date/time : 2013-05-04, 18:29:51, 718ms computer name : DAVID-NEA8XZ7QD user name : David Anttila registered owner : David Anttila operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 4 hours 38 minutes program up time : 1 hour 3 minutes processor : AMD Athlon(tm) Processor LE-1640 physical memory : 1311/2047 MB (free/total) free disk space : (C:) 54.93 GB display mode : 1024x768, 32 bit process id : $b4c allocated memory : 242.32 MB command line : "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "Update" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Armada Fleet Operations callstack crc : $73a58bb9, $9cef4d96, $9cef4d96 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 004C6B28 in module 'Armada2.exe'. Read of address 00000000. main thread ($8d4): 004c6b28 +078 Armada2.exe Craft.Explode 004c6675 +145 Armada2.exe Craft.Simulate 5a9b80ae +00a FleetOpsHook.dll CraftEnhancement 766 +2 Craft_Simulate_Callback 004b191c +06c Armada2.exe Freighter.Simulate 004d4950 +060 Armada2.exe GameObject.SimulateAll 0048333b +0ab Armada2.exe Simulate 00483581 +131 Armada2.exe Program.GameProcess 00559b7a +0fa Armada2.exe TransportLocal.GameExecute 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup thread $e1c: 7c90daa8 +a ntdll.dll NtReplyWaitReceivePortEx thread $c14: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $dd4: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $fcc: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $e40: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $638: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $bc4: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $7b0: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction thread $bb0: 7c90d218 +00a ntdll.dll NtDelayExecution 7c8023eb +04b kernel32.dll SleepEx 7c802450 +00a kernel32.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction modules: 003c0000 Normaliz.dll 6.0.5441.0 C:\WINDOWS\system32 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00e60000 D3DX81ab.dll 8.1.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00f10000 fmodex.dll 0.4.34.2 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 01020000 d3dx9_43.dll 9.29.952.3111 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 017e0000 adawarebp.dll 1.0.1.94 C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 03400000 Tunngle.dll 1.0.6.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 03e10000 xpsp2res.dll 5.1.2600.5512 C:\WINDOWS\system32 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 3d930000 wininet.dll 8.0.6001.19298 C:\WINDOWS\system32 3dfd0000 iertutil.dll 8.0.6001.19298 C:\WINDOWS\system32 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 629c0000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32 72d20000 wdmaud.drv 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73ee0000 KsUser.dll 5.3.2600.5512 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 74d90000 USP10.dll 1.420.2600.5969 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5512 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.6160 C:\WINDOWS\system32 76c30000 WINTRUST.dll 5.131.2600.6198 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.6198 C:\WINDOWS\system32 76fd0000 CLBCATQ.DLL 2001.12.4414.700 C:\WINDOWS\system32 77050000 COMRes.dll 2001.12.4414.700 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.6058 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6168 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77a80000 CRYPT32.dll 5.131.2600.6237 C:\WINDOWS\system32 77b20000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 77bd0000 midimap.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 78130000 urlmon.dll 8.0.6001.19298 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.6055 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6242 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 000 Idle 0 0 004 System 0 0 normal 288 smss.exe 0 0 normal C:\WINDOWS\system32 374 csrss.exe 0 0 38c winlogon.exe 46 14 high C:\WINDOWS\system32 3b8 services.exe 4 2 normal C:\WINDOWS\system32 3c4 lsass.exe 4 1 normal C:\WINDOWS\system32 460 svchost.exe 4 1 normal C:\WINDOWS\system32 4a8 svchost.exe 0 0 4d0 svchost.exe 11 26 normal C:\WINDOWS\System32 508 svchost.exe 0 0 5c8 svchost.exe 0 0 63c Explorer.EXE 457 237 normal C:\WINDOWS 724 spoolsv.exe 4 4 normal C:\WINDOWS\system32 778 svchost.exe 0 0 798 AdAwareService.exe 4 4 normal C:\Program Files\Ad-Aware Antivirus 7e8 jqs.exe 4 2 idle C:\Program Files\Java\jre7\bin 090 svchost.exe 4 3 normal C:\WINDOWS\System32 0a4 nvsvc32.exe 23 5 normal C:\WINDOWS\system32 0cc daemonu.exe 0 0 0d4 svchost.exe 4 3 normal C:\WINDOWS\System32 12c SBAMSvc.exe 4 10 normal C:\Program Files\Ad-Aware Antivirus 1b4 svchost.exe 4 2 normal C:\WINDOWS\System32 1e4 wdfmgr.exe 0 0 2f0 adawarebp.exe 8 2 normal C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 2f8 RTHDCPL.EXE 785 158 normal C:\WINDOWS 304 DrgToDsc.exe 58 35 normal C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc 30c RoxWatchTray.exe 18 10 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 334 RunDLL32.exe 57 9 normal C:\WINDOWS\system32 4f8 winampa.exe 14 6 normal C:\Program Files\Winamp 524 jusched.exe 8 4 normal C:\Program Files\Common Files\Java\Java Update 538 ctfmon.exe 28 11 normal C:\WINDOWS\system32 5e0 RunDll32.exe 64 8 normal C:\WINDOWS\system32 620 AdAware.exe 490 106 normal C:\PROGRA~1\AD-AWA~1 b2c CPSHelpRunner.exe 17 15 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 d7c Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data b4c Armada2.exe 107 56 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data hardware: + Computer - ACPI Uniprocessor PC + Disk drives - Generic- Compact Flash USB Device - Generic- MS/MS-Pro USB Device - Generic- SD/MMC USB Device - Generic- SM/xD-Picture USB Device - ST31000333AS + Display adapters - NVIDIA GeForce 9400 GT (driver 6.14.13.1070) + DVD/CD-ROM drives - HP DVD Writer 1260t + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - Microsoft USB Wheel Mouse Optical - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - AMD PCI IDE Controller (driver 5.1.0.8) - AMD SATA Controller(Native IDE Mode) (driver 5.1.0.8) - Primary IDE Channel - Primary IDE Channel - Secondary IDE Channel - Secondary IDE Channel + Keyboards - HID Keyboard Device + Mice and other pointing devices - Microsoft USB Wheel Mouse Optical + Monitors - Plug and Play Monitor + Network adapters - Linksys AE2500 (driver 5.100.68.46) - Realtek RTL8139 Family PCI Fast Ethernet NIC - Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC (driver 5.686.103.2008) + Ports (COM & LPT) - Communications Port (COM1) + Processors - AMD Athlon(tm) Processor LE-1640 + Sound, video and game controllers - Audio Codecs - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - Realtek High Definition Audio (driver 5.10.0.5628) - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - ATI SMBus (driver 5.10.1000.8) - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Direct memory access controller - Full screen video driver for console - High precision event timer - ISAPNP Read Data Port - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 3d50e561 ecx = 1b78551a edx = 2a8c0025 esi = 1b78551a edi = 00000000 eip = 004c6b28 esp = 0012fadc ebp = 0012fb0c stack dump: 0012fadc 00 80 3b 44 ff ff ff ff - 61 e5 50 3d 1a 55 78 1b ..;D....a.P=.Ux. 0012faec 00 88 c2 46 f6 4b 4d 00 - 1a 55 78 1b 1a 55 78 1b ...F.KM..Ux..Ux. 0012fafc b0 53 7d 46 d7 eb 2d 42 - ac ee b2 46 00 00 80 3f .S}F..-B...F...? 0012fb0c 20 fb 12 00 7b 66 4c 00 - 1a 55 78 1b 20 d8 d6 19 ....{fL..Ux..... 0012fb1c b8 56 72 19 30 fb 12 00 - b4 80 9b 5a 61 e5 50 3d .Vr.0......Za.P= 0012fb2c 1a 55 78 1b 40 fb 12 00 - 21 19 4b 00 61 e5 50 3d .Ux.@...!.K.a.P= 0012fb3c 90 d1 77 1a 5c fb 12 00 - 56 49 4d 00 61 e5 50 3d ..w.\...VIM.a.P= 0012fb4c 33 00 00 00 61 e5 50 3d - 00 00 00 00 9c 16 8d 03 3...a.P=........ 0012fb5c 74 fb 12 00 40 33 48 00 - 61 e5 50 3d 61 e5 50 3d t...@3H.a.P=a.P= 0012fb6c 61 e5 50 3d 61 e5 50 3d - b0 fb 12 00 86 35 48 00 a.P=a.P=.....5H. 0012fb7c 7f 03 50 3d e8 6c b8 03 - 01 c4 8a 22 25 27 00 00 ..P=.l....."%'.. 0012fb8c 00 00 00 00 01 00 00 00 - 25 27 00 00 00 00 00 00 ........%'...... 0012fb9c 01 00 00 00 61 e5 50 3d - d4 fd 12 00 88 c0 69 00 ....a.P=......i. 0012fbac ff ff ff ff e0 fd 12 00 - 7f 9b 55 00 7f 03 00 00 ..........U..... 0012fbbc 03 00 00 00 30 7b 73 00 - 00 00 00 00 00 00 00 00 ....0{s......... 0012fbcc 00 00 00 00 00 00 09 fd - 03 08 80 02 1d 03 00 00 ................ 0012fbdc 00 00 00 00 11 e4 02 06 - 80 06 28 84 14 80 00 00 ..........(..... 0012fbec 00 00 11 da 02 09 80 06 - 28 84 14 80 00 00 00 00 ........(....... 0012fbfc 5d 00 91 7c 20 c2 ba 03 - 18 c2 ba 03 00 00 00 00 ]..|............ 0012fc0c 00 00 00 00 88 01 00 00 - 00 00 00 00 00 00 00 00 ................ disassembling: 5a9b80a4 public CraftEnhancement.Craft_Simulate_Callback: ; function entry point 5a9b80a4 764 push ebp 5a9b80a5 mov ebp, esp 5a9b80a7 push ecx 5a9b80a8 765 mov [ebp-4], ecx 5a9b80ab 766 push dword ptr [ebp+8] 5a9b80ae > call dword ptr [$5aa1e134] 5a9b80ae 5a9b80b4 768 xor edx, edx 5a9b80b6 mov eax, [ebp-4] 5a9b80b9 call -$1072 ($5a9b704c) ; CraftEnhancement.Craft_mLevelUp 5a9b80b9 5a9b80be 769 pop ecx 5a9b80bf pop ebp 5a9b80c0 ret 4 date/time : 2013-05-04, 21:25:14, 125ms computer name : DAVID-NEA8XZ7QD user name : David Anttila registered owner : David Anttila operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 7 hours 33 minutes program up time : 8 minutes 16 seconds processor : AMD Athlon(tm) Processor LE-1640 physical memory : 1241/2047 MB (free/total) free disk space : (C:) 54.91 GB display mode : 1024x768, 32 bit process id : $df4 allocated memory : 121.40 MB command line : "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "Update" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Armada Fleet Operations callstack crc : $ca1e7fe1, $a2da6dd3, $a2da6dd3 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 005FE944 in module 'Armada2.exe'. Read of address 31509DC0. main thread ($91c): 005fe944 +0b4 Armada2.exe TallyScreenInfo.FillInData 005f1f51 +0c1 Armada2.exe DebriefingData.FillInLogData 005e2ddf +b4f Armada2.exe do_admiralsLog 7c90e470 +010 ntdll.dll KiUserCallbackDispatcher 5a8775a0 +014 FleetOpsHook.dll Classes StdWndProc 7e43e594 +01d USER32.dll DefDlgProcA 7e424a01 +031 USER32.dll DialogBoxIndirectParamAorW 7e43b18b +047 USER32.dll DialogBoxParamA 005e22b1 +021 Armada2.exe do_admiralsLog 00606800 +140 Armada2.exe DispatchDialog 00625d3c +0ac Armada2.exe ST3D_DeviceDirectX8.SetCursor 0062c88a +1ba Armada2.exe ST3D_GraphicsEngine.SetActiveDisplay 5a9a70bd +1a5 FleetOpsHook.dll FleetOpsFunctionsHook 346 +72 DispatchDialog_Callback 00607675 +125 Armada2.exe do_admirals_log 004873e0 +300 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup thread $f9c: 7c90daa8 +a ntdll.dll NtReplyWaitReceivePortEx thread $670: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $fe8: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $bec: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $7d0: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $a30: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $780: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex modules: 003c0000 Normaliz.dll 6.0.5441.0 C:\WINDOWS\system32 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00e60000 D3DX81ab.dll 8.1.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00f10000 fmodex.dll 0.4.34.2 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 01020000 d3dx9_43.dll 9.29.952.3111 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 017e0000 adawarebp.dll 1.0.1.94 C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 03400000 Tunngle.dll 1.0.6.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 03e10000 xpsp2res.dll 5.1.2600.5512 C:\WINDOWS\system32 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 3d930000 wininet.dll 8.0.6001.19298 C:\WINDOWS\system32 3dfd0000 iertutil.dll 8.0.6001.19298 C:\WINDOWS\system32 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 629c0000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32 72d20000 wdmaud.drv 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73ee0000 KsUser.dll 5.3.2600.5512 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 74d90000 USP10.dll 1.420.2600.5969 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5512 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.6160 C:\WINDOWS\system32 76c30000 WINTRUST.dll 5.131.2600.6198 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.6198 C:\WINDOWS\system32 76fd0000 CLBCATQ.DLL 2001.12.4414.700 C:\WINDOWS\system32 77050000 COMRes.dll 2001.12.4414.700 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.6058 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6168 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77a80000 CRYPT32.dll 5.131.2600.6237 C:\WINDOWS\system32 77b20000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 77bd0000 midimap.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 78130000 urlmon.dll 8.0.6001.19298 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.6055 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6242 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 000 Idle 0 0 004 System 0 0 normal 288 smss.exe 0 0 normal C:\WINDOWS\system32 374 csrss.exe 0 0 38c winlogon.exe 46 14 high C:\WINDOWS\system32 3b8 services.exe 4 2 normal C:\WINDOWS\system32 3c4 lsass.exe 4 1 normal C:\WINDOWS\system32 460 svchost.exe 4 1 normal C:\WINDOWS\system32 4a8 svchost.exe 0 0 4d0 svchost.exe 11 26 normal C:\WINDOWS\System32 508 svchost.exe 0 0 5c8 svchost.exe 0 0 63c Explorer.EXE 644 368 normal C:\WINDOWS 724 spoolsv.exe 4 4 normal C:\WINDOWS\system32 778 svchost.exe 0 0 798 AdAwareService.exe 4 5 normal C:\Program Files\Ad-Aware Antivirus 7e8 jqs.exe 4 2 idle C:\Program Files\Java\jre7\bin 090 svchost.exe 4 3 normal C:\WINDOWS\System32 0a4 nvsvc32.exe 23 5 normal C:\WINDOWS\system32 0cc daemonu.exe 0 0 0d4 svchost.exe 4 3 normal C:\WINDOWS\System32 12c SBAMSvc.exe 4 10 normal C:\Program Files\Ad-Aware Antivirus 1b4 svchost.exe 4 2 normal C:\WINDOWS\System32 1e4 wdfmgr.exe 0 0 2f0 adawarebp.exe 8 2 normal C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 2f8 RTHDCPL.EXE 785 158 normal C:\WINDOWS 304 DrgToDsc.exe 58 35 normal C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc 30c RoxWatchTray.exe 18 10 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 334 RunDLL32.exe 57 9 normal C:\WINDOWS\system32 4f8 winampa.exe 14 6 normal C:\Program Files\Winamp 524 jusched.exe 8 4 normal C:\Program Files\Common Files\Java\Java Update 538 ctfmon.exe 28 11 normal C:\WINDOWS\system32 5e0 RunDll32.exe 64 8 normal C:\WINDOWS\system32 620 AdAware.exe 490 106 normal C:\PROGRA~1\AD-AWA~1 b2c CPSHelpRunner.exe 17 15 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 5f4 chrome.exe 130 65 normal C:\Program Files\Google\Chrome\Application 990 chrome.exe 254 2 below normal C:\Program Files\Google\Chrome\Application 824 chrome.exe 112 2 below normal C:\Program Files\Google\Chrome\Application dd8 chrome.exe 173 2 below normal C:\Program Files\Google\Chrome\Application 828 chrome.exe 115 2 below normal C:\Program Files\Google\Chrome\Application a10 chrome.exe 354 2 below normal C:\Program Files\Google\Chrome\Application 41c chrome.exe 10 1 normal C:\Program Files\Google\Chrome\Application 658 Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data df4 Armada2.exe 104 47 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data hardware: + Computer - ACPI Uniprocessor PC + Disk drives - Generic- Compact Flash USB Device - Generic- MS/MS-Pro USB Device - Generic- SD/MMC USB Device - Generic- SM/xD-Picture USB Device - ST31000333AS + Display adapters - NVIDIA GeForce 9400 GT (driver 6.14.13.1070) + DVD/CD-ROM drives - HP DVD Writer 1260t + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - Microsoft USB Wheel Mouse Optical - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - AMD PCI IDE Controller (driver 5.1.0.8) - AMD SATA Controller(Native IDE Mode) (driver 5.1.0.8) - Primary IDE Channel - Primary IDE Channel - Secondary IDE Channel - Secondary IDE Channel + Keyboards - HID Keyboard Device + Mice and other pointing devices - Microsoft USB Wheel Mouse Optical + Monitors - Plug and Play Monitor + Network adapters - Linksys AE2500 (driver 5.100.68.46) - Realtek RTL8139 Family PCI Fast Ethernet NIC - Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC (driver 5.686.103.2008) + Ports (COM & LPT) - Communications Port (COM1) + Processors - AMD Athlon(tm) Processor LE-1640 + Sound, video and game controllers - Audio Codecs - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - Realtek High Definition Audio (driver 5.10.0.5628) - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - ATI SMBus (driver 5.10.1000.8) - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Direct memory access controller - Full screen video driver for console - High precision event timer - ISAPNP Read Data Port - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 06f61da8 ebx = 00000001 ecx = 0bfbb8a0 edx = 0c4f6a40 esi = 03b13cec edi = 03b13cdc eip = 005fe944 esp = 0012f4b4 ebp = 0012f4fc stack dump: 0012f4b4 02 00 00 00 90 6a b8 03 - 01 00 00 00 50 c2 00 06 .....j......P... 0012f4c4 18 f8 47 0c 48 b4 a2 05 - 58 39 1a 0c c8 68 69 0c ..G.H...X9...hi. 0012f4d4 10 b0 67 0c 70 ad 67 0c - d0 ad 67 0c 40 e1 c2 06 ..g.p.g...g.@... 0012f4e4 38 8f a8 0c 80 fb 44 0c - 48 54 3b 0c d0 1f 18 0b 8.....D.HT;..... 0012f4f4 2c f5 12 00 65 1f 5f 00 - 2c f5 12 00 56 1f 5f 00 ,...e._.,...V._. 0012f504 dc 3c b1 03 01 00 00 00 - 09 00 00 00 ec 12 95 5a .<.............Z 0012f514 00 00 00 00 88 6a b8 03 - 90 c8 00 06 80 6a b8 03 .....j.......j.. 0012f524 02 00 00 00 20 c4 00 06 - 98 f9 12 00 df 2d 5e 00 .............-^. 0012f534 01 00 00 00 c0 22 5e 00 - 00 00 00 00 0a be 42 7e ....."^.......B~ 0012f544 d9 8b 41 7e 00 e0 fd 7f - 77 e5 43 7e 6c f5 12 00 ..A~....w.C~l... 0012f554 99 e5 43 7e 00 00 00 00 - 03 00 00 00 00 00 00 00 ..C~............ 0012f564 70 00 52 00 01 00 00 00 - 98 f5 12 00 34 87 41 7e p.R.........4.A~ 0012f574 8c 03 20 00 03 00 00 00 - 00 00 00 00 70 00 52 00 ............p.R. 0012f584 77 e5 43 7e cd ab ba dc - 00 00 00 00 d4 f5 12 00 w.C~............ 0012f594 77 e5 43 7e 00 f6 12 00 - d9 8b 41 7e 00 e0 fd 7f w.C~......A~.... 0012f5a4 00 f6 12 00 5a 88 41 7e - c0 f5 12 00 2a 88 41 7e ....Z.A~....*.A~ 0012f5b4 00 00 00 00 8c 03 20 00 - 00 00 00 00 14 00 00 00 ................ 0012f5c4 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................ 0012f5d4 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0012f5e4 00 00 00 00 b4 f5 12 00 - 7c fd 12 00 44 f6 12 00 ........|...D... disassembling: [...] 5a9a7094 5a9a7099 mov ecx, eax 5a9a709b mov dl, 1 5a9a709d mov eax, [$5a9a2b5c] 5a9a70a2 call -$f060b ($5a8b6a9c) ; Controls.TWinControl.CreateParented 5a9a70a2 5a9a70a7 mov ebx, eax 5a9a70a9 341 mov eax, ebx 5a9a70ab mov edx, [eax] 5a9a70ad call dword ptr [edx+$fc] 5a9a70ad 5a9a70b3 342 mov eax, ebx 5a9a70b5 call -$1a2a9e ($5a80461c) ; System.TObject.Free 5a9a70b5 5a9a70ba jmp loc_5a9a70c4 5a9a70ba 5a9a70ba ; --------------------------------------------------------- 5a9a70ba 5a9a70bc loc_5a9a70bc: 5a9a70bc 346 push esi 5a9a70bd > call dword ptr [$5aa1d934] 5a9a70bd 5a9a70c3 pop ecx 5a9a70bd 5a9a70c4 loc_5a9a70c4: 5a9a70c4 349 pop edi 5a9a70c5 pop esi 5a9a70c6 pop ebx 5a9a70c7 pop ecx 5a9a70c8 pop ebp 5a9a70c9 ret date/time : 2013-05-05, 16:56:51, 140ms computer name : DAVID-NEA8XZ7QD user name : David Anttila registered owner : David Anttila operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 20 minutes 13 seconds program up time : 10 seconds processor : AMD Athlon(tm) Processor LE-1640 physical memory : 1410/2047 MB (free/total) free disk space : (C:) 54.81 GB display mode : 1024x768, 32 bit process id : $f0c allocated memory : 12.14 MB command line : "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "Expansion" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Armada Fleet Operations callstack crc : $9b2a59ec, $e2425050, $e2425050 exception number : 1 exception class : EFOpenError exception message : Cannot open file "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data\odf.fpq". The process cannot access the file because it is being used by another process. main thread ($f10): 5a872216 +0011e FleetOpsHook.dll Classes TFileStream.Create 5a8720d4 +00020 FleetOpsHook.dll Classes TFileStream.Create 5a92c236 +0001a FleetOpsHook.dll FPQ 268 +1 TFPQFileReader.Load 5a9bcc15 +00059 FleetOpsHook.dll FileSystem 591 +4 TFOFS.AddItemsFromPack 5a9bcfc0 +000ec FleetOpsHook.dll FileSystem 711 +22 TFOFS.LoadMod 5a9bd448 +00078 FleetOpsHook.dll FileSystem 875 +16 TFOFS.Init 5a9bd486 +00016 FleetOpsHook.dll FileSystem 884 +1 FOFSInit 5a9d98fe +0003e FleetOpsHook.dll FleetOpsHook 215 +11 initialization 7c916438 +0010b ntdll.dll LdrLoadDll 7c801bb8 +000c3 kernel32.dll LoadLibraryExW 7c801d6d +0001a kernel32.dll LoadLibraryExA 7c801da3 +00028 kernel32.dll LoadLibraryA 7c91fad2 +1e96c ntdll.dll LdrInitializeThunk 7c90e455 +00005 ntdll.dll KiUserApcDispatcher thread $f98: 7c90df58 +0000a ntdll.dll NtWaitForSingleObject 7c919b1e +00087 ntdll.dll RtlpWaitForCriticalSection 7c901041 +00041 ntdll.dll RtlEnterCriticalSection 7c924d28 +23bc2 ntdll.dll LdrInitializeThunk 7c90e455 +00005 ntdll.dll KiUserApcDispatcher modules: 003c0000 Normaliz.dll 6.0.5441.0 C:\WINDOWS\system32 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00e60000 D3DX81ab.dll 8.1.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00f10000 fmodex.dll 0.4.34.2 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 01020000 d3dx9_43.dll 9.29.952.3111 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 017e0000 adawarebp.dll 1.0.1.94 C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 3d930000 wininet.dll 8.0.6001.19298 C:\WINDOWS\system32 3dfd0000 iertutil.dll 8.0.6001.19298 C:\WINDOWS\system32 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 629c0000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 74d90000 USP10.dll 1.420.2600.5969 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5512 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.6160 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.6198 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.6058 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6168 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 78130000 urlmon.dll 8.0.6001.19298 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.6055 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6242 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 000 Idle 0 0 004 System 0 0 normal 288 smss.exe 0 0 normal C:\WINDOWS\system32 378 csrss.exe 0 0 390 winlogon.exe 46 14 high C:\WINDOWS\system32 3bc services.exe 4 2 normal C:\WINDOWS\system32 3c8 lsass.exe 4 3 normal C:\WINDOWS\system32 464 svchost.exe 4 1 normal C:\WINDOWS\system32 4a8 svchost.exe 0 0 4d0 svchost.exe 11 31 normal C:\WINDOWS\System32 504 svchost.exe 0 0 57c svchost.exe 0 0 6f0 Explorer.EXE 247 115 normal C:\WINDOWS 724 spoolsv.exe 4 4 normal C:\WINDOWS\system32 77c svchost.exe 0 0 79c AdAwareService.exe 4 6 normal C:\Program Files\Ad-Aware Antivirus 7f4 jqs.exe 4 2 idle C:\Program Files\Java\jre7\bin 0a4 svchost.exe 4 3 normal C:\WINDOWS\System32 0a0 nvsvc32.exe 16 5 normal C:\WINDOWS\system32 0d0 daemonu.exe 0 0 0e4 svchost.exe 4 3 normal C:\WINDOWS\System32 1a4 SBAMSvc.exe 4 10 normal C:\Program Files\Ad-Aware Antivirus 1c4 svchost.exe 4 2 normal C:\WINDOWS\System32 1f4 wdfmgr.exe 0 0 30c adawarebp.exe 8 2 normal C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 314 RTHDCPL.EXE 785 158 normal C:\WINDOWS 31c DrgToDsc.exe 58 35 normal C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc 324 RoxWatchTray.exe 18 8 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 358 RunDLL32.exe 50 9 normal C:\WINDOWS\system32 514 winampa.exe 14 4 normal C:\Program Files\Winamp 52c jusched.exe 8 2 normal C:\Program Files\Common Files\Java\Java Update 544 ctfmon.exe 28 11 normal C:\WINDOWS\system32 5b4 RunDll32.exe 64 8 normal C:\WINDOWS\system32 630 AdAware.exe 488 107 normal C:\PROGRA~1\AD-AWA~1 b54 CPSHelpRunner.exe 17 15 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 da4 wmiprvse.exe 0 0 ee0 Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data f0c Armada2.exe 38 19 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data f50 Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data f58 Armada2.exe 23 11 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data hardware: + Computer - ACPI Uniprocessor PC + Disk drives - Generic- Compact Flash USB Device - Generic- MS/MS-Pro USB Device - Generic- SD/MMC USB Device - Generic- SM/xD-Picture USB Device - ST31000333AS + Display adapters - NVIDIA GeForce 9400 GT (driver 6.14.13.1070) + DVD/CD-ROM drives - HP DVD Writer 1260t + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - Microsoft USB Wheel Mouse Optical - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - AMD PCI IDE Controller (driver 5.1.0.8) - AMD SATA Controller(Native IDE Mode) (driver 5.1.0.8) - Primary IDE Channel - Primary IDE Channel - Secondary IDE Channel - Secondary IDE Channel + Keyboards - HID Keyboard Device + Mice and other pointing devices - Microsoft USB Wheel Mouse Optical + Monitors - Plug and Play Monitor + Network adapters - Linksys AE2500 (driver 5.100.68.46) - Realtek RTL8139 Family PCI Fast Ethernet NIC - Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC (driver 5.686.103.2008) + Ports (COM & LPT) - Communications Port (COM1) + Processors - AMD Athlon(tm) Processor LE-1640 + Sound, video and game controllers - Audio Codecs - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - Realtek High Definition Audio (driver 5.10.0.5628) - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - ATI SMBus (driver 5.10.1000.8) - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Direct memory access controller - Full screen video driver for console - High precision event timer - ISAPNP Read Data Port - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 01648b98 ebx = 01616df0 ecx = 00000000 edx = 5a87221b esi = 01616d80 edi = 00000000 eip = 5a87221b esp = 0012f0c0 ebp = 0012f12c stack dump: 0012f0c0 1b 22 87 5a de fa ed 0e - 01 00 00 00 07 00 00 00 .".Z............ 0012f0d0 d4 f0 12 00 1b 22 87 5a - 98 8b 64 01 f0 6d 61 01 .....".Z..d..ma. 0012f0e0 80 6d 61 01 00 00 00 00 - 2c f1 12 00 f0 f0 12 00 .ma.....,....... 0012f0f0 3c f1 12 00 58 4e 80 5a - 2c f1 12 00 90 1b f4 7f <...XN.Z,....... 0012f100 f0 6d 61 01 01 58 f6 7f - 00 00 00 00 00 00 00 00 .ma..X.......... 0012f110 00 00 00 00 00 00 00 00 - 78 05 eb 7f 0b cf 86 5a ........x......Z 0012f120 e0 05 eb 7f 0b d1 9b 5a - 72 49 80 00 54 f1 12 00 .......ZrI..T... 0012f130 d9 20 87 5a 00 00 00 00 - 00 00 00 00 9c f1 12 00 ...Z............ 0012f140 ef 4f 80 5a 54 f1 12 00 - f0 6d 61 01 f0 58 f6 7f .O.ZT....ma..X.. 0012f150 18 d1 9b 5a 94 f1 12 00 - 3b c2 92 5a 00 00 00 00 ...Z....;..Z.... 0012f160 90 1b f4 7f 64 84 9e 5a - 18 d1 9b 5a 78 5a 61 01 ....d..Z...ZxZa. 0012f170 d9 2f 80 5a 7c 5a 61 01 - 21 f0 86 5a 00 00 00 00 ./.Z|Za.!..Z.... 0012f180 78 5a 61 01 88 ee 86 5a - b5 ec 86 5a 90 1b f4 7f xZa....Z...Z.... 0012f190 64 84 9e 01 e8 f1 12 00 - 1a cc 9b 5a f4 f1 12 00 d..........Z.... 0012f1a0 58 4e 80 5a e8 f1 12 00 - 90 1b f4 7f 64 84 9e 5a XN.Z........d..Z 0012f1b0 00 00 00 00 00 00 00 00 - 0e 00 0e 00 f0 58 f6 7f .............X.. 0012f1c0 00 00 00 00 90 1b f4 7f - 00 00 00 00 d8 f1 12 00 ................ 0012f1d0 f9 15 81 7c 00 fc fd 7f - ec f1 12 00 f5 70 8c 5a ...|.........p.Z 0012f1e0 00 00 00 00 00 00 00 00 - 28 f2 12 00 c5 cf 9b 5a ........(......Z 0012f1f0 ac 1b f4 7f 30 f2 12 00 - 58 4e 80 5a 28 f2 12 00 ....0...XN.Z(... disassembling: 5a92c21c public FPQ.TFPQFileReader.Load: ; function entry point 5a92c21c 267 push ebp 5a92c21d mov ebp, esp 5a92c21f add esp, -$28 5a92c222 push ebx 5a92c223 push esi 5a92c224 push edi 5a92c225 mov [ebp-1], dl 5a92c228 mov esi, eax 5a92c22a 268 push 0 5a92c22c mov ecx, [esi+4] 5a92c22f mov dl, 1 5a92c231 mov eax, [$5a86ced8] 5a92c236 > call -$ba187 ($5a8720b4) ; Classes.TFileStream.Create 5a92c236 5a92c23b mov [ebp-8], eax 5a92c23e 269 xor eax, eax 5a92c240 push ebp 5a92c241 push $5a92c3bf ; System.@HandleFinally 5a92c246 push dword ptr fs:[eax] 5a92c249 mov fs:[eax], esp 5a92c24c 270 mov eax, [ebp-8] 5a92c24f mov edx, [eax] 5a92c251 call dword ptr [edx] 5a92c251 5a92c253 mov [esi+8], eax 5a92c256 272 lea edx, [ebp-$28] 5a92c259 mov ecx, $1c 5a92c25e mov eax, [ebp-8] 5a92c261 mov ebx, [eax] 5a92c263 call dword ptr [ebx+$c] 5a92c263 5a92c266 273 mov eax, [ebp-$1c] 5a92c269 mov [esi+$c], eax [...] date/time : 2013-05-06, 16:18:52, 453ms computer name : DAVID-NEA8XZ7QD user name : David Anttila registered owner : David Anttila operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 1 hour 7 minutes program up time : 16 minutes 42 seconds processor : AMD Athlon(tm) Processor LE-1640 physical memory : 1397/2047 MB (free/total) free disk space : (C:) 55.19 GB display mode : 1024x768, 32 bit process id : $934 allocated memory : 139.63 MB command line : "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "Update" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Armada Fleet Operations callstack crc : $ae9df2d5, $0d05f687, $0d05f687 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 005731E1 in module 'Armada2.exe'. Read of address 00000000. main thread ($91c): 005731e1 +0f1 Armada2.exe Artillery.Simulate 0058e46f +03f Armada2.exe Ordnance.SimulateAll 004835b0 +160 Armada2.exe Program.GameProcess 00559b7a +0fa Armada2.exe TransportLocal.GameExecute 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup thread $f40: 7c90daa8 +a ntdll.dll NtReplyWaitReceivePortEx thread $54c: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $914: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $90c: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $8fc: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $5d0: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $624: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $b0c: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction thread $724: 7c90d218 +00a ntdll.dll NtDelayExecution 7c8023eb +04b kernel32.dll SleepEx 7c802450 +00a kernel32.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction modules: 003c0000 Normaliz.dll 6.0.5441.0 C:\WINDOWS\system32 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00e60000 D3DX81ab.dll 8.1.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00f10000 fmodex.dll 0.4.34.2 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 01020000 d3dx9_43.dll 9.29.952.3111 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 017e0000 adawarebp.dll 1.0.1.94 C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 03400000 Tunngle.dll 1.0.6.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 03e10000 xpsp2res.dll 5.1.2600.5512 C:\WINDOWS\system32 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 3d930000 wininet.dll 8.0.6001.19298 C:\WINDOWS\system32 3dfd0000 iertutil.dll 8.0.6001.19298 C:\WINDOWS\system32 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 629c0000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32 72d20000 wdmaud.drv 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73ee0000 KsUser.dll 5.3.2600.5512 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 74d90000 USP10.dll 1.420.2600.5969 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5512 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.6160 C:\WINDOWS\system32 76c30000 WINTRUST.dll 5.131.2600.6198 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.6198 C:\WINDOWS\system32 76fd0000 CLBCATQ.DLL 2001.12.4414.700 C:\WINDOWS\system32 77050000 COMRes.dll 2001.12.4414.700 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.6058 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6168 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77a80000 CRYPT32.dll 5.131.2600.6237 C:\WINDOWS\system32 77b20000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 77bd0000 midimap.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 78130000 urlmon.dll 8.0.6001.19298 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.6055 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6242 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 000 Idle 0 0 004 System 0 0 normal 298 smss.exe 0 0 normal C:\WINDOWS\system32 370 csrss.exe 0 0 388 winlogon.exe 46 14 high C:\WINDOWS\system32 3b4 services.exe 4 2 normal C:\WINDOWS\system32 3c0 lsass.exe 4 1 normal C:\WINDOWS\system32 45c svchost.exe 4 1 normal C:\WINDOWS\system32 4a0 svchost.exe 0 0 4c8 svchost.exe 11 27 normal C:\WINDOWS\System32 504 svchost.exe 0 0 574 svchost.exe 0 0 6e0 spoolsv.exe 4 4 normal C:\WINDOWS\system32 744 Explorer.EXE 614 378 normal C:\WINDOWS 78c svchost.exe 0 0 7ac AdAwareService.exe 4 5 normal C:\Program Files\Ad-Aware Antivirus 7fc jqs.exe 4 2 idle C:\Program Files\Java\jre7\bin 0a8 svchost.exe 4 3 normal C:\WINDOWS\System32 0b4 nvsvc32.exe 23 5 normal C:\WINDOWS\system32 0e4 daemonu.exe 0 0 0f0 svchost.exe 4 3 normal C:\WINDOWS\System32 1b4 SBAMSvc.exe 4 10 normal C:\Program Files\Ad-Aware Antivirus 1d8 svchost.exe 4 2 normal C:\WINDOWS\System32 200 wdfmgr.exe 0 0 268 adawarebp.exe 8 2 normal C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 258 RTHDCPL.EXE 785 158 normal C:\WINDOWS 278 DrgToDsc.exe 58 32 normal C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc 290 RoxWatchTray.exe 18 13 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 2fc RunDLL32.exe 50 9 normal C:\WINDOWS\system32 490 winampa.exe 14 4 normal C:\Program Files\Winamp 638 jusched.exe 8 4 normal C:\Program Files\Common Files\Java\Java Update 640 ctfmon.exe 28 11 normal C:\WINDOWS\system32 664 RunDll32.exe 64 8 normal C:\WINDOWS\system32 540 AdAware.exe 493 108 normal C:\PROGRA~1\AD-AWA~1 a3c CPSHelpRunner.exe 17 15 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 f2c Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 934 Armada2.exe 97 47 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data hardware: + Computer - ACPI Uniprocessor PC + Disk drives - Generic- Compact Flash USB Device - Generic- MS/MS-Pro USB Device - Generic- SD/MMC USB Device - Generic- SM/xD-Picture USB Device - ST31000333AS + Display adapters - NVIDIA GeForce 9400 GT (driver 6.14.13.1070) + DVD/CD-ROM drives - HP DVD Writer 1260t + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - Microsoft USB Wheel Mouse Optical - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - AMD PCI IDE Controller (driver 5.1.0.8) - AMD SATA Controller(Native IDE Mode) (driver 5.1.0.8) - Primary IDE Channel - Primary IDE Channel - Secondary IDE Channel - Secondary IDE Channel + Keyboards - HID Keyboard Device + Mice and other pointing devices - Microsoft USB Wheel Mouse Optical + Monitors - Plug and Play Monitor + Network adapters - Linksys AE2500 (driver 5.100.68.46) - Realtek RTL8139 Family PCI Fast Ethernet NIC - Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC (driver 5.686.103.2008) + Ports (COM & LPT) - Communications Port (COM1) + Processors - AMD Athlon(tm) Processor LE-1640 + Sound, video and game controllers - Audio Codecs - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - Realtek High Definition Audio (driver 5.10.0.5628) - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - ATI SMBus (driver 5.10.1000.8) - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Direct memory access controller - Full screen video driver for console - High precision event timer - ISAPNP Read Data Port - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 0acf9740 ecx = 0012fba4 edx = 1c44000f esi = 007693b0 edi = 0acf9678 eip = 005731e1 esp = 0012fb00 ebp = 0012fb50 stack dump: 0012fb00 58 fb 12 00 68 46 37 00 - 78 96 cf 0a 00 00 00 00 X...hF7.x....... 0012fb10 00 00 80 3f 00 00 00 00 - 00 00 00 00 00 00 00 00 ...?............ 0012fb20 00 00 80 3f 00 00 00 00 - 00 00 00 00 00 00 00 00 ...?............ 0012fb30 00 00 80 3f f1 ea 87 46 - 19 17 be 41 79 5d ff 44 ...?...F...Ay].D 0012fb40 00 00 80 25 dd 47 48 45 - 08 2d f1 05 78 96 cf 0a ...%.GHE.-..x... 0012fb50 68 fb 12 00 72 e4 58 00 - 00 00 00 00 1c 2f dd 3c h...r.X....../.< 0012fb60 1b 00 00 00 1c 2f dd 3c - b0 fb 12 00 b5 35 48 00 ...../.<.....5H. 0012fb70 1c 2f dd 3c 1c 2f dd 3c - 1c 2f dd 3c 1c 2f dd 3c ./.<./.<./.<./.< 0012fb80 b8 b0 b6 03 24 a4 4e 1e - 7d 07 00 00 00 00 00 00 ....$.N.}....... 0012fb90 01 00 00 00 7d 07 00 00 - 00 00 00 00 01 00 00 00 ....}........... 0012fba0 1c 2f dd 3c d4 fd 12 00 - 88 c0 69 00 ff ff ff ff ./.<......i..... 0012fbb0 e0 fd 12 00 7f 9b 55 00 - 7f 03 00 00 03 00 00 00 ......U......... 0012fbc0 30 7b 73 00 00 00 00 00 - 00 00 00 00 00 00 00 00 0{s............. 0012fbd0 00 00 17 54 41 50 53 01 - 00 00 00 81 02 03 80 02 ...TAPS......... 0012fbe0 2a 00 00 01 01 6d 11 81 - 46 00 00 00 00 d1 b0 06 *....m..F....... 0012fbf0 45 07 80 2a 02 13 80 30 - 82 05 80 23 02 1a 80 2c E..*...0...#..., 0012fc00 02 06 80 ef 81 1d 80 2b - 02 05 80 04 00 00 00 00 .......+........ 0012fc10 da 2a 8b 45 00 00 00 a5 - 20 54 5f 46 00 00 00 00 .*.E.....T_F.... 0012fc20 00 00 00 00 34 fc 12 00 - 00 00 00 00 b8 00 91 7c ....4..........| 0012fc30 58 e8 b3 03 00 fd 12 00 - 41 00 91 7c 18 07 37 00 X.......A..|..7. disassembling: 5a9ada8c public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9ada8c 4974 push ebp 5a9ada8d mov ebp, esp 5a9ada8f push 0 5a9ada91 push 0 5a9ada93 push ebx 5a9ada94 push esi 5a9ada95 push edi 5a9ada96 xor eax, eax 5a9ada98 push ebp 5a9ada99 push $5a9adb37 ; System.@HandleFinally 5a9ada9e push dword ptr fs:[eax] 5a9adaa1 mov fs:[eax], esp 5a9adaa4 4975 mov eax, [ebp+8] 5a9adaa7 4976 xor edx, edx 5a9adaa9 push ebp 5a9adaaa push $5a9adac1 ; System.@HandleAnyException 5a9adaaf push dword ptr fs:[edx] 5a9adab2 mov fs:[edx], esp 5a9adab5 4977 > call eax 5a9adab5 5a9adab7 xor eax, eax 5a9adab9 pop edx 5a9adaba pop ecx 5a9adabb pop ecx 5a9adabc mov fs:[eax], edx 5a9adabf jmp loc_5a9adb19 5a9adabf 5a9adabf ; --------------------------------------------------------- 5a9adabf 5a9adac1 jmp -$1a8fa2 ($5a804b24) ; System.@HandleAnyException 5a9adac1 5a9adac6 4979 push 1 5a9adac8 push 0 5a9adaca push 0 5a9adacc push 0 5a9adace push 0 5a9adad0 push 0 5a9adad2 push 0 5a9adad4 push 0 [...] date/time : 2013-05-06, 18:42:57, 109ms computer name : DAVID-NEA8XZ7QD user name : David Anttila registered owner : David Anttila operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 3 hours 31 minutes program up time : 10 minutes 37 seconds processor : AMD Athlon(tm) Processor LE-1640 physical memory : 1477/2047 MB (free/total) free disk space : (C:) 55.03 GB display mode : 1024x768, 32 bit process id : $8a8 allocated memory : 100.91 MB command line : "C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "Update" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Armada Fleet Operations contact name : David Anttila contact email : sovereignii@juno.com callstack crc : $ca1e7fe1, $8d4e4efa, $8d4e4efa count : 6 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 005FE944 in module 'Armada2.exe'. Read of address 2B72B320. main thread ($c2c): 005fe944 +0b4 Armada2.exe TallyScreenInfo.FillInData 005f1f51 +0c1 Armada2.exe DebriefingData.FillInLogData 005e2ddf +b4f Armada2.exe do_admiralsLog 7c90e470 +010 ntdll.dll KiUserCallbackDispatcher 5a8775a0 +014 FleetOpsHook.dll Classes StdWndProc 7e43e594 +01d USER32.dll DefDlgProcA 7e424a01 +031 USER32.dll DialogBoxIndirectParamAorW 7e43b18b +047 USER32.dll DialogBoxParamA 005e22b1 +021 Armada2.exe do_admiralsLog 00606800 +140 Armada2.exe DispatchDialog 00624735 +105 Armada2.exe ST3D_DeviceDirectX8.RefreshDisplay 5a9a70bd +1a5 FleetOpsHook.dll FleetOpsFunctionsHook 346 +72 DispatchDialog_Callback 00607675 +125 Armada2.exe do_admirals_log 004873e0 +300 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup thread $968: 7c90daa8 +a ntdll.dll NtReplyWaitReceivePortEx thread $250: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $818: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $a1c: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $bf4: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $fbc: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex thread $8fc: 7c90d218 +0a ntdll.dll NtDelayExecution 7c8023eb +4b kernel32.dll SleepEx 7c802450 +0a kernel32.dll Sleep 77c3a3ad +a6 msvcrt.dll _endthreadex modules: 003c0000 Normaliz.dll 6.0.5441.0 C:\WINDOWS\system32 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00e60000 D3DX81ab.dll 8.1.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 00f10000 fmodex.dll 0.4.34.2 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 01020000 d3dx9_43.dll 9.29.952.3111 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 017e0000 adawarebp.dll 1.0.1.94 C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 03400000 Tunngle.dll 1.0.6.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 03e10000 xpsp2res.dll 5.1.2600.5512 C:\WINDOWS\system32 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 3d930000 wininet.dll 8.0.6001.19298 C:\WINDOWS\system32 3dfd0000 iertutil.dll 8.0.6001.19298 C:\WINDOWS\system32 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 629c0000 LPK.DLL 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32 72d20000 wdmaud.drv 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73ee0000 KsUser.dll 5.3.2600.5512 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 74d90000 USP10.dll 1.420.2600.5969 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5512 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.6160 C:\WINDOWS\system32 76c30000 WINTRUST.dll 5.131.2600.6198 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.6198 C:\WINDOWS\system32 76fd0000 CLBCATQ.DLL 2001.12.4414.700 C:\WINDOWS\system32 77050000 COMRes.dll 2001.12.4414.700 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.6058 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6168 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77a80000 CRYPT32.dll 5.131.2600.6237 C:\WINDOWS\system32 77b20000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 77bd0000 midimap.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 78130000 urlmon.dll 8.0.6001.19298 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.6055 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6242 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 000 Idle 0 0 004 System 0 0 normal 298 smss.exe 0 0 normal C:\WINDOWS\system32 370 csrss.exe 0 0 388 winlogon.exe 46 14 high C:\WINDOWS\system32 3b4 services.exe 4 2 normal C:\WINDOWS\system32 3c0 lsass.exe 4 1 normal C:\WINDOWS\system32 45c svchost.exe 4 1 normal C:\WINDOWS\system32 4a0 svchost.exe 0 0 4c8 svchost.exe 11 27 normal C:\WINDOWS\System32 504 svchost.exe 0 0 574 svchost.exe 0 0 6e0 spoolsv.exe 4 4 normal C:\WINDOWS\system32 744 Explorer.EXE 734 435 normal C:\WINDOWS 78c svchost.exe 0 0 7ac AdAwareService.exe 4 5 normal C:\Program Files\Ad-Aware Antivirus 7fc jqs.exe 4 2 idle C:\Program Files\Java\jre7\bin 0a8 svchost.exe 4 3 normal C:\WINDOWS\System32 0b4 nvsvc32.exe 23 5 normal C:\WINDOWS\system32 0e4 daemonu.exe 0 0 0f0 svchost.exe 4 3 normal C:\WINDOWS\System32 1b4 SBAMSvc.exe 4 10 normal C:\Program Files\Ad-Aware Antivirus 1d8 svchost.exe 4 2 normal C:\WINDOWS\System32 200 wdfmgr.exe 0 0 268 adawarebp.exe 8 2 normal C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection 258 RTHDCPL.EXE 785 158 normal C:\WINDOWS 278 DrgToDsc.exe 58 32 normal C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc 290 RoxWatchTray.exe 18 13 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 2fc RunDLL32.exe 50 9 normal C:\WINDOWS\system32 490 winampa.exe 14 4 normal C:\Program Files\Winamp 638 jusched.exe 8 4 normal C:\Program Files\Common Files\Java\Java Update 640 ctfmon.exe 28 11 normal C:\WINDOWS\system32 664 RunDll32.exe 64 8 normal C:\WINDOWS\system32 540 AdAware.exe 493 109 normal C:\PROGRA~1\AD-AWA~1 a3c CPSHelpRunner.exe 17 15 normal C:\Program Files\Common Files\Roxio Shared\SharedCOM8 8d4 Armada2.exe 8 1 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data 8a8 Armada2.exe 104 47 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\Data hardware: + Computer - ACPI Uniprocessor PC + Disk drives - Generic- Compact Flash USB Device - Generic- MS/MS-Pro USB Device - Generic- SD/MMC USB Device - Generic- SM/xD-Picture USB Device - ST31000333AS + Display adapters - NVIDIA GeForce 9400 GT (driver 6.14.13.1070) + DVD/CD-ROM drives - HP DVD Writer 1260t + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant device - Microsoft USB Wheel Mouse Optical - USB Human Interface Device - USB Human Interface Device + IDE ATA/ATAPI controllers - AMD PCI IDE Controller (driver 5.1.0.8) - AMD SATA Controller(Native IDE Mode) (driver 5.1.0.8) - Primary IDE Channel - Primary IDE Channel - Secondary IDE Channel - Secondary IDE Channel + Keyboards - HID Keyboard Device + Mice and other pointing devices - Microsoft USB Wheel Mouse Optical + Monitors - Plug and Play Monitor + Network adapters - Linksys AE2500 (driver 5.100.68.46) - Realtek RTL8139 Family PCI Fast Ethernet NIC - Realtek RTL8168C(P)/8111C(P) PCI-E Gigabit Ethernet NIC (driver 5.686.103.2008) + Ports (COM & LPT) - Communications Port (COM1) + Processors - AMD Athlon(tm) Processor LE-1640 + Sound, video and game controllers - Audio Codecs - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - Realtek High Definition Audio (driver 5.10.0.5628) - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - ATI SMBus (driver 5.10.1000.8) - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Direct memory access controller - Full screen video driver for console - High precision event timer - ISAPNP Read Data Port - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 070a1b98 ebx = 00000003 ecx = 03be8dd0 edx = 0ad7ef98 esi = 03bd7d24 edi = 03bd7d14 eip = 005fe944 esp = 0012f4b4 ebp = 0012f4fc stack dump: 0012f4b4 04 00 00 00 00 2d b1 03 - 01 00 00 00 28 e6 0e 06 .....-......(... 0012f4c4 e8 e4 09 07 18 e3 fa 05 - 68 a1 05 07 80 6a b8 03 ........h....j.. 0012f4d4 88 f4 09 07 58 ab d0 06 - 10 de 07 07 b8 e7 05 07 ....X........... 0012f4e4 00 68 09 07 88 f7 08 07 - a0 28 fb 05 08 33 0a 07 .h.......(...3.. 0012f4f4 2c f5 12 00 65 1f 5f 00 - 2c f5 12 00 56 1f 5f 00 ,...e._.,...V._. 0012f504 14 7d bd 03 01 00 00 00 - 09 00 00 00 ec 12 95 5a .}.............Z 0012f514 00 00 00 00 f0 2c b1 03 - f0 dc fa 05 e8 2c b1 03 .....,.......,.. 0012f524 02 00 00 00 c8 dd fa 05 - 98 f9 12 00 df 2d 5e 00 .............-^. 0012f534 01 00 00 00 c0 22 5e 00 - 00 00 00 00 0a be 42 7e ....."^.......B~ 0012f544 d9 8b 41 7e 00 f0 fd 7f - 77 e5 43 7e 6c f5 12 00 ..A~....w.C~l... 0012f554 99 e5 43 7e 00 00 00 00 - 03 00 00 00 00 00 00 00 ..C~............ 0012f564 70 00 52 00 01 00 00 00 - 98 f5 12 00 34 87 41 7e p.R.........4.A~ 0012f574 d0 02 33 00 03 00 00 00 - 00 00 00 00 70 00 52 00 ..3.........p.R. 0012f584 77 e5 43 7e cd ab ba dc - 00 00 00 00 d4 f5 12 00 w.C~............ 0012f594 77 e5 43 7e 00 f6 12 00 - d9 8b 41 7e 00 f0 fd 7f w.C~......A~.... 0012f5a4 00 f6 12 00 5a 88 41 7e - c0 f5 12 00 2a 88 41 7e ....Z.A~....*.A~ 0012f5b4 00 00 00 00 d0 02 33 00 - 00 00 00 00 14 00 00 00 ......3......... 0012f5c4 01 00 00 00 00 00 00 00 - 00 00 00 00 10 00 00 00 ................ 0012f5d4 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0012f5e4 00 00 00 00 b4 f5 12 00 - 7c fd 12 00 44 f6 12 00 ........|...D... disassembling: [...] 5a9a7094 5a9a7099 mov ecx, eax 5a9a709b mov dl, 1 5a9a709d mov eax, [$5a9a2b5c] 5a9a70a2 call -$f060b ($5a8b6a9c) ; Controls.TWinControl.CreateParented 5a9a70a2 5a9a70a7 mov ebx, eax 5a9a70a9 341 mov eax, ebx 5a9a70ab mov edx, [eax] 5a9a70ad call dword ptr [edx+$fc] 5a9a70ad 5a9a70b3 342 mov eax, ebx 5a9a70b5 call -$1a2a9e ($5a80461c) ; System.TObject.Free 5a9a70b5 5a9a70ba jmp loc_5a9a70c4 5a9a70ba 5a9a70ba ; --------------------------------------------------------- 5a9a70ba 5a9a70bc loc_5a9a70bc: 5a9a70bc 346 push esi 5a9a70bd > call dword ptr [$5aa1d934] 5a9a70bd 5a9a70c3 pop ecx 5a9a70bd 5a9a70c4 loc_5a9a70c4: 5a9a70c4 349 pop edi 5a9a70c5 pop esi 5a9a70c6 pop ebx 5a9a70c7 pop ecx 5a9a70c8 pop ebp 5a9a70c9 ret error details: Had finished test battle with species, Shadow Avatar and was going to admirals log when the game crashed.