t8hJ*-SeOWvC61>Z z;{0p_OCmqtB%aSX^7BVH1%}88OoU393Nv9YWT4J}FE!W*EFyWyF#c!Lh-gg=^ca#c z2J{|Gh(8`?0D8YStVNaoX{qb2vefQz^y!oo!sV^Cf>ti_MeRz3)633TuQ7Efm$+?* z^lrUXqPuaD)wVPrtXiBYf=mT6^>Wn3%sQ$2?*!Iohwu>ST3>CE+~ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d580012339afe5f21a8c23589cfa76dd8ba5e7e9..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1723 zcmb`GM^h9*6vy8%Tg={i_vV4B*^|YQZ!mE38+i63@C~LV2pBPE#hi1_y`W&moRw7! zm}iZvBJICl_fjlXda&r-*T4Sv3ms;Ls0zQjIwH@|Cz?z|xg0^IXsC*4D&}gbxutbR zTYJaMS+nQNo!2>k!NNt0mn>bje8tLDtJkdUTDN|~#!Z{IY~8kf$Ie~5_w3!b|G>dR zhmRaRcKpQ2Q>V|Ue0R^;bG?1%FI>EI`O4M)Yu9hwymkA|-Fx>RJbd){$w1-hv%%*t zUcMT7{pRhv_a8nc#ZRBVeEs&l^yBBR;ol>g2>YXHFb}_fHLVdm(JfH6VmepJOuf}* z=A_k*vVlS~qZ%kuU{{l6XOo@pNMRDKHDz^E+ER)U&XbgKObdxPNg3XWq?})1Jtdzo z+wvttFUSuYRyn2|(~g;7ko`Gdb9}w0IbV`4Aa6R%v?dE`acp<&bnJ3ej?%FVJOh3V z6UI_x>m^|&3vRwl6B-L(fupcD~xz99QLAO@SkMoJZt423WzI zPGARynMs0KR}(NBYkX!>;~9F6zGL7h5@LT?B94!Su_WT-5#oAUld13F6c{4LGH?`* zp=0D2J2H@0i;_85JKdnT!v&2o4~>%?f3w&~8F6m57pKM_us{p3~~)qJpGc8tbD$NILu z`B;dGxK$g#T9{}Xz?!qMBka&X3m_hD6Ts=nH*Rx$;tLpeH`&Cx zImUEJadgOoaaV2bYa*L{-&{Wk=AAW{v~Et~0em+7K@#_hlI|8stU?$y!b*|yQlavz eg$k+zC14>el0qR$=|W^m^}zaI{jdSp`1S{|Z6k&N diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 10c2538..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1058: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1058: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1058.500): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07ea7b10 edx=00003879 esi=12768f40 edi=0f672fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.87118e-010 3.55349e-033 2.44526e+025 8.011e+008 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00339000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00339000 b6c50165 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00339000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_description.txt deleted file mode 100644 index 10c2538..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1058: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1058: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`001d0000 00000000`001ed000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1058.500): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07ea7b10 edx=00003879 esi=12768f40 edi=0f672fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.732602802468701280000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=3.87118e-010 3.55349e-033 2.44526e+025 8.011e+008 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f88130 07f05930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00339000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00339000 b6c50165 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ba 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00339000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/59416/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d580012339afe5f21a8c23589cfa76dd8ba5e7e9..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1723 zcmb`GM^h9*6vy8%Tg={i_vV4B*^|YQZ!mE38+i63@C~LV2pBPE#hi1_y`W&moRw7! zm}iZvBJICl_fjlXda&r-*T4Sv3ms;Ls0zQjIwH@|Cz?z|xg0^IXsC*4D&}gbxutbR zTYJaMS+nQNo!2>k!NNt0mn>bje8tLDtJkdUTDN|~#!Z{IY~8kf$Ie~5_w3!b|G>dR zhmRaRcKpQ2Q>V|Ue0R^;bG?1%FI>EI`O4M)Yu9hwymkA|-Fx>RJbd){$w1-hv%%*t zUcMT7{pRhv_a8nc#ZRBVeEs&l^yBBR;ol>g2>YXHFb}_fHLVdm(JfH6VmepJOuf}* z=A_k*vVlS~qZ%kuU{{l6XOo@pNMRDKHDz^E+ER)U&XbgKObdxPNg3XWq?})1Jtdzo z+wvttFUSuYRyn2|(~g;7ko`Gdb9}w0IbV`4Aa6R%v?dE`acp<&bnJ3ej?%FVJOh3V z6UI_x>m^|&3vRwl6B-L(fupcD~xz99QLAO@SkMoJZt423WzI zPGARynMs0KR}(NBYkX!>;~9F6zGL7h5@LT?B94!Su_WT-5#oAUld13F6c{4LGH?`* zp=0D2J2H@0i;_85JKdnT!v&2o4~>%?f3w&~8F6m57pKM_us{p3~~)qJpGc8tbD$NILu z`B;dGxK$g#T9{}Xz?!qMBka&X3m_hD6Ts=nH*Rx$;tLpeH`&Cx zImUEJadgOoaaV2bYa*L{-&{Wk=AAW{v~Et~0em+7K@#_hlI|8stU?$y!b*|yQlavz eg$k+zC14>el0qR$=|W^m^}zaI{jdSp`1S{|Z6k&N diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/60844/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d1ea85ed93089b06c03e0f1d3d1985b18094af2a..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`Gy=xRf7{=edJ+o&ucZ~=JcAJP=$YEolxR*jh3>G%lNs~q}Q3TOuCl`|_Hi=(_ zCG~CH(4jqQEjF zI!HuGLQrMeC=p$N?+|>QJ8NU(kG|BCoiY?rU@O_n!0elB&EDNlDmdJ<`(5g;rr1M6FHBl4seo;#rM498W^S`HjGE zy(H5{-3-jOrUTvdyydy*x$LPtrDqq08_}+@NHG=W({V4`-ruFlTwG=C4EdQfDg{$% zWDLfEqX?XTAT*p;3Z16NlLD?I3OysNU{5Eo1Iy}u!K@EP%;~|9sRskgz%%rWJcTBX z#|3eIx``!`pKTG(XAIf-1Dpawg@NDz#6cC{7Z)MKbu5EN@AeL zkd#uO^dQ^yvNa}V-g5gx7Tu7n7|h0wHl{ajnP(PYFF;# zI(O;adM&)}#>ua?t@&ViZHLA~$NFx5`>_z^xK)?HTG(utz?!SEBka&>RCBzmvFDwd zPiM5?1(1)hP2h6W+ps-8@dfnVO-;Kn=h#l?+e04oUA4Wh-E8iC^L+G%lNs~q}Q3TOuCl`|_Hi=(_ zCG~CH(4jqQEjF zI!HuGLQrMeC=p$N?+|>QJ8NU(kG|BCoiY?rU@O_n!0elB&EDNlDmdJ<`(5g;rr1M6FHBl4seo;#rM498W^S`HjGE zy(H5{-3-jOrUTvdyydy*x$LPtrDqq08_}+@NHG=W({V4`-ruFlTwG=C4EdQfDg{$% zWDLfEqX?XTAT*p;3Z16NlLD?I3OysNU{5Eo1Iy}u!K@EP%;~|9sRskgz%%rWJcTBX z#|3eIx``!`pKTG(XAIf-1Dpawg@NDz#6cC{7Z)MKbu5EN@AeL zkd#uO^dQ^yvNa}V-g5gx7Tu7n7|h0wHl{ajnP(PYFF;# zI(O;adM&)}#>ua?t@&ViZHLA~$NFx5`>_z^xK)?HTG(utz?!SEBka&>RCBzmvFDwd zPiM5?1(1)hP2h6W+ps-8@dfnVO-;Kn=h#l?+e04oUA4Wh-E8iC^L+Tc<2?+HN*mx1qOQjb@a9c!e{R0#PMUW!?C9TkD-n%fJ{rGcsXyWnnCo9uK(;c6$q<@}`>|c6+ z;BDX4?dNMBek^{?ogL^u($PP*vhzggezEf9W$(4jslIPxyTaaWgA;>i_KY9wnXir{ zPb-H;k1o&s{#6;cm|GiqaeesM%^MG^ufCr<{$}Pu=F?n;=roGihhk70U4VJ`{jX`Q z|L5MEFHklwUv6cg+v+CE(rQQ9L!p^bJrpT$s%kk|we#ayOrqV%T3yXsO0mXylCq9@ zArU93z?DcU`*qeQYYFpiEj9Fl+Nxp3G3%IjECfsJFZ-I~yFJbMl5`z;w_v7KE$Fu6 znB%15l%sN#j!obh@MG9ArjcDQ30qlr^G&MQ`c+(y@fyTZs|bvwmLV8=mcq01IbU;J z#ej4;8Z8rTIwS#iVSO*Fh4xHRqgdqdg4T)ASlXsLf6}nw&HO|--Sm^& zZC&%h8pRD74;}m4_07jZ)WEIU0M^1p+W^*_jfzmA(a2_hQ={gMnop+_!5bhRZWF-i z$Tx0teBujeyPINS-5g`Oq_IBaLEBZE``XH8-#6DUfi-8Nsn(-Oyok?cAxPpmk?I+d q#43bQ1(rt2%ZAF&2^Hi5C14>el0qR$>3U?AdJUV0Ex;CG?d>m&Tc<2?+HN*mx1qOQjb@a9c!e{R0#PMUW!?C9TkD-n%fJ{rGcsXyWnnCo9uK(;c6$q<@}`>|c6+ z;BDX4?dNMBek^{?ogL^u($PP*vhzggezEf9W$(4jslIPxyTaaWgA;>i_KY9wnXir{ zPb-H;k1o&s{#6;cm|GiqaeesM%^MG^ufCr<{$}Pu=F?n;=roGihhk70U4VJ`{jX`Q z|L5MEFHklwUv6cg+v+CE(rQQ9L!p^bJrpT$s%kk|we#ayOrqV%T3yXsO0mXylCq9@ zArU93z?DcU`*qeQYYFpiEj9Fl+Nxp3G3%IjECfsJFZ-I~yFJbMl5`z;w_v7KE$Fu6 znB%15l%sN#j!obh@MG9ArjcDQ30qlr^G&MQ`c+(y@fyTZs|bvwmLV8=mcq01IbU;J z#ej4;8Z8rTIwS#iVSO*Fh4xHRqgdqdg4T)ASlXsLf6}nw&HO|--Sm^& zZC&%h8pRD74;}m4_07jZ)WEIU0M^1p+W^*_jfzmA(a2_hQ={gMnop+_!5bhRZWF-i z$Tx0teBujeyPINS-5g`Oq_IBaLEBZE``XH8-#6DUfi-8Nsn(-Oyok?cAxPpmk?I+d q#43bQ1(rt2%ZAF&2^Hi5C14>el0qR$>3U?AdJUV0Ex;CG?d>m&L&L6uN z`;D@xH|^gMzx?U}dw$U;vtGN=Phs%d-8k8WwTm^NBS;~-eI1LEqc44AP=j#dh^=T- O$WL9t9SmRuTRj0@dVCxJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2dcba0e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8.1f78): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07e57b10 edx=00003879 esi=12738f10 edi=0f80cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.05752e-027 -1.19541e+034 2.9142e+031 0.000117529 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002da000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002da000 0e4758e3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629a 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002da000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_description.txt deleted file mode 100644 index 2dcba0e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8.1f78): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0000ed2d ecx=07e57b10 edx=00003879 esi=12738f10 edi=0f80cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.718529053629891680000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-8.05752e-027 -1.19541e+034 2.9142e+031 0.000117529 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f38130 07eb5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002da000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002da000 0e4758e3 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629a 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002da000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/62365/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index cc43248904cc2c161c8c126c3942926c95eac397..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 362 zcmb7;O%8%E5QV2==yI47z{)i@=#{(yCS0s)qDzhdi5D1l-Hor{Ph{t7zRY`h)22i_ zoVF!$c@{(mB5E2!f@TpmSD85xC1Me&OxY9$8FgM*YUEsF0r&FMwa#{tuJt>L&L6uN z`;D@xH|^gMzx?U}dw$U;vtGN=Phs%d-8k8WwTm^NBS;~-eI1LEqc44AP=j#dh^=T- O$WL9t9SmRuTRj0@dVCxJ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d71d943fcc472643454d416631649a9e7a9bf8ba..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@*<=x057hR}itVh=^JU*$X161REu!vJepo5~7WT?08XB5J{QN z7%(c@*(roM1%(tw@B=)Q9L7Q$nX5c8Wc<&YxsW@sk<8tj-~8XleC;k#3BTcCqQEjF z+CxNHMo?w?ULraL-(L8TLZ@ND!o-=&>+#p-$*BYVOF#ZpFFaYEYy95*d8~iv!_d#< z{E5exhOWGwOx`z+KOcGeY5dWV#?HluM}M80zW;9Dz_IAt_{7;=i+8He?oRI?)dRQZ z4nO!fvv6?w%c16**^BpM3*;Bl zs2t3tktvu4jv{dWzR+-9DRi15PYSq>DD;f5f<2wU4lLsxf;l`GF{cJYrXCC|1JBSi z@)Vjlp0FHH;PF2_^RMZzK0ZU=I6bf0&G;=%EOW14J3TzeD G+x`NcarCPI diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index c5132dc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bbb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(914.17c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=03ffed2d ecx=07f17b10 edx=00003879 esi=f3e30010 edi=07d22fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.752306050843034720000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13775e-031 2.61611e-007 2.84328e+022 -7.54824e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ff8130 07f75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021b000 1eab8bd1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_description.txt deleted file mode 100644 index c5132dc..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x914: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bc0000 00000000`74be8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bbb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(914.17c): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=03ffed2d ecx=07f17b10 edx=00003879 esi=f3e30010 edi=07d22fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.752306050843034720000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.13775e-031 2.61611e-007 2.84328e+022 -7.54824e-031 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ff8130 07f75930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0021b000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0021b000 1eab8bd1 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d6297 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0021b000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63158/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index d71d943fcc472643454d416631649a9e7a9bf8ba..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9@*<=x057hR}itVh=^JU*$X161REu!vJepo5~7WT?08XB5J{QN z7%(c@*(roM1%(tw@B=)Q9L7Q$nX5c8Wc<&YxsW@sk<8tj-~8XleC;k#3BTcCqQEjF z+CxNHMo?w?ULraL-(L8TLZ@ND!o-=&>+#p-$*BYVOF#ZpFFaYEYy95*d8~iv!_d#< z{E5exhOWGwOx`z+KOcGeY5dWV#?HluM}M80zW;9Dz_IAt_{7;=i+8He?oRI?)dRQZ z4nO!fvv6?w%c16**^BpM3*;Bl zs2t3tktvu4jv{dWzR+-9DRi15PYSq>DD;f5f<2wU4lLsxf;l`GF{cJYrXCC|1JBSi z@)Vjlp0FHH;PF2_^RMZzK0ZU=I6bf0&G;=%EOW14J3TzeD G+x`NcarCPI diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/63372/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 5c2759df648f5f6ee09a45d60139c888d5ecff90..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1626 zcmb`HOLEgd5Qcj!mF3+?JOda;yh2D=_y%%T+<-Ml$PF|&P{1xn$Wg{n1EuF8hx zXs1Og!#_Q(RO~8mQt71i>F>w9B$;T0zuAmPMP@|1L{!%VmD9fw(I>?A5JL%lCaUh; zfAH|pcSwx`PZx?T7AWRmU7`lThv)9c_o(WY{mNH(lfs=`$$zR zFC$07TsRSy#RccsA*!(3F|#!Oi6^3<&bHnbs)ba_2j(mJTv z)KwLimm&D5F?4E|yzf%^(C@YAAx|>fwdRd=)eVh@j``F0@na$CaH^?*wT{)PfHikx zMOb0f=;r*OvF4kacNe_o2~dx8EZ}zZ$8_92eidOGXH)rEuF8hx zXs1Og!#_Q(RO~8mQt71i>F>w9B$;T0zuAmPMP@|1L{!%VmD9fw(I>?A5JL%lCaUh; zfAH|pcSwx`PZx?T7AWRmU7`lThv)9c_o(WY{mNH(lfs=`$$zR zFC$07TsRSy#RccsA*!(3F|#!Oi6^3<&bHnbs)ba_2j(mJTv z)KwLimm&D5F?4E|yzf%^(C@YAAx|>fwdRd=)eVh@j``F0@na$CaH^?*wT{)PfHikx zMOb0f=;r*OvF4kacNe_o2~dx8EZ}zZ$8_92eidOGXH)r<0bK<5JCh+ zV-Z2Iizy^F7IP|!Sj1LDau|`M2+UR4B4qr}o4JrX&_XhIZ+`Qi_c0&4OH{zGRwD{5 zL!yI3lq3XIq~!w9a7aVDdP}vPC$HXkc>Cv(S36#>^}U^X5+A)bdSU;~h1EkpUQXms z7w5h#$Jfsto1Gs#z7n3A>$@`hedYe>)O@M;`H7*m^Lros8XSJK@4)5Lzu$cR@J$Em z;*0w9p0o9@)#+!emmXu)f3!$BXDR7qx!>tF6X~?49H7|Fr~yh9I8%3=th@PpMNFbi z6rHY@9HrRcJV`~*l8}g#ROX#XO2Q`VGY!qW)5tA@sIhKY@GN?kJj>A%`;*Xce1Bj# zUy^Ae?-tCqx&w`S-u0aHobgni(z6Z2jcD7LrznMbI__lC&$p>E=T})XLwqKUO2Jeb z8G~`)C;~U%6B>>ygicfBNde~(g`N>su%{E)fn|BOVAiS;bEFzFbv3XIJVVdOQ)ps; zoD;{V>sS);*#>bvW60JIa0(0&;~04g&)75d%sd&$JB*SEtREJTf5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wmH%n6>CDp9>X_)#F$uWKn`=2OOkk5*l?sQKjnP)4v`hDX z-E!gWd@a0g`^m4isrg{7$`*}>j`dxA`>_zUaH}qWwXo4HfHh}hN7$j&$Yy_AW6xVP zpU!B(3m_hD8^Gzvw{ClU;tS}yn~HXBj<0bK<5JCh+ zV-Z2Iizy^F7IP|!Sj1LDau|`M2+UR4B4qr}o4JrX&_XhIZ+`Qi_c0&4OH{zGRwD{5 zL!yI3lq3XIq~!w9a7aVDdP}vPC$HXkc>Cv(S36#>^}U^X5+A)bdSU;~h1EkpUQXms z7w5h#$Jfsto1Gs#z7n3A>$@`hedYe>)O@M;`H7*m^Lros8XSJK@4)5Lzu$cR@J$Em z;*0w9p0o9@)#+!emmXu)f3!$BXDR7qx!>tF6X~?49H7|Fr~yh9I8%3=th@PpMNFbi z6rHY@9HrRcJV`~*l8}g#ROX#XO2Q`VGY!qW)5tA@sIhKY@GN?kJj>A%`;*Xce1Bj# zUy^Ae?-tCqx&w`S-u0aHobgni(z6Z2jcD7LrznMbI__lC&$p>E=T})XLwqKUO2Jeb z8G~`)C;~U%6B>>ygicfBNde~(g`N>su%{E)fn|BOVAiS;bEFzFbv3XIJVVdOQ)ps; zoD;{V>sS);*#>bvW60JIa0(0&;~04g&)75d%sd&$JB*SEtREJTf5|ZZYm@LuNeuKD zl2Qt^Gbo5Z9;O3&yEm*wmH%n6>CDp9>X_)#F$uWKn`=2OOkk5*l?sQKjnP)4v`hDX z-E!gWd@a0g`^m4isrg{7$`*}>j`dxA`>_zUaH}qWwXo4HfHh}hN7$j&$Yy_AW6xVP zpU!B(3m_hD8^Gzvw{ClU;tS}yn~HXBj*^ByGxY7uda^B)AWg^5>YlwP`oME+|oL$t-WLR zoVoMnFX&vjXz`Mz%a*TLxoY*Awd>Y*ZP>VJ^OmjKw(r=vYxkbL`}Q9=c3q+^P4#BoZSN;qZx zg3;6S(y%RG()5D-ux7$B>6mg%2ZP3+^_7XQ_ms)!qzcGug6WpCpccn=$4mnmZF7jYrRYY=lKA~52LhhXSgGSAM}_{zj3e5)yNB+uj# z`Hlg0(5GXlKr=ms8P?SXhK;qpp{(^ZJxAX$aAcBnTNgeGjL= z5HXg4BXbNLBgfd$0D1a*$-?Sk9=Vqczu6JHIU2@N&LnPM7`Ub{o~^V8zTB zjfal??fUv-Au8flZGh2CN813SO*Se*g<2!q_{$nKkJaXMN;0zn;^Ec-CLQ_Ot&dOU z0;=vNBdy!S=uQ?#hh|W9)%w0Bv)T8}^@CvES#wFLW*HCQv*{0H+{;R;o5@&&FlvOA kBH<-N;ny$`)C7XTLRiF^K$K90NH5g`>x1>f24L0gA8}G82><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 9d03994..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1394: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1394: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1394.16c0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f07b10 edx=00003879 esi=fce30010 edi=0fc6afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.41585e+016 -2.16842e+024 -4.30285e-009 0.000248138 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0031d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0031d000 2d8f65c9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0031d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_description.txt deleted file mode 100644 index 9d03994..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1394: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1394: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1394.16c0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00ffed2d ecx=07f07b10 edx=00003879 esi=fce30010 edi=0fc6afd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.749491301075272800000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.41585e+016 -2.16842e+024 -4.30285e-009 0.000248138 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fe8130 07f65930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 0031d000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 0031d000 2d8f65c9 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629c 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 0031d000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65698/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 78631f7055eb426a0937b95348acea85e22c3899..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1726 zcmb`GM^hUy6vy9sJ*;oCZ#gitK4o&`8!Vji4RX#$;2W$k5FnNGo{-*q?=mEiPI^yp zLJH|}s*@0uzls^`nQ&l`{q)mc?>*^ByGxY7uda^B)AWg^5>YlwP`oME+|oL$t-WLR zoVoMnFX&vjXz`Mz%a*TLxoY*Awd>Y*ZP>VJ^OmjKw(r=vYxkbL`}Q9=c3q+^P4#BoZSN;qZx zg3;6S(y%RG()5D-ux7$B>6mg%2ZP3+^_7XQ_ms)!qzcGug6WpCpccn=$4mnmZF7jYrRYY=lKA~52LhhXSgGSAM}_{zj3e5)yNB+uj# z`Hlg0(5GXlKr=ms8P?SXhK;qpp{(^ZJxAX$aAcBnTNgeGjL= z5HXg4BXbNLBgfd$0D1a*$-?Sk9=Vqczu6JHIU2@N&LnPM7`Ub{o~^V8zTB zjfal??fUv-Au8flZGh2CN813SO*Se*g<2!q_{$nKkJaXMN;0zn;^Ec-CLQ_Ot&dOU z0;=vNBdy!S=uQ?#hh|W9)%w0Bv)T8}^@CvES#wFLW*HCQv*{0H+{;R;o5@&&FlvOA kBH<-N;ny$`)C7XTLRiF^K$K90NH5g`>x1>f24L0gA8}G82><{9 diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/65850/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 422adcab0dc87954fc9cbb711632826a238191f8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 454 zcmb7;I}U>|5JZ=caJlgbpi0dRe5KrgNLL+D*Ms>uw>bx)qd oon2>Zh%V4|5JZ=caJlgbpi0dRe5KrgNLL+D*Ms>uw>bx)qd oon2>Zh%V48>eA6{Z0<|wkIGg@pZuPm z6NMI#4P9&vsF{7n&>Svmnv2T0y*Na5M%fd zV*&RTth5lMz#jEshi(h{04taXf&8nTWLovF(koIb4JzHsg1?T`~ g=S^1mG`GIU3vWRM+|hb$c^zGN>H=<{2Lo8w6Qk3AE&u=k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 60e15fe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19c8.19f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e67b10 edx=00003879 esi=ffdd0010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272713000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.722173 0.368379 -1.01214e-025 9.90108e-022 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a0000 2685c8d8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_description.txt deleted file mode 100644 index 60e15fe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x19C8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x19C8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(19c8.19f8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0001ed2d ecx=07e67b10 edx=00003879 esi=ffdd0010 edi=0fce4fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 7.272713000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-0.722173 0.368379 -1.01214e-025 9.90108e-022 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003a0000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003a0000 2685c8d8 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b5 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003a0000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/66952/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 85490246bb48231ba2f48714cb567d938eb9ac76..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 389 zcmb7;Jr08~422y)Fb1Chrm7=1$Spee2)zN7xLDds?Z^>8>eA6{Z0<|wkIGg@pZuPm z6NMI#4P9&vsF{7n&>Svmnv2T0y*Na5M%fd zV*&RTth5lMz#jEshi(h{04taXf&8nTWLovF(koIb4JzHsg1?T`~ g=S^1mG`GIU3vWRM+|hb$c^zGN>H=<{2Lo8w6Qk3AE&u=k diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 434f7b115be160637876b57d33975e40133ea81b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p10S8xdVkrqI-=&E%eYvu-K#uSXjguNF$b(X;etzju%Bmg@9mV z6AP_UD1wEJa|(V$Lu`x+LXHGMvDqtx1w+RFym=RLhc=SAd-I$B`Jf^a$Ba;7z`2I!Y{UC+ z6yZd>TJ*Y6_S9;F>ogUGWu=j)slq$aR0~_IN1GY*S~GVHqUO3|L0A-)g_UTH^=Y&S6g&kOKMBBzZ!Bm(pi@Vtpe}^XZag(-Ew^(Yh00PB!)OYYCnhMyCM+ovl_H~HF)Y!_Aj{ZR;--2DdktHHt-yNQ EAErR^_W%F@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 8fb107a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B48: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B48: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b48.1328): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=003fed2d ecx=07de7b10 edx=00003879 esi=ff230010 edi=0fd04fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.698825805255558240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.502036400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.47552e-023 2.68007e+020 -1.76006e+031 2.7836e+038 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ec8130 07e45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00227000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00227000 733ecba7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00227000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_description.txt deleted file mode 100644 index 8fb107a..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1B48: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1B48: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1b48.1328): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=003fed2d ecx=07de7b10 edx=00003879 esi=ff230010 edi=0fd04fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.698825805255558240000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.502036400000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=8.47552e-023 2.68007e+020 -1.76006e+031 2.7836e+038 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07ec8130 07e45930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 00227000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 00227000 733ecba7 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62b4 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 00227000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/69360/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 434f7b115be160637876b57d33975e40133ea81b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p10S8xdVkrqI-=&E%eYvu-K#uSXjguNF$b(X;etzju%Bmg@9mV z6AP_UD1wEJa|(V$Lu`x+LXHGMvDqtx1w+RFym=RLhc=SAd-I$B`Jf^a$Ba;7z`2I!Y{UC+ z6yZd>TJ*Y6_S9;F>ogUGWu=j)slq$aR0~_IN1GY*S~GVHqUO3|L0A-)g_UTH^=Y&S6g&kOKMBBzZ!Bm(pi@Vtpe}^XZag(-Ew^(Yh00PB!)OYYCnhMyCM+ovl_H~HF)Y!_Aj{ZR;--2DdktHHt-yNQ EAErR^_W%F@ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e1afc80fe27093f1293103a29e5c0eb05f34a532..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1745 zcmb`GM{^S~6vy9sJz3vm-#BDuePTHJ8*Fmo8*t_e0HJqQI0;Fpp?3(q_ul0M5_;$z zVhAO4nQ9Q3_;%@^reOk zA5k@O)aWr|$Bmybanj@|Q>TS|db+x%c1B%&!^~N;=gghgIDf&yMT?g#UABD1%2lh^ ztZiDie#6F1o40J;wtdIWUAy<}-M9b1!9$0S96fgY#K}{q&xlNO%h_|SZRamsyma}> z)%I)GZ`{0f`_A2a_a8ib^!Q0f_UW_E=PzEq>U#a=?Ys9MKFZvu&tJZN`=0;t^H=xp z9);T)iss<&Uri~U+0V@rX2MvqnDGju3rupOEqNvQ+9N6<5Xh#qVPo3(8=~mMRvR@s z9W&&thw3;)En|#h9)~#XghSHJk{+Cq#JWsg)A2Ihni0#WWy~_}by7U(D$1{L6xDN3 zS*)9mrd!$oYAow58!ekGg(bHv0G|OphJIr{F!M>jm|5#DP=qEf!fc4ILCBQ|kO5cR zNBWK-bBw>tRg@QTjRwyW9I69wEj?U8pN`=UG~)vpF;(sntIA!XEO#^=OV`q~WD+Ru z=YjHrZd?-c!ycgdlmb1!gQvhD<`{aG%+j|EEJI5I*6B|;iB^H;fPKku{MW`Y!Z{GI z#~}zIklKS2;vaBB1nl+Ra4ksuPxDoAm4sZ8qeT0_FdXk)%V?$?U6e~CC_S!})EcKY zj=oR!stFrn5}~X{yE@;SRONYKj*$ z?zyj~(<#Yl0nEp+PM~tE*I|8ppbIFun}jrB%F&(7^$uxJa@G32`m>q$&GwzhjJ4{# zQq?l-z|W@LlVK~%t7axc;iEwnT0Rg?)E90U6JD7o7@Ch3a3(NIsBEC8YC&s5Ye(xq HD{X%O!gDRl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 79f1a7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8.1eb8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=003fed2d ecx=07ed7b10 edx=00003879 esi=ff230010 edi=0fc6cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.47269e+012 -3.57182e+016 2.78014e+036 -0.00217856 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003af000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003af000 09d65a6a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003af000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_description.txt deleted file mode 100644 index 79f1a7e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(8.1eb8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=003fed2d ecx=07ed7b10 edx=00003879 esi=ff230010 edi=0fc6cfd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=5.47269e+012 -3.57182e+016 2.78014e+036 -0.00217856 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fb8130 07f35930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003af000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003af000 09d65a6a 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d629e 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003af000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7015/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index e1afc80fe27093f1293103a29e5c0eb05f34a532..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1745 zcmb`GM{^S~6vy9sJz3vm-#BDuePTHJ8*Fmo8*t_e0HJqQI0;Fpp?3(q_ul0M5_;$z zVhAO4nQ9Q3_;%@^reOk zA5k@O)aWr|$Bmybanj@|Q>TS|db+x%c1B%&!^~N;=gghgIDf&yMT?g#UABD1%2lh^ ztZiDie#6F1o40J;wtdIWUAy<}-M9b1!9$0S96fgY#K}{q&xlNO%h_|SZRamsyma}> z)%I)GZ`{0f`_A2a_a8ib^!Q0f_UW_E=PzEq>U#a=?Ys9MKFZvu&tJZN`=0;t^H=xp z9);T)iss<&Uri~U+0V@rX2MvqnDGju3rupOEqNvQ+9N6<5Xh#qVPo3(8=~mMRvR@s z9W&&thw3;)En|#h9)~#XghSHJk{+Cq#JWsg)A2Ihni0#WWy~_}by7U(D$1{L6xDN3 zS*)9mrd!$oYAow58!ekGg(bHv0G|OphJIr{F!M>jm|5#DP=qEf!fc4ILCBQ|kO5cR zNBWK-bBw>tRg@QTjRwyW9I69wEj?U8pN`=UG~)vpF;(sntIA!XEO#^=OV`q~WD+Ru z=YjHrZd?-c!ycgdlmb1!gQvhD<`{aG%+j|EEJI5I*6B|;iB^H;fPKku{MW`Y!Z{GI z#~}zIklKS2;vaBB1nl+Ra4ksuPxDoAm4sZ8qeT0_FdXk)%V?$?U6e~CC_S!})EcKY zj=oR!stFrn5}~X{yE@;SRONYKj*$ z?zyj~(<#Yl0nEp+PM~tE*I|8ppbIFun}jrB%F&(7^$uxJa@G32`m>q$&GwzhjJ4{# zQq?l-z|W@LlVK~%t7axc;iEwnT0Rg?)E90U6JD7o7@Ch3a3(NIsBEC8YC&s5Ye(xq HD{X%O!gDRl diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 2abfa285e97456eeaad2637769422d3de766baaf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL;0V_OKB=-K|9NgZNR{?FE%oF^V=e66`F5G=h!ncu|Z^l0rL+ zYivYB1clf*mw-YFQwSoa$YBaiBeRjnK|;p=yqOER13@Hn_vSZm-v7P%*j=JN{00Y! z0?Ux-AQ7c0(dyWn`Oz=m7JiRBUpP7Ned@-?r~77SE9YJoqpv3~JZW4x{cG&vnRn}_ zF0FoEy0$cZ>+z!__1fFv69ePJ<>_b158YT>+kfZ4p7_|=pI4_2AHBUXa=f~6er|F7 z^7WgqUVKXFE0+4V7AdDIr`?Qe&hIdl&i9lk-|ObdB; zVYbyB=$_}K=Zt5=Q+Z0y4h%P;SW(&G0*1xgPyCl_qChNy>Gr>0h`_?+Qv-id>Nn3Vx;r; vqHX4c&Q$`VaacQ3K`BvTzfe(sqy#L1Wl|`plxbzQ)I971Y!S8$>urAkd}8x? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 04aca39..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC90: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC90: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c90.bd8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07e67b10 edx=00003879 esi=12768f40 edi=0fc54fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.7735e-012 2.22296e-025 -2.0682e-017 -4.56143e-017 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002c7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002c7000 1d6dbdc5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002c7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_description.txt deleted file mode 100644 index 04aca39..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xC90: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xC90: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(c90.bd8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00006d2d ecx=07e67b10 edx=00003879 esi=12768f40 edi=0fc54fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.721343803397653600000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-1.7735e-012 2.22296e-025 -2.0682e-017 -4.56143e-017 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f48130 07ec5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002c7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002c7000 1d6dbdc5 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62a7 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002c7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/7774/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 2abfa285e97456eeaad2637769422d3de766baaf..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL;0V_OKB=-K|9NgZNR{?FE%oF^V=e66`F5G=h!ncu|Z^l0rL+ zYivYB1clf*mw-YFQwSoa$YBaiBeRjnK|;p=yqOER13@Hn_vSZm-v7P%*j=JN{00Y! z0?Ux-AQ7c0(dyWn`Oz=m7JiRBUpP7Ned@-?r~77SE9YJoqpv3~JZW4x{cG&vnRn}_ zF0FoEy0$cZ>+z!__1fFv69ePJ<>_b158YT>+kfZ4p7_|=pI4_2AHBUXa=f~6er|F7 z^7WgqUVKXFE0+4V7AdDIr`?Qe&hIdl&i9lk-|ObdB; zVYbyB=$_}K=Zt5=Q+Z0y4h%P;SW(&G0*1xgPyCl_qChNy>Gr>0h`_?+Qv-id>Nn3Vx;r; vqHX4c&Q$`VaacQ3K`BvTzfe(sqy#L1Wl|`plxbzQ)I971Y!S8$>urAkd}8x? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bacdf1dcab76dab5bb1d433b582ca97b29c7ca8e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1668 zcmb`GJ#O1D6vrPe!Sqs4-Z~hdrXr(nAZO|gI`;^Ya+v}h&~We+Y(ewe`iFW;JbhiDfAik?kvq< zz1LdK`L*!dVm6k#MSILlx zKa{u1J7rV`N`KjvQj6JuZEvETQ24f>E{2X-L`4|-GRO!3dFEP1o4 zXtGK&Qb$xNEmq*uIqZPhym!L&$_lSml`yRg(d!+z%{MEIv4a|_fWElUq1w=w10eTE6#t5(Xd=fdXsZvjj2ny#?w&Jr~2enPjS-K4q6U2EMI6m zbgW4CPW=Nun|qu3-)_u5UFxHU(G_g$qN#nX f<}TW~jSl8vU2qXuG4DH`>KE(}>>l<2J8k~}@Dj+# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 6b281c0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1524: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1524: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1524.11a0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07ef7b10 edx=00003879 esi=12768f40 edi=07cfafd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 5.561562000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=16227.8 -2.75991e-034 -1.02865e+022 4.62194e-036 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b1000 3fb4e657 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_description.txt deleted file mode 100644 index 6b281c0..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,194 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1524: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1524: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1524.11a0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=00000d2d ecx=07ef7b10 edx=00003879 esi=12768f40 edi=07cfafd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.746676551307510880000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 5.561562000000000000000e+0006 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=16227.8 -2.75991e-034 -1.02865e+022 4.62194e-036 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07fd8130 07f55930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 003b1000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 003b1000 3fb4e657 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ac 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 003b1000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/8354/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index bacdf1dcab76dab5bb1d433b582ca97b29c7ca8e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1668 zcmb`GJ#O1D6vrPe!Sqs4-Z~hdrXr(nAZO|gI`;^Ya+v}h&~We+Y(ewe`iFW;JbhiDfAik?kvq< zz1LdK`L*!dVm6k#MSILlx zKa{u1J7rV`N`KjvQj6JuZEvETQ24f>E{2X-L`4|-GRO!3dFEP1o4 zXtGK&Qb$xNEmq*uIqZPhym!L&$_lSml`yRg(d!+z%{MEIv4a|_fWElUq1w=w10eTE6#t5(Xd=fdXsZvjj2ny#?w&Jr~2enPjS-K4q6U2EMI6m zbgW4CPW=Nun|qu3-)_u5UFxHU(G_g$qN#nX f<}TW~jSl8vU2qXuG4DH`>KE(}>>l<2J8k~}@Dj+# diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f1d2af4ad58386aa40fea661912d555ee5d67039..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=8V;bJqmHz^;-QL5RU#HfN)qLeR=0MG!-pR2DWnUW`VxND&c5 zBp`yO73?H)2^bJDU@tik#3IEm!FXWE_@6iLLhisuGIwu&^M4=nwYx+m{Km$J0>_Z( zG!Z2UL6zxeiRe0fXW&B$O~NjYyj!KScV_ONx;CK)l1DFhzb=^K{M57Qx6j{PSRI<* zomgM~_IqdM=HiFp?Q@Ox(&eeO{o9jv<;nKYpW&i`7n|PyunZ^K zeA(+})l;i|uG3T&R+UDcrW)@=QxdjWUuxyd2d$1{5ViIkOTx0SDy&7{Ii7@;^Tz|r z^_pxOb$4N|H9hE_a6z~zToxLk7ItB|5gi#jDW<}FdECpk_`5WjkDIKWAwSdBq+qJ8 zj=?zaRDt(bLd$uj&})i>6mT6;D2%XzJDtJ~9BaoFb8IkT&JKpmd@yhfgrP7Js+>3; zcZl=TJuHd*Y@c{OYst+Y;1n1l$1@TtVJu9AnUH}x_q`;raacg|l41PMrV-Ja80ax1 zV+`m#m=J$FOb_&KZ&-`!|I=dITa{DMy z@af(9T#4?+Nme`1e6XT^NaLYneLuhZScnSTs!w38T((bO&DGcucIY&!Io{RS^I^@W zv$^60kdLrS;BwTvusc5S1@zrbJ@;YGaa~><40+IZ)$YEIvibK-`tM*%Y_4PNT%K*= zv)PRD?4#<~HI-*3hS4mnlbWC$o3NrxREdm&#jsQ>gDhj)shesYwgKCOZNd86UuMAc Ap#T5? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index b3a235e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1380: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1380: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1380.1fe8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0007ed2d ecx=07e97b10 edx=00003879 esi=ffcb0010 edi=07cc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6119.96 -1.32184e-019 -1.08566e-029 -3.95582e-019 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f7000 367d01f6 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_description.txt deleted file mode 100644 index b3a235e..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,193 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1380: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1380: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1380.1fe8): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=001a4002 ebx=0007ed2d ecx=07e97b10 edx=00003879 esi=ffcb0010 edi=07cc0fd4 -eip=005bdfc9 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz na pe nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210206 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.729788052700939360000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6119.96 -1.32184e-019 -1.08566e-029 -3.95582e-019 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:001a4002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 0060d6fc 00000000 0019f9b4 0019f984 image00000000_00400000+0x1bdfc9 -0019f9c4 005ff93f 0019fa24 005ffbc2 0019fa1c image00000000_00400000+0x20d6fc -0019fa1c 005ff1ef 0019fa44 005ff1f9 0019fa3c image00000000_00400000+0x1ff93f -0019fa3c 008ec955 0019fa70 008ec986 0019fa64 image00000000_00400000+0x1ff1ef -0019fa64 008ef283 0019fb98 0019fa7c 008ef2db image00000000_00400000+0x4ec955 -0019fb98 009298d4 00000001 00000000 00000001 image00000000_00400000+0x4ef283 -0019fc30 0079d2a5 0019fc44 0079d2ec 0019fcdc image00000000_00400000+0x5298d4 -0019fcdc 007987f5 0019fcf0 007987ff 0019fd98 image00000000_00400000+0x39d2a5 -0019fd98 00473a07 0019fdd8 00473a11 0019fdbc image00000000_00400000+0x3987f5 -0019fdbc 004736f3 07f78130 07ef5930 004041f2 image00000000_00400000+0x73a07 -0019ff00 0047b058 0019ff2c 0047b062 0019ff24 image00000000_00400000+0x736f3 -0019ff24 009642e3 0019ff38 009642fe 0019ff70 image00000000_00400000+0x7b058 -0019ff70 7572f989 002f7000 7572f970 0019ffdc image00000000_00400000+0x5642e3 -0019ff80 770b7084 002f7000 367d01f6 00000000 KERNEL32!BaseThreadInitThunk+0x19 -0019ffdc 770b7054 ffffffff 770d62ce 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -0019ffec 00000000 00963a10 002f7000 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1a4002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x052e1964 -STACK_DEPTH:16 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff93f -STACK_FRAME:image00000000_00400000+0x1ff1ef -STACK_FRAME:image00000000_00400000+0x4ec955 -STACK_FRAME:image00000000_00400000+0x4ef283 -STACK_FRAME:image00000000_00400000+0x5298d4 -STACK_FRAME:image00000000_00400000+0x39d2a5 -STACK_FRAME:image00000000_00400000+0x3987f5 -STACK_FRAME:image00000000_00400000+0x73a07 -STACK_FRAME:image00000000_00400000+0x736f3 -STACK_FRAME:image00000000_00400000+0x7b058 -STACK_FRAME:image00000000_00400000+0x5642e3 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x052e1964) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x052e1964/9913/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f1d2af4ad58386aa40fea661912d555ee5d67039..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*9=8V;bJqmHz^;-QL5RU#HfN)qLeR=0MG!-pR2DWnUW`VxND&c5 zBp`yO73?H)2^bJDU@tik#3IEm!FXWE_@6iLLhisuGIwu&^M4=nwYx+m{Km$J0>_Z( zG!Z2UL6zxeiRe0fXW&B$O~NjYyj!KScV_ONx;CK)l1DFhzb=^K{M57Qx6j{PSRI<* zomgM~_IqdM=HiFp?Q@Ox(&eeO{o9jv<;nKYpW&i`7n|PyunZ^K zeA(+})l;i|uG3T&R+UDcrW)@=QxdjWUuxyd2d$1{5ViIkOTx0SDy&7{Ii7@;^Tz|r z^_pxOb$4N|H9hE_a6z~zToxLk7ItB|5gi#jDW<}FdECpk_`5WjkDIKWAwSdBq+qJ8 zj=?zaRDt(bLd$uj&})i>6mT6;D2%XzJDtJ~9BaoFb8IkT&JKpmd@yhfgrP7Js+>3; zcZl=TJuHd*Y@c{OYst+Y;1n1l$1@TtVJu9AnUH}x_q`;raacg|l41PMrV-Ja80ax1 zV+`m#m=J$FOb_&KZ&-`!|I=dITa{DMy z@af(9T#4?+Nme`1e6XT^NaLYneLuhZScnSTs!w38T((bO&DGcucIY&!Io{RS^I^@W zv$^60kdLrS;BwTvusc5S1@zrbJ@;YGaa~><40+IZ)$YEIvibK-`tM*%Y_4PNT%K*= zv)PRD?4#<~HI-*3hS4mnlbWC$o3NrxREdm&#jsQ>gDhj)shesYwgKCOZNd86UuMAc Ap#T5? diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/SystemDebugger_description.txt deleted file mode 100644 index 24ca36b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x00000000001a4002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x127b572d/75112/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 8d85b40c1a012f676ba21a3bdc3304345434116c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 136606 zcmeI54~!Jm9mi+6;|?w7fgqd`SQ|x!rmZw0)CzkkNwFGB(-fsZEUlqIp=r~`h>Ev| zR*jWtqu8`f+JH^LKW$M#Aq^;%wg}}sFL;O$K#-gSMUOwJcXHh8?>9Sd@6Fuo?#%4` z+neu8-o5vmeeeB#zt8vW-p=elO&g>Q)|#6&y<9aUrQJfk1q*Wavnw^NiHYq*= za%|0shwl7Vo%YKcyO%F{eeSh8Z~7>G*R&PC`NG2MoBpzNAK#&pl%8+O=Z(^y%t8;Qs4WXHy+a6=h%%7)R-xt*NOI9UUD)mUrHH zM=V;jNYvHUse7S=#x_$OLltFU5O|c*5cB5ElhT{oQ>RXel`B_@i4!NP`(VewNWG%6 z7#={h=h2!UQ5D;_Z#U^~XN(^|UhaY00*D1m7ANpuy1Bmi5ZAXZq#0t$lqq&{n~rVU zwoPi!`=!>kCrl`p0Q28T)z3Z9O6!T$t5=(}wlikWo-Or%u-rs2-xC4Je>=_gV-Gaa zI-;SWL3DR_+ew~3cJ$~`QC(fl{?Agyb3cL*L6Q1%`){gsWybJVnlGA~n({gq>fCqV zebV=HW%|T)?*w!W(&@C+VjC^x^%|Y+IiH>WU0q#b#E22n=Qq5EkC|l>&^0)C@Sqqw zcC6InpS0%r9@hOe%_(@!r|yGQt5!*0e0>-tIs&>5tj&P~2gH~$W27!yDI_<0z|}e5 zq)C&cpC3k-Iy@7By#Blg_V3@X?tv{X_JHGaKE5Vk_~mmx-Zv=G5ise`dtl$bed6Ma zFP0kpgF2H({dNj*Bh{J$q5h4Ii)=Q_(~1_H^A#W%-Qj}zvykoW z?PBD}k#Y~bLSb6>fa7yMz8<9Pr|Hq949^OIqWbe5*u8tVx(8mi?19I~7W3!N=b=Rl z&iNGT@#&V-pG9qJYg4b+tTXn2t8>0NJ^kkI(ocLup7pnCZD%Xzd~y%?-ST@DE=atJ-T?%vKfec%LJO)wd+)l- znSttW_n6@I*r7v*gz`QWXfG8kudN9Ep?!HG7nvP<{h@sk^~%2~*7`&H@&zujLTvSi z_9c|_=jK@I5AFRC*TE{W(;wP9P|d#~vC<#f`zNf!m13hmw0EeOzr$joKeYE(R2Qp7 zu0OPQp_czcBh??;`!A@=6(iFh+PhRLnBkG=5AA~y)5EHv>ksWcs1)3kQ1yrQ!3pVc z<xAKHg2nvdSf)*ssYs7Clpm8Czl z4_`2!J$lw3+WV|TG|PF?AKFJFRsddI>ksV%P$9Y{UFi?)qZ2A1&yMwn_5mpn?Xr&a zhxXBm6rlH#`a}Bw=|{hGQT?HP^a2GOK|%eYeZb`7vAnJR&^{jGgb+nP{h@sb)Z^pA zq(8Kek1!!clGmTLA2)8CZj*0(zg|cJMC?Y_8`?*#LUitR{c*pKPJoC#%g1|e@t7a6 z7!kOa`a}B&;K#rv?)NbeA;J)FzmE`p)ULgL7dz&G00`I;$XJfnn(f|{#n#LddbE1e z0JEJHU8dVJ7CTLLTA5!jI!$&h*{Z)P@xIAUk)2iMYhtU}&RXouR!tc$v~;uCu5UKw ztJP{|yGpAv&DToWCZ6>8X|+xG=yt13hcbDWxyRqE#m<}j+(=U+)@>zX-Bu#dZN;N* zr!DJcEOypn_nEqX6&SClxYuu2-0QaDUboYh^)ePaYq1rR=d147R^79$x@TK;&vx3f zUdCc)Ew*aXe3N^!P43AyxhLD?p6s+`y^O`qT5OXkEbfKHy|B0!7WZ_2u&kG{*jbBh zHibERA2jo7hchq(9Nd&TI{qg5R`>Gr3nP6#f9M6dh^WiRH= zotys#gzoNcv1ZL0F>Ts3Rfk?0$NwWx%mi*Vo35<$X!J)^#rEyn^ZeD$mMvSP2Ipwp z7hSEMjKMvWrdJIX(p)iR$`lp3ssHf94@>?pCj+PJESZm24c=n@t5&TtF_%V9PmdTo zcC6$-({*IYm>~JE2Di9Kxsk?-hK2^gkN0+E-MV#h?R_*h;6_&)ghnQ1UtF>C>l0U0t2z|0NGGC25L@ zzXJ_QKIeS$$tNZI*OLU&W3K)9m(bvC@*`HSUd_Y$mEPW7F=4_4$^ZKvV@lFATmB5z z=CP=e*%y1xxq0(u$^HWxTb(439&;_o-$sKy%)hCrso%br2WHKhCHXJ&7*Eos73FWy zK=5_WLeDu5A3iLqtE+iEejNa>#W>qZCHbow%%4ABZuNfc(xpq~-v6^R*BC_v9PyVL z6uQpY)zu|Nj2I#LPX$@W1RV44x8aood<{-&S!V0x{M&JI6)?~j{*xz9_Je=Y*z@-A zg}-uFaMk7KQbr6(WFIMioAV2fCut>;{cmCK_4T)bpjGJn!QQlOLgf$kCiZNE#vkna zu@8+u*xRxXg+JIAWFI(xurJC!Q2tBB*q1@p+0=sk!QL6bGDq3+2m3OqI-lN;KiE5m=fg-7f3Wv~sJkWd{K4KG zIG;xA{K4KQn(mj;`O`FR@%-LBzj9|t{>*-Exr<@GYXWlLgS~5XzD&Tr_XVT3MO=MY z2!ktxK&ukxgG#?S+h=HLrC%@m*{u+Xkn`t#3wO^$iSNobKExs4j8l$)`li_|^Ii6AaS*34u`F}#* zG4!!!T^u=bq!a`GpSPcX`${bf7cS&^KjB3xxacXBU~mKPbF~~lew=eZPPNjX z3*^%(!eHZzFTR)`#~tHyqra+P-DT*eylfa;e%WQ0na1$%Pts(5e`SMQq=H*hZfsZ> zJhfuQ3ey<=jU>wV*$U2C4c(NRG!zD>t-pggb?Q{k|Lf`^72KC8_iOpLH?05fc@X8w zb)b}fd6zn{Xwf3cz)8!$Qy%A1DqT;vfBf;s%;tYo8{?cj#pWr$Vw05IFOPZd9A2?h zT;FEo&gX-bkh`z>S77eG<*(#Eo)@j4;(Cu;Csc6mER!`ISN4e$C-`xm@9&kSJLk^D zRle%rPd@oX=6+>vsfzrorsTM<dgce)_50^Odf<+_R4I z=0QsC6XoOq&^pTB$epiw45ZvyzLNP5;M_~*KfrS@n!l3!K>n?J+x_3!*~yRde19Lv zx!dZm6-U&;L|16*@8Jw5+~=C131>eMN@=aZzn+ygTA ztL1@&wVZ!abMJfb%RdTMXh*&+rPGMNGn4DQpElZ@o!Ode(_6Fp@%rXmTWhpc&H7=H zGRVm9d&sxOmom_v(I+acK2d)Eg#7La`MneJJ16A#O=!lKK^V)>9?bde=g0Ws2l<^6 zTG|+wG1{!r=9>KXN67DvFsA3fGa_w_%NQ-6#PjA~KvjNEM02HH$)g-lKmY_l00ck) z1V8`;KmY_l00ck)1PT)vSv}~w3pDMO3kRicr~cOpkBsLn6#J(3wl?w73(tvPEc~&! z?YrL*7gZ1XYCNMgM>TrzpiAmB?Oo%NjNt3huWi~S=vbS1WONqs-9qtnG}I2BYK`K8 zl(u2V8*j+)^_Gu~s7l>z9UGNRv47b8*=Nl34DIhJG7j$3v3GlWd-L%h*uS60?UrNW z&~p47;Adyf$Q-WaxR`V6&K-K}GKaXa=Qw5j)*P6#9=!3V2&z=?h`5nGbb6(*`p7ZD> zeolyU_~7tiJ$ChRE9^YH#((VS(a2+GR$k&iL7(yDJrgB&sk7VoPtp4{;}W}D{-1Yu z#VU3;@t^y=J9e=Ln*6m*08DJaX$eb!_ej<(t=){?!;ZZ&=T!AZ<1WnY-1$j6rvv^S_1n zhg$t+q2@3B+O@0&#}S49Ev| zR*jWtqu8`f+JH^LKW$M#Aq^;%wg}}sFL;O$K#-gSMUOwJcXHh8?>9Sd@6Fuo?#%4` z+neu8-o5vmeeeB#zt8vW-p=elO&g>Q)|#6&y<9aUrQJfk1q*Wavnw^NiHYq*= za%|0shwl7Vo%YKcyO%F{eeSh8Z~7>G*R&PC`NG2MoBpzNAK#&pl%8+O=Z(^y%t8;Qs4WXHy+a6=h%%7)R-xt*NOI9UUD)mUrHH zM=V;jNYvHUse7S=#x_$OLltFU5O|c*5cB5ElhT{oQ>RXel`B_@i4!NP`(VewNWG%6 z7#={h=h2!UQ5D;_Z#U^~XN(^|UhaY00*D1m7ANpuy1Bmi5ZAXZq#0t$lqq&{n~rVU zwoPi!`=!>kCrl`p0Q28T)z3Z9O6!T$t5=(}wlikWo-Or%u-rs2-xC4Je>=_gV-Gaa zI-;SWL3DR_+ew~3cJ$~`QC(fl{?Agyb3cL*L6Q1%`){gsWybJVnlGA~n({gq>fCqV zebV=HW%|T)?*w!W(&@C+VjC^x^%|Y+IiH>WU0q#b#E22n=Qq5EkC|l>&^0)C@Sqqw zcC6InpS0%r9@hOe%_(@!r|yGQt5!*0e0>-tIs&>5tj&P~2gH~$W27!yDI_<0z|}e5 zq)C&cpC3k-Iy@7By#Blg_V3@X?tv{X_JHGaKE5Vk_~mmx-Zv=G5ise`dtl$bed6Ma zFP0kpgF2H({dNj*Bh{J$q5h4Ii)=Q_(~1_H^A#W%-Qj}zvykoW z?PBD}k#Y~bLSb6>fa7yMz8<9Pr|Hq949^OIqWbe5*u8tVx(8mi?19I~7W3!N=b=Rl z&iNGT@#&V-pG9qJYg4b+tTXn2t8>0NJ^kkI(ocLup7pnCZD%Xzd~y%?-ST@DE=atJ-T?%vKfec%LJO)wd+)l- znSttW_n6@I*r7v*gz`QWXfG8kudN9Ep?!HG7nvP<{h@sk^~%2~*7`&H@&zujLTvSi z_9c|_=jK@I5AFRC*TE{W(;wP9P|d#~vC<#f`zNf!m13hmw0EeOzr$joKeYE(R2Qp7 zu0OPQp_czcBh??;`!A@=6(iFh+PhRLnBkG=5AA~y)5EHv>ksWcs1)3kQ1yrQ!3pVc z<xAKHg2nvdSf)*ssYs7Clpm8Czl z4_`2!J$lw3+WV|TG|PF?AKFJFRsddI>ksV%P$9Y{UFi?)qZ2A1&yMwn_5mpn?Xr&a zhxXBm6rlH#`a}Bw=|{hGQT?HP^a2GOK|%eYeZb`7vAnJR&^{jGgb+nP{h@sb)Z^pA zq(8Kek1!!clGmTLA2)8CZj*0(zg|cJMC?Y_8`?*#LUitR{c*pKPJoC#%g1|e@t7a6 z7!kOa`a}B&;K#rv?)NbeA;J)FzmE`p)ULgL7dz&G00`I;$XJfnn(f|{#n#LddbE1e z0JEJHU8dVJ7CTLLTA5!jI!$&h*{Z)P@xIAUk)2iMYhtU}&RXouR!tc$v~;uCu5UKw ztJP{|yGpAv&DToWCZ6>8X|+xG=yt13hcbDWxyRqE#m<}j+(=U+)@>zX-Bu#dZN;N* zr!DJcEOypn_nEqX6&SClxYuu2-0QaDUboYh^)ePaYq1rR=d147R^79$x@TK;&vx3f zUdCc)Ew*aXe3N^!P43AyxhLD?p6s+`y^O`qT5OXkEbfKHy|B0!7WZ_2u&kG{*jbBh zHibERA2jo7hchq(9Nd&TI{qg5R`>Gr3nP6#f9M6dh^WiRH= zotys#gzoNcv1ZL0F>Ts3Rfk?0$NwWx%mi*Vo35<$X!J)^#rEyn^ZeD$mMvSP2Ipwp z7hSEMjKMvWrdJIX(p)iR$`lp3ssHf94@>?pCj+PJESZm24c=n@t5&TtF_%V9PmdTo zcC6$-({*IYm>~JE2Di9Kxsk?-hK2^gkN0+E-MV#h?R_*h;6_&)ghnQ1UtF>C>l0U0t2z|0NGGC25L@ zzXJ_QKIeS$$tNZI*OLU&W3K)9m(bvC@*`HSUd_Y$mEPW7F=4_4$^ZKvV@lFATmB5z z=CP=e*%y1xxq0(u$^HWxTb(439&;_o-$sKy%)hCrso%br2WHKhCHXJ&7*Eos73FWy zK=5_WLeDu5A3iLqtE+iEejNa>#W>qZCHbow%%4ABZuNfc(xpq~-v6^R*BC_v9PyVL z6uQpY)zu|Nj2I#LPX$@W1RV44x8aood<{-&S!V0x{M&JI6)?~j{*xz9_Je=Y*z@-A zg}-uFaMk7KQbr6(WFIMioAV2fCut>;{cmCK_4T)bpjGJn!QQlOLgf$kCiZNE#vkna zu@8+u*xRxXg+JIAWFI(xurJC!Q2tBB*q1@p+0=sk!QL6bGDq3+2m3OqI-lN;KiE5m=fg-7f3Wv~sJkWd{K4KG zIG;xA{K4KQn(mj;`O`FR@%-LBzj9|t{>*-Exr<@GYXWlLgS~5XzD&Tr_XVT3MO=MY z2!ktxK&ukxgG#?S+h=HLrC%@m*{u+Xkn`t#3wO^$iSNobKExs4j8l$)`li_|^Ii6AaS*34u`F}#* zG4!!!T^u=bq!a`GpSPcX`${bf7cS&^KjB3xxacXBU~mKPbF~~lew=eZPPNjX z3*^%(!eHZzFTR)`#~tHyqra+P-DT*eylfa;e%WQ0na1$%Pts(5e`SMQq=H*hZfsZ> zJhfuQ3ey<=jU>wV*$U2C4c(NRG!zD>t-pggb?Q{k|Lf`^72KC8_iOpLH?05fc@X8w zb)b}fd6zn{Xwf3cz)8!$Qy%A1DqT;vfBf;s%;tYo8{?cj#pWr$Vw05IFOPZd9A2?h zT;FEo&gX-bkh`z>S77eG<*(#Eo)@j4;(Cu;Csc6mER!`ISN4e$C-`xm@9&kSJLk^D zRle%rPd@oX=6+>vsfzrorsTM<dgce)_50^Odf<+_R4I z=0QsC6XoOq&^pTB$epiw45ZvyzLNP5;M_~*KfrS@n!l3!K>n?J+x_3!*~yRde19Lv zx!dZm6-U&;L|16*@8Jw5+~=C131>eMN@=aZzn+ygTA ztL1@&wVZ!abMJfb%RdTMXh*&+rPGMNGn4DQpElZ@o!Ode(_6Fp@%rXmTWhpc&H7=H zGRVm9d&sxOmom_v(I+acK2d)Eg#7La`MneJJ16A#O=!lKK^V)>9?bde=g0Ws2l<^6 zTG|+wG1{!r=9>KXN67DvFsA3fGa_w_%NQ-6#PjA~KvjNEM02HH$)g-lKmY_l00ck) z1V8`;KmY_l00ck)1PT)vSv}~w3pDMO3kRicr~cOpkBsLn6#J(3wl?w73(tvPEc~&! z?YrL*7gZ1XYCNMgM>TrzpiAmB?Oo%NjNt3huWi~S=vbS1WONqs-9qtnG}I2BYK`K8 zl(u2V8*j+)^_Gu~s7l>z9UGNRv47b8*=Nl34DIhJG7j$3v3GlWd-L%h*uS60?UrNW z&~p47;Adyf$Q-WaxR`V6&K-K}GKaXa=Qw5j)*P6#9=!3V2&z=?h`5nGbb6(*`p7ZD> zeolyU_~7tiJ$ChRE9^YH#((VS(a2+GR$k&iL7(yDJrgB&sk7VoPtp4{;}W}D{-1Yu z#VU3;@t^y=J9e=Ln*6m*08DJaX$eb!_ej<(t=){?!;ZZ&=T!AZ<1WnY-1$j6rvv^S_1n zhg$t+q2@3B+O@0&#}S49MClJ&EF?AcA5q*{ zwc1!sG)imRqz%wSw6sM<3o)Q5X;vt>ZkAmL1QDdGL6K#b;I1rtd(NA8XYYIaX6C&& z@7L^nZ*uqE^XA@r&iQ=r%+7oBOVcW}5n5A|rk81#B(yuJw|sfVesP_qHPW$$hKxP! zdzv=&F9~htOyl+`ns&>vgf@AyVb^Ke`Kk(S8ktReD51Ug=i9e_eBZp~`|dq+-K>tv z(fe*%H~X2NZC=~);q%Y5-2Tkj#m_&v>f~d8`2PGyPQJ7Kz}iuluc_Yh_>=#8e?r?M z=i3qs-~Lm>g7ep3J!=1=&L4=!#vbfhliGY+U-!T7yZeqeHvVGnqSk@twyW6_3J8Dz z2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?x zfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9 z00@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9fIkEl z&@%J=SqiI^Ac6NNWOE9PQAH^a0u7WVYp>R`WdEM(45}!@o4{sDPpnz9Mr_)& zNz9)=U)=}Xe~aoOsw1eP3@-wcD4h!l`B_@nwlDQFLct_CaM#t zq6`lLPf!|S>C&ZAdQ;oo-7VIwTPJ4Bn4#{2J;NjQlFDLq0MTAbYko>qG&eV!bhk66 zOqnA0z+C~vf+h14_%GdDn}3MwTUXEwF=x&kJGo8AcJJOTwdeg(?b;J26ia~l@1^SJ z9%!NU#D)zUOj_F+ixw@C`afE1BAD-qfaKpyv;Eiu4YZD^udf$U31&bc}dKKP*Y{Zf%WG2J@>U4vvYDYe*5 zOL@IUXM4_Pr+;s6uNX6CjP&^(@8M%+kpy%NKKS4RF>&HVsmI&2=2twd`#YMG^PErJ z2kY0bm%jM=FiLa;bRAfmqeqX52@@trU3O7OZuWqybG})#W=TJHN0&N06M?M$ya$dP zIil`?oi6r(<8wZ~CSdsGb3WcTDA5rx>Cb!M@ZrPa$}6vw8ofcGIe8p-pT^;wFFGB) zdLE)b?}0;y4(aD`tSQy)R4>Wnpn-04bk4`G1@LPEG@j4-`1vAAv;=JR=RMHT(ILi- z8>in+A#S5OGDoQYq~ju;PV=<91?PM@2u61}r~WKtdwaVWJ9ezx1Fut<);-|(oR6;u zDf?-DbScBLLLjgHya(Fa+SEPps$~y6Nw!$FY#9&DTX4>&P>)Zyp#CgsYip}|y=IHC z2V9-=&7M75K92l2KIxZzB#!jwJw=QCC-|&vWuRAI|w=y|G;D&wF6+ z-o2u>w${-(-`cfn<$WKo^Tlr~c+#Kuz`O6hYkF@dAF~!d=i|o+N}Fp#{L(M`h&=0W z)!NQh&iUjX@Vn*rEL>LhDtZSHsQ&yOKng9W3hlk?E@uX+zujYk*JH+6OOSksbomAKDkGOgPg6(I47}Bc2aleAge^`=CmAOZcikv=2`> zpFH`dKeYErk#LvsMSo}?u4q1bD_VbO@1q*wFIANO&^~;@eD>&Be`xQs645N@Nq=Y` zjaUJAb*(?N4?u`k@ z)nu#wD#eE;J3)3@nXidmW;<=MQ@b=}xX_YKX1lh@l&@B;ne9rg(llQyXq$M__uK(`f-x}CJFm$KMti#=%S{#9VSp5k7= zU2(75ihJEoTGmTh?6k#JOrEd0XIpj8w(6d3)jiuu%X%q`ownGjN%Kwa$u_ws+vJ{X zlY6q0mi1B=J8iK|rm(md7Wcy9URd1I{lT(c%3`N2w%HWs?1eCAFN8UJA93|Wtg7tQXNGVB{%|;Xz2?h zM~)PG_UsW4Jn(=RKYqNbLl@ot9M$Q;g;3Tj|CX{BOO`Cjegi^ZU!Qp4g%`xUdGk~q z2521rk3caK_@UW!WnD_6Kcy;~o13%z)y~eHJEaB}Y24MWRxgji{gkFx4OY-xF=x&k z6}hSZ_~VaD{;!q?PS;s7AFmp`$Nbl?UvFYAjsE_AF>&HV$$z2i$jW1ajgjF+m$U_w#c;))7XTIwaaO!WW=o-4K~ww@z6sL*`e2uEm*KXuKlZW0_rkX zol!cSmaLp;kbTbC+1Y8!zrDR(BoYZ;vxjP(%b3b(xXzs+y3pVW0wk6$U24mo53XLl zTI%`7a)Rk0*DQbL=0Jmj&pCT~dPGf4jpYAT4>6U~6cc|38Weoa`RudLO7?G+6G)G_ z4&h%wgZIgg*sx&(4;xYj1_s3R>C+|uJ3PizPSb4pGgzC)q6TK4?>Xm=9XllZk7#UF zIf3+;Yfk<)8gwxK#>U1W`(7Tn_10S@|Fs_DDYt2P`CBv)e4R7bbI#+(kBh3RDqfFY z2f%AF&UR8k{;CGcmMxQ8eMo!%{rAhg|2Jo@F^UK{;x9GGb)B=fw^xiAGe+{C3$l(0 zIOacO!z%~)8l2R!$kxgEx8vkWV4yGjZ@A$GKlqm$d)^+t@K^2%uDbkO%7~#H*+}}bH!XNB&vJad; z*ym**D1Wdo$UZRsVDE^1Ap9-t7dwumJO}#v{1fb5ZzA9LH#IfsYf%JzEe-qLnH0Y8 z2YY9*ZAKN%AM9$)Q{J}m4QFn(u@dtZ%kn@ao%^&RZ&~$&3EB;{b z9&mvfj`@Rq0g~QscEsPp{zu+iVU`Vng8UzT_+fnv&E@l2u(yF&#G$erjNFOj7CB_75Jf?$=UsZe{OaKhdkD<#DY`>EEl#!$O;>^y&GBEc8`f zvP+N6YQIuBuJ$!eT6{04Hb!w@Cd2)tay+H<(@Njy^8bXaW9rN0`M6x3`*L~iCzZJ= zrJq*%vPr^^?lnl+sTt{cKk#%L`?Bp)49t%PzdH&NoJsWwu*ybK|1+q!kD{(FR! zJO2g@{{|udZcI6p>!wbfnthd#e-Fg?9W?%4@+-;!z;jPO{d6{e?(E;cpI$@OUMb<+ z|K(7-S{g@^_n7iuxNsroe`5*f&+#9pTIe?vSFc*N%9MLcOAF6!FX7xdbaCRui9!tc zf8G)P?JKpcSh0fV{hSvm;i9KhfWeKt&((73)G5yW6xC9HE|5(t4})zlzx;A`9CwV* zjsB*Db(f)=^0HxY?KRh2V;aN1KS`7M{gw4{krHlAxv^nk@Z3{RJ!KlhzmY`wzF5LJ ztD&26lZL{e$ND>%bLYT-m2jpXSGTzQ326?wmUpSNW=gKmYu5nfrB_rAqRz znv&zbk~@FYpp=W_oaMk_lsoGt({j|FIdewt`BK+i?pa59^B^Vn8FKP4XdUHmf*z&a{n3+80N*K|Jk!= zrS9dBJ4>6*U&;OJ!(4MUJw5+2&0W{OySrQN`Et@-?g5$mOnIQpTF$>*b02*0%RUO0 zXh*&+rOSxFE0yVdm^9jqo!XUYle^OT@!F9?bY1;>Y;n2l<^6TGAMoGTOA!W}58xN67Dv zFs5g}Ga_k>OBpSn#PjA~PE~$SL{q6=$)g-lKmY_l00ck)1V8`;KmY_l00ck)1acD? zTUGJx%QWrv%PSH;rT#Z^kBsLn6#Mq})>iS#=9k2;SNufWb=xiCimHn1;~A|vs_`Q# zuBy?rgT^Hp!PleT+`e7Vu~zfQ=q%#9lj7;DuO2bi8pUM^?X^Acyd%TcTRt|XGI6tY zY*aSI{&C+IUog{iw7=)bIJi&84h{?qWaB@2m(edMY?CRrI*m-!3 z|C5s^BafX~d5Qltea4gbOqATE&TixHruS*aC3d&`zwGOcRqSr!zxZWe>|%Eu|HX^3 zjNNJcaoX=3vswz>f8!iG=aDb|xW}F^{!)lNSNx?CyIuUH6uUM4Qj1-UzZ7Ga@t11s zGX6L`kK|aql+4Lh_FYQy-AeIm^&iKfIQ2I`Y1)9%PBPk2`WvD&t;%RK@2esr#=Ok? zvY1ecQdZlvVN=7$^&je?)>t?5`#)sMb&|%ol+mV*mK&O%`JErgbBZYlk{I^#8tfiNwC3{MS_^ z`1<*|aU%v_W8yyN&dxc8+C(C-*Y)VNpO5*vz8VAPE?=MHKD{n_b5QxSf6h~lf%4T~ z(Sy^r`6N1^MClJ&EF?AcA5q*{ zwc1!sG)imRqz%wSw6sM<3o)Q5X;vt>ZkAmL1QDdGL6K#b;I1rtd(NA8XYYIaX6C&& z@7L^nZ*uqE^XA@r&iQ=r%+7oBOVcW}5n5A|rk81#B(yuJw|sfVesP_qHPW$$hKxP! zdzv=&F9~htOyl+`ns&>vgf@AyVb^Ke`Kk(S8ktReD51Ug=i9e_eBZp~`|dq+-K>tv z(fe*%H~X2NZC=~);q%Y5-2Tkj#m_&v>f~d8`2PGyPQJ7Kz}iuluc_Yh_>=#8e?r?M z=i3qs-~Lm>g7ep3J!=1=&L4=!#vbfhliGY+U-!T7yZeqeHvVGnqSk@twyW6_3J8Dz z2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?x zfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9 z00@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=900@8p2!H?xfB*=9fIkEl z&@%J=SqiI^Ac6NNWOE9PQAH^a0u7WVYp>R`WdEM(45}!@o4{sDPpnz9Mr_)& zNz9)=U)=}Xe~aoOsw1eP3@-wcD4h!l`B_@nwlDQFLct_CaM#t zq6`lLPf!|S>C&ZAdQ;oo-7VIwTPJ4Bn4#{2J;NjQlFDLq0MTAbYko>qG&eV!bhk66 zOqnA0z+C~vf+h14_%GdDn}3MwTUXEwF=x&kJGo8AcJJOTwdeg(?b;J26ia~l@1^SJ z9%!NU#D)zUOj_F+ixw@C`afE1BAD-qfaKpyv;Eiu4YZD^udf$U31&bc}dKKP*Y{Zf%WG2J@>U4vvYDYe*5 zOL@IUXM4_Pr+;s6uNX6CjP&^(@8M%+kpy%NKKS4RF>&HVsmI&2=2twd`#YMG^PErJ z2kY0bm%jM=FiLa;bRAfmqeqX52@@trU3O7OZuWqybG})#W=TJHN0&N06M?M$ya$dP zIil`?oi6r(<8wZ~CSdsGb3WcTDA5rx>Cb!M@ZrPa$}6vw8ofcGIe8p-pT^;wFFGB) zdLE)b?}0;y4(aD`tSQy)R4>Wnpn-04bk4`G1@LPEG@j4-`1vAAv;=JR=RMHT(ILi- z8>in+A#S5OGDoQYq~ju;PV=<91?PM@2u61}r~WKtdwaVWJ9ezx1Fut<);-|(oR6;u zDf?-DbScBLLLjgHya(Fa+SEPps$~y6Nw!$FY#9&DTX4>&P>)Zyp#CgsYip}|y=IHC z2V9-=&7M75K92l2KIxZzB#!jwJw=QCC-|&vWuRAI|w=y|G;D&wF6+ z-o2u>w${-(-`cfn<$WKo^Tlr~c+#Kuz`O6hYkF@dAF~!d=i|o+N}Fp#{L(M`h&=0W z)!NQh&iUjX@Vn*rEL>LhDtZSHsQ&yOKng9W3hlk?E@uX+zujYk*JH+6OOSksbomAKDkGOgPg6(I47}Bc2aleAge^`=CmAOZcikv=2`> zpFH`dKeYErk#LvsMSo}?u4q1bD_VbO@1q*wFIANO&^~;@eD>&Be`xQs645N@Nq=Y` zjaUJAb*(?N4?u`k@ z)nu#wD#eE;J3)3@nXidmW;<=MQ@b=}xX_YKX1lh@l&@B;ne9rg(llQyXq$M__uK(`f-x}CJFm$KMti#=%S{#9VSp5k7= zU2(75ihJEoTGmTh?6k#JOrEd0XIpj8w(6d3)jiuu%X%q`ownGjN%Kwa$u_ws+vJ{X zlY6q0mi1B=J8iK|rm(md7Wcy9URd1I{lT(c%3`N2w%HWs?1eCAFN8UJA93|Wtg7tQXNGVB{%|;Xz2?h zM~)PG_UsW4Jn(=RKYqNbLl@ot9M$Q;g;3Tj|CX{BOO`Cjegi^ZU!Qp4g%`xUdGk~q z2521rk3caK_@UW!WnD_6Kcy;~o13%z)y~eHJEaB}Y24MWRxgji{gkFx4OY-xF=x&k z6}hSZ_~VaD{;!q?PS;s7AFmp`$Nbl?UvFYAjsE_AF>&HV$$z2i$jW1ajgjF+m$U_w#c;))7XTIwaaO!WW=o-4K~ww@z6sL*`e2uEm*KXuKlZW0_rkX zol!cSmaLp;kbTbC+1Y8!zrDR(BoYZ;vxjP(%b3b(xXzs+y3pVW0wk6$U24mo53XLl zTI%`7a)Rk0*DQbL=0Jmj&pCT~dPGf4jpYAT4>6U~6cc|38Weoa`RudLO7?G+6G)G_ z4&h%wgZIgg*sx&(4;xYj1_s3R>C+|uJ3PizPSb4pGgzC)q6TK4?>Xm=9XllZk7#UF zIf3+;Yfk<)8gwxK#>U1W`(7Tn_10S@|Fs_DDYt2P`CBv)e4R7bbI#+(kBh3RDqfFY z2f%AF&UR8k{;CGcmMxQ8eMo!%{rAhg|2Jo@F^UK{;x9GGb)B=fw^xiAGe+{C3$l(0 zIOacO!z%~)8l2R!$kxgEx8vkWV4yGjZ@A$GKlqm$d)^+t@K^2%uDbkO%7~#H*+}}bH!XNB&vJad; z*ym**D1Wdo$UZRsVDE^1Ap9-t7dwumJO}#v{1fb5ZzA9LH#IfsYf%JzEe-qLnH0Y8 z2YY9*ZAKN%AM9$)Q{J}m4QFn(u@dtZ%kn@ao%^&RZ&~$&3EB;{b z9&mvfj`@Rq0g~QscEsPp{zu+iVU`Vng8UzT_+fnv&E@l2u(yF&#G$erjNFOj7CB_75Jf?$=UsZe{OaKhdkD<#DY`>EEl#!$O;>^y&GBEc8`f zvP+N6YQIuBuJ$!eT6{04Hb!w@Cd2)tay+H<(@Njy^8bXaW9rN0`M6x3`*L~iCzZJ= zrJq*%vPr^^?lnl+sTt{cKk#%L`?Bp)49t%PzdH&NoJsWwu*ybK|1+q!kD{(FR! zJO2g@{{|udZcI6p>!wbfnthd#e-Fg?9W?%4@+-;!z;jPO{d6{e?(E;cpI$@OUMb<+ z|K(7-S{g@^_n7iuxNsroe`5*f&+#9pTIe?vSFc*N%9MLcOAF6!FX7xdbaCRui9!tc zf8G)P?JKpcSh0fV{hSvm;i9KhfWeKt&((73)G5yW6xC9HE|5(t4})zlzx;A`9CwV* zjsB*Db(f)=^0HxY?KRh2V;aN1KS`7M{gw4{krHlAxv^nk@Z3{RJ!KlhzmY`wzF5LJ ztD&26lZL{e$ND>%bLYT-m2jpXSGTzQ326?wmUpSNW=gKmYu5nfrB_rAqRz znv&zbk~@FYpp=W_oaMk_lsoGt({j|FIdewt`BK+i?pa59^B^Vn8FKP4XdUHmf*z&a{n3+80N*K|Jk!= zrS9dBJ4>6*U&;OJ!(4MUJw5+2&0W{OySrQN`Et@-?g5$mOnIQpTF$>*b02*0%RUO0 zXh*&+rOSxFE0yVdm^9jqo!XUYle^OT@!F9?bY1;>Y;n2l<^6TGAMoGTOA!W}58xN67Dv zFs5g}Ga_k>OBpSn#PjA~PE~$SL{q6=$)g-lKmY_l00ck)1V8`;KmY_l00ck)1acD? zTUGJx%QWrv%PSH;rT#Z^kBsLn6#Mq})>iS#=9k2;SNufWb=xiCimHn1;~A|vs_`Q# zuBy?rgT^Hp!PleT+`e7Vu~zfQ=q%#9lj7;DuO2bi8pUM^?X^Acyd%TcTRt|XGI6tY zY*aSI{&C+IUog{iw7=)bIJi&84h{?qWaB@2m(edMY?CRrI*m-!3 z|C5s^BafX~d5Qltea4gbOqATE&TixHruS*aC3d&`zwGOcRqSr!zxZWe>|%Eu|HX^3 zjNNJcaoX=3vswz>f8!iG=aDb|xW}F^{!)lNSNx?CyIuUH6uUM4Qj1-UzZ7Ga@t11s zGX6L`kK|aql+4Lh_FYQy-AeIm^&iKfIQ2I`Y1)9%PBPk2`WvD&t;%RK@2esr#=Ok? zvY1ecQdZlvVN=7$^&je?)>t?5`#)sMb&|%ol+mV*mK&O%`JErgbBZYlk{I^#8tfiNwC3{MS_^ z`1<*|aU%v_W8yyN&dxc8+C(C-*Y)VNpO5*vz8VAPE?=MHKD{n_b5QxSf6h~lf%4T~ z(Sy^r`6N1^pP{B?uf`!=a6HOdV*Uk{wChxyqOCefx#!LOGCwc6r5 zO(kJjY3MXncqf{wag+U14a>aQXnRIUW7D%wSQ3_nm1KkC)!4CqEOMN$$u*HT0rRaM zKvTjQ;hb<@XoOnWf#XK>-`LJk3iWK(&8EzEXo?UwMYDju(9YywuAR=nEDBUnnD37r z>-ys0QzE2@^N3<$f))Jf6n5ZQ*{7JJLkV+yC}!HB$TJeg!bGSnaXf1i>+?-434O6e zT+cc3^&^}DLudjMp%P}oTv!Mh$Qwb)Dr^iEk-TIW|FLOAv?d0649OS+`WY0&9}hDC zz26(wqV!){=DM>iwYnyH{EQUBmF=~HuUzDlT4~DiigVWcC>_!zZd*a#$+t@UPMl=5 zZJ!U;N_Y5p=vY70_a6&U3%42s>?^Mh0`@r@JHigVk8F;2eC&Cr&!=-%@dD5z>;;^T zd>{75C%%B5yGd;bv&MI}wLRoP&sF>T`kyVlZ_;mo4YA3#bCb4M$7i#a*kW0=-J-IE p$zU`NYv(2^WhU-dCh1R%f@QE=D+85r&D@t-f~~;TVC%5n_8VF3^27iD diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 1474545..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,195 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEF4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEF4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(ef4.14cc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f50002 ebx=00000e0b ecx=07f28180 edx=000005df esi=12833820 edi=0daa0fd4 -eip=005bdfc9 esp=14f4f81c ebp=14f4fcc4 iopl=0 nv up ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.494396998968347920000e+0017 st5= 8.494398716955266560000e+0017 -st6= 2.539999999999999999970e+0000 st7= 3.438299200000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f4fcc4 0060d6fc 00000000 14f4fd2c 14f4fcfc image00000000_00400000+0x1bdfc9 -14f4fd3c 005ff50b 14f4fd50 005ff787 14f4fdc0 image00000000_00400000+0x20d6fc -14f4fdc0 005ff1de 14f4fde8 005ff1f9 14f4fde0 image00000000_00400000+0x1ff50b -14f4fde0 0090e1e5 14f4fdf4 0090e1ef 14f4fe38 image00000000_00400000+0x1ff1de -14f4fe38 0090efea 14f4fea4 14f4fea8 14f4feac image00000000_00400000+0x50e1e5 -14f4fec0 008d05d5 14f4fed4 008d06ab 14f4ff00 image00000000_00400000+0x50efea -14f4ff00 008d0991 14f4ff14 008d0a43 14f4ff2c image00000000_00400000+0x4d05d5 -14f4ff2c 0042c0bf 14f4ff40 0042c0c9 14f4ff5c image00000000_00400000+0x4d0991 -14f4ff5c 00404c22 14f4ffcc 0040475c 14f4ff70 image00000000_00400000+0x2c0bf -14f4ff70 7572f989 0802bec0 7572f970 14f4ffdc image00000000_00400000+0x4c22 -14f4ff80 770b7084 0802bec0 bd94aef0 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f4ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f4ffec 00000000 00404bf8 0802bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f50002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x7e49371f -STACK_DEPTH:13 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x50e1e5 -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x7e49371f) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_description.txt deleted file mode 100644 index 1474545..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,195 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEF4: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEF4: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(ef4.14cc): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=14f50002 ebx=00000e0b ecx=07f28180 edx=000005df esi=12833820 edi=0daa0fd4 -eip=005bdfc9 esp=14f4f81c ebp=14f4fcc4 iopl=0 nv up ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.494396998968347920000e+0017 st5= 8.494398716955266560000e+0017 -st6= 2.539999999999999999970e+0000 st7= 3.438299200000000000000e+0007 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:14f50002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -14f4fcc4 0060d6fc 00000000 14f4fd2c 14f4fcfc image00000000_00400000+0x1bdfc9 -14f4fd3c 005ff50b 14f4fd50 005ff787 14f4fdc0 image00000000_00400000+0x20d6fc -14f4fdc0 005ff1de 14f4fde8 005ff1f9 14f4fde0 image00000000_00400000+0x1ff50b -14f4fde0 0090e1e5 14f4fdf4 0090e1ef 14f4fe38 image00000000_00400000+0x1ff1de -14f4fe38 0090efea 14f4fea4 14f4fea8 14f4feac image00000000_00400000+0x50e1e5 -14f4fec0 008d05d5 14f4fed4 008d06ab 14f4ff00 image00000000_00400000+0x50efea -14f4ff00 008d0991 14f4ff14 008d0a43 14f4ff2c image00000000_00400000+0x4d05d5 -14f4ff2c 0042c0bf 14f4ff40 0042c0c9 14f4ff5c image00000000_00400000+0x4d0991 -14f4ff5c 00404c22 14f4ffcc 0040475c 14f4ff70 image00000000_00400000+0x2c0bf -14f4ff70 7572f989 0802bec0 7572f970 14f4ffdc image00000000_00400000+0x4c22 -14f4ff80 770b7084 0802bec0 bd94aef0 00000000 KERNEL32!BaseThreadInitThunk+0x19 -14f4ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -14f4ffec 00000000 00404bf8 0802bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x14f50002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x7e49371f -STACK_DEPTH:13 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x50e1e5 -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x7e49371f) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/13605/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 063a00914df46c99e6340611b4c1470d3560682d..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GKWG#|6vp3X&+Mg;xdjo4fxRF|3X6bpP{B?uf`!=a6HOdV*Uk{wChxyqOCefx#!LOGCwc6r5 zO(kJjY3MXncqf{wag+U14a>aQXnRIUW7D%wSQ3_nm1KkC)!4CqEOMN$$u*HT0rRaM zKvTjQ;hb<@XoOnWf#XK>-`LJk3iWK(&8EzEXo?UwMYDju(9YywuAR=nEDBUnnD37r z>-ys0QzE2@^N3<$f))Jf6n5ZQ*{7JJLkV+yC}!HB$TJeg!bGSnaXf1i>+?-434O6e zT+cc3^&^}DLudjMp%P}oTv!Mh$Qwb)Dr^iEk-TIW|FLOAv?d0649OS+`WY0&9}hDC zz26(wqV!){=DM>iwYnyH{EQUBmF=~HuUzDlT4~DiigVWcC>_!zZd*a#$+t@UPMl=5 zZJ!U;N_Y5p=vY70_a6&U3%42s>?^Mh0`@r@JHigVk8F;2eC&Cr&!=-%@dD5z>;;^T zd>{75C%%B5yGd;bv&MI}wLRoP&sF>T`kyVlZ_;mo4YA3#bCb4M$7i#a*kW0=-J-IE p$zU`NYv(2^WhU-dCh1R%f@QE=D+85r&D@t-f~~;TVC%5n_8VF3^27iD diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/SystemDebugger_description.txt deleted file mode 100644 index 63989c5..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x0000000015090002 \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f04e404ba97f05dae9d90f70f16a54db93980e4e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL(rV+(86|z+R&WA{<;J7Vf38)iD7(_4_b_>ZBN5=oWc^7gAf=K4>&2Qek|9kVXyF^3yRjWjS zV@Pz4h`PFU{pXjBiO;*I-hQvGjMV1n%-z}O`z?zb=$t)oxi+!Q>W5y^k;Bv!rzTxMe6flX_EO@_B^wjEr^E4HN zMWvzBRN|dzs)TL!ueLJgY^&oKM6Islkgy;u3QN%r$19;_eLb+8ugSKNHwAO8;XyOP z$HIBxvd{>%um{VH=-AjvPzv?3xSwsA@6n__ZqjxNeX6ZVz(iXegK^-g0zW?-TGkDP z-ls@N0p}5g!U!w4(<$u0v2xqw3gIm8B+z n(Il*sn4l1wa9EjWI5G+r!xF6wRK~UwS85IR3APT~f(^DmBDMIE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index d3bc93b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,196 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6A0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6A0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e70000 00000000`13f4e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(6a0.17b0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=15090002 ebx=00000e0b ecx=07f48180 edx=000005df esi=128318d0 edi=0da8afd4 -eip=005bdfc9 esp=1508f81c ebp=1508fcc4 iopl=0 nv up ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 8.488770935407972080000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -1508fcc4 0060d6fc 00000000 1508fd2c 1508fcfc image00000000_00400000+0x1bdfc9 -1508fd3c 005ff50b 1508fd50 005ff787 1508fdc0 image00000000_00400000+0x20d6fc -1508fdc0 005ff1de 1508fde8 005ff1f9 1508fde0 image00000000_00400000+0x1ff50b -1508fde0 0090e1e5 1508fdf4 0090e1ef 1508fe38 image00000000_00400000+0x1ff1de -1508fe38 0090efea 1508fea4 1508fea8 1508feac image00000000_00400000+0x50e1e5 -1508fec0 008d05d5 1508fed4 008d06ab 1508ff00 image00000000_00400000+0x50efea -1508ff00 008d0991 1508ff14 008d0a43 1508ff2c image00000000_00400000+0x4d05d5 -1508ff2c 0042c0bf 1508ff40 0042c0c9 1508ff5c image00000000_00400000+0x4d0991 -1508ff5c 00404c22 1508ffcc 0040475c 1508ff70 image00000000_00400000+0x2c0bf -1508ff70 7572f989 0804bec0 7572f970 1508ffdc image00000000_00400000+0x4c22 -1508ff80 770b7084 0804bec0 c90434ed 00000000 KERNEL32!BaseThreadInitThunk+0x19 -1508ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -1508ffec 00000000 00404bf8 0804bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x15090002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x7e49371f -STACK_DEPTH:13 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x50e1e5 -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x7e49371f) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_description.txt deleted file mode 100644 index d3bc93b..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,196 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x6A0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x6A0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -ModLoad: 00000000`73730000 00000000`737e9000 C:\Windows\SysWOW64\textinputframework.dll -ModLoad: 00000000`73410000 00000000`734ab000 C:\Windows\SysWOW64\CoreMessaging.dll -ModLoad: 00000000`734b0000 00000000`7372e000 C:\Windows\SysWOW64\CoreUIComponents.dll -ModLoad: 00000000`75430000 00000000`75493000 C:\Windows\SysWOW64\WS2_32.dll -ModLoad: 00000000`733e0000 00000000`73409000 C:\Windows\SysWOW64\ntmarta.dll -ModLoad: 00000000`73300000 00000000`733de000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13d90000 00000000`13e6e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`13e70000 00000000`13f4e000 C:\Windows\SysWOW64\wintypes.dll -ModLoad: 00000000`73190000 00000000`732f6000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.264_none_4298d4188a939fa9\gdiplus.dll -(6a0.17b0): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=15090002 ebx=00000e0b ecx=07f48180 edx=000005df esi=128318d0 edi=0da8afd4 -eip=005bdfc9 esp=1508f81c ebp=1508fcc4 iopl=0 nv up ei pl nz na po nc -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? -rF -fpcw=137F: rn 64 puozdi fpsw=0020: top=0 cc=0000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0= 0.000000000000000000000e+0000 st1= 0.000000000000000000000e+0000 -st2= 0.000000000000000000000e+0000 st3= 0.000000000000000000000e+0000 -st4= 8.488767499434134800000e+0017 st5= 8.488769217421053440000e+0017 -st6= 8.488770935407972080000e+0017 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=0 0 0 0 -image00000000_00400000+0x1bdfc9: -005bdfc9 8a08 mov cl,byte ptr [eax] ds:002b:15090002=?? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -1508fcc4 0060d6fc 00000000 1508fd2c 1508fcfc image00000000_00400000+0x1bdfc9 -1508fd3c 005ff50b 1508fd50 005ff787 1508fdc0 image00000000_00400000+0x20d6fc -1508fdc0 005ff1de 1508fde8 005ff1f9 1508fde0 image00000000_00400000+0x1ff50b -1508fde0 0090e1e5 1508fdf4 0090e1ef 1508fe38 image00000000_00400000+0x1ff1de -1508fe38 0090efea 1508fea4 1508fea8 1508feac image00000000_00400000+0x50e1e5 -1508fec0 008d05d5 1508fed4 008d06ab 1508ff00 image00000000_00400000+0x50efea -1508ff00 008d0991 1508ff14 008d0a43 1508ff2c image00000000_00400000+0x4d05d5 -1508ff2c 0042c0bf 1508ff40 0042c0c9 1508ff5c image00000000_00400000+0x4d0991 -1508ff5c 00404c22 1508ffcc 0040475c 1508ff70 image00000000_00400000+0x2c0bf -1508ff70 7572f989 0804bec0 7572f970 1508ffdc image00000000_00400000+0x4c22 -1508ff80 770b7084 0804bec0 c90434ed 00000000 KERNEL32!BaseThreadInitThunk+0x19 -1508ffdc 770b7054 ffffffff 770d629f 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -1508ffec 00000000 00404bf8 0804bec0 00000000 ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x15090002 -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:12 -BASIC_BLOCK_INSTRUCTION:005bdfc9 mov cl,byte ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfcb mov byte ptr [esi+edx+2],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfcf mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfd2 mov cl,byte ptr [eax-1] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfd5 mov byte ptr [esi+edx+1],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfd9 mov ecx,dword ptr [ebp-0ch] -BASIC_BLOCK_INSTRUCTION:005bdfdc mov cl,byte ptr [eax-2] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfdf mov byte ptr [esi+edx],cl -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:cl -BASIC_BLOCK_INSTRUCTION:005bdfe2 inc dword ptr [ebp-24h] -BASIC_BLOCK_INSTRUCTION:005bdfe5 add eax,4 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdfe8 dec ebx -BASIC_BLOCK_INSTRUCTION:005bdfe9 jne image00000000_00400000+0x1bdfb8 (005bdfb8) -MAJOR_HASH:0x67613208 -MINOR_HASH:0x7e49371f -STACK_DEPTH:13 -STACK_FRAME:image00000000_00400000+0x1bdfc9 -STACK_FRAME:image00000000_00400000+0x20d6fc -STACK_FRAME:image00000000_00400000+0x1ff50b -STACK_FRAME:image00000000_00400000+0x1ff1de -STACK_FRAME:image00000000_00400000+0x50e1e5 -STACK_FRAME:image00000000_00400000+0x50efea -STACK_FRAME:image00000000_00400000+0x4d05d5 -STACK_FRAME:image00000000_00400000+0x4d0991 -STACK_FRAME:image00000000_00400000+0x2c0bf -STACK_FRAME:image00000000_00400000+0x4c22 -STACK_FRAME:KERNEL32!BaseThreadInitThunk+0x19 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xe4 -STACK_FRAME:ntdll_77050000!RtlGetAppContainerNamedObjectPath+0xb4 -INSTRUCTION_ADDRESS:0x00000000005bdfc9 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Read Access Violation -SHORT_DESCRIPTION:ReadAV -CLASSIFICATION:UNKNOWN -BUG_TITLE:Read Access Violation starting at image00000000_00400000+0x00000000001bdfc9 (Hash=0x67613208.0x7e49371f) diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x67613208_0x2b68626d/UNKNOWN_0x67613208_0x7e49371f/49386/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f04e404ba97f05dae9d90f70f16a54db93980e4e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vy9YkL(rV+(86|z+R&WA{<;J7Vf38)iD7(_4_b_>ZBN5=oWc^7gAf=K4>&2Qek|9kVXyF^3yRjWjS zV@Pz4h`PFU{pXjBiO;*I-hQvGjMV1n%-z}O`z?zb=$t)oxi+!Q>W5y^k;Bv!rzTxMe6flX_EO@_B^wjEr^E4HN zMWvzBRN|dzs)TL!ueLJgY^&oKM6Islkgy;u3QN%r$19;_eLb+8ugSKNHwAO8;XyOP z$HIBxvd{>%um{VH=-AjvPzv?3xSwsA@6n__ZqjxNeX6ZVz(iXegK^-g0zW?-TGkDP z-ls@N0p}5g!U!w4(<$u0v2xqw3gIm8B+z n(Il*sn4l1wa9EjWI5G+r!xF6wRK~UwS85IR3APT~f(^DmBDMIE diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9eb6efe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x000000001101ffff \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 389511fbb290d1a50f136c756fb2121f61e822d6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@!Jr+3Q3idx}Z~f5bmPHo-!{ABBdH#vdsxl@zft#g3Oql0pa( zEEGbp35bfFg`#r`S_lRNK~%^|1VvEx3gwF6_?wym`be`zhnZfCS@4w@%@vpNF((34mQ)9EG(|4{P9)5gu z^zxO97luBbTevybvu}9p*p3?~-`}6wpzpr<@O13U&W*1hnSpHc?CniI-oCqcVD9+- zhm(7wTTgavKQwXh(?E6T^R};-_AHctVx^828Sf}n+8OtG-C{+1E!6##IFIS4)PVC< z&zY+CPZ!}tyH@nNTJqHD57%ib3QI~OPgBf0(NqcRtdG=k=47qu7(}%d$AYjZED7Ui znd6nva(-W6xn7g4qwXrqwWI6&zPZfB7S7v zvuQ-MCI)&8$ruAV4<^JP57Ps^+Z)!R^8d8NwpZoUXmfPvgcQQ@>RMha8@QrIxyU+H|dwb zn%H>L+VMPF!e_G><=IQsw9i$ZnFK~7ux4t4Vq(HBWumUgC|CkZwKB*uww}7FUcg?# K7GX=U&h{76;_(## diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 5992e50..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,154 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEE0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEE0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73da0000 00000000`73f04000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73bc0000 00000000`73da0000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ee0.1538): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=4e1c08c6 edx=000005f0 esi=00481c9c edi=093d2fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.652966000000000000000e+0006 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6709.43 1.59816e-017 -0.00521827 1.24719e-014 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_description.txt deleted file mode 100644 index 5992e50..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,154 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0xEE0: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0xEE0: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`74ea0000 00000000`74ea8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74ba0000 00000000`74bc2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`00020000 00000000`0003d000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73da0000 00000000`73f04000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73bc0000 00000000`73da0000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(ee0.1538): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=4e1c08c6 edx=000005f0 esi=00481c9c edi=093d2fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.760750300146320480000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 3.652966000000000000000e+0006 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=-6709.43 1.59816e-017 -0.00521827 1.24719e-014 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/11958/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 389511fbb290d1a50f136c756fb2121f61e822d6..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GziSjh6vyA*9@!Jr+3Q3idx}Z~f5bmPHo-!{ABBdH#vdsxl@zft#g3Oql0pa( zEEGbp35bfFg`#r`S_lRNK~%^|1VvEx3gwF6_?wym`be`zhnZfCS@4w@%@vpNF((34mQ)9EG(|4{P9)5gu z^zxO97luBbTevybvu}9p*p3?~-`}6wpzpr<@O13U&W*1hnSpHc?CniI-oCqcVD9+- zhm(7wTTgavKQwXh(?E6T^R};-_AHctVx^828Sf}n+8OtG-C{+1E!6##IFIS4)PVC< z&zY+CPZ!}tyH@nNTJqHD57%ib3QI~OPgBf0(NqcRtdG=k=47qu7(}%d$AYjZED7Ui znd6nva(-W6xn7g4qwXrqwWI6&zPZfB7S7v zvuQ-MCI)&8$ruAV4<^JP57Ps^+Z)!R^8d8NwpZoUXmfPvgcQQ@>RMha8@QrIxyU+H|dwb zn%H>L+VMPF!e_G><=IQsw9i$ZnFK~7ux4t4Vq(HBWumUgC|CkZwKB*uww}7FUcg?# K7GX=U&h{76;_(## diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9eb6efe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x000000001101ffff \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/25903/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 3bc269a2aaf9c122aacaec29cce97be6f56e8b91..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GO=uHA6vy9YLpFjiiKiYSn~I3X9*dW4@lX-*=t&Xu;7KVcqKNF6Dk>hV7ezeS zlY#~Ds|v-#M5$E}iU{JZ!Gh?ay1B?Aq2qtvyo4qoh;))Szj^ci@6E^V5*6?p86gTB zL!uo-lpoF)-py{gb?U{}2X?-8X7v59J+pJyk8htpP`bJJ{oDC{M~5cf7B;Q^d^9(D zfA+`zhtI#HpB~Tr9_oBPc%nFba&!ImwhyN}!=b+MbnCg7oxOJV$7jc$tOj@H&fZ

RP%==x|wfBX3oMJa)#wju2Ov7`!;peXwF^P7m=>107Q>!)3 z(^M3em4;4Jg?FN<9=6z@XlBgI&D=4FnjOc2uqZ4GE71za>!D@+SYSC{lWigI0?f6B z2VE3i5l#zdghr@^U07~J8^%0ADb&m2ezs)3OOyJzNn0uOskSBo6K!=2#(}2_{Cp|2 ztSf}xr$|Tv=Mja%2rIbLDeSsd>#et=V82#seXRKi%82vZ>gc{@?E4jY37Brh4pe{C8Ot%-piLo&vIZUzPM$HVkM z@AihZsQN!Gw*6TdwfiOp{FoHNmEKz3S2l1-?P`_f6>Br+qqI+#c-HpvZhof3@5V`1 z>-l`Jc6FVPhmQ4qefO~twQ;Lnz`k;7FJPauu_Nrz`N-yY*TD8?o%DHD|hV7ezeS zlY#~Ds|v-#M5$E}iU{JZ!Gh?ay1B?Aq2qtvyo4qoh;))Szj^ci@6E^V5*6?p86gTB zL!uo-lpoF)-py{gb?U{}2X?-8X7v59J+pJyk8htpP`bJJ{oDC{M~5cf7B;Q^d^9(D zfA+`zhtI#HpB~Tr9_oBPc%nFba&!ImwhyN}!=b+MbnCg7oxOJV$7jc$tOj@H&fZ

RP%==x|wfBX3oMJa)#wju2Ov7`!;peXwF^P7m=>107Q>!)3 z(^M3em4;4Jg?FN<9=6z@XlBgI&D=4FnjOc2uqZ4GE71za>!D@+SYSC{lWigI0?f6B z2VE3i5l#zdghr@^U07~J8^%0ADb&m2ezs)3OOyJzNn0uOskSBo6K!=2#(}2_{Cp|2 ztSf}xr$|Tv=Mja%2rIbLDeSsd>#et=V82#seXRKi%82vZ>gc{@?E4jY37Brh4pe{C8Ot%-piLo&vIZUzPM$HVkM z@AihZsQN!Gw*6TdwfiOp{FoHNmEKz3S2l1-?P`_f6>Br+qqI+#c-HpvZhof3@5V`1 z>-l`Jc6FVPhmQ4qefO~twQ;Lnz`k;7FJPauu_Nrz`N-yY*TD8?o%DHD|x7jZ{CI6p^aqj-u&kOKIUt8iAwkl3=jp5 zA<=dsN>hT0Xt_jm622YqA!RUWT#inRP7Lk5+oqA3naQW$M_-&-Svgo={`hU*#XHB} z?)rQ>JO7;Ymk;6m?a4hO4{!aNdG`4J{-eRUmvhIyZaXqE)I62n+q+sDoSXge;M31X z7t%|Imv*1sa%KF$tJ&XA=CRUWT5PXRBBe`S}|0eAbeiKfoz4M2=@HRKi4<33DL>b?$pfVKrDl@{(cv&!!R4ni%LY zBx4NdJeUxFJWLPtZf{tNs{hjx+g(*qtIN@&6H*9Q*4Oe{*}xUGs#Q*}SX(%aseQS` ziXnN|i_#x^rI)f?D**aB=3*4zF7 DO&j$B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 55a5281..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,153 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fc8.e48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=2bf28c03 edx=000005f0 esi=00481c9c edi=0fc72fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.981150400000000000000e+0007 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.60752e-019 4.4629e-024 1.49588e+038 -1.57704e+033 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_description.txt deleted file mode 100644 index 55a5281..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,153 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1FC8: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1FC8: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74c00000 00000000`74c1b000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74bd0000 00000000`74bf2000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1fc8.e48): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=2bf28c03 edx=000005f0 esi=00481c9c edi=0fc72fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.724158553165415520000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 2.539999999999999999970e+0000 st7= 2.981150400000000000000e+0007 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=1.60752e-019 4.4629e-024 1.49588e+038 -1.57704e+033 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/56024/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index f740888c6873a8273b4a18feeffd4916bee2e759..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*F4^nm4jYTWZXqIw5({I%VlNU=u}}%v2^M~I5)c$@c084sXb}ZF zg@B-@i-?UV%&90rLJAQ@#2f@MoqLetz>x7jZ{CI6p^aqj-u&kOKIUt8iAwkl3=jp5 zA<=dsN>hT0Xt_jm622YqA!RUWT#inRP7Lk5+oqA3naQW$M_-&-Svgo={`hU*#XHB} z?)rQ>JO7;Ymk;6m?a4hO4{!aNdG`4J{-eRUmvhIyZaXqE)I62n+q+sDoSXge;M31X z7t%|Imv*1sa%KF$tJ&XA=CRUWT5PXRBBe`S}|0eAbeiKfoz4M2=@HRKi4<33DL>b?$pfVKrDl@{(cv&!!R4ni%LY zBx4NdJeUxFJWLPtZf{tNs{hjx+g(*qtIN@&6H*9Q*4Oe{*}xUGs#Q*}SX(%aseQS` ziXnN|i_#x^rI)f?D**aB=3*4zF7 DO&j$B diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/SystemDebugger_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/SystemDebugger_description.txt deleted file mode 100644 index 9eb6efe..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/SystemDebugger_description.txt +++ /dev/null @@ -1,2 +0,0 @@ -First Chance Exception: 0xc0000005 -Access Violation Reading From 0x000000001101ffff \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/Initial/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 61681f8a7207b73d95256d6f92ebe8c96be18479..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4mf$xf6?k!QDbGLKK1^*ytu8h}cMwh_SH^Sfo(I#vLyP4GPBE z<{A++AgKaL;haJ&6e0>yLC8T0E$0Mv3E{^7yqOER0~^WQz4^`meazSH5*6?p9wrJb zL!v4XB?&nXS>vXk9Iax}&Ssrn^!$dmmDMu-`9yLm-0_!!$xtjCO z7U4vjDLP#%IZDyyI!Q&(l90%gROX#XO2Q`VvklF>*T^k{sIg^P@GN?kJj>Ar$CJ=- z{zzcBUXp2|?heehngiYSyze>ZS@%?)(z64@jcC`HrA0Is@9$7$F0Qg>hWtz# zm4c}>G6v(oQ3TH47aGnhgicfBNdeapg`N>su%{E)fn~X0Foy>s=F~vQ)B}NK;2C;G zo6kp z)UMpeb<3r9>b3B?6DPmgw&sJiDmyeDI@Wjd+mD5)gmZvHx#wzR+D(Z`rfW@#>3WY3XnyH=Y4eTv!6}ArR GZGQn$T=eb$ diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_StackTrace.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_StackTrace.txt deleted file mode 100644 index 2a195d2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_StackTrace.txt +++ /dev/null @@ -1,153 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1610: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1610: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1610.1910): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=e807fcb6 edx=000005f0 esi=00481c9c edi=0fd20fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.32715e-009 -1.87196e+016 1.71342e-016 1.22917e-010 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_description.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_description.txt deleted file mode 100644 index 2a195d2..0000000 --- a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/WindowsDebugEngine_description.txt +++ /dev/null @@ -1,153 +0,0 @@ - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols - -Microsoft (R) Windows Debugger Version 10.0.19041.685 AMD64 -Copyright (c) Microsoft Corporation. All rights reserved. - -CommandLine: C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe fuzz.cur - -************* Path validation summary ************** -Response Time (ms) Location -Deferred SRV*http://msdl.microsoft.com/download/symbols -Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols -Executable search path is: -ModLoad: 00000000`00400000 00000000`00abf000 image00000000`00400000 -ModLoad: 00007ffa`f7d90000 00007ffa`f7f84000 ntdll.dll -ModLoad: 00000000`77050000 00000000`771f2000 ntdll.dll -ModLoad: 00000000`00ac0000 00000000`00b34000 C:\Windows\System32\verifier.dll -Page heap: pid 0x1610: page heap enabled with flags 0x3. -ModLoad: 00007ffa`f6430000 00007ffa`f6489000 C:\Windows\System32\wow64.dll -ModLoad: 00007ffa`f6520000 00007ffa`f65a3000 C:\Windows\System32\wow64win.dll -ModLoad: 00000000`77040000 00000000`7704a000 C:\Windows\System32\wow64cpu.dll -ModLoad: 00000000`74ec0000 00000000`74f25000 C:\Windows\SysWOW64\verifier.dll -Page heap: pid 0x1610: page heap enabled with flags 0x3. -ModLoad: 00000000`75710000 00000000`75800000 C:\Windows\SysWOW64\KERNEL32.DLL -ModLoad: 00000000`754f0000 00000000`75703000 C:\Windows\SysWOW64\KERNELBASE.dll -ModLoad: 00000000`75ac0000 00000000`75c53000 C:\Windows\SysWOW64\user32.dll -ModLoad: 00000000`75de0000 00000000`75df8000 C:\Windows\SysWOW64\win32u.dll -ModLoad: 00000000`768f0000 00000000`76913000 C:\Windows\SysWOW64\GDI32.dll -ModLoad: 00000000`75e00000 00000000`75eda000 C:\Windows\SysWOW64\gdi32full.dll -ModLoad: 00000000`76300000 00000000`7637b000 C:\Windows\SysWOW64\msvcp_win.dll -ModLoad: 00000000`764a0000 00000000`765c0000 C:\Windows\SysWOW64\ucrtbase.dll -ModLoad: 00000000`76870000 00000000`768e9000 C:\Windows\SysWOW64\advapi32.dll -ModLoad: 00000000`76380000 00000000`7643f000 C:\Windows\SysWOW64\msvcrt.dll -ModLoad: 00000000`76280000 00000000`762f5000 C:\Windows\SysWOW64\sechost.dll -ModLoad: 00000000`75a00000 00000000`75aba000 C:\Windows\SysWOW64\RPCRT4.dll -ModLoad: 00000000`76750000 00000000`767e6000 C:\Windows\SysWOW64\oleaut32.dll -ModLoad: 00000000`76000000 00000000`76280000 C:\Windows\SysWOW64\combase.dll -ModLoad: 00000000`75c60000 00000000`75d43000 C:\Windows\SysWOW64\ole32.dll -ModLoad: 00000000`74eb0000 00000000`74eb8000 C:\Windows\SysWOW64\version.dll -ModLoad: 00000000`74ea0000 00000000`74ea6000 C:\Windows\SysWOW64\msimg32.dll -ModLoad: 00000000`75400000 00000000`75425000 C:\Windows\SysWOW64\imm32.dll -ModLoad: 00000000`74c90000 00000000`74ea0000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1_none_fd031af45b0106f2\comctl32.dll -ModLoad: 00000000`769b0000 00000000`76f57000 C:\Windows\SysWOW64\shell32.dll -ModLoad: 00000000`74c20000 00000000`74c8d000 C:\Windows\SysWOW64\winspool.drv -ModLoad: 00000000`75ee0000 00000000`75f8f000 C:\Windows\SysWOW64\comdlg32.dll -ModLoad: 00000000`75d50000 00000000`75dd7000 C:\Windows\SysWOW64\shcore.dll -ModLoad: 00000000`753b0000 00000000`753f5000 C:\Windows\SysWOW64\SHLWAPI.dll -ModLoad: 00000000`74bf0000 00000000`74c12000 C:\Windows\SysWOW64\MsVfW32.dll -ModLoad: 00000000`74bd0000 00000000`74beb000 C:\Windows\SysWOW64\avifil32.dll -ModLoad: 00000000`74ba0000 00000000`74bc8000 C:\Windows\SysWOW64\winmm.dll -ModLoad: 00000000`74a00000 00000000`74b9a000 C:\Windows\SysWOW64\quartz.dll -ModLoad: 00000000`749e0000 00000000`749f9000 C:\Windows\SysWOW64\MSACM32.dll -ModLoad: 00000000`75800000 00000000`75819000 C:\Windows\SysWOW64\bcrypt.dll -ModLoad: 00000000`743b0000 00000000`743cd000 C:\Windows\SysWOW64\winmmbase.dll -ModLoad: 00000000`743d0000 00000000`749d4000 C:\Windows\SysWOW64\windows.storage.dll -ModLoad: 00000000`74380000 00000000`743a3000 C:\Windows\SysWOW64\Wldp.dll -ModLoad: 74300000 74374000 C:\Windows\SysWOW64\uxtheme.dll -ModLoad: 00000000`76f60000 00000000`77032000 C:\Windows\SysWOW64\MSCTF.dll -ModLoad: 00000000`742e0000 00000000`742f9000 C:\Windows\SysWOW64\olepro32.dll -ModLoad: 00000000`742d0000 00000000`742df000 C:\Windows\SysWOW64\kernel.appcore.dll -ModLoad: 00000000`765c0000 00000000`7661c000 C:\Windows\SysWOW64\bcryptPrimitives.dll -ModLoad: 00000000`75370000 00000000`753ab000 C:\Windows\SysWOW64\CFGMGR32.dll -ModLoad: 00000000`767f0000 00000000`7686e000 C:\Windows\SysWOW64\clbcatq.dll -ModLoad: 00000000`74200000 00000000`742c2000 C:\Windows\SysWOW64\propsys.dll -ModLoad: 00000000`741e0000 00000000`741f8000 C:\Windows\SysWOW64\profapi.dll -ModLoad: 00000000`74140000 00000000`741d4000 C:\Windows\SysWOW64\TextShaping.dll -ModLoad: 00000000`73fd0000 00000000`74140000 C:\Windows\SysWOW64\windowscodecs.dll -ModLoad: 00000000`73f60000 00000000`73fc1000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin06.dll -ModLoad: 00000000`73f50000 00000000`73f57000 C:\Windows\SysWOW64\DCIMAN32.DLL -ModLoad: 00000000`73f10000 00000000`73f42000 C:\Windows\SysWOW64\dataexchange.dll -ModLoad: 00000000`73bc0000 00000000`73d24000 C:\Windows\SysWOW64\dcomp.dll -ModLoad: 00000000`73d30000 00000000`73f10000 C:\Windows\SysWOW64\d3d11.dll -ModLoad: 00000000`73af0000 00000000`73bb2000 C:\Windows\SysWOW64\dxgi.dll -ModLoad: 00000000`73960000 00000000`73af0000 C:\Windows\SysWOW64\twinapi.appcore.dll -ModLoad: 00000000`73910000 00000000`73958000 C:\Windows\SysWOW64\thumbcache.dll -ModLoad: 00000000`73900000 00000000`7390a000 C:\Windows\SysWOW64\Secur32.dll -ModLoad: 00000000`738d0000 00000000`738f1000 C:\Windows\SysWOW64\SSPICLI.DLL -ModLoad: 00000000`738b0000 00000000`738c5000 C:\Windows\SysWOW64\samcli.dll -ModLoad: 00000000`73890000 00000000`738a9000 C:\Windows\SysWOW64\SAMLIB.dll -ModLoad: 00000000`73880000 00000000`7388b000 C:\Windows\SysWOW64\netutils.dll -ModLoad: 00000000`6ad80000 00000000`6adfe000 C:\Program Files (x86)\FastStone Image Viewer\fsplugin05.dll -ModLoad: 00000000`737f0000 00000000`73872000 C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll -(1610.1910): Access violation - code c0000005 (first chance) -r -*** WARNING: Unable to verify checksum for image00000000`00400000 -eax=1101ffff ebx=00481c9c ecx=e807fcb6 edx=000005f0 esi=00481c9c edi=0fd20fd4 -eip=005bdf49 esp=0019f4a4 ebp=0019f94c iopl=0 nv up ei pl nz ac po cy -cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00210213 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rF -fpcw=137F: rn 64 puozdi fpsw=4020: top=0 cc=1000 --p----- fptw=0000 -fopcode=0000 fpip=0000:00604b66 fpdp=0000:00000000 -st0=-1.#SNAN0000000000000000e+0000 st1=-1.#SNAN0000000000000000e+0000 -st2=-1.#SNAN0000000000000000e+0000 st3= 5.741047051771987040000e+0017 -st4= 1.000000000000000000000e+0000 st5= 5.000000000000000000000e-0001 -st6= 6.250000000000000000000e-0002 st7= 3.000000000000000000000e+0002 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? -rX -xmm0=0 0 0 0 -xmm1=0 0 0 0 -xmm2=0 0 0 0 -xmm3=0 0 0 0 -xmm4=0 0 0 0 -xmm5=0 0 0 0 -xmm6=0 0 0 0 -xmm7=4.32715e-009 -1.87196e+016 1.71342e-016 1.22917e-010 -image00000000_00400000+0x1bdf49: -005bdf49 8b00 mov eax,dword ptr [eax] ds:002b:1101ffff=???????? - - -kb -ChildEBP RetAddr Args to Child -WARNING: Stack unwind information not available. Following frames may be wrong. -0019f94c 1101ffff 0000f011 1111f100 1001ff0f image00000000_00400000+0x1bdf49 -0019f950 00000000 1111f100 1001ff0f 1101ffff 0x1101ffff - - -.load C:\peach\Debuggers\DebugEngine\msec64.dll -!exploitable -m -IDENTITY:HostMachine\HostUser -PROCESSOR:X86 -CLASS:USER -QUALIFIER:USER_PROCESS -EVENT:DEBUG_EVENT_EXCEPTION -EXCEPTION_FAULTING_ADDRESS:0x1101ffff -EXCEPTION_CODE:0xC0000005 -EXCEPTION_LEVEL:FIRST_CHANCE -EXCEPTION_TYPE:STATUS_ACCESS_VIOLATION -EXCEPTION_SUBTYPE:READ -FAULTING_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_COUNT:3 -BASIC_BLOCK_INSTRUCTION:005bdf49 mov eax,dword ptr [eax] -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf4b cmp dword ptr [eax+558h],0 -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:eax -BASIC_BLOCK_INSTRUCTION:005bdf52 je image00000000_00400000+0x1bdf7e (005bdf7e) -BASIC_BLOCK_INSTRUCTION_TAINTED_INPUT_OPERAND:ZeroFlag -MAJOR_HASH:0x7e5b5c0d -MINOR_HASH:0x7e2c470d -STACK_DEPTH:2 -STACK_FRAME:image00000000_00400000+0x1bdf49 -STACK_FRAME:Unknown -INSTRUCTION_ADDRESS:0x00000000005bdf49 -INVOKING_STACK_FRAME:0 -DESCRIPTION:Data from Faulting Address controls Branch Selection -SHORT_DESCRIPTION:TaintedDataControlsBranchSelection -CLASSIFICATION:UNKNOWN -BUG_TITLE:Data from Faulting Address controls Branch Selection starting at image00000000_00400000+0x00000000001bdf49 (Hash=0x7e5b5c0d.0x7e2c470d) -EXPLANATION:The data from the faulting address is later used to determine whether or not a branch is taken. \ No newline at end of file diff --git a/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/action_1_Output_Unknown Action 1.txt b/windows/x86/local/FastStone_Image_Viewer_v.7.5/Exploitable Crash Triage/UNKNOWN_0x7e5b5c0d_0x7e2c470d/58308/action_1_Output_Unknown Action 1.txt deleted file mode 100644 index 61681f8a7207b73d95256d6f92ebe8c96be18479..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1598 zcmb`GJ!lj`6vyA*p4mf$xf6?k!QDbGLKK1^*ytu8h}cMwh_SH^Sfo(I#vLyP4GPBE z<{A++AgKaL;haJ&6e0>yLC8T0E$0Mv3E{^7yqOER0~^WQz4^`meazSH5*6?p9wrJb zL!v4XB?&nXS>vXk9Iax}&Ssrn^!$dmmDMu-`9yLm-0_!!$xtjCO z7U4vjDLP#%IZDyyI!Q&(l90%gROX#XO2Q`VvklF>*T^k{sIg^P@GN?kJj>Ar$CJ=- z{zzcBUXp2|?heehngiYSyze>ZS@%?)(z64@jcC`HrA0Is@9$7$F0Qg>hWtz# zm4c}>G6v(oQ3TH47aGnhgicfBNdeapg`N>su%{E)fn~X0Foy>s=F~vQ)B}NK;2C;G zo6kp z)UMpeb<3r9>b3B?6DPmgw&sJiDmyeDI@Wjd+mD5)gmZvHx#wzR+D(Z`rfW@#>3WY3XnyH=Y4eTv!6}ArR GZGQn$T=eb$