rendered paste bodySystem snapshot taken on 29. 09. 06 08:51:15.
*----> Summary/Overview <----*
The application overflowed its stack. This is typically
caused by unrestricted recursion or an exception inside
an exception handler.
Module Name: KERNEL32.DLL
Description: Win32 Kernel core component
Version: 4.10.2222
Product: Microsoft(R) Windows(R) Operating System
Manufacturer: Microsoft Corporation
Application Name: Miranda32.exe
Description: Miranda IM
Version: 0.5.1
Product: Miranda IM
Manufacturer:
User's Remarks:
*----> System Information <----*
Microsoft Windows 98 4.10.2222 A
Clean install using Full OEM CD
IE 5 6.0.2800.1106
Uptime: 0:00:52:17
Normal mode
On "ZOE" as "Yoma & Mrle"
Aston by: M & M
GenuineIntel x86 Family 6 Model 8 Stepping 3
512MB RAM
62% system resources free
Windows-managed swap file on drive C (6010MB free)
Temporary files on drive C (6010MB free)
*----> Task list <----*
Program
Type
Path
------------
1. Kernel32.dll
4.10.2222
Microsoft Corporation
2. MSGSRV32.EXE
4.10.2222
Microsoft Corporation
3. Mprexe.exe
4.10.1998
Microsoft Corporation
4. MMTASK.TSK
4.03.1998
Microsoft Corporation
5. Persfw.exe
2, 0, 15, 0
Tiny Software
6. Aston.exe
1.9.1
Gladiators Software
7. Systray.exe
4.10.2222
Microsoft Corporation
8. Ramdef.exe
2.71
VSTEf research & development
9. Hkss.exe
1.1.E1
Compaq Computer Corporation
10. Stp.exe
11. Greenbrowser.exe
1, 0, 0, 0
MoreQuick
12. Proxomitron.exe
4, 5, 0, 4
Groom-A-Zebu (tm)
13. Ddhelp.exe
4.09.00.0900
Microsoft Corporation
14. MD.EXE
15. Totalcmd.exe
6.53
C. Ghisler & Co.
16. Skype.exe
2.5.0.141
Skype Technologies S.A.
17. Snagit32.exe
4.3.6
TechSmith Corporation
18. Drwatson.exe
4.03
Microsoft Corporation
19. Miranda32.exe
0.5.1
*----> Startup Items <----*
Name
Loaded from
Command
-------------------
1. Rainlendar
Startup Group
D:\aCtive\Rainlendar\Rainlendar.exe
2. DeeEnEs
Startup Group
D:\aCtive\DeeEnEs\DeeEnEs.exe /AUTOEXIT
3. SystemTray
Registry (Machine Run)
SysTray.Exe
4. LoadPowerProfile
Registry (Machine Run)
Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
5. RAMDef
Registry (Machine Run)
C:\Program Files\RAM Def XT\ramdef.exe -tray
6. hkss
Registry (Machine Run)
C:\Program Files\Compaq\Hotkey Software\hkss.exe
7. LoadPowerProfile
Registry (Machine Service)
Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
8. AstonShellDoctor
Registry (Machine Service)
shDoctor.exe check
9. PersFw
Registry (Machine Service)
C:\Program Files\Tiny Personal Firewall\persfw.exe
*----> Kernel Drivers <----*
Driver
Loaded from
Type
Likely path
-------------------
1. VMM
Microsoft Corporation
Virtual Machine Manager
2. MTRR
Microsoft Corporation
?
3. VCACHE
Microsoft Corporation
Cache manager
4. DFS
4.10.2222
Microsoft Corporation
DFS Virtual Device (Version 4.0)
5. PERF
Microsoft Corporation
System Monitor data collection driver
6. VFIXD
1.00.02
Intel Corporation
Compatibility VxD
7. VPOWERD
4.10.2222
Microsoft Corporation
VPOWERD Virtual Device (Version 4.0)
8. VPICD
Microsoft Corporation
Hardware interrupt manager
9. VrtwD
1.1.075.3
Intel Corporation
Real-Time Clock VxD
10. VTD
Microsoft Corporation
Timer device driver
11. VWIN32
Microsoft Corporation
Win32 subsystem driver
12. VXDLDR
Microsoft Corporation
Dynamic device driver loader
13. tdimsys
v1.02
Winternals, SysIntenrals
TDI Monitor Win9x Driver
14. FWDRV
15. NTKERN
Microsoft Corporation
Windows Driver Model
16. CONFIGMG
Microsoft Corporation
Configuration manager
17. ASPIENUM
4.60 (1021)
Adaptec
Adaptec ASPI Real Mode Driver Enumerator
18. PCI
4.10.2222
Microsoft Corporation
PCI Virtual Device (Version 4.0)
19. PCCARD
4.10.2222
Microsoft Corporation
PCCARD Virtual Device (Version 4.0)
20. BIOS
4.10.1998
Microsoft Corporation
BIOS Virtual Device (Version 4.0)
21. VCDFSD
Microsoft Corporation
CD-ROM filesystem driver
22. IOS
Microsoft Corporation
I/O Supervisor
23. PAGEFILE
Microsoft Corporation
Swapfile driver
24. PAGESWAP
Microsoft Corporation
Swapfile manager
25. PARITY
Microsoft Corporation
Memory parity driver
26. REBOOT
Microsoft Corporation
Ctrl+Alt+Del manager
27. EBIOS
Microsoft Corporation
Extended BIOS driver
28. VDD
Microsoft Corporation
Display driver
29. ATI2VXAB
4.13.3007
ATI Technologies Inc.
ati2vxab Virtual Device.
30. VSD
Microsoft Corporation
Speaker driver
31. LTVCD
6.04
LT
LT Windows Modem
32. COMBUFF
Microsoft Corporation
Communications buffer driver
33. VCD
Microsoft Corporation
Communications port driver
34. IRENUM
4.10.2222
Microsoft Corporation
IRENUM Virtual Device (Version 4.0)
35. FASTIR
4.10.1998
Microsoft Corporation
FASTIR Virtual Device (Version 4.0)
36. VMOUSE
Microsoft Corporation
Mouse driver
37. MSMINI
4.10.1998
Microsoft Corporation
MSMINI Virtual Device (Version 4.0)
38. VKD
Microsoft Corporation
Keyboard driver
39. INT13
Microsoft Corporation
BIOS hard disk emulation driver
40. VMCPD
Microsoft Corporation
Math coprocessor driver
41. BIOSXLAT
Microsoft Corporation
BIOS emulation driver
42. VNETBIOS
4.10.1998
Microsoft Corporation
VNETBIOS Virtual Device (Version 4.0)
43. NDIS
4.10.2222
Microsoft Corporation
NDIS Virtual Device (Version 4.0)
44. VTDI
4.10.1998
Microsoft Corporation
Windows TDI Support Driver
45. WSOCK2
4.10.1998
Microsoft Corporation
Windows Sockets Driver 2 TCP/IP only.
46. VIP
4.10.2222
Microsoft Corporation
Windows IP Driver
47. MSTCP
4.10.2222
Microsoft Corporation
Windows TCP Driver
48. VDHCP
4.10.2161
Microsoft Corporation
DHCP VxD Driver
49. VNBT
4.10.2148
Microsoft Corporation
VNBT VxD Driver
50. AFVXD
4.10.2222
Microsoft Corporation
Windows Sockets VTDI Driver
51. DOSMGR
Microsoft Corporation
MS-DOS emulation manager
52. VMPOLL
Microsoft Corporation
System idle-time driver
53. JAVASUP
5.00.3167
Microsoft Corporation
Microsoft« Virtual Machine Helper Device for Java
54. VCOMM
Microsoft Corporation
Communications port Plug and Play driver
55. VCOND
Microsoft Corporation
Console subsystem driver
56. VTDAPI
Microsoft Corporation
Multimedia timer driver
57. AVGCORE
58. VFLATD
Microsoft Corporation
Linear aperture video driver
59. CBSS
4.10.2222
Microsoft Corporation
CBSS Virtual Device (Version 4.0)
60. ESS_M2
61. SBEMUL
62. mmdevldr
4.10.1998
Microsoft Corporation
mmdevldr Virtual Device (Version 4.0)
63. Display1
64. CDTSD
4.10.1998
Microsoft Corporation
CDTSD Virtual Device (Version 4.0)
65. CDVSD
4.10.2222
Microsoft Corporation
CDVSD Virtual Device (Version 4.0)
66. DiskTSD
4.10.2222
Microsoft Corporation
DiskTSD Virtual Device (Version 4.0)
67. scsi1hlp
4.10.1998
Microsoft Corporation
scsi1hlp Virtual Device (Version 4.0)
68. voltrack
4.10.1998
Microsoft Corporation
voltrack Virtual Device (Version 4.0)
69. BIOSEX
70. SMARTVSD
4.10.2222
Microsoft Corporation
SMARTVSD Virtual Device (Version 4.0)
71. APIX
4.60 (1021)
Adaptec
Adaptec APIX Virtual Device
72. AVGBASE
1.15.0.36
H+BEDV Datentechnik GmbH(
Guard fŘr Windows 9x
73. BIGMEM
4.10.1998
Microsoft Corporation
BIGMEM Virtual Device (Version 4.0)
74. SYNTP
5.0.45 10SEP99
Synaptics, Inc.
TouchPad Device Driver
75. HSFLOP
4.10.2222
Microsoft Corporation
HSFLOP Virtual Device (Version 4.0)
76. ESDI_506
4.10.2222
Microsoft Corporation
ESDI_506 Virtual Device (Version 4.0)
77. WDMAUD
78. CPQINT15
3.00.A3
Compaq Computer Corporation
Client Management Device Driver
79. WSHTCP
4.10.1998
Microsoft Corporation
Windows Sockets TCP helper Driver
80. CPUUSAGE
81. vjoyd
4.08.01.0881
Microsoft Corporation
Joystick Virtual Device
82. HKSSTRAP
83. DDRAW
4.07.00.0700
Microsoft Corporation
DirectDraw Virtual Device
84. DSOUND
4.09.00.0904
Microsoft Corporation
DirectSound VxD
85. VDMAD
Microsoft Corporation
Direct Memory Access controller driver
86. V86MMGR
Microsoft Corporation
MS-DOS memory manager
87. SPOOLER
Microsoft Corporation
Print spooler
88. UDF
Microsoft Corporation
?
89. VFAT
Microsoft Corporation
FAT filesystem driver
90. VDEF
Microsoft Corporation
Default filesystem driver
91. CDFS
4.10.1998
Microsoft Corporation
CDFS Virtual Device (Version 4.0)
92. IFSMGR
Microsoft Corporation
File system manager
93. VNETSUP
4.10.1998
Microsoft Corporation
VNETSUP Virtual Device (Version 4.0)
94. VREDIR
4.10.2222
Microsoft Corporation
VREDIR Virtual Device (Version 4.0)
95. VSERVER
4.10.2222
Microsoft Corporation
VSERVER Virtual Device (Version 4.0)
96. VFBACKUP
Microsoft Corporation
Floppy backup helper driver
97. SHELL
Microsoft Corporation
Shell device driver
98. DRWATSON
4.03
Microsoft Corporation
Dr. Watson for Windows 98
99. KMIXER
100. SYSAUDIO
101. redbook
102. swmidi
103. wdmaud
104. e100bnt5
5.41.32.0010
Intel Corporation
NDIS 5 driver
105. smcirda
4.10.1998
Microsoft Corporation
smcirda.SYS miniport
106. NdisIP
107. usbhub
108. WMILIB
109. WMIDRV
110. sbemul
111. maestro
112. portcls
113. uhcd
114. USBD
115. apmbatt
116. compbatt
117. BATTC
118. hidvkd
119. PCIMP
120. swenum
121. ks
122. update
123. wdmfs
*----> User-Mode Drivers <----*
Driver
Type
Path
------------
1. mmsystem.dll
4.03.1998
Microsoft Corporation
2. power.drv
4.10.1998
Microsoft Corporation
3. wdmaud.drv
4.10.1998
Microsoft Corporation
4. msacm.drv
4.03.1998
Microsoft Corporation
5. midimap.drv
4.03.1998
Microsoft Corporation
*----> MS-DOS Drivers <----*
Name
Type
------------
1. HIMEM
Device driver
2. DBLBUFF
Device driver
3. IFSHLP
Device driver
4. KEYB
TSR program
*----> 32-bit Modules <----*
Name
Date
Address
Path
---------------
1. SOFTPUB.DLL
5.131.1877.4
Microsoft Corporation
Microsoft Trust Policy Providers
2. RSABASE.DLL
5.00.1877.7
Microsoft Corporation
Microsoft Base Cryptographic Provider (Export Version)
3. RSAENH.DLL
5.00.1877.8
Microsoft Corporation
Microsoft Enhanced Cryptographic Provider (US/Canada Only, Not for Export)
4. KSUSER.DLL
4.90.0003010.900 built by: DIRECUser CSA Library
Microsoft Corporation
User CSA Library
5. DSOUND.DLL
4.09.00.0904
Microsoft Corporation
DirectSound
6. RNR20.DLL
4.10.2222
Microsoft Corporation
Windows Socket2 NameSpace DLL
7. SCHANNEL.DLL
5.00.1877.6
Microsoft Corporation
TLS / SSL Security Provider (US and Canada Use Only)
8. WINTRUST.DLL
5.131.1877.5
Microsoft Corporation
Microsoft Trust Verification APIs
9. SENSAPI.DLL
5.50.4807.2300
Microsoft Corporation
SENS Connectivity API DLL
10. SHFOLDER.DLL
6.00.2800.1106
Microsoft Corporation
Shell Folder Service
11. SSLEAY32.DLL
0.9.8b-dev
The OpenSSL Project, http://www.openssl.org/
OpenSSL Shared Library
12. LIBEAY32.DLL
0.9.8b-dev
The OpenSSL Project, http://www.openssl.org/
OpenSSL Shared Library
13. MSACM32.DLL
4.03.1998
Microsoft Corporation
Microsoft Audio Compression Manager
14. MSAFD.DLL
4.10.1998
Microsoft Corporation
Microsoft Windows Sockets 2.0 Service Provider
15. RICHED32.DLL
4.00.993.4
Microsoft Corporation
Windows 95 Rich Text Edit Control
16. UNICOWS.DLL
1.1.3790.0
Microsoft Corporation
Microsoft Layer for Unicode on Win9x Systems (MSLU)
17. IMM32.DLL
4.10.1998
Microsoft Corporation
Win32 IMM32 core component
18. AVICAP32.DLL
4.03.1998
Microsoft Corporation
AVI Capture DLL
19. MSVFW32.DLL
4.10.1998
Microsoft Corporation
Microsoft Video for Windows DLL
20. WOW32.DLL
4.10.1998
Microsoft Corporation
Win32 WOW32 core component
21. DCIMAN32.DLL
4.03.1998
Intel(R) Corp., Microsoft Corp.
DCI Manager 1.00
22. OLEDLG.DLL
1.0
Microsoft Corporation
Microsoft Windows(TM) OLE 2.0 User Interface Support
23. MSVCRT20.DLL
2.11.000
Microsoft Corporation
Microsoft« C Runtime Library
24. WINSPOOL.DRV
4.10.1998
Microsoft Corporation
Win32 WINSPOOL core component
25. MPR.DLL
4.10.1998
Microsoft Corporation
WIN32 Network Interface DLL
26. GDIPLUS.DLL
5.1.3102.1360 (xpsp2.040109-1800Microsoft GDI+
Microsoft Corporation
Microsoft GDI+
27. CLIST_MODERN.DLL
0, 4, 3, build 53
Miranda IM Contact List. Display contacts, event notifications, protocol status with advantage visual modifications. Supported MW modifications, enchanced metacontact cooperation.
28. MSVCR71.DLL
7.10.3052.4
Microsoft Corporation
Microsoft« C Runtime Library
29. MSIMG32.DLL
5.00.2218.1 (Lab06_N(PRAVINSDEV)GDIEXT Client DLL
Microsoft Corporation
GDIEXT Client DLL
30. NTDLL.DLL
4.10.1998
Microsoft Corporation
Win32 NTDLL core component
31. DBX_3XV.DLL
0, 5, 1, 6
Miranda Virtualizable db3x
32. MIRANDA32.EXE
0.5.1
Miranda IM
33. COMDLG32.DLL
4.72.3510.2300
Microsoft Corporation
Common Dialogs DLL
34. SHELL32.DLL
4.72.3612.1700
Microsoft Corporation
Windows Shell Common Dll
35. VERSION.DLL
4.10.1998
Microsoft Corporation
Win32 VERSION core component
36. WINMM.DLL
4.03.1998
Microsoft Corporation
System APIs for Multimedia
37. COMCTL32.DLL
5.81
Microsoft Corporation
Common Controls Library
38. WSOCK32.DLL
4.10.1998
Microsoft Corporation
BSD Socket API for Windows
39. MSWSOCK.DLL
4.10.2222
Microsoft Corporation
Microsoft WinSock Extension APIs
40. WS2_32.DLL
4.10.2222
Microsoft Corporation
Windows Socket 2.0 32-Bit DLL
41. WININET.DLL
6.00.2800.1106
Microsoft Corporation
Internet Extensions for Win32
42. SHLWAPI.DLL
6.00.2800.1106
Microsoft Corporation
Shell Light-weight Utility Library
43. OLEAUT32.DLL
2.40.4518
Microsoft Corporation
44. OLE32.DLL
4.71.2900
Microsoft Corporation
Microsoft OLE for Windows and Windows NT
45. CRYPT32.DLL
5.131.1877.5
Microsoft Corporation
Crypto API32
46. RPCRT4.DLL
4.71.2900
Microsoft Corporation
Remote Procedure Call DLL
47. MSOSS.DLL
5.131.1877.3
Microsoft Corporation
Microsoft Trust ASN APIs
48. WS2HELP.DLL
4.10.1998
Microsoft Corporation
Windows Socket 2.0 Helper for Windows 98
49. USER32.DLL
4.10.2222
Microsoft Corporation
Win32 USER32 core component
50. GDI32.DLL
4.10.1998
Microsoft Corporation
Win32 GDI core component
51. MSVCRT.DLL
6.00.8797.0
Microsoft Corporation
Microsoft (R) C Runtime Library
52. ADVAPI32.DLL
4.80.1675
Microsoft Corporation
Win32 ADVAPI32 core component
53. KERNEL32.DLL
4.10.2222
Microsoft Corporation
Win32 Kernel core component
*----> 16-bit Modules <----*
Name
Type
Path
------------
1. KERNEL
4.10.1998
Microsoft Corporation
2. SYSTEM
4.10.1998
Microsoft Corporation
3. KEYBOARD
4.10.2222
Microsoft Corporation
4. MOUSE
9.01.0.000
Microsoft Corporation
5. DISPLAY
4.13.3007
ATI Technologies Inc.
6. DIBENG
4.10.1998
Microsoft Corporation
7. SOUND
4.10.1998
Microsoft Corporation
8. COMM
4.10.1998
Microsoft Corporation
9. GDI
4.10.2222
Microsoft Corporation
10. USER
4.10.2222
Microsoft Corporation
11. DDEML
4.10.1998
Microsoft Corporation
12. MSPLUS
4.40.500
Microsoft Corporation
13. ATI2I9AB
4.13.0208
ATI Technologies
14. MSGSRV32
4.10.2222
Microsoft Corporation
15. MMSYSTEM
4.03.1998
Microsoft Corporation
16. POWER
4.10.1998
Microsoft Corporation
17. LZEXPAND
4.00.429
Microsoft Corporation
18. VER
4.10.1998
Microsoft Corporation
19. SHELL
4.10.1998
Microsoft Corporation
20. COMMCTRL
4.10.1998
Microsoft Corporation
21. WDMAUDDRV
4.10.1998
Microsoft Corporation
22. MSACMMAP
4.03.1998
Microsoft Corporation
23. MSACM
4.03.1998
Microsoft Corporation
24. MMTASK
4.03.1998
Microsoft Corporation
25. MIDIMAP
4.03.1998
Microsoft Corporation
26. SYSTHUNK
4.10.1998
Microsoft Corporation
27. OLECLI
1.20.000
Microsoft Corporation
28. OLESVR
1.10.000
Microsoft Corporation
29. COMMDLG
4.00.950
Microsoft Corporation
30. DDRAW16
4.07.00.0700
Microsoft Corporation
31. TOOLHELP
4.10.1998
Microsoft Corporation
32. WIN87EM
33. MD
34. IDAPI01
2.50
Borland International
35. IDR10009
2.50
Borland International
36. ILD01
1.36
Borland International
37. IDDBAS01
2.50
Borland International
38. DCIMAN
4.03.1998
Intel(R) Corp., Microsoft Corp.
39. MSVIDEO
4.03.1998
Microsoft Corporation
40. AVICAP
4.03.1998
Microsoft Corporation
*----> Details <----*
Command line: "D:\aCtive\Miranda\miranda32.exe"
Trap 0c 0006 - Stack fault
eax=c00309c4 ebx=00000000 ecx=00000000 edx=7803a6e8 esi=007d0f80 edi=0043e888
eip=bff9db61 esp=005afe18 ebp=005b00b4 -- -- -- nv up EI pl nz AC PE nc
cs=0167 ss=016f ds=016f es=016f fs=5797 gs=0000
KERNEL32.DLL:.text+0x24b61:
>0167:bff9db61 53 push ebx
sel type base lim/bot
---- ---- -------- --------
cs 0167 r-x- 00000000 ffffffff
ss 016f rw-e 00000000 0000a7a0
ds 016f rw-e 00000000 0000a7a0
es 016f rw-e 00000000 0000a7a0
fs 5797 rw-- 81d5a028 00000037
gs 0000 ----
stack base: 005b0000
TIB limits: 005b0000 - 006b0000
-- stack summary --
016f:005b00b4 0167:bff9db61 KERNEL32.DLL:.text+0x24b61
(005b00f8,00000000,006afe28,c0000005,
006afe38,0043db7b,00000000,005b00f8)
016f:005b00cc 0167:7800ed71 MSVCRT.DLL:.text+0xdd71
(00000000,005b00f8,7800ea07,005b0100,
00000000,005b0100,005b01d0,81d5a020)
016f:006afe38 0167:0043db7b MIRANDA32.EXE:.text+0x3cb7b
(00000000,81d6b050,005a0000,6172694d,
3361646e,58450032,00000045,00000000)
016f:006aff78 0167:bff8b560 KERNEL32!ApplicationStartup
-- stack trace --
016f:005b00b4 0167:bff9db61 KERNEL32.DLL:.text+0x24b61
(005b00f8,00000000,006afe28,c0000005,
006afe38,0043db7b,00000000,005b00f8)
0167:bff9db3b 8bec mov ebp,esp
0167:bff9db3d 6aff push -01
0167:bff9db3f 68a092f7bf push bff792a0
0167:bff9db44 68b405fcbf push bffc05b4
0167:bff9db49 50 push eax
0167:bff9db4a 33c9 xor ecx,ecx
0167:bff9db4c 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff9db53 81ec8c020000 sub esp,0000028c
0167:bff9db59 a1e09cfcbf mov eax,dword ptr [bffc9ce0]
0167:bff9db5e 894de0 mov dword ptr [ebp-20],ecx
KERNEL32.DLL:.text+0x24b61:
*0167:bff9db61 53 push ebx
0167:bff9db62 8b15e49cfcbf mov edx,dword ptr [bffc9ce4]
0167:bff9db68 56 push esi
0167:bff9db69 894de4 mov dword ptr [ebp-1c],ecx
0167:bff9db6c 57 push edi
0167:bff9db6d 894ddc mov dword ptr [ebp-24],ecx
0167:bff9db70 8965e8 mov dword ptr [ebp-18],esp
0167:bff9db73 8b38 mov edi,dword ptr [eax]
0167:bff9db75 8b32 mov esi,dword ptr [edx]
0167:bff9db77 8b4508 mov eax,dword ptr [ebp+08]
0167:bff9db7a 8b00 mov eax,dword ptr [eax]
--------------------
016f:005b00cc 0167:7800ed71 MSVCRT.DLL:.text+0xdd71
(00000000,005b00f8,7800ea07,005b0100,
00000000,005b0100,005b01d0,81d5a020)
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
016f:006afe38 0167:0043db7b MIRANDA32.EXE:.text+0x3cb7b
(00000000,81d6b050,005a0000,6172694d,
3361646e,58450032,00000045,00000000)
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
016f:006aff78 0167:bff8b560 KERNEL32!ApplicationStartup
-- stack dump --
005b0000 00000000
...
005b00a4 005b0118 -> 68 05 5b 00 55 68 f7 bf 28 fe 6a 00 b8 01 5b 00 h.[.Uh..(.j...[.
005b00a8 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b00ac bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b00b0 ffffffff
005b00b4 005b00cc -> 38 fe 6a 00 7b db 43 00 00 00 00 00 f8 00 5b 00 8.j.{.C.......[.
005b00b8 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b00bc 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b00c0 00000000
005b00c4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b00c8 c0000005
005b00cc 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b00d0 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b00d4 00000000
005b00d8 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b00dc 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b00e0 005b0100 -> 24 01 5b 00 49 68 f7 bf d0 01 5b 00 28 fe 6a 00 $.[.Ih....[.(.j.
005b00e4 00000000
005b00e8 005b0100 -> 24 01 5b 00 49 68 f7 bf d0 01 5b 00 28 fe 6a 00 $.[.Ih....[.(.j.
005b00ec 005b01d0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b00f0 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b00f4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b00f8 005b01d0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b00fc 005b01ec -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0100 005b0124 -> b8 01 5b 00 e9 7f f8 bf d0 01 5b 00 28 fe 6a 00 ..[.......[.(.j.
005b0104 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b0108 005b01d0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b010c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0110 005b01ec -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0114 005b01a8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0118 005b0568 -> dc 05 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..[.............
005b011c bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b0120 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0124 005b01b8 -> 78 05 5b 00 d7 ba ec ff ec 01 5b 00 d0 01 5b 00 x.[.......[...[.
005b0128 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b012c 005b01d0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0130 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0134 005b01ec -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0138 005b01a8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b013c 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b0140 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0144 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0148 00000000
...
005b01a8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b01ac 00000000
005b01b0 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b01b4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b01b8 005b0578 -> 90 05 5b 00 71 ed 00 78 bc 05 5b 00 00 00 00 00 ..[.q..x..[.....
005b01bc ffecbad7
005b01c0 005b01ec -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b01c4 005b01d0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b01c8 0000000e
005b01cc 00000004
005b01d0 c0000005
005b01d4 00000010
005b01d8 00000000
005b01dc 25049e7d
005b01e0 00000002
005b01e4 00000000
005b01e8 25049e7d
005b01ec 0001001f
005b01f0 00000000
...
005b0208 ffff1372
005b020c ffff0120
005b0210 ffffffff
005b0214 02acc889
005b0218 011d0167
005b021c 02aed780
005b0220 ffff016f
005b0224 00000000
...
005b0240 6e7f0000
005b0244 589db12b
005b0248 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b024c fffff8ec
005b0250 ffffffff
005b0254 00003ffe
005b0258 00000000
005b025c 3fff8000
005b0260 00000000
005b0264 ff000000
005b0268 00004006
005b026c 00000000
...
005b0274 0000000a
005b0278 00000000
005b027c 00005797
005b0280 0000016f
...
005b0288 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b028c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0290 00000000
005b0294 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b0298 00000000
005b029c 25049e7d
005b02a0 005b0578 -> 90 05 5b 00 71 ed 00 78 bc 05 5b 00 00 00 00 00 ..[.q..x..[.....
005b02a4 25049e7d
005b02a8 00000167
005b02ac 00210206
005b02b0 005b02c8 -> c8 db f9 bf bc 05 5b 00 88 e8 43 00 80 0f 7d 00 ......[...C...}.
005b02b4 0000016f
005b02b8 00000000
...
005b02c8 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b02cc 005b05bc -> 94 06 5b 00 b0 06 5b 00 e8 05 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b02d0 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b02d4 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b02d8 00000000
...
005b054c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0550 00000000
...
005b0560 005b02d0 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b0564 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b0568 005b05dc -> 2c 0a 5b 00 55 68 f7 bf 28 fe 6a 00 7c 06 5b 00 ,.[.Uh..(.j.|.[.
005b056c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b0570 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b0574 ffffffff
005b0578 005b0590 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 bc 05 5b 00 8.j.{.C.......[.
005b057c 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b0580 005b05bc -> 94 06 5b 00 b0 06 5b 00 e8 05 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b0584 00000000
005b0588 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b058c c0000005
005b0590 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b0594 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b0598 00000000
005b059c 005b05bc -> 94 06 5b 00 b0 06 5b 00 e8 05 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b05a0 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b05a4 005b05c4 -> e8 05 5b 00 49 68 f7 bf 94 06 5b 00 28 fe 6a 00 ..[.Ih....[.(.j.
005b05a8 00000000
005b05ac 005b05c4 -> e8 05 5b 00 49 68 f7 bf 94 06 5b 00 28 fe 6a 00 ..[.Ih....[.(.j.
005b05b0 005b0694 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b05b4 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b05b8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b05bc 005b0694 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b05c0 005b06b0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b05c4 005b05e8 -> 7c 06 5b 00 e9 7f f8 bf 94 06 5b 00 28 fe 6a 00 |.[.......[.(.j.
005b05c8 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b05cc 005b0694 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b05d0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b05d4 005b06b0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b05d8 005b066c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b05dc 005b0a2c -> a0 0a 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..[.............
005b05e0 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b05e4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b05e8 005b067c -> 3c 0a 5b 00 d7 ba ec ff b0 06 5b 00 94 06 5b 00 <.[.......[...[.
005b05ec bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b05f0 005b0694 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b05f4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b05f8 005b06b0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b05fc 005b066c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0600 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b0604 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0608 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b060c 00000000
...
005b066c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0670 00000000
005b0674 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0678 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b067c 005b0a3c -> 54 0a 5b 00 71 ed 00 78 80 0a 5b 00 00 00 00 00 T.[.q..x..[.....
005b0680 ffecbad7
005b0684 005b06b0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0688 005b0694 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b068c 0000000e
005b0690 00000004
005b0694 c0000005
005b0698 00000010
005b069c 00000000
005b06a0 25049e7d
005b06a4 00000002
005b06a8 00000000
005b06ac 25049e7d
005b06b0 0001001f
005b06b4 00000000
...
005b06cc ffff1372
005b06d0 ffff0120
005b06d4 ffffffff
005b06d8 02acc889
005b06dc 011d0167
005b06e0 02aed780
005b06e4 ffff016f
005b06e8 00000000
...
005b0704 6e7f0000
005b0708 589db12b
005b070c bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b0710 fffff8ec
005b0714 ffffffff
005b0718 00003ffe
005b071c 00000000
005b0720 3fff8000
005b0724 00000000
005b0728 ff000000
005b072c 00004006
005b0730 00000000
...
005b0738 0000000a
005b073c 00000000
005b0740 00005797
005b0744 0000016f
...
005b074c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0750 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0754 00000000
005b0758 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b075c 00000000
005b0760 25049e7d
005b0764 005b0a3c -> 54 0a 5b 00 71 ed 00 78 80 0a 5b 00 00 00 00 00 T.[.q..x..[.....
005b0768 25049e7d
005b076c 00000167
005b0770 00210206
005b0774 005b078c -> c8 db f9 bf 80 0a 5b 00 88 e8 43 00 80 0f 7d 00 ......[...C...}.
005b0778 0000016f
005b077c 00000000
...
005b078c bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b0790 005b0a80 -> 58 0b 5b 00 74 0b 5b 00 ac 0a 5b 00 49 68 f7 bf X.[.t.[...[.Ih..
005b0794 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b0798 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b079c 00000000
...
005b0a10 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0a14 00000000
...
005b0a24 005b0794 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b0a28 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b0a2c 005b0aa0 -> f0 0e 5b 00 55 68 f7 bf 28 fe 6a 00 40 0b 5b 00 ..[.Uh..(.j.@.[.
005b0a30 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b0a34 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b0a38 ffffffff
005b0a3c 005b0a54 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 80 0a 5b 00 8.j.{.C.......[.
005b0a40 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b0a44 005b0a80 -> 58 0b 5b 00 74 0b 5b 00 ac 0a 5b 00 49 68 f7 bf X.[.t.[...[.Ih..
005b0a48 00000000
005b0a4c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0a50 c0000005
005b0a54 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b0a58 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b0a5c 00000000
005b0a60 005b0a80 -> 58 0b 5b 00 74 0b 5b 00 ac 0a 5b 00 49 68 f7 bf X.[.t.[...[.Ih..
005b0a64 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b0a68 005b0a88 -> ac 0a 5b 00 49 68 f7 bf 58 0b 5b 00 28 fe 6a 00 ..[.Ih..X.[.(.j.
005b0a6c 00000000
005b0a70 005b0a88 -> ac 0a 5b 00 49 68 f7 bf 58 0b 5b 00 28 fe 6a 00 ..[.Ih..X.[.(.j.
005b0a74 005b0b58 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0a78 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b0a7c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0a80 005b0b58 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0a84 005b0b74 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0a88 005b0aac -> 40 0b 5b 00 e9 7f f8 bf 58 0b 5b 00 28 fe 6a 00 @.[.....X.[.(.j.
005b0a8c bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b0a90 005b0b58 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0a94 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0a98 005b0b74 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0a9c 005b0b30 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0aa0 005b0ef0 -> 64 0f 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff d.[.............
005b0aa4 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b0aa8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0aac 005b0b40 -> 00 0f 5b 00 d7 ba ec ff 74 0b 5b 00 58 0b 5b 00 ..[.....t.[.X.[.
005b0ab0 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b0ab4 005b0b58 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0ab8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0abc 005b0b74 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0ac0 005b0b30 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0ac4 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b0ac8 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0acc 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0ad0 00000000
...
005b0b30 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0b34 00000000
005b0b38 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0b3c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0b40 005b0f00 -> 18 0f 5b 00 71 ed 00 78 44 0f 5b 00 00 00 00 00 ..[.q..xD.[.....
005b0b44 ffecbad7
005b0b48 005b0b74 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0b4c 005b0b58 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0b50 0000000e
005b0b54 00000004
005b0b58 c0000005
005b0b5c 00000010
005b0b60 00000000
005b0b64 25049e7d
005b0b68 00000002
005b0b6c 00000000
005b0b70 25049e7d
005b0b74 0001001f
005b0b78 00000000
...
005b0b90 ffff1372
005b0b94 ffff0120
005b0b98 ffffffff
005b0b9c 02acc889
005b0ba0 011d0167
005b0ba4 02aed780
005b0ba8 ffff016f
005b0bac 00000000
...
005b0bc8 6e7f0000
005b0bcc 589db12b
005b0bd0 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b0bd4 fffff8ec
005b0bd8 ffffffff
005b0bdc 00003ffe
005b0be0 00000000
005b0be4 3fff8000
005b0be8 00000000
005b0bec ff000000
005b0bf0 00004006
005b0bf4 00000000
...
005b0bfc 0000000a
005b0c00 00000000
005b0c04 00005797
005b0c08 0000016f
...
005b0c10 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0c14 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0c18 00000000
005b0c1c c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b0c20 00000000
005b0c24 25049e7d
005b0c28 005b0f00 -> 18 0f 5b 00 71 ed 00 78 44 0f 5b 00 00 00 00 00 ..[.q..xD.[.....
005b0c2c 25049e7d
005b0c30 00000167
005b0c34 00210206
005b0c38 005b0c50 -> c8 db f9 bf 44 0f 5b 00 88 e8 43 00 80 0f 7d 00 ....D.[...C...}.
005b0c3c 0000016f
005b0c40 00000000
...
005b0c50 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b0c54 005b0f44 -> 1c 10 5b 00 38 10 5b 00 70 0f 5b 00 49 68 f7 bf ..[.8.[.p.[.Ih..
005b0c58 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b0c5c 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b0c60 00000000
...
005b0ed4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0ed8 00000000
...
005b0ee8 005b0c58 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b0eec 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b0ef0 005b0f64 -> b4 13 5b 00 55 68 f7 bf 28 fe 6a 00 04 10 5b 00 ..[.Uh..(.j...[.
005b0ef4 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b0ef8 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b0efc ffffffff
005b0f00 005b0f18 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 44 0f 5b 00 8.j.{.C.....D.[.
005b0f04 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b0f08 005b0f44 -> 1c 10 5b 00 38 10 5b 00 70 0f 5b 00 49 68 f7 bf ..[.8.[.p.[.Ih..
005b0f0c 00000000
005b0f10 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0f14 c0000005
005b0f18 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b0f1c 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b0f20 00000000
005b0f24 005b0f44 -> 1c 10 5b 00 38 10 5b 00 70 0f 5b 00 49 68 f7 bf ..[.8.[.p.[.Ih..
005b0f28 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b0f2c 005b0f4c -> 70 0f 5b 00 49 68 f7 bf 1c 10 5b 00 28 fe 6a 00 p.[.Ih....[.(.j.
005b0f30 00000000
005b0f34 005b0f4c -> 70 0f 5b 00 49 68 f7 bf 1c 10 5b 00 28 fe 6a 00 p.[.Ih....[.(.j.
005b0f38 005b101c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0f3c 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b0f40 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0f44 005b101c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0f48 005b1038 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0f4c 005b0f70 -> 04 10 5b 00 e9 7f f8 bf 1c 10 5b 00 28 fe 6a 00 ..[.......[.(.j.
005b0f50 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b0f54 005b101c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0f58 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0f5c 005b1038 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0f60 005b0ff4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0f64 005b13b4 -> 28 14 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff (.[.............
005b0f68 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b0f6c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0f70 005b1004 -> c4 13 5b 00 d7 ba ec ff 38 10 5b 00 1c 10 5b 00 ..[.....8.[...[.
005b0f74 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b0f78 005b101c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b0f7c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0f80 005b1038 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b0f84 005b0ff4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b0f88 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b0f8c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b0f90 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b0f94 00000000
...
005b0ff4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b0ff8 00000000
005b0ffc 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b1000 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1004 005b13c4 -> dc 13 5b 00 71 ed 00 78 08 14 5b 00 00 00 00 00 ..[.q..x..[.....
005b1008 ffecbad7
005b100c 005b1038 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1010 005b101c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b1014 0000000e
005b1018 00000004
005b101c c0000005
005b1020 00000010
005b1024 00000000
005b1028 25049e7d
005b102c 00000002
005b1030 00000000
005b1034 25049e7d
005b1038 0001001f
005b103c 00000000
...
005b1054 ffff1372
005b1058 ffff0120
005b105c ffffffff
005b1060 02acc889
005b1064 011d0167
005b1068 02aed780
005b106c ffff016f
005b1070 00000000
...
005b108c 6e7f0000
005b1090 589db12b
005b1094 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b1098 fffff8ec
005b109c ffffffff
005b10a0 00003ffe
005b10a4 00000000
005b10a8 3fff8000
005b10ac 00000000
005b10b0 ff000000
005b10b4 00004006
005b10b8 00000000
...
005b10c0 0000000a
005b10c4 00000000
005b10c8 00005797
005b10cc 0000016f
...
005b10d4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b10d8 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b10dc 00000000
005b10e0 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b10e4 00000000
005b10e8 25049e7d
005b10ec 005b13c4 -> dc 13 5b 00 71 ed 00 78 08 14 5b 00 00 00 00 00 ..[.q..x..[.....
005b10f0 25049e7d
005b10f4 00000167
005b10f8 00210206
005b10fc 005b1114 -> c8 db f9 bf 08 14 5b 00 88 e8 43 00 80 0f 7d 00 ......[...C...}.
005b1100 0000016f
005b1104 00000000
...
005b1114 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b1118 005b1408 -> e0 14 5b 00 fc 14 5b 00 34 14 5b 00 49 68 f7 bf ..[...[.4.[.Ih..
005b111c 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b1120 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b1124 00000000
...
005b1398 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b139c 00000000
...
005b13ac 005b111c -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b13b0 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b13b4 005b1428 -> 78 18 5b 00 55 68 f7 bf 28 fe 6a 00 c8 14 5b 00 x.[.Uh..(.j...[.
005b13b8 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b13bc bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b13c0 ffffffff
005b13c4 005b13dc -> 38 fe 6a 00 7b db 43 00 00 00 00 00 08 14 5b 00 8.j.{.C.......[.
005b13c8 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b13cc 005b1408 -> e0 14 5b 00 fc 14 5b 00 34 14 5b 00 49 68 f7 bf ..[...[.4.[.Ih..
005b13d0 00000000
005b13d4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b13d8 c0000005
005b13dc 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b13e0 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b13e4 00000000
005b13e8 005b1408 -> e0 14 5b 00 fc 14 5b 00 34 14 5b 00 49 68 f7 bf ..[...[.4.[.Ih..
005b13ec 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b13f0 005b1410 -> 34 14 5b 00 49 68 f7 bf e0 14 5b 00 28 fe 6a 00 4.[.Ih....[.(.j.
005b13f4 00000000
005b13f8 005b1410 -> 34 14 5b 00 49 68 f7 bf e0 14 5b 00 28 fe 6a 00 4.[.Ih....[.(.j.
005b13fc 005b14e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b1400 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b1404 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1408 005b14e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b140c 005b14fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1410 005b1434 -> c8 14 5b 00 e9 7f f8 bf e0 14 5b 00 28 fe 6a 00 ..[.......[.(.j.
005b1414 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b1418 005b14e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b141c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1420 005b14fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1424 005b14b8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b1428 005b1878 -> ec 18 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..[.............
005b142c bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b1430 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1434 005b14c8 -> 88 18 5b 00 d7 ba ec ff fc 14 5b 00 e0 14 5b 00 ..[.......[...[.
005b1438 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b143c 005b14e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b1440 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1444 005b14fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1448 005b14b8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b144c 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b1450 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b1454 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b1458 00000000
...
005b14b8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b14bc 00000000
005b14c0 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b14c4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b14c8 005b1888 -> a0 18 5b 00 71 ed 00 78 cc 18 5b 00 00 00 00 00 ..[.q..x..[.....
005b14cc ffecbad7
005b14d0 005b14fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b14d4 005b14e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b14d8 0000000e
005b14dc 00000004
005b14e0 c0000005
005b14e4 00000010
005b14e8 00000000
005b14ec 25049e7d
005b14f0 00000002
005b14f4 00000000
005b14f8 25049e7d
005b14fc 0001001f
005b1500 00000000
...
005b1518 ffff1372
005b151c ffff0120
005b1520 ffffffff
005b1524 02acc889
005b1528 011d0167
005b152c 02aed780
005b1530 ffff016f
005b1534 00000000
...
005b1550 6e7f0000
005b1554 589db12b
005b1558 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b155c fffff8ec
005b1560 ffffffff
005b1564 00003ffe
005b1568 00000000
005b156c 3fff8000
005b1570 00000000
005b1574 ff000000
005b1578 00004006
005b157c 00000000
...
005b1584 0000000a
005b1588 00000000
005b158c 00005797
005b1590 0000016f
...
005b1598 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b159c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b15a0 00000000
005b15a4 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b15a8 00000000
005b15ac 25049e7d
005b15b0 005b1888 -> a0 18 5b 00 71 ed 00 78 cc 18 5b 00 00 00 00 00 ..[.q..x..[.....
005b15b4 25049e7d
005b15b8 00000167
005b15bc 00210206
005b15c0 005b15d8 -> c8 db f9 bf cc 18 5b 00 88 e8 43 00 80 0f 7d 00 ......[...C...}.
005b15c4 0000016f
005b15c8 00000000
...
005b15d8 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b15dc 005b18cc -> a4 19 5b 00 c0 19 5b 00 f8 18 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b15e0 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b15e4 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b15e8 00000000
...
005b185c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b1860 00000000
...
005b1870 005b15e0 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b1874 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b1878 005b18ec -> 3c 1d 5b 00 55 68 f7 bf 28 fe 6a 00 8c 19 5b 00 <.[.Uh..(.j...[.
005b187c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b1880 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b1884 ffffffff
005b1888 005b18a0 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 cc 18 5b 00 8.j.{.C.......[.
005b188c 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b1890 005b18cc -> a4 19 5b 00 c0 19 5b 00 f8 18 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b1894 00000000
005b1898 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b189c c0000005
005b18a0 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b18a4 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b18a8 00000000
005b18ac 005b18cc -> a4 19 5b 00 c0 19 5b 00 f8 18 5b 00 49 68 f7 bf ..[...[...[.Ih..
005b18b0 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b18b4 005b18d4 -> f8 18 5b 00 49 68 f7 bf a4 19 5b 00 28 fe 6a 00 ..[.Ih....[.(.j.
005b18b8 00000000
005b18bc 005b18d4 -> f8 18 5b 00 49 68 f7 bf a4 19 5b 00 28 fe 6a 00 ..[.Ih....[.(.j.
005b18c0 005b19a4 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b18c4 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b18c8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b18cc 005b19a4 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b18d0 005b19c0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b18d4 005b18f8 -> 8c 19 5b 00 e9 7f f8 bf a4 19 5b 00 28 fe 6a 00 ..[.......[.(.j.
005b18d8 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b18dc 005b19a4 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b18e0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b18e4 005b19c0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b18e8 005b197c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b18ec 005b1d3c -> b0 1d 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..[.............
005b18f0 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b18f4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b18f8 005b198c -> 4c 1d 5b 00 d7 ba ec ff c0 19 5b 00 a4 19 5b 00 L.[.......[...[.
005b18fc bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b1900 005b19a4 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b1904 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1908 005b19c0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b190c 005b197c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b1910 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b1914 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b1918 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b191c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1920 00000000
...
005b197c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1980 00000000
005b1984 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b1988 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b198c 005b1d4c -> 64 1d 5b 00 71 ed 00 78 90 1d 5b 00 00 00 00 00 d.[.q..x..[.....
005b1990 ffecbad7
005b1994 005b19c0 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1998 005b19a4 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b199c 0000000e
005b19a0 00000004
005b19a4 c0000005
005b19a8 00000010
005b19ac 00000000
005b19b0 25049e7d
005b19b4 00000002
005b19b8 00000000
005b19bc 25049e7d
005b19c0 0001001f
005b19c4 00000000
...
005b19dc ffff1372
005b19e0 ffff0120
005b19e4 ffffffff
005b19e8 02acc889
005b19ec 011d0167
005b19f0 02aed780
005b19f4 ffff016f
005b19f8 00000000
...
005b1a14 6e7f0000
005b1a18 589db12b
005b1a1c bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b1a20 fffff8ec
005b1a24 ffffffff
005b1a28 00003ffe
005b1a2c 00000000
005b1a30 3fff8000
005b1a34 00000000
005b1a38 ff000000
005b1a3c 00004006
005b1a40 00000000
...
005b1a48 0000000a
005b1a4c 00000000
005b1a50 00005797
005b1a54 0000016f
...
005b1a5c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b1a60 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b1a64 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1a68 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b1a6c 00000000
005b1a70 25049e7d
005b1a74 005b1d4c -> 64 1d 5b 00 71 ed 00 78 90 1d 5b 00 00 00 00 00 d.[.q..x..[.....
005b1a78 25049e7d
005b1a7c 00000167
005b1a80 00210206
005b1a84 005b1a9c -> c8 db f9 bf 90 1d 5b 00 88 e8 43 00 80 0f 7d 00 ......[...C...}.
005b1a88 0000016f
005b1a8c 00000000
...
005b1a9c bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b1aa0 005b1d90 -> 68 1e 5b 00 84 1e 5b 00 bc 1d 5b 00 49 68 f7 bf h.[...[...[.Ih..
005b1aa4 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b1aa8 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b1aac 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1ab0 00000000
...
005b1d20 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b1d24 00000000
...
005b1d34 005b1aa4 -> 88 e8 43 00 80 0f 7d 00 28 fe 6a 00 00 00 00 00 ..C...}.(.j.....
005b1d38 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b1d3c 005b1db0 -> ec 21 5b 00 55 68 f7 bf 28 fe 6a 00 50 1e 5b 00 .![.Uh..(.j.P.[.
005b1d40 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b1d44 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b1d48 ffffffff
005b1d4c 005b1d64 -> 38 fe 6a 00 7b db 43 00 fd 00 00 c0 90 1d 5b 00 8.j.{.C.......[.
005b1d50 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b1d54 005b1d90 -> 68 1e 5b 00 84 1e 5b 00 bc 1d 5b 00 49 68 f7 bf h.[...[...[.Ih..
005b1d58 00000000
005b1d5c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1d60 c00000fd
005b1d64 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b1d68 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b1d6c c00000fd
005b1d70 005b1d90 -> 68 1e 5b 00 84 1e 5b 00 bc 1d 5b 00 49 68 f7 bf h.[...[...[.Ih..
005b1d74 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b1d78 005b1d98 -> bc 1d 5b 00 49 68 f7 bf 68 1e 5b 00 28 fe 6a 00 ..[.Ih..h.[.(.j.
005b1d7c 00000000
005b1d80 005b1d98 -> bc 1d 5b 00 49 68 f7 bf 68 1e 5b 00 28 fe 6a 00 ..[.Ih..h.[.(.j.
005b1d84 005b1e68 -> fd 00 00 c0 10 00 00 00 00 00 00 00 61 db f9 bf ............a...
005b1d88 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b1d8c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1d90 005b1e68 -> fd 00 00 c0 10 00 00 00 00 00 00 00 61 db f9 bf ............a...
005b1d94 005b1e84 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1d98 005b1dbc -> 50 1e 5b 00 e9 7f f8 bf 68 1e 5b 00 28 fe 6a 00 P.[.....h.[.(.j.
005b1d9c bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b1da0 005b1e68 -> fd 00 00 c0 10 00 00 00 00 00 00 00 61 db f9 bf ............a...
005b1da4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1da8 005b1e84 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1dac 005b1e40 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b1db0 005b21ec -> 60 22 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff `"[.............
005b1db4 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b1db8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1dbc 005b1e50 -> fc 21 5b 00 d7 ba ec ff 84 1e 5b 00 68 1e 5b 00 .![.......[.h.[.
005b1dc0 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b1dc4 005b1e68 -> fd 00 00 c0 10 00 00 00 00 00 00 00 61 db f9 bf ............a...
005b1dc8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1dcc 005b1e84 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1dd0 005b1e40 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b1dd4 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b1dd8 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b1ddc 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b1de0 00000000
...
005b1e40 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1e44 00000000
005b1e48 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b1e4c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b1e50 005b21fc -> 14 22 5b 00 71 ed 00 78 40 22 5b 00 00 00 00 00 ."[.q..x@"[.....
005b1e54 ffecbad7
005b1e58 005b1e84 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1e5c 005b1e68 -> fd 00 00 c0 10 00 00 00 00 00 00 00 61 db f9 bf ............a...
005b1e60 0000000e
005b1e64 00000007
005b1e68 c00000fd
005b1e6c 00000010
005b1e70 00000000
005b1e74 bff9db61 = KERNEL32.DLL:.text+0x24b61
-> 53 8b 15 e4 9c fc bf 56 89 4d e4 57 89 4d dc 89 S......V.M.W.M..
005b1e78 00000002
005b1e7c 00000001
005b1e80 005b1f5c -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1e84 0001001f
005b1e88 00000000
...
005b1ea0 ffff1372
005b1ea4 ffff0120
005b1ea8 ffffffff
005b1eac 02acc889
005b1eb0 011d0167
005b1eb4 02aed780
005b1eb8 ffff016f
005b1ebc 00000000
...
005b1ed8 6e7f0000
005b1edc 589db12b
005b1ee0 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b1ee4 fffff8ec
005b1ee8 ffffffff
005b1eec 00003ffe
005b1ef0 00000000
005b1ef4 3fff8000
005b1ef8 00000000
005b1efc ff000000
005b1f00 00004006
005b1f04 00000000
...
005b1f0c 0000000a
005b1f10 00000000
005b1f14 00005797
005b1f18 0000016f
...
005b1f20 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b1f24 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b1f28 00000000
005b1f2c 7803a6e8 = MSVCRT.DLL:.data+0x26e8
-> 05 00 00 c0 0b 00 00 00 00 00 00 00 1d 00 00 c0 ................
005b1f30 00000000
005b1f34 c00309c4 -> 20 a0 d5 81 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 ...P...@H......
005b1f38 005b21fc -> 14 22 5b 00 71 ed 00 78 40 22 5b 00 00 00 00 00 ."[.q..x@"[.....
005b1f3c bff9db61 = KERNEL32.DLL:.text+0x24b61
-> 53 8b 15 e4 9c fc bf 56 89 4d e4 57 89 4d dc 89 S......V.M.W.M..
005b1f40 00000167
005b1f44 00210206
005b1f48 005b1f60 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b1f4c 0000016f
005b1f50 00000000
...
005b21e8 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b21ec 005b2260 -> b0 26 5b 00 55 68 f7 bf 28 fe 6a 00 00 23 5b 00 .&[.Uh..(.j..#[.
005b21f0 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b21f4 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b21f8 ffffffff
005b21fc 005b2214 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 40 22 5b 00 8.j.{.C.....@"[.
005b2200 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b2204 005b2240 -> 18 23 5b 00 34 23 5b 00 6c 22 5b 00 49 68 f7 bf .#[.4#[.l"[.Ih..
005b2208 00000000
005b220c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2210 c0000005
005b2214 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b2218 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b221c 00000000
005b2220 005b2240 -> 18 23 5b 00 34 23 5b 00 6c 22 5b 00 49 68 f7 bf .#[.4#[.l"[.Ih..
005b2224 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b2228 005b2248 -> 6c 22 5b 00 49 68 f7 bf 18 23 5b 00 28 fe 6a 00 l"[.Ih...#[.(.j.
005b222c 00000000
005b2230 005b2248 -> 6c 22 5b 00 49 68 f7 bf 18 23 5b 00 28 fe 6a 00 l"[.Ih...#[.(.j.
005b2234 005b2318 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2238 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b223c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2240 005b2318 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2244 005b2334 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2248 005b226c -> 00 23 5b 00 e9 7f f8 bf 18 23 5b 00 28 fe 6a 00 .#[......#[.(.j.
005b224c bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b2250 005b2318 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2254 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2258 005b2334 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b225c 005b22f0 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2260 005b26b0 -> 24 27 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff $'[.............
005b2264 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b2268 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b226c 005b2300 -> c0 26 5b 00 d7 ba ec ff 34 23 5b 00 18 23 5b 00 .&[.....4#[..#[.
005b2270 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b2274 005b2318 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2278 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b227c 005b2334 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2280 005b22f0 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2284 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b2288 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b228c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b2290 00000000
...
005b22f0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b22f4 00000000
005b22f8 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b22fc 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2300 005b26c0 -> d8 26 5b 00 71 ed 00 78 04 27 5b 00 00 00 00 00 .&[.q..x.'[.....
005b2304 ffecbad7
005b2308 005b2334 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b230c 005b2318 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2310 0000000e
005b2314 00000004
005b2318 c0000005
005b231c 00000010
005b2320 00000000
005b2324 25049e7d
005b2328 00000002
005b232c 00000000
005b2330 25049e7d
005b2334 0001001f
005b2338 00000000
...
005b2350 ffff1372
005b2354 ffff0120
005b2358 ffffffff
005b235c 02acc889
005b2360 011d0167
005b2364 02aed780
005b2368 ffff016f
005b236c 00000000
...
005b2388 6e7f0000
005b238c 589db12b
005b2390 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b2394 fffff8ec
005b2398 ffffffff
005b239c 00003ffe
005b23a0 00000000
005b23a4 3fff8000
005b23a8 00000000
005b23ac ff000000
005b23b0 00004006
005b23b4 00000000
...
005b23bc 0000000a
005b23c0 00000000
005b23c4 00005797
005b23c8 0000016f
...
005b23d0 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b23d4 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b23d8 00000000
005b23dc c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b23e0 00000000
005b23e4 25049e7d
005b23e8 005b26c0 -> d8 26 5b 00 71 ed 00 78 04 27 5b 00 00 00 00 00 .&[.q..x.'[.....
005b23ec 25049e7d
005b23f0 00000167
005b23f4 00210206
005b23f8 005b2410 -> c8 db f9 bf 04 27 5b 00 88 e8 43 00 80 0f 7d 00 .....'[...C...}.
005b23fc 0000016f
005b2400 00000000
...
005b2410 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b2414 005b2704 -> dc 27 5b 00 f8 27 5b 00 30 27 5b 00 49 68 f7 bf .'[..'[.0'[.Ih..
005b2418 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b241c 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b2420 00000000
...
005b2694 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2698 00000000
...
005b26a8 005b2418 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b26ac 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b26b0 005b2724 -> 74 2b 5b 00 55 68 f7 bf 28 fe 6a 00 c4 27 5b 00 t+[.Uh..(.j..'[.
005b26b4 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b26b8 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b26bc ffffffff
005b26c0 005b26d8 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 04 27 5b 00 8.j.{.C......'[.
005b26c4 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b26c8 005b2704 -> dc 27 5b 00 f8 27 5b 00 30 27 5b 00 49 68 f7 bf .'[..'[.0'[.Ih..
005b26cc 00000000
005b26d0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b26d4 c0000005
005b26d8 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b26dc 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b26e0 00000000
005b26e4 005b2704 -> dc 27 5b 00 f8 27 5b 00 30 27 5b 00 49 68 f7 bf .'[..'[.0'[.Ih..
005b26e8 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b26ec 005b270c -> 30 27 5b 00 49 68 f7 bf dc 27 5b 00 28 fe 6a 00 0'[.Ih...'[.(.j.
005b26f0 00000000
005b26f4 005b270c -> 30 27 5b 00 49 68 f7 bf dc 27 5b 00 28 fe 6a 00 0'[.Ih...'[.(.j.
005b26f8 005b27dc -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b26fc 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b2700 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2704 005b27dc -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2708 005b27f8 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b270c 005b2730 -> c4 27 5b 00 e9 7f f8 bf dc 27 5b 00 28 fe 6a 00 .'[......'[.(.j.
005b2710 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b2714 005b27dc -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2718 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b271c 005b27f8 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2720 005b27b4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2724 005b2b74 -> e8 2b 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff .+[.............
005b2728 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b272c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2730 005b27c4 -> 84 2b 5b 00 d7 ba ec ff f8 27 5b 00 dc 27 5b 00 .+[......'[..'[.
005b2734 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b2738 005b27dc -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b273c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2740 005b27f8 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2744 005b27b4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2748 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b274c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2750 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b2754 00000000
...
005b27b4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b27b8 00000000
005b27bc 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b27c0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b27c4 005b2b84 -> 9c 2b 5b 00 71 ed 00 78 c8 2b 5b 00 00 00 00 00 .+[.q..x.+[.....
005b27c8 ffecbad7
005b27cc 005b27f8 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b27d0 005b27dc -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b27d4 0000000e
005b27d8 00000004
005b27dc c0000005
005b27e0 00000010
005b27e4 00000000
005b27e8 25049e7d
005b27ec 00000002
005b27f0 00000000
005b27f4 25049e7d
005b27f8 0001001f
005b27fc 00000000
...
005b2814 ffff1372
005b2818 ffff0120
005b281c ffffffff
005b2820 02acc889
005b2824 011d0167
005b2828 02aed780
005b282c ffff016f
005b2830 00000000
...
005b284c 6e7f0000
005b2850 589db12b
005b2854 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b2858 fffff8ec
005b285c ffffffff
005b2860 00003ffe
005b2864 00000000
005b2868 3fff8000
005b286c 00000000
005b2870 ff000000
005b2874 00004006
005b2878 00000000
...
005b2880 0000000a
005b2884 00000000
005b2888 00005797
005b288c 0000016f
...
005b2894 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2898 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b289c 00000000
005b28a0 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b28a4 00000000
005b28a8 25049e7d
005b28ac 005b2b84 -> 9c 2b 5b 00 71 ed 00 78 c8 2b 5b 00 00 00 00 00 .+[.q..x.+[.....
005b28b0 25049e7d
005b28b4 00000167
005b28b8 00210206
005b28bc 005b28d4 -> c8 db f9 bf c8 2b 5b 00 88 e8 43 00 80 0f 7d 00 .....+[...C...}.
005b28c0 0000016f
005b28c4 00000000
...
005b28d4 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b28d8 005b2bc8 -> a0 2c 5b 00 bc 2c 5b 00 f4 2b 5b 00 49 68 f7 bf .,[..,[..+[.Ih..
005b28dc 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b28e0 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b28e4 00000000
...
005b2b58 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2b5c 00000000
...
005b2b6c 005b28dc -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b2b70 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b2b74 005b2be8 -> 38 30 5b 00 55 68 f7 bf 28 fe 6a 00 88 2c 5b 00 80[.Uh..(.j..,[.
005b2b78 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b2b7c bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b2b80 ffffffff
005b2b84 005b2b9c -> 38 fe 6a 00 7b db 43 00 00 00 00 00 c8 2b 5b 00 8.j.{.C......+[.
005b2b88 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b2b8c 005b2bc8 -> a0 2c 5b 00 bc 2c 5b 00 f4 2b 5b 00 49 68 f7 bf .,[..,[..+[.Ih..
005b2b90 00000000
005b2b94 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2b98 c0000005
005b2b9c 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b2ba0 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b2ba4 00000000
005b2ba8 005b2bc8 -> a0 2c 5b 00 bc 2c 5b 00 f4 2b 5b 00 49 68 f7 bf .,[..,[..+[.Ih..
005b2bac 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b2bb0 005b2bd0 -> f4 2b 5b 00 49 68 f7 bf a0 2c 5b 00 28 fe 6a 00 .+[.Ih...,[.(.j.
005b2bb4 00000000
005b2bb8 005b2bd0 -> f4 2b 5b 00 49 68 f7 bf a0 2c 5b 00 28 fe 6a 00 .+[.Ih...,[.(.j.
005b2bbc 005b2ca0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2bc0 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b2bc4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2bc8 005b2ca0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2bcc 005b2cbc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2bd0 005b2bf4 -> 88 2c 5b 00 e9 7f f8 bf a0 2c 5b 00 28 fe 6a 00 .,[......,[.(.j.
005b2bd4 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b2bd8 005b2ca0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2bdc 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2be0 005b2cbc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2be4 005b2c78 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2be8 005b3038 -> ac 30 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff .0[.............
005b2bec bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b2bf0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2bf4 005b2c88 -> 48 30 5b 00 d7 ba ec ff bc 2c 5b 00 a0 2c 5b 00 H0[......,[..,[.
005b2bf8 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b2bfc 005b2ca0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2c00 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2c04 005b2cbc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2c08 005b2c78 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b2c0c 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b2c10 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2c14 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b2c18 00000000
...
005b2c78 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2c7c 00000000
005b2c80 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b2c84 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b2c88 005b3048 -> 60 30 5b 00 71 ed 00 78 8c 30 5b 00 00 00 00 00 `0[.q..x.0[.....
005b2c8c ffecbad7
005b2c90 005b2cbc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b2c94 005b2ca0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b2c98 0000000e
005b2c9c 00000004
005b2ca0 c0000005
005b2ca4 00000010
005b2ca8 00000000
005b2cac 25049e7d
005b2cb0 00000002
005b2cb4 00000000
005b2cb8 25049e7d
005b2cbc 0001001f
005b2cc0 00000000
...
005b2cd8 ffff1372
005b2cdc ffff0120
005b2ce0 ffffffff
005b2ce4 02acc889
005b2ce8 011d0167
005b2cec 02aed780
005b2cf0 ffff016f
005b2cf4 00000000
...
005b2d10 6e7f0000
005b2d14 589db12b
005b2d18 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b2d1c fffff8ec
005b2d20 ffffffff
005b2d24 00003ffe
005b2d28 00000000
005b2d2c 3fff8000
005b2d30 00000000
005b2d34 ff000000
005b2d38 00004006
005b2d3c 00000000
...
005b2d44 0000000a
005b2d48 00000000
005b2d4c 00005797
005b2d50 0000016f
...
005b2d58 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b2d5c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b2d60 00000000
005b2d64 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b2d68 00000000
005b2d6c 25049e7d
005b2d70 005b3048 -> 60 30 5b 00 71 ed 00 78 8c 30 5b 00 00 00 00 00 `0[.q..x.0[.....
005b2d74 25049e7d
005b2d78 00000167
005b2d7c 00210206
005b2d80 005b2d98 -> c8 db f9 bf 8c 30 5b 00 88 e8 43 00 80 0f 7d 00 .....0[...C...}.
005b2d84 0000016f
005b2d88 00000000
...
005b2d98 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b2d9c 005b308c -> 64 31 5b 00 80 31 5b 00 b8 30 5b 00 49 68 f7 bf d1[..1[..0[.Ih..
005b2da0 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b2da4 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b2da8 00000000
...
005b301c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b3020 00000000
...
005b3030 005b2da0 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b3034 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b3038 005b30ac -> fc 34 5b 00 55 68 f7 bf 28 fe 6a 00 4c 31 5b 00 .4[.Uh..(.j.L1[.
005b303c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b3040 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b3044 ffffffff
005b3048 005b3060 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 8c 30 5b 00 8.j.{.C......0[.
005b304c 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b3050 005b308c -> 64 31 5b 00 80 31 5b 00 b8 30 5b 00 49 68 f7 bf d1[..1[..0[.Ih..
005b3054 00000000
005b3058 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b305c c0000005
005b3060 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b3064 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b3068 00000000
005b306c 005b308c -> 64 31 5b 00 80 31 5b 00 b8 30 5b 00 49 68 f7 bf d1[..1[..0[.Ih..
005b3070 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b3074 005b3094 -> b8 30 5b 00 49 68 f7 bf 64 31 5b 00 28 fe 6a 00 .0[.Ih..d1[.(.j.
005b3078 00000000
005b307c 005b3094 -> b8 30 5b 00 49 68 f7 bf 64 31 5b 00 28 fe 6a 00 .0[.Ih..d1[.(.j.
005b3080 005b3164 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3084 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b3088 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b308c 005b3164 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3090 005b3180 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b3094 005b30b8 -> 4c 31 5b 00 e9 7f f8 bf 64 31 5b 00 28 fe 6a 00 L1[.....d1[.(.j.
005b3098 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b309c 005b3164 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b30a0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b30a4 005b3180 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b30a8 005b313c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b30ac 005b34fc -> 70 35 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff p5[.............
005b30b0 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b30b4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b30b8 005b314c -> 0c 35 5b 00 d7 ba ec ff 80 31 5b 00 64 31 5b 00 .5[......1[.d1[.
005b30bc bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b30c0 005b3164 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b30c4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b30c8 005b3180 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b30cc 005b313c -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b30d0 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b30d4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b30d8 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b30dc 00000000
...
005b313c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3140 00000000
005b3144 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b3148 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b314c 005b350c -> 24 35 5b 00 71 ed 00 78 50 35 5b 00 00 00 00 00 $5[.q..xP5[.....
005b3150 ffecbad7
005b3154 005b3180 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b3158 005b3164 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b315c 0000000e
005b3160 00000004
005b3164 c0000005
005b3168 00000010
005b316c 00000000
005b3170 25049e7d
005b3174 00000002
005b3178 00000000
005b317c 25049e7d
005b3180 0001001f
005b3184 00000000
...
005b319c ffff1372
005b31a0 ffff0120
005b31a4 ffffffff
005b31a8 02acc889
005b31ac 011d0167
005b31b0 02aed780
005b31b4 ffff016f
005b31b8 00000000
...
005b31d4 6e7f0000
005b31d8 589db12b
005b31dc bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b31e0 fffff8ec
005b31e4 ffffffff
005b31e8 00003ffe
005b31ec 00000000
005b31f0 3fff8000
005b31f4 00000000
005b31f8 ff000000
005b31fc 00004006
005b3200 00000000
...
005b3208 0000000a
005b320c 00000000
005b3210 00005797
005b3214 0000016f
...
005b321c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b3220 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b3224 00000000
005b3228 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b322c 00000000
005b3230 25049e7d
005b3234 005b350c -> 24 35 5b 00 71 ed 00 78 50 35 5b 00 00 00 00 00 $5[.q..xP5[.....
005b3238 25049e7d
005b323c 00000167
005b3240 00210206
005b3244 005b325c -> c8 db f9 bf 50 35 5b 00 88 e8 43 00 80 0f 7d 00 ....P5[...C...}.
005b3248 0000016f
005b324c 00000000
...
005b325c bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b3260 005b3550 -> 28 36 5b 00 44 36 5b 00 7c 35 5b 00 49 68 f7 bf (6[.D6[.|5[.Ih..
005b3264 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b3268 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b326c 00000000
...
005b34e0 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b34e4 00000000
...
005b34f4 005b3264 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b34f8 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b34fc 005b3570 -> c0 39 5b 00 55 68 f7 bf 28 fe 6a 00 10 36 5b 00 .9[.Uh..(.j..6[.
005b3500 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b3504 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b3508 ffffffff
005b350c 005b3524 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 50 35 5b 00 8.j.{.C.....P5[.
005b3510 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
005b3514 005b3550 -> 28 36 5b 00 44 36 5b 00 7c 35 5b 00 49 68 f7 bf (6[.D6[.|5[.Ih..
005b3518 00000000
005b351c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3520 c0000005
005b3524 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
005b3528 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
005b352c 00000000
005b3530 005b3550 -> 28 36 5b 00 44 36 5b 00 7c 35 5b 00 49 68 f7 bf (6[.D6[.|5[.Ih..
005b3534 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
005b3538 005b3558 -> 7c 35 5b 00 49 68 f7 bf 28 36 5b 00 28 fe 6a 00 |5[.Ih..(6[.(.j.
005b353c 00000000
005b3540 005b3558 -> 7c 35 5b 00 49 68 f7 bf 28 36 5b 00 28 fe 6a 00 |5[.Ih..(6[.(.j.
005b3544 005b3628 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3548 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
005b354c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3550 005b3628 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3554 005b3644 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b3558 005b357c -> 10 36 5b 00 e9 7f f8 bf 28 36 5b 00 28 fe 6a 00 .6[.....(6[.(.j.
005b355c bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
005b3560 005b3628 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3564 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3568 005b3644 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b356c 005b3600 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b3570 005b39c0 -> 34 3a 5b 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff 4:[.............
005b3574 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
005b3578 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b357c 005b3610 -> d0 39 5b 00 d7 ba ec ff 44 36 5b 00 28 36 5b 00 .9[.....D6[.(6[.
005b3580 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
005b3584 005b3628 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3588 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b358c 005b3644 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b3590 005b3600 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
005b3594 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
005b3598 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b359c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b35a0 00000000
...
005b3600 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3604 00000000
005b3608 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b360c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
005b3610 005b39d0 -> e8 39 5b 00 71 ed 00 78 14 3a 5b 00 00 00 00 00 .9[.q..x.:[.....
005b3614 ffecbad7
005b3618 005b3644 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
005b361c 005b3628 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
005b3620 0000000e
005b3624 00000004
005b3628 c0000005
005b362c 00000010
005b3630 00000000
005b3634 25049e7d
005b3638 00000002
005b363c 00000000
005b3640 25049e7d
005b3644 0001001f
005b3648 00000000
...
005b3660 ffff1372
005b3664 ffff0120
005b3668 ffffffff
005b366c 02acc889
005b3670 011d0167
005b3674 02aed780
005b3678 ffff016f
005b367c 00000000
...
005b3698 6e7f0000
005b369c 589db12b
005b36a0 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
005b36a4 fffff8ec
005b36a8 ffffffff
005b36ac 00003ffe
005b36b0 00000000
005b36b4 3fff8000
005b36b8 00000000
005b36bc ff000000
005b36c0 00004006
005b36c4 00000000
...
005b36cc 0000000a
005b36d0 00000000
005b36d4 00005797
005b36d8 0000016f
...
005b36e0 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b36e4 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
005b36e8 00000000
005b36ec c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
005b36f0 00000000
005b36f4 25049e7d
005b36f8 005b39d0 -> e8 39 5b 00 71 ed 00 78 14 3a 5b 00 00 00 00 00 .9[.q..x.:[.....
005b36fc 25049e7d
005b3700 00000167
005b3704 00210206
005b3708 005b3720 -> c8 db f9 bf 14 3a 5b 00 88 e8 43 00 80 0f 7d 00 .....:[...C...}.
005b370c 0000016f
005b3710 00000000
...
005b3720 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
005b3724 005b3a14 -> ec 3a 5b 00 08 3b 5b 00 40 3a 5b 00 49 68 f7 bf .:[..;[.@:[.Ih..
005b3728 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
005b372c 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
005b3730 00000000
...
005b39a4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
005b39a8 00000000
...
005b39b8 005b3728 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 00 00 00 ..C...}.........
005b39bc 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
005b39c0 005b3a34 -> 84 3e 5b 00 55 68 f7 bf 28 fe 6a 00 d4 3a 5b 00 .>[.Uh..(.j..:[.
005b39c4 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
005b39c8 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
005b39cc ffffffff
005b39d0 005b39e8 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 14 3a 5b 00 8.j.{.C......:[.
005b39d4 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
006aefb8 00ef7350 -> 50 72 6f 74 6f 63 6f 6c 73 2f 34 30 30 00 00 00 Protocols/400...
006aefbc 05133f6e = DBX_3XV.DLL:.data+0x1f6e
--------------------
0167:05133f57 8b45fc mov eax,dword ptr [ebp-04]
0167:05133f5a ff750c push dword ptr [ebp+0c]
0167:05133f5d 03c7 add eax,edi
0167:05133f5f 99 cdq
0167:05133f60 2bc2 sub eax,edx
0167:05133f62 8bf0 mov esi,eax
0167:05133f64 8b03 mov eax,dword ptr [ebx]
0167:05133f66 d1fe sar esi,EvIa
0167:05133f68 ff34b0 push dword ptr [eax+esi*4]
0167:05133f6b ff5310 call dword ptr [ebx+10]
DBX_3XV.DLL:.data+0x1f6e:
*0167:05133f6e 59 pop ecx
0167:05133f6f 85c0 test eax,eax
0167:05133f71 59 pop ecx
0167:05133f72 741f jz 05133f93 = DBX_3XV.DLL:.data+0x1f93
0167:05133f74 7d06 jge 05133f7c = DBX_3XV.DLL:.data+0x1f7c
0167:05133f76 46 inc esi
0167:05133f77 8975fc mov dword ptr [ebp-04],esi
0167:05133f7a eb03 jmp 05133f7f = DBX_3XV.DLL:.data+0x1f7f
0167:05133f7c 8d7eff lea edi,[esi-01]
0167:05133f7f 397dfc cmp dword ptr [ebp-04],edi
0167:05133f82 7ed3 jle 05133f57 = DBX_3XV.DLL:.data+0x1f57
--------------------
006aefc0 00ef7364 -> 50 73 ef 00 04 f8 6a 00 01 00 00 00 08 dc 7d 00 Ps....j.......}.
006aefc4 00000001
006aefc8 05137138 = DBX_3XV.DLL:.data+0x5138
-> d0 9e 73 00 b4 06 00 00 08 07 00 00 64 00 00 00 ..s.........d...
006aefcc 006af0ac -> da f0 6a 00 67 c2 02 01 de 48 01 01 cc f0 6a 00 ..j.g....H....j.
006aefd0 00ef7350 -> 50 72 6f 74 6f 63 6f 6c 73 2f 34 30 30 00 00 00 Protocols/400...
006aefd4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006aefd8 006af008 -> 44 f0 6a 00 00 00 00 00 28 fe 6a 00 05 00 00 c0 D.j.....(.j.....
006aefdc 00000000
...
006aefe8 006aed58 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 b9 44 00 00 ..C...}......D..
006aefec 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
006aeff0 006af064 -> b4 f4 6a 00 55 68 f7 bf 28 fe 6a 00 04 f1 6a 00 ..j.Uh..(.j...j.
006aeff4 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006aeff8 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
006aeffc ffffffff
006af000 006af018 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 44 f0 6a 00 8.j.{.C.....D.j.
006af004 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
006af008 006af044 -> 1c f1 6a 00 38 f1 6a 00 70 f0 6a 00 49 68 f7 bf ..j.8.j.p.j.Ih..
006af00c 00000000
006af010 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af014 c0000005
006af018 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
006af01c 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
006af020 00000000
006af024 006af044 -> 1c f1 6a 00 38 f1 6a 00 70 f0 6a 00 49 68 f7 bf ..j.8.j.p.j.Ih..
006af028 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
006af02c 006af04c -> 70 f0 6a 00 49 68 f7 bf 1c f1 6a 00 28 fe 6a 00 p.j.Ih....j.(.j.
006af030 00000000
006af034 006af04c -> 70 f0 6a 00 49 68 f7 bf 1c f1 6a 00 28 fe 6a 00 p.j.Ih....j.(.j.
006af038 006af11c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af03c 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
006af040 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af044 006af11c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af048 006af138 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af04c 006af070 -> 04 f1 6a 00 e9 7f f8 bf 1c f1 6a 00 28 fe 6a 00 ..j.......j.(.j.
006af050 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
006af054 006af11c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af058 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af05c 006af138 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af060 006af0f4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
006af064 006af4b4 -> 28 f5 6a 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff (.j.............
006af068 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
006af06c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af070 006af104 -> c4 f4 6a 00 d7 ba ec ff 38 f1 6a 00 1c f1 6a 00 ..j.....8.j...j.
006af074 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
006af078 006af11c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af07c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af080 006af138 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af084 006af0f4 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
006af088 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
006af08c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af090 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af094 00000000
006af098 bff7b9c5 = KERNEL32.DLL:.text+0x29c5
--------------------
0167:bff7b9a9 e81389ffff call bff742c1 = KERNEL32.DLL:_FREQASM+0x32c1
0167:bff7b9ae 5e pop esi
0167:bff7b9af c20400 retd 0004
0167:bff7b9b2 56 push esi
0167:bff7b9b3 8b742408 mov esi,dword ptr [esp+08]
0167:bff7b9b7 8a06 mov al,byte ptr [esi]
0167:bff7b9b9 3c04 cmp al,04
0167:bff7b9bb 7508 jnz bff7b9c5 = KERNEL32.DLL:.text+0x29c5
0167:bff7b9bd ff7604 push dword ptr [esi+04]
0167:bff7b9c0 e82989ffff call bff742ee = KERNEL32.DLL:_FREQASM+0x32ee
KERNEL32.DLL:.text+0x29c5:
*0167:bff7b9c5 5e pop esi
0167:bff7b9c6 c20400 retd 0004
0167:bff7b9c9 64a100000000 mov eax,dword ptr fs:[00000000]
0167:bff7b9cf 55 push ebp
0167:bff7b9d0 8bec mov ebp,esp
0167:bff7b9d2 6aff push -01
0167:bff7b9d4 685092f7bf push bff79250
0167:bff7b9d9 68b405fcbf push bffc05b4
0167:bff7b9de 50 push eax
0167:bff7b9df 8b4508 mov eax,dword ptr [ebp+08]
0167:bff7b9e2 64892500000000 mov dword ptr fs:[00000000],esp
--------------------
006af09c 81d54104 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af0a0 00402928 = MIRANDA32.EXE:.text+0x1928
--------------------
0167:0040290c b800000080 mov eax,80000000
0167:00402911 5e pop esi
0167:00402912 c3 retd
0167:00402913 57 push edi
0167:00402914 8b7844 mov edi,dword ptr [eax+44]
0167:00402917 56 push esi
0167:00402918 ff151ce14300 call dword ptr [0043e11c] -> KERNEL32.DLL!LeaveCriticalSection
0167:0040291e ff742414 push dword ptr [esp+14]
0167:00402922 ff742414 push dword ptr [esp+14]
0167:00402926 ffd7 call edi
MIRANDA32.EXE:.text+0x1928:
*0167:00402928 59 pop ecx
0167:00402929 59 pop ecx
0167:0040292a 5f pop edi
0167:0040292b 5e pop esi
0167:0040292c c3 retd
0167:0040292d 55 push ebp
0167:0040292e 8bec mov ebp,esp
0167:00402930 83ec14 sub esp,+14
0167:00402933 56 push esi
0167:00402934 57 push edi
0167:00402935 8b7d08 mov edi,dword ptr [ebp+08]
--------------------
006af0a4 00000000
...
006af0ac 006af0da -> 6a 00 5c c2 02 01 0c 00 00 00 2f 4a 02 01 24 af j.\......./J..$.
006af0b0 0102c267 = CLIST_MODERN.DLL:.rdata+0x2267
-> 00 43 4c 69 73 74 2f 4d 6f 64 69 66 79 4d 65 6e .CList/ModifyMen
006af0b4 010148de = CLIST_MODERN.DLL:.text+0x338de
--------------------
0167:010148c4 c1e902 shr ecx,02
0167:010148c7 8bf2 mov esi,edx
0167:010148c9 f3a5 rep movs dword ptr es:[edi],dword ptr ds:[esi]
0167:010148cb 8bc8 mov ecx,eax
0167:010148cd 8d45bc lea eax,[ebp-44]
0167:010148d0 83e103 and ecx,+03
0167:010148d3 50 push eax
0167:010148d4 a1944b0301 mov eax,dword ptr [01034b94]
0167:010148d9 f3a4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
0167:010148db ff5024 call dword ptr [eax+24]
CLIST_MODERN.DLL:.text+0x338de:
*0167:010148de 8b4dfc mov ecx,dword ptr [ebp-04]
0167:010148e1 83c40c add esp,+0c
0167:010148e4 5f pop edi
0167:010148e5 5e pop esi
0167:010148e6 e8164f0100 call 01029801 = CLIST_MODERN.DLL:.text+0x48801
0167:010148eb c9 leave
0167:010148ec c3 retd
0167:010148ed 55 push ebp
0167:010148ee 8bec mov ebp,esp
0167:010148f0 83ec0c sub esp,+0c
0167:010148f3 8945fc mov dword ptr [ebp-04],eax
--------------------
006af0b8 006af0cc -> 41 49 4d 2f 47 65 74 53 74 61 74 75 73 00 6a 00 AIM/GetStatus.j.
006af0bc 00000000
...
006af0c4 0000000c
006af0c8 010148eb = CLIST_MODERN.DLL:.text+0x338eb
--------------------
0167:010148d0 83e103 and ecx,+03
0167:010148d3 50 push eax
0167:010148d4 a1944b0301 mov eax,dword ptr [01034b94]
0167:010148d9 f3a4 rep movs byte ptr es:[edi],byte ptr ds:[esi]
0167:010148db ff5024 call dword ptr [eax+24]
0167:010148de 8b4dfc mov ecx,dword ptr [ebp-04]
0167:010148e1 83c40c add esp,+0c
0167:010148e4 5f pop edi
0167:010148e5 5e pop esi
0167:010148e6 e8164f0100 call 01029801 = CLIST_MODERN.DLL:.text+0x48801
CLIST_MODERN.DLL:.text+0x338eb:
*0167:010148eb c9 leave
0167:010148ec c3 retd
0167:010148ed 55 push ebp
0167:010148ee 8bec mov ebp,esp
0167:010148f0 83ec0c sub esp,+0c
0167:010148f3 8945fc mov dword ptr [ebp-04],eax
0167:010148f6 c600ff mov byte ptr [eax],ff
0167:010148f9 8d45f4 lea eax,[ebp-0c]
0167:010148fc 50 push eax
0167:010148fd ff7508 push dword ptr [ebp+08]
0167:01014900 a1944b0301 mov eax,dword ptr [01034b94]
--------------------
006af0cc 2f4d4941
006af0d0 53746547
006af0d4 75746174
006af0d8 006a0073 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af0dc 0102c25c = CLIST_MODERN.DLL:.rdata+0x225c
-> 2f 47 65 74 53 74 61 74 75 73 00 00 43 4c 69 73 /GetStatus..CLis
006af0e0 0000000c
006af0e4 01024a2f = CLIST_MODERN.DLL:.text+0x43a2f
--------------------
0167:01024a1b 59 pop ecx
0167:01024a1c 43 inc ebx
0167:01024a1d 3b5ddc cmp ebx,dword ptr [ebp-24]
0167:01024a20 7caf jl 010249d1 = CLIST_MODERN.DLL:.text+0x439d1
0167:01024a22 33c0 xor eax,eax
0167:01024a24 5e pop esi
0167:01024a25 8b4dfc mov ecx,dword ptr [ebp-04]
0167:01024a28 5f pop edi
0167:01024a29 5b pop ebx
0167:01024a2a e8d24d0000 call 01029801 = CLIST_MODERN.DLL:.text+0x48801
CLIST_MODERN.DLL:.text+0x43a2f:
*0167:01024a2f c9 leave
0167:01024a30 c3 retd
0167:01024a31 e86afdffff call 010247a0 = CLIST_MODERN.DLL:.text+0x437a0
0167:01024a36 6a0a push +0a
0167:01024a38 8d45ec lea eax,[ebp-14]
0167:01024a3b 50 push eax
0167:01024a3c 81c390010000 add ebx,00000190
0167:01024a42 53 push ebx
0167:01024a43 ffd7 call edi
0167:01024a45 6a00 push +00
0167:01024a47 8d45ec lea eax,[ebp-14]
--------------------
006af0e8 0102af24 = CLIST_MODERN.DLL:.rdata+0xf24
-> 50 72 6f 74 6f 63 6f 6c 73 00 00 00 50 72 6f 74 Protocols...Prot
006af0ec 006af104 -> c4 f4 6a 00 d7 ba ec ff 38 f1 6a 00 1c f1 6a 00 ..j.....8.j...j.
006af0f0 00000000
006af0f4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af0f8 00000000
006af0fc 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af100 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af104 006af4c4 -> dc f4 6a 00 71 ed 00 78 08 f5 6a 00 00 00 00 00 ..j.q..x..j.....
006af108 ffecbad7
006af10c 006af138 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af110 006af11c -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af114 0000000e
006af118 00000004
006af11c c0000005
006af120 00000010
006af124 00000000
006af128 25049e7d
006af12c 00000002
006af130 00000000
006af134 25049e7d
006af138 0001001f
006af13c 00000000
...
006af154 ffff1372
006af158 ffff0120
006af15c ffffffff
006af160 02acc889
006af164 011d0167
006af168 02aed780
006af16c ffff016f
006af170 00000000
...
006af18c 6e7f0000
006af190 589db12b
006af194 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
006af198 fffff8ec
006af19c ffffffff
006af1a0 00003ffe
006af1a4 00000000
006af1a8 3fff8000
006af1ac 00000000
006af1b0 ff000000
006af1b4 00004006
006af1b8 00000000
...
006af1c0 0000000a
006af1c4 00000000
006af1c8 00005797
006af1cc 0000016f
...
006af1d4 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af1d8 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af1dc 00000000
006af1e0 c00309c8 -> 50 b0 d6 81 40 48 80 c1 cc 8b 01 00 20 83 6c e6 P...@H...... .l.
006af1e4 00000000
006af1e8 25049e7d
006af1ec 006af4c4 -> dc f4 6a 00 71 ed 00 78 08 f5 6a 00 00 00 00 00 ..j.q..x..j.....
006af1f0 25049e7d
006af1f4 00000167
006af1f8 00210206
006af1fc 006af214 -> c8 db f9 bf 08 f5 6a 00 88 e8 43 00 80 0f 7d 00 ......j...C...}.
006af200 0000016f
006af204 006af2c0 -> 6c f4 6a 00 6c f5 6a 00 b4 f2 6a 00 6c f3 6a 00 l.j.l.j...j.l.j.
...
006af20c 00ef803c -> 53 74 61 74 75 73 4d 65 6e 75 5f 49 74 65 6d 73 StatusMenu_Items
006af210 656c6269
006af214 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
006af218 006af508 -> e0 f5 6a 00 fc f5 6a 00 34 f5 6a 00 49 68 f7 bf ..j...j.4.j.Ih..
006af21c 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
006af220 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
006af224 00000000
006af228 bff7b9c5 = KERNEL32.DLL:.text+0x29c5
--------------------
0167:bff7b9a9 e81389ffff call bff742c1 = KERNEL32.DLL:_FREQASM+0x32c1
0167:bff7b9ae 5e pop esi
0167:bff7b9af c20400 retd 0004
0167:bff7b9b2 56 push esi
0167:bff7b9b3 8b742408 mov esi,dword ptr [esp+08]
0167:bff7b9b7 8a06 mov al,byte ptr [esi]
0167:bff7b9b9 3c04 cmp al,04
0167:bff7b9bb 7508 jnz bff7b9c5 = KERNEL32.DLL:.text+0x29c5
0167:bff7b9bd ff7604 push dword ptr [esi+04]
0167:bff7b9c0 e82989ffff call bff742ee = KERNEL32.DLL:_FREQASM+0x32ee
KERNEL32.DLL:.text+0x29c5:
*0167:bff7b9c5 5e pop esi
0167:bff7b9c6 c20400 retd 0004
0167:bff7b9c9 64a100000000 mov eax,dword ptr fs:[00000000]
0167:bff7b9cf 55 push ebp
0167:bff7b9d0 8bec mov ebp,esp
0167:bff7b9d2 6aff push -01
0167:bff7b9d4 685092f7bf push bff79250
0167:bff7b9d9 68b405fcbf push bffc05b4
0167:bff7b9de 50 push eax
0167:bff7b9df 8b4508 mov eax,dword ptr [ebp+08]
0167:bff7b9e2 64892500000000 mov dword ptr fs:[00000000],esp
--------------------
006af22c 81d49378 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af230 00ef808c -> 01 f8 6a 00 00 00 00 00 33 00 00 00 20 00 00 a0 ..j.....3... ...
006af234 05134605 = DBX_3XV.DLL:.data+0x2605
--------------------
0167:051345dd ff15b4711305 call dword ptr [051371b4] -> MIRANDA32.EXE:.text+0x0
0167:051345e3 8b4b08 mov ecx,dword ptr [ebx+08]
0167:051345e6 894104 mov dword ptr [ecx+04],eax
0167:051345e9 ff7604 push dword ptr [esi+04]
0167:051345ec 8b4308 mov eax,dword ptr [ebx+08]
0167:051345ef ff7004 push dword ptr [eax+04]
0167:051345f2 e809270000 call 05136d00 = MSVCRT.DLL!strcpy
0167:051345f7 83c410 add esp,+10
0167:051345fa 6860751305 push 05137560
0167:051345ff ff1528101305 call dword ptr [05131028] -> KERNEL32.DLL!LeaveCriticalSection
DBX_3XV.DLL:.data+0x2605:
*0167:05134605 33c0 xor eax,eax
0167:05134607 3806 cmp byte ptr [esi],al
0167:05134609 0f94c0 setz al
0167:0513460c e9d2040000 jmp 05134ae3 = DBX_3XV.DLL:.data+0x2ae3
0167:05134611 ff33 push dword ptr [ebx]
0167:05134613 e8a8fbffff call 051341c0 = DBX_3XV.DLL:.data+0x21c0
0167:05134618 85ff test edi,edi
0167:0513461a 59 pop ecx
0167:0513461b 8945f0 mov dword ptr [ebp-10],eax
0167:0513461e 750a jnz 0513462a = DBX_3XV.DLL:.data+0x262a
0167:05134620 a1a4751305 mov eax,dword ptr [051375a4]
--------------------
006af238 05137560 = DBX_3XV.DLL:.data+0x5560
-> 04 00 00 00 78 93 d4 81 00 00 00 00 00 00 00 00 ....x...........
006af23c 051344ba = DBX_3XV.DLL:.data+0x24ba
--------------------
0167:0513448a ff354c711305 push dword ptr [0513714c]
0167:05134490 ff154c101305 call dword ptr [0513104c] -> KERNEL32.DLL!HeapDestroy
0167:05134496 68e0711305 push 051371e0
0167:0513449b e88cfaffff call 05133f2c = DBX_3XV.DLL:.data+0x1f2c
0167:051344a0 c7042418711305 mov dword ptr [esp],05137118
0167:051344a7 e880faffff call 05133f2c = DBX_3XV.DLL:.data+0x1f2c
0167:051344ac c7042438711305 mov dword ptr [esp],05137138
0167:051344b3 e874faffff call 05133f2c = DBX_3XV.DLL:.data+0x1f2c
0167:051344b8 59 pop ecx
0167:051344b9 c3 retd
DBX_3XV.DLL:.data+0x24ba:
*0167:051344ba 56 push esi
0167:051344bb 8b74240c mov esi,dword ptr [esp+0c]
0167:051344bf 6a00 push +00
0167:051344c1 56 push esi
0167:051344c2 8b4608 mov eax,dword ptr [esi+08]
0167:051344c5 ff742410 push dword ptr [esp+10]
0167:051344c9 802000 and byte ptr [eax],00
0167:051344cc e82a000000 call 051344fb = DBX_3XV.DLL:.data+0x24fb
0167:051344d1 83c40c add esp,+0c
0167:051344d4 85c0 test eax,eax
0167:051344d6 7405 jz 051344dd = DBX_3XV.DLL:.data+0x24dd
--------------------
006af240 006af2c0 -> 6c f4 6a 00 6c f5 6a 00 b4 f2 6a 00 6c f3 6a 00 l.j.l.j...j.l.j.
006af244 03df0000
006af248 ffff3809
006af24c 006af2d0 -> d1 e6 00 01 00 00 00 00 6c f5 6a 00 01 00 00 00 ........l.j.....
006af250 0100d79b = CLIST_MODERN.DLL:.text+0x2c79b
--------------------
0167:0100d778 53 push ebx
0167:0100d779 ff7508 push dword ptr [ebp+08]
0167:0100d77c c745a434000000 mov dword ptr [ebp-5c],00000034
0167:0100d783 c745c820000000 mov dword ptr [ebp-38],00000020
0167:0100d78a ffd6 call esi
0167:0100d78c ff750c push dword ptr [ebp+0c]
0167:0100d78f 6a01 push +01
0167:0100d791 53 push ebx
0167:0100d792 ff7508 push dword ptr [ebp+08]
0167:0100d795 ff15f8a30201 call dword ptr [0102a3f8] -> USER32.DLL!InsertMenuItemA
CLIST_MODERN.DLL:.text+0x2c79b:
*0167:0100d79b 5e pop esi
0167:0100d79c 8b4dfc mov ecx,dword ptr [ebp-04]
0167:0100d79f 5f pop edi
0167:0100d7a0 5b pop ebx
0167:0100d7a1 e85bc00100 call 01029801 = CLIST_MODERN.DLL:.text+0x48801
0167:0100d7a6 c9 leave
0167:0100d7a7 c3 retd
0167:0100d7a8 55 push ebp
0167:0100d7a9 8bec mov ebp,esp
0167:0100d7ab 83ec30 sub esp,+30
0167:0100d7ae 8365d000 and dword ptr [ebp-30],+00
--------------------
006af254 00000ed0
006af258 0000000a
...
006af260 00ef803c -> 53 74 61 74 75 73 4d 65 6e 75 5f 49 74 65 6d 73 StatusMenu_Items
006af264 00000000
006af268 00000033
006af26c 00ef803c -> 53 74 61 74 75 73 4d 65 6e 75 5f 49 74 65 6d 73 StatusMenu_Items
006af270 051344d1 = DBX_3XV.DLL:.data+0x24d1
--------------------
0167:051344b2 05e874faff add eax,fffa74e8
0167:051344b7 ff59c3 call fword ptr [ecx-3d]
0167:051344ba 56 push esi
0167:051344bb 8b74240c mov esi,dword ptr [esp+0c]
0167:051344bf 6a00 push +00
0167:051344c1 56 push esi
0167:051344c2 8b4608 mov eax,dword ptr [esi+08]
0167:051344c5 ff742410 push dword ptr [esp+10]
0167:051344c9 802000 and byte ptr [eax],00
0167:051344cc e82a000000 call 051344fb = DBX_3XV.DLL:.data+0x24fb
DBX_3XV.DLL:.data+0x24d1:
*0167:051344d1 83c40c add esp,+0c
0167:051344d4 85c0 test eax,eax
0167:051344d6 7405 jz 051344dd = DBX_3XV.DLL:.data+0x24dd
0167:051344d8 6a01 push +01
0167:051344da 58 pop eax
0167:051344db 5e pop esi
0167:051344dc c3 retd
0167:051344dd 8b4608 mov eax,dword ptr [esi+08]
0167:051344e0 8038fd cmp byte ptr [eax],fd
0167:051344e3 7512 jnz 051344f7 = DBX_3XV.DLL:.data+0x24f7
0167:051344e5 6a00 push +00
--------------------
006af274 03df0033
006af278 ffff3809
006af27c 006af7a8 -> 68 f9 6a 00 95 b3 99 02 9d b3 99 02 34 f9 6a 00 h.j.........4.j.
006af280 006af6c8 -> b4 05 fc bf 90 92 f7 bf ff ff ff ff 88 f9 6a 00 ..............j.
006af284 bff7c4bb = KERNEL32.DLL:.text+0x34bb
--------------------
0167:bff7c49d ff4df8 dec dword ptr [ebp-08]
0167:bff7c4a0 85c9 test ecx,ecx
0167:bff7c4a2 75e2 jnz bff7c486 = KERNEL32.DLL:.text+0x3486
0167:bff7c4a4 e97dfcffff jmp bff7c126 = KERNEL32.DLL:.text+0x3126
0167:bff7c4a9 8b45e8 mov eax,dword ptr [ebp-18]
0167:bff7c4ac 8345e804 add dword ptr [ebp-18],+04
0167:bff7c4b0 8b08 mov ecx,dword ptr [eax]
0167:bff7c4b2 51 push ecx
0167:bff7c4b3 894de4 mov dword ptr [ebp-1c],ecx
0167:bff7c4b6 e8b54cffff call bff71170 = KERNEL32.DLL:_FREQASM+0x170
KERNEL32.DLL:.text+0x34bb:
*0167:bff7c4bb 8945f8 mov dword ptr [ebp-08],eax
0167:bff7c4be 395dec cmp dword ptr [ebp-14],ebx
0167:bff7c4c1 7c0b jl bff7c4ce = KERNEL32.DLL:.text+0x34ce
0167:bff7c4c3 8b45ec mov eax,dword ptr [ebp-14]
0167:bff7c4c6 3b45f8 cmp eax,dword ptr [ebp-08]
0167:bff7c4c9 7d03 jge bff7c4ce = KERNEL32.DLL:.text+0x34ce
0167:bff7c4cb 8945f8 mov dword ptr [ebp-08],eax
0167:bff7c4ce 2b7df8 sub edi,dword ptr [ebp-08]
0167:bff7c4d1 395dd8 cmp dword ptr [ebp-28],ebx
0167:bff7c4d4 7446 jz bff7c51c = KERNEL32.DLL:.text+0x351c
0167:bff7c4d6 8b45f8 mov eax,dword ptr [ebp-08]
--------------------
006af288 006af7a8 -> 68 f9 6a 00 95 b3 99 02 9d b3 99 02 34 f9 6a 00 h.j.........4.j.
006af28c bff55591 = USER32.DLL!wsprintfA
-> e9 20 2c 00 00 e9 f7 2b 00 00 e9 50 bf ff ff 58 . ,....+...P...X
006af290 00000000
006af294 006afb00 -> a2 dd fc bf ec f8 ff ff ff ff ff ff fe 3f 00 00 .............?..
006af298 006af2c0 -> 6c f4 6a 00 6c f5 6a 00 b4 f2 6a 00 6c f3 6a 00 l.j.l.j...j.l.j.
006af29c bff55591 = USER32.DLL!wsprintfA
-> e9 20 2c 00 00 e9 f7 2b 00 00 e9 50 bf ff ff 58 . ,....+...P...X
006af2a0 00723c5c -> 49 0d 03 00 ff ff ff ff 00 01 00 00 57 2b 00 00 I...........W+..
006af2a4 0100cc22 = CLIST_MODERN.DLL:.text+0x2bc22
--------------------
0167:0100cc02 8b450c mov eax,dword ptr [ebp+0c]
0167:0100cc05 8945f8 mov dword ptr [ebp-08],eax
0167:0100cc08 8d45e8 lea eax,[ebp-18]
0167:0100cc0b 8945fc mov dword ptr [ebp-04],eax
0167:0100cc0e 8d45f4 lea eax,[ebp-0c]
0167:0100cc11 50 push eax
0167:0100cc12 ff7508 push dword ptr [ebp+08]
0167:0100cc15 a1944b0301 mov eax,dword ptr [01034b94]
0167:0100cc1a 68e0a50201 push 0102a5e0
0167:0100cc1f ff5024 call dword ptr [eax+24]
CLIST_MODERN.DLL:.text+0x2bc22:
*0167:0100cc22 83c40c add esp,+0c
0167:0100cc25 85c0 test eax,eax
0167:0100cc27 8b4510 mov eax,dword ptr [ebp+10]
0167:0100cc2a 7504 jnz 0100cc30 = CLIST_MODERN.DLL:.text+0x2bc30
0167:0100cc2c 0fb645ec movzx eax,byte ptr [ebp-14]
0167:0100cc30 c9 leave
0167:0100cc31 c3 retd
0167:0100cc32 55 push ebp
0167:0100cc33 8bec mov ebp,esp
0167:0100cc35 83ec14 sub esp,+14
0167:0100cc38 8945ec mov dword ptr [ebp-14],eax
--------------------
006af2a8 0102a5e0 = CLIST_MODERN.DLL:.rdata+0x5e0
-> 44 42 2f 43 6f 6e 74 61 63 74 2f 47 65 74 53 65 DB/Contact/GetSe
006af2ac 00000000
006af2b0 006af2c0 -> 6c f4 6a 00 6c f5 6a 00 b4 f2 6a 00 6c f3 6a 00 l.j.l.j...j.l.j.
006af2b4 006af801 -> f8 6a 00 54 5e 50 00 00 00 48 00 20 32 27 03 1d .j.T^P...H. 2'..
006af2b8 00000000
006af2bc 00000033
006af2c0 006af46c -> 66 4e b6 c6 49 02 7f 04 39 09 00 00 a8 11 87 06 fN..I...9.......
006af2c4 006af56c -> 00 00 72 66 00 00 b5 66 00 00 e2 c6 ac f5 6a 00 ..rf...f......j.
006af2c8 006af2b4 -> 01 f8 6a 00 00 00 00 00 33 00 00 00 6c f4 6a 00 ..j.....3...l.j.
006af2cc 006af36c -> e6 1f 50 00 00 00 3e 6a 01 00 00 04 50 00 e6 1f ..P...>j....P...
006af2d0 0100e6d1 = CLIST_MODERN.DLL:.text+0x2d6d1
--------------------
0167:0100e6aa 8d8500010000 lea eax,[ebp+00000100]
0167:0100e6b0 e87de5ffff call 0100cc32 = CLIST_MODERN.DLL:.text+0x2bc32
0167:0100e6b5 83c40c add esp,+0c
0167:0100e6b8 6a01 push +01
0167:0100e6ba 8d8500020000 lea eax,[ebp+00000200]
0167:0100e6c0 50 push eax
0167:0100e6c1 53 push ebx
0167:0100e6c2 8d8500010000 lea eax,[ebp+00000100]
0167:0100e6c8 c6461801 mov byte ptr [esi+18],01
0167:0100e6cc e828e5ffff call 0100cbf9 = CLIST_MODERN.DLL:.text+0x2bbf9
CLIST_MODERN.DLL:.text+0x2d6d1:
*0167:0100e6d1 83c40c add esp,+0c
0167:0100e6d4 85c0 test eax,eax
0167:0100e6d6 7508 jnz 0100e6e0 = CLIST_MODERN.DLL:.text+0x2d6e0
0167:0100e6d8 884618 mov byte ptr [esi+18],al
0167:0100e6db e993020000 jmp 0100e973 = CLIST_MODERN.DLL:.text+0x2d973
0167:0100e6e0 8d4500 lea eax,[ebp]
0167:0100e6e3 50 push eax
0167:0100e6e4 8d8500020000 lea eax,[ebp+00000200]
0167:0100e6ea 68b4d00201 push 0102d0b4
0167:0100e6ef 50 push eax
0167:0100e6f0 ffd7 call edi
--------------------
006af2d4 00000000
006af2d8 006af56c -> 00 00 72 66 00 00 b5 66 00 00 e2 c6 ac f5 6a 00 ..rf...f......j.
006af2dc 00000001
006af2e0 010330e4 = CLIST_MODERN.DLL:.data+0x10e4
-> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af2e4 4b5ff6bc
006af2e8 000c0000
006af2ec 9b020000
006af2f0 9b140000
006af2f4 99ed0000
006af2f8 99350000
006af2fc 99880000
006af300 c46e0000 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af304 22ea0000
006af308 c782041f -> dc 40 00 e8 79 37 00 00 83 c4 0c 0f b6 45 ff c1 .@..y7.......E..
006af30c 00000000
006af310 7c000000
006af314 4b5ffff9
006af318 000c0000
006af31c 9b020000
006af320 9b140000
006af324 99ed0000
006af328 99350000
006af32c 99880000
006af330 c49e0000 -> 24 18 ff 74 24 18 ff 15 d0 a3 04 10 c3 55 8b ec $..t$........U..
006af334 22ea0000
006af338 c7b2041f -> 80 00 00 00 00 20 00 34 00 09 04 01 00 00 00 00 ..... .4........
006af33c 00000000
006af340 56000000
006af344 00030001
006af348 1fe60050
006af34c 00000004
006af350 00000000
...
006af358 00105250
006af35c 00300010
006af360 00501801
006af364 00306a3e
006af368 00000000
006af36c 00501fe6
006af370 6a3e0000
006af374 04000001
006af378 1fe60050
006af37c 00000000
...
006af394 00000050
006af398 00016a3e
006af39c 00100010
006af3a0 6a3f0000
006af3a4 00405250 = MIRANDA32.EXE:.text+0x4250
-> ff 50 ff 15 30 e1 43 00 83 f8 ff 74 30 a8 10 74 .P..0.C....t0..t
006af3a8 00800220 -> 01 03 00 00 00 10 00 00 38 c4 a1 02 b0 00 80 00 ........8.......
006af3ac 00001001
006af3b0 ff800000
006af3b4 0000ffff
006af3b8 0f800000
006af3bc 45370001
006af3c0 04000004
006af3c4 4e660000
006af3c8 00000000
...
006af3d4 ffffff60
006af3d8 00000030
...
006af3e0 0000e7e0
006af3e4 00014537
006af3e8 00100010
006af3ec 636fc4ce
006af3f0 00300050
006af3f4 00000000
006af3f8 d2c8636f
006af3fc 11a80667
006af400 1fe60687
006af404 00000000
...
006af40c 00860000
006af410 000000ee
006af414 00000000
006af418 000099b6
006af41c 00000050
006af420 000045f6
006af424 c4ce6a3f -> 1d 1c 2e f6 2a 5e a5 64 04 5f e6 26 e5 c0 8a f6 ....*^.d._.&....
006af428 d2c8636f
006af42c 11a80667
006af430 00800687 -> 09 4f 6e 6c 69 6e 65 0a 3c 62 3e 59 41 48 4f 4f .Online.<b>YAHOO
006af434 00001001
006af438 04bf0934
006af43c 0086ffff
006af440 000000ee
006af444 00000939
006af448 000099b6
006af44c 4e660000
006af450 30020234
006af454 00000934
006af458 00000000
...
006af460 00000030
006af464 00000000
006af468 04bf0934
006af46c c6b64e66 -> 76 65 58 5c 4d 50 33 5c 5f 59 55 5f 5c 44 61 72 veX\MP3\_YU_\Dar
006af470 047f0249
006af474 00000939
006af478 068711a8
006af47c 00ee0086 -> 00 a0 49 63 6f 6e 73 2f 57 65 61 74 68 65 72 34 ..Icons/Weather4
006af480 30020234
006af484 00300050
006af488 82218404 -> e2 04 00 00 00 00 00 00 00 00 00 00 4c 90 21 82 ............L.!.
006af48c 000004e2
006af490 006af550 -> 64 a0 d5 81 50 b0 d6 81 00 00 00 00 69 00 74 00 d...P.......i.t.
006af494 00000000
006af498 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af49c c6e64e66 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af4a0 00000000
...
006af4ac 006af21c -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 c5 b9 f7 bf ..C...}.........
006af4b0 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
006af4b4 006af528 -> 78 f9 6a 00 55 68 f7 bf 28 fe 6a 00 c8 f5 6a 00 x.j.Uh..(.j...j.
006af4b8 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006af4bc bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
006af4c0 ffffffff
006af4c4 006af4dc -> 38 fe 6a 00 7b db 43 00 00 00 00 00 08 f5 6a 00 8.j.{.C.......j.
006af4c8 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
006af4cc 006af508 -> e0 f5 6a 00 fc f5 6a 00 34 f5 6a 00 49 68 f7 bf ..j...j.4.j.Ih..
006af4d0 00000000
006af4d4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af4d8 c0000005
006af4dc 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
006af4e0 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
006af4e4 00000000
006af4e8 006af508 -> e0 f5 6a 00 fc f5 6a 00 34 f5 6a 00 49 68 f7 bf ..j...j.4.j.Ih..
006af4ec 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
006af4f0 006af510 -> 34 f5 6a 00 49 68 f7 bf e0 f5 6a 00 28 fe 6a 00 4.j.Ih....j.(.j.
006af4f4 00000000
006af4f8 006af510 -> 34 f5 6a 00 49 68 f7 bf e0 f5 6a 00 28 fe 6a 00 4.j.Ih....j.(.j.
006af4fc 006af5e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af500 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
006af504 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af508 006af5e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af50c 006af5fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af510 006af534 -> c8 f5 6a 00 e9 7f f8 bf e0 f5 6a 00 28 fe 6a 00 ..j.......j.(.j.
006af514 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
006af518 006af5e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af51c 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af520 006af5fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af524 006af5b8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
006af528 006af978 -> ec f9 6a 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..j.............
006af52c bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
006af530 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af534 006af5c8 -> 88 f9 6a 00 d7 ba ec ff fc f5 6a 00 e0 f5 6a 00 ..j.......j...j.
006af538 bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
006af53c 006af5e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af540 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af544 006af5fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af548 006af5b8 -> 28 fe 6a 00 00 00 00 00 50 b0 d6 81 28 fe 6a 00 (.j.....P...(.j.
006af54c 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
006af550 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af554 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af558 00000000
006af55c 00740069 -> 68 72 65 61 64 2f 50 75 73 68 00 00 00 00 00 00 hread/Push......
006af560 00300032
006af564 00000057
006af568 67490000
006af56c 66720000
006af570 66b50000
006af574 c6e20000 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 00 ................
006af578 006af5ac -> d4 f5 6a 00 9c 46 f7 bf 00 00 00 00 28 fe 6a 00 ..j..F......(.j.
006af57c 81d0fed8 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af580 825a1c30 -> 64 00 00 a0 88 77 02 00 00 00 00 00 c8 b9 02 00 d....w..........
006af584 c1804840 -> 01 00 00 00 20 a0 d5 81 50 b0 d6 81 20 83 6c e6 .... ...P... .l.
006af588 006af5ac -> d4 f5 6a 00 9c 46 f7 bf 00 00 00 00 28 fe 6a 00 ..j..F......(.j.
006af58c bff7a10e = KERNEL32.DLL:.text+0x110e
--------------------
0167:bff7a0ea fa cli
0167:bff7a0eb bf4ec3fabf mov edi,bffac34e
0167:bff7a0f0 8b442404 mov eax,dword ptr [esp+04]
0167:bff7a0f4 0fb64870 movzx ecx,byte ptr [eax+70]
0167:bff7a0f8 0b4c2408 or ecx,dword ptr [esp+08]
0167:bff7a0fc f6c101 test cl,01
0167:bff7a0ff 750d jnz bff7a10e = KERNEL32.DLL:.text+0x110e
0167:bff7a101 ff704c push dword ptr [eax+4c]
0167:bff7a104 e8e5a1ffff call bff742ee = KERNEL32.DLL:_FREQASM+0x32ee
0167:bff7a109 e83e010000 call bff7a24c = KERNEL32.DLL:.text+0x124c
KERNEL32.DLL:.text+0x110e:
*0167:bff7a10e c20800 retd 0008
0167:bff7a111 53 push ebx
0167:bff7a112 56 push esi
0167:bff7a113 8b742410 mov esi,dword ptr [esp+10]
0167:bff7a117 57 push edi
0167:bff7a118 8b7c2418 mov edi,dword ptr [esp+18]
0167:bff7a11c 55 push ebp
0167:bff7a11d ba00001000 mov edx,00100000
0167:bff7a122 8d1c3e lea ebx,[esi+edi]
0167:bff7a125 8b03 mov eax,dword ptr [ebx]
0167:bff7a127 a801 test al,01
--------------------
006af590 bff7b326 = KERNEL32.DLL:.text+0x2326
--------------------
0167:bff7b309 8b00 mov eax,dword ptr [eax]
0167:bff7b30b 894304 mov dword ptr [ebx+04],eax
0167:bff7b30e 6800020000 push 00000200
0167:bff7b313 51 push ecx
0167:bff7b314 ff75fc push dword ptr [ebp-04]
0167:bff7b317 56 push esi
0167:bff7b318 e8f4edffff call bff7a111 = KERNEL32.DLL:.text+0x1111
0167:bff7b31d ff750c push dword ptr [ebp+0c]
0167:bff7b320 56 push esi
0167:bff7b321 e8caedffff call bff7a0f0 = KERNEL32.DLL:.text+0x10f0
KERNEL32.DLL:.text+0x2326:
*0167:bff7b326 b801000000 mov eax,00000001
0167:bff7b32b 5f pop edi
0167:bff7b32c 5e pop esi
0167:bff7b32d 5b pop ebx
0167:bff7b32e 8be5 mov esp,ebp
0167:bff7b330 5d pop ebp
0167:bff7b331 c20c00 retd 000c
0167:bff7b334 55 push ebp
0167:bff7b335 8bec mov ebp,esp
0167:bff7b337 83ec04 sub esp,+04
0167:bff7b33a a1e49cfcbf mov eax,dword ptr [bffc9ce4]
--------------------
006af594 82599000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af598 00000000
006af59c c60433c7 -> 49 d1 2a c3 09 1e 02 29 e5 d4 e6 ff 60 c8 2c 80 I.*....)....`.,.
006af5a0 0000016f
006af5a4 82589000 -> 6c 0e ff ff 00 00 00 00 00 00 00 00 00 00 00 00 l...............
006af5a8 825a1c30 -> 64 00 00 a0 88 77 02 00 00 00 00 00 c8 b9 02 00 d....w..........
006af5ac 006af5d4 -> e0 f5 6a 00 0e 00 00 00 04 00 00 00 05 00 00 c0 ..j.............
006af5b0 bff7469c = KERNEL32.DLL:_FREQASM+0x369c
--------------------
0167:bff74676 7417 jz bff7468f = KERNEL32.DLL:_FREQASM+0x368f
0167:bff74678 816b7000100000 sub dword ptr [ebx+70],00001000
0167:bff7467f 66c70419ffff mov word ptr [ecx+ebx],ffff
0167:bff74685 83e902 sub ecx,+02
0167:bff74688 2d00100000 sub eax,00001000
0167:bff7468d eba7 jmp bff74636 = KERNEL32.DLL:_FREQASM+0x3636
0167:bff7468f ff75f8 push dword ptr [ebp-08]
0167:bff74692 6a00 push +00
0167:bff74694 ff737c push dword ptr [ebx+7c]
0167:bff74697 e871040000 call bff74b0d = KERNEL32.DLL:_FREQASM+0x3b0d
KERNEL32.DLL:_FREQASM+0x369c:
*0167:bff7469c 5b pop ebx
0167:bff7469d 5f pop edi
0167:bff7469e 5e pop esi
0167:bff7469f c9 leave
0167:bff746a0 c20c00 retd 000c
0167:bff746a3 90 nop
0167:bff746a4 55 push ebp
0167:bff746a5 8bec mov ebp,esp
0167:bff746a7 56 push esi
0167:bff746a8 57 push edi
0167:bff746a9 53 push ebx
--------------------
006af5b4 00000000
006af5b8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af5bc 00000000
006af5c0 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af5c4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af5c8 006af988 -> a0 f9 6a 00 71 ed 00 78 cc f9 6a 00 00 00 00 00 ..j.q..x..j.....
006af5cc ffecbad7
006af5d0 006af5fc -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af5d4 006af5e0 -> 05 00 00 c0 10 00 00 00 00 00 00 00 7d 9e 04 25 ............}..%
006af5d8 0000000e
006af5dc 00000004
006af5e0 c0000005
006af5e4 00000010
006af5e8 00000000
006af5ec 25049e7d
006af5f0 00000002
006af5f4 00000000
006af5f8 25049e7d
006af5fc 0001001f
006af600 00000000
...
006af618 ffff1372
006af61c ffff0120
006af620 ffffffff
006af624 02acc889
006af628 011d0167
006af62c 02aed780
006af630 ffff016f
006af634 00000000
...
006af650 6e7f0000
006af654 589db12b
006af658 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
006af65c fffff8ec
006af660 ffffffff
006af664 00003ffe
006af668 00000000
006af66c 3fff8000
006af670 00000000
006af674 ff000000
006af678 00004006
006af67c 00000000
...
006af684 0000000a
006af688 00000000
006af68c 00005797
006af690 0000016f
...
006af698 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af69c 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006af6a0 00000000
006af6a4 bffc9490 = KERNEL32.DLL:.data+0x490
-> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af6a8 006af978 -> ec f9 6a 00 b4 05 fc bf a0 92 f7 bf ff ff ff ff ..j.............
006af6ac 25049e7d
006af6b0 006af988 -> a0 f9 6a 00 71 ed 00 78 cc f9 6a 00 00 00 00 00 ..j.q..x..j.....
006af6b4 25049e7d
006af6b8 00000167
006af6bc 00210206
006af6c0 006af6d8 -> c8 db f9 bf cc f9 6a 00 88 e8 43 00 80 0f 7d 00 ......j...C...}.
006af6c4 0000016f
006af6c8 bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006af6cc bff79290 = KERNEL32.DLL:.text+0x290
-> ff ff ff ff 0a db f9 bf 10 db f9 bf 00 00 00 00 ................
006af6d0 ffffffff
006af6d4 006af988 -> a0 f9 6a 00 71 ed 00 78 cc f9 6a 00 00 00 00 00 ..j.q..x..j.....
006af6d8 bff9dbc8 = KERNEL32.DLL:.text+0x24bc8
--------------------
0167:bff9dba4 0f85e6020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbaa 83c744 add edi,+44
0167:bff9dbad 897dd4 mov dword ptr [ebp-2c],edi
0167:bff9dbb0 f60702 test byte ptr [edi],02
0167:bff9dbb3 0f85d7020000 jnz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbb9 8b869c000000 mov eax,dword ptr [esi+0000009c]
0167:bff9dbbf 85c0 test eax,eax
0167:bff9dbc1 741a jz bff9dbdd = KERNEL32.DLL:.text+0x24bdd
0167:bff9dbc3 ff7508 push dword ptr [ebp+08]
0167:bff9dbc6 ffd0 call eax
KERNEL32.DLL:.text+0x24bc8:
*0167:bff9dbc8 8945e0 mov dword ptr [ebp-20],eax
0167:bff9dbcb 83f801 cmp eax,+01
0167:bff9dbce 0f84bc020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbd4 83f8ff cmp eax,-01
0167:bff9dbd7 0f84b3020000 jz bff9de90 = KERNEL32.DLL:.text+0x24e90
0167:bff9dbdd f686b600000002 test byte ptr [esi+000000b6],02
0167:bff9dbe4 740a jz bff9dbf0 = KERNEL32.DLL:.text+0x24bf0
0167:bff9dbe6 b801000000 mov eax,00000001
0167:bff9dbeb e9a3020000 jmp bff9de93 = KERNEL32.DLL:.text+0x24e93
0167:bff9dbf0 f6462008 test byte ptr [esi+20],08
0167:bff9dbf4 0f858e010000 jnz bff9dd88 = KERNEL32.DLL:.text+0x24d88
--------------------
006af6dc 006af9cc -> 70 fb 6a 00 a4 fa 6a 00 f8 f9 6a 00 49 68 f7 bf p.j...j...j.Ih..
006af6e0 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
006af6e4 007d0f80 -> 15 8e fa ff ff ff ff ff 02 00 00 00 02 00 00 00 ................
006af6e8 00000000
006af6ec 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af6f0 00000000
006af6f4 8232c320 -> d0 21 30 82 c4 bd 32 82 00 00 00 00 3e 58 f3 ff .!0...2.....>X..
006af6f8 006af740 -> e4 27 30 82 40 48 80 c1 6c f7 6a 00 0e a1 f7 bf .'0.@H..l.j.....
006af6fc c73e636f -> 00 55 6e 72 65 67 69 73 74 65 72 48 6f 74 4b 65 .UnregisterHotKe
006af700 0000016f
006af704 8232c320 -> d0 21 30 82 c4 bd 32 82 00 00 00 00 3e 58 f3 ff .!0...2.....>X..
006af708 000051e0
006af70c 006af720 -> b8 19 f7 bf 60 c7 00 00 54 f9 6a 00 6d 18 f7 bf ....`...T.j.m...
006af710 bff940a8 = KERNEL32.DLL:.text+0x1b0a8
--------------------
0167:bff94086 0fb74316 movzx eax,word ptr [ebx+16]
0167:bff9408a 50 push eax
0167:bff9408b ff7318 push dword ptr [ebx+18]
0167:bff9408e e84906feff call bff746dc = KERNEL32.DLL:_FREQASM+0x36dc
0167:bff94093 e920fbffff jmp bff93bb8 = KERNEL32.DLL:.text+0x1abb8
0167:bff94098 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff9409c 50 push eax
0167:bff9409d ff7318 push dword ptr [ebx+18]
0167:bff940a0 ff731c push dword ptr [ebx+1c]
0167:bff940a3 e83405feff call bff745dc = KERNEL32.DLL:_FREQASM+0x35dc
KERNEL32.DLL:.text+0x1b0a8:
*0167:bff940a8 e91bfbffff jmp bff93bc8 = KERNEL32.DLL:.text+0x1abc8
0167:bff940ad 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff940b1 50 push eax
0167:bff940b2 ff7318 push dword ptr [ebx+18]
0167:bff940b5 ff731c push dword ptr [ebx+1c]
0167:bff940b8 e8575d0000 call bff99e14 = KERNEL32.DLL:.text+0x20e14
0167:bff940bd 8bd0 mov edx,eax
0167:bff940bf c1c210 rol edx,10
0167:bff940c2 e901fbffff jmp bff93bc8 = KERNEL32.DLL:.text+0x1abc8
0167:bff940c7 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff940cb 50 push eax
--------------------
006af714 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006af718 00000f90
006af71c 00000000
006af720 bff719b8 = KERNEL32.DLL:_FREQASM+0x9b8
--------------------
0167:bff71991 51 push ecx
0167:bff71992 c1cf10 ror edi,10
0167:bff71995 6664873d0e000000 xchg word ptr fs:[0000000e],di
0167:bff7199d 57 push edi
0167:bff7199e 686d18f7bf push bff7186d
0167:bff719a3 64ff3500000000 push dword ptr fs:[00000000]
0167:bff719aa 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff719b1 55 push ebp
0167:bff719b2 8d6c24fc lea ebp,[esp-04]
0167:bff719b6 ffd2 call edx
KERNEL32.DLL:_FREQASM+0x9b8:
*0167:bff719b8 5d pop ebp
0167:bff719b9 0fb6c9 movzx ecx,cl
0167:bff719bc 648f0500000000 pop dword ptr fs:[00000000]
0167:bff719c3 8d642404 lea esp,[esp+04]
0167:bff719c7 5f pop edi
0167:bff719c8 6664893d0e000000 mov word ptr fs:[0000000e],di
0167:bff719d0 5b pop ebx
0167:bff719d1 660fb22424 lss sp,dword ptr [esp]
0167:bff719d6 6664891d1e000000 mov word ptr fs:[0000001e],bx
0167:bff719de 5b pop ebx
0167:bff719df 0bdb or ebx,ebx
--------------------
006af724 0000c760
006af728 006af954 -> 8e c9 00 00 8c f9 6a 00 64 a0 d5 81 e0 0a 5a 82 ......j.d.....Z.
006af72c bff7186d = KERNEL32.DLL:_FREQASM+0x86d
--------------------
0167:bff7183d 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff71843 e8b3290000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
0167:bff71848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff
0167:bff71852 ff5326 call dword ptr [ebx+26]
0167:bff71855 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff7185b e857290000 call bff741b7 = KERNEL32.DLL:_FREQASM+0x31b7
0167:bff71860 6664ff051e000000 inc word ptr fs:[0000001e]
0167:bff71868 b114 mov cl,14
0167:bff7186a 8be5 mov esp,ebp
0167:bff7186c c3 retd
KERNEL32.DLL:_FREQASM+0x86d:
*0167:bff7186d 8b442404 mov eax,dword ptr [esp+04]
0167:bff71871 f7400406000000 test dword ptr [eax+04],00000006
0167:bff71878 7419 jz bff71893 = KERNEL32.DLL:_FREQASM+0x893
0167:bff7187a 8b442408 mov eax,dword ptr [esp+08]
0167:bff7187e 8178046d18f7bf cmp dword ptr [eax+04],bff7186d
0167:bff71885 750c jnz bff71893 = KERNEL32.DLL:_FREQASM+0x893
0167:bff71887 668b4808 mov cx,word ptr [eax+08]
0167:bff7188b 6664890d0e000000 mov word ptr fs:[0000000e],cx
0167:bff71893 b801000000 mov eax,00000001
0167:bff71898 c3 retd
0167:bff71899 9d popfd
--------------------
006af730 c73e636f -> 00 55 6e 72 65 67 69 73 74 65 72 48 6f 74 4b 65 .UnregisterHotKe
006af734 00000000
006af738 006af76c -> 94 f7 6a 00 9c 46 f7 bf 00 40 2f 82 00 00 00 00 ..j..F...@/.....
006af73c 81d0e7e8 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af740 823027e4 -> 39 00 00 a0 4c 64 30 82 00 71 30 82 00 00 00 00 9...Ld0..q0.....
006af744 c1804840 -> 01 00 00 00 20 a0 d5 81 50 b0 d6 81 20 83 6c e6 .... ...P... .l.
006af748 006af76c -> 94 f7 6a 00 9c 46 f7 bf 00 40 2f 82 00 00 00 00 ..j..F...@/.....
006af74c bff7a10e = KERNEL32.DLL:.text+0x110e
--------------------
0167:bff7a0ea fa cli
0167:bff7a0eb bf4ec3fabf mov edi,bffac34e
0167:bff7a0f0 8b442404 mov eax,dword ptr [esp+04]
0167:bff7a0f4 0fb64870 movzx ecx,byte ptr [eax+70]
0167:bff7a0f8 0b4c2408 or ecx,dword ptr [esp+08]
0167:bff7a0fc f6c101 test cl,01
0167:bff7a0ff 750d jnz bff7a10e = KERNEL32.DLL:.text+0x110e
0167:bff7a101 ff704c push dword ptr [eax+4c]
0167:bff7a104 e8e5a1ffff call bff742ee = KERNEL32.DLL:_FREQASM+0x32ee
0167:bff7a109 e83e010000 call bff7a24c = KERNEL32.DLL:.text+0x124c
KERNEL32.DLL:.text+0x110e:
*0167:bff7a10e c20800 retd 0008
0167:bff7a111 53 push ebx
0167:bff7a112 56 push esi
0167:bff7a113 8b742410 mov esi,dword ptr [esp+10]
0167:bff7a117 57 push edi
0167:bff7a118 8b7c2418 mov edi,dword ptr [esp+18]
0167:bff7a11c 55 push ebp
0167:bff7a11d ba00001000 mov edx,00100000
0167:bff7a122 8d1c3e lea ebx,[esi+edi]
0167:bff7a125 8b03 mov eax,dword ptr [ebx]
0167:bff7a127 a801 test al,01
--------------------
006af750 bff7b326 = KERNEL32.DLL:.text+0x2326
--------------------
0167:bff7b309 8b00 mov eax,dword ptr [eax]
0167:bff7b30b 894304 mov dword ptr [ebx+04],eax
0167:bff7b30e 6800020000 push 00000200
0167:bff7b313 51 push ecx
0167:bff7b314 ff75fc push dword ptr [ebp-04]
0167:bff7b317 56 push esi
0167:bff7b318 e8f4edffff call bff7a111 = KERNEL32.DLL:.text+0x1111
0167:bff7b31d ff750c push dword ptr [ebp+0c]
0167:bff7b320 56 push esi
0167:bff7b321 e8caedffff call bff7a0f0 = KERNEL32.DLL:.text+0x10f0
KERNEL32.DLL:.text+0x2326:
*0167:bff7b326 b801000000 mov eax,00000001
0167:bff7b32b 5f pop edi
0167:bff7b32c 5e pop esi
0167:bff7b32d 5b pop ebx
0167:bff7b32e 8be5 mov esp,ebp
0167:bff7b330 5d pop ebp
0167:bff7b331 c20c00 retd 000c
0167:bff7b334 55 push ebp
0167:bff7b335 8bec mov ebp,esp
0167:bff7b337 83ec04 sub esp,+04
0167:bff7b33a a1e49cfcbf mov eax,dword ptr [bffc9ce4]
--------------------
006af754 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af758 00000000
006af75c c7c6636f -> db d9 0f fb 5a 88 bc a5 40 c6 ea bd f8 a3 ee ce ....Z...@.......
006af760 0000016f
006af764 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006af768 823027e4 -> 39 00 00 a0 4c 64 30 82 00 71 30 82 00 00 00 00 9...Ld0..q0.....
006af76c 006af794 -> 7e b3 99 02 4c 0c 00 00 82 00 00 00 00 00 00 00 ....L...........
006af770 bff7469c = KERNEL32.DLL:_FREQASM+0x369c
--------------------
0167:bff74676 7417 jz bff7468f = KERNEL32.DLL:_FREQASM+0x368f
0167:bff74678 816b7000100000 sub dword ptr [ebx+70],00001000
0167:bff7467f 66c70419ffff mov word ptr [ecx+ebx],ffff
0167:bff74685 83e902 sub ecx,+02
0167:bff74688 2d00100000 sub eax,00001000
0167:bff7468d eba7 jmp bff74636 = KERNEL32.DLL:_FREQASM+0x3636
0167:bff7468f ff75f8 push dword ptr [ebp-08]
0167:bff74692 6a00 push +00
0167:bff74694 ff737c push dword ptr [ebx+7c]
0167:bff74697 e871040000 call bff74b0d = KERNEL32.DLL:_FREQASM+0x3b0d
KERNEL32.DLL:_FREQASM+0x369c:
*0167:bff7469c 5b pop ebx
0167:bff7469d 5f pop edi
0167:bff7469e 5e pop esi
0167:bff7469f c9 leave
0167:bff746a0 c20c00 retd 000c
0167:bff746a3 90 nop
0167:bff746a4 55 push ebp
0167:bff746a5 8bec mov ebp,esp
0167:bff746a7 56 push esi
0167:bff746a8 57 push edi
0167:bff746a9 53 push ebx
--------------------
006af774 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af778 00000000
006af77c 823027e8 -> 4c 64 30 82 00 71 30 82 00 00 00 00 00 00 2a 00 Ld0..q0.......*.
006af780 006af7c8 -> 00 00 46 02 20 00 14 00 00 00 e8 e7 02 00 67 06 ..F. .........g.
006af784 c7c6636f -> db d9 0f fb 5a 88 bc a5 40 c6 ea bd f8 a3 ee ce ....Z...@.......
006af788 0000016f
006af78c bff55bd6 = USER32.DLL:.text+0x4bd6
--------------------
0167:bff55bb4 d1e1 shl ecx,EvIa
0167:bff55bb6 c1ea04 shr edx,04
0167:bff55bb9 c1e202 shl edx,02
0167:bff55bbc 8b82a15af5bf mov eax,dword ptr [edx+bff55aa1]
0167:bff55bc2 d3e8 shr eax,cl
0167:bff55bc4 83e003 and eax,+03
0167:bff55bc7 c1e002 shl eax,02
0167:bff55bca c20400 retd 0004
0167:bff55bcd ff742408 push dword ptr [esp+08]
0167:bff55bd1 e8cbffffff call bff55ba1 = USER32.DLL:.text+0x4ba1
USER32.DLL:.text+0x4bd6:
*0167:bff55bd6 8bd0 mov edx,eax
0167:bff55bd8 33c0 xor eax,eax
0167:bff55bda 2effa2e15bf5bf jmp dword ptr ss:[edx+bff55be1]
0167:bff55be1 f5 clc
0167:bff55be2 5b pop ebx
0167:bff55be3 f5 clc
0167:bff55be4 bff45bf5bf mov edi,bff55bf4
0167:bff55be9 f1 int 1
0167:bff55bea 5b pop ebx
0167:bff55beb f5 clc
0167:bff55bec bff85bf5bf mov edi,bff55bf8
--------------------
006af790 00000082
006af794 0299b37e
006af798 00000c4c
006af79c 00000082
006af7a0 00000000
...
006af7a8 006af968 -> 00 00 00 00 00 00 00 00 e0 f6 6a 00 f8 00 5b 00 ..........j...[.
006af7ac 0299b395
006af7b0 0299b39d
006af7b4 006af934 -> 04 71 30 82 00 40 2e 82 50 f9 6a 00 a8 40 f9 bf .q0..@..P.j..@..
006af7b8 0000c9a2
006af7bc 006af97e -> fc bf a0 92 f7 bf ff ff ff ff a0 f9 6a 00 71 ed ............j.q.
006af7c0 636fc7c6
006af7c4 00000147
006af7c8 02460000
006af7cc 00140020
006af7d0 e7e80000 -> 00 00 00 80 b4 40 b0 50 24 fc ba f8 0c 66 ef ba .....@.P$....f..
006af7d4 06670002
006af7d8 b0130000 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af7dc 00000147
006af7e0 63ca0000
006af7e4 680463c4
006af7e8 bff713e2 = KERNEL32.DLL:_FREQASM+0x3e2
--------------------
0167:bff713c5 c20400 retd 0004
0167:bff713c8 33c0 xor eax,eax
0167:bff713ca ebf7 jmp bff713c3 = KERNEL32.DLL:_FREQASM+0x3c3
0167:bff713cc ebfa jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713ce ebf8 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d0 ebf6 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d2 ebf4 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d4 8b442404 mov eax,dword ptr [esp+04]
0167:bff713d8 8f0424 pop dword ptr [esp]
0167:bff713db 2eff1d3497fcbf call fword ptr ss:[bffc9734]
KERNEL32.DLL:_FREQASM+0x3e2:
*0167:bff713e2 b801000100 mov eax,00010001
0167:bff713e7 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713ee b843002a00 mov eax,002a0043
0167:bff713f3 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713fa 83c414 add esp,+14
0167:bff713fd 0fb7c8 movzx ecx,ax
0167:bff71400 0fa4d310 shld ebx,edx,10
0167:bff71404 c0e302 shl bl,02
0167:bff71407 6681ea0010 sub dx,1000
0167:bff7140c 0fbfc2 movsx eax,dx
0167:bff7140f e9d1000000 jmp bff714e5 = KERNEL32.DLL:_FREQASM+0x4e5
--------------------
006af7ec 00000167
006af7f0 bff7a185 = KERNEL32.DLL:.text+0x1185
--------------------
0167:bff7a16a 7202 jc bff7a16e = KERNEL32.DLL:.text+0x116e
0167:bff7a16c 8bc2 mov eax,edx
0167:bff7a16e 2bc1 sub eax,ecx
0167:bff7a170 85c0 test eax,eax
0167:bff7a172 7e11 jle bff7a185 = KERNEL32.DLL:.text+0x1185
0167:bff7a174 6800000020 push 20000000
0167:bff7a179 50 push eax
0167:bff7a17a 51 push ecx
0167:bff7a17b 6802000100 push 00010002
0167:bff7a180 e84f72ffff call bff713d4 = KERNEL32.DLL!1
KERNEL32.DLL:.text+0x1185:
*0167:bff7a185 8b4c2414 mov ecx,dword ptr [esp+14]
0167:bff7a189 897500 mov dword ptr [ebp],esi
0167:bff7a18c 83c108 add ecx,+08
0167:bff7a18f 800b02 or byte ptr [ebx],02
0167:bff7a192 3939 cmp dword ptr [ecx],edi
0167:bff7a194 7307 jnc bff7a19d = KERNEL32.DLL:.text+0x119d
0167:bff7a196 83c110 add ecx,+10
0167:bff7a199 3939 cmp dword ptr [ecx],edi
0167:bff7a19b 72f9 jc bff7a196 = KERNEL32.DLL:.text+0x1196
0167:bff7a19d 83c104 add ecx,+04
0167:bff7a1a0 8bd1 mov edx,ecx
--------------------
006af7f4 00000506
006af7f8 00000013
006af7fc 20000000
006af800 006af834 -> f7 41 f7 bf 00 00 00 00 d6 5b f5 bf 82 00 00 00 .A.......[......
006af804 00505e54
006af808 00480000 -> 00 10 10 00 00 00 1d 03 20 00 00 00 01 00 00 a0 ........ .......
006af80c 03273220 -> f9 45 00 a0 08 00 1d 03 84 2d 26 03 a0 03 02 01 .E.......-&.....
006af810 bff7b31d = KERNEL32.DLL:.text+0x231d
--------------------
0167:bff7b302 8b10 mov edx,dword ptr [eax]
0167:bff7b304 895a08 mov dword ptr [edx+08],ebx
0167:bff7b307 8b1f mov ebx,dword ptr [edi]
0167:bff7b309 8b00 mov eax,dword ptr [eax]
0167:bff7b30b 894304 mov dword ptr [ebx+04],eax
0167:bff7b30e 6800020000 push 00000200
0167:bff7b313 51 push ecx
0167:bff7b314 ff75fc push dword ptr [ebp-04]
0167:bff7b317 56 push esi
0167:bff7b318 e8f4edffff call bff7a111 = KERNEL32.DLL:.text+0x1111
KERNEL32.DLL:.text+0x231d:
*0167:bff7b31d ff750c push dword ptr [ebp+0c]
0167:bff7b320 56 push esi
0167:bff7b321 e8caedffff call bff7a0f0 = KERNEL32.DLL:.text+0x10f0
0167:bff7b326 b801000000 mov eax,00000001
0167:bff7b32b 5f pop edi
0167:bff7b32c 5e pop esi
0167:bff7b32d 5b pop ebx
0167:bff7b32e 8be5 mov esp,ebp
0167:bff7b330 5d pop ebp
0167:bff7b331 c20c00 retd 000c
0167:bff7b334 55 push ebp
--------------------
006af814 00480000 -> 00 10 10 00 00 00 1d 03 20 00 00 00 01 00 00 a0 ........ .......
006af818 bff713e2 = KERNEL32.DLL:_FREQASM+0x3e2
--------------------
0167:bff713c5 c20400 retd 0004
0167:bff713c8 33c0 xor eax,eax
0167:bff713ca ebf7 jmp bff713c3 = KERNEL32.DLL:_FREQASM+0x3c3
0167:bff713cc ebfa jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713ce ebf8 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d0 ebf6 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d2 ebf4 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d4 8b442404 mov eax,dword ptr [esp+04]
0167:bff713d8 8f0424 pop dword ptr [esp]
0167:bff713db 2eff1d3497fcbf call fword ptr ss:[bffc9734]
KERNEL32.DLL:_FREQASM+0x3e2:
*0167:bff713e2 b801000100 mov eax,00010001
0167:bff713e7 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713ee b843002a00 mov eax,002a0043
0167:bff713f3 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713fa 83c414 add esp,+14
0167:bff713fd 0fb7c8 movzx ecx,ax
0167:bff71400 0fa4d310 shld ebx,edx,10
0167:bff71404 c0e302 shl bl,02
0167:bff71407 6681ea0010 sub dx,1000
0167:bff7140c 0fbfc2 movsx eax,dx
0167:bff7140f e9d1000000 jmp bff714e5 = KERNEL32.DLL:_FREQASM+0x4e5
--------------------
006af81c 00000167
006af820 bff7a185 = KERNEL32.DLL:.text+0x1185
--------------------
0167:bff7a16a 7202 jc bff7a16e = KERNEL32.DLL:.text+0x116e
0167:bff7a16c 8bc2 mov eax,edx
0167:bff7a16e 2bc1 sub eax,ecx
0167:bff7a170 85c0 test eax,eax
0167:bff7a172 7e11 jle bff7a185 = KERNEL32.DLL:.text+0x1185
0167:bff7a174 6800000020 push 20000000
0167:bff7a179 50 push eax
0167:bff7a17a 51 push ecx
0167:bff7a17b 6802000100 push 00010002
0167:bff7a180 e84f72ffff call bff713d4 = KERNEL32.DLL!1
KERNEL32.DLL:.text+0x1185:
*0167:bff7a185 8b4c2414 mov ecx,dword ptr [esp+14]
0167:bff7a189 897500 mov dword ptr [ebp],esi
0167:bff7a18c 83c108 add ecx,+08
0167:bff7a18f 800b02 or byte ptr [ebx],02
0167:bff7a192 3939 cmp dword ptr [ecx],edi
0167:bff7a194 7307 jnc bff7a19d = KERNEL32.DLL:.text+0x119d
0167:bff7a196 83c110 add ecx,+10
0167:bff7a199 3939 cmp dword ptr [ecx],edi
0167:bff7a19b 72f9 jc bff7a196 = KERNEL32.DLL:.text+0x1196
0167:bff7a19d 83c104 add ecx,+04
0167:bff7a1a0 8bd1 mov edx,ecx
--------------------
006af824 00000487
006af828 0000007f
006af82c 20000000
006af830 006af864 -> c4 88 99 02 cc 88 99 02 98 f8 6a 00 06 c9 00 00 ..........j.....
006af834 bff741f7 = KERNEL32.DLL:_FREQASM+0x31f7
--------------------
0167:bff741dd 51 push ecx
0167:bff741de 52 push edx
0167:bff741df 681d002a00 push 002a001d
0167:bff741e4 e8ebd1ffff call bff713d4 = KERNEL32.DLL!1
0167:bff741e9 59 pop ecx
0167:bff741ea 5a pop edx
0167:bff741eb ebe8 jmp bff741d5 = KERNEL32.DLL:_FREQASM+0x31d5
0167:bff741ed 8b542404 mov edx,dword ptr [esp+04]
0167:bff741f1 50 push eax
0167:bff741f2 e804000000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
KERNEL32.DLL:_FREQASM+0x31f7:
*0167:bff741f7 58 pop eax
0167:bff741f8 c20400 retd 0004
0167:bff741fb 833dec9cfcbf01 cmp dword ptr [bffc9cec],+01
0167:bff74202 7c32 jl bff74236 = KERNEL32.DLL:_FREQASM+0x3236
0167:bff74204 3b157094fcbf cmp edx,dword ptr [bffc9470]
0167:bff7420a 7506 jnz bff74212 = KERNEL32.DLL:_FREQASM+0x3212
0167:bff7420c 837a0401 cmp dword ptr [edx+04],+01
0167:bff74210 7426 jz bff74238 = KERNEL32.DLL:_FREQASM+0x3238
0167:bff74212 ff4a04 dec dword ptr [edx+04]
0167:bff74215 754a jnz bff74261 = KERNEL32.DLL:_FREQASM+0x3261
0167:bff74217 c7420800000000 mov dword ptr [edx+08],00000000
--------------------
006af838 00000000
006af83c bff55bd6 = USER32.DLL:.text+0x4bd6
--------------------
0167:bff55bb4 d1e1 shl ecx,EvIa
0167:bff55bb6 c1ea04 shr edx,04
0167:bff55bb9 c1e202 shl edx,02
0167:bff55bbc 8b82a15af5bf mov eax,dword ptr [edx+bff55aa1]
0167:bff55bc2 d3e8 shr eax,cl
0167:bff55bc4 83e003 and eax,+03
0167:bff55bc7 c1e002 shl eax,02
0167:bff55bca c20400 retd 0004
0167:bff55bcd ff742408 push dword ptr [esp+08]
0167:bff55bd1 e8cbffffff call bff55ba1 = USER32.DLL:.text+0x4ba1
USER32.DLL:.text+0x4bd6:
*0167:bff55bd6 8bd0 mov edx,eax
0167:bff55bd8 33c0 xor eax,eax
0167:bff55bda 2effa2e15bf5bf jmp dword ptr ss:[edx+bff55be1]
0167:bff55be1 f5 clc
0167:bff55be2 5b pop ebx
0167:bff55be3 f5 clc
0167:bff55be4 bff45bf5bf mov edi,bff55bf4
0167:bff55be9 f1 int 1
0167:bff55bea 5b pop ebx
0167:bff55beb f5 clc
0167:bff55bec bff85bf5bf mov edi,bff55bf8
--------------------
006af840 00000082
006af844 bfbcb7a7 = COMCTL32.DLL:.text+0x5a7a7
--------------------
0167:bfbcb785 e875f8ffff call bfbcafff = COMCTL32.DLL:.text+0x59fff
0167:bfbcb78a 8bc6 mov eax,esi
0167:bfbcb78c 5e pop esi
0167:bfbcb78d c9 leave
0167:bfbcb78e c23000 retd 0030
0167:bfbcb791 ff742410 push dword ptr [esp+10]
0167:bfbcb795 ff742410 push dword ptr [esp+10]
0167:bfbcb799 ff742410 push dword ptr [esp+10]
0167:bfbcb79d ff742410 push dword ptr [esp+10]
0167:bfbcb7a1 ff150015b7bf call dword ptr [bfb71500] -> USER32.DLL!DefWindowProcA
COMCTL32.DLL:.text+0x5a7a7:
*0167:bfbcb7a7 c21000 retd 0010
0167:bfbcb7aa ff742404 push dword ptr [esp+04]
0167:bfbcb7ae ff150415b7bf call dword ptr [bfb71504] -> USER32.DLL!DispatchMessageA
0167:bfbcb7b4 c20400 retd 0004
0167:bfbcb7b7 55 push ebp
0167:bfbcb7b8 8bec mov ebp,esp
0167:bfbcb7ba 81ec1c010000 sub esp,0000011c
0167:bfbcb7c0 53 push ebx
0167:bfbcb7c1 8b5d14 mov ebx,dword ptr [ebp+14]
0167:bfbcb7c4 33c0 xor eax,eax
0167:bfbcb7c6 56 push esi
--------------------
006af848 00000c6c
006af84c 00000082
006af850 00000000
...
006af858 bfbc2a0f = COMCTL32.DLL:.text+0x51a0f
--------------------
0167:bfbc29f2 e82a96fcff call bfb8c021 = COMCTL32.DLL:.text+0x1b021
0167:bfbc29f7 85c0 test eax,eax
0167:bfbc29f9 7405 jz bfbc2a00 = COMCTL32.DLL:.text+0x51a00
0167:bfbc29fb 8b450c mov eax,dword ptr [ebp+0c]
0167:bfbc29fe eb0f jmp bfbc2a0f = COMCTL32.DLL:.text+0x51a0f
0167:bfbc2a00 ff7514 push dword ptr [ebp+14]
0167:bfbc2a03 ff7510 push dword ptr [ebp+10]
0167:bfbc2a06 56 push esi
0167:bfbc2a07 ff7508 push dword ptr [ebp+08]
0167:bfbc2a0a e8828d0000 call bfbcb791 = COMCTL32.DLL:.text+0x5a791
COMCTL32.DLL:.text+0x51a0f:
*0167:bfbc2a0f 5f pop edi
0167:bfbc2a10 5e pop esi
0167:bfbc2a11 5b pop ebx
0167:bfbc2a12 c9 leave
0167:bfbc2a13 c21000 retd 0010
0167:bfbc2a16 b800020000 mov eax,00000200
0167:bfbc2a1b 3bf0 cmp esi,eax
0167:bfbc2a1d 0f87b8f9ffff ja bfbc23db = COMCTL32.DLL:.text+0x513db
0167:bfbc2a23 0f848df9ffff jz bfbc23b6 = COMCTL32.DLL:.text+0x513b6
0167:bfbc2a29 b828010000 mov eax,00000128
0167:bfbc2a2e 3bf0 cmp esi,eax
--------------------
006af85c 00000c3c
006af860 00000000
006af864 029988c4
006af868 029988cc
006af86c 006af898 -> 3c 0c 00 00 82 00 00 00 00 00 00 00 00 00 00 00 <...............
006af870 0000c906
006af874 006af8e2 -> 6a 00 e8 e7 d0 81 00 71 30 82 40 48 80 c1 14 f9 j......q0.@H....
006af878 00000000
...
006af880 bff741f7 = KERNEL32.DLL:_FREQASM+0x31f7
--------------------
0167:bff741dd 51 push ecx
0167:bff741de 52 push edx
0167:bff741df 681d002a00 push 002a001d
0167:bff741e4 e8ebd1ffff call bff713d4 = KERNEL32.DLL!1
0167:bff741e9 59 pop ecx
0167:bff741ea 5a pop edx
0167:bff741eb ebe8 jmp bff741d5 = KERNEL32.DLL:_FREQASM+0x31d5
0167:bff741ed 8b542404 mov edx,dword ptr [esp+04]
0167:bff741f1 50 push eax
0167:bff741f2 e804000000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
KERNEL32.DLL:_FREQASM+0x31f7:
*0167:bff741f7 58 pop eax
0167:bff741f8 c20400 retd 0004
0167:bff741fb 833dec9cfcbf01 cmp dword ptr [bffc9cec],+01
0167:bff74202 7c32 jl bff74236 = KERNEL32.DLL:_FREQASM+0x3236
0167:bff74204 3b157094fcbf cmp edx,dword ptr [bffc9470]
0167:bff7420a 7506 jnz bff74212 = KERNEL32.DLL:_FREQASM+0x3212
0167:bff7420c 837a0401 cmp dword ptr [edx+04],+01
0167:bff74210 7426 jz bff74238 = KERNEL32.DLL:_FREQASM+0x3238
0167:bff74212 ff4a04 dec dword ptr [edx+04]
0167:bff74215 754a jnz bff74261 = KERNEL32.DLL:_FREQASM+0x3261
0167:bff74217 c7420800000000 mov dword ptr [edx+08],00000000
--------------------
006af884 00000008
006af888 bff7698b = KERNEL32.DLL:_FREQASM+0x598b
--------------------
0167:bff76969 7512 jnz bff7697d = KERNEL32.DLL:_FREQASM+0x597d
0167:bff7696b a801 test al,01
0167:bff7696d 7520 jnz bff7698f = KERNEL32.DLL:_FREQASM+0x598f
0167:bff7696f 8b15bca0fcbf mov edx,dword ptr [bffca0bc]
0167:bff76975 8911 mov dword ptr [ecx],edx
0167:bff76977 890dbca0fcbf mov dword ptr [bffca0bc],ecx
0167:bff7697d a804 test al,04
0167:bff7697f 75d6 jnz bff76957 = KERNEL32.DLL:_FREQASM+0x5957
0167:bff76981 68c094fcbf push bffc94c0
0167:bff76986 e862d8ffff call bff741ed = KERNEL32.DLL!98
KERNEL32.DLL:_FREQASM+0x598b:
*0167:bff7698b c9 leave
0167:bff7698c c20400 retd 0004
0167:bff7698f 50 push eax
0167:bff76990 51 push ecx
0167:bff76991 e8f1640000 call bff7ce87 = KERNEL32.DLL:.text+0x3e87
0167:bff76996 58 pop eax
0167:bff76997 ebe4 jmp bff7697d = KERNEL32.DLL:_FREQASM+0x597d
0167:bff76999 64ff3500000000 push dword ptr fs:[00000000]
0167:bff769a0 55 push ebp
0167:bff769a1 8d4c2404 lea ecx,[esp+04]
0167:bff769a5 16 push ss
--------------------
006af88c bffc94c0 = KERNEL32.DLL:.data+0x4c0
-> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af890 006af8b0 -> c4 f8 6a 00 26 18 f7 bf 00 00 00 00 00 00 00 00 ..j.&...........
006af894 bff7363b = KERNEL32.DLL:_FREQASM+0x263b
--------------------
0167:bff7361f 65d16e04 shr dword ptr gs:[esi+04],EvIa
0167:bff73623 7222 jc bff73647 = KERNEL32.DLL:_FREQASM+0x2647
0167:bff73625 65ff32 push dword ptr gs:[edx]
0167:bff73628 8d5204 lea edx,[edx+04]
0167:bff7362b e2f2 loop bff7361f = KERNEL32.DLL:_FREQASM+0x261f
0167:bff7362d 8bfc mov edi,esp
0167:bff7362f 33c0 xor eax,eax
0167:bff73631 65394608 cmp dword ptr gs:[esi+08],eax
0167:bff73635 7404 jz bff7363b = KERNEL32.DLL:_FREQASM+0x263b
0167:bff73637 65ff5608 call dword ptr gs:[esi+08]
KERNEL32.DLL:_FREQASM+0x263b:
*0167:bff7363b 8be7 mov esp,edi
0167:bff7363d 33c9 xor ecx,ecx
0167:bff7363f 8ee9 mov gs,cx
0167:bff73641 5f pop edi
0167:bff73642 5e pop esi
0167:bff73643 c9 leave
0167:bff73644 c20c00 retd 000c
0167:bff73647 52 push edx
0167:bff73648 51 push ecx
0167:bff73649 33c0 xor eax,eax
0167:bff7364b 48 dec eax
--------------------
006af898 00000c3c
006af89c 00000082
006af8a0 00000000
...
006af8a8 c8e033c7 -> 96 a1 21 f3 2a ac 3a b2 12 78 dd 72 04 19 1d f3 ..!.*.:..x.r....
006af8ac 0000016f
006af8b0 006af8c4 -> b8 19 f7 bf 00 c9 00 00 a0 fc 6a 00 6d 18 f7 bf ..........j.m...
006af8b4 bff71826 = KERNEL32.DLL:_FREQASM+0x826
--------------------
0167:bff717ff 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff
0167:bff71809 c3 retd
0167:bff7180a 52 push edx
0167:bff7180b 50 push eax
0167:bff7180c a1e89cfcbf mov eax,dword ptr [bffc9ce8]
0167:bff71811 8b00 mov eax,dword ptr [eax]
0167:bff71813 39059894fcbf cmp dword ptr [bffc9498],eax
0167:bff71819 7413 jz bff7182e = KERNEL32.DLL:_FREQASM+0x82e
0167:bff7181b 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff71821 e891290000 call bff741b7 = KERNEL32.DLL:_FREQASM+0x31b7
KERNEL32.DLL:_FREQASM+0x826:
*0167:bff71826 6664ff051e000000 inc word ptr fs:[0000001e]
0167:bff7182e 58 pop eax
0167:bff7182f 5a pop edx
0167:bff71830 c3 retd
0167:bff71831 ff7316 push dword ptr [ebx+16]
0167:bff71834 ff731a push dword ptr [ebx+1a]
0167:bff71837 ff731e push dword ptr [ebx+1e]
0167:bff7183a ff7322 push dword ptr [ebx+22]
0167:bff7183d 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff71843 e8b3290000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
0167:bff71848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff
--------------------
006af8b8 00000000
...
006af8c0 bff9440c = KERNEL32.DLL:.text+0x1b40c
--------------------
0167:bff943e8 c1c210 rol edx,10
0167:bff943eb e9c8f7ffff jmp bff93bb8 = KERNEL32.DLL:.text+0x1abb8
0167:bff943f0 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff943f4 50 push eax
0167:bff943f5 668b4318 mov ax,word ptr [ebx+18]
0167:bff943f9 50 push eax
0167:bff943fa ff731a push dword ptr [ebx+1a]
0167:bff943fd e8e3d3fdff call bff717e5 = KERNEL32.DLL!K32Thk1632Prolog
0167:bff94402 e8f6f1fdff call bff735fd = KERNEL32.DLL:_FREQASM+0x25fd
0167:bff94407 e8fed3fdff call bff7180a = KERNEL32.DLL!K32Thk1632Epilog
KERNEL32.DLL:.text+0x1b40c:
*0167:bff9440c 8bd0 mov edx,eax
0167:bff9440e c1c210 rol edx,10
0167:bff94411 e9aaf7ffff jmp bff93bc0 = KERNEL32.DLL:.text+0x1abc0
0167:bff94416 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff9441a 50 push eax
0167:bff9441b ff7318 push dword ptr [ebx+18]
0167:bff9441e e8c2d3fdff call bff717e5 = KERNEL32.DLL!K32Thk1632Prolog
0167:bff94423 e8e6f0fdff call bff7350e = KERNEL32.DLL:_FREQASM+0x250e
0167:bff94428 e8ddd3fdff call bff7180a = KERNEL32.DLL!K32Thk1632Epilog
0167:bff9442d e986f7ffff jmp bff93bb8 = KERNEL32.DLL:.text+0x1abb8
0167:bff94432 33c0 xor eax,eax
--------------------
006af8c4 bff719b8 = KERNEL32.DLL:_FREQASM+0x9b8
--------------------
0167:bff71991 51 push ecx
0167:bff71992 c1cf10 ror edi,10
0167:bff71995 6664873d0e000000 xchg word ptr fs:[0000000e],di
0167:bff7199d 57 push edi
0167:bff7199e 686d18f7bf push bff7186d
0167:bff719a3 64ff3500000000 push dword ptr fs:[00000000]
0167:bff719aa 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff719b1 55 push ebp
0167:bff719b2 8d6c24fc lea ebp,[esp-04]
0167:bff719b6 ffd2 call edx
KERNEL32.DLL:_FREQASM+0x9b8:
*0167:bff719b8 5d pop ebp
0167:bff719b9 0fb6c9 movzx ecx,cl
0167:bff719bc 648f0500000000 pop dword ptr fs:[00000000]
0167:bff719c3 8d642404 lea esp,[esp+04]
0167:bff719c7 5f pop edi
0167:bff719c8 6664893d0e000000 mov word ptr fs:[0000000e],di
0167:bff719d0 5b pop ebx
0167:bff719d1 660fb22424 lss sp,dword ptr [esp]
0167:bff719d6 6664891d1e000000 mov word ptr fs:[0000001e],bx
0167:bff719de 5b pop ebx
0167:bff719df 0bdb or ebx,ebx
--------------------
006af8c8 0000c900
006af8cc 006afca0 -> 00 00 00 00 00 80 ff 3f 00 00 00 00 00 00 00 ff .......?........
006af8d0 bff7186d = KERNEL32.DLL:_FREQASM+0x86d
--------------------
0167:bff7183d 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff71843 e8b3290000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
0167:bff71848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff
0167:bff71852 ff5326 call dword ptr [ebx+26]
0167:bff71855 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff7185b e857290000 call bff741b7 = KERNEL32.DLL:_FREQASM+0x31b7
0167:bff71860 6664ff051e000000 inc word ptr fs:[0000001e]
0167:bff71868 b114 mov cl,14
0167:bff7186a 8be5 mov esp,ebp
0167:bff7186c c3 retd
KERNEL32.DLL:_FREQASM+0x86d:
*0167:bff7186d 8b442404 mov eax,dword ptr [esp+04]
0167:bff71871 f7400406000000 test dword ptr [eax+04],00000006
0167:bff71878 7419 jz bff71893 = KERNEL32.DLL:_FREQASM+0x893
0167:bff7187a 8b442408 mov eax,dword ptr [esp+08]
0167:bff7187e 8178046d18f7bf cmp dword ptr [eax+04],bff7186d
0167:bff71885 750c jnz bff71893 = KERNEL32.DLL:_FREQASM+0x893
0167:bff71887 668b4808 mov cx,word ptr [eax+08]
0167:bff7188b 6664890d0e000000 mov word ptr fs:[0000000e],cx
0167:bff71893 b801000000 mov eax,00000001
0167:bff71898 c3 retd
0167:bff71899 9d popfd
--------------------
006af8d4 c8e033c7 -> 96 a1 21 f3 2a ac 3a b2 12 78 dd 72 04 19 1d f3 ..!.*.:..x.r....
006af8d8 00000000
006af8dc 636fc8e0
006af8e0 006af914 -> 3c f9 6a 00 9c 46 f7 bf 00 40 2f 82 00 00 00 00 <.j..F...@/.....
006af8e4 81d0e7e8 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af8e8 82307100 -> 39 00 00 a0 e4 27 30 82 54 ec 31 82 00 00 00 00 9....'0.T.1.....
006af8ec c1804840 -> 01 00 00 00 20 a0 d5 81 50 b0 d6 81 20 83 6c e6 .... ...P... .l.
006af8f0 006af914 -> 3c f9 6a 00 9c 46 f7 bf 00 40 2f 82 00 00 00 00 <.j..F...@/.....
006af8f4 bff7a10e = KERNEL32.DLL:.text+0x110e
--------------------
0167:bff7a0ea fa cli
0167:bff7a0eb bf4ec3fabf mov edi,bffac34e
0167:bff7a0f0 8b442404 mov eax,dword ptr [esp+04]
0167:bff7a0f4 0fb64870 movzx ecx,byte ptr [eax+70]
0167:bff7a0f8 0b4c2408 or ecx,dword ptr [esp+08]
0167:bff7a0fc f6c101 test cl,01
0167:bff7a0ff 750d jnz bff7a10e = KERNEL32.DLL:.text+0x110e
0167:bff7a101 ff704c push dword ptr [eax+4c]
0167:bff7a104 e8e5a1ffff call bff742ee = KERNEL32.DLL:_FREQASM+0x32ee
0167:bff7a109 e83e010000 call bff7a24c = KERNEL32.DLL:.text+0x124c
KERNEL32.DLL:.text+0x110e:
*0167:bff7a10e c20800 retd 0008
0167:bff7a111 53 push ebx
0167:bff7a112 56 push esi
0167:bff7a113 8b742410 mov esi,dword ptr [esp+10]
0167:bff7a117 57 push edi
0167:bff7a118 8b7c2418 mov edi,dword ptr [esp+18]
0167:bff7a11c 55 push ebp
0167:bff7a11d ba00001000 mov edx,00100000
0167:bff7a122 8d1c3e lea ebx,[esi+edi]
0167:bff7a125 8b03 mov eax,dword ptr [ebx]
0167:bff7a127 a801 test al,01
--------------------
006af8f8 bff7b326 = KERNEL32.DLL:.text+0x2326
--------------------
0167:bff7b309 8b00 mov eax,dword ptr [eax]
0167:bff7b30b 894304 mov dword ptr [ebx+04],eax
0167:bff7b30e 6800020000 push 00000200
0167:bff7b313 51 push ecx
0167:bff7b314 ff75fc push dword ptr [ebp-04]
0167:bff7b317 56 push esi
0167:bff7b318 e8f4edffff call bff7a111 = KERNEL32.DLL:.text+0x1111
0167:bff7b31d ff750c push dword ptr [ebp+0c]
0167:bff7b320 56 push esi
0167:bff7b321 e8caedffff call bff7a0f0 = KERNEL32.DLL:.text+0x10f0
KERNEL32.DLL:.text+0x2326:
*0167:bff7b326 b801000000 mov eax,00000001
0167:bff7b32b 5f pop edi
0167:bff7b32c 5e pop esi
0167:bff7b32d 5b pop ebx
0167:bff7b32e 8be5 mov esp,ebp
0167:bff7b330 5d pop ebp
0167:bff7b331 c20c00 retd 000c
0167:bff7b334 55 push ebp
0167:bff7b335 8bec mov ebp,esp
0167:bff7b337 83ec04 sub esp,+04
0167:bff7b33a a1e49cfcbf mov eax,dword ptr [bffc9ce4]
--------------------
006af8fc 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af900 00000000
006af904 c96c33c7 -> 12 76 68 70 6c 88 8e 91 11 a0 06 35 a0 80 ed e6 .vhpl......5....
006af908 0000016f
006af90c 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006af910 82307100 -> 39 00 00 a0 e4 27 30 82 54 ec 31 82 00 00 00 00 9....'0.T.1.....
006af914 006af93c -> 50 f9 6a 00 a8 40 f9 bf 00 40 2e 82 30 0b 00 00 P.j..@...@..0...
006af918 bff7469c = KERNEL32.DLL:_FREQASM+0x369c
--------------------
0167:bff74676 7417 jz bff7468f = KERNEL32.DLL:_FREQASM+0x368f
0167:bff74678 816b7000100000 sub dword ptr [ebx+70],00001000
0167:bff7467f 66c70419ffff mov word ptr [ecx+ebx],ffff
0167:bff74685 83e902 sub ecx,+02
0167:bff74688 2d00100000 sub eax,00001000
0167:bff7468d eba7 jmp bff74636 = KERNEL32.DLL:_FREQASM+0x3636
0167:bff7468f ff75f8 push dword ptr [ebp-08]
0167:bff74692 6a00 push +00
0167:bff74694 ff737c push dword ptr [ebx+7c]
0167:bff74697 e871040000 call bff74b0d = KERNEL32.DLL:_FREQASM+0x3b0d
KERNEL32.DLL:_FREQASM+0x369c:
*0167:bff7469c 5b pop ebx
0167:bff7469d 5f pop edi
0167:bff7469e 5e pop esi
0167:bff7469f c9 leave
0167:bff746a0 c20c00 retd 000c
0167:bff746a3 90 nop
0167:bff746a4 55 push ebp
0167:bff746a5 8bec mov ebp,esp
0167:bff746a7 56 push esi
0167:bff746a8 57 push edi
0167:bff746a9 53 push ebx
--------------------
006af91c 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006af920 00000000
006af924 82307104 -> e4 27 30 82 54 ec 31 82 00 00 00 00 00 00 2a 00 .'0.T.1.......*.
006af928 006af96e -> 00 00 e0 f6 6a 00 f8 00 5b 00 ec f9 6a 00 b4 05 ....j...[...j...
006af92c c96c33c7 -> 12 76 68 70 6c 88 8e 91 11 a0 06 35 a0 80 ed e6 .vhpl......5....
006af930 0000016f
006af934 82307104 -> e4 27 30 82 54 ec 31 82 00 00 00 00 00 00 2a 00 .'0.T.1.......*.
006af938 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006af93c 006af950 -> b8 19 f7 bf 8e c9 00 00 8c f9 6a 00 64 a0 d5 81 ..........j.d...
006af940 bff940a8 = KERNEL32.DLL:.text+0x1b0a8
--------------------
0167:bff94086 0fb74316 movzx eax,word ptr [ebx+16]
0167:bff9408a 50 push eax
0167:bff9408b ff7318 push dword ptr [ebx+18]
0167:bff9408e e84906feff call bff746dc = KERNEL32.DLL:_FREQASM+0x36dc
0167:bff94093 e920fbffff jmp bff93bb8 = KERNEL32.DLL:.text+0x1abb8
0167:bff94098 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff9409c 50 push eax
0167:bff9409d ff7318 push dword ptr [ebx+18]
0167:bff940a0 ff731c push dword ptr [ebx+1c]
0167:bff940a3 e83405feff call bff745dc = KERNEL32.DLL:_FREQASM+0x35dc
KERNEL32.DLL:.text+0x1b0a8:
*0167:bff940a8 e91bfbffff jmp bff93bc8 = KERNEL32.DLL:.text+0x1abc8
0167:bff940ad 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff940b1 50 push eax
0167:bff940b2 ff7318 push dword ptr [ebx+18]
0167:bff940b5 ff731c push dword ptr [ebx+1c]
0167:bff940b8 e8575d0000 call bff99e14 = KERNEL32.DLL:.text+0x20e14
0167:bff940bd 8bd0 mov edx,eax
0167:bff940bf c1c210 rol edx,10
0167:bff940c2 e901fbffff jmp bff93bc8 = KERNEL32.DLL:.text+0x1abc8
0167:bff940c7 0fbf4316 movsx eax,word ptr [ebx+16]
0167:bff940cb 50 push eax
--------------------
006af944 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006af948 00000b30
006af94c 00000000
006af950 bff719b8 = KERNEL32.DLL:_FREQASM+0x9b8
--------------------
0167:bff71991 51 push ecx
0167:bff71992 c1cf10 ror edi,10
0167:bff71995 6664873d0e000000 xchg word ptr fs:[0000000e],di
0167:bff7199d 57 push edi
0167:bff7199e 686d18f7bf push bff7186d
0167:bff719a3 64ff3500000000 push dword ptr fs:[00000000]
0167:bff719aa 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff719b1 55 push ebp
0167:bff719b2 8d6c24fc lea ebp,[esp-04]
0167:bff719b6 ffd2 call edx
KERNEL32.DLL:_FREQASM+0x9b8:
*0167:bff719b8 5d pop ebp
0167:bff719b9 0fb6c9 movzx ecx,cl
0167:bff719bc 648f0500000000 pop dword ptr fs:[00000000]
0167:bff719c3 8d642404 lea esp,[esp+04]
0167:bff719c7 5f pop edi
0167:bff719c8 6664893d0e000000 mov word ptr fs:[0000000e],di
0167:bff719d0 5b pop ebx
0167:bff719d1 660fb22424 lss sp,dword ptr [esp]
0167:bff719d6 6664891d1e000000 mov word ptr fs:[0000001e],bx
0167:bff719de 5b pop ebx
0167:bff719df 0bdb or ebx,ebx
--------------------
006af954 0000c98e
006af958 006af98c -> 71 ed 00 78 cc f9 6a 00 00 00 00 00 28 fe 6a 00 q..x..j.....(.j.
006af95c 81d5a064 -> 08 00 00 00 03 01 00 00 97 57 00 00 00 00 00 00 .........W......
006af960 825a0ae0 -> c9 02 00 a0 f4 1d 5a 82 3c 90 59 82 0c 05 02 00 ......Z.<.Y.....
006af964 00000000
...
006af970 006af6e0 -> 88 e8 43 00 80 0f 7d 00 00 00 00 00 00 40 2f 82 ..C...}......@/.
006af974 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
006af978 006af9ec -> 28 fe 6a 00 55 68 f7 bf 28 fe 6a 00 8c fa 6a 00 (.j.Uh..(.j...j.
006af97c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006af980 bff792a0 = KERNEL32.DLL:.text+0x2a0
-> ff ff ff ff f6 dc f9 bf fc dc f9 bf ff ff ff ff ................
006af984 ffffffff
006af988 006af9a0 -> 38 fe 6a 00 7b db 43 00 00 00 00 00 cc f9 6a 00 8.j.{.C.......j.
006af98c 7800ed71 = MSVCRT.DLL:.text+0xdd71
--------------------
0167:7800ed53 758e jnz 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed55 c746588a000000 mov dword ptr [esi+58],0000008a
0167:7800ed5c eb85 jmp 7800ece3 = MSVCRT.DLL:.text+0xdce3
0167:7800ed5e 83600800 and dword ptr [eax+08],+00
0167:7800ed62 51 push ecx
0167:7800ed63 ffd3 call ebx
0167:7800ed65 59 pop ecx
0167:7800ed66 eb88 jmp 7800ecf0 = MSVCRT.DLL:.text+0xdcf0
0167:7800ed68 ff750c push dword ptr [ebp+0c]
0167:7800ed6b ff15f4100378 call dword ptr [780310f4] -> KERNEL32.DLL!UnhandledExceptionFilter
MSVCRT.DLL:.text+0xdd71:
*0167:7800ed71 e9fffeffff jmp 7800ec75 = MSVCRT.DLL:.text+0xdc75
0167:7800ed76 8b542408 mov edx,dword ptr [esp+08]
0167:7800ed7a 8b0d28c50378 mov ecx,dword ptr [7803c528]
0167:7800ed80 56 push esi
0167:7800ed81 8b742408 mov esi,dword ptr [esp+08]
0167:7800ed85 3932 cmp dword ptr [edx],esi
0167:7800ed87 57 push edi
0167:7800ed88 8bc2 mov eax,edx
0167:7800ed8a 7411 jz 7800ed9d = MSVCRT.DLL:.text+0xdd9d
0167:7800ed8c 8d3c49 lea edi,[ecx+ecx*2]
0167:7800ed8f 8d3cba lea edi,[edx+edi*4]
--------------------
006af990 006af9cc -> 70 fb 6a 00 a4 fa 6a 00 f8 f9 6a 00 49 68 f7 bf p.j...j...j.Ih..
006af994 00000000
006af998 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af99c c0000005
006af9a0 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
006af9a4 0043db7b = MIRANDA32.EXE:.text+0x3cb7b
--------------------
0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
MIRANDA32.EXE:.text+0x3cb7b:
*0167:0043db7b 59 pop ecx
0167:0043db7c 59 pop ecx
0167:0043db7d c3 retd
0167:0043db7e 8b65e8 mov esp,dword ptr [ebp-18]
0167:0043db81 ff7588 push dword ptr [ebp-78]
0167:0043db84 ff151ce34300 call dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db8a ff251ce34300 jmp dword ptr [0043e31c] -> MSVCRT.DLL!_exit
0167:0043db90 ff2520e34300 jmp dword ptr [0043e320] -> MSVCRT.DLL!_XcptFilter
0167:0043db96 ff2524e34300 jmp dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db9c ff252ce34300 jmp dword ptr [0043e32c] -> MSVCRT.DLL!__getmainargs
0167:0043dba2 ff2530e34300 jmp dword ptr [0043e330] -> MSVCRT.DLL!_initterm
--------------------
006af9a8 00000000
006af9ac 006af9cc -> 70 fb 6a 00 a4 fa 6a 00 f8 f9 6a 00 49 68 f7 bf p.j...j...j.Ih..
006af9b0 7800ea07 = MSVCRT.DLL:.text+0xda07
--------------------
0167:7800e9ec 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800e9ef 83feff cmp esi,-01
0167:7800e9f2 7467 jz 7800ea5b = MSVCRT.DLL:.text+0xda5b
0167:7800e9f4 8d0c76 lea ecx,[esi+esi*2]
0167:7800e9f7 837c8f0400 cmp dword ptr [edi+ecx*4+04],+00
0167:7800e9fc 7445 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800e9fe 56 push esi
0167:7800e9ff 55 push ebp
0167:7800ea00 8d6b10 lea ebp,[ebx+10]
0167:7800ea03 ff548f04 call dword ptr [edi+ecx*4+04]
MSVCRT.DLL:.text+0xda07:
*0167:7800ea07 5d pop ebp
0167:7800ea08 5e pop esi
0167:7800ea09 8b5d0c mov ebx,dword ptr [ebp+0c]
0167:7800ea0c 0bc0 or eax,eax
0167:7800ea0e 7433 jz 7800ea43 = MSVCRT.DLL:.text+0xda43
0167:7800ea10 783c js 7800ea4e = MSVCRT.DLL:.text+0xda4e
0167:7800ea12 8b7b08 mov edi,dword ptr [ebx+08]
0167:7800ea15 53 push ebx
0167:7800ea16 e8b3feffff call 7800e8ce = MSVCRT.DLL!_global_unwind2
0167:7800ea1b 83c404 add esp,+04
0167:7800ea1e 8d6b10 lea ebp,[ebx+10]
--------------------
006af9b4 006af9d4 -> f8 f9 6a 00 49 68 f7 bf 70 fb 6a 00 28 fe 6a 00 ..j.Ih..p.j.(.j.
006af9b8 00000000
006af9bc 006af9d4 -> f8 f9 6a 00 49 68 f7 bf 70 fb 6a 00 28 fe 6a 00 ..j.Ih..p.j.(.j.
006af9c0 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006af9c4 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
006af9c8 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af9cc 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006af9d0 006afaa4 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af9d4 006af9f8 -> 8c fa 6a 00 e9 7f f8 bf 70 fb 6a 00 28 fe 6a 00 ..j.....p.j.(.j.
006af9d8 bff76849 = KERNEL32.DLL:_FREQASM+0x5849
--------------------
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
KERNEL32.DLL:_FREQASM+0x5849:
*0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
--------------------
006af9dc 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006af9e0 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af9e4 006afaa4 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006af9e8 006afa7c -> b4 05 fc bf 00 00 00 00 50 b0 d6 81 00 00 00 00 ........P.......
006af9ec 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af9f0 bff76855 = KERNEL32.DLL:_FREQASM+0x5855
--------------------
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
0167:bff76840 ff750c push dword ptr [ebp+0c]
0167:bff76843 ff7508 push dword ptr [ebp+08]
0167:bff76846 ff5518 call dword ptr [ebp+18]
0167:bff76849 83c410 add esp,+10
0167:bff7684c 648f0500000000 pop dword ptr fs:[00000000]
0167:bff76853 c9 leave
0167:bff76854 c3 retd
KERNEL32.DLL:_FREQASM+0x5855:
*0167:bff76855 8b4c2404 mov ecx,dword ptr [esp+04]
0167:bff76859 f7410406000000 test dword ptr [ecx+04],00000006
0167:bff76860 b801000000 mov eax,00000001
0167:bff76865 7512 jnz bff76879 = KERNEL32.DLL:_FREQASM+0x5879
0167:bff76867 8b4c2408 mov ecx,dword ptr [esp+08]
0167:bff7686b 8b542410 mov edx,dword ptr [esp+10]
0167:bff7686f 8b4108 mov eax,dword ptr [ecx+08]
0167:bff76872 8902 mov dword ptr [edx],eax
0167:bff76874 b802000000 mov eax,00000002
0167:bff76879 c3 retd
0167:bff7687a 8b4c2404 mov ecx,dword ptr [esp+04]
--------------------
006af9f4 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006af9f8 006afa8c -> c4 fb 6a 00 4b da f9 bf a4 fa 6a 00 70 fb 6a 00 ..j.K.....j.p.j.
006af9fc bff87fe9 = KERNEL32.DLL:.text+0xefe9
--------------------
0167:bff87fc7 0f82a5000000 jc bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fcd 3dffffffbf cmp eax,bfffffff
0167:bff87fd2 0f879a000000 ja bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff87fd8 ff7304 push dword ptr [ebx+04]
0167:bff87fdb 8d4df0 lea ecx,[ebp-10]
0167:bff87fde 51 push ecx
0167:bff87fdf ff7508 push dword ptr [ebp+08]
0167:bff87fe2 53 push ebx
0167:bff87fe3 57 push edi
0167:bff87fe4 e830e8feff call bff76819 = KERNEL32.DLL:_FREQASM+0x5819
KERNEL32.DLL:.text+0xefe9:
*0167:bff87fe9 83c414 add esp,+14
0167:bff87fec 395dfc cmp dword ptr [ebp-04],ebx
0167:bff87fef 750b jnz bff87ffc = KERNEL32.DLL:.text+0xeffc
0167:bff87ff1 806704ef and byte ptr [edi+04],ef
0167:bff87ff5 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff87ffc 85c0 test eax,eax
0167:bff87ffe 742d jz bff8802d = KERNEL32.DLL:.text+0xf02d
0167:bff88000 83f801 cmp eax,+01
0167:bff88003 746d jz bff88072 = KERNEL32.DLL:.text+0xf072
0167:bff88005 83f802 cmp eax,+02
0167:bff88008 7456 jz bff88060 = KERNEL32.DLL:.text+0xf060
--------------------
006afa00 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa04 006afe28 -> 68 ff 6a 00 10 d7 43 00 88 e8 43 00 00 00 00 00 h.j...C...C.....
006afa08 006afaa4 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afa0c 006afa7c -> b4 05 fc bf 00 00 00 00 50 b0 d6 81 00 00 00 00 ........P.......
006afa10 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
006afa14 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afa18 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa1c 00000001
006afa20 00000000
006afa24 000000f8
006afa28 0000ca50
006afa2c e654ca40 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afa30 00000014
...
006afa38 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa3c 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa40 006afa88 -> 00 00 00 00 c4 fb 6a 00 4b da f9 bf a4 fa 6a 00 ......j.K.....j.
006afa44 bff9d9ca = KERNEL32.DLL:.text+0x249ca
--------------------
0167:bff9d9a7 eb4f jmp bff9d9f8 = KERNEL32.DLL:.text+0x249f8
0167:bff9d9a9 8d3cbd14000000 lea edi,[edi*4+00000014]
0167:bff9d9b0 68cc000000 push 000000cc
0167:bff9d9b5 ff7508 push dword ptr [ebp+08]
0167:bff9d9b8 ff750c push dword ptr [ebp+0c]
0167:bff9d9bb e83037fdff call bff710f0 = KERNEL32.DLL:_FREQASM+0xf0
0167:bff9d9c0 57 push edi
0167:bff9d9c1 56 push esi
0167:bff9d9c2 ff7514 push dword ptr [ebp+14]
0167:bff9d9c5 e82637fdff call bff710f0 = KERNEL32.DLL:_FREQASM+0xf0
KERNEL32.DLL:.text+0x249ca:
*0167:bff9d9ca eb22 jmp bff9d9ee = KERNEL32.DLL:.text+0x249ee
0167:bff9d9cc 8b45ec mov eax,dword ptr [ebp-14]
0167:bff9d9cf 8b00 mov eax,dword ptr [eax]
0167:bff9d9d1 8b00 mov eax,dword ptr [eax]
0167:bff9d9d3 8945e0 mov dword ptr [ebp-20],eax
0167:bff9d9d6 b801000000 mov eax,00000001
0167:bff9d9db c3 retd
0167:bff9d9dc 8b65e8 mov esp,dword ptr [ebp-18]
0167:bff9d9df 8b4de0 mov ecx,dword ptr [ebp-20]
0167:bff9d9e2 8b4518 mov eax,dword ptr [ebp+18]
0167:bff9d9e5 8908 mov dword ptr [eax],ecx
--------------------
006afa48 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa4c 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa50 00000014
006afa54 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afa58 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa5c 00000001
006afa60 66206494
006afa64 13f06570
006afa68 65702bf7
006afa6c 00000001
006afa70 006afa54 -> 34 fc 6a 00 e4 fb 6a 00 01 00 00 00 94 64 20 66 4.j...j......d f
006afa74 2644ca8a
006afa78 00000000
006afa7c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006afa80 00000000
006afa84 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006afa88 00000000
006afa8c 006afbc4 -> d4 fb 6a 00 62 67 f7 bf e4 fb 6a 00 34 fc 6a 00 ..j.bg....j.4.j.
006afa90 bff9da4b = KERNEL32.DLL:.text+0x24a4b
--------------------
0167:bff9da30 7505 jnz bff9da37 = KERNEL32.DLL:.text+0x24a37
0167:bff9da32 8b45fc mov eax,dword ptr [ebp-04]
0167:bff9da35 eb19 jmp bff9da50 = KERNEL32.DLL:.text+0x24a50
0167:bff9da37 6a00 push +00
0167:bff9da39 8d45ac lea eax,[ebp-54]
0167:bff9da3c 6aff push -01
0167:bff9da3e 8d8de0feffff lea ecx,[ebp-00000120]
0167:bff9da44 50 push eax
0167:bff9da45 51 push ecx
0167:bff9da46 e888a4feff call bff87ed3 = KERNEL32.DLL:.text+0xeed3
KERNEL32.DLL:.text+0x24a4b:
*0167:bff9da4b 83c410 add esp,+10
0167:bff9da4e 33c0 xor eax,eax
0167:bff9da50 8be5 mov esp,ebp
0167:bff9da52 5d pop ebp
0167:bff9da53 c20800 retd 0008
0167:bff9da56 a1e49cfcbf mov eax,dword ptr [bffc9ce4]
0167:bff9da5b 8b542404 mov edx,dword ptr [esp+04]
0167:bff9da5f 8b08 mov ecx,dword ptr [eax]
0167:bff9da61 81c19c000000 add ecx,0000009c
0167:bff9da67 8b01 mov eax,dword ptr [ecx]
0167:bff9da69 8911 mov dword ptr [ecx],edx
--------------------
006afa94 006afaa4 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afa98 006afb70 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afa9c ffffffff
006afaa0 00000000
006afaa4 0001001f
006afaa8 00000000
...
006afac0 ffff1372
006afac4 ffff0120
006afac8 ffffffff
006afacc 02acc889
006afad0 011d0167
006afad4 02aed780
006afad8 ffff016f
006afadc 00000000
...
006afaf8 6e7f0000
006afafc 589db12b
006afb00 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
006afb04 fffff8ec
006afb08 ffffffff
006afb0c 00003ffe
006afb10 00000000
006afb14 3fff8000
006afb18 00000000
006afb1c ff000000
006afb20 00004006
006afb24 00000000
...
006afb2c 0000000a
006afb30 00000000
006afb34 00005797
006afb38 0000016f
...
006afb40 00000000
006afb44 01033100 = CLIST_MODERN.DLL:.data+0x1100
-> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afb48 00000001
006afb4c 00000013
006afb50 00010009
006afb54 00000000
006afb58 bff5580d = USER32.DLL!PeekMessageA
-> e8 98 29 00 00 58 6a 01 50 e9 2a ef ff ff 58 59 ..)..Xj.P.*...XY
006afb5c bff8ac13 = KERNEL32.DLL:.text+0x11c13
--------------------
0167:bff8abfa 56 push esi
0167:bff8abfb 8b742408 mov esi,dword ptr [esp+08]
0167:bff8abff 803e04 cmp byte ptr [esi],04
0167:bff8ac02 740f jz bff8ac13 = KERNEL32.DLL:.text+0x11c13
0167:bff8ac04 33c0 xor eax,eax
0167:bff8ac06 50 push eax
0167:bff8ac07 50 push eax
0167:bff8ac08 50 push eax
0167:bff8ac09 68050000c0 push c0000005
0167:bff8ac0e e8c0bbfeff call bff767d3 = KERNEL32.DLL:_FREQASM+0x57d3
KERNEL32.DLL:.text+0x11c13:
*0167:bff8ac13 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac18 50 push eax
0167:bff8ac19 e89695feff call bff741b4 = KERNEL32.DLL!97
0167:bff8ac1e ff7604 push dword ptr [esi+04]
0167:bff8ac21 e835e6ffff call bff8925b = KERNEL32.DLL:.text+0x1025b
0167:bff8ac26 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac2b 50 push eax
0167:bff8ac2c e8bc95feff call bff741ed = KERNEL32.DLL!98
0167:bff8ac31 5e pop esi
0167:bff8ac32 c20400 retd 0004
0167:bff8ac35 55 push ebp
--------------------
006afb60 00000167
006afb64 00200246
006afb68 006afd1c -> ec fa ed 00 07 78 00 01 00 31 03 01 e2 fb ff 00 .....x...1......
006afb6c 0000016f
006afb70 c0000005
006afb74 00000000
...
006afb7c bff8ac13 = KERNEL32.DLL:.text+0x11c13
--------------------
0167:bff8abfa 56 push esi
0167:bff8abfb 8b742408 mov esi,dword ptr [esp+08]
0167:bff8abff 803e04 cmp byte ptr [esi],04
0167:bff8ac02 740f jz bff8ac13 = KERNEL32.DLL:.text+0x11c13
0167:bff8ac04 33c0 xor eax,eax
0167:bff8ac06 50 push eax
0167:bff8ac07 50 push eax
0167:bff8ac08 50 push eax
0167:bff8ac09 68050000c0 push c0000005
0167:bff8ac0e e8c0bbfeff call bff767d3 = KERNEL32.DLL:_FREQASM+0x57d3
KERNEL32.DLL:.text+0x11c13:
*0167:bff8ac13 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac18 50 push eax
0167:bff8ac19 e89695feff call bff741b4 = KERNEL32.DLL!97
0167:bff8ac1e ff7604 push dword ptr [esi+04]
0167:bff8ac21 e835e6ffff call bff8925b = KERNEL32.DLL:.text+0x1025b
0167:bff8ac26 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac2b 50 push eax
0167:bff8ac2c e8bc95feff call bff741ed = KERNEL32.DLL!98
0167:bff8ac31 5e pop esi
0167:bff8ac32 c20400 retd 0004
0167:bff8ac35 55 push ebp
--------------------
006afb80 00000000
006afb84 bff728a2 = KERNEL32.DLL:_FREQASM+0x18a2
--------------------
0167:bff7287f 33ff xor edi,edi
0167:bff72881 8ee6 mov fs,si
0167:bff72883 8eef mov gs,di
0167:bff72885 66648b1d1e000000 mov bx,word ptr fs:[0000001e]
0167:bff7288d 6683eb01 sub bx,+01
0167:bff72891 7313 jnc bff728a6 = KERNEL32.DLL:_FREQASM+0x18a6
0167:bff72893 8bf0 mov esi,eax
0167:bff72895 8bfa mov edi,edx
0167:bff72897 8b157094fcbf mov edx,dword ptr [bffc9470]
0167:bff7289d e862190000 call bff74204 = KERNEL32.DLL:_FREQASM+0x3204
KERNEL32.DLL:_FREQASM+0x18a2:
*0167:bff728a2 8bd7 mov edx,edi
0167:bff728a4 8bc6 mov eax,esi
0167:bff728a6 6664891d1e000000 mov word ptr fs:[0000001e],bx
0167:bff728ae 8b5dfc mov ebx,dword ptr [ebp-04]
0167:bff728b1 8b75f8 mov esi,dword ptr [ebp-08]
0167:bff728b4 8b7df4 mov edi,dword ptr [ebp-0c]
0167:bff728b7 ff65dc jmp dword ptr [ebp-24]
0167:bff728ba 6664a10e000000 mov ax,word ptr fs:[0000000e]
0167:bff728c1 668945da mov word ptr [ebp-26],ax
0167:bff728c5 8f45dc pop dword ptr [ebp-24]
0167:bff728c8 ff35a497fcbf push dword ptr [bffc97a4]
--------------------
006afb88 81d581e0 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afb8c 005629b8 -> 6d 00 00 a0 84 17 26 03 74 ff 57 00 ea 3a 69 10 m.....&.t.W..:i.
006afb90 c1804840 -> 01 00 00 00 20 a0 d5 81 50 b0 d6 81 20 83 6c e6 .... ...P... .l.
006afb94 00000000
006afb98 0000016f
006afb9c 006afbb8 -> 67 01 00 00 c1 66 f7 bf 34 fc 6a 00 d4 fb 6a 00 g....f..4.j...j.
006afba0 bff7b77b = KERNEL32.DLL:.text+0x277b
--------------------
0167:bff7b75c a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff7b761 8bec mov ebp,esp
0167:bff7b763 56 push esi
0167:bff7b764 50 push eax
0167:bff7b765 e84a8affff call bff741b4 = KERNEL32.DLL!97
0167:bff7b76a ff7514 push dword ptr [ebp+14]
0167:bff7b76d ff7510 push dword ptr [ebp+10]
0167:bff7b770 ff750c push dword ptr [ebp+0c]
0167:bff7b773 ff7508 push dword ptr [ebp+08]
0167:bff7b776 e890fdffff call bff7b50b = KERNEL32.DLL:.text+0x250b
KERNEL32.DLL:.text+0x277b:
*0167:bff7b77b 8bf0 mov esi,eax
0167:bff7b77d 85f6 test esi,esi
0167:bff7b77f 740a jz bff7b78b = KERNEL32.DLL:.text+0x278b
0167:bff7b781 f6451380 test byte ptr [ebp+13],80
0167:bff7b785 7404 jz bff7b78b = KERNEL32.DLL:.text+0x278b
0167:bff7b787 66ff4602 inc word ptr [esi+02]
0167:bff7b78b a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff7b790 50 push eax
0167:bff7b791 e8578affff call bff741ed = KERNEL32.DLL!98
0167:bff7b796 8bc6 mov eax,esi
0167:bff7b798 5e pop esi
--------------------
006afba4 bff741f7 = KERNEL32.DLL:_FREQASM+0x31f7
--------------------
0167:bff741dd 51 push ecx
0167:bff741de 52 push edx
0167:bff741df 681d002a00 push 002a001d
0167:bff741e4 e8ebd1ffff call bff713d4 = KERNEL32.DLL!1
0167:bff741e9 59 pop ecx
0167:bff741ea 5a pop edx
0167:bff741eb ebe8 jmp bff741d5 = KERNEL32.DLL:_FREQASM+0x31d5
0167:bff741ed 8b542404 mov edx,dword ptr [esp+04]
0167:bff741f1 50 push eax
0167:bff741f2 e804000000 call bff741fb = KERNEL32.DLL:_FREQASM+0x31fb
KERNEL32.DLL:_FREQASM+0x31f7:
*0167:bff741f7 58 pop eax
0167:bff741f8 c20400 retd 0004
0167:bff741fb 833dec9cfcbf01 cmp dword ptr [bffc9cec],+01
0167:bff74202 7c32 jl bff74236 = KERNEL32.DLL:_FREQASM+0x3236
0167:bff74204 3b157094fcbf cmp edx,dword ptr [bffc9470]
0167:bff7420a 7506 jnz bff74212 = KERNEL32.DLL:_FREQASM+0x3212
0167:bff7420c 837a0401 cmp dword ptr [edx+04],+01
0167:bff74210 7426 jz bff74238 = KERNEL32.DLL:_FREQASM+0x3238
0167:bff74212 ff4a04 dec dword ptr [edx+04]
0167:bff74215 754a jnz bff74261 = KERNEL32.DLL:_FREQASM+0x3261
0167:bff74217 c7420800000000 mov dword ptr [edx+08],00000000
--------------------
006afba8 bffc9490 = KERNEL32.DLL:.data+0x490
-> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afbac bff7b796 = KERNEL32.DLL:.text+0x2796
--------------------
0167:bff7b776 e890fdffff call bff7b50b = KERNEL32.DLL:.text+0x250b
0167:bff7b77b 8bf0 mov esi,eax
0167:bff7b77d 85f6 test esi,esi
0167:bff7b77f 740a jz bff7b78b = KERNEL32.DLL:.text+0x278b
0167:bff7b781 f6451380 test byte ptr [ebp+13],80
0167:bff7b785 7404 jz bff7b78b = KERNEL32.DLL:.text+0x278b
0167:bff7b787 66ff4602 inc word ptr [esi+02]
0167:bff7b78b a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff7b790 50 push eax
0167:bff7b791 e8578affff call bff741ed = KERNEL32.DLL!98
KERNEL32.DLL:.text+0x2796:
*0167:bff7b796 8bc6 mov eax,esi
0167:bff7b798 5e pop esi
0167:bff7b799 5d pop ebp
0167:bff7b79a c21000 retd 0010
0167:bff7b79d 55 push ebp
0167:bff7b79e 8bec mov ebp,esp
0167:bff7b7a0 53 push ebx
0167:bff7b7a1 56 push esi
0167:bff7b7a2 57 push edi
0167:bff7b7a3 33ff xor edi,edi
0167:bff7b7a5 837d1801 cmp dword ptr [ebp+18],+01
--------------------
006afbb0 bffc9490 = KERNEL32.DLL:.data+0x490
-> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afbb4 bff713e2 = KERNEL32.DLL:_FREQASM+0x3e2
--------------------
0167:bff713c5 c20400 retd 0004
0167:bff713c8 33c0 xor eax,eax
0167:bff713ca ebf7 jmp bff713c3 = KERNEL32.DLL:_FREQASM+0x3c3
0167:bff713cc ebfa jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713ce ebf8 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d0 ebf6 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d2 ebf4 jmp bff713c8 = KERNEL32.DLL:_FREQASM+0x3c8
0167:bff713d4 8b442404 mov eax,dword ptr [esp+04]
0167:bff713d8 8f0424 pop dword ptr [esp]
0167:bff713db 2eff1d3497fcbf call fword ptr ss:[bffc9734]
KERNEL32.DLL:_FREQASM+0x3e2:
*0167:bff713e2 b801000100 mov eax,00010001
0167:bff713e7 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713ee b843002a00 mov eax,002a0043
0167:bff713f3 2eff1d3497fcbf call fword ptr ss:[bffc9734]
0167:bff713fa 83c414 add esp,+14
0167:bff713fd 0fb7c8 movzx ecx,ax
0167:bff71400 0fa4d310 shld ebx,edx,10
0167:bff71404 c0e302 shl bl,02
0167:bff71407 6681ea0010 sub dx,1000
0167:bff7140c 0fbfc2 movsx eax,dx
0167:bff7140f e9d1000000 jmp bff714e5 = KERNEL32.DLL:_FREQASM+0x4e5
--------------------
006afbb8 00000167
006afbbc bff766c1 = KERNEL32.DLL:_FREQASM+0x56c1
--------------------
0167:bff766a6 c3 retd
0167:bff766a7 55 push ebp
0167:bff766a8 8bec mov ebp,esp
0167:bff766aa 50 push eax
0167:bff766ab 8b4508 mov eax,dword ptr [ebp+08]
0167:bff766ae c700ffffffff mov dword ptr [eax],ffffffff
0167:bff766b4 50 push eax
0167:bff766b5 6a00 push +00
0167:bff766b7 6814002a00 push 002a0014
0167:bff766bc e813adffff call bff713d4 = KERNEL32.DLL!1
KERNEL32.DLL:_FREQASM+0x56c1:
*0167:bff766c1 8b5508 mov edx,dword ptr [ebp+08]
0167:bff766c4 8f82b0000000 pop dword ptr [edx+000000b0]
0167:bff766ca 8b4d0c mov ecx,dword ptr [ebp+0c]
0167:bff766cd 8b01 mov eax,dword ptr [ecx]
0167:bff766cf 8982b4000000 mov dword ptr [edx+000000b4],eax
0167:bff766d5 8b4104 mov eax,dword ptr [ecx+04]
0167:bff766d8 8982b8000000 mov dword ptr [edx+000000b8],eax
0167:bff766de 8b4510 mov eax,dword ptr [ebp+10]
0167:bff766e1 8d440808 lea eax,[eax+ecx+08]
0167:bff766e5 8982c4000000 mov dword ptr [edx+000000c4],eax
0167:bff766eb c9 leave
--------------------
006afbc0 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afbc4 006afbd4 -> 04 fd 6a 00 19 68 f7 bf e4 fb 6a 00 34 fc 6a 00 ..j..h....j.4.j.
006afbc8 bff76762 = KERNEL32.DLL:_FREQASM+0x5762
--------------------
0167:bff76740 e800000000 call bff76745 = KERNEL32.DLL:_FREQASM+0x5745
0167:bff76745 55 push ebp
0167:bff76746 8bec mov ebp,esp
0167:bff76748 8b750c mov esi,dword ptr [ebp+0c]
0167:bff7674b 8b86b8000000 mov eax,dword ptr [esi+000000b8]
0167:bff76751 8b7508 mov esi,dword ptr [ebp+08]
0167:bff76754 89460c mov dword ptr [esi+0c],eax
0167:bff76757 ff750c push dword ptr [ebp+0c]
0167:bff7675a ff7508 push dword ptr [ebp+08]
0167:bff7675d e8a9720200 call bff9da0b = KERNEL32.DLL:.text+0x24a0b
KERNEL32.DLL:_FREQASM+0x5762:
*0167:bff76762 83ec50 sub esp,+50
0167:bff76765 890424 mov dword ptr [esp],eax
0167:bff76768 834c240401 or dword ptr [esp+04],+01
0167:bff7676d c744241000000000 mov dword ptr [esp+10],00000000
0167:bff76775 8b4508 mov eax,dword ptr [ebp+08]
0167:bff76778 89442408 mov dword ptr [esp+08],eax
0167:bff7677c 8bc4 mov eax,esp
0167:bff7677e 50 push eax
0167:bff7677f e891ffffff call bff76715 = KERNEL32.DLL:_FREQASM+0x5715
0167:bff76784 55 push ebp
0167:bff76785 8bec mov ebp,esp
--------------------
006afbcc 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afbd0 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afbd4 006afd04 -> 0d 58 f5 bf 13 ac f8 bf 05 00 00 c0 00 00 00 00 .X..............
006afbd8 bff76819 = KERNEL32.DLL:_FREQASM+0x5819
--------------------
0167:bff767fa 8db5e0feffff lea esi,[ebp-00000120]
0167:bff76800 ff7514 push dword ptr [ebp+14]
0167:bff76803 ff7510 push dword ptr [ebp+10]
0167:bff76806 ff750c push dword ptr [ebp+0c]
0167:bff76809 ff7508 push dword ptr [ebp+08]
0167:bff7680c 56 push esi
0167:bff7680d e872ffffff call bff76784 = KERNEL32.DLL:_FREQASM+0x5784
0167:bff76812 57 push edi
0167:bff76813 56 push esi
0167:bff76814 e82cffffff call bff76745 = KERNEL32.DLL:_FREQASM+0x5745
KERNEL32.DLL:_FREQASM+0x5819:
*0167:bff76819 ba5568f7bf mov edx,bff76855
0167:bff7681e eb05 jmp bff76825 = KERNEL32.DLL:_FREQASM+0x5825
0167:bff76820 ba7a68f7bf mov edx,bff7687a
0167:bff76825 55 push ebp
0167:bff76826 8bec mov ebp,esp
0167:bff76828 ff750c push dword ptr [ebp+0c]
0167:bff7682b 52 push edx
0167:bff7682c 64ff3500000000 push dword ptr fs:[00000000]
0167:bff76833 64892500000000 mov dword ptr fs:[00000000],esp
0167:bff7683a ff7514 push dword ptr [ebp+14]
0167:bff7683d ff7510 push dword ptr [ebp+10]
--------------------
006afbdc 006afbe4 -> 05 00 00 c0 00 00 00 00 00 00 00 00 13 ac f8 bf ................
006afbe0 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afbe4 c0000005
006afbe8 00000000
...
006afbf0 bff8ac13 = KERNEL32.DLL:.text+0x11c13
--------------------
0167:bff8abfa 56 push esi
0167:bff8abfb 8b742408 mov esi,dword ptr [esp+08]
0167:bff8abff 803e04 cmp byte ptr [esi],04
0167:bff8ac02 740f jz bff8ac13 = KERNEL32.DLL:.text+0x11c13
0167:bff8ac04 33c0 xor eax,eax
0167:bff8ac06 50 push eax
0167:bff8ac07 50 push eax
0167:bff8ac08 50 push eax
0167:bff8ac09 68050000c0 push c0000005
0167:bff8ac0e e8c0bbfeff call bff767d3 = KERNEL32.DLL:_FREQASM+0x57d3
KERNEL32.DLL:.text+0x11c13:
*0167:bff8ac13 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac18 50 push eax
0167:bff8ac19 e89695feff call bff741b4 = KERNEL32.DLL!97
0167:bff8ac1e ff7604 push dword ptr [esi+04]
0167:bff8ac21 e835e6ffff call bff8925b = KERNEL32.DLL:.text+0x1025b
0167:bff8ac26 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac2b 50 push eax
0167:bff8ac2c e8bc95feff call bff741ed = KERNEL32.DLL!98
0167:bff8ac31 5e pop esi
0167:bff8ac32 c20400 retd 0004
0167:bff8ac35 55 push ebp
--------------------
006afbf4 00000000
...
006afbfc cc6633c7
006afc00 0000016f
006afc04 822e4000 -> 24 09 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 $...............
006afc08 8231c050 -> 1d 01 00 a0 08 b9 32 82 44 67 30 82 00 00 00 00 ......2.Dg0.....
006afc0c 006afc34 -> 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afc10 bff7469c = KERNEL32.DLL:_FREQASM+0x369c
--------------------
0167:bff74676 7417 jz bff7468f = KERNEL32.DLL:_FREQASM+0x368f
0167:bff74678 816b7000100000 sub dword ptr [ebx+70],00001000
0167:bff7467f 66c70419ffff mov word ptr [ecx+ebx],ffff
0167:bff74685 83e902 sub ecx,+02
0167:bff74688 2d00100000 sub eax,00001000
0167:bff7468d eba7 jmp bff74636 = KERNEL32.DLL:_FREQASM+0x3636
0167:bff7468f ff75f8 push dword ptr [ebp-08]
0167:bff74692 6a00 push +00
0167:bff74694 ff737c push dword ptr [ebx+7c]
0167:bff74697 e871040000 call bff74b0d = KERNEL32.DLL:_FREQASM+0x3b0d
KERNEL32.DLL:_FREQASM+0x369c:
*0167:bff7469c 5b pop ebx
0167:bff7469d 5f pop edi
0167:bff7469e 5e pop esi
0167:bff7469f c9 leave
0167:bff746a0 c20c00 retd 000c
0167:bff746a3 90 nop
0167:bff746a4 55 push ebp
0167:bff746a5 8bec mov ebp,esp
0167:bff746a7 56 push esi
0167:bff746a8 57 push edi
0167:bff746a9 53 push ebx
--------------------
006afc14 822f4000 -> 00 00 20 00 00 00 00 00 20 00 00 00 01 00 00 a0 .. ..... .......
006afc18 00000000
006afc1c 0000c0c0
006afc20 00f80000
006afc24 cc340000
006afc28 01477fdf
006afc2c 4b887fe2
006afc30 00000000
006afc34 0001001f
006afc38 00000000
...
006afc50 ffff1372
006afc54 ffff0120
006afc58 ffffffff
006afc5c 02acc889
006afc60 011d0167
006afc64 02aed780
006afc68 ffff016f
006afc6c 00000000
...
006afc88 6e7f0000
006afc8c 589db12b
006afc90 bffcdda2 = KERNEL32.DLL:.rsrc+0xda2
-> 00 00 00 00 01 00 09 04 00 00 40 24 00 00 00 00 ..........@$....
006afc94 fffff8ec
006afc98 ffffffff
006afc9c 00003ffe
006afca0 00000000
006afca4 3fff8000
006afca8 00000000
006afcac ff000000
006afcb0 00004006
006afcb4 00000000
...
006afcbc 0000000a
006afcc0 00000000
006afcc4 00005797
006afcc8 0000016f
...
006afcd0 00000000
006afcd4 01033100 = CLIST_MODERN.DLL:.data+0x1100
-> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afcd8 00000001
006afcdc 00000013
006afce0 00010009
006afce4 00000000
006afce8 bff5580d = USER32.DLL!PeekMessageA
-> e8 98 29 00 00 58 6a 01 50 e9 2a ef ff ff 58 59 ..)..Xj.P.*...XY
006afcec bff8ac13 = KERNEL32.DLL:.text+0x11c13
--------------------
0167:bff8abfa 56 push esi
0167:bff8abfb 8b742408 mov esi,dword ptr [esp+08]
0167:bff8abff 803e04 cmp byte ptr [esi],04
0167:bff8ac02 740f jz bff8ac13 = KERNEL32.DLL:.text+0x11c13
0167:bff8ac04 33c0 xor eax,eax
0167:bff8ac06 50 push eax
0167:bff8ac07 50 push eax
0167:bff8ac08 50 push eax
0167:bff8ac09 68050000c0 push c0000005
0167:bff8ac0e e8c0bbfeff call bff767d3 = KERNEL32.DLL:_FREQASM+0x57d3
KERNEL32.DLL:.text+0x11c13:
*0167:bff8ac13 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac18 50 push eax
0167:bff8ac19 e89695feff call bff741b4 = KERNEL32.DLL!97
0167:bff8ac1e ff7604 push dword ptr [esi+04]
0167:bff8ac21 e835e6ffff call bff8925b = KERNEL32.DLL:.text+0x1025b
0167:bff8ac26 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac2b 50 push eax
0167:bff8ac2c e8bc95feff call bff741ed = KERNEL32.DLL!98
0167:bff8ac31 5e pop esi
0167:bff8ac32 c20400 retd 0004
0167:bff8ac35 55 push ebp
--------------------
006afcf0 00000167
006afcf4 00200246
006afcf8 006afd1c -> ec fa ed 00 07 78 00 01 00 31 03 01 e2 fb ff 00 .....x...1......
006afcfc 0000016f
006afd00 00200246
006afd04 bff5580d = USER32.DLL!PeekMessageA
-> e8 98 29 00 00 58 6a 01 50 e9 2a ef ff ff 58 59 ..)..Xj.P.*...XY
006afd08 bff8ac13 = KERNEL32.DLL:.text+0x11c13
--------------------
0167:bff8abfa 56 push esi
0167:bff8abfb 8b742408 mov esi,dword ptr [esp+08]
0167:bff8abff 803e04 cmp byte ptr [esi],04
0167:bff8ac02 740f jz bff8ac13 = KERNEL32.DLL:.text+0x11c13
0167:bff8ac04 33c0 xor eax,eax
0167:bff8ac06 50 push eax
0167:bff8ac07 50 push eax
0167:bff8ac08 50 push eax
0167:bff8ac09 68050000c0 push c0000005
0167:bff8ac0e e8c0bbfeff call bff767d3 = KERNEL32.DLL:_FREQASM+0x57d3
KERNEL32.DLL:.text+0x11c13:
*0167:bff8ac13 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac18 50 push eax
0167:bff8ac19 e89695feff call bff741b4 = KERNEL32.DLL!97
0167:bff8ac1e ff7604 push dword ptr [esi+04]
0167:bff8ac21 e835e6ffff call bff8925b = KERNEL32.DLL:.text+0x1025b
0167:bff8ac26 a1109dfcbf mov eax,dword ptr [bffc9d10]
0167:bff8ac2b 50 push eax
0167:bff8ac2c e8bc95feff call bff741ed = KERNEL32.DLL!98
0167:bff8ac31 5e pop esi
0167:bff8ac32 c20400 retd 0004
0167:bff8ac35 55 push ebp
--------------------
006afd0c c0000005
006afd10 00000000
...
006afd1c 00edfaec -> 00 00 00 00 00 00 00 00 63 6c 69 73 74 5f 6d 6f ........clist_mo
006afd20 01007807 = CLIST_MODERN.DLL:.text+0x26807
--------------------
0167:010077da e80a860000 call 0100fde9 = CLIST_MODERN.DLL:.text+0x2ede9
0167:010077df 83252045030100 and dword ptr [01034520],+00
0167:010077e6 59 pop ecx
0167:010077e7 83252445030100 and dword ptr [01034524],+00
0167:010077ee 33c0 xor eax,eax
0167:010077f0 c3 retd
0167:010077f1 8b0d18450301 mov ecx,dword ptr [01034518]
0167:010077f7 e8f7320000 call 0100aaf3 = CLIST_MODERN.DLL:.text+0x29af3
0167:010077fc 6800310301 push 01033100
0167:01007801 ff153ca10201 call dword ptr [0102a13c] -> KERNEL32.DLL!DeleteCriticalSection
CLIST_MODERN.DLL:.text+0x26807:
*0167:01007807 33c0 xor eax,eax
0167:01007809 c3 retd
0167:0100780a 55 push ebp
0167:0100780b 8bec mov ebp,esp
0167:0100780d 83ec1c sub esp,+1c
0167:01007810 56 push esi
0167:01007811 33f6 xor esi,esi
0167:01007813 393514450301 cmp dword ptr [01034514],esi
0167:01007819 0f84d2010000 jz 010079f1 = CLIST_MODERN.DLL:.text+0x269f1
0167:0100781f 393520450301 cmp dword ptr [01034520],esi
0167:01007825 750e jnz 01007835 = CLIST_MODERN.DLL:.text+0x26835
--------------------
006afd24 01033100 = CLIST_MODERN.DLL:.data+0x1100
-> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006afd28 00fffbe2 = CLIST_MODERN.DLL:.text+0x1ebe2
--------------------
0167:00fffbd3 5e pop esi
0167:00fffbd4 c9 leave
0167:00fffbd5 c3 retd
0167:00fffbd6 53 push ebx
0167:00fffbd7 56 push esi
0167:00fffbd8 57 push edi
0167:00fffbd9 33ff xor edi,edi
0167:00fffbdb 57 push edi
0167:00fffbdc 57 push edi
0167:00fffbdd e80f7c0000 call 010077f1 = CLIST_MODERN.DLL:.text+0x267f1
CLIST_MODERN.DLL:.text+0x1ebe2:
*0167:00fffbe2 59 pop ecx
0167:00fffbe3 59 pop ecx
0167:00fffbe4 bba8450301 mov ebx,010345a8
0167:00fffbe9 e8eafaffff call 00fff6d8 = CLIST_MODERN.DLL:.text+0x1e6d8
0167:00fffbee a1b8450301 mov eax,dword ptr [010345b8]
0167:00fffbf3 3bc7 cmp eax,edi
0167:00fffbf5 740d jz 00fffc04 = CLIST_MODERN.DLL:.text+0x1ec04
0167:00fffbf7 50 push eax
0167:00fffbf8 e8ec010100 call 0100fde9 = CLIST_MODERN.DLL:.text+0x2ede9
0167:00fffbfd 59 pop ecx
0167:00fffbfe 893db8450301 mov dword ptr [010345b8],edi
--------------------
006afd2c 00000000
...
006afd38 00edfaec -> 00 00 00 00 00 00 00 00 63 6c 69 73 74 5f 6d 6f ........clist_mo
006afd3c 00000001
006afd40 0100ad0f = CLIST_MODERN.DLL:.text+0x29d0f
--------------------
0167:0100acdd a1904b0301 mov eax,dword ptr [01034b90]
0167:0100ace2 ff7004 push dword ptr [eax+04]
0167:0100ace5 ff1560a30201 call dword ptr [0102a360] -> USER32.DLL!DestroyWindow
0167:0100aceb e827f90000 call 0101a617 = CLIST_MODERN.DLL:.text+0x39617
0167:0100acf0 e8439f0100 call 01024c38 = CLIST_MODERN.DLL:.text+0x43c38
0167:0100acf5 e808eeffff call 01009b02 = CLIST_MODERN.DLL:.text+0x28b02
0167:0100acfa 8b0d044c0301 mov ecx,dword ptr [01034c04]
0167:0100ad00 e8eefdffff call 0100aaf3 = CLIST_MODERN.DLL:.text+0x29af3
0167:0100ad05 e846ffffff call 0100ac50 = CLIST_MODERN.DLL:.text+0x29c50
0167:0100ad0a e8c74effff call 00fffbd6 = CLIST_MODERN.DLL:.text+0x1ebd6
CLIST_MODERN.DLL:.text+0x29d0f:
*0167:0100ad0f e80fa5ffff call 01005223 = CLIST_MODERN.DLL:.text+0x24223
0167:0100ad14 a1904b0301 mov eax,dword ptr [01034b90]
0167:0100ad19 83600400 and dword ptr [eax+04],+00
0167:0100ad1d e82effffff call 0100ac50 = CLIST_MODERN.DLL:.text+0x29c50
0167:0100ad22 e8b7feffff call 0100abde = CLIST_MODERN.DLL:.text+0x29bde
0167:0100ad27 33c0 xor eax,eax
0167:0100ad29 c3 retd
0167:0100ad2a 8b4c2404 mov ecx,dword ptr [esp+04]
0167:0100ad2e 53 push ebx
0167:0100ad2f 57 push edi
0167:0100ad30 ba804b0301 mov edx,01034b80
--------------------
006afd44 00417795 = MIRANDA32.EXE:.text+0x16795
--------------------
0167:0041777d a804 test al,04
0167:0041777f 740b jz 0041778c = MIRANDA32.EXE:.text+0x1678c
0167:00417781 8b4e68 mov ecx,dword ptr [esi+68]
0167:00417784 83e010 and eax,+10
0167:00417787 50 push eax
0167:00417788 ff5118 call dword ptr [ecx+18]
0167:0041778b 59 pop ecx
0167:0041778c f6464820 test byte ptr [esi+48],20
0167:00417790 7403 jz 00417795 = MIRANDA32.EXE:.text+0x16795
0167:00417792 ff5654 call dword ptr [esi+54]
MIRANDA32.EXE:.text+0x16795:
*0167:00417795 8b464c mov eax,dword ptr [esi+4c]
0167:00417798 83c64c add esi,+4c
0167:0041779b 85c0 test eax,eax
0167:0041779d 7414 jz 004177b3 = MIRANDA32.EXE:.text+0x167b3
0167:0041779f 50 push eax
0167:004177a0 ff15b0e14300 call dword ptr [0043e1b0] -> KERNEL32.DLL!FreeLibrary
0167:004177a6 6a20 push +20
0167:004177a8 6a00 push +00
0167:004177aa 56 push esi
0167:004177ab e8505f0200 call 0043d700 = MSVCRT.DLL!memset
0167:004177b0 83c40c add esp,+0c
--------------------
006afd48 00edfaec -> 00 00 00 00 00 00 00 00 63 6c 69 73 74 5f 6d 6f ........clist_mo
006afd4c 004176f8 = MIRANDA32.EXE:.text+0x166f8
--------------------
0167:004176db 743e jz 0041771b = MIRANDA32.EXE:.text+0x1671b
0167:004176dd 57 push edi
0167:004176de f6464804 test byte ptr [esi+48],04
0167:004176e2 8b7e04 mov edi,dword ptr [esi+04]
0167:004176e5 7519 jnz 00417700 = MIRANDA32.EXE:.text+0x16700
0167:004176e7 56 push esi
0167:004176e8 68e07c4400 push 00447ce0
0167:004176ed e849000000 call 0041773b = MIRANDA32.EXE:.text+0x1673b
0167:004176f2 56 push esi
0167:004176f3 e87d000000 call 00417775 = MIRANDA32.EXE:.text+0x16775
MIRANDA32.EXE:.text+0x166f8:
*0167:004176f8 a1e07c4400 mov eax,dword ptr [00447ce0]
0167:004176fd 83c40c add esp,+0c
0167:00417700 85ff test edi,edi
0167:00417702 8bf7 mov esi,edi
0167:00417704 75d8 jnz 004176de = MIRANDA32.EXE:.text+0x166de
0167:00417706 85c0 test eax,eax
0167:00417708 5f pop edi
0167:00417709 7410 jz 0041771b = MIRANDA32.EXE:.text+0x1671b
0167:0041770b 8b7004 mov esi,dword ptr [eax+04]
0167:0041770e 50 push eax
0167:0041770f e861000000 call 00417775 = MIRANDA32.EXE:.text+0x16775
--------------------
006afd50 00edfaec -> 00 00 00 00 00 00 00 00 63 6c 69 73 74 5f 6d 6f ........clist_mo
006afd54 00447ce0 = MIRANDA32.EXE:.data+0x6ce0
-> 20 f4 ed 00 20 f4 ed 00 04 01 05 00 a8 f8 ed 00 ... ...........
006afd58 00edfaec -> 00 00 00 00 00 00 00 00 63 6c 69 73 74 5f 6d 6f ........clist_mo
006afd5c 00000001
006afd60 00000000
006afd64 00401767 = MIRANDA32.EXE:.text+0x767
--------------------
0167:00401743 56 push esi
0167:00401744 ff15e8e54300 call dword ptr [0043e5e8] -> USER32.DLL!PostQuitMessage
0167:0040174a eb04 jmp 00401750 = MIRANDA32.EXE:.text+0x750
0167:0040174c 89742414 mov dword ptr [esp+14],esi
0167:00401750 6a01 push +01
0167:00401752 5f pop edi
0167:00401753 e920ffffff jmp 00401678 = MIRANDA32.EXE:.text+0x678
0167:00401758 39742414 cmp dword ptr [esp+14],esi
0167:0040175c 0f85d8feffff jnz 0040163a = MIRANDA32.EXE:.text+0x63a
0167:00401762 e86a5f0100 call 004176d1 = MIRANDA32.EXE:.text+0x166d1
MIRANDA32.EXE:.text+0x767:
*0167:00401767 e86d080000 call 00401fd9 = MIRANDA32.EXE:.text+0xfd9
0167:0040176c ff3528874400 push dword ptr [00448728]
0167:00401772 8b35bce04300 mov esi,dword ptr [0043e0bc] -> KERNEL32.DLL!CloseHandle
0167:00401778 ffd6 call esi
0167:0040177a ff3524874400 push dword ptr [00448724]
0167:00401780 ffd6 call esi
0167:00401782 ff3520874400 push dword ptr [00448720]
0167:00401788 ffd6 call esi
0167:0040178a ff35f4764400 push dword ptr [004476f4]
0167:00401790 ff15ece54300 call dword ptr [0043e5ec] -> USER32.DLL!DestroyWindow
0167:00401796 5d pop ebp
--------------------
006afd68 006afe38 -> 78 ff 6a 00 60 b5 f8 bf 00 00 00 00 50 b0 d6 81 x.j.`.......P...
006afd6c 00000000
...
006afd74 81d4cd7e -> 00 81 84 09 d5 81 00 00 00 00 58 cd d4 81 44 00 ..........X...D.
006afd78 fffe6f35
006afd7c 00000000
006afd80 fff99e65
006afd84 00000000
006afd88 00000012
006afd8c 00000000
...
006afd94 002fdad9
006afd98 0000036b
006afd9c 000002eb
006afda0 0043db60 = MIRANDA32.EXE:.text+0x3cb60
--------------------
0167:0043db4b ebf5 jmp 0043db42 = MIRANDA32.EXE:.text+0x3cb42
0167:0043db4d 6a0a push +0a
0167:0043db4f 58 pop eax
0167:0043db50 50 push eax
0167:0043db51 56 push esi
0167:0043db52 53 push ebx
0167:0043db53 53 push ebx
0167:0043db54 ff15f0e04300 call dword ptr [0043e0f0] -> KERNEL32.DLL!GetModuleHandleA
0167:0043db5a 50 push eax
0167:0043db5b e8253afcff call 00401585 = MIRANDA32.EXE:.text+0x585
MIRANDA32.EXE:.text+0x3cb60:
*0167:0043db60 894598 mov dword ptr [ebp-68],eax
0167:0043db63 50 push eax
0167:0043db64 ff1524e34300 call dword ptr [0043e324] -> MSVCRT.DLL!exit
0167:0043db6a 8b45ec mov eax,dword ptr [ebp-14]
0167:0043db6d 8b08 mov ecx,dword ptr [eax]
0167:0043db6f 8b09 mov ecx,dword ptr [ecx]
0167:0043db71 894d88 mov dword ptr [ebp-78],ecx
0167:0043db74 50 push eax
0167:0043db75 51 push ecx
0167:0043db76 e815000000 call 0043db90 = MSVCRT.DLL!_XcptFilter
0167:0043db7b 59 pop ecx
--------------------
006afda4 00400000 = MIRANDA32.EXE+0x0
-> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ..............
006afda8 00000000
006afdac 81d4cd7e -> 00 81 84 09 d5 81 00 00 00 00 58 cd d4 81 44 00 ..........X...D.
006afdb0 00000001
006afdb4 00000000
006afdb8 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006afdbc 005a0000
006afdc0 c0000005
006afdc4 81d4cd7e -> 00 81 84 09 d5 81 00 00 00 00 58 cd d4 81 44 00 ..........X...D.
006afdc8 007d0ec0 -> c8 0e 7d 00 00 00 00 00 44 3a 5c 61 43 74 69 76 ..}.....D:\aCtiv
006afdcc 00000000
...
006afdd4 007d0e70 -> 50 0e 7d 00 30 0e 7d 00 10 0e 7d 00 f0 0d 7d 00 P.}.0.}...}...}.
006afdd8 00000001
006afddc 00000044
006afde0 00000000
...
006afe08 00000401
006afe0c 00000001
006afe10 00000000
...
006afe18 000011a2
006afe1c 00000000
006afe20 006afdb4 -> 00 00 00 00 50 b0 d6 81 00 00 5a 00 05 00 00 c0 ....P.....Z.....
006afe24 005b00f8 -> d0 01 5b 00 ec 01 5b 00 24 01 5b 00 49 68 f7 bf ..[...[.$.[.Ih..
006afe28 006aff68 -> ff ff ff ff b4 05 fc bf 38 91 f7 bf 00 00 00 00 ........8.......
006afe2c 0043d710 = MIRANDA32.EXE:.text+0x3c710
-> ff 25 98 e2 43 00 ff 25 94 e2 43 00 ff 25 90 e2 .%..C..%..C..%..
006afe30 0043e888 = MIRANDA32.EXE:.rdata+0x888
-> ff ff ff ff 6a db 43 00 7e db 43 00 c0 ef 03 00 ....j.C...C.....
006afe34 00000000
006afe38 006aff78 -> f4 ff 6a 00 12 b4 f8 bf 20 a0 d5 81 08 00 00 00 ..j..... .......
006afe3c bff8b560 = KERNEL32!ApplicationStartup
--------------------
0167:bff8b53c 7413 jz bff8b551 = KERNEL32.DLL:.text+0x12551
0167:bff8b53e 6a00 push +00
0167:bff8b540 56 push esi
0167:bff8b541 e82859ffff call bff80e6e = KERNEL32.DLL:.text+0x7e6e
0167:bff8b546 50 push eax
0167:bff8b547 6800050000 push 00000500
0167:bff8b54c e8c45fffff call bff81515 = KERNEL32.DLL:.text+0x8515
0167:bff8b551 c745fc00000000 mov dword ptr [ebp-04],00000000
0167:bff8b558 8b45d4 mov eax,dword ptr [ebp-2c]
0167:bff8b55b e8b98dfeff call bff74319 = KERNEL32.DLL:_FREQASM+0x3319
KERNEL32!ApplicationStartup:
*0167:bff8b560 8945d8 mov dword ptr [ebp-28],eax
0167:bff8b563 eb1a jmp bff8b57f = KERNEL32.DLL:.text+0x1257f
0167:bff8b565 ff75ec push dword ptr [ebp-14]
0167:bff8b568 e8c7250100 call bff9db34 = KERNEL32.DLL!UnhandledExceptionFilter
0167:bff8b56d c3 retd
0167:bff8b56e 8b65e8 mov esp,dword ptr [ebp-18]
0167:bff8b571 8b45e0 mov eax,dword ptr [ebp-20]
0167:bff8b574 80480308 or byte ptr [eax+03],08
0167:bff8b578 6aff push -01
0167:bff8b57a e8501c0000 call bff8d1cf = KERNEL32.DLL:.text+0x141cf
0167:bff8b57f c745fcffffffff mov dword ptr [ebp-04],ffffffff
--------------------
006afe40 00000000
006afe44 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006afe48 005a0000
006afe4c 6172694d
006afe50 3361646e
006afe54 58450032
006afe58 00000045
006afe5c 00000000
...
006aff38 006aff6c -> b4 05 fc bf 38 91 f7 bf 00 00 00 00 f4 ff 6a 00 ....8.........j.
006aff3c 81d0d050 -> 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
006aff40 81d49ccc -> 34 00 00 a0 0c 48 d4 81 14 66 d4 81 8c b8 d7 81 4....H...f......
006aff44 c1804840 -> 01 00 00 00 20 a0 d5 81 50 b0 d6 81 20 83 6c e6 .... ...P... .l.
006aff48 006aff6c -> b4 05 fc bf 38 91 f7 bf 00 00 00 00 f4 ff 6a 00 ....8.........j.
006aff4c 0043da2c = MIRANDA32.EXE:.text+0x3ca2c
-> 55 8b ec 6a ff 68 88 e8 43 00 68 10 d7 43 00 64 U..j.h..C.h..C.d
006aff50 bff7b326 = KERNEL32.DLL:.text+0x2326
--------------------
0167:bff7b309 8b00 mov eax,dword ptr [eax]
0167:bff7b30b 894304 mov dword ptr [ebx+04],eax
0167:bff7b30e 6800020000 push 00000200
0167:bff7b313 51 push ecx
0167:bff7b314 ff75fc push dword ptr [ebp-04]
0167:bff7b317 56 push esi
0167:bff7b318 e8f4edffff call bff7a111 = KERNEL32.DLL:.text+0x1111
0167:bff7b31d ff750c push dword ptr [ebp+0c]
0167:bff7b320 56 push esi
0167:bff7b321 e8caedffff call bff7a0f0 = KERNEL32.DLL:.text+0x10f0
KERNEL32.DLL:.text+0x2326:
*0167:bff7b326 b801000000 mov eax,00000001
0167:bff7b32b 5f pop edi
0167:bff7b32c 5e pop esi
0167:bff7b32d 5b pop ebx
0167:bff7b32e 8be5 mov esp,ebp
0167:bff7b330 5d pop ebp
0167:bff7b331 c20c00 retd 000c
0167:bff7b334 55 push ebp
0167:bff7b335 8bec mov ebp,esp
0167:bff7b337 83ec04 sub esp,+04
0167:bff7b33a a1e49cfcbf mov eax,dword ptr [bffc9ce4]
--------------------
006aff54 00000000
006aff58 81d6b070 -> 00 02 00 00 40 a0 01 00 f7 4d 65 00 11 00 11 00 ....@....Me.....
006aff5c 583e0000
006aff60 006afe40 -> 00 00 00 00 50 b0 d6 81 00 00 5a 00 4d 69 72 61 ....P.....Z.Mira
006aff64 005a0000
006aff68 ffffffff
006aff6c bffc05b4 = KERNEL32.DLL:.text+0x475b4
-> 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 U.....SVWU..]..E
006aff70 bff79138 = KERNEL32.DLL:.text+0x138
-> ff ff ff ff 65 b5 f8 bf 6e b5 f8 bf 00 00 00 00 ....e...n.......
006aff74 00000000
006aff78 006afff4 -> ec cf 6a 86 d5 9d f8 bf 00 00 00 00 ..j.........
006aff7c bff8b412 = KERNEL32.DLL:.text+0x12412
--------------------
0167:bff8b3f3 ff7508 push dword ptr [ebp+08]
0167:bff8b3f6 56 push esi
0167:bff8b3f7 e8c9560000 call bff90ac5 = KERNEL32.DLL:.text+0x17ac5
0167:bff8b3fc ff7508 push dword ptr [ebp+08]
0167:bff8b3ff 33ff xor edi,edi
0167:bff8b401 57 push edi
0167:bff8b402 ff7634 push dword ptr [esi+34]
0167:bff8b405 e80397feff call bff74b0d = KERNEL32.DLL:_FREQASM+0x3b0d
0167:bff8b40a 897d08 mov dword ptr [ebp+08],edi
0167:bff8b40d e84a000000 call bff8b45c = KERNEL32.DLL:.text+0x1245c
KERNEL32.DLL:.text+0x12412:
*0167:bff8b412 a1e49cfcbf mov eax,dword ptr [bffc9ce4]
0167:bff8b417 8b00 mov eax,dword ptr [eax]
0167:bff8b419 83c060 add eax,+60
0167:bff8b41c 50 push eax
0167:bff8b41d e8cb8dfeff call bff741ed = KERNEL32.DLL!98
0167:bff8b422 e87626ffff call bff7da9d = KERNEL32.DLL:.text+0x4a9d
0167:bff8b427 8945f0 mov dword ptr [ebp-10],eax
0167:bff8b42a 837df800 cmp dword ptr [ebp-08],+00
0167:bff8b42e 7408 jz bff8b438 = KERNEL32.DLL:.text+0x12438
0167:bff8b430 ff75f8 push dword ptr [ebp-08]
0167:bff8b433 e843020000 call bff8b67b = KERNEL32.DLL:.text+0x1267b
--------------------
006aff80 81d5a020 -> 07 00 03 00 60 7d 69 e6 a4 00 5b 00 00 00 6b 00 ....`}i...[...k.
006aff84 00000008
006aff88 81d6b050 -> 06 00 19 00 d0 a4 6f e6 00 00 00 00 00 00 00 00 ......o.........
006aff8c 00000000
...
006affd0 0002ffff
006affd4 0000f26a
006affd8 006ae000 -> 00 00 00 00 10 c2 31 82 50 e0 6a 00 6f 63 4e b0 ......1.P.j.ocN.
006affdc 006b0000
006affe0 00000000
006affe4 ffffffff
006affe8 81d471e8 -> 50 45 00 00 4c 01 04 00 c3 58 00 45 00 00 00 00 PE..L....X.E....
006affec 00000000
006afff0 551f583e
006afff4 866acfec
006afff8 bff89dd5 = KERNEL32.DLL:.text+0x10dd5
--------------------
0167:bff89db2 e8a94b0000 call bff8e960 = KERNEL32.DLL:.text+0x15960
0167:bff89db7 56 push esi
0167:bff89db8 e8e32bffff call bff7c9a0 = KERNEL32.DLL:.text+0x39a0
0167:bff89dbd 33c0 xor eax,eax
0167:bff89dbf ebdf jmp bff89da0 = KERNEL32.DLL:.text+0x10da0
0167:bff89dc1 f644240c10 test byte ptr [esp+0c],10
0167:bff89dc6 7505 jnz bff89dcd = KERNEL32.DLL:.text+0x10dcd
0167:bff89dc8 e8a1deffff call bff87c6e = KERNEL32.DLL:.text+0xec6e
0167:bff89dcd ff742408 push dword ptr [esp+08]
0167:bff89dd1 ff542408 call dword ptr [esp+08]
KERNEL32.DLL:.text+0x10dd5:
*0167:bff89dd5 c20c00 retd 000c
0167:bff89dd8 56 push esi
0167:bff89dd9 a1e49cfcbf mov eax,dword ptr [bffc9ce4]
0167:bff89dde 8b742408 mov esi,dword ptr [esp+08]
0167:bff89de2 57 push edi
0167:bff89de3 8b38 mov edi,dword ptr [eax]
0167:bff89de5 8b4608 mov eax,dword ptr [esi+08]
0167:bff89de8 85c0 test eax,eax
0167:bff89dea 7413 jz bff89dff = KERNEL32.DLL:.text+0x10dff
0167:bff89dec 50 push eax
0167:bff89ded e8feb7feff call bff755f0 = KERNEL32.DLL:_FREQASM+0x45f0
--------------------
006afffc 00000000