If I were you I would send him an e-mail, and hope that he speaks at least some english.
I just sent him an email referencing this thread and that specific post. It would probably be helpful if someone could supply a test file.
Edit: I finally found a file that I have that crashes the encoder. It's track 14 off the Pain of Salvation - Be album. Let's see.. crash at around 65,3% completed....
Edit 2: Very tricky to pin down. This track only crashes at -q 3 of the different qualities I tried.
Edit 3: Okay, running under debugger:
"oggenc_archer.exe The instruction at 0x0042D568 referenced memory at 0xBF4EB730. The memory could not be read."
.text:0042D512 cvtss2si ecx, [eax+edi*4+0Ch]
.text:0042D518 cvtss2si ebx, [eax+edi*4+8]
.text:0042D51E cvtss2si esi, [eax+edi*4+4]
.text:0042D524 cvtss2si eax, [eax+edi*4]
.text:0042D529 mov edi, [esp+50h+var_20]
.text:0042D52D add ecx, edi
.text:0042D52F add ebx, edi
.text:0042D531 add esi, edi
.text:0042D533 add edi, eax
.text:0042D535 mov eax, [esp+50h+var_18]
.text:0042D539 imul eax, [edx+8]
.text:0042D53D mov [esp+50h+var_20], edi
.text:0042D541 mov edi, [esp+50h+var_14]
.text:0042D545 add eax, [edi+ecx*4]
.text:0042D548 imul eax, [edx+8]
.text:0042D54C add eax, [edi+ebx*4]
.text:0042D54F imul eax, [edx+8]
.text:0042D553 add eax, [edi+esi*4]
.text:0042D556 imul eax, [edx+8]
.text:0042D55A mov edx, [esp+50h+var_20]
.text:0042D55E add eax, [edi+edx*4]
.text:0042D561 mov edx, [esp+50h+var_10]
.text:0042D565 mov edx, [edx+8]
.text:0042D568 cmp dword ptr [edx+eax*4], 0 <--------------
.text:0042D56C jle loc_42D6FE
.text:0042D572 mov edx, [ebp+arg_C]
.text:0042D575 mov ecx, [edx+10h]
It's a function that starts at 0x42D2FC and takes four parameters. Seems to only get called explicitly from one place, but its address is taken twice, so it could called as a function pointer too?. I'm not familiar enough with the code to identify it any further, and I don't think I even have the tools to build the source.