date/time : 2011-09-18, 12:49:55, 668ms computer name : JAMES-LAPTOP user name : James registered owner : James / Toshiba operating system : Windows Vista Service Pack 2 build 6002 system language : English system up time : 15 hours 1 minute program up time : 5 minutes 7 seconds processors : 2x Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz physical memory : 1161/2939 MB (free/total) free disk space : (C:) 131.23 GB display mode : 800x600, 16 bit process id : $2e78 allocated memory : 175.93 MB executable : Armada2.exe current module : Armada2Hook.dll module date/time : 2008-01-19 06:06 compiled with : Delphi 2006/07 madExcept version : 3.0f callstack crc : $81000edd, $4462e0d3, $4462e0d3 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 0063A4DB in module 'Armada2.exe'. Write of address 00000024. Main ($2878): 0063a4db +00000b Armada2.exe savegame.obj 0057f116 +000016 Armada2.exe PhotonTorpedo.obj 0058e6e1 +000161 Armada2.exe Ordnance.obj 00598319 +000209 Armada2.exe RenderLoop.obj 004e60f6 +000196 Armada2.exe CinematicView.obj 004e5e6b +00013b Armada2.exe CinematicView.obj 0051abfb +00004b Armada2.exe DisplayInterface.obj 005988c8 +0001a8 Armada2.exe RenderLoop.obj 004838be +00023e Armada2.exe Program.obj 00559b58 +0000d8 Armada2.exe TransportLocal.obj 0045edd4 +000164 Armada2.exe AudioManager.obj 00487293 +0001b3 Armada2.exe Program.obj 00486b44 +000544 Armada2.exe Program.obj 0047608d +000023 Armada2.exe ArmadaWin.obj 00476042 +0000d2 Armada2.exe ArmadaWin.obj 006734f4 +22507c Armada2.exe savegame.obj 76bfd307 +000010 kernel32.dll BaseThreadInitThunk thread $2f48: 773a545e +0a ntdll.dll NtWaitForMultipleObjects 76bfa7f1 +ef kernel32.dll WaitForMultipleObjectsEx 76bfa90b +13 kernel32.dll WaitForMultipleObjects 02adfb49 +0d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +37 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +10 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 693994f6 +00 DSOUND.dll thread $b5c: 773a545e +0a ntdll.dll NtWaitForMultipleObjects 76bfa7f1 +ef kernel32.dll WaitForMultipleObjectsEx 76bfa90b +13 kernel32.dll WaitForMultipleObjects 02adfb49 +0d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +37 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +10 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 693994f6 +00 DSOUND.dll thread $2cb4: 773a545e +0a ntdll.dll NtWaitForMultipleObjects 76bfa7f1 +ef kernel32.dll WaitForMultipleObjectsEx 76bfa90b +13 kernel32.dll WaitForMultipleObjects 02adfb49 +0d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +37 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +10 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 693a2095 +00 DSOUND.dll thread $3540: 773a545e +0a ntdll.dll NtWaitForMultipleObjects 76bfa7f1 +ef kernel32.dll WaitForMultipleObjectsEx 02adfb49 +0d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +37 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +10 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 731c51cc +00 wdmaud.drv thread $2914: 773a545e +0a ntdll.dll NtWaitForMultipleObjects 76bfa7f1 +ef kernel32.dll WaitForMultipleObjectsEx 76bfa90b +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.obj 02adfb49 +0d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +37 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +10 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 00463ace +4e Armada2.exe BinkThread.obj thread $1bfc: 773a45ce +00a ntdll.dll NtDelayExecution 76bf9baa +04c kernel32.dll SleepEx 76bb1c67 +00a kernel32.dll Sleep 004dd1f1 +191 Armada2.exe InputThread.obj 02adfb49 +00d Armada2Hook.dll madExcept CallThreadProcSafe 02adfbb3 +037 Armada2Hook.dll madExcept ThreadExceptFrame 76bfd307 +010 kernel32.dll BaseThreadInitThunk >> created by Main ($2878) at: 004dd21b +01b Armada2.exe InputThread.obj modules: 00150000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II 001a0000 d3d8.dll C:\Program Files\Activision\Star Trek Armada II 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II 00d80000 FOmsvc.dll C:\Program Files\Activision\Star Trek Armada II 02a90000 Armada2Hook.dll C:\Program Files\Activision\Star Trek Armada II 05700000 igdumdx32.dll 7.15.10.1502 C:\Windows\system32 05960000 igdumd32.dll 7.15.10.1502 C:\Windows\system32 10000000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\Star Trek Armada II 30000000 binkw32.dll 1.2.4.0 C:\Program Files\Activision\Star Trek Armada II 60140000 d3d8.dll 6.0.6001.18000 C:\Windows\system32 61e60000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 69390000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 6ad80000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 6bd50000 IconCodecService.dll 6.0.6000.16386 C:\Windows\system32 6c3b0000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 6d120000 AcGenral.DLL 6.0.6002.18417 C:\Windows\AppPatch 6d8e0000 ShimEng.dll 6.0.6000.16386 C:\Windows\system32 6d920000 dbghelp.dll 6.0.6001.18000 C:\Windows\system32 6ded0000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 6e160000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 6e170000 sfc.dll 6.0.6000.16386 C:\Windows\system32 704c0000 COMCTL32.dll 5.82.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436 70580000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 71540000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 71590000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 716e0000 WindowsCodecs.dll 7.0.6002.18107 C:\Windows\system32 73190000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 731c0000 wdmaud.drv 6.0.6002.18005 C:\Windows\system32 735c0000 OLEACC.dll 7.0.6002.18155 C:\Windows\system32 73600000 WINMM.dll 6.0.6002.18005 C:\Windows\system32 74210000 midimap.dll 6.0.6002.18005 C:\Windows\system32 742f0000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 74380000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 743c0000 msacm32.drv 6.0.6002.18005 C:\Windows\system32 74400000 ksuser.dll 6.0.6000.16386 C:\Windows\system32 74410000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 74420000 MMDevApi.dll 6.0.6002.18005 C:\Windows\System32 747c0000 comctl32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3 74c30000 WINTRUST.dll 6.0.6002.18169 C:\Windows\system32 74cc0000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 74ce0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 75320000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75420000 MPR.dll 6.0.6002.18005 C:\Windows\system32 754f0000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75510000 NETAPI32.dll 6.0.6002.18005 C:\Windows\system32 75810000 apphelp.dll 6.0.6002.18005 C:\Windows\system32 75870000 Secur32.dll 6.0.6002.18051 C:\Windows\system32 75890000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 75940000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 759e0000 comdlg32.dll 6.0.6002.18005 C:\Windows\system32 75a60000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 75b30000 urlmon.dll 8.0.6001.19120 C:\Windows\system32 75c70000 USP10.dll 1.626.6002.18244 C:\Windows\system32 75cf0000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 75e70000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 75f40000 SHELL32.dll 6.0.6002.18393 C:\Windows\system32 76a60000 ole32.dll 6.0.6002.18277 C:\Windows\system32 76bb0000 kernel32.dll 6.0.6002.18449 C:\Windows\system32 76c90000 iertutil.dll 8.0.6001.19120 C:\Windows\system32 76e80000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 76e90000 msvcrt.dll 7.0.6002.18005 C:\Windows\system32 76f40000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 76f90000 SHLWAPI.dll 6.0.6002.18393 C:\Windows\system32 76ff0000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 77080000 SETUPAPI.dll 6.0.6002.18005 C:\Windows\system32 77210000 OLEAUT32.dll 6.0.6002.18357 C:\Windows\system32 772a0000 USER32.dll 6.0.6002.18005 C:\Windows\system32 77340000 ntdll.dll 6.0.6002.18327 C:\Windows\system32 77470000 IMAGEHLP.dll 6.0.6001.18000 C:\Windows\system32 774a0000 IMM32.dll 6.0.6002.18005 C:\Windows\system32 774c0000 NSI.dll 6.0.6001.18000 C:\Windows\system32 774d0000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 processes: 0000 Idle 0 0004 System 0 0230 smss.exe 0 0274 csrss.exe 0 02a0 wininit.exe 0 02ac csrss.exe 1 02cc services.exe 0 02d8 lsass.exe 0 02e4 lsm.exe 0 0330 winlogon.exe 1 0394 svchost.exe 0 03c4 PresentationFontCache.exe 0 03f0 svchost.exe 0 0418 MsMpEng.exe 0 04c4 svchost.exe 0 0500 svchost.exe 0 051c svchost.exe 0 0560 audiodg.exe 0 0574 svchost.exe 0 0594 SLsvc.exe 0 05c8 svchost.exe 0 0688 svchost.exe 0 070c wlanext.exe 0 0758 spoolsv.exe 0 0790 svchost.exe 0 01ec armsvc.exe 0 0244 svchost.exe 0 0258 AppleMobileDeviceService.exe 0 000c atashost.exe 0 0298 mDNSResponder.exe 0 02dc CFSvcs.exe 0 048c svchost.exe 0 05f4 mdm.exe 0 0810 NLSSRV32.EXE 0 0838 ccsvchst.exe 0 08d0 svchost.exe 0 08e8 RegSrvc.exe 0 0930 svchost.exe 0 0960 TNaviSrv.exe 0 09cc TODDSrv.exe 0 09e0 TosCoSrv.exe 0 0a40 TosIPCSrv.exe 0 0a58 ViewpointService.exe 0 0a68 svchost.exe 0 0a80 WLIDSVC.EXE 0 0aa4 SearchIndexer.exe 0 0ad0 YahooAUService.exe 0 0b04 WLIDSVCM.EXE 0 0b94 IAANTmon.exe 0 0bfc NortonDNSSvc.exe 0 0c04 unsecapp.exe 0 0d14 SDWinSec.exe 0 0d70 WmiPrvSE.exe 0 0fa8 ccsvchst.exe 1 092c taskeng.exe 1 normal C:\Windows\system32 061c Dwm.exe 1 high C:\Windows\system32 04b8 Explorer.EXE 1 normal C:\Windows 0d30 ToshibaServiceStation.exe 1 normal C:\Program Files\Toshiba\TOSHIBA Service Station 0c38 SynTPEnh.exe 1 above normal C:\Program Files\Synaptics\SynTP 0c44 RtHDVCpl.exe 1 normal C:\Windows 0c78 igfxpers.exe 1 normal C:\Windows\System32 0d98 NDSTray.exe 1 normal C:\Program Files\Toshiba\ConfigFree 0c14 igfxtray.exe 1 normal C:\Windows\System32 0c40 IAAnotif.exe 1 normal C:\Program Files\Intel\Intel Matrix Storage Manager 0924 HPWLan.exe 1 normal C:\Program Files\HP Wireless Adapter 0a3c hpwuSchd2.exe 1 normal C:\Program Files\HP\HP Software Update 0360 hkcmd.exe 1 normal C:\Windows\System32 05b8 GrooveMonitor.exe 1 normal C:\Program Files\Microsoft Office\Office12 0588 jusched.exe 1 normal C:\Program Files\Common Files\Java\Java Update 0ea0 msseces.exe 1 normal C:\Program Files\Microsoft Security Client 0ec8 iTunesHelper.exe 1 normal C:\Program Files\iTunes 0bd8 ehtray.exe 1 normal C:\Windows\ehome 043c aim.exe 1 normal C:\Program Files\AIM 0cc0 Skype.exe 1 normal C:\Program Files\Skype\Phone 0c10 wmpnscfg.exe 1 normal C:\Program Files\Windows Media Player 0ffc ConnectMgr.exe 1 normal C:\Program Files\HP Wireless Printer Adapter 0ca8 hpqtra08.exe 1 normal C:\Program Files\HP\Digital Imaging\bin 04f4 LaunchU3.exe 1 normal C:\ProgramData\U3\U3Launcher 095c NortonDNSTray.exe 1 normal C:\Program Files\Norton DNS 0f70 ONENOTEM.EXE 1 normal C:\Program Files\Microsoft Office\Office12 0eac igfxsrvc.exe 1 normal C:\Windows\system32 0f6c ehmsas.exe 1 normal C:\Windows\ehome 00a0 traybar.exe 1 idle C:\Program Files\Camera Assistant Software for Toshiba 1028 CEC_MAIN.exe 1 high C:\Program Files\Camera Assistant Software for Toshiba 11f4 CFSwMgr.exe 1 normal C:\Program Files\Toshiba\ConfigFree 13a0 NisSrv.exe 0 1480 wmpnetwk.exe 0 14e0 iPodService.exe 0 0d54 SynTPHelper.exe 1 10d0 hpqSTE08.exe 1 normal C:\Program Files\HP\Digital Imaging\bin 100c hpqbam08.exe 1 normal C:\Program Files\HP\Digital Imaging\bin 12dc FrostWire.exe 1 normal C:\Program Files\FrostWire 5 1290 TMachInfo.exe 0 17c8 iTunes.exe 1 normal C:\Program Files\iTunes 0ba4 AppleMobileDeviceHelper.exe 1 normal C:\Program Files\Common Files\Apple\Mobile Device Support 0c34 distnoted.exe 1 normal C:\Program Files\Common Files\Apple\Apple Application Support 1210 svchost.exe 0 16c4 taskeng.exe 0 2e78 Armada2.exe 1 normal C:\Program Files\Activision\Star Trek Armada II 2548 SearchProtocolHost.exe 0 1c68 SearchFilterHost.exe 0 hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery + Computer - ACPI x86-based PC + Disk drives - FUJITSU MHZ2250BH G1 - Maxtor 3200 USB Device + Display adapters - Mobile Intel(R) 4 Series Express Chipset Family (driver 7.15.10.1502) - Mobile Intel(R) 4 Series Express Chipset Family (driver 7.15.10.1502) + DVD/CD-ROM drives - TSSTcorp CDDVDW TS-L633A + IDE ATA/ATAPI controllers - Intel(R) ICH9M-E/M SATA AHCI Controller (driver 8.0.0.1039) + Imaging devices - Chicony USB 2.0 Camera (driver 6.2.238.214) + Keyboards - Standard PS/2 Keyboard + Mice and other pointing devices - Synaptics PS/2 Port TouchPad (driver 11.2.4.0) + Modems - Smartphone Wireless USB Modem (driver 4.1.1.0) - TOSHIBA Software Modem + Monitors - Generic PnP Monitor + Network adapters - Intel(R) WiFi Link 5100 AGN (driver 13.1.1.1) - Realtek PCIe FE Family Controller (driver 6.241.623.2010) + Processors - Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz - Intel(R) Core(TM)2 Duo CPU T6400 @ 2.00GHz + Sound, video and game controllers - Realtek High Definition Audio (driver 6.0.1.5599) + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fan - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Thermal Zone - Direct Application Launch Button - Direct Application Launch Button - Direct memory access controller - High Definition Audio Controller - High precision event timer - HP-USB-Virtual-Driver (driver 1.7.1.0) - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 (driver 8.6.1.1002) - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 (driver 8.6.1.1002) - Intel(R) ICH9 Family SMBus Controller - 2930 (driver 8.6.1.1001) - Intel(R) ICH9M LPC Interface Controller - 2919 (driver 8.6.1.1002) - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft Composite Battery - Microsoft System Management BIOS Driver - Mobile Intel(R) 45 Express Chipset Series Processor to DRAM Controller - 2A40 (driver 8.7.0.1007) - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - TOSHIBA Firmware Linkage Driver (driver 1.0.0.3) - TOSHIBA x86 ACPI-Compliant Value Added Logical and General Purpose Device (driver 2.0.0.1) - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + TosSec Class - TOSHIBA tos_sps32 Driver (driver 4.0.2007.1115) + Universal Serial Bus controllers - HP USB Virtual Driver (driver 1.7.1.0) - Intel(R) ICH9 Family USB Universal Host Controller - 2934 - Intel(R) ICH9 Family USB Universal Host Controller - 2935 - Intel(R) ICH9 Family USB Universal Host Controller - 2936 - Intel(R) ICH9 Family USB Universal Host Controller - 2937 - Intel(R) ICH9 Family USB Universal Host Controller - 2938 - Intel(R) ICH9 Family USB Universal Host Controller - 2939 - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293A - Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C - Realtek USB 2.0 Card Reader (driver 6.0.6000.20131) - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 0c8cb738 ebx = 0c55230a ecx = 00000024 edx = 3f800000 esi = 0c8cb668 edi = 0c8cb668 eip = 0063a4db esp = 0012f908 ebp = 0012f908 stack dump: 0012f908 18 f9 12 00 1b f1 57 00 - 38 b7 8c 0c c0 db 54 0c ......W.8.....T. 0012f918 38 f9 12 00 e4 e6 58 00 - e0 d4 4e 05 b8 37 76 00 8.....X...N..7v. 0012f928 70 ed 44 05 e0 d4 4e 05 - 90 cb cb 0c 0a 23 55 0c p.D...N......#U. 0012f938 f4 f9 12 00 1e 83 59 00 - e0 d4 4e 05 e8 2a 4b 05 ......Y...N..*K. 0012f948 58 37 76 00 68 d7 81 02 - 9e 9f f2 c5 63 8e d5 45 X7v.h.......c..E 0012f958 79 14 0a 82 54 cb 55 02 - 76 23 40 01 86 eb 7c 88 y...T.U.v#@...|. 0012f968 fc f9 12 00 03 ee 4d 00 - a0 d5 4e 05 e8 2a 4b 05 ......M...N..*K. 0012f978 58 37 76 00 68 d7 81 02 - 88 c6 56 09 00 00 00 00 X7v.h.....V..... 0012f988 0c b0 24 3e 88 77 06 3e - 3c cd 13 3f 59 4d 4e 3f ..$>.w.><..?YMN? 0012f998 3d 2a be bd ea 05 51 3f - b0 e0 11 bf 00 00 00 00 =*....Q?........ 0012f9a8 00 00 00 00 00 00 00 00 - f2 6f 0b 46 0d 28 89 c4 .........o.F.(.. 0012f9b8 ea 18 0c 46 ef 68 09 46 - ab d6 2e 42 70 ed 44 05 ...F.h.F...Bp.D. 0012f9c8 00 20 1e 44 00 00 d2 43 - 00 00 1b 43 00 00 2c 43 ...D...C...C..,C 0012f9d8 93 5c 0e 9b cb 26 00 00 - 00 00 00 00 06 00 00 00 .\...&.......... 0012f9e8 28 fb 12 00 f0 5c 6a 00 - ff ff ff ff 88 fa 12 00 (....\j......... 0012f9f8 fb 60 4e 00 70 c6 56 09 - 06 00 00 00 00 00 00 00 .`N.p.V......... 0012fa08 58 37 76 00 00 00 00 00 - 00 00 00 00 bd 9d 21 c1 X7v...........!. 0012fa18 00 00 00 00 00 00 00 00 - 00 00 00 00 32 00 00 00 ............2... 0012fa28 32 00 00 00 00 00 00 00 - 00 00 80 3f 00 00 00 00 2..........?.... 0012fa38 00 00 80 3f 00 20 1e 44 - 00 00 d2 43 00 00 1b 43 ...?...D...C...C disassembling: [...] 0063a4d0 push ebp 0063a4d1 mov ebp, esp 0063a4d3 mov eax, [ebp+8] 0063a4d6 add ecx, $24 0063a4d9 mov edx, [eax] 0063a4db > mov [ecx], edx 0063a4dd mov edx, [eax+4] 0063a4e0 mov [ecx+4], edx 0063a4e3 mov eax, [eax+8] 0063a4e6 mov [ecx+8], eax 0063a4e9 pop ebp [...]