Aureal Minerva - does not work on a PC with RAM more than 999 MB, please help with a solution. \ VOGONS

Aureal Minerva - does not work on a PC with RAM more than 999 MB, please help with a solution.

Topic actions

Post a reply

First post, by DoZator

Posted on 2020-01-03, 15:42

DoZator Offline

Rank Member

Rank: Member
Posts: 134
Joined: 2020-01-03, 14:58

Hello. My name is Evgeniy. Since 2014, I periodically visit your wonderful resource. But only now, for the first time in these years, I could not find a solution to my problem myself and was forced to ask for help here.

I use vanilla Windows 98 [4.10.1998] and I have a problem with Aureal Minerva (Testing and profiling tool, for audio-drivers and sound-cards. The app. Tests for compatibility and features of DirectSound, DS3D, and A3D. ):
https://web.archive.org/web/20051221192209/ht … MinWebInst1.exe

On any hardware configuration and regardless of the version used 9x (98.98SE, ME) with more than 999 MB of RAM, the program crashes on startup:

MINERVA caused an invalid page fault in
module MINERVA.EXE at 015f: 004282c6.
Registers:
EAX = 09bff728 CS = 015f EIP = 004282c6 EFLGS = 00210206
EBX = 008f09e0 SS = 0167 ESP = 006cf6fd EBP = 007e0078
ECX = 006cf73d DS = 0167 ESI = 006cf73d FS = 863f
EDX = 0197f800 ES = 0167 EDI = 00000007 GS = 0000
Bytes at CS: EIP:
83 78 f4 01 7f 05 3b 78 fc 7e 0f 8b ce e8 43 ff
Stack dump:
00000007 006cf73d 0042837a 00000007 004382d4 006cf73d 00428408 00000007 004382d4 007e01c4 00000a33 00409298 004382d4 7c008f0a 33004394 a200000a

With RAM less than 999MB, everything works well. The only way to fix the problem is to limit the memory available for Windows at 999 MB using any software solution (or using standard Windows 98 tools).

There are no problems with other programs. Without a crash and any problems, the entire available RAM system is used - about 3 with a small GB.

The problem is obvious in the program itself.

Here is a more detailed report:

System snapshot taken on 03.01.20 0:56:04.

*----> Summary/Overview <----*

Aureal Minerva attempted to read from memory that does
not exist. It may be using an uninitialized variable, or
it may be attempting to access memory after having freed
it.

Module Name: MINERVA.EXE
Description: Aureal Minerva
Version: 1.08
Product: Aureal Minerva
Manufacturer: Aureal Semiconductor

Application Name: Minerva.exe
Description: Aureal Minerva
Version: 1.08
Product: Aureal Minerva
Manufacturer: Aureal Semiconductor

User's Remarks:

*----> System Information <----*

Microsoft Windows 98 4.10.1998
Clean install using Full OEM CD
/T:C:\WININST0.400 /SrcDir=D:\WIN98 /IE /NF /IZ /IS /IQ /IT /II /NR /II /C /U:xxxxxxxxxxxxxxxxx
IE 4.0 4.72.3110
Uptime: 0:00:08:46
Normal mode
On "PC" as "ADMIN"

GenuineIntel Pentium(r) II Processor Intel MMX(TM) Technology
1499MB RAM
62% system resources free
Windows-managed swap file on drive D (1488MB free)
Temporary files on drive D (1488MB free)

*----> Details <----*

Command line: "C:\Program Files\Aureal\Minerva\Minerva.exe" C:\PROGRA~1\AUREAL\MINERVA\MINERVA.EXE

Trap 0e 0000 - Invalid page fault
eax=09bff728 ebx=007e09e0 ecx=006cf73d edx=01978000 esi=006cf73d edi=00000007
eip=004282c6 esp=006cf6fd ebp=00c0a000 -- -- -- nv up EI pl nz na PE nc
cs=015f ss=0167 ds=0167 es=0167 fs=139f gs=0000
MINERVA.EXE:.text+0x272c6:
>015f:004282c6 8378f401 cmp dword ptr [eax-0c],+01

sel type base lim/bot
---- ---- -------- --------
cs 015f r-x- 00000000 ffffffff
ss 0167 rw-e 00000000 0000ffff
ds 0167 rw-e 00000000 0000ffff
es 0167 rw-e 00000000 0000ffff
fs 139f rw-- 82a63f20 00000037
gs 0000 ----

stack base: 005d0000
TIB limits: 006cd000 - 006d0000

-- exception record --

Exception Code: c0000005 (access violation)
Exception Address: 004282c6 (MINERVA.EXE:.text+0x272c6)
Exception Info: 00000000
09bff71c

MINERVA.EXE:.text+0x272c6:
>015f:004282c6 8378f401 cmp dword ptr [eax-0c],+01

015f:004282b1 e89a97feff call 00411a50 = MINERVA.EXE:.text+0x10a50
015f:004282b6 83c40c add esp,+0c
015f:004282b9 5f pop edi
015f:004282ba 5e pop esi
015f:004282bb c3 retd
015f:004282bc 56 push esi
015f:004282bd 8bf1 mov esi,ecx
015f:004282bf 57 push edi
015f:004282c0 8b7c240c mov edi,dword ptr [esp+0c]
015f:004282c4 8b06 mov eax,dword ptr [esi]
MINERVA.EXE:.text+0x272c6:
*015f:004282c6 8378f401 cmp dword ptr [eax-0c],+01
015f:004282ca 7f05 jg 004282d1 = MINERVA.EXE:.text+0x272d1
015f:004282cc 3b78fc cmp edi,dword ptr [eax-04]
015f:004282cf 7e0f jle 004282e0 = MINERVA.EXE:.text+0x272e0
015f:004282d1 8bce mov ecx,esi
015f:004282d3 e843ffffff call 0042821b = MINERVA.EXE:.text+0x2721b
015f:004282d8 57 push edi
015f:004282d9 8bce mov ecx,esi
015f:004282db e801ffffff call 004281e1 = MINERVA.EXE:.text+0x271e1
015f:004282e0 5f pop edi
015f:004282e1 5e pop esi

--------------------

-- stack summary --

0167:00c0a000 015f:004282c6 MINERVA.EXE:.text+0x272c6
(00000000,00000000,00000000,00000001,
00000000,00000e24,00000000,00000010)

-- stack trace --

0167:00c0a000 015f:004282c6 MINERVA.EXE:.text+0x272c6
(00000000,00000000,00000000,00000001,
00000000,00000e24,00000000,00000010)
015f:004282b1 e89a97feff call 00411a50 = MINERVA.EXE:.text+0x10a50
015f:004282b6 83c40c add esp,+0c
015f:004282b9 5f pop edi
015f:004282ba 5e pop esi
015f:004282bb c3 retd
015f:004282bc 56 push esi
015f:004282bd 8bf1 mov esi,ecx
015f:004282bf 57 push edi
015f:004282c0 8b7c240c mov edi,dword ptr [esp+0c]
015f:004282c4 8b06 mov eax,dword ptr [esi]
MINERVA.EXE:.text+0x272c6:
*015f:004282c6 8378f401 cmp dword ptr [eax-0c],+01
015f:004282ca 7f05 jg 004282d1 = MINERVA.EXE:.text+0x272d1
015f:004282cc 3b78fc cmp edi,dword ptr [eax-04]
015f:004282cf 7e0f jle 004282e0 = MINERVA.EXE:.text+0x272e0
015f:004282d1 8bce mov ecx,esi
015f:004282d3 e843ffffff call 0042821b = MINERVA.EXE:.text+0x2721b
015f:004282d8 57 push edi
015f:004282d9 8bce mov ecx,esi
015f:004282db e801ffffff call 004281e1 = MINERVA.EXE:.text+0x271e1
015f:004282e0 5f pop edi
015f:004282e1 5e pop esi

--------------------

-- stack dump --

006cf6fc 00000700
006cf700 6cf73d00
006cf704 42837a00
006cf708 00000700
006cf70c 4382d400
006cf710 6cf73d00
006cf714 42840800
006cf718 00000700
006cf71c 4382d400
006cf720 c0a14c00
006cf724 000a3000
006cf728 40929800
006cf72c 4382d400
006cf730 007e0a00 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cf734 0043947c = MINERVA.EXE:.data+0x247c
-> 00 00 00 00 70 94 43 00 7c 94 43 00 84 35 43 00 ....p.C.|.C..5C.
006cf738 00000a30
006cf73c bff728a2 = KERNEL32.DLL:_FREQASM+0x18a2

--------------------

015f:bff7287f 33ff xor edi,edi
015f:bff72881 8ee6 mov fs,si
015f:bff72883 8eef mov gs,di
015f:bff72885 66648b1d1e000000 mov bx,word ptr fs:[0000001e]
015f:bff7288d 6683eb01 sub bx,+01
015f:bff72891 7313 jnc bff728a6 = KERNEL32.DLL:_FREQASM+0x18a6
015f:bff72893 8bf0 mov esi,eax
015f:bff72895 8bfa mov edi,edx
015f:bff72897 8b157094fcbf mov edx,dword ptr [bffc9470]
015f:bff7289d e866190000 call bff74208 = KERNEL32.DLL:_FREQASM+0x3208
KERNEL32.DLL:_FREQASM+0x18a2:
*015f:bff728a2 8bd7 mov edx,edi
015f:bff728a4 8bc6 mov eax,esi
015f:bff728a6 6664891d1e000000 mov word ptr fs:[0000001e],bx
015f:bff728ae 8b5dfc mov ebx,dword ptr [ebp-04]
015f:bff728b1 8b75f8 mov esi,dword ptr [ebp-08]
015f:bff728b4 8b7df4 mov edi,dword ptr [ebp-0c]
015f:bff728b7 ff65dc jmp dword ptr [ebp-24]
015f:bff728ba 6664a10e000000 mov ax,word ptr fs:[0000000e]
015f:bff728c1 668945da mov word ptr [ebp-26],ax
015f:bff728c5 8f45dc pop dword ptr [ebp-24]
015f:bff728c8 ff35a497fcbf push dword ptr [bffc97a4]

--------------------

006cf740 00000009
006cf744 00000e3c
006cf748 007e0550 -> e4 2c 43 00 d0 05 7e 00 11 00 00 00 15 00 00 00 .,C.............
006cf74c 0042d8cd = MINERVA.EXE:.text+0x2c8cd

--------------------

015f:0042d8a5 750f jnz 0042d8b6 = MINERVA.EXE:.text+0x2c8b6
015f:0042d8a7 682fd84200 push 0042d82f
015f:0042d8ac b99cf24300 mov ecx,0043f29c
015f:0042d8b1 e899060000 call 0042df4f = MINERVA.EXE:.text+0x2cf4f
015f:0042d8b6 c3 retd
015f:0042d8b7 e8d5ffffff call 0042d891 = MINERVA.EXE:.text+0x2c891
015f:0042d8bc 0570100000 add eax,00001070
015f:0042d8c1 6804f44000 push 0040f404
015f:0042d8c6 8bc8 mov ecx,eax
015f:0042d8c8 e8ed050000 call 0042deba = MINERVA.EXE:.text+0x2ceba
MINERVA.EXE:.text+0x2c8cd:
*015f:0042d8cd c3 retd
015f:0042d8ce 56 push esi
015f:0042d8cf 8bf1 mov esi,ecx
015f:0042d8d1 8d4620 lea eax,[esi+20]
015f:0042d8d4 50 push eax
015f:0042d8d5 ff1590284400 call dword ptr [00442890] -> KERNEL32.DLL!InterlockedDecrement
015f:0042d8db 85c0 test eax,eax
015f:0042d8dd 7522 jnz 0042d901 = MINERVA.EXE:.text+0x2c901
015f:0042d8df 8b461c mov eax,dword ptr [esi+1c]
015f:0042d8e2 85c0 test eax,eax
015f:0042d8e4 740a jz 0042d8f0 = MINERVA.EXE:.text+0x2c8f0

--------------------

006cf750 0040f404 = MINERVA.EXE:.text+0xe404

--------------------

015f:0040f3e8 f644240401 test byte ptr [esp+04],01
015f:0040f3ed 56 push esi
015f:0040f3ee 8bf1 mov esi,ecx
015f:0040f3f0 c706b41f4300 mov dword ptr [esi],00431fb4
015f:0040f3f6 7406 jz 0040f3fe = MINERVA.EXE:.text+0xe3fe
015f:0040f3f8 56 push esi
015f:0040f3f9 e826e70100 call 0042db24 = MINERVA.EXE:.text+0x2cb24
015f:0040f3fe 8bc6 mov eax,esi
015f:0040f400 5e pop esi
015f:0040f401 c20400 retd 0004
MINERVA.EXE:.text+0xe404:
*015f:0040f404 b849f34200 mov eax,0042f349
015f:0040f409 e81a220000 call 00411628 = MINERVA.EXE:.text+0x10628
015f:0040f40e 51 push ecx
015f:0040f40f 6884000000 push 00000084
015f:0040f414 e8ede60100 call 0042db06 = MINERVA.EXE:.text+0x2cb06
015f:0040f419 8bc8 mov ecx,eax
015f:0040f41b 894df0 mov dword ptr [ebp-10],ecx
015f:0040f41e 33c0 xor eax,eax
015f:0040f420 3bc8 cmp ecx,eax
015f:0040f422 8945fc mov dword ptr [ebp-04],eax
015f:0040f425 7405 jz 0040f42c = MINERVA.EXE:.text+0xe42c

--------------------

006cf754 007e0acc -> 31 35 33 32 00 00 00 00 00 00 00 00 00 00 00 00 1532............
006cf758 00000000
006cf75c 20584d4d
006cf760 006c7000 -> 00 04 00 43 6f 75 6e 74 72 79 10 00 64 65 2b 01 ...Country..de+.
006cf764 007e0031 -> 01 02 00 02 00 08 00 00 00 00 00 00 00 02 00 02 ................
006cf768 00000000
006cf76c 30363220
006cf770 7a484d38
006cf774 007e0020 -> 00 00 00 00 03 00 00 01 02 00 03 00 00 02 00 01 ................
006cf778 00000000
006cf77c 00001000
006cf780 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cf784 7fffffff
006cf788 00000001
...
006cf790 0000024a
006cf794 00010000
006cf798 0f060006
006cf79c 006cf7c0 -> e8 f7 6c 00 98 ec 42 00 ff ff ff ff ea 3f 40 00 ..l...B......?@.
006cf7a0 0042efa7 = MINERVA.EXE:.text+0x2dfa7

--------------------

015f:0042ef83 e95d93ffff jmp 004282e5 = MINERVA.EXE:.text+0x272e5
015f:0042ef88 8d4d90 lea ecx,[ebp-70]
015f:0042ef8b e95593ffff jmp 004282e5 = MINERVA.EXE:.text+0x272e5
015f:0042ef90 8b45b0 mov eax,dword ptr [ebp-50]
015f:0042ef93 83e001 and eax,+01
015f:0042ef96 85c0 test eax,eax
015f:0042ef98 0f8408000000 jz 0042efa6 = MINERVA.EXE:.text+0x2dfa6
015f:0042ef9e 8b4d04 mov ecx,dword ptr [ebp+04]
015f:0042efa1 e93f93ffff jmp 004282e5 = MINERVA.EXE:.text+0x272e5
015f:0042efa6 c3 retd
MINERVA.EXE:.text+0x2dfa7:
*015f:0042efa7 b8d85a4300 mov eax,00435ad8
015f:0042efac e9cf16feff jmp 00410680 = MINERVA.EXE:.text+0xf680
015f:0042efb1 cc int 3
015f:0042efb2 cc int 3
015f:0042efb3 cc int 3
015f:0042efb4 cc int 3
015f:0042efb5 cc int 3
015f:0042efb6 cc int 3
015f:0042efb7 cc int 3
015f:0042efb8 cc int 3
015f:0042efb9 cc int 3

--------------------

006cf7a4 00000002
006cf7a8 004041a3 = MINERVA.EXE:.text+0x31a3

--------------------

015f:00404187 56 push esi
015f:00404188 57 push edi
015f:00404189 8bf1 mov esi,ecx
015f:0040418b 68f8030000 push 000003f8
015f:00404190 e83f2f0200 call 004270d4 = MINERVA.EXE:.text+0x260d4
015f:00404195 8bd8 mov ebx,eax
015f:00404197 8d44240c lea eax,[esp+0c]
015f:0040419b 50 push eax
015f:0040419c 8bce mov ecx,esi
015f:0040419e e8dd4f0000 call 00409180 = MINERVA.EXE:.text+0x8180
MINERVA.EXE:.text+0x31a3:
*015f:004041a3 8b08 mov ecx,dword ptr [eax]
015f:004041a5 33ff xor edi,edi
015f:004041a7 51 push ecx
015f:004041a8 8bcb mov ecx,ebx
015f:004041aa 897c241c mov dword ptr [esp+1c],edi
015f:004041ae e814300200 call 004271c7 = MINERVA.EXE:.text+0x261c7
015f:004041b3 8d4c240c lea ecx,[esp+0c]
015f:004041b7 c7442418ffffffff mov dword ptr [esp+18],ffffffff
015f:004041bf e821410200 call 004282e5 = MINERVA.EXE:.text+0x272e5
015f:004041c4 6a0a push +0a
015f:004041c6 6a0d push +0d

--------------------

006cf7ac 006cf7bc -> 00 a0 c0 00 e8 f7 6c 00 98 ec 42 00 ff ff ff ff ......l...B.....
006cf7b0 00c0a14c -> dc 1a 43 00 01 00 00 00 00 00 00 00 00 00 00 00 ..C.............
006cf7b4 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf7b8 00000000
006cf7bc 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf7c0 006cf7e8 -> 30 f8 6c 00 83 ec 42 00 00 00 00 00 93 3a 42 00 0.l...B......:B.
006cf7c4 0042ec98 = MINERVA.EXE:.text+0x2dc98
-> b8 98 57 43 00 e9 de 19 fe ff cc cc cc cc cc cc ..WC............
006cf7c8 ffffffff
006cf7cc 00403fea = MINERVA.EXE:.text+0x2fea

--------------------

015f:00403fc7 8bcf mov ecx,edi
015f:00403fc9 e8e0320200 call 004272ae = MINERVA.EXE:.text+0x262ae
015f:00403fce 8bce mov ecx,esi
015f:00403fd0 e8ab000000 call 00404080 = MINERVA.EXE:.text+0x3080
015f:00403fd5 8bce mov ecx,esi
015f:00403fd7 e814010000 call 004040f0 = MINERVA.EXE:.text+0x30f0
015f:00403fdc 8bce mov ecx,esi
015f:00403fde e86d030000 call 00404350 = MINERVA.EXE:.text+0x3350
015f:00403fe3 8bce mov ecx,esi
015f:00403fe5 e886010000 call 00404170 = MINERVA.EXE:.text+0x3170
MINERVA.EXE:.text+0x2fea:
*015f:00403fea 8bce mov ecx,esi
015f:00403fec e83f020000 call 00404230 = MINERVA.EXE:.text+0x3230
015f:00403ff1 8bce mov ecx,esi
015f:00403ff3 e8c8480000 call 004088c0 = MINERVA.EXE:.text+0x78c0
015f:00403ff8 8bce mov ecx,esi
015f:00403ffa e831000000 call 00404030 = MINERVA.EXE:.text+0x3030
015f:00403fff 8d4c2410 lea ecx,[esp+10]
015f:00404003 c7442420ffffffff mov dword ptr [esp+20],ffffffff
015f:0040400b e8d5420200 call 004282e5 = MINERVA.EXE:.text+0x272e5
015f:00404010 8b4c2418 mov ecx,dword ptr [esp+18]
015f:00404014 5f pop edi

--------------------

006cf7d0 006cf7fc -> 24 0e 00 00 10 01 00 00 28 0e 00 00 00 00 00 00 $.......(.......
006cf7d4 0000886c
006cf7d8 006cf814 -> 28 f8 6c 00 e7 42 f9 bf 6c 88 a7 87 a7 87 00 00 (.l..B..l.......
006cf7dc 006cf848 -> 00 00 46 02 00 00 a4 88 02 00 aa 3c c0 00 b7 16 ..F........<....
006cf7e0 007e092c -> 26 41 62 6f 75 74 20 4d 69 6e 65 72 76 61 2e 2e &About Minerva..
006cf7e4 007e0940 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cf7e8 006cf830 -> 58 fa 6c 00 6d 18 f7 bf b7 87 46 88 00 00 00 00 X.l.m.....F.....
006cf7ec 0042ec83 = MINERVA.EXE:.text+0x2dc83

--------------------

015f:0042ec69 e9121afeff jmp 00410680 = MINERVA.EXE:.text+0xf680
015f:0042ec6e cc int 3
015f:0042ec6f cc int 3
015f:0042ec70 8d4dec lea ecx,[ebp-14]
015f:0042ec73 e96d96ffff jmp 004282e5 = MINERVA.EXE:.text+0x272e5
015f:0042ec78 8b45f0 mov eax,dword ptr [ebp-10]
015f:0042ec7b 50 push eax
015f:0042ec7c e8e08cffff call 00427961 = MINERVA.EXE:.text+0x26961
015f:0042ec81 59 pop ecx
015f:0042ec82 c3 retd
MINERVA.EXE:.text+0x2dc83:
*015f:0042ec83 b868574300 mov eax,00435768
015f:0042ec88 e9f319feff jmp 00410680 = MINERVA.EXE:.text+0xf680
015f:0042ec8d cc int 3
015f:0042ec8e cc int 3
015f:0042ec8f cc int 3
015f:0042ec90 8d4df0 lea ecx,[ebp-10]
015f:0042ec93 e94d96ffff jmp 004282e5 = MINERVA.EXE:.text+0x272e5
015f:0042ec98 b898574300 mov eax,00435798
015f:0042ec9d e9de19feff jmp 00410680 = MINERVA.EXE:.text+0xf680
015f:0042eca2 cc int 3
015f:0042eca3 cc int 3

--------------------

006cf7f0 00000000
006cf7f4 00423a93 = MINERVA.EXE:.text+0x22a93

--------------------

015f:00423a78 50 push eax
015f:00423a79 68c0134300 push 004313c0
015f:00423a7e e8484e0000 call 004288cb = MINERVA.EXE:.text+0x278cb
015f:00423a83 59 pop ecx
015f:00423a84 85c0 test eax,eax
015f:00423a86 59 pop ecx
015f:00423a87 740c jz 00423a95 = MINERVA.EXE:.text+0x22a95
015f:00423a89 8b10 mov edx,dword ptr [eax]
015f:00423a8b 8bc8 mov ecx,eax
015f:00423a8d ff92c4000000 call dword ptr [edx+000000c4]
MINERVA.EXE:.text+0x22a93:
*015f:00423a93 eb07 jmp 00423a9c = MINERVA.EXE:.text+0x22a9c
015f:00423a95 6a01 push +01
015f:00423a97 58 pop eax
015f:00423a98 eb02 jmp 00423a9c = MINERVA.EXE:.text+0x22a9c
015f:00423a9a 33c0 xor eax,eax
015f:00423a9c c21000 retd 0010
015f:00423a9f b8e0124300 mov eax,004312e0
015f:00423aa4 c3 retd
015f:00423aa5 56 push esi
015f:00423aa6 57 push edi
015f:00423aa7 8b7c240c mov edi,dword ptr [esp+0c]

--------------------

006cf7f8 bff7363b = KERNEL32.DLL:_FREQASM+0x263b

--------------------

015f:bff7361f 65d16e04 shr dword ptr gs:[esi+04],EvIa
015f:bff73623 7222 jc bff73647 = KERNEL32.DLL:_FREQASM+0x2647
015f:bff73625 65ff32 push dword ptr gs:[edx]
015f:bff73628 8d5204 lea edx,[edx+04]
015f:bff7362b e2f2 loop bff7361f = KERNEL32.DLL:_FREQASM+0x261f
015f:bff7362d 8bfc mov edi,esp
015f:bff7362f 33c0 xor eax,eax
015f:bff73631 65394608 cmp dword ptr gs:[esi+08],eax
015f:bff73635 7404 jz bff7363b = KERNEL32.DLL:_FREQASM+0x263b
015f:bff73637 65ff5608 call dword ptr gs:[esi+08]
KERNEL32.DLL:_FREQASM+0x263b:
*015f:bff7363b 8be7 mov esp,edi
015f:bff7363d 33c9 xor ecx,ecx
015f:bff7363f 8ee9 mov gs,cx
015f:bff73641 5f pop edi
015f:bff73642 5e pop esi
015f:bff73643 c9 leave
015f:bff73644 c20c00 retd 000c
015f:bff73647 52 push edx
015f:bff73648 51 push ecx
015f:bff73649 33c0 xor eax,eax
015f:bff7364b 48 dec eax

--------------------

006cf7fc 00000e24
006cf800 00000110
006cf804 00000e28
006cf808 00000000
006cf80c 884687b7
006cf810 00000167
006cf814 006cf828 -> b8 19 f7 bf 66 88 6c 00 58 fa 6c 00 6d 18 f7 bf ....f.l.X.l.m...
006cf818 bff942e7 = KERNEL32.DLL:.text+0x1b2e7

--------------------

015f:bff942c6 8bd0 mov edx,eax
015f:bff942c8 c1c210 rol edx,10
015f:bff942cb e9c8f7ffff jmp bff93a98 = KERNEL32.DLL:.text+0x1aa98
015f:bff942d0 0fbf4316 movsx eax,word ptr [ebx+16]
015f:bff942d4 50 push eax
015f:bff942d5 668b4318 mov ax,word ptr [ebx+18]
015f:bff942d9 50 push eax
015f:bff942da ff731a push dword ptr [ebx+1a]
015f:bff942dd e803d5fdff call bff717e5 = KERNEL32.DLL!K32Thk1632Prolog
015f:bff942e2 e816f3fdff call bff735fd = KERNEL32.DLL:_FREQASM+0x25fd
KERNEL32.DLL:.text+0x1b2e7:
*015f:bff942e7 e81ed5fdff call bff7180a = KERNEL32.DLL!K32Thk1632Epilog
015f:bff942ec 8bd0 mov edx,eax
015f:bff942ee c1c210 rol edx,10
015f:bff942f1 e9aaf7ffff jmp bff93aa0 = KERNEL32.DLL:.text+0x1aaa0
015f:bff942f6 0fbf4316 movsx eax,word ptr [ebx+16]
015f:bff942fa 50 push eax
015f:bff942fb ff7318 push dword ptr [ebx+18]
015f:bff942fe e8e2d4fdff call bff717e5 = KERNEL32.DLL!K32Thk1632Prolog
015f:bff94303 e806f2fdff call bff7350e = KERNEL32.DLL:_FREQASM+0x250e
015f:bff94308 e8fdd4fdff call bff7180a = KERNEL32.DLL!K32Thk1632Epilog
015f:bff9430d e986f7ffff jmp bff93a98 = KERNEL32.DLL:.text+0x1aa98

--------------------

006cf81c 87a7886c
006cf820 000087a7
006cf824 00000000
006cf828 bff719b8 = KERNEL32.DLL:_FREQASM+0x9b8

--------------------

015f:bff71991 51 push ecx
015f:bff71992 c1cf10 ror edi,10
015f:bff71995 6664873d0e000000 xchg word ptr fs:[0000000e],di
015f:bff7199d 57 push edi
015f:bff7199e 686d18f7bf push bff7186d
015f:bff719a3 64ff3500000000 push dword ptr fs:[00000000]
015f:bff719aa 64892500000000 mov dword ptr fs:[00000000],esp
015f:bff719b1 55 push ebp
015f:bff719b2 8d6c24fc lea ebp,[esp-04]
015f:bff719b6 ffd2 call edx
KERNEL32.DLL:_FREQASM+0x9b8:
*015f:bff719b8 5d pop ebp
015f:bff719b9 0fb6c9 movzx ecx,cl
015f:bff719bc 648f0500000000 pop dword ptr fs:[00000000]
015f:bff719c3 8d642404 lea esp,[esp+04]
015f:bff719c7 5f pop edi
015f:bff719c8 6664893d0e000000 mov word ptr fs:[0000000e],di
015f:bff719d0 5b pop ebx
015f:bff719d1 660fb22424 lss sp,dword ptr [esp]
015f:bff719d6 6664891d1e000000 mov word ptr fs:[0000001e],bx
015f:bff719de 5b pop ebx
015f:bff719df 0bdb or ebx,ebx

--------------------

006cf82c 006c8866
006cf830 006cfa58 -> dc fa 6c 00 60 f2 42 00 ff ff ff ff 88 fa 6c 00 ..l.`.B.......l.
006cf834 bff7186d = KERNEL32.DLL:_FREQASM+0x86d

--------------------

015f:bff7183d 8b157094fcbf mov edx,dword ptr [bffc9470]
015f:bff71843 e8b7290000 call bff741ff = KERNEL32.DLL:_FREQASM+0x31ff
015f:bff71848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff
015f:bff71852 ff5326 call dword ptr [ebx+26]
015f:bff71855 8b157094fcbf mov edx,dword ptr [bffc9470]
015f:bff7185b e85b290000 call bff741bb = KERNEL32.DLL:_FREQASM+0x31bb
015f:bff71860 6664ff051e000000 inc word ptr fs:[0000001e]
015f:bff71868 b114 mov cl,14
015f:bff7186a 8be5 mov esp,ebp
015f:bff7186c c3 retd
KERNEL32.DLL:_FREQASM+0x86d:
*015f:bff7186d 8b442404 mov eax,dword ptr [esp+04]
015f:bff71871 f7400406000000 test dword ptr [eax+04],00000006
015f:bff71878 7419 jz bff71893 = KERNEL32.DLL:_FREQASM+0x893
015f:bff7187a 8b442408 mov eax,dword ptr [esp+08]
015f:bff7187e 8178046d18f7bf cmp dword ptr [eax+04],bff7186d
015f:bff71885 750c jnz bff71893 = KERNEL32.DLL:_FREQASM+0x893
015f:bff71887 668b4808 mov cx,word ptr [eax+08]
015f:bff7188b 6664890d0e000000 mov word ptr fs:[0000000e],cx
015f:bff71893 b801000000 mov eax,00000001
015f:bff71898 c3 retd
015f:bff71899 9d popfd

--------------------

006cf838 884687b7
006cf83c 00000000
006cf840 87a78846
006cf844 00008890
006cf848 02460000
006cf84c 88a40000
006cf850 3caa0002
006cf854 16b700c0
006cf858 2737006c
006cf85c 0000014f
006cf860 886c87a7
006cf864 88aa87a7
006cf868 16d73e77
006cf86c 00000004
006cf870 00000000
006cf874 00423a65 = MINERVA.EXE:.text+0x22a65

--------------------

015f:00423a4e 8b0488 mov eax,dword ptr [eax+ecx*4]
015f:00423a51 8906 mov dword ptr [esi],eax
015f:00423a53 8b4704 mov eax,dword ptr [edi+04]
015f:00423a56 8b4dfc mov ecx,dword ptr [ebp-04]
015f:00423a59 893488 mov dword ptr [eax+ecx*4],esi
015f:00423a5c 8d460c lea eax,[esi+0c]
015f:00423a5f 5f pop edi
015f:00423a60 5e pop esi
015f:00423a61 c9 leave
015f:00423a62 c20400 retd 0004
MINERVA.EXE:.text+0x22a65:
*015f:00423a65 817c240810010000 cmp dword ptr [esp+08],00000110
015f:00423a6d 752b jnz 00423a9a = MINERVA.EXE:.text+0x22a9a
015f:00423a6f ff742404 push dword ptr [esp+04]
015f:00423a73 e8f70c0000 call 0042476f = MINERVA.EXE:.text+0x2376f
015f:00423a78 50 push eax
015f:00423a79 68c0134300 push 004313c0
015f:00423a7e e8484e0000 call 004288cb = MINERVA.EXE:.text+0x278cb
015f:00423a83 59 pop ecx
015f:00423a84 85c0 test eax,eax
015f:00423a86 59 pop ecx
015f:00423a87 740c jz 00423a95 = MINERVA.EXE:.text+0x22a95

--------------------

006cf878 00000000
006cf87c 00000e28
006cf880 00000110
006cf884 00000e24
006cf888 01100e24
006cf88c 00000e28
006cf890 00000000
006cf894 00017a64
006cf898 80020000
006cf89c 16d70000
006cf8a0 87a70001
006cf8a4 000087a7
006cf8a8 88d83580
006cf8ac 00030001
006cf8b0 00423a65 = MINERVA.EXE:.text+0x22a65

--------------------

--------------------

006cf8b4 1787301f
006cf8b8 00000000
006cf8bc 0e280000
006cf8c0 0e240110
006cf8c4 000016b7
006cf8c8 358000c0
006cf8cc 00040002
006cf8d0 03920e24
006cf8d4 00008037
006cf8d8 308b8906
006cf8dc 00000000
006cf8e0 0e280000
006cf8e4 35800110
006cf8e8 87a70002
006cf8ec 00008988
006cf8f0 00c00006 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cf8f4 f9300000
006cf8f8 0006006c
006cf8fc 01578988
006cf900 35805f52
006cf904 891c0002
006cf908 178750e8
006cf90c 00000000
006cf910 0e280000
006cf914 35800110
006cf918 50ed0002
006cf91c 10d08938
006cf920 000017af
006cf924 00000000
006cf928 01100e28
006cf92c 00060e24
006cf930 898800c0
006cf934 16b70000
006cf938 042b8954
006cf93c 000117af
006cf940 00000000
006cf944 0e280000
006cf948 35800110
006cf94c 50b10002
006cf950 04301787
006cf954 36978988
006cf958 000116d7
006cf95c 00000000
006cf960 0e280000
006cf964 0e240110
006cf968 178750b1
006cf96c 01100e24
006cf970 00000e28
006cf974 00000000
...
006cf97c 80020000
006cf980 00050000
006cf984 16d72d8c
006cf988 bff714d9 = KERNEL32.DLL:_FREQASM+0x4d9
-> 0f b7 ec 8c d1 0f b7 c9 0f b2 65 00 66 8c d6 66 ..........e.f..f
006cf98c 17af015f
006cf990 006cf998 -> 9f 13 00 00 00 a0 c0 00 00 a0 c0 00 a8 40 42 00 .............@B.
006cf994 00030167
006cf998 0000139f
006cf99c 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
...
006cf9a4 004240a8 = MINERVA.EXE:.text+0x230a8

--------------------

015f:0042408d e8cd580000 call 0042995f = MINERVA.EXE:.text+0x2895f
015f:00424092 50 push eax
015f:00424093 8bce mov ecx,esi
015f:00424095 ff97c8000000 call dword ptr [edi+000000c8]
015f:0042409b 8bce mov ecx,esi
015f:0042409d e8fa050000 call 0042469c = MINERVA.EXE:.text+0x2369c
015f:004240a2 5f pop edi
015f:004240a3 5e pop esi
015f:004240a4 c20800 retd 0008
015f:004240a7 c3 retd
MINERVA.EXE:.text+0x230a8:
*015f:004240a8 56 push esi
015f:004240a9 8bf1 mov esi,ecx
015f:004240ab 57 push edi
015f:004240ac 8b06 mov eax,dword ptr [esi]
015f:004240ae ff90d4000000 call dword ptr [eax+000000d4]
015f:004240b4 e8d8970000 call 0042d891 = MINERVA.EXE:.text+0x2c891
015f:004240b9 8b8838100000 mov ecx,dword ptr [eax+00001038]
015f:004240bf 85c9 test ecx,ecx
015f:004240c1 7433 jz 004240f6 = MINERVA.EXE:.text+0x230f6
015f:004240c3 8b4658 mov eax,dword ptr [esi+58]
015f:004240c6 85c0 test eax,eax

--------------------

006cf9a8 006cf9c8 -> 64 fa 6c 00 c1 46 42 00 10 01 00 00 28 0e 00 00 d.l..FB.....(...
006cf9ac 0042507a = MINERVA.EXE:.text+0x2407a

--------------------

015f:00425059 ff7508 push dword ptr [ebp+08]
015f:0042505c ff761c push dword ptr [esi+1c]
015f:0042505f ff152c2a4400 call dword ptr [00442a2c] -> USER32.DLL!DefWindowProcA
015f:00425065 eb13 jmp 0042507a = MINERVA.EXE:.text+0x2407a
015f:00425067 ff7510 push dword ptr [ebp+10]
015f:0042506a ff750c push dword ptr [ebp+0c]
015f:0042506d ff7508 push dword ptr [ebp+08]
015f:00425070 ff761c push dword ptr [esi+1c]
015f:00425073 50 push eax
015f:00425074 ff15302b4400 call dword ptr [00442b30] -> KEXBASES.DLL:.text+0xa410
MINERVA.EXE:.text+0x2407a:
*015f:0042507a 5e pop esi
015f:0042507b 5d pop ebp
015f:0042507c c20c00 retd 000c
015f:0042507f 8d4128 lea eax,[ecx+28]
015f:00425082 c3 retd
015f:00425083 56 push esi
015f:00425084 8bf1 mov esi,ecx
015f:00425086 e806880000 call 0042d891 = MINERVA.EXE:.text+0x2c891
015f:0042508b 8b8034100000 mov eax,dword ptr [eax+00001034]
015f:00425091 85c0 test eax,eax
015f:00425093 7407 jz 0042509c = MINERVA.EXE:.text+0x2409c

--------------------

006cf9b0 816e3360 -> 90 68 81 4d 87 17 90 68 00 00 03 00 e9 f3 13 87 .h.M...h........
006cf9b4 00000e24
006cf9b8 00000110
006cf9bc 00000e28
006cf9c0 00000000
006cf9c4 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf9c8 006cfa64 -> 88 fa 6c 00 51 56 42 00 10 01 00 00 28 0e 00 00 ..l.QVB.....(...
006cf9cc 004246c1 = MINERVA.EXE:.text+0x236c1

--------------------

015f:0042469d 8bf1 mov esi,ecx
015f:0042469f 683cf34000 push 0040f33c
015f:004246a4 b998f24300 mov ecx,0043f298
015f:004246a9 e80c980000 call 0042deba = MINERVA.EXE:.text+0x2ceba
015f:004246ae ff7040 push dword ptr [eax+40]
015f:004246b1 8b16 mov edx,dword ptr [esi]
015f:004246b3 8bce mov ecx,esi
015f:004246b5 ff703c push dword ptr [eax+3c]
015f:004246b8 ff7038 push dword ptr [eax+38]
015f:004246bb ff92a8000000 call dword ptr [edx+000000a8]
MINERVA.EXE:.text+0x236c1:
*015f:004246c1 5e pop esi
015f:004246c2 c3 retd
015f:004246c3 6a00 push +00
015f:004246c5 e80d000000 call 004246d7 = MINERVA.EXE:.text+0x236d7
015f:004246ca 85c0 test eax,eax
015f:004246cc 59 pop ecx
015f:004246cd 7407 jz 004246d6 = MINERVA.EXE:.text+0x236d6
015f:004246cf 8bc8 mov ecx,eax
015f:004246d1 e903490000 jmp 00428fd9 = MINERVA.EXE:.text+0x27fd9
015f:004246d6 c3 retd
015f:004246d7 b8d6f14200 mov eax,0042f1d6

--------------------

006cf9d0 00000110
006cf9d4 00000e28
006cf9d8 00000000
006cf9dc 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf9e0 004240fd = MINERVA.EXE:.text+0x230fd

--------------------

015f:004240e2 ff5220 call dword ptr [edx+20]
015f:004240e5 85c0 test eax,eax
015f:004240e7 750d jnz 004240f6 = MINERVA.EXE:.text+0x230f6
015f:004240e9 6aff push -01
015f:004240eb 8bce mov ecx,esi
015f:004240ed e86effffff call 00424060 = MINERVA.EXE:.text+0x23060
015f:004240f2 33c0 xor eax,eax
015f:004240f4 eb35 jmp 0042412b = MINERVA.EXE:.text+0x2312b
015f:004240f6 8bce mov ecx,esi
015f:004240f8 e89f050000 call 0042469c = MINERVA.EXE:.text+0x2369c
MINERVA.EXE:.text+0x230fd:
*015f:004240fd 8bf8 mov edi,eax
015f:004240ff 85ff test edi,edi
015f:00424101 7426 jz 00424129 = MINERVA.EXE:.text+0x23129
015f:00424103 f6462501 test byte ptr [esi+25],01
015f:00424107 7420 jz 00424129 = MINERVA.EXE:.text+0x23129
015f:00424109 6a00 push +00
015f:0042410b 6a00 push +00
015f:0042410d ff761c push dword ptr [esi+1c]
015f:00424110 ff15682a4400 call dword ptr [00442a68] -> KEXBASES.DLL:.text+0x74f0
015f:00424116 50 push eax
015f:00424117 e82b060000 call 00424747 = MINERVA.EXE:.text+0x23747

--------------------

006cf9e4 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf9e8 00000000
006cf9ec 00425a7f = MINERVA.EXE:.text+0x24a7f

--------------------

015f:00425a6a 56 push esi
015f:00425a6b ff750c push dword ptr [ebp+0c]
015f:00425a6e eb0b jmp 00425a7b = MINERVA.EXE:.text+0x24a7b
015f:00425a70 0fbfc6 movsx eax,si
015f:00425a73 c1ee10 shr esi,10
015f:00425a76 0fbfce movsx ecx,si
015f:00425a79 51 push ecx
015f:00425a7a 50 push eax
015f:00425a7b 8bcf mov ecx,edi
015f:00425a7d ffd3 call ebx
MINERVA.EXE:.text+0x24a7f:
*015f:00425a7f e985000000 jmp 00425b09 = MINERVA.EXE:.text+0x24b09
015f:00425a84 8bcf mov ecx,edi
015f:00425a86 ffd3 call ebx
015f:00425a88 eb7f jmp 00425b09 = MINERVA.EXE:.text+0x24b09
015f:00425a8a 56 push esi
015f:00425a8b ff750c push dword ptr [ebp+0c]
015f:00425a8e 8bcf mov ecx,edi
015f:00425a90 ffd3 call ebx
015f:00425a92 eb78 jmp 00425b0c = MINERVA.EXE:.text+0x24b0c
015f:00425a94 56 push esi
015f:00425a95 8bcf mov ecx,edi

--------------------

006cf9f0 00000e28
006cf9f4 00000000
006cf9f8 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cf9fc 00430b58 = MINERVA.EXE:.rdata+0xb58
-> d3 ce 42 00 70 38 40 00 40 27 40 00 30 27 40 00 ..B.p8@.@'@.0'@.
006cfa00 005a0420 -> 1c 21 43 00 00 00 00 00 00 00 00 00 00 00 00 00 .!C.............
006cfa04 16b717a7
006cfa08 00008a38
006cfa0c 00440038 = MINERVA.EXE:.data+0x9038
-> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cfa10 000004ca
006cfa14 8a2a696f
006cfa18 17a71248
006cfa1c 00000006
006cfa20 fff00000
006cfa24 00023580
006cfa28 8a3c124d
006cfa2c 16c711f1
006cfa30 00000006
006cfa34 bff741fb = KERNEL32.DLL:_FREQASM+0x31fb

--------------------

015f:bff741e1 51 push ecx
015f:bff741e2 52 push edx
015f:bff741e3 681d002a00 push 002a001d
015f:bff741e8 e8e7d1ffff call bff713d4 = KERNEL32.DLL!1
015f:bff741ed 59 pop ecx
015f:bff741ee 5a pop edx
015f:bff741ef ebe8 jmp bff741d9 = KERNEL32.DLL:_FREQASM+0x31d9
015f:bff741f1 8b542404 mov edx,dword ptr [esp+04]
015f:bff741f5 50 push eax
015f:bff741f6 e804000000 call bff741ff = KERNEL32.DLL:_FREQASM+0x31ff
KERNEL32.DLL:_FREQASM+0x31fb:
*015f:bff741fb 58 pop eax
015f:bff741fc c20400 retd 0004
015f:bff741ff 833de49cfcbf01 cmp dword ptr [bffc9ce4],+01
015f:bff74206 7c32 jl bff7423a = KERNEL32.DLL:_FREQASM+0x323a
015f:bff74208 3b157094fcbf cmp edx,dword ptr [bffc9470]
015f:bff7420e 7506 jnz bff74216 = KERNEL32.DLL:_FREQASM+0x3216
015f:bff74210 837a0401 cmp dword ptr [edx+04],+01
015f:bff74214 7426 jz bff7423c = KERNEL32.DLL:_FREQASM+0x323c
015f:bff74216 ff4a04 dec dword ptr [edx+04]
015f:bff74219 754a jnz bff74265 = KERNEL32.DLL:_FREQASM+0x3265
015f:bff7421b c7420800000000 mov dword ptr [edx+08],00000000

--------------------

006cfa38 00000008
006cfa3c bff7698f = KERNEL32.DLL:_FREQASM+0x598f

--------------------

015f:bff7696d 7512 jnz bff76981 = KERNEL32.DLL:_FREQASM+0x5981
015f:bff7696f a801 test al,01
015f:bff76971 7520 jnz bff76993 = KERNEL32.DLL:_FREQASM+0x5993
015f:bff76973 8b15b4a0fcbf mov edx,dword ptr [bffca0b4]
015f:bff76979 8911 mov dword ptr [ecx],edx
015f:bff7697b 890db4a0fcbf mov dword ptr [bffca0b4],ecx
015f:bff76981 a804 test al,04
015f:bff76983 75d6 jnz bff7695b = KERNEL32.DLL:_FREQASM+0x595b
015f:bff76985 68c094fcbf push bffc94c0
015f:bff7698a e862d8ffff call bff741f1 = KERNEL32.DLL!98
KERNEL32.DLL:_FREQASM+0x598f:
*015f:bff7698f c9 leave
015f:bff76990 c20400 retd 0004
015f:bff76993 50 push eax
015f:bff76994 51 push ecx
015f:bff76995 e8de640000 call bff7ce78 = KERNEL32.DLL:.text+0x3e78
015f:bff7699a 58 pop eax
015f:bff7699b ebe4 jmp bff76981 = KERNEL32.DLL:_FREQASM+0x5981
015f:bff7699d 64ff3500000000 push dword ptr fs:[00000000]
015f:bff769a4 55 push ebp
015f:bff769a5 8d4c2404 lea ecx,[esp+04]
015f:bff769a9 16 push ss

--------------------

006cfa40 bffc94c0 = KERNEL32.DLL:.data+0x4c0
-> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cfa44 00008a44
006cfa48 bff7152e = KERNEL32.DLL:_FREQASM+0x52e

--------------------

015f:bff7150a 03d1 add edx,ecx
015f:bff7150c 64a134000000 mov eax,dword ptr fs:[00000034]
015f:bff71512 8902 mov dword ptr [edx],eax
015f:bff71514 64891534000000 mov dword ptr fs:[00000034],edx
015f:bff7151b 665f pop di
015f:bff7151d 660bff or di,di
015f:bff71520 740c jz bff7152e = KERNEL32.DLL:_FREQASM+0x52e
015f:bff71522 a1d89cfcbf mov eax,dword ptr [bffc9cd8]
015f:bff71527 ff30 push dword ptr [eax]
015f:bff71529 e820540000 call bff7694e = KERNEL32.DLL:_FREQASM+0x594e
KERNEL32.DLL:_FREQASM+0x52e:
*015f:bff7152e 66648b3d1e000000 mov di,word ptr fs:[0000001e]
015f:bff71536 6683ef01 sub di,+01
015f:bff7153a 730b jnc bff71547 = KERNEL32.DLL:_FREQASM+0x547
015f:bff7153c 8b157094fcbf mov edx,dword ptr [bffc9470]
015f:bff71542 e8b82c0000 call bff741ff = KERNEL32.DLL:_FREQASM+0x31ff
015f:bff71547 6664893d1e000000 mov word ptr fs:[0000001e],di
015f:bff7154f 8bc6 mov eax,esi
015f:bff71551 0fb6cb movzx ecx,bl
015f:bff71554 5f pop edi
015f:bff71555 5e pop esi
015f:bff71556 5b pop ebx

--------------------

006cfa4c bff71547 = KERNEL32.DLL:_FREQASM+0x547

--------------------

015f:bff7151d 660bff or di,di
015f:bff71520 740c jz bff7152e = KERNEL32.DLL:_FREQASM+0x52e
015f:bff71522 a1d89cfcbf mov eax,dword ptr [bffc9cd8]
015f:bff71527 ff30 push dword ptr [eax]
015f:bff71529 e820540000 call bff7694e = KERNEL32.DLL:_FREQASM+0x594e
015f:bff7152e 66648b3d1e000000 mov di,word ptr fs:[0000001e]
015f:bff71536 6683ef01 sub di,+01
015f:bff7153a 730b jnc bff71547 = KERNEL32.DLL:_FREQASM+0x547
015f:bff7153c 8b157094fcbf mov edx,dword ptr [bffc9470]
015f:bff71542 e8b82c0000 call bff741ff = KERNEL32.DLL:_FREQASM+0x31ff
KERNEL32.DLL:_FREQASM+0x547:
*015f:bff71547 6664893d1e000000 mov word ptr fs:[0000001e],di
015f:bff7154f 8bc6 mov eax,esi
015f:bff71551 0fb6cb movzx ecx,bl
015f:bff71554 5f pop edi
015f:bff71555 5e pop esi
015f:bff71556 5b pop ebx
015f:bff71557 5d pop ebp
015f:bff71558 5a pop edx
015f:bff71559 03e1 add esp,ecx
015f:bff7155b ffe2 jmp edx
015f:bff7155d 55 push ebp

--------------------

006cfa50 004312e0 = MINERVA.EXE:.rdata+0x12e0
-> 58 15 43 00 e8 12 43 00 19 00 00 00 00 00 00 00 X.C...C.........
006cfa54 00000000
006cfa58 006cfadc -> 40 fb 6c 00 c0 f1 42 00 00 00 00 00 04 fb 6c 00 @.l...B.......l.
006cfa5c 0042f260 = MINERVA.EXE:.text+0x2e260
-> b8 40 60 43 00 e9 16 14 fe ff cc cc 8d 4d b8 e9 .@`C.........M..
006cfa60 ffffffff
006cfa64 006cfa88 -> e8 fa 6c 00 68 45 42 00 10 01 00 00 28 0e 00 00 ..l.hEB.....(...
006cfa68 00425651 = MINERVA.EXE:.text+0x24651

--------------------

015f:00425635 8d45fc lea eax,[ebp-04]
015f:00425638 57 push edi
015f:00425639 50 push eax
015f:0042563a ff7510 push dword ptr [ebp+10]
015f:0042563d 8365fc00 and dword ptr [ebp-04],+00
015f:00425641 8bf9 mov edi,ecx
015f:00425643 ff750c push dword ptr [ebp+0c]
015f:00425646 8b37 mov esi,dword ptr [edi]
015f:00425648 ff7508 push dword ptr [ebp+08]
015f:0042564b ff96a4000000 call dword ptr [esi+000000a4]
MINERVA.EXE:.text+0x24651:
*015f:00425651 85c0 test eax,eax
015f:00425653 7514 jnz 00425669 = MINERVA.EXE:.text+0x24669
015f:00425655 ff7510 push dword ptr [ebp+10]
015f:00425658 8bcf mov ecx,edi
015f:0042565a ff750c push dword ptr [ebp+0c]
015f:0042565d ff7508 push dword ptr [ebp+08]
015f:00425660 ff96a8000000 call dword ptr [esi+000000a8]
015f:00425666 8945fc mov dword ptr [ebp-04],eax
015f:00425669 8b45fc mov eax,dword ptr [ebp-04]
015f:0042566c 5f pop edi
015f:0042566d 5e pop esi

--------------------

006cfa6c 00000110
006cfa70 00000e28
006cfa74 00431378 = MINERVA.EXE:.rdata+0x1378
-> 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cfa78 006cfa84 -> 00 00 00 00 e8 fa 6c 00 68 45 42 00 10 01 00 00 ......l.hEB.....
006cfa7c 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfa80 00000110
006cfa84 00000000
006cfa88 006cfae8 -> 04 fb 6c 00 1e 48 42 00 00 a0 c0 00 44 00 ca 04 ..l..HB.....D...
006cfa8c 00424568 = MINERVA.EXE:.text+0x23568

--------------------

015f:0042454d 8d45dc lea eax,[ebp-24]
015f:00424550 50 push eax
015f:00424551 57 push edi
015f:00424552 e874000000 call 004245cb = MINERVA.EXE:.text+0x235cb
015f:00424557 ff7518 push dword ptr [ebp+18]
015f:0042455a 8b07 mov eax,dword ptr [edi]
015f:0042455c 8bcf mov ecx,edi
015f:0042455e ff7514 push dword ptr [ebp+14]
015f:00424561 56 push esi
015f:00424562 ff90a0000000 call dword ptr [eax+000000a0]
MINERVA.EXE:.text+0x23568:
*015f:00424568 81fe10010000 cmp esi,00000110
015f:0042456e 894508 mov dword ptr [ebp+08],eax
015f:00424571 7539 jnz 004245ac = MINERVA.EXE:.text+0x235ac
015f:00424573 ff750c push dword ptr [ebp+0c]
015f:00424576 8d45dc lea eax,[ebp-24]
015f:00424579 50 push eax
015f:0042457a 57 push edi
015f:0042457b e86e000000 call 004245ee = MINERVA.EXE:.text+0x235ee
015f:00424580 eb2a jmp 004245ac = MINERVA.EXE:.text+0x235ac
015f:00424582 e8ce350000 call 00427b55 = MINERVA.EXE:.text+0x26b55
015f:00424587 8b4dec mov ecx,dword ptr [ebp-14]

--------------------

006cfa90 00000110
006cfa94 00000e28
006cfa98 00000000
006cfa9c 006cfb0c -> 24 0e 00 00 10 01 00 00 28 0e 00 00 00 00 00 00 $.......(.......
006cfaa0 00008b7a
006cfaa4 006cfb56 -> 00 00 46 02 00 00 b2 8b 02 00 aa 3c 02 00 b7 16 ..F........<....
006cfaa8 00000000
...
006cfacc 0000023a
006cfad0 000001b5
006cfad4 005a0420 -> 1c 21 43 00 00 00 00 00 00 00 00 00 00 00 00 00 .!C.............
006cfad8 006cfa9c -> 0c fb 6c 00 7a 8b 00 00 56 fb 6c 00 00 00 00 00 ..l.z...V.l.....
006cfadc 006cfb40 -> 1c fd 6c 00 6d 18 f7 bf 77 87 54 8b 00 00 00 00 ..l.m...w.T.....
006cfae0 0042f1c0 = MINERVA.EXE:.text+0x2e1c0
-> b8 70 5e 43 00 e9 b6 14 fe ff cc cc ff 75 08 e8 .p^C.........u..
006cfae4 00000000
006cfae8 006cfb04 -> 24 fb 6c 00 3b 36 f7 bf 24 0e 00 00 10 01 00 00 $.l.;6..$.......
006cfaec 0042481e = MINERVA.EXE:.text+0x2381e

--------------------

015f:00424801 58 pop eax
015f:00424802 eb1a jmp 0042481e = MINERVA.EXE:.text+0x2381e
015f:00424804 ff7508 push dword ptr [ebp+08]
015f:00424807 e863ffffff call 0042476f = MINERVA.EXE:.text+0x2376f
015f:0042480c ff7514 push dword ptr [ebp+14]
015f:0042480f ff7510 push dword ptr [ebp+10]
015f:00424812 ff750c push dword ptr [ebp+0c]
015f:00424815 ff7508 push dword ptr [ebp+08]
015f:00424818 50 push eax
015f:00424819 e8bdfcffff call 004244db = MINERVA.EXE:.text+0x234db
MINERVA.EXE:.text+0x2381e:
*015f:0042481e 5d pop ebp
015f:0042481f c21000 retd 0010
015f:00424822 b8f3474200 mov eax,004247f3
015f:00424827 c3 retd
015f:00424828 b8e0f14200 mov eax,0042f1e0
015f:0042482d e8f6cdfeff call 00411628 = MINERVA.EXE:.text+0x10628
015f:00424832 51 push ecx
015f:00424833 83ec2c sub esp,+2c
015f:00424836 53 push ebx
015f:00424837 56 push esi
015f:00424838 57 push edi

--------------------

006cfaf0 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfaf4 04ca0044
006cfaf8 00000110
006cfafc 00000e28
006cfb00 00000000
006cfb04 006cfb24 -> 38 fb 6c 00 e7 42 f9 bf 7a 8b b7 87 b7 87 00 00 8.l..B..z.......
006cfb08 bff7363b = KERNEL32.DLL:_FREQASM+0x263b

--------------------

--------------------

006cfb0c 00000e24
006cfb10 00000110
006cfb14 00000e28
006cfb18 00000000
006cfb1c 8b548777
006cfb20 00000167
006cfb24 006cfb38 -> b8 19 f7 bf 74 8b 00 00 1c fd 6c 00 6d 18 f7 bf ....t.....l.m...
006cfb28 bff942e7 = KERNEL32.DLL:.text+0x1b2e7

--------------------

--------------------

006cfb2c 87b78b7a
006cfb30 000087b7
006cfb34 00000000
006cfb38 bff719b8 = KERNEL32.DLL:_FREQASM+0x9b8

--------------------

--------------------

006cfb3c 00008b74
006cfb40 006cfd1c -> 60 fd 6c 00 a8 f1 42 00 01 00 00 00 6c fd 6c 00 `.l...B.....l.l.
006cfb44 bff7186d = KERNEL32.DLL:_FREQASM+0x86d

--------------------

--------------------

006cfb48 8b548777
006cfb4c 00000000
006cfb50 87b78b54
006cfb54 00000000
006cfb58 00000246
006cfb5c 00028bb2
006cfb60 00023caa
006cfb64 000016b7
006cfb68 014f2737
006cfb6c 87b70000
006cfb70 87b78b7a
006cfb74 3d768bb8
006cfb78 000416d7
006cfb7c 00000000
006cfb80 47f30000
006cfb84 00000042
006cfb88 0e280000
006cfb8c 01100000
006cfb90 0e240000
...
006cfb98 0e280110
006cfb9c 00000000
006cfba0 7a640000
006cfba4 00000001
006cfba8 00008002
006cfbac 000116d7
006cfbb0 87b787b7
006cfbb4 35804bb0
006cfbb8 00008c64
006cfbbc 47f30003
006cfbc0 9e9d0042
006cfbc4 000017af
006cfbc8 00000000
006cfbcc 01100e28
006cfbd0 4bb00e24
006cfbd4 35800002
006cfbd8 16b70002
006cfbdc 178726cb
006cfbe0 00000000
006cfbe4 0e280000
006cfbe8 35800110
006cfbec 87870002
006cfbf0 00008c9c
006cfbf4 00c00034 -> 00 00 00 00 00 00 00 00 01 10 c0 00 00 00 00 00 ................
006cfbf8 6970a000
006cfbfc ffff0001
006cfc00 00000000
006cfc04 00050100
006cfc08 00ca0044
006cfc0c 000000ff
006cfc10 b5023a00
006cfc14 00000101
006cfc18 00040000
006cfc1c 00000000
006cfc20 01aa5801
006cfc24 006c0077
006cfc28 04150017
006cfc2c 00000000
006cfc30 023a0000
006cfc34 4bb001b5
006cfc38 87870002
006cfc3c 0001000d
006cfc40 214f052f
006cfc44 35800110
006cfc48 00020002
006cfc4c 07030006
006cfc50 214f051c
006cfc54 00000000
006cfc58 04090000
006cfc5c 00000409
006cfc60 0e28696f
006cfc64 4e138c7e
006cfc68 00001787
006cfc6c 03920000
006cfc70 00008037
006cfc74 05310000
006cfc78 8787214f
006cfc7c 8ca04e18
006cfc80 16c70dc4
006cfc84 00000000
006cfc88 80370392 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 b3 ................
006cfc8c 00000000
006cfc90 8787214f
006cfc94 816396c0 -> 01 00 ff ff 00 00 00 00 00 00 04 00 40 00 ca 10 ............@...
006cfc98 214f06f0
006cfc9c 62e70000
006cfca0 bff714d9 = KERNEL32.DLL:_FREQASM+0x4d9
-> 0f b7 ec 8c d1 0f b7 c9 0f b2 65 00 66 8c d6 66 ..........e.f..f
006cfca4 006c015f
006cfca8 006cfcb0 -> 9f 13 00 00 00 a0 c0 00 00 00 00 00 00 00 00 00 ................
006cfcac 006c0167
006cfcb0 0000139f
006cfcb4 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfcb8 00000000
...
006cfcc0 006cfd28 -> 6c fd 6c 00 bb 3f 42 00 c8 5c 44 00 00 00 00 00 l.l..?B..\D.....
006cfcc4 00423d95 = MINERVA.EXE:.text+0x22d95

--------------------

015f:00423d79 7504 jnz 00423d7f = MINERVA.EXE:.text+0x22d7f
015f:00423d7b 33c0 xor eax,eax
015f:00423d7d eb03 jmp 00423d82 = MINERVA.EXE:.text+0x22d82
015f:00423d7f 8b401c mov eax,dword ptr [eax+1c]
015f:00423d82 53 push ebx
015f:00423d83 68653a4200 push 00423a65
015f:00423d88 50 push eax
015f:00423d89 ff7508 push dword ptr [ebp+08]
015f:00423d8c ff7510 push dword ptr [ebp+10]
015f:00423d8f ff157c2a4400 call dword ptr [00442a7c] -> USER32.DLL!CreateDialogIndirectParamA
MINERVA.EXE:.text+0x22d95:
*015f:00423d95 8d4de4 lea ecx,[ebp-1c]
015f:00423d98 8945e0 mov dword ptr [ebp-20],eax
015f:00423d9b 885dfc mov byte ptr [ebp-04],bl
015f:00423d9e e842450000 call 004282e5 = MINERVA.EXE:.text+0x272e5
015f:00423da3 eb1a jmp 00423dbf = MINERVA.EXE:.text+0x22dbf
015f:00423da5 8b4dd4 mov ecx,dword ptr [ebp-2c]
015f:00423da8 e8af4b0000 call 0042895c = MINERVA.EXE:.text+0x2795c
015f:00423dad 8b45dc mov eax,dword ptr [ebp-24]
015f:00423db0 83482cff or dword ptr [eax+2c],-01
015f:00423db4 b8ba3d4200 mov eax,00423dba
015f:00423db9 c3 retd

--------------------

006cfcc8 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfccc 00445cc8 = MINERVA.EXE:.rsrc+0xcc8
-> 01 00 ff ff 00 00 00 00 00 00 04 00 40 00 ca 10 ............@...
006cfcd0 00000000
006cfcd4 00423a65 = MINERVA.EXE:.text+0x22a65

--------------------

--------------------

006cfcd8 00000000
...
006cfce0 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfce4 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfce8 0043f29c = MINERVA.EXE:.data+0x829c
-> 78 00 4a 00 7c 24 43 00 00 00 00 00 00 00 00 00 x.J.|$C.........
006cfcec 006cfcd8 -> 00 00 00 00 00 00 00 00 00 a0 c0 00 00 00 40 00 ..............@.
006cfcf0 006cfd14 -> 00 00 00 00 dc fc 6c 00 60 fd 6c 00 a8 f1 42 00 ......l.`.l...B.
006cfcf4 00000000
006cfcf8 007e0550 -> e4 2c 43 00 d0 05 7e 00 11 00 00 00 15 00 00 00 .,C.............
006cfcfc 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfd00 00000000
006cfd04 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfd08 00000000
006cfd0c 007e05ac -> 4d 53 20 53 61 6e 73 20 53 65 72 69 66 00 00 00 MS Sans Serif...
006cfd10 00000008
006cfd14 00000000
006cfd18 006cfcdc -> 00 00 00 00 00 a0 c0 00 00 00 40 00 9c f2 43 00 ..........@...C.
006cfd1c 006cfd60 -> 80 fd 6c 00 b4 f1 42 00 00 00 00 00 38 fe 6c 00 ..l...B.....8.l.
006cfd20 0042f1a8 = MINERVA.EXE:.text+0x2e1a8
-> b8 b0 5d 43 00 e9 ce 14 fe ff cc cc b8 18 5e 43 ..]C..........^C
006cfd24 00000001
006cfd28 006cfd6c -> 38 fe 6c 00 84 29 40 00 a8 d4 43 00 b0 04 43 00 8.l..)@...C...C.
006cfd2c 00423fbb = MINERVA.EXE:.text+0x22fbb

--------------------

015f:00423f9f 8365fc00 and dword ptr [ebp-04],+00
015f:00423fa3 56 push esi
015f:00423fa4 e8af0c0000 call 00424c58 = MINERVA.EXE:.text+0x23c58
015f:00423fa9 57 push edi
015f:00423faa e898070000 call 00424747 = MINERVA.EXE:.text+0x23747
015f:00423faf 53 push ebx
015f:00423fb0 50 push eax
015f:00423fb1 ff75ec push dword ptr [ebp-14]
015f:00423fb4 8bce mov ecx,esi
015f:00423fb6 e862fcffff call 00423c1d = MINERVA.EXE:.text+0x22c1d
MINERVA.EXE:.text+0x22fbb:
*015f:00423fbb 33db xor ebx,ebx
015f:00423fbd 3bc3 cmp eax,ebx
015f:00423fbf 7457 jz 00424018 = MINERVA.EXE:.text+0x23018
015f:00423fc1 f6462410 test byte ptr [esi+24],10
015f:00423fc5 741c jz 00423fe3 = MINERVA.EXE:.text+0x22fe3
015f:00423fc7 6a04 push +04
015f:00423fc9 8bce mov ecx,esi
015f:00423fcb 5b pop ebx
015f:00423fcc e88e310000 call 0042715f = MINERVA.EXE:.text+0x2615f
015f:00423fd1 f6c401 test ah,01
015f:00423fd4 7403 jz 00423fd9 = MINERVA.EXE:.text+0x22fd9

--------------------

006cfd30 00445cc8 = MINERVA.EXE:.rsrc+0xcc8
-> 01 00 ff ff 00 00 00 00 00 00 04 00 40 00 ca 10 ............@...
006cfd34 00000000
006cfd38 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfd3c 0043d4a8 = MINERVA.EXE:.data+0x64a8
-> b0 04 43 00 01 00 00 00 00 00 00 00 00 00 00 00 ..C.............
...
006cfd44 ffffffff
006cfd48 00008040
006cfd4c 00000000
...
006cfd54 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfd58 00445cc8 = MINERVA.EXE:.rsrc+0xcc8
-> 01 00 ff ff 00 00 00 00 00 00 04 00 40 00 ca 10 ............@...
006cfd5c 006cfd3c -> a8 d4 43 00 a8 d4 43 00 ff ff ff ff 40 80 00 00 ..C...C.....@...
006cfd60 006cfd80 -> 28 fe 6c 00 8a e8 42 00 ff ff ff ff af 92 42 00 (.l...B.......B.
006cfd64 0042f1b4 = MINERVA.EXE:.text+0x2e1b4
-> b8 18 5e 43 00 e9 c2 14 fe ff cc cc b8 70 5e 43 ..^C.........p^C
006cfd68 00000000
006cfd6c 006cfe38 -> 78 ff 6c 00 37 b5 f8 bf 00 00 00 00 2c b0 a8 82 x.l.7.......,...
006cfd70 00402984 = MINERVA.EXE:.text+0x1984

--------------------

015f:0040295e 8bc8 mov ecx,eax
015f:00402960 e8eb0b0000 call 00403550 = MINERVA.EXE:.text+0x2550
015f:00402965 eb02 jmp 00402969 = MINERVA.EXE:.text+0x1969
015f:00402967 33c0 xor eax,eax
015f:00402969 8b10 mov edx,dword ptr [eax]
015f:0040296b 8bc8 mov ecx,eax
015f:0040296d c7442414ffffffff mov dword ptr [esp+14],ffffffff
015f:00402975 8986fc000000 mov dword ptr [esi+000000fc],eax
015f:0040297b 89461c mov dword ptr [esi+1c],eax
015f:0040297e ff92c0000000 call dword ptr [edx+000000c0]
MINERVA.EXE:.text+0x1984:
*015f:00402984 83f801 cmp eax,+01
015f:00402987 744a jz 004029d3 = MINERVA.EXE:.text+0x19d3
015f:00402989 83f802 cmp eax,+02
015f:0040298c 7545 jnz 004029d3 = MINERVA.EXE:.text+0x19d3
015f:0040298e 8b86fc000000 mov eax,dword ptr [esi+000000fc]
015f:00402994 8b880c050000 mov ecx,dword ptr [eax+0000050c]
015f:0040299a 85c9 test ecx,ecx
015f:0040299c 7435 jz 004029d3 = MINERVA.EXE:.text+0x19d3
015f:0040299e e88da50000 call 0040cf30 = MINERVA.EXE:.text+0xbf30
015f:004029a3 8b8efc000000 mov ecx,dword ptr [esi+000000fc]
015f:004029a9 8bb90c050000 mov edi,dword ptr [ecx+0000050c]

--------------------

006cfd74 0043d4a8 = MINERVA.EXE:.data+0x64a8
-> b0 04 43 00 01 00 00 00 00 00 00 00 00 00 00 00 ..C.............
006cfd78 004304b0 = MINERVA.EXE:.rdata+0x4b0
-> 24 d3 42 00 50 28 40 00 40 27 40 00 30 27 40 00 $.B.P(@.@'@.0'@.
006cfd7c 00c0a000 -> 58 0b 43 00 01 00 00 00 00 00 00 00 00 00 00 00 X.C.............
006cfd80 006cfe28 -> 68 ff 6c 00 38 73 41 00 70 35 43 00 00 00 00 00 h.l.8sA.p5C.....
006cfd84 0042e88a = MINERVA.EXE:.text+0x2d88a

--------------------

015f:0042e87a cc int 3
015f:0042e87b cc int 3
015f:0042e87c cc int 3
015f:0042e87d cc int 3
015f:0042e87e cc int 3
015f:0042e87f cc int 3
015f:0042e880 8b45f0 mov eax,dword ptr [ebp-10]
015f:0042e883 50 push eax
015f:0042e884 e8a74afdff call 00403330 = MINERVA.EXE:.text+0x2330
015f:0042e889 c3 retd
MINERVA.EXE:.text+0x2d88a:
*015f:0042e88a b898544300 mov eax,00435498
015f:0042e88f e9ec1dfeff jmp 00410680 = MINERVA.EXE:.text+0xf680
015f:0042e894 cc int 3
015f:0042e895 cc int 3
015f:0042e896 cc int 3
015f:0042e897 cc int 3
015f:0042e898 cc int 3
015f:0042e899 cc int 3
015f:0042e89a cc int 3
015f:0042e89b cc int 3
015f:0042e89c cc int 3

--------------------

006cfd88 ffffffff
006cfd8c 004292af = MINERVA.EXE:.text+0x282af

--------------------

015f:00429293 e848510000 call 0042e3e0 = MINERVA.EXE:.text+0x2d3e0
015f:00429298 85c0 test eax,eax
015f:0042929a 7431 jz 004292cd = MINERVA.EXE:.text+0x282cd
015f:0042929c 8b37 mov esi,dword ptr [edi]
015f:0042929e 8bcf mov ecx,edi
015f:004292a0 ff968c000000 call dword ptr [esi+0000008c]
015f:004292a6 85c0 test eax,eax
015f:004292a8 7423 jz 004292cd = MINERVA.EXE:.text+0x282cd
015f:004292aa 8bcf mov ecx,edi
015f:004292ac ff5658 call dword ptr [esi+58]
MINERVA.EXE:.text+0x282af:
*015f:004292af 85c0 test eax,eax
015f:004292b1 7513 jnz 004292c6 = MINERVA.EXE:.text+0x282c6
015f:004292b3 8b4f1c mov ecx,dword ptr [edi+1c]
015f:004292b6 85c9 test ecx,ecx
015f:004292b8 7405 jz 004292bf = MINERVA.EXE:.text+0x282bf
015f:004292ba 8b01 mov eax,dword ptr [ecx]
015f:004292bc ff5060 call dword ptr [eax+60]
015f:004292bf 8bcf mov ecx,edi
015f:004292c1 ff5670 call dword ptr [esi+70]
015f:004292c4 eb05 jmp 004292cb = MINERVA.EXE:.text+0x282cb
015f:004292c6 8bcf mov ecx,edi

--------------------

006cfd90 00000000
006cfd94 82a88ce3 -> 43 3a 5c 50 52 4f 47 52 41 7e 31 5c 41 55 52 45 C:\PROGRA.1\AURE
006cfd98 005c0000
006cfd9c 004220ec = MINERVA.EXE:.text+0x210ec

--------------------

015f:004220ce 5f pop edi
015f:004220cf 5e pop esi
015f:004220d0 5b pop ebx
015f:004220d1 83c404 add esp,+04
015f:004220d4 c22000 retd 0020
015f:004220d7 ff742410 push dword ptr [esp+10]
015f:004220db ff742410 push dword ptr [esp+10]
015f:004220df ff742410 push dword ptr [esp+10]
015f:004220e3 ff742410 push dword ptr [esp+10]
015f:004220e7 e889710000 call 00429275 = MINERVA.EXE:.text+0x28275
MINERVA.EXE:.text+0x210ec:
*015f:004220ec c21000 retd 0010
015f:004220ef e89db70000 call 0042d891 = MINERVA.EXE:.text+0x2c891
015f:004220f4 8b4c2404 mov ecx,dword ptr [esp+04]
015f:004220f8 85c9 test ecx,ecx
015f:004220fa 884814 mov byte ptr [eax+14],cl
015f:004220fd 7508 jnz 00422107 = MINERVA.EXE:.text+0x21107
015f:004220ff 6afd push -03
015f:00422101 e86a04ffff call 00412570 = MINERVA.EXE:.text+0x11570
015f:00422106 59 pop ecx
015f:00422107 6a01 push +01
015f:00422109 58 pop eax

--------------------

006cfda0 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfda4 00000000
006cfda8 82a88ce3 -> 43 3a 5c 50 52 4f 47 52 41 7e 31 5c 41 55 52 45 C:\PROGRA.1\AURE
006cfdac 00000001
006cfdb0 004114f2 = MINERVA.EXE:.text+0x104f2

--------------------

015f:004114d4 25ffff0000 and eax,0000ffff
015f:004114d9 eb05 jmp 004114e0 = MINERVA.EXE:.text+0x104e0
015f:004114db b80a000000 mov eax,0000000a
015f:004114e0 50 push eax
015f:004114e1 56 push esi
015f:004114e2 6a00 push +00
015f:004114e4 6a00 push +00
015f:004114e6 ff1558274400 call dword ptr [00442758] -> KERNEL32.DLL!GetModuleHandleA
015f:004114ec 50 push eax
015f:004114ed e8e50b0100 call 004220d7 = MINERVA.EXE:.text+0x210d7
MINERVA.EXE:.text+0x104f2:
*015f:004114f2 8945a0 mov dword ptr [ebp-60],eax
015f:004114f5 50 push eax
015f:004114f6 e805e6ffff call 0040fb00 = MINERVA.EXE:.text+0xeb00
015f:004114fb eb21 jmp 0041151e = MINERVA.EXE:.text+0x1051e
015f:004114fd 8b45ec mov eax,dword ptr [ebp-14]
015f:00411500 8b08 mov ecx,dword ptr [eax]
015f:00411502 8b09 mov ecx,dword ptr [ecx]
015f:00411504 894d98 mov dword ptr [ebp-68],ecx
015f:00411507 50 push eax
015f:00411508 51 push ecx
015f:00411509 e872560000 call 00416b80 = MINERVA.EXE:.text+0x15b80

--------------------

006cfdb4 00400000 = MINERVA.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006cfdb8 00000000
006cfdbc 82a88ce3 -> 43 3a 5c 50 52 4f 47 52 41 7e 31 5c 41 55 52 45 C:\PROGRA.1\AURE
006cfdc0 00000001
006cfdc4 00000000
006cfdc8 82a8b02c -> 06 00 07 00 50 63 3f e9 00 00 00 00 00 00 00 00 ....Pc?.........
006cfdcc 005c0000
006cfdd0 c0000005
006cfdd4 82a88ce3 -> 43 3a 5c 50 52 4f 47 52 41 7e 31 5c 41 55 52 45 C:\PROGRA.1\AURE
006cfdd8 bff79198 = KERNEL32.DLL:.text+0x198
-> ff ff ff ff f8 dd f7 bf 07 de f7 bf 00 00 00 00 ................
006cfddc 00000044
006cfde0 00000000
...
006cfe08 00000401
006cfe0c 00000001
006cfe10 00000000
...
006cfe18 000011a2
006cfe1c 00000000
006cfe20 006cfdc4 -> 00 00 00 00 2c b0 a8 82 00 00 5c 00 05 00 00 c0 ....,.....\.....
006cfe24 006cf52c -> 04 f6 6c 00 20 f6 6c 00 58 f5 6c 00 4d 68 f7 bf ..l. .l.X.l.Mh..
006cfe28 006cff68 -> ff ff ff ff 14 fe fb bf 38 91 f7 bf 00 00 00 00 ........8.......
006cfe2c 00417338 = MINERVA.EXE:.text+0x16338
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006cfe30 00433570 = MINERVA.EXE:.rdata+0x3570
-> ff ff ff ff fd 14 41 00 12 15 41 00 00 00 00 00 ......A...A.....
006cfe34 00000000
006cfe38 006cff78 -> f4 ff 6c 00 e9 b3 f8 bf 18 3f a6 82 2c b0 a8 82 ..l......?..,...
006cfe3c bff8b537 = KERNEL32!ApplicationStartup

--------------------

015f:bff8b513 7413 jz bff8b528 = KERNEL32.DLL:.text+0x12528
015f:bff8b515 6a00 push +00
015f:bff8b517 56 push esi
015f:bff8b518 e83c59ffff call bff80e59 = KERNEL32.DLL:.text+0x7e59
015f:bff8b51d 50 push eax
015f:bff8b51e 6800050000 push 00000500
015f:bff8b523 e8d65fffff call bff814fe = KERNEL32.DLL:.text+0x84fe
015f:bff8b528 c745fc00000000 mov dword ptr [ebp-04],00000000
015f:bff8b52f 8b45d4 mov eax,dword ptr [ebp-2c]
015f:bff8b532 e8e68dfeff call bff7431d = KERNEL32.DLL:_FREQASM+0x331d
KERNEL32!ApplicationStartup:
*015f:bff8b537 8945d8 mov dword ptr [ebp-28],eax
015f:bff8b53a eb1a jmp bff8b556 = KERNEL32.DLL:.text+0x12556
015f:bff8b53c ff75ec push dword ptr [ebp-14]
015f:bff8b53f e898210100 call bff9d6dc = KERNEL32.DLL!UnhandledExceptionFilter
015f:bff8b544 c3 retd
015f:bff8b545 8b65e8 mov esp,dword ptr [ebp-18]
015f:bff8b548 8b45e0 mov eax,dword ptr [ebp-20]
015f:bff8b54b 80480308 or byte ptr [eax+03],08
015f:bff8b54f 6aff push -01
015f:bff8b551 e84b1c0000 call bff8d1a1 = KERNEL32.DLL:.text+0x141a1
015f:bff8b556 c745fcffffffff mov dword ptr [ebp-04],ffffffff

--------------------

006cfe40 00000000
006cfe44 82a8b02c -> 06 00 07 00 50 63 3f e9 00 00 00 00 00 00 00 00 ....Pc?.........
006cfe48 005c0000
006cfe4c 656e694d
006cfe50 00617672
006cfe54 00455845 = MINERVA.EXE:.rsrc+0x10845
-> 07 0a 07 07 07 07 07 07 07 07 07 07 0a 07 07 07 ................
006cfe58 00000000
...
006cff38 006cff6c -> 14 fe fb bf 38 91 f7 bf 00 00 00 00 f4 ff 6c 00 ....8.........l.
006cff3c 82a28050 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cff40 82a8ac00 -> 10 00 00 a0 04 7a a6 82 04 7a a6 82 04 7a a6 82 .....z...z...z..
006cff44 e93f6ae0 -> 01 00 00 00 18 3f a6 82 2c b0 a8 82 70 9f 3d e9 .....?..,...p.=.
006cff48 006cff6c -> 14 fe fb bf 38 91 f7 bf 00 00 00 00 f4 ff 6c 00 ....8.........l.
006cff4c 004113a0 = MINERVA.EXE:.text+0x103a0
-> 55 8b ec 6a ff 68 70 35 43 00 68 38 73 41 00 64 U..j.hp5C.h8sA.d
006cff50 bff7b317 = KERNEL32.DLL:.text+0x2317

--------------------

015f:bff7b2fa 8b00 mov eax,dword ptr [eax]
015f:bff7b2fc 894304 mov dword ptr [ebx+04],eax
015f:bff7b2ff 6800020000 push 00000200
015f:bff7b304 51 push ecx
015f:bff7b305 ff75fc push dword ptr [ebp-04]
015f:bff7b308 56 push esi
015f:bff7b309 e8f3edffff call bff7a101 = KERNEL32.DLL:.text+0x1101
015f:bff7b30e ff750c push dword ptr [ebp+0c]
015f:bff7b311 56 push esi
015f:bff7b312 e8c9edffff call bff7a0e0 = KERNEL32.DLL:.text+0x10e0
KERNEL32.DLL:.text+0x2317:
*015f:bff7b317 b801000000 mov eax,00000001
015f:bff7b31c 5f pop edi
015f:bff7b31d 5e pop esi
015f:bff7b31e 5b pop ebx
015f:bff7b31f 8be5 mov esp,ebp
015f:bff7b321 5d pop ebp
015f:bff7b322 c20c00 retd 000c
015f:bff7b325 55 push ebp
015f:bff7b326 8bec mov ebp,esp
015f:bff7b328 83ec04 sub esp,+04
015f:bff7b32b a1dc9cfcbf mov eax,dword ptr [bffc9cdc]

--------------------

006cff54 00000000
006cff58 82a8b04c -> 00 02 00 00 c0 fa 06 00 cf 13 97 00 01 00 01 00 ................
006cff5c 13c60000
006cff60 006cfe40 -> 00 00 00 00 2c b0 a8 82 00 00 5c 00 4d 69 6e 65 ....,.....\.Mine
006cff64 005c0000
006cff68 ffffffff
006cff6c bffbfe14 = KERNEL32.DLL:.text+0x46e14
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006cff70 bff79138 = KERNEL32.DLL:.text+0x138
-> ff ff ff ff 3c b5 f8 bf 45 b5 f8 bf 00 00 00 00 ....<...E.......
006cff74 00000000
006cff78 006cfff4 -> ec 8f 25 84 ac 9d f8 bf 00 00 00 00 ..%.........
006cff7c bff8b3e9 = KERNEL32.DLL:.text+0x123e9

--------------------

015f:bff8b3ca ff7508 push dword ptr [ebp+08]
015f:bff8b3cd 56 push esi
015f:bff8b3ce e8c7560000 call bff90a9a = KERNEL32.DLL:.text+0x17a9a
015f:bff8b3d3 ff7508 push dword ptr [ebp+08]
015f:bff8b3d6 33ff xor edi,edi
015f:bff8b3d8 57 push edi
015f:bff8b3d9 ff7634 push dword ptr [esi+34]
015f:bff8b3dc e83097feff call bff74b11 = KERNEL32.DLL:_FREQASM+0x3b11
015f:bff8b3e1 897d08 mov dword ptr [ebp+08],edi
015f:bff8b3e4 e84a000000 call bff8b433 = KERNEL32.DLL:.text+0x12433
KERNEL32.DLL:.text+0x123e9:
*015f:bff8b3e9 a1dc9cfcbf mov eax,dword ptr [bffc9cdc]
015f:bff8b3ee 8b00 mov eax,dword ptr [eax]
015f:bff8b3f0 83c060 add eax,+60
015f:bff8b3f3 50 push eax
015f:bff8b3f4 e8f88dfeff call bff741f1 = KERNEL32.DLL!98
015f:bff8b3f9 e89626ffff call bff7da94 = KERNEL32.DLL:.text+0x4a94
015f:bff8b3fe 8945f0 mov dword ptr [ebp-10],eax
015f:bff8b401 837df800 cmp dword ptr [ebp-08],+00
015f:bff8b405 7408 jz bff8b40f = KERNEL32.DLL:.text+0x1240f
015f:bff8b407 ff75f8 push dword ptr [ebp-08]
015f:bff8b40a e843020000 call bff8b652 = KERNEL32.DLL:.text+0x12652

--------------------

006cff80 82a63f18 -> 07 00 01 00 90 8d 3f e9 d4 f4 6c 00 00 00 6d 00 ......?...l...m.
006cff84 82a8b02c -> 06 00 08 00 50 63 3f e9 00 00 00 00 00 00 00 00 ....Pc?.........
006cff88 00000008
006cff8c 00000000
...
006cffd0 0002ffff
006cffd4 0000f26c
006cffd8 006ce000 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006cffdc 006d0000
006cffe0 00000000
006cffe4 ffffffff
006cffe8 82a7c004 -> 50 45 00 00 4c 01 05 00 0b e0 d0 35 00 00 00 00 PE..L......5....
006cffec 00000000
006cfff0 870713c6
006cfff4 84258fec
006cfff8 bff89dac = KERNEL32.DLL:.text+0x10dac

--------------------

015f:bff89d89 e8a54b0000 call bff8e933 = KERNEL32.DLL:.text+0x15933
015f:bff89d8e 56 push esi
015f:bff89d8f e8fd2bffff call bff7c991 = KERNEL32.DLL:.text+0x3991
015f:bff89d94 33c0 xor eax,eax
015f:bff89d96 ebdf jmp bff89d77 = KERNEL32.DLL:.text+0x10d77
015f:bff89d98 f644240c10 test byte ptr [esp+0c],10
015f:bff89d9d 7505 jnz bff89da4 = KERNEL32.DLL:.text+0x10da4
015f:bff89d9f e8a1deffff call bff87c45 = KERNEL32.DLL:.text+0xec45
015f:bff89da4 ff742408 push dword ptr [esp+08]
015f:bff89da8 ff542408 call dword ptr [esp+08]
KERNEL32.DLL:.text+0x10dac:
*015f:bff89dac c20c00 retd 000c
015f:bff89daf 56 push esi
015f:bff89db0 a1dc9cfcbf mov eax,dword ptr [bffc9cdc]
015f:bff89db5 8b742408 mov esi,dword ptr [esp+08]
015f:bff89db9 57 push edi
015f:bff89dba 8b38 mov edi,dword ptr [eax]
015f:bff89dbc 8b4608 mov eax,dword ptr [esi+08]
015f:bff89dbf 85c0 test eax,eax
015f:bff89dc1 7413 jz bff89dd6 = KERNEL32.DLL:.text+0x10dd6
015f:bff89dc3 50 push eax
015f:bff89dc4 e82bb8feff call bff755f4 = KERNEL32.DLL:_FREQASM+0x45f4

--------------------

006cfffc 00000000

Attachments

Filename

Minerva.exe

File size

602 KiB

Downloads

40 downloads

File license

CC-BY-4.0

Reply 1 of 5, by derSammler

Posted on 2020-01-03, 16:09

derSammler Offline

Rank l33t

Rank: l33t
Posts: 3886
Joined: 2017-04-14, 11:30

You should actually limit the RAM for Windows 9x to 512 MB, as 9x can not correctly handle more than that.

Reply 2 of 5, by DoZator

Posted on 2020-01-03, 16:54

DoZator Offline

Rank Member

Rank: Member
Posts: 134
Joined: 2020-01-03, 14:58

derSammler wrote on 2020-01-03, 16:09:

You should actually limit the RAM for Windows 9x to 512 MB, as 9x can not correctly handle more than that.

Just checked on Windows XP SP3 with 512 MB - Aureal Minerva starts the same way without a failure, but with 1024 MB it’s gone. So, the problem is still not in Windows 98 (and its features of working with memory), but in something else?

Reply 3 of 5, by DoZator

Posted on 2020-01-03, 18:55

DoZator Offline

Rank Member

Rank: Member
Posts: 134
Joined: 2020-01-03, 14:58

Video report about the problem:

http://b.radikal.ru/b35/2001/bf/c5281d300b87.gif

As you can see, the problem is really in the program itself. For some reason, it stumbles when the amount of RAM is more than 999MB

Reply 4 of 5, by agent_x007

Posted on 2020-01-11, 23:23

agent_x007 Offline

Rank Oldbie

Rank: Oldbie
Posts: 1542
Joined: 2016-01-19, 11:06

Have you tried Lowe's RAM patch ?
Here's a link : LINK

Reply 5 of 5, by derSammler

Posted on 2020-01-12, 09:06

derSammler Offline

Rank l33t

Rank: l33t
Posts: 3886
Joined: 2017-04-14, 11:30

DoZator wrote on 2020-01-03, 16:54:

Just checked on Windows XP SP3 with 512 MB - Aureal Minerva starts the same way without a failure, but with 1024 MB it’s gone. So, the problem is still not in Windows 98 (and its features of working with memory), but in something else?

Err... I didn't say that. Win9x can not correctly handle more than 512 MB in any case, so to prevent stability and other problems, you should not install more than 512 MB. In doing so, you would solve your issue with that "Aureal Minerva" software as well. So why don't you follow that advice?

Also, if the software was made for Win9x, it (or the compiler used) may simply not be aware of the fact that there ever could be more than a certain amount of RAM. And that's why it fails on XP, too. If you need a fix for it and just using less memory is no option for you for whatever reason, you need to find and ask the author of the software if he can help.

Go to top of page Go to top of page

Back to Software

Main menu

Common searches