date/time : 2013-03-12, 02:48:24, 2ms computer name : JAMES-LAPTOP user name : James registered owner : James / Hewlett-Packard operating system : Windows 7 x64 Service Pack 1 build 7601 system language : English system up time : 12 hours 25 minutes program up time : 3 minutes 26 seconds processors : 4x Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz physical memory : 1374/6092 MB (free/total) free disk space : (C:) 403.32 GB (I:) 916.81 GB display mode : 1600x900, 32 bit process id : $5c9c allocated memory : 254.42 MB command line : "I:\Star Trek Armada II - Fleet Operations\data\Armada2.exe" /mod "STA2_KA2 Empire At War" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 14:40 version : 3.2.7 mod : KA2 EAW contact name : James contact email : Je_mezu24@yahoo.com callstack crc : $76e256a1, $7f6e79a4, $7f6e79a4 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 0063A4DB in module 'Armada2.exe'. Write of address 00000024. main thread ($50d0): 0063a4db +00b Armada2.exe ST3D_Sprite.SetColour 0050b02f +05f Armada2.exe StandardBar.Render 5a9c95cf +14b FleetOpsHook.dll ShipDisplayEnhancement 386 +55 ShipDisplay_DisplaySingleObject_Callback 004f2c49 +099 Armada2.exe ShipDisplay.Render 0051abfe +04e Armada2.exe DisplayInterface.RenderAll 5a9aa07c +010 FleetOpsHook.dll FleetOpsFunctionsHook 2186 +3 DisplayInterface_RenderAll_Callback 005988c8 +1a8 Armada2.exe Armada_RenderFrame 004838be +23e Armada2.exe Program.DisplayInputProcess 00559b58 +0d8 Armada2.exe TransportLocal.GameExecute 0223856f +019 fmodex.dll ?setPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 772433a8 +010 kernel32.dll BaseThreadInitThunk thread $4794: 77e10136 +0e ntdll.dll NtWaitForMultipleObjects 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $5d88: 77e0f8aa +0e ntdll.dll NtWaitForSingleObject 75cd1497 +92 KERNELBASE.dll WaitForSingleObjectEx 7724118f +3e kernel32.dll WaitForSingleObjectEx 77241143 +0d kernel32.dll WaitForSingleObject 75771323 +67 msvcrt.dll _endthreadex 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $4ee0: 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $5cf0: 77e0fd6a +0e ntdll.dll NtDelayExecution 75cd3bc2 +5f KERNELBASE.dll SleepEx 75cd4493 +0a KERNELBASE.dll Sleep 75771323 +67 msvcrt.dll _endthreadex 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $5d28: 77e11f1f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $559c: 77e0fd6a +0e ntdll.dll NtDelayExecution 75cd3bc2 +5f KERNELBASE.dll SleepEx 75cd4493 +0a KERNELBASE.dll Sleep 75771323 +67 msvcrt.dll _endthreadex 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $5eb8: 77e10136 +0e ntdll.dll NtWaitForMultipleObjects 75cd15e3 +fa KERNELBASE.dll WaitForMultipleObjectsEx 77241a27 +89 kernel32.dll WaitForMultipleObjectsEx 7724421b +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 772433a8 +10 kernel32.dll BaseThreadInitThunk thread $4c60: 77e0fd6a +00e ntdll.dll NtDelayExecution 75cd3bc2 +05f KERNELBASE.dll SleepEx 75cd4493 +00a KERNELBASE.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction 772433a8 +010 kernel32.dll BaseThreadInitThunk modules: 00330000 D3DX81ab.dll 8.1.0.0 I:\Star Trek Armada II - Fleet Operations\data 00400000 Armada2.exe 43.0.0.0 I:\Star Trek Armada II - Fleet Operations\data 02220000 fmodex.dll 0.4.34.2 I:\Star Trek Armada II - Fleet Operations\data 04710000 Tunngle.dll 1.0.6.0 I:\Star Trek Armada II - Fleet Operations\data 04a10000 igdumdx32.dll 8.15.10.2476 C:\Windows\system32 04cc0000 BtMmHook.dll 6.5.0.2300 C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64 06880000 igdumd32.dll 8.15.10.2476 C:\Windows\system32 10000000 NetworkManager.dll I:\Star Trek Armada II - Fleet Operations\data 18000000 binkw32.dll 1.9.16.0 I:\Star Trek Armada II - Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 I:\Star Trek Armada II - Fleet Operations\data 55dc0000 d3dx9_43.dll 9.29.952.3111 I:\Star Trek Armada II - Fleet Operations\data 55fc0000 d3d8.dll 6.1.7600.16385 C:\Windows\system32 57f30000 MSVCP60.dll 7.0.7600.16385 C:\Windows\system32 5a800000 FleetOpsHook.dll 3.2.7.0 I:\Star Trek Armada II - Fleet Operations 60ce0000 wdmaud.drv 6.1.7601.17514 C:\Windows\system32 61860000 AVIFIL32.dll 6.1.7601.17514 C:\Windows\system32 62590000 AUDIOSES.DLL 6.1.7601.17514 C:\Windows\system32 62fd0000 midimap.dll 6.1.7600.16385 C:\Windows\system32 62fe0000 msacm32.drv 6.1.7600.16385 C:\Windows\system32 63000000 ltc_help32-68721.dll 1.0.0.1 C:\PROGRA~2\Raptr 63ca0000 DSOUND.dll 6.1.7600.16385 C:\Windows\system32 6c3f0000 ksuser.dll 6.1.7600.16385 C:\Windows\system32 6cd60000 AVRT.dll 6.1.7600.16385 C:\Windows\system32 6ce10000 MMDevApi.dll 6.1.7601.17514 C:\Windows\System32 6d020000 MSVFW32.dll 6.1.7601.17514 C:\Windows\system32 6f8f0000 POWRPROF.dll 6.1.7600.16385 C:\Windows\system32 701c0000 d3d9.dll 6.1.7601.17514 C:\Windows\system32 707a0000 d3d8thk.dll 6.1.7600.16385 C:\Windows\system32 708e0000 fwpuclnt.dll 6.1.7601.17514 C:\Windows\System32 70920000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32 70930000 mdnsNSP.dll 3.0.0.10 C:\Program Files (x86)\Bonjour 70960000 wshbth.dll 6.1.7601.17514 C:\Windows\system32 70970000 WLIDNSP.DLL 7.250.4232.0 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live 709a0000 winrnr.dll 6.1.7600.16385 C:\Windows\System32 709b0000 DNSAPI.dll 6.1.7601.17570 C:\Windows\system32 70a00000 pnrpnsp.dll 6.1.7600.16385 C:\Windows\system32 70a20000 napinsp.dll 6.1.7600.16385 C:\Windows\system32 70a30000 NLAapi.dll 6.1.7601.17761 C:\Windows\system32 70cc0000 propsys.dll 7.0.7601.17514 C:\Windows\system32 70ec0000 COMCTL32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 71080000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 710c0000 MSACM32.dll 6.1.7600.16385 C:\Windows\system32 710e0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 73100000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32 73110000 Iphlpapi.DLL 6.1.7601.17514 C:\Windows\system32 73460000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32 73470000 mswsock.dll 6.1.7601.17514 C:\Windows\system32 73760000 WINMM.dll 6.1.7601.17514 C:\Windows\system32 737d0000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 74f90000 VERSION.dll 6.1.7600.16385 C:\Windows\system32 751a0000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 754c0000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64 754d0000 SspiCli.dll 6.1.7601.17940 C:\Windows\syswow64 75530000 wininet.dll 9.0.8112.16464 C:\Windows\syswow64 756b0000 LPK.dll 6.1.7600.16385 C:\Windows\syswow64 756c0000 MSASN1.dll 6.1.7601.17514 C:\Windows\syswow64 756d0000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64 75760000 msvcrt.dll 7.0.7601.17744 C:\Windows\syswow64 75810000 IMAGEHLP.dll 6.1.7601.17787 C:\Windows\syswow64 75840000 USP10.dll 1.626.7601.18009 C:\Windows\syswow64 758e0000 iertutil.dll 9.0.8112.16464 C:\Windows\syswow64 75aa0000 ADVAPI32.dll 6.1.7601.17514 C:\Windows\syswow64 75b40000 WINTRUST.dll 6.1.7601.17940 C:\Windows\syswow64 75b70000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64 75b90000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64 75ba0000 urlmon.dll 9.0.8112.16464 C:\Windows\syswow64 75cc0000 KERNELBASE.dll 6.1.7601.18015 C:\Windows\syswow64 75d10000 RPCRT4.dll 6.1.7601.17514 C:\Windows\syswow64 75e00000 SHELL32.dll 6.1.7601.17859 C:\Windows\syswow64 76a50000 USER32.dll 6.1.7601.17514 C:\Windows\syswow64 76b50000 SHLWAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76bb0000 WS2_32.dll 6.1.7601.17514 C:\Windows\syswow64 76bf0000 IMM32.dll 6.1.7601.17514 C:\Windows\syswow64 76c50000 comdlg32.dll 6.1.7601.17514 C:\Windows\syswow64 76cd0000 ole32.dll 6.1.7601.17514 C:\Windows\syswow64 76e30000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76fd0000 OLEAUT32.dll 6.1.7601.17676 C:\Windows\syswow64 77060000 DEVOBJ.dll 6.1.7601.17621 C:\Windows\syswow64 77080000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64 77150000 WLDAP32.dll 6.1.7601.17514 C:\Windows\syswow64 77230000 kernel32.dll 6.1.7601.18015 C:\Windows\syswow64 77340000 CRYPT32.dll 6.1.7601.17856 C:\Windows\syswow64 77460000 Normaliz.dll 6.1.7600.16385 C:\Windows\syswow64 77470000 GDI32.dll 6.1.7601.17514 C:\Windows\syswow64 77500000 CFGMGR32.dll 6.1.7601.17621 C:\Windows\syswow64 77dc0000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64 77df0000 ntdll.dll 6.1.7601.17725 C:\Windows\SysWOW64 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0158 smss.exe 0 0 0 01d0 csrss.exe 0 0 0 0214 wininit.exe 0 0 0 022c csrss.exe 1 0 0 0258 services.exe 0 0 0 0270 winlogon.exe 1 0 0 0278 lsass.exe 0 0 0 0284 lsm.exe 0 0 0 0300 svchost.exe 0 0 0 0340 TrueSuiteService.exe 0 0 0 0378 svchost.exe 0 0 0 03b0 MsMpEng.exe 0 0 0 019c svchost.exe 0 0 0 01f0 svchost.exe 0 0 0 0184 svchost.exe 0 0 0 02c0 svchost.exe 0 0 0 0404 stacsv64.exe 0 0 0 04ac svchost.exe 0 0 0 0524 svchost.exe 0 0 0 066c wlanext.exe 0 0 0 0680 conhost.exe 0 0 0 06e4 spoolsv.exe 0 0 0 0704 svchost.exe 0 0 0 0764 armsvc.exe 0 0 0 077c AppleMobileDeviceService.exe 0 0 0 07a8 mDNSResponder.exe 0 0 0 07c8 btwdins.exe 0 0 0 054c svchost.exe 0 0 0 0538 HPClientServices.exe 0 0 0 0678 HPDrvMntSvc.exe 0 0 0 01c4 svchost.exe 0 0 0 05f8 HPWMISVC.exe 0 0 0 0540 jhi_service.exe 0 0 0 0820 LMIGuardianSvc.exe 0 0 0 084c ramaint.exe 0 0 0 0860 LogMeIn.exe 0 0 0 08c0 ccsvchst.exe 0 0 0 08e0 ccsvchst.exe 0 0 0 0900 StartManSvc.exe 0 0 0 09c4 rndlresolversvc.exe 0 0 0 09e4 c2c_service.exe 0 0 0 0a2c svchost.exe 0 0 0 0a58 WLIDSVC.EXE 0 0 0 0a94 YahooAUService.exe 0 0 0 0ad4 SDWinSec.exe 0 0 0 0b58 WLIDSVCM.EXE 0 0 0 0e4c svchost.exe 0 0 0 0e6c NisSrv.exe 0 0 0 0f40 svchost.exe 0 0 0 0f98 WmiPrvSE.exe 0 0 0 1018 taskhost.exe 1 29 22 normal 103c ccsvchst.exe 1 0 0 1048 ccsvchst.exe 1 0 0 1060 taskeng.exe 1 12 3 normal 1080 dwm.exe 1 21 3 high 10f8 explorer.exe 1 745 497 normal 1138 itype.exe 1 23 38 below normal 1144 ipoint.exe 1 27 51 below normal 12e4 unsecapp.exe 1 9 3 normal 1380 igfxtray.exe 1 15 5 normal 1388 hkcmd.exe 1 17 17 normal 1398 igfxpers.exe 1 12 5 normal 13ac SynTPEnh.exe 1 89 46 above normal 11b8 sttray64.exe 1 18 15 normal 1118 msseces.exe 1 145 60 normal 132c LogMeInSystray.exe 1 78 57 normal 1370 MSOSYNC.EXE 1 64 21 normal C:\Program Files (x86)\Microsoft Office\Office14 1354 SearchIndexer.exe 0 0 0 143c SynTPHelper.exe 1 0 0 1538 wmpnetwk.exe 0 0 0 1544 ApplePhotoStreams.exe 1 21 17 normal C:\Program Files (x86)\Common Files\Apple\Internet Services 1588 iCloudServices.exe 1 21 8 normal C:\Program Files (x86)\Common Files\Apple\Internet Services 15a8 aim.exe 1 104 43 normal C:\Program Files (x86)\AIM 15fc BookmarkDAV_client.exe 1 9 9 normal C:\Program Files (x86)\Common Files\Apple\Internet Services 1644 Skype.exe 1 182 145 normal C:\Program Files (x86)\Skype\Phone 1684 BTTray.exe 1 18 14 normal 16a0 hpqtra08.exe 1 20 18 normal C:\Program Files (x86)\HP\Digital Imaging\bin 1700 ONENOTEM.EXE 1 18 6 normal C:\Program Files (x86)\Microsoft Office\Office14 1708 HPOSD.exe 1 19 9 normal C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display 1728 YMailAdvisor.exe 1 9 3 normal C:\Program Files (x86)\Yahoo!\Common 178c IMVUClient.exe 1 0 0 normal C:\Users\James\AppData\Roaming\IMVUClient 17e0 hpwuschd2.exe 1 12 4 normal C:\Program Files (x86)\HP\HP Software Update 1310 HPMSGSVC.exe 1 35 7 normal C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch 14fc YCMMirage.exe 1 15 8 below normal C:\Program Files (x86)\CyberLink\YouCam 1508 realsched.exe 1 12 12 normal C:\Program Files (x86)\Real\RealPlayer\Update 15cc iTunesHelper.exe 1 15 10 normal C:\Program Files (x86)\iTunes 0ed8 SSDMonitor.exe 1 18 9 normal C:\Program Files (x86)\Symantec\Norton Utilities 16\sMonitor 0eac jusched.exe 1 9 2 normal C:\Program Files (x86)\Common Files\Java\Java Update 1730 iPodService.exe 0 0 0 1408 hpqWmiEx.exe 0 0 0 0a78 APSDaemon.exe 1 9 5 normal C:\Program Files (x86)\Common Files\Apple\Apple Application Support 1894 RunDll32.exe 1 19 6 normal C:\Windows\SysWOW64 1a74 HPSA_Service.exe 0 0 0 03d8 hpqSTE08.exe 1 12 7 normal C:\Program Files (x86)\HP\Digital Imaging\bin 0ac0 raptr.exe 1 0 0 01a0 hpqbam08.exe 1 9 4 normal C:\Program Files (x86)\HP\Digital Imaging\bin 1ae0 hpqgpc01.exe 1 32 5 normal C:\Program Files (x86)\HP\Digital Imaging\bin 057c raptr_im.exe 1 14 12 normal C:\PROGRA~2\Raptr 0dd0 raptr_ep64.exe 1 0 0 0440 iTunes.exe 1 424 103 normal C:\Program Files (x86)\iTunes 042c LMS.exe 0 0 0 11d8 UNS.exe 0 0 0 1af8 AppleMobileDeviceHelper.exe 1 4 1 normal C:\Program Files (x86)\Common Files\Apple\Mobile Device Support 18e0 conhost.exe 1 20 1 normal 1be8 distnoted.exe 1 4 1 normal C:\Program Files (x86)\Common Files\Apple\Apple Application Support 1bf4 conhost.exe 1 20 1 normal 1b5c BtITunesPlugIn.exe 1 12 4 normal 0ee8 conhost.exe 1 25 8 normal 0880 iexplore.exe 1 0 0 normal C:\Program Files (x86)\Internet Explorer 1a08 recordingmanager.exe 1 9 69 normal C:\Program Files (x86)\RealNetworks\RealDownloader 1f54 iexplore.exe 1 0 0 normal C:\Program Files (x86)\Internet Explorer 2b0c PresentationFontCache.exe 0 0 0 2b64 audiodg.exe 0 0 0 28d4 iexplore.exe 1 0 0 normal C:\Program Files (x86)\Internet Explorer 2afc OSPPSVC.EXE 0 0 0 3194 taskeng.exe 0 0 0 3064 WUDFHost.exe 0 0 0 1284 BelkinService.exe 0 0 0 16b4 BelkinRouterMonitor.exe 1 66 28 normal C:\Program Files (x86)\Belkin\Router Setup and Monitor 00b0 BelkinSetup.exe 1 48 29 normal C:\Program Files (x86)\Belkin\Router Setup and Monitor 31a4 IMVUClient.exe 1 293 73 normal C:\Users\James\AppData\Roaming\IMVUClient 3a98 svchost.exe 0 0 0 3a74 dllhost.exe 0 0 0 3c34 dllhost.exe 1 126 71 normal 4584 TouchControl.exe 1 20 15 normal C:\Program Files (x86)\HP SimplePass 2011 45e4 BioMonitor.exe 1 9 5 normal C:\Program Files (x86)\HP SimplePass 2011 48c0 iexplore.exe 1 0 0 normal C:\Program Files (x86)\Internet Explorer 5420 IELowutil.exe 1 12 3 below normal C:\Program Files (x86)\Internet Explorer 4dc4 TnglCtrl.exe 0 0 0 541c taskhost.exe 1 0 0 5e30 Armada2.exe 1 9 1 normal I:\Star Trek Armada II - Fleet Operations\data 5c9c Armada2.exe 1 83 60 normal I:\Star Trek Armada II - Fleet Operations\data 18a0 igfxsrvc.exe 1 9 3 normal hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Bluetooth Radios - Broadcom 20702 Bluetooth 4.0 Adapter (driver 6.5.1.201) + Computer - ACPI x64-based PC + Disk drives - Maxtor 3200 USB Device - SanDisk Cruzer Glide USB Device - SanDisk Cruzer USB Device - SanDisk Cruzer USB Device - SanDisk U3 Cruzer Micro USB Device - Toshiba Ext HDD USB Device - TOSHIBA MK6476GSX - USB Device + Display adapters - Intel(R) HD Graphics Family (driver 8.15.10.2476) - LogMeIn Mirror Driver (driver 7.1.542.0) + DVD/CD-ROM drives - hp CDDVDW SN-208BB + Human Interface Devices - HID Non-User Input Data Filter (KB 911895) - Microsoft Hardware USB Wireless Mouse + IDE ATA/ATAPI controllers - Intel(R) Mobile Express Chipset SATA AHCI Controller (driver 10.5.0.1026) + Imaging devices - HP Webcam-101 + Keyboards - Standard PS/2 Keyboard + Mice and other pointing devices - Microsoft USB Wireless Mouse (Mouse and Keyboard Center) - Synaptics PS/2 Port TouchPad (driver 15.3.29.0) + Monitors - Generic PnP Monitor + Network adapters - Broadcom 4313GN 802.11b/g/n 1x1 Wi-Fi Adapter (driver 5.100.82.82) - Microsoft Virtual WiFi Miniport Adapter - Realtek PCIe FE Family Controller (driver 7.48.823.2011) - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - G:\ - JAMES' U3 - L:\ - ST_LEGACY - STA2 + Processors - Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz - Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz - Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz - Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz + Sound, video and game controllers - CyberLink WebCam Virtual Driver (driver 6.0.5600.0) - IDT High Definition Audio CODEC (driver 6.10.6365.0) - Intel(R) Display Audio (driver 6.14.0.3074) + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - 2nd generation Intel® Core™ processor family DRAM Controller - 0104 (driver 9.2.0.1011) - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Thermal Zone - Composite Bus Enumerator - Direct memory access controller - File as Volume Driver - High Definition Audio Controller - High precision event timer - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 1 - 1C10 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 2 - 1C12 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 3 - 1C14 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family SMBus Controller - 1C22 (driver 9.2.0.1011) - Intel(R) 82802 Firmware Hub Device - Intel(R) HM65 Express Chipset Family LPC Interface Controller - 1C49 (driver 9.2.0.1015) - Intel(R) Management Engine Interface - IPBusEnum Root Enumerator - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Generic USB Hub - Generic USB Hub - Generic USB Hub - Generic USB Hub - Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller - 1C26 (driver 9.2.0.1013) - Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller - 1C2D (driver 9.2.0.1013) - USB Composite Device - USB Mass Storage Device - USB Mass Storage Device - USB Mass Storage Device - USB Mass Storage Device - USB Mass Storage Device - USB Mass Storage Device - USB Mass Storage Device - USB Root Hub - USB Root Hub cpu registers: eax = 106bc970 ebx = 000003ef ecx = 00000024 edx = 3e4ccccd esi = 106bc540 edi = 0018fa80 eip = 0063a4db esp = 0018fa2c ebp = 0018fa2c stack dump: 0018fa2c 6c fa 18 00 34 b0 50 00 - 70 c9 6b 10 80 fa 18 00 l...4.P.p.k..... 0018fa3c d0 af 50 00 ef 03 00 00 - 50 fa 18 00 6c fa 18 00 ..P.....P...l... 0018fa4c b5 3a 4f 00 00 00 00 00 - 00 00 00 00 00 00 ce 42 .:O............B 0018fa5c 00 00 00 41 00 00 c1 43 - 00 80 8e 44 f0 6e a0 0a ...A...C...D.n.. 0018fa6c 84 fa 18 00 d1 95 9c 5a - d7 04 00 00 f4 ff a1 5a .......Z.......Z 0018fa7c ef 03 00 00 f4 ff a1 5a - a0 fa 18 00 4e 2c 4f 00 .......Z....N,O. 0018fa8c 10 c4 b8 00 f4 ff a1 5a - 20 d9 13 02 00 00 00 00 .......Z........ 0018fa9c b0 45 76 00 b4 fa 18 00 - fe ab 51 00 00 68 19 05 .Ev.......Q..h.. 0018faac 0e 00 00 00 ff ff ff ff - c0 fa 18 00 82 a0 9a 5a ...............Z 0018fabc 00 00 00 00 24 fb 18 00 - cd 88 59 00 00 00 00 00 ....$.....Y..... 0018facc 03 00 00 00 00 16 59 3d - 00 00 00 00 f1 19 75 bf ......Y=......u. 0018fadc 00 00 00 00 f1 19 75 3f - 3e cd 93 3e 90 28 8c c4 ......u?>..>.(.. 0018faec ba 70 0a c6 8d cf ba c3 - 00 00 00 00 ad 9c bd 3e .p.............> 0018fafc 51 5c 00 00 00 00 00 00 - 0d 00 00 00 cb 96 40 4a Q\............@J 0018fb0c 51 5c 00 00 00 00 00 00 - 0e 00 00 00 68 fb 18 00 Q\..........h... 0018fb1c 52 5d 6a 00 ff ff ff ff - 74 fb 18 00 c3 38 48 00 R]j.....t....8H. 0018fb2c 50 d4 21 02 35 00 00 00 - 98 ed 20 02 00 00 00 00 P.!.5........... 0018fb3c 9c 27 44 00 13 01 00 00 - 01 00 00 00 4b 9d 40 4a .'D.........K.@J 0018fb4c 51 5c 00 00 00 00 00 00 - 02 00 00 00 1f b3 3f 3e Q\............?> 0018fb5c 51 5c 00 00 00 00 00 00 - 01 00 00 00 9c fd 18 00 Q\.............. disassembling: [...] 5a9c959a 375 call -$e8e8b ($5a8e0714) ; ArmadaFunctions.movToECX 5a9c959a 5a9c959f 376 call esi 5a9c959f 5a9c95a1 loc_5a9c95a1: 5a9c95a1 379 mov ecx, [ebp-4] 5a9c95a4 380 mov eax, [$5a9e9538] 5a9c95a9 mov eax, [eax] 5a9c95ab call eax 5a9c95ab 5a9c95ad 383 mov edx, [edi] 5a9c95af mov edx, [edx+$1e8] 5a9c95b5 mov eax, [edi] 5a9c95b7 mov eax, [eax+$300] 5a9c95bd mov [eax+$428], edx 5a9c95c3 384 mov edx, [eax] 5a9c95c5 add edx, $10 5a9c95c8 mov esi, [edx] 5a9c95ca 385 call -$e8ebb ($5a8e0714) ; ArmadaFunctions.movToECX 5a9c95ca 5a9c95cf 386 > call esi 5a9c95cf 5a9c95d1 388 pop edi 5a9c95d2 pop esi 5a9c95d3 pop ebx 5a9c95d4 pop ecx 5a9c95d5 pop ebp 5a9c95d6 ret