I have a Compaq Prolinea 5100 (now it reports itself as 5166 since I upgraded the cpu) and before cpu upgrade and still after I get an error every time I try to install the Sound Blaster 16 PCI software. It keeps saying _ins5576 has performed an invalid page fault in module at 016f:fffe0000. I would appreciate any help, Note: This error doesn't occur on my older TRIGEM GEMMASTER which I stole the proccessor from, and memory, it is hard to find support or drivers for it, plus I can't flash it's bios. The following is the Dr. Watson FULL report (done in winme) System snapshot taken on 1/3/2003 1:27:25 AM. *----> Summary/Overview Application Name: _ins5576._mp Description: InstallShield Engine Version: 5, 53, 168, 0 Product: InstallShield® Manufacturer: InstallShield Software Corporation -------------------- If the Taskbar is behaving strangely, try exiting Multimedia background task support module. Module Name: mmtask.tsk Description: Multimedia background task support module Version: 4.90.3000 Product: Microsoft Windows Manufacturer: Microsoft Corporation -------------------- 3Dlabs Windows 95 Mini Display Driver does not appear to be a Windows 95 Plug-and-Play compatible display driver. Module Name: glint.drv Description: 3Dlabs Windows 95 Mini Display Driver Version: 4.10.01.2105-0359 WHQL Product: 3Dlabs Windows 95 Drivers Manufacturer: 3Dlabs Incorporated User's Remarks: *----> System Information Task list Startup Items System Hooks Kernel Drivers User-Mode Drivers 32-bit Modules 16-bit Modules Details 016f:fffe0000 page not present sel type base lim/bot - cs 016f r-x- 00000000 ffffffff ss 0177 rw-e 00000000 0000d7a0 ds 0177 rw-e 00000000 0000d7a0 es 0177 rw-e 00000000 0000d7a0 fs 53f7 rw-- 8175ddc4 00000037 gs 0000 ---- stack base: 005c0000 TIB limits: 006bb000 - 006c0000 -- exception record -- Exception Code: c0000005 (access violation) Exception Address: fffe0000 Exception Info: 00000000 fffe0000 >016f:fffe0000 page not present -- stack summary -- 0177:006bf388 016f:fffe0000 016f:fffe0000 (2000d218,006bf794,006bf770,006bf794, 00000001,00000000,006bf798,01770eb0) 0177:01770eb0 016f:20003780 PFMOD.DLL:.text+0x2780 (2000d64c,2000d634,2000d604,2000d5f0, 2000d59c,2000d568,00000000,00000000) 0177:2000d68c 016f:2000d670 PFMOD.DLL:.rdata+0x670 (200026d0,20002710,20002810,20002870, 200028e0,20002c50,20002c60,20002cd0) -- stack trace -- 0177:006bf388 016f:fffe0000 016f:fffe0000 (2000d218,006bf794,006bf770,006bf794, 00000001,00000000,006bf798,01770eb0) 0177:01770eb0 016f:20003780 PFMOD.DLL:.text+0x2780 (2000d64c,2000d634,2000d604,2000d5f0, 2000d59c,2000d568,00000000,00000000) 016f:20003767 55 push ebp 016f:20003768 56 push esi 016f:20003769 57 push edi 016f:2000376a 8bbc2420010000 mov edi,dword ptr [esp+00000120] 016f:20003771 33db xor ebx,ebx 016f:20003773 33f6 xor esi,esi 016f:20003775 3bfb cmp edi,ebx 016f:20003777 8be9 mov ebp,ecx 016f:20003779 7511 jnz 2000378c = PFMOD.DLL:.text+0x278c 016f:2000377b e830180000 call 20004fb0 = PFMOD.DLL:.text+0x3fb0 PFMOD.DLL:.text+0x2780: *016f:20003780 8bcd mov ecx,ebp 016f:20003782 8bf0 mov esi,eax 016f:20003784 e8b7180000 call 20005040 = PFMOD.DLL:.text+0x4040 016f:20003789 894564 mov dword ptr [ebp+64],eax 016f:2000378c 53 push ebx 016f:2000378d 53 push ebx 016f:2000378e 53 push ebx 016f:2000378f 53 push ebx 016f:20003790 6a01 push +01 016f:20003792 e843ebffff call 200022da = PFMOD.DLL:.text+0x12da 016f:20003797 3bc6 cmp eax,esi -------------------- 0177:2000d68c 016f:2000d670 PFMOD.DLL:.rdata+0x670 (200026d0,20002710,20002810,20002870, 200028e0,20002c50,20002c60,20002cd0) 016f:2000d656 0020 add byte ptr [eax],ah 016f:2000d658 805d0020 sbb byte ptr [ebp],20 016f:2000d65c 3028 xor byte ptr [eax],ch 016f:2000d65e 0020 add byte ptr [eax],ah 016f:2000d660 90 nop 016f:2000d661 2800 sub byte ptr [eax],al 016f:2000d663 2000 and byte ptr [eax],al 016f:2000d665 2900 sub dword ptr [eax],eax 016f:2000d667 20802c002080 and byte ptr [eax+8020002c],al 016f:2000d66d 2e0020 add byte ptr ss:[eax],ah PFMOD.DLL:.rdata+0x670: *016f:2000d670 105d00 adc byte ptr [ebp],bl 016f:2000d673 2020 and byte ptr [eax],ah 016f:2000d675 5d pop ebp 016f:2000d676 0020 add byte ptr [eax],ah 016f:2000d678 305d00 xor byte ptr [ebp],bl 016f:2000d67b 20405d and byte ptr [eax+5d],al 016f:2000d67e 0020 add byte ptr [eax],ah 016f:2000d680 50 push eax 016f:2000d681 2800 sub byte ptr [eax],al 016f:2000d683 20c0 and al,al 016f:2000d685 2800 sub byte ptr [eax],al -------------------- -- stack dump -- 006bf330 20004f88 = PFMOD.DLL:.text+0x3f88 -------------------- 016f:20004f68 85c0 test eax,eax 016f:20004f6a 743b jz 20004fa7 = PFMOD.DLL:.text+0x3fa7 016f:20004f6c c705e401012000000000 mov dword ptr [200101e4],00000000 016f:20004f76 60 pushad 016f:20004f77 9c pushfd 016f:20004f78 b824504349 mov eax,49435024 016f:20004f7d 33db xor ebx,ebx 016f:20004f7f 33d2 xor edx,edx 016f:20004f81 0e push cs 016f:20004f82 ff15e0010120 call dword ptr [200101e0] PFMOD.DLL:.text+0x3f88: *016f:20004f88 3c00 cmp al,00 016f:20004f8a 7508 jnz 20004f94 = PFMOD.DLL:.text+0x3f94 016f:20004f8c 03d3 add edx,ebx 016f:20004f8e 8915e4010120 mov dword ptr [200101e4],edx 016f:20004f94 9d popfd 016f:20004f95 61 popad 016f:20004f96 8b0de4010120 mov ecx,dword ptr [200101e4] 016f:20004f9c 33c0 xor eax,eax 016f:20004f9e 85c9 test ecx,ecx 016f:20004fa0 0f95c0 setnz al 016f:20004fa3 5f pop edi -------------------- 006bf334 0000016f 006bf338 00000202 006bf33c 00000000 ... 006bf344 006bf388 -> b0 0e 77 01 80 37 00 20 18 d2 00 20 94 f7 6b 00 ..w..7. ... ..k. 006bf348 006bf35c -> 00 00 00 00 00 00 00 00 00 00 00 00 c9 4f 00 20 .............O. 006bf34c 00000000 006bf350 006bf348 -> 5c f3 6b 00 00 00 00 00 48 f3 6b 00 00 33 32 5f \.k.....H.k..32_ 006bf354 5f323300 006bf358 00000001 006bf35c 00000000 ... 006bf368 20004fc9 = PFMOD.DLL:.text+0x3fc9 -------------------- 016f:20004fb1 8bec mov ebp,esp 016f:20004fb3 83ec10 sub esp,+10 016f:20004fb6 53 push ebx 016f:20004fb7 56 push esi 016f:20004fb8 33c0 xor eax,eax 016f:20004fba 57 push edi 016f:20004fbb 894df0 mov dword ptr [ebp-10],ecx 016f:20004fbe 8945f8 mov dword ptr [ebp-08],eax 016f:20004fc1 8945f4 mov dword ptr [ebp-0c],eax 016f:20004fc4 e897ffffff call 20004f60 = PFMOD.DLL:.text+0x3f60 PFMOD.DLL:.text+0x3fc9: *016f:20004fc9 85c0 test eax,eax 016f:20004fcb 746a jz 20005037 = PFMOD.DLL:.text+0x4037 016f:20004fcd 60 pushad 016f:20004fce 9c pushfd 016f:20004fcf 33db xor ebx,ebx 016f:20004fd1 b900010400 mov ecx,00040100 016f:20004fd6 33c0 xor eax,eax 016f:20004fd8 b4b1 mov ah,b1 016f:20004fda b003 mov al,03 016f:20004fdc 668b75f8 mov si,word ptr [ebp-08] 016f:20004fe0 0e push cs -------------------- 006bf36c 00000000 ... 006bf378 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf37c 00000000 ... 006bf384 006bf770 -> 9c f7 6b 00 c4 43 f3 7f c8 40 44 01 00 00 00 00 ..k..C...@D..... 006bf388 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf38c 20003780 = PFMOD.DLL:.text+0x2780 -------------------- 016f:20003767 55 push ebp 016f:20003768 56 push esi 016f:20003769 57 push edi 016f:2000376a 8bbc2420010000 mov edi,dword ptr [esp+00000120] 016f:20003771 33db xor ebx,ebx 016f:20003773 33f6 xor esi,esi 016f:20003775 3bfb cmp edi,ebx 016f:20003777 8be9 mov ebp,ecx 016f:20003779 7511 jnz 2000378c = PFMOD.DLL:.text+0x278c 016f:2000377b e830180000 call 20004fb0 = PFMOD.DLL:.text+0x3fb0 PFMOD.DLL:.text+0x2780: *016f:20003780 8bcd mov ecx,ebp 016f:20003782 8bf0 mov esi,eax 016f:20003784 e8b7180000 call 20005040 = PFMOD.DLL:.text+0x4040 016f:20003789 894564 mov dword ptr [ebp+64],eax 016f:2000378c 53 push ebx 016f:2000378d 53 push ebx 016f:2000378e 53 push ebx 016f:2000378f 53 push ebx 016f:20003790 6a01 push +01 016f:20003792 e843ebffff call 200022da = PFMOD.DLL:.text+0x12da 016f:20003797 3bc6 cmp eax,esi -------------------- 006bf390 2000d218 = PFMOD.DLL:.rdata+0x218 -> a4 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf394 006bf794 -> b8 0e 77 01 02 40 00 80 c4 f7 6b 00 97 43 f3 7f ..w..@....k..C.. 006bf398 006bf770 -> 9c f7 6b 00 c4 43 f3 7f c8 40 44 01 00 00 00 00 ..k..C...@D..... 006bf39c 006bf794 -> b8 0e 77 01 02 40 00 80 c4 f7 6b 00 97 43 f3 7f ..w..@....k..C.. 006bf3a0 00000001 006bf3a4 00000000 006bf3a8 006bf798 -> 02 40 00 80 c4 f7 6b 00 97 43 f3 7f c8 40 44 01 .@....k..C...@D. 006bf3ac 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf3b0 505c3a43 006bf3b4 52474f52 006bf3b8 46204d41 006bf3bc 53454c49 006bf3c0 4552435c 006bf3c4 56495441 006bf3c8 48535c45 006bf3cc 44455241 006bf3d0 505c4c4c 006bf3d4 646f4d66 006bf3d8 00000000 ... 006bf3e0 80004005 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 006bf3e4 611b83f4 006bf3e8 59760c60 006bf3ec 11d31dae 006bf3f0 c000b8bd -> 3b 1d 28 8d 00 c0 75 02 ff d7 68 20 b9 00 c0 ff ;.(...u...h .... 006bf3f4 b8c12df0 006bf3f8 000008bf 006bf3fc 000009b7 006bf400 84200000 006bf404 08d746dc 006bf408 00000001 006bf40c 00000000 006bf410 006bf3d8 -> 00 00 00 00 00 00 00 00 05 40 00 80 f4 83 1b 61 .........@.....a 006bf414 006bf3e0 -> 05 40 00 80 f4 83 1b 61 60 0c 76 59 ae 1d d3 11 .@.....a`.vY.... 006bf418 006bf3e8 -> 60 0c 76 59 ae 1d d3 11 bd b8 00 c0 f0 2d c1 b8 `.vY.........-.. 006bf41c fae606e5 006bf420 11d2d573 006bf424 a000d48d 006bf428 b19f8ec9 006bf42c 00000000 006bf430 006bf1d0 -> 18 2f fd 7f db 2a f5 7f f0 f1 6b 00 1c f3 6b 00 ./...*....k...k. 006bf434 00000000 006bf438 80040154 -> 50 6a 02 9a 94 62 c7 08 8b f0 0b f0 75 05 33 c0 Pj...b......u.3. 006bf43c 006bf468 -> 90 f4 6b 00 97 43 f3 7f 28 d5 00 20 00 00 00 00 ..k..C..(.. .... 006bf440 7ff343c4 = OLE32.DLL:.text+0x133c4 -------------------- 016f:7ff343a9 894df8 mov dword ptr [ebp-08],ecx 016f:7ff343ac 8945f4 mov dword ptr [ebp-0c],eax 016f:7ff343af 8d45f4 lea eax,[ebp-0c] 016f:7ff343b2 50 push eax 016f:7ff343b3 6a01 push +01 016f:7ff343b5 51 push ecx 016f:7ff343b6 ff7510 push dword ptr [ebp+10] 016f:7ff343b9 ff750c push dword ptr [ebp+0c] 016f:7ff343bc ff7508 push dword ptr [ebp+08] 016f:7ff343bf e8b6fbffff call 7ff33f7a = OLE32.DLL!CoCreateInstanceEx OLE32.DLL:.text+0x133c4: *016f:7ff343c4 8b55f8 mov edx,dword ptr [ebp-08] 016f:7ff343c7 8b4d18 mov ecx,dword ptr [ebp+18] 016f:7ff343ca 8911 mov dword ptr [ecx],edx 016f:7ff343cc 8be5 mov esp,ebp 016f:7ff343ce 5d pop ebp 016f:7ff343cf c21400 retd 0014 016f:7ff343d2 833d08f0fc7f00 cmp dword ptr [7ffcf008],+00 016f:7ff343d9 b800000000 mov eax,00000000 016f:7ff343de 0f8579780300 jnz 7ff6bc5d = OLE32.DLL:.text+0x4ac5d 016f:7ff343e4 84c0 test al,al 016f:7ff343e6 8b442404 mov eax,dword ptr [esp+04] -------------------- 006bf444 2000d528 = PFMOD.DLL:.rdata+0x528 -> e5 06 e6 fa 73 d5 d2 11 8d d4 00 a0 c9 8e 9f b1 ....s........... 006bf448 00000000 ... 006bf454 00000001 006bf458 006bf45c -> a8 d4 00 20 00 00 00 00 54 01 04 80 90 f4 6b 00 ... ....T.....k. 006bf45c 2000d4a8 = PFMOD.DLL:.rdata+0x4a8 -> 60 0c 76 59 ae 1d d3 11 bd b8 00 c0 f0 2d c1 b8 `.vY.........-.. 006bf460 00000000 006bf464 80040154 -> 50 6a 02 9a 94 62 c7 08 8b f0 0b f0 75 05 33 c0 Pj...b......u.3. 006bf468 006bf490 -> 70 f7 6b 00 74 42 00 20 08 9b f5 7f 08 00 00 00 p.k.tB. ........ 006bf46c 7ff34397 = OLE32.DLL:.text+0x13397 -------------------- 016f:7ff34378 ff7518 push dword ptr [ebp+18] 016f:7ff3437b ff15e013f27f call dword ptr [7ff213e0] -> KERNEL32.DLL!IsBadHugeWritePtr 016f:7ff34381 85c0 test eax,eax 016f:7ff34383 0f8587df0200 jnz 7ff62310 = OLE32.DLL:.text+0x41310 016f:7ff34389 ff7518 push dword ptr [ebp+18] 016f:7ff3438c 53 push ebx 016f:7ff3438d ff7510 push dword ptr [ebp+10] 016f:7ff34390 57 push edi 016f:7ff34391 56 push esi 016f:7ff34392 e807000000 call 7ff3439e = OLE32.DLL:.text+0x1339e OLE32.DLL:.text+0x13397: *016f:7ff34397 5f pop edi 016f:7ff34398 5e pop esi 016f:7ff34399 5b pop ebx 016f:7ff3439a 5d pop ebp 016f:7ff3439b c21400 retd 0014 016f:7ff3439e 55 push ebp 016f:7ff3439f 33c9 xor ecx,ecx 016f:7ff343a1 8bec mov ebp,esp 016f:7ff343a3 83ec0c sub esp,+0c 016f:7ff343a6 8b4514 mov eax,dword ptr [ebp+14] 016f:7ff343a9 894df8 mov dword ptr [ebp-08],ecx -------------------- 006bf470 2000d528 = PFMOD.DLL:.rdata+0x528 -> e5 06 e6 fa 73 d5 d2 11 8d d4 00 a0 c9 8e 9f b1 ....s........... 006bf474 00000000 006bf478 00000001 006bf47c 2000d4a8 = PFMOD.DLL:.rdata+0x4a8 -> 60 0c 76 59 ae 1d d3 11 bd b8 00 c0 f0 2d c1 b8 `.vY.........-.. 006bf480 006bf4b8 -> b0 0e 77 01 97 11 00 20 b0 0e 77 01 f8 40 44 01 ..w.... ..w..@D. 006bf484 00000000 006bf488 7ff3432d = OLE32.DLL!CoCreateInstance -------------------- 016f:7ff3430f 00b16d736c94 add byte ptr [ecx+946c736d],dh 016f:7ff34315 bdd0118a23 mov ebp,238a11d0 016f:7ff3431a 00aa00b58e10 add byte ptr [edx+108eb500],ch 016f:7ff34320 8b4104 mov eax,dword ptr [ecx+04] 016f:7ff34323 0faf442404 imul eax,dword ptr [esp+04] 016f:7ff34328 0301 add eax,dword ptr [ecx] 016f:7ff3432a c20400 retd 0004 OLE32.DLL!CoCreateInstance: *016f:7ff3432d 55 push ebp 016f:7ff3432e 8bec mov ebp,esp 016f:7ff34330 53 push ebx 016f:7ff34331 56 push esi 016f:7ff34332 57 push edi 016f:7ff34333 8b7508 mov esi,dword ptr [ebp+08] 016f:7ff34336 85f6 test esi,esi 016f:7ff34338 0f84d2df0200 jz 7ff62310 = OLE32.DLL:.text+0x41310 016f:7ff3433e 6a10 push +10 016f:7ff34340 56 push esi 016f:7ff34341 ff15dc13f27f call dword ptr [7ff213dc] -> KERNEL32.DLL!IsBadHugeReadPtr -------------------- 006bf48c 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf490 006bf770 -> 9c f7 6b 00 c4 43 f3 7f c8 40 44 01 00 00 00 00 ..k..C...@D..... 006bf494 20004274 = PFMOD.DLL:.text+0x3274 -------------------- 016f:2000425a 5b pop ebx 016f:2000425b 83c408 add esp,+08 016f:2000425e c3 retd 016f:2000425f 8d54240c lea edx,[esp+0c] 016f:20004263 52 push edx 016f:20004264 68a8d40020 push 2000d4a8 016f:20004269 6a01 push +01 016f:2000426b 6a00 push +00 016f:2000426d 6828d50020 push 2000d528 016f:20004272 ffd6 call esi PFMOD.DLL:.text+0x3274: *016f:20004274 85c0 test eax,eax 016f:20004276 7c21 jl 20004299 = PFMOD.DLL:.text+0x3299 016f:20004278 8b44240c mov eax,dword ptr [esp+0c] 016f:2000427c 85c0 test eax,eax 016f:2000427e 7406 jz 20004286 = PFMOD.DLL:.text+0x3286 016f:20004280 8b08 mov ecx,dword ptr [eax] 016f:20004282 50 push eax 016f:20004283 ff5108 call dword ptr [ecx+08] 016f:20004286 c7432001000000 mov dword ptr [ebx+20],00000001 016f:2000428d ff15acd10020 call dword ptr [2000d1ac] -> OLE32.DLL!CoUninitialize 016f:20004293 5e pop esi -------------------- 006bf498 7ff59b08 = OLE32.DLL:.text+0x38b08 -------------------- 016f:7ff59ae3 b800000000 mov eax,00000000 016f:7ff59ae8 0f856bdf0000 jnz 7ff67a59 = OLE32.DLL:.text+0x46a59 016f:7ff59aee 84c0 test al,al 016f:7ff59af0 0f8570df0000 jnz 7ff67a66 = OLE32.DLL:.text+0x46a66 016f:7ff59af6 55 push ebp 016f:7ff59af7 a104f0fc7f mov eax,dword ptr [7ffcf004] 016f:7ff59afc 8bec mov ebp,esp 016f:7ff59afe 83ec04 sub esp,+04 016f:7ff59b01 50 push eax 016f:7ff59b02 ff150c14f27f call dword ptr [7ff2140c] -> KERNEL32.DLL!TlsGetValue OLE32.DLL:.text+0x38b08: *016f:7ff59b08 8945fc mov dword ptr [ebp-04],eax 016f:7ff59b0b 85c0 test eax,eax 016f:7ff59b0d 7411 jz 7ff59b20 = OLE32.DLL:.text+0x38b20 016f:7ff59b0f 8d4808 lea ecx,[eax+08] 016f:7ff59b12 8b01 mov eax,dword ptr [ecx] 016f:7ff59b14 85c0 test eax,eax 016f:7ff59b16 7408 jz 7ff59b20 = OLE32.DLL:.text+0x38b20 016f:7ff59b18 83f801 cmp eax,+01 016f:7ff59b1b 7407 jz 7ff59b24 = OLE32.DLL:.text+0x38b24 016f:7ff59b1d 48 dec eax 016f:7ff59b1e 8901 mov dword ptr [ecx],eax -------------------- 006bf49c 00000008 006bf4a0 00527024 -> 76 74 00 00 89 00 00 00 01 00 00 00 00 00 00 00 vt.............. 006bf4a4 006bf770 -> 9c f7 6b 00 c4 43 f3 7f c8 40 44 01 00 00 00 00 ..k..C...@D..... 006bf4a8 200042a6 = PFMOD.DLL:.text+0x32a6 -------------------- 016f:20004282 50 push eax 016f:20004283 ff5108 call dword ptr [ecx+08] 016f:20004286 c7432001000000 mov dword ptr [ebx+20],00000001 016f:2000428d ff15acd10020 call dword ptr [2000d1ac] -> OLE32.DLL!CoUninitialize 016f:20004293 5e pop esi 016f:20004294 5b pop ebx 016f:20004295 83c408 add esp,+08 016f:20004298 c3 retd 016f:20004299 c7432000000000 mov dword ptr [ebx+20],00000000 016f:200042a0 ff15acd10020 call dword ptr [2000d1ac] -> OLE32.DLL!CoUninitialize PFMOD.DLL:.text+0x32a6: *016f:200042a6 5e pop esi 016f:200042a7 5b pop ebx 016f:200042a8 83c408 add esp,+08 016f:200042ab c3 retd 016f:200042ac 90 nop 016f:200042ad 90 nop 016f:200042ae 90 nop 016f:200042af 90 nop 016f:200042b0 83ec0c sub esp,+0c 016f:200042b3 53 push ebx 016f:200042b4 56 push esi -------------------- 006bf4ac 20002530 = PFMOD.DLL:.text+0x1530 -------------------- 016f:2000250e 8d4108 lea eax,[ecx+08] 016f:20002511 eb02 jmp 20002515 = PFMOD.DLL:.text+0x1515 016f:20002513 33c0 xor eax,eax 016f:20002515 8b742414 mov esi,dword ptr [esp+14] 016f:20002519 8906 mov dword ptr [esi],eax 016f:2000251b a1c4010120 mov eax,dword ptr [200101c4] 016f:20002520 83f801 cmp eax,+01 016f:20002523 0f850b010000 jnz 20002634 = PFMOD.DLL:.text+0x1634 016f:20002529 6a00 push +00 016f:2000252b e830120000 call 20003760 = PFMOD.DLL:.text+0x2760 PFMOD.DLL:.text+0x1530: *016f:20002530 8b36 mov esi,dword ptr [esi] 016f:20002532 56 push esi 016f:20002533 8b16 mov edx,dword ptr [esi] 016f:20002535 ff5204 call dword ptr [edx+04] 016f:20002538 5f pop edi 016f:20002539 33c0 xor eax,eax 016f:2000253b 5e pop esi 016f:2000253c c20c00 retd 000c 016f:2000253f b904000000 mov ecx,00000004 016f:20002544 bf18d20020 mov edi,2000d218 016f:20002549 8bf0 mov esi,eax -------------------- 006bf4b0 00000000 006bf4b4 006bf790 -> f8 40 44 01 b8 0e 77 01 02 40 00 80 c4 f7 6b 00 .@D...w..@....k. 006bf4b8 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf4bc 20001197 = PFMOD.DLL:.text+0x197 -------------------- 016f:20001181 5b pop ebx 016f:20001182 83c40c add esp,+0c 016f:20001185 c21000 retd 0010 016f:20001188 8b5c2428 mov ebx,dword ptr [esp+28] 016f:2000118c 8b4c2424 mov ecx,dword ptr [esp+24] 016f:20001190 8b06 mov eax,dword ptr [esi] 016f:20001192 53 push ebx 016f:20001193 51 push ecx 016f:20001194 56 push esi 016f:20001195 ff10 call dword ptr [eax] PFMOD.DLL:.text+0x197: *016f:20001197 8bf8 mov edi,eax 016f:20001199 85ff test edi,edi 016f:2000119b 7d16 jge 200011b3 = PFMOD.DLL:.text+0x1b3 016f:2000119d 8bce mov ecx,esi 016f:2000119f e85c120000 call 20002400 = PFMOD.DLL:.text+0x1400 016f:200011a4 56 push esi 016f:200011a5 e8185a0000 call 20006bc2 = PFMOD.DLL:.text+0x5bc2 016f:200011aa 83c404 add esp,+04 016f:200011ad c70300000000 mov dword ptr [ebx],00000000 016f:200011b3 8b4c240c mov ecx,dword ptr [esp+0c] 016f:200011b7 8bc7 mov eax,edi -------------------- 006bf4c0 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf4c4 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf4c8 006bf794 -> b8 0e 77 01 02 40 00 80 c4 f7 6b 00 97 43 f3 7f ..w..@....k..C.. 006bf4cc 006bf790 -> f8 40 44 01 b8 0e 77 01 02 40 00 80 c4 f7 6b 00 .@D...w..@....k. 006bf4d0 00000001 006bf4d4 006bf798 -> 02 40 00 80 c4 f7 6b 00 97 43 f3 7f c8 40 44 01 .@....k..C...@D. 006bf4d8 006bfe28 -> 68 ff 6b 00 20 66 47 00 78 e5 47 00 00 00 00 00 h.k. fG.x.G..... 006bf4dc 2000c96b = PFMOD.DLL:.text+0xb96b -------------------- 016f:2000c95b cc int 3 016f:2000c95c cc int 3 016f:2000c95d cc int 3 016f:2000c95e cc int 3 016f:2000c95f cc int 3 016f:2000c960 8b4508 mov eax,dword ptr [ebp+08] 016f:2000c963 50 push eax 016f:2000c964 e859a2ffff call 20006bc2 = PFMOD.DLL:.text+0x5bc2 016f:2000c969 59 pop ecx 016f:2000c96a c3 retd PFMOD.DLL:.text+0xb96b: *016f:2000c96b b8c8dd0020 mov eax,2000ddc8 016f:2000c970 e9f7a2ffff jmp 20006c6c = PFMOD.DLL:.text+0x5c6c 016f:2000c975 cc int 3 016f:2000c976 cc int 3 016f:2000c977 cc int 3 016f:2000c978 cc int 3 016f:2000c979 cc int 3 016f:2000c97a cc int 3 016f:2000c97b cc int 3 016f:2000c97c cc int 3 016f:2000c97d cc int 3 -------------------- 006bf4e0 ffffffff 006bf4e4 7ff34078 = OLE32.DLL:.text+0x13078 -------------------- 016f:7ff3405b 0f845abe0300 jz 7ff6febb = OLE32.DLL:.text+0x4eebb 016f:7ff34061 8d5f08 lea ebx,[edi+08] 016f:7ff34064 8d4704 lea eax,[edi+04] 016f:7ff34067 50 push eax 016f:7ff34068 8b45f8 mov eax,dword ptr [ebp-08] 016f:7ff3406b ff37 push dword ptr [edi] 016f:7ff3406d ff750c push dword ptr [ebp+0c] 016f:7ff34070 8b00 mov eax,dword ptr [eax] 016f:7ff34072 ff75f8 push dword ptr [ebp-08] 016f:7ff34075 ff500c call dword ptr [eax+0c] OLE32.DLL:.text+0x13078: *016f:7ff34078 8b4df8 mov ecx,dword ptr [ebp-08] 016f:7ff3407b 8903 mov dword ptr [ebx],eax 016f:7ff3407d 8945fc mov dword ptr [ebp-04],eax 016f:7ff34080 8b01 mov eax,dword ptr [ecx] 016f:7ff34082 ff75f8 push dword ptr [ebp-08] 016f:7ff34085 ff5008 call dword ptr [eax+08] 016f:7ff34088 833b00 cmp dword ptr [ebx],+00 016f:7ff3408b 7c09 jl 7ff34096 = OLE32.DLL:.text+0x13096 016f:7ff3408d 83fe01 cmp esi,+01 016f:7ff34090 0f87aebe0300 ja 7ff6ff44 = OLE32.DLL:.text+0x4ef44 016f:7ff34096 8b5dfc mov ebx,dword ptr [ebp-04] -------------------- 006bf4e8 01770f50 -> c0 d1 00 20 01 00 00 00 11 00 00 00 21 00 00 00 ... ........!... 006bf4ec 01770eb0 -> 8c d6 00 20 70 d6 00 20 4c d6 00 20 34 d6 00 20 ... p.. L.. 4.. 006bf4f0 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf4f4 006bf794 -> b8 0e 77 01 02 40 00 80 c4 f7 6b 00 97 43 f3 7f ..w..@....k..C.. 006bf4f8 00000000 006bf4fc 014440c8 = PFMODINTL.DLL:.rdata+0xc8 -> a0 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf500 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf504 00000c6c 006bf508 00000003 006bf50c 00000000 ... 006bf514 006bf534 -> 48 f5 6b 00 26 18 f6 bf 00 00 00 00 76 16 f2 7f H.k.&.......v... 006bf518 bff63613 = KERNEL32.DLL:_FREQASM+0x2613 -------------------- 016f:bff635f7 65d16e04 shr dword ptr gs:[esi+04],EvIa 016f:bff635fb 7222 jc bff6361f = KERNEL32.DLL:_FREQASM+0x261f 016f:bff635fd 65ff32 push dword ptr gs:[edx] 016f:bff63600 8d5204 lea edx,[edx+04] 016f:bff63603 e2f2 loop bff635f7 = KERNEL32.DLL:_FREQASM+0x25f7 016f:bff63605 8bfc mov edi,esp 016f:bff63607 33c0 xor eax,eax 016f:bff63609 65394608 cmp dword ptr gs:[esi+08],eax 016f:bff6360d 7404 jz bff63613 = KERNEL32.DLL:_FREQASM+0x2613 016f:bff6360f 65ff5608 call dword ptr gs:[esi+08] KERNEL32.DLL:_FREQASM+0x2613: *016f:bff63613 8be7 mov esp,edi 016f:bff63615 33c9 xor ecx,ecx 016f:bff63617 8ee9 mov gs,cx 016f:bff63619 5f pop edi 016f:bff6361a 5e pop esi 016f:bff6361b c9 leave 016f:bff6361c c20c00 retd 000c 016f:bff6361f 52 push edx 016f:bff63620 51 push ecx 016f:bff63621 33c0 xor eax,eax 016f:bff63623 48 dec eax -------------------- 006bf51c 00000c6c 006bf520 00000003 006bf524 00000000 ... 006bf52c 85665417 -> 2b 25 21 36 33 32 16 15 15 21 35 00 37 36 35 34 +%!632...!5.7654 006bf530 00000177 006bf534 006bf548 -> b8 19 f6 bf 86 85 00 00 28 fe 6b 00 6d 18 f6 bf ........(.k.m... 006bf538 bff61826 = KERNEL32.DLL:_FREQASM+0x826 -------------------- 016f:bff617ff 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff 016f:bff61809 c3 retd 016f:bff6180a 52 push edx 016f:bff6180b 50 push eax 016f:bff6180c a1f8bcfbbf mov eax,dword ptr [bffbbcf8] 016f:bff61811 8b00 mov eax,dword ptr [eax] 016f:bff61813 390598b4fbbf cmp dword ptr [bffbb498],eax 016f:bff61819 7413 jz bff6182e = KERNEL32.DLL:_FREQASM+0x82e 016f:bff6181b 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff61821 e869290000 call bff6418f = KERNEL32.DLL:_FREQASM+0x318f KERNEL32.DLL:_FREQASM+0x826: *016f:bff61826 6664ff051e000000 inc word ptr fs:[0000001e] 016f:bff6182e 58 pop eax 016f:bff6182f 5a pop edx 016f:bff61830 c3 retd 016f:bff61831 ff7316 push dword ptr [ebx+16] 016f:bff61834 ff731a push dword ptr [ebx+1a] 016f:bff61837 ff731e push dword ptr [ebx+1e] 016f:bff6183a ff7322 push dword ptr [ebx+22] 016f:bff6183d 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff61843 e88b290000 call bff641d3 = KERNEL32.DLL:_FREQASM+0x31d3 016f:bff61848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff -------------------- 006bf53c 00000000 006bf540 7ff21676 = OLE32.DLL:.text+0x676 -------------------- 016f:7ff2164d 833d08f0fc7f00 cmp dword ptr [7ffcf008],+00 016f:7ff21654 8bec mov ebp,esp 016f:7ff21656 0f85093d0400 jnz 7ff65365 = OLE32.DLL:.text+0x44365 016f:7ff2165c 84c0 test al,al 016f:7ff2165e 0f850e3d0400 jnz 7ff65372 = OLE32.DLL:.text+0x44372 016f:7ff21664 ff7514 push dword ptr [ebp+14] 016f:7ff21667 ff7510 push dword ptr [ebp+10] 016f:7ff2166a ff750c push dword ptr [ebp+0c] 016f:7ff2166d ff7508 push dword ptr [ebp+08] 016f:7ff21670 ff155811f27f call dword ptr [7ff21158] -> USER32.DLL!DefWindowProcA OLE32.DLL:.text+0x676: *016f:7ff21676 5d pop ebp 016f:7ff21677 c21000 retd 0010 016f:7ff2167a 55 push ebp 016f:7ff2167b 8b44240c mov eax,dword ptr [esp+0c] 016f:7ff2167f 8bec mov ebp,esp 016f:7ff21681 81ec28010000 sub esp,00000128 016f:7ff21687 83f802 cmp eax,+02 016f:7ff2168a 53 push ebx 016f:7ff2168b 56 push esi 016f:7ff2168c 57 push edi 016f:7ff2168d 7423 jz 7ff216b2 = OLE32.DLL:.text+0x6b2 -------------------- 006bf544 bff848fc = KERNEL32.DLL:.text+0x1b8fc -------------------- 016f:bff848d8 c1c210 rol edx,10 016f:bff848db e9c8f7ffff jmp bff840a8 = KERNEL32.DLL:.text+0x1b0a8 016f:bff848e0 0fbf4316 movsx eax,word ptr [ebx+16] 016f:bff848e4 50 push eax 016f:bff848e5 668b4318 mov ax,word ptr [ebx+18] 016f:bff848e9 50 push eax 016f:bff848ea ff731a push dword ptr [ebx+1a] 016f:bff848ed e8f3cefdff call bff617e5 = KERNEL32.DLL!K32Thk1632Prolog 016f:bff848f2 e8deecfdff call bff635d5 = KERNEL32.DLL:_FREQASM+0x25d5 016f:bff848f7 e80ecffdff call bff6180a = KERNEL32.DLL!K32Thk1632Epilog KERNEL32.DLL:.text+0x1b8fc: *016f:bff848fc 8bd0 mov edx,eax 016f:bff848fe c1c210 rol edx,10 016f:bff84901 e9aaf7ffff jmp bff840b0 = KERNEL32.DLL:.text+0x1b0b0 016f:bff84906 0fbf4316 movsx eax,word ptr [ebx+16] 016f:bff8490a 50 push eax 016f:bff8490b ff7318 push dword ptr [ebx+18] 016f:bff8490e e8d2cefdff call bff617e5 = KERNEL32.DLL!K32Thk1632Prolog 016f:bff84913 e8ceebfdff call bff634e6 = KERNEL32.DLL:_FREQASM+0x24e6 016f:bff84918 e8edcefdff call bff6180a = KERNEL32.DLL!K32Thk1632Epilog 016f:bff8491d e986f7ffff jmp bff840a8 = KERNEL32.DLL:.text+0x1b0a8 016f:bff84922 33c0 xor eax,eax -------------------- 006bf548 bff619b8 = KERNEL32.DLL:_FREQASM+0x9b8 -------------------- 016f:bff61991 51 push ecx 016f:bff61992 c1cf10 ror edi,10 016f:bff61995 6664873d0e000000 xchg word ptr fs:[0000000e],di 016f:bff6199d 57 push edi 016f:bff6199e 686d18f6bf push bff6186d 016f:bff619a3 64ff3500000000 push dword ptr fs:[00000000] 016f:bff619aa 64892500000000 mov dword ptr fs:[00000000],esp 016f:bff619b1 55 push ebp 016f:bff619b2 8d6c24fc lea ebp,[esp-04] 016f:bff619b6 ffd2 call edx KERNEL32.DLL:_FREQASM+0x9b8: *016f:bff619b8 5d pop ebp 016f:bff619b9 0fb6c9 movzx ecx,cl 016f:bff619bc 648f0500000000 pop dword ptr fs:[00000000] 016f:bff619c3 8d642404 lea esp,[esp+04] 016f:bff619c7 5f pop edi 016f:bff619c8 6664893d0e000000 mov word ptr fs:[0000000e],di 016f:bff619d0 5b pop ebx 016f:bff619d1 660fb22424 lss sp,dword ptr [esp] 016f:bff619d6 6664891d1e000000 mov word ptr fs:[0000001e],bx 016f:bff619de 5b pop ebx 016f:bff619df 0bdb or ebx,ebx -------------------- 006bf54c 00008586 006bf550 006bfe28 -> 68 ff 6b 00 20 66 47 00 78 e5 47 00 00 00 00 00 h.k. fG.x.G..... 006bf554 bff6186d = KERNEL32.DLL:_FREQASM+0x86d -------------------- 016f:bff6183d 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff61843 e88b290000 call bff641d3 = KERNEL32.DLL:_FREQASM+0x31d3 016f:bff61848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff 016f:bff61852 ff5326 call dword ptr [ebx+26] 016f:bff61855 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff6185b e82f290000 call bff6418f = KERNEL32.DLL:_FREQASM+0x318f 016f:bff61860 6664ff051e000000 inc word ptr fs:[0000001e] 016f:bff61868 b114 mov cl,14 016f:bff6186a 8be5 mov esp,ebp 016f:bff6186c c3 retd KERNEL32.DLL:_FREQASM+0x86d: *016f:bff6186d 8b442404 mov eax,dword ptr [esp+04] 016f:bff61871 f7400406000000 test dword ptr [eax+04],00000006 016f:bff61878 7419 jz bff61893 = KERNEL32.DLL:_FREQASM+0x893 016f:bff6187a 8b442408 mov eax,dword ptr [esp+08] 016f:bff6187e 8178046d18f6bf cmp dword ptr [eax+04],bff6186d 016f:bff61885 750c jnz bff61893 = KERNEL32.DLL:_FREQASM+0x893 016f:bff61887 668b4808 mov cx,word ptr [eax+08] 016f:bff6188b 6664890d0e000000 mov word ptr fs:[0000000e],cx 016f:bff61893 b801000000 mov eax,00000001 016f:bff61898 c3 retd 016f:bff61899 9d popfd -------------------- 006bf558 85665417 -> 2b 25 21 36 33 32 16 15 15 21 35 00 37 36 35 34 +%!632...!5.7654 006bf55c 00000000 006bf560 1b778566 006bf564 0000015f 006bf568 02460000 006bf56c 85c40000 -------------------- 016f:85c3ffe9 0020 add byte ptr [eax],ah 016f:85c3ffeb 0002 add byte ptr [edx],al 016f:85c3ffed 000f add byte ptr [edi],cl 016f:85c3ffef ff8082080820 inc dword ptr [eax+20080882] 016f:85c3fff5 80fff8 cmp bh,f8 016f:85c3fff8 0021 add byte ptr [ecx],ah 016f:85c3fffa 0002 add byte ptr [edx],al 016f:85c3fffc 0800 or byte ptr [eax],al 016f:85c3fffe 3f aas 016f:85c3ffff c3 retd *016f:85c40000 fe02 inc byte ptr [edx] 016f:85c40002 0000 add byte ptr [eax],al 016f:85c40004 0000 add byte ptr [eax],al 016f:85c40006 000404 add byte ptr [esp+eax],al 016f:85c40009 004040 add byte ptr [eax+40],al 016f:85c4000c 0404 add al,04 016f:85c4000e 2041fa and byte ptr [ecx-06],al 016f:85c40011 3f aas 016f:85c40012 844248 test byte ptr [edx+48],al 016f:85c40015 48 dec eax 016f:85c40016 2485 and al,85 -------------------- 006bf570 3cc60003 006bf574 09b70000 006bf578 27370000 006bf57c 0000015f 006bf580 27371b77 006bf584 85ca015f -> f8 00 c2 00 06 01 7a 00 00 ff ff 00 0e ff ef 00 ......z......... 006bf588 09973d92 006bf58c 00000004 006bf590 00000000 006bf594 7ff2d58d = OLE32.DLL:.text+0xc58d -------------------- 016f:7ff2d576 c7460801000000 mov dword ptr [esi+08],00000001 016f:7ff2d57d 33c0 xor eax,eax 016f:7ff2d57f 5d pop ebp 016f:7ff2d580 5f pop edi 016f:7ff2d581 5e pop esi 016f:7ff2d582 5b pop ebx 016f:7ff2d583 c3 retd 016f:7ff2d584 8bc1 mov eax,ecx 016f:7ff2d586 c70100000000 mov dword ptr [ecx],00000000 016f:7ff2d58c c3 retd OLE32.DLL:.text+0xc58d: *016f:7ff2d58d 55 push ebp 016f:7ff2d58e 8b4c240c mov ecx,dword ptr [esp+0c] 016f:7ff2d592 8bec mov ebp,esp 016f:7ff2d594 81f904040000 cmp ecx,00000404 016f:7ff2d59a 741f jz 7ff2d5bb = OLE32.DLL:.text+0xc5bb 016f:7ff2d59c ff7514 push dword ptr [ebp+14] 016f:7ff2d59f 81f905040000 cmp ecx,00000405 016f:7ff2d5a5 0f84f77d0300 jz 7ff653a2 = OLE32.DLL:.text+0x443a2 016f:7ff2d5ab ff7510 push dword ptr [ebp+10] 016f:7ff2d5ae 51 push ecx 016f:7ff2d5af ff7508 push dword ptr [ebp+08] -------------------- 006bf598 00000000 ... 006bf5a0 00000003 006bf5a4 00103d92 006bf5a8 00000000 006bf5ac 85b60000 -> 00 00 27 7c 54 80 55 11 e5 25 38 15 40 79 9d 4e ..'|T.U..%8.@y.N 006bf5b0 ffff7a6d 006bf5b4 85ca1b77 -> 2f 5d dd 5d 39 39 00 3f 17 3c 3f 3c 11 12 17 39 /].]99.?. b8 01 16 b2 bf 37 8a 2b ff ff 00 00 ff cd 04 00 .....7.+........ 006bf5cc 00030000 006bf5d0 7ff2d58d = OLE32.DLL:.text+0xc58d -------------------- 016f:7ff2d576 c7460801000000 mov dword ptr [esi+08],00000001 016f:7ff2d57d 33c0 xor eax,eax 016f:7ff2d57f 5d pop ebp 016f:7ff2d580 5f pop edi 016f:7ff2d581 5e pop esi 016f:7ff2d582 5b pop ebx 016f:7ff2d583 c3 retd 016f:7ff2d584 8bc1 mov eax,ecx 016f:7ff2d586 c70100000000 mov dword ptr [ecx],00000000 016f:7ff2d58c c3 retd OLE32.DLL:.text+0xc58d: *016f:7ff2d58d 55 push ebp 016f:7ff2d58e 8b4c240c mov ecx,dword ptr [esp+0c] 016f:7ff2d592 8bec mov ebp,esp 016f:7ff2d594 81f904040000 cmp ecx,00000404 016f:7ff2d59a 741f jz 7ff2d5bb = OLE32.DLL:.text+0xc5bb 016f:7ff2d59c ff7514 push dword ptr [ebp+14] 016f:7ff2d59f 81f905040000 cmp ecx,00000405 016f:7ff2d5a5 0f84f77d0300 jz 7ff653a2 = OLE32.DLL:.text+0x443a2 016f:7ff2d5ab ff7510 push dword ptr [ebp+10] 016f:7ff2d5ae 51 push ecx 016f:7ff2d5af ff7508 push dword ptr [ebp+08] -------------------- 006bf5d4 08b78b2f 006bf5d8 00000000 ... 006bf5e0 0c6c0003 006bf5e4 00000000 006bf5e8 0002050c 006bf5ec 169809b7 006bf5f0 000008ff 006bf5f4 00000000 006bf5f8 00030000 006bf5fc 000362b0 006bf600 53f70177 006bf604 01770000 -> 00 00 00 00 00 00 00 00 ff ff ff ff 50 0c 00 00 ............P... 006bf608 006bf64e -> 05 00 00 00 f8 66 00 00 00 00 ac 5b af 0c 6c 0c .....f.....[..l. 006bf60c 864c5417 -> 86 10 86 20 86 30 86 40 86 50 86 60 86 70 86 80 ... .0.@.P.`.p.. 006bf610 00000177 006bf614 004c9249 -> 6c 00 00 0c 00 00 00 01 00 00 00 54 91 4c 00 90 l..........T.L.. 006bf618 006bf630 -> b8 19 00 00 00 00 00 00 00 00 6b 00 6d 18 f6 bf ..........k.m... 006bf61c bff84609 = KERNEL32.DLL:.text+0x1b609 -------------------- 016f:bff845e7 e854fffdff call bff64540 = KERNEL32.DLL:_FREQASM+0x3540 016f:bff845ec 8bd0 mov edx,eax 016f:bff845ee c1c210 rol edx,10 016f:bff845f1 e9e2faffff jmp bff840d8 = KERNEL32.DLL:.text+0x1b0d8 016f:bff845f6 ff7316 push dword ptr [ebx+16] 016f:bff845f9 0fbf431a movsx eax,word ptr [ebx+1a] 016f:bff845fd 50 push eax 016f:bff845fe ff731c push dword ptr [ebx+1c] 016f:bff84601 ff7320 push dword ptr [ebx+20] 016f:bff84604 e8bbfefdff call bff644c4 = KERNEL32.DLL:_FREQASM+0x34c4 KERNEL32.DLL:.text+0x1b609: *016f:bff84609 8bd0 mov edx,eax 016f:bff8460b c1c210 rol edx,10 016f:bff8460e e9b5faffff jmp bff840c8 = KERNEL32.DLL:.text+0x1b0c8 016f:bff84613 ff7316 push dword ptr [ebx+16] 016f:bff84616 ff731a push dword ptr [ebx+1a] 016f:bff84619 ff731e push dword ptr [ebx+1e] 016f:bff8461c ff7322 push dword ptr [ebx+22] 016f:bff8461f e8a8fdfdff call bff643cc = KERNEL32.DLL:_FREQASM+0x33cc 016f:bff84624 8bd0 mov edx,eax 016f:bff84626 c1c210 rol edx,10 016f:bff84629 e9a2faffff jmp bff840d0 = KERNEL32.DLL:.text+0x1b0d0 -------------------- 006bf620 00006000 006bf624 00000000 006bf628 ffff0000 006bf62c 00000003 006bf630 000019b8 006bf634 00000000 006bf638 006b0000 006bf63c bff6186d = KERNEL32.DLL:_FREQASM+0x86d -------------------- 016f:bff6183d 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff61843 e88b290000 call bff641d3 = KERNEL32.DLL:_FREQASM+0x31d3 016f:bff61848 6664c7051e000000ffff mov word ptr fs:[0000001e],ffff 016f:bff61852 ff5326 call dword ptr [ebx+26] 016f:bff61855 8b1570b4fbbf mov edx,dword ptr [bffbb470] 016f:bff6185b e82f290000 call bff6418f = KERNEL32.DLL:_FREQASM+0x318f 016f:bff61860 6664ff051e000000 inc word ptr fs:[0000001e] 016f:bff61868 b114 mov cl,14 016f:bff6186a 8be5 mov esp,ebp 016f:bff6186c c3 retd KERNEL32.DLL:_FREQASM+0x86d: *016f:bff6186d 8b442404 mov eax,dword ptr [esp+04] 016f:bff61871 f7400406000000 test dword ptr [eax+04],00000006 016f:bff61878 7419 jz bff61893 = KERNEL32.DLL:_FREQASM+0x893 016f:bff6187a 8b442408 mov eax,dword ptr [esp+08] 016f:bff6187e 8178046d18f6bf cmp dword ptr [eax+04],bff6186d 016f:bff61885 750c jnz bff61893 = KERNEL32.DLL:_FREQASM+0x893 016f:bff61887 668b4808 mov cx,word ptr [eax+08] 016f:bff6188b 6664890d0e000000 mov word ptr fs:[0000000e],cx 016f:bff61893 b801000000 mov eax,00000001 016f:bff61898 c3 retd 016f:bff61899 9d popfd -------------------- 006bf640 864c0000 -> 11 5a eb 5b fa 5b 04 5c f3 5d 2b 5e 99 5f 1d 60 .Z.[.[.\.]+^._.` 006bf644 00000000 ... 006bf64c 00050000 006bf650 66f80000 006bf654 00000000 006bf658 0caf5bac 006bf65c 00000c6c 006bf660 00000000 006bf664 00021a60 006bf668 00000000 ... 006bf670 00000400 006bf674 62b055ef 006bf678 86ec0003 -> 55 00 43 57 11 00 07 ff fe 3a aa 3e aa ff ff 00 U.CW.....:.>.... 006bf67c 01a70020 006bf680 00000000 006bf684 1c570000 006bf688 00000000 006bf68c 80000000 ... 006bf694 88000000 006bf698 570f0000 006bf69c 0000c05c 006bf6a0 bff45e5f = USER32.DLL:.text+0x4e5f -------------------- 016f:bff45e39 66ff75bc push word ptr [ebp-44] 016f:bff45e3d 8d45b8 lea eax,[ebp-48] 016f:bff45e40 50 push eax 016f:bff45e41 804dec01 or byte ptr [ebp-14],01 016f:bff45e45 e896240000 call bff482e0 = KERNEL32.DLL!FT_Thunk 016f:bff45e4a 0fb7d8 movzx ebx,ax 016f:bff45e4d 8b4d34 mov ecx,dword ptr [ebp+34] 016f:bff45e50 e891240000 call bff482e6 = KERNEL32.DLL!SUnMapLS 016f:bff45e55 e862240000 call bff482bc = KERNEL32.DLL!SUnMapLS_IP_EBP_16 016f:bff45e5a e851240000 call bff482b0 = KERNEL32.DLL!SUnMapLS_IP_EBP_12 USER32.DLL:.text+0x4e5f: *016f:bff45e5f e90c250000 jmp bff48370 = KERNEL32.DLL!FT_Exit48 016f:bff45e64 55 push ebp 016f:bff45e65 7372 jnc bff45ed9 = USER32.DLL:.text+0x4ed9 016f:bff45e67 3332 xor esi,dword ptr [edx] 016f:bff45e69 7468 jz bff45ed3 = USER32.DLL:.text+0x4ed3 016f:bff45e6b 6b436f6e imul eax,dword ptr [ebx+6f],6e 016f:bff45e6f 6e outs dx,byte ptr ds:[esi] 016f:bff45e70 656374696f arpl word ptr gs:[ecx+ebp*2+6f],esi 016f:bff45e75 6e outs dx,byte ptr ds:[esi] 016f:bff45e76 44 inc esp 016f:bff45e77 61 popad -------------------- 006bf6a4 006bf6c1 -> fe 6b 00 9c 26 f6 bf 4a 5e f4 bf 00 70 6b 00 00 .k..&..J^...pk.. ... 006bf6ac 00000000 006bf6b0 01da0000 006bf6b4 00000c4f 006bf6b8 08ff06a7 006bf6bc 81f26554 -> a7 06 ff 08 00 00 00 94 c5 f2 13 d5 23 9b c5 36 ............#..6 006bf6c0 006bfe28 -> 68 ff 6b 00 20 66 47 00 78 e5 47 00 00 00 00 00 h.k. fG.x.G..... 006bf6c4 bff6269c = KERNEL32.DLL:_FREQASM+0x169c -> 55 8b ec 8b 45 08 f7 40 04 06 00 00 00 75 48 83 U...E..@.....uH. 006bf6c8 bff45e4a = USER32.DLL:.text+0x4e4a -------------------- 016f:bff45e29 8b4534 mov eax,dword ptr [ebp+34] 016f:bff45e2c e813240000 call bff48244 = KERNEL32.DLL!SMapLS 016f:bff45e31 895534 mov dword ptr [ebp+34],edx 016f:bff45e34 50 push eax 016f:bff45e35 66ff752e push word ptr [ebp+2e] 016f:bff45e39 66ff75bc push word ptr [ebp-44] 016f:bff45e3d 8d45b8 lea eax,[ebp-48] 016f:bff45e40 50 push eax 016f:bff45e41 804dec01 or byte ptr [ebp-14],01 016f:bff45e45 e896240000 call bff482e0 = KERNEL32.DLL!FT_Thunk USER32.DLL:.text+0x4e4a: *016f:bff45e4a 0fb7d8 movzx ebx,ax 016f:bff45e4d 8b4d34 mov ecx,dword ptr [ebp+34] 016f:bff45e50 e891240000 call bff482e6 = KERNEL32.DLL!SUnMapLS 016f:bff45e55 e862240000 call bff482bc = KERNEL32.DLL!SUnMapLS_IP_EBP_16 016f:bff45e5a e851240000 call bff482b0 = KERNEL32.DLL!SUnMapLS_IP_EBP_12 016f:bff45e5f e90c250000 jmp bff48370 = KERNEL32.DLL!FT_Exit48 016f:bff45e64 55 push ebp 016f:bff45e65 7372 jnc bff45ed9 = USER32.DLL:.text+0x4ed9 016f:bff45e67 3332 xor esi,dword ptr [edx] 016f:bff45e69 7468 jz bff45ed3 = USER32.DLL:.text+0x4ed3 016f:bff45e6b 6b436f6e imul eax,dword ptr [ebx+6f],6e -------------------- 006bf6cc 006b7000 -> 34 03 0d 47 45 54 52 45 47 49 10 00 44 41 54 41 4..GETREGI..DATA 006bf6d0 00000000 006bf6d4 006bf6c4 -> 9c 26 f6 bf 4a 5e f4 bf 00 70 6b 00 00 00 00 00 .&..J^...pk..... 006bf6d8 00000001 006bf6dc 7e93307d 006bf6e0 00000000 006bf6e4 00000001 006bf6e8 005b0000 006bf6ec 006bf724 -> 8c f7 6b 00 a9 4b f4 7f 00 00 00 00 5c c0 00 00 ..k..K......\... 006bf6f0 7ff4073f = OLE32.DLL:.text+0x1f73f -------------------- 016f:7ff4071e ff7528 push dword ptr [ebp+28] 016f:7ff40721 ff7524 push dword ptr [ebp+24] 016f:7ff40724 ff7520 push dword ptr [ebp+20] 016f:7ff40727 ff751c push dword ptr [ebp+1c] 016f:7ff4072a ff7518 push dword ptr [ebp+18] 016f:7ff4072d ff7514 push dword ptr [ebp+14] 016f:7ff40730 ff7510 push dword ptr [ebp+10] 016f:7ff40733 ff750c push dword ptr [ebp+0c] 016f:7ff40736 ff7508 push dword ptr [ebp+08] 016f:7ff40739 ff153412f27f call dword ptr [7ff21234] -> USER32.DLL!CreateWindowExA OLE32.DLL:.text+0x1f73f: *016f:7ff4073f 5d pop ebp 016f:7ff40740 c23000 retd 0030 016f:7ff40743 56 push esi 016f:7ff40744 57 push edi 016f:7ff40745 8b7c240c mov edi,dword ptr [esp+0c] 016f:7ff40749 66833f5c cmp word ptr [edi],+5c 016f:7ff4074d 0f8446240200 jz 7ff62b99 = OLE32.DLL:.text+0x41b99 016f:7ff40753 8b542410 mov edx,dword ptr [esp+10] 016f:7ff40757 66c702ffff mov word ptr [edx],ffff 016f:7ff4075c 5f pop edi 016f:7ff4075d 5e pop esi -------------------- 006bf6f4 00000000 ... 006bf6fc 80009708 -> d8 00 18 c3 75 f3 00 81 3f 04 e0 b7 34 f3 00 80 ....u...?...4... 006bf700 88000000 006bf704 80000000 ... 006bf714 00000000 ... 006bf71c 7ff20000 = OLE32.DLL+0x0 -> 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 MZ.............. 006bf720 00000000 006bf724 006bf78c -> 90 f7 6b 00 f8 40 44 01 b8 0e 77 01 02 40 00 80 ..k..@D...w..@.. 006bf728 7ff44ba9 = OLE32.DLL:.text+0x23ba9 -------------------- 016f:7ff44b89 b800000080 mov eax,80000000 016f:7ff44b8e 50 push eax 016f:7ff44b8f 50 push eax 016f:7ff44b90 50 push eax 016f:7ff44b91 50 push eax 016f:7ff44b92 6800000088 push 88000000 016f:7ff44b97 ff356c32fd7f push dword ptr [7ffd326c] 016f:7ff44b9d ff356832fd7f push dword ptr [7ffd3268] 016f:7ff44ba3 57 push edi 016f:7ff44ba4 e84fbbffff call 7ff406f8 = OLE32.DLL:.text+0x1f6f8 OLE32.DLL:.text+0x23ba9: *016f:7ff44ba9 a348f2fc7f mov dword ptr [7ffcf248],eax 016f:7ff44bae 3bc7 cmp eax,edi 016f:7ff44bb0 0f84e6330200 jz 7ff67f9c = OLE32.DLL:.text+0x46f9c 016f:7ff44bb6 8bc6 mov eax,esi 016f:7ff44bb8 5f pop edi 016f:7ff44bb9 5e pop esi 016f:7ff44bba 8be5 mov esp,ebp 016f:7ff44bbc 5d pop ebp 016f:7ff44bbd c3 retd 016f:7ff44bbe 0000 add byte ptr [eax],al 016f:7ff44bc0 4f dec edi -------------------- 006bf72c 00000000 006bf730 0000c05c 006bf734 7ff44be4 = OLE32.DLL:.text+0x23be4 -> 4f 6c 65 4d 61 69 6e 54 68 72 65 61 64 57 6e 64 OleMainThreadWnd 006bf738 88000000 006bf73c 80000000 ... 006bf74c 00000000 006bf750 6410c3a0 006bf754 11d3a732 006bf758 a000fd9c 006bf75c d54959c9 006bf760 00000000 006bf764 006bf504 -> 6c 0c 00 00 03 00 00 00 00 00 00 00 00 00 00 00 l............... 006bf768 01770f50 -> c0 d1 00 20 01 00 00 00 11 00 00 00 21 00 00 00 ... ........!... 006bf76c 00000000 006bf770 006bf79c -> c4 f7 6b 00 97 43 f3 7f c8 40 44 01 00 00 00 00 ..k..C...@D..... 006bf774 7ff343c4 = OLE32.DLL:.text+0x133c4 -------------------- 016f:7ff343a9 894df8 mov dword ptr [ebp-08],ecx 016f:7ff343ac 8945f4 mov dword ptr [ebp-0c],eax 016f:7ff343af 8d45f4 lea eax,[ebp-0c] 016f:7ff343b2 50 push eax 016f:7ff343b3 6a01 push +01 016f:7ff343b5 51 push ecx 016f:7ff343b6 ff7510 push dword ptr [ebp+10] 016f:7ff343b9 ff750c push dword ptr [ebp+0c] 016f:7ff343bc ff7508 push dword ptr [ebp+08] 016f:7ff343bf e8b6fbffff call 7ff33f7a = OLE32.DLL!CoCreateInstanceEx OLE32.DLL:.text+0x133c4: *016f:7ff343c4 8b55f8 mov edx,dword ptr [ebp-08] 016f:7ff343c7 8b4d18 mov ecx,dword ptr [ebp+18] 016f:7ff343ca 8911 mov dword ptr [ecx],edx 016f:7ff343cc 8be5 mov esp,ebp 016f:7ff343ce 5d pop ebp 016f:7ff343cf c21400 retd 0014 016f:7ff343d2 833d08f0fc7f00 cmp dword ptr [7ffcf008],+00 016f:7ff343d9 b800000000 mov eax,00000000 016f:7ff343de 0f8579780300 jnz 7ff6bc5d = OLE32.DLL:.text+0x4ac5d 016f:7ff343e4 84c0 test al,al 016f:7ff343e6 8b442404 mov eax,dword ptr [esp+04] -------------------- 006bf778 014440c8 = PFMODINTL.DLL:.rdata+0xc8 -> a0 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf77c 00000000 006bf780 00000001 006bf784 00000000 006bf788 00000001 006bf78c 006bf790 -> f8 40 44 01 b8 0e 77 01 02 40 00 80 c4 f7 6b 00 .@D...w..@....k. 006bf790 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf794 01770eb8 -> 4c d6 00 20 34 d6 00 20 04 d6 00 20 f0 d5 00 20 L.. 4.. ... ... 006bf798 80004002 -> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 006bf79c 006bf7c4 -> b8 fc 6b 00 31 10 44 01 c8 40 44 01 00 00 00 00 ..k.1.D..@D..... 006bf7a0 7ff34397 = OLE32.DLL:.text+0x13397 -------------------- 016f:7ff34378 ff7518 push dword ptr [ebp+18] 016f:7ff3437b ff15e013f27f call dword ptr [7ff213e0] -> KERNEL32.DLL!IsBadHugeWritePtr 016f:7ff34381 85c0 test eax,eax 016f:7ff34383 0f8587df0200 jnz 7ff62310 = OLE32.DLL:.text+0x41310 016f:7ff34389 ff7518 push dword ptr [ebp+18] 016f:7ff3438c 53 push ebx 016f:7ff3438d ff7510 push dword ptr [ebp+10] 016f:7ff34390 57 push edi 016f:7ff34391 56 push esi 016f:7ff34392 e807000000 call 7ff3439e = OLE32.DLL:.text+0x1339e OLE32.DLL:.text+0x13397: *016f:7ff34397 5f pop edi 016f:7ff34398 5e pop esi 016f:7ff34399 5b pop ebx 016f:7ff3439a 5d pop ebp 016f:7ff3439b c21400 retd 0014 016f:7ff3439e 55 push ebp 016f:7ff3439f 33c9 xor ecx,ecx 016f:7ff343a1 8bec mov ebp,esp 016f:7ff343a3 83ec0c sub esp,+0c 016f:7ff343a6 8b4514 mov eax,dword ptr [ebp+14] 016f:7ff343a9 894df8 mov dword ptr [ebp-08],ecx -------------------- 006bf7a4 014440c8 = PFMODINTL.DLL:.rdata+0xc8 -> a0 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf7a8 00000000 006bf7ac 00000001 006bf7b0 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf7b4 01445360 = PFMODINTL.DLL:.data+0x360 -> 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 006bf7b8 00000000 ... 006bf7c0 005b0000 006bf7c4 006bfcb8 -> f0 fc 6b 00 f8 ff 40 00 2b fe 06 01 ac ad 4e 00 ..k...@.+.....N. 006bf7c8 01441031 = PFMODINTL.DLL:.text+0x31 -------------------- 016f:0144100e 90 nop 016f:0144100f 90 nop 016f:01441010 6a00 push +00 016f:01441012 ff15bc404401 call dword ptr [014440bc] -> OLE32.DLL!CoInitialize 016f:01441018 6860534401 push 01445360 016f:0144101d 68f8404401 push 014440f8 016f:01441022 6a01 push +01 016f:01441024 6a00 push +00 016f:01441026 68c8404401 push 014440c8 016f:0144102b ff15b4404401 call dword ptr [014440b4] -> OLE32.DLL!CoCreateInstance PFMODINTL.DLL:.text+0x31: *016f:01441031 33c9 xor ecx,ecx 016f:01441033 85c0 test eax,eax 016f:01441035 0f9dc1 setge cl 016f:01441038 8bc1 mov eax,ecx 016f:0144103a c3 retd 016f:0144103b 90 nop 016f:0144103c 90 nop 016f:0144103d 90 nop 016f:0144103e 90 nop 016f:0144103f 90 nop 016f:01441040 a160534401 mov eax,dword ptr [01445360] -------------------- 006bf7cc 014440c8 = PFMODINTL.DLL:.rdata+0xc8 -> a0 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf7d0 00000000 006bf7d4 00000001 006bf7d8 014440f8 = PFMODINTL.DLL:.rdata+0xf8 -> a3 c3 10 64 32 a7 d3 11 9c fd 00 a0 c9 59 49 d5 ...d2........YI. 006bf7dc 01445360 = PFMODINTL.DLL:.data+0x360 -> 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 006bf7e0 00440cb6 = _INS5576._MP:.text+0x3fcb6 -------------------- 016f:00440c8e eb2c jmp 00440cbc = _INS5576._MP:.text+0x3fcbc 016f:00440c90 8b45c4 mov eax,dword ptr [ebp-3c] 016f:00440c93 8945e0 mov dword ptr [ebp-20],eax 016f:00440c96 ffb598fbffff push dword ptr [ebp-00000468] 016f:00440c9c ff55e0 call dword ptr [ebp-20] 016f:00440c9f 898570fbffff mov dword ptr [ebp-00000490],eax 016f:00440ca5 eb15 jmp 00440cbc = _INS5576._MP:.text+0x3fcbc 016f:00440ca7 8b45c4 mov eax,dword ptr [ebp-3c] 016f:00440caa 898544fbffff mov dword ptr [ebp-000004bc],eax 016f:00440cb0 ff9544fbffff call dword ptr [ebp-000004bc] _INS5576._MP:.text+0x3fcb6: *016f:00440cb6 898570fbffff mov dword ptr [ebp-00000490],eax 016f:00440cbc 6a00 push +00 016f:00440cbe e8b9be0100 call 0045cb7c = _INS5576._MP:.text+0x5bb7c 016f:00440cc3 6a00 push +00 016f:00440cc5 ff750c push dword ptr [ebp+0c] 016f:00440cc8 e83e60fdff call 00416d0b = _INS5576._MP:.text+0x15d0b 016f:00440ccd ff750c push dword ptr [ebp+0c] 016f:00440cd0 e8e75ffdff call 00416cbc = _INS5576._MP:.text+0x15cbc 016f:00440cd5 0fbf854cfbffff movsx eax,word ptr [ebp-000004b4] 016f:00440cdc 89852cfbffff mov dword ptr [ebp-000004d4],eax 016f:00440ce2 83bd2cfbffff01 cmp dword ptr [ebp-000004d4],+01 -------------------- 006bf7e4 006bfb34 -> 00 80 0f db 01 00 00 00 00 80 0f db 01 00 00 00 ................ 006bf7e8 00000000 ... 006bf7fc 01441010 = PFMODINTL.DLL!LoadPfMod -> 6a 00 ff 15 bc 40 44 01 68 60 53 44 01 68 f8 40 j....@D.h`SD.h.@ 006bf800 00000000 006bf804 00000006 006bf808 00000000 ... 006bf818 004c9218 -> 72 00 01 00 06 00 50 46 4d 4f 44 49 4e 54 4c 00 r.....PFMODINTL. 006bf81c 00000000 ... 006bf848 00000031 006bf84c 00000000 ... 006bf854 00502567 -> 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 ................ 006bf858 006bf894 -> a8 f8 6b 00 3c 83 41 00 97 ff 00 00 b8 f8 6b 00 ..k. 43 3a 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 C:\Program Files 006bf864 0107e486 -> 43 3a 5c 50 72 6f 67 72 61 6d 20 46 69 6c 65 73 C:\Program Files 006bf868 006bfe28 -> 68 ff 6b 00 20 66 47 00 78 e5 47 00 00 00 00 00 h.k. fG.x.G..... 006bf86c 4f4d4650 006bf870 544e4944 006bf874 006b004c 006bf878 00000000 ... 006bf880 005b0000 006

The solution might be as simple as this: In Add/Remove Programs remeove all the Sound Blaster drivers. In Device Manager remove the sound card. Reboot the system. When Found New Hardware comes up click Cancel. Hit CTRL+ALT+DEL and end task on all programs but Explorer and Systray. Reinstall the Sound Blaster drivers from the Cd-Rom. Good Luck, Ted.

nope. no change. now I got a compaq presario 4764 and the sb16pci install says the sound blaster wasn't detected. however the install program updates drivers before installing software, and the sound blaster works and sound comes out but I still can't install the software.