XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000384e2a.
xnview xnview 2.48