date/time : 2014-05-11, 13:35:13, 422ms computer name : PCGAMING-JOSHUA user name : Joshua's Daily_2 registered owner : Joshua's Daily operating system : Windows 7 x64 Service Pack 1 build 7601 system language : English system up time : 5 days 15 hours program up time : 14 minutes 36 seconds processors : 4x AMD FX(tm)-4100 Quad-Core Processor physical memory : 4439/8174 MB (free/total) free disk space : (C:) 302.12 GB display mode : 1280x1024, 32 bit process id : $18e0 allocated memory : 208.50 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 contact name : Joshua contact email : jababon1996@gmail.com callstack crc : $7cd6e738, $04dc9ec5, $04dc9ec5 count : 2 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 00551837 in module 'Armada2.exe'. Read of address 00000008. main thread ($1644): 00551837 +077 Armada2.exe NetOrderSpecialAttack.Execute 00556489 +299 Armada2.exe RoundBuffer.ProcessOrders 00554c56 +0b6 Armada2.exe Network.RoundStore.Execute 0056079e +55e Armada2.exe TransportNetwork.GameExecute 1000411d +05d NetworkManager.dll ?SendTypeAndData@DirectPlay@Network@@ABEXPBXHHE@Z 10004141 +011 NetworkManager.dll ?Data@DirectPlay@Network@@UAEXPBXHH@Z 00569c8b +01b Armada2.exe TransportNetworkManager.SendNetworkAddress 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 758d3388 +010 kernel32.dll BaseThreadInitThunk thread $b74: 77ae0156 +0e ntdll.dll NtWaitForMultipleObjects 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $14b8: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 75d81323 +67 msvcrt.dll _endthreadex 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1d00: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 75d81323 +67 msvcrt.dll _endthreadex 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1cb0: 77adfd8a +0e ntdll.dll NtDelayExecution 75593bc2 +5f KERNELBASE.dll SleepEx 75594493 +0a KERNELBASE.dll Sleep 75d81323 +67 msvcrt.dll _endthreadex 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1cd4: 77adfd8a +0e ntdll.dll NtDelayExecution 75593bc2 +5f KERNELBASE.dll SleepEx 75594493 +0a KERNELBASE.dll Sleep 75d81323 +67 msvcrt.dll _endthreadex 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $12e8: 77adf952 +0e ntdll.dll NtRemoveIoCompletion 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $19c8: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $184c: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1900: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $111c: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $3d4: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $b04: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1204: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1e54: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1c04: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1d54: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1450: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1edc: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1338: 77adf8ca +0e ntdll.dll NtWaitForSingleObject 75591497 +92 KERNELBASE.dll WaitForSingleObjectEx 758d118f +3e kernel32.dll WaitForSingleObjectEx 758d1143 +0d kernel32.dll WaitForSingleObject 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1710: 77ae1f3f +0b ntdll.dll NtWaitForWorkViaWorkerFactory 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $1504: 77ae0156 +0e ntdll.dll NtWaitForMultipleObjects 755915e3 +fa KERNELBASE.dll WaitForMultipleObjectsEx 758d19f3 +89 kernel32.dll WaitForMultipleObjectsEx 758d41fb +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 758d3388 +10 kernel32.dll BaseThreadInitThunk thread $7d4: 77adfd8a +00e ntdll.dll NtDelayExecution 75593bc2 +05f KERNELBASE.dll SleepEx 75594493 +00a KERNELBASE.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction 758d3388 +010 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 00800000 D3DX81ab.dll 8.1.0.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 02920000 fmodex.dll 0.4.34.2 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 04c70000 Tunngle.dll 1.0.6.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 05c20000 nvspcap.dll 11.10.11.1 C:\Windows\system32 10000000 NetworkManager.dll C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 18000000 binkw32.dll 1.9.16.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 57080000 nvd3dum.dll 9.18.13.3489 C:\Windows\system32 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations 61210000 rasapi32.dll 6.1.7600.16385 C:\Windows\system32 61270000 d3dx9_43.dll 9.29.952.3111 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 61470000 d3d8.dll 6.1.7600.16385 C:\Windows\system32 61580000 MSVCP60.dll 7.0.7600.16385 C:\Windows\system32 61600000 dpnet.dll 6.1.7601.17989 C:\Windows\system32 64c80000 MSVFW32.dll 6.1.7601.17514 C:\Windows\system32 65dc0000 rasman.dll 6.1.7600.16385 C:\Windows\system32 65e20000 AVIFIL32.dll 6.1.7601.17514 C:\Windows\system32 65e40000 dpnathlp.dll 6.1.7600.16385 C:\Windows\system32 65ea0000 nvSCPAPI.dll 7.17.13.3489 C:\Program Files (x86)\NVIDIA Corporation\3D Vision 67450000 d3d9.dll 6.1.7601.17514 C:\Windows\system32 70060000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 700a0000 POWRPROF.dll 6.1.7600.16385 C:\Windows\system32 700d0000 DSOUND.dll 6.1.7600.16385 C:\Windows\system32 70150000 AUDIOSES.DLL 6.1.7601.17514 C:\Windows\system32 705b0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 705d0000 COMCTL32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 70850000 winrnr.dll 6.1.7600.16385 C:\Windows\System32 70860000 pnrpnsp.dll 6.1.7600.16385 C:\Windows\system32 70880000 napinsp.dll 6.1.7600.16385 C:\Windows\system32 70910000 d3d8thk.dll 6.1.7600.16385 C:\Windows\system32 709a0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 71530000 fwpuclnt.dll 6.1.7601.18283 C:\Windows\System32 71570000 rasadhlp.dll 6.1.7600.16385 C:\Windows\system32 71580000 WLIDNSP.DLL 7.250.4232.0 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live 715b0000 DNSAPI.dll 6.1.7601.17570 C:\Windows\system32 71f30000 api-ms-win-downlevel-advapi32-l2-1-0.dll 6.2.9200.16492 C:\Windows\system32 71f50000 api-ms-win-downlevel-shlwapi-l2-1-0.dll 6.2.9200.16492 C:\Windows\system32 720a0000 dhcpcsvc.DLL 6.1.7600.16385 C:\Windows\system32 720c0000 dhcpcsvc6.DLL 6.1.7601.17970 C:\Windows\system32 720d0000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 72110000 CRYPTSP.dll 6.1.7600.16385 C:\Windows\system32 72130000 wship6.dll 6.1.7600.16385 C:\Windows\System32 72140000 RpcRtRemote.dll 6.1.7601.17514 C:\Windows\system32 72450000 mswsock.dll 6.1.7601.18254 C:\Windows\system32 726c0000 wshtcpip.dll 6.1.7600.16385 C:\Windows\System32 727c0000 WINMM.dll 6.1.7601.17514 C:\Windows\system32 72800000 profapi.dll 6.1.7600.16385 C:\Windows\system32 72870000 Secur32.dll 6.1.7601.18270 C:\Windows\system32 72e50000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32 72e60000 IPHLPAPI.DLL 6.1.7601.17514 C:\Windows\system32 73220000 midimap.dll 6.1.7600.16385 C:\Windows\system32 73230000 MSACM32.dll 6.1.7600.16385 C:\Windows\system32 73250000 wdmaud.drv 6.1.7601.17514 C:\Windows\system32 73ef0000 nvapi.dll 9.18.13.3489 C:\Windows\system32 74460000 msacm32.drv 6.1.7600.16385 C:\Windows\system32 74470000 AVRT.dll 6.1.7600.16385 C:\Windows\system32 74480000 MMDevApi.dll 6.1.7601.17514 C:\Windows\System32 74820000 propsys.dll 7.0.7601.17514 C:\Windows\system32 74970000 ksuser.dll 6.1.7600.16385 C:\Windows\system32 74fc0000 netprofm.dll 6.1.7600.16385 C:\Windows\System32 750d0000 npmproxy.dll 6.1.7600.16385 C:\Windows\System32 750e0000 nlaapi.dll 6.1.7601.17761 C:\Windows\System32 753b0000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 75440000 VERSION.dll 6.1.7600.16385 C:\Windows\system32 75510000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64 75520000 SspiCli.dll 6.1.7601.18270 C:\Windows\syswow64 75580000 KERNELBASE.dll 6.1.7601.18229 C:\Windows\syswow64 755d0000 RPCRT4.dll 6.1.7601.18205 C:\Windows\syswow64 756c0000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 756d0000 WS2_32.dll 6.1.7601.17514 C:\Windows\syswow64 75710000 urlmon.dll 10.0.9200.16736 C:\Windows\syswow64 75830000 OLEAUT32.dll 6.1.7601.17676 C:\Windows\syswow64 758c0000 kernel32.dll 6.1.7601.18409 C:\Windows\syswow64 759d0000 USP10.dll 1.626.7601.18009 C:\Windows\syswow64 75a70000 iertutil.dll 10.0.9200.16736 C:\Windows\syswow64 75cd0000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75ce0000 GDI32.dll 6.1.7601.18275 C:\Windows\syswow64 75d70000 msvcrt.dll 7.0.7601.17744 C:\Windows\syswow64 75e20000 wininet.dll 10.0.9200.16736 C:\Windows\syswow64 75fe0000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64 75ff0000 normaliz.DLL 6.1.7600.16385 C:\Windows\syswow64 76000000 MSASN1.dll 6.1.7601.17514 C:\Windows\syswow64 76010000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64 76030000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64 76040000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64 760d0000 SHLWAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76130000 CRYPT32.dll 6.1.7601.18277 C:\Windows\syswow64 76250000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76260000 WINTRUST.dll 6.1.7601.18205 C:\Windows\syswow64 76290000 SHELL32.dll 6.1.7601.18222 C:\Windows\syswow64 76ee0000 comdlg32.dll 6.1.7601.17514 C:\Windows\syswow64 76f60000 DEVOBJ.dll 6.1.7601.17621 C:\Windows\syswow64 76f80000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76f90000 ole32.dll 6.1.7601.17514 C:\Windows\syswow64 77180000 CFGMGR32.dll 6.1.7601.17621 C:\Windows\syswow64 771b0000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\syswow64 77350000 LPK.dll 6.1.7601.18177 C:\Windows\syswow64 77360000 WLDAP32.dll 6.1.7601.17514 C:\Windows\syswow64 773b0000 ADVAPI32.dll 6.1.7601.18247 C:\Windows\syswow64 77450000 IMM32.dll 6.1.7601.17514 C:\Windows\syswow64 774b0000 api-ms-win-downlevel-ole32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 774c0000 USER32.dll 6.1.7601.17514 C:\Windows\syswow64 775c0000 IMAGEHLP.dll 6.1.7601.18288 C:\Windows\syswow64 775f0000 MSCTF.dll 6.1.7600.16385 C:\Windows\syswow64 77a90000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 77ac0000 ntdll.dll 6.1.7601.18247 C:\Windows\SysWOW64 processes: 0000 Idle 0 0 0 0004 System 0 0 0 011c smss.exe 0 0 0 01b4 avgrsa.exe 0 0 0 01e8 avgcsrva.exe 0 0 0 02f4 csrss.exe 0 0 0 0334 wininit.exe 0 0 0 0348 csrss.exe 1 0 0 0374 services.exe 0 0 0 037c lsass.exe 0 0 0 0384 lsm.exe 0 0 0 03c8 winlogon.exe 1 0 0 0134 svchost.exe 0 0 0 0308 nvvsvc.exe 0 0 0 0344 nvSCPAPISvr.exe 0 0 0 03e8 svchost.exe 0 0 0 0448 svchost.exe 0 0 0 0488 svchost.exe 0 0 0 04a0 svchost.exe 0 0 0 04b8 svchost.exe 0 0 0 0514 audiodg.exe 0 0 0 05ac svchost.exe 0 0 0 062c nvxdsync.exe 1 0 0 0634 nvvsvc.exe 1 0 0 069c spoolsv.exe 0 0 0 06b8 svchost.exe 0 0 0 0780 armsvc.exe 0 0 0 040c avgidsagent.exe 0 0 0 057c avgwdsvc.exe 0 0 0 0654 svchost.exe 0 0 0 0844 sqlservr.exe 0 0 0 0888 NvNetworkService.exe 0 0 0 08a0 nvstreamsvc.exe 0 0 0 08cc dns-service.exe 0 0 0 0908 sqlbrowser.exe 0 0 0 0924 sqlwriter.exe 0 0 0 0944 ToolbarUpdater.exe 0 0 0 0994 WLIDSVC.EXE 0 0 0 09d0 WLIDSVCM.EXE 0 0 0 09f0 loggingserver.exe 0 0 0 09f8 conhost.exe 0 0 0 0b2c taskhost.exe 1 29 24 normal 0b8c dwm.exe 1 21 3 high 0bd0 explorer.exe 1 995 579 normal 0628 avgnsa.exe 0 0 0 0618 avgemca.exe 0 0 0 05f0 NvBackend.exe 1 9 5 normal C:\Program Files (x86)\NVIDIA Corporation\Update Core 0eec TiltWheelMouse.exe 1 18 23 normal C:\Windows\System32 0f48 RAVCpl64.exe 1 54 20 normal 0f5c dns-agent.exe 1 42 20 normal C:\Program Files (x86)\SafeDNS Agent 0fd4 avgui.exe 1 149 94 normal C:\Program Files (x86)\AVG\AVG2013 0664 vprot.exe 1 14 12 normal C:\Program Files (x86)\AVG Secure Search 089c nvtray.exe 1 81 4 normal 0f3c SearchIndexer.exe 0 0 0 105c WUDFHost.exe 0 0 0 1254 wmpnetwk.exe 0 0 0 07d8 Steam.exe 1 563 140 normal C:\Program Files (x86)\Steam 1100 SteamService.exe 0 0 0 1370 OSPPSVC.EXE 0 0 0 0814 GoogleCrashHandler.exe 0 0 0 0b64 GoogleCrashHandler64.exe 0 0 0 1288 iexplore.exe 1 0 0 0b1c iexplore.exe 1 0 0 1600 dllhost.exe 1 0 0 15d8 firefox.exe 1 45 52 normal C:\Program Files (x86)\Mozilla Firefox 16e0 Tunngle.exe 1 517 357 normal C:\Program Files (x86)\Tunngle 1a1c TnglCtrl.exe 0 0 0 05fc Armada2.exe 1 9 1 normal C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data 18e0 Armada2.exe 1 76 51 normal C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\data hardware: + Computer - ACPI x64-based PC + Disk drives - MIMOBOT USB Device - WDC WD50 00AAKX-753CA SCSI Disk Device + Display adapters - NVIDIA GeForce GT 640 (driver 9.18.13.3489) + DVD/CD-ROM drives - DTSOFT Virtual CdRom Device - HL-DT-ST DVDRAM GH24NS90 SCSI CdRom Device + Human Interface Devices - HID-compliant consumer control device - HID-compliant consumer control device - HID-compliant consumer control device - HID-compliant device - HID-compliant device - HID-compliant device - USB Input Device - USB Input Device - USB Input Device - USB Input Device - USB Input Device + Keyboards - HID Keyboard Device - HID Keyboard Device + Mice and other pointing devices - HID-compliant mouse + Monitors - Generic Non-PnP Monitor - Generic PnP Monitor + Network adapters - NVIDIA nForce 10/100/1000 Mbps Ethernet (driver 73.3.5.0) - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - E:\ + Ports (COM & LPT) - Communications Port (COM1) - Printer Port (LPT1) + Processors - AMD FX(tm)-4100 Quad-Core Processor - AMD FX(tm)-4100 Quad-Core Processor - AMD FX(tm)-4100 Quad-Core Processor - AMD FX(tm)-4100 Quad-Core Processor + Sound, video and game controllers - Logitech G430 Gaming Headset - NVIDIA High Definition Audio (driver 1.3.30.1) - NVIDIA Virtual Audio Device (Wave Extensible) (WDM) (driver 1.2.20.0) - Realtek High Definition Audio (driver 6.0.1.7083) + Storage controllers - NVIDIA nForce Serial ATA Controller (driver 10.6.0.319) - NVIDIA nForce Serial ATA Controller (driver 10.6.0.319) + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Power Button - Composite Bus Enumerator - DAEMON Tools Virtual Bus (driver 4.49.1.352) - Direct memory access controller - File as Volume Driver - High Definition Audio Controller - High Definition Audio Controller - High precision event timer - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - NVIDIA nForce PCI System Management - PCI bus - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard RAM Controller - PCI standard RAM Controller - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard OpenHCD USB Host Controller - USB Composite Device - USB Composite Device - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 00000000 ecx = 0018fb04 edx = 0aa164ce esi = 0d036990 edi = 0d03699c eip = 00551837 esp = 0018faa4 ebp = 0018fac4 stack dump: 0018faa4 0a 00 00 00 90 69 03 0d - 01 00 00 00 72 23 00 00 .....i......r#.. 0018fab4 00 00 00 00 00 00 00 00 - 01 00 00 00 00 00 00 00 ................ 0018fac4 10 fb 18 00 8c 64 55 00 - e0 bb 52 05 01 00 00 00 .....dU...R..... 0018fad4 01 00 00 00 80 35 df 12 - 23 00 00 00 30 a1 a4 31 .....5..#...0..1 0018fae4 68 6f 85 05 c5 e7 58 00 - e0 bb 52 05 23 00 00 00 ho....X...R.#... 0018faf4 7d 5c df 12 6a 5c df 12 - 90 69 03 0d 60 5c df 12 }\..j\...i..`\.. 0018fb04 9c fd 18 00 6b 28 6a 00 - ff ff ff ff 40 fb 18 00 ....k(j.....@... 0018fb14 5b 4c 55 00 e0 bb 52 05 - 00 00 00 00 23 00 00 00 [LU...R.....#... 0018fb24 e0 bb 52 05 27 00 00 00 - 6c fd 18 00 0c 27 7c 72 ..R.'...l....'|r 0018fb34 50 5c df 12 78 ce a2 05 - 01 00 00 00 a8 fd 18 00 P\..x........... 0018fb44 a3 07 56 00 e0 bb 52 05 - 23 00 00 00 06 00 00 00 ..V...R.#....... 0018fb54 30 7b 73 00 00 00 00 00 - 00 3a 01 00 ac 00 c4 00 0{s......:...... 0018fb64 e8 f1 17 54 41 50 53 01 - 00 00 00 0a 00 83 80 5e ...TAPS........^ 0018fb74 00 00 00 01 00 b0 62 61 - dc 03 00 00 80 d2 fa 06 ......ba........ 0018fb84 98 fb 18 00 0e ad 62 61 - 30 f8 f6 06 e3 8c 62 61 ......ba0.....ba 0018fb94 80 d2 fa 06 b4 fb 18 00 - a6 4a 62 61 80 c1 fb 06 .........Jba.... 0018fba4 ff ff ff ff d9 f9 ad 77 - 11 8f af 77 74 06 00 00 .......w...wt... 0018fbb4 00 00 00 00 04 f6 01 07 - d4 fb 18 00 e2 8e af 77 ...............w 0018fbc4 04 f6 01 07 80 22 ae 77 - a8 2f fc 06 98 f5 01 07 .....".w./...... 0018fbd4 00 fc 18 00 21 4f 62 61 - 04 f6 01 07 00 f5 01 07 ....!Oba........ disassembling: 5a9ada8c public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9ada8c 4974 push ebp 5a9ada8d mov ebp, esp 5a9ada8f push 0 5a9ada91 push 0 5a9ada93 push ebx 5a9ada94 push esi 5a9ada95 push edi 5a9ada96 xor eax, eax 5a9ada98 push ebp 5a9ada99 push $5a9adb37 ; System.@HandleFinally 5a9ada9e push dword ptr fs:[eax] 5a9adaa1 mov fs:[eax], esp 5a9adaa4 4975 mov eax, [ebp+8] 5a9adaa7 4976 xor edx, edx 5a9adaa9 push ebp 5a9adaaa push $5a9adac1 ; System.@HandleAnyException 5a9adaaf push dword ptr fs:[edx] 5a9adab2 mov fs:[edx], esp 5a9adab5 4977 > call eax 5a9adab5 5a9adab7 xor eax, eax 5a9adab9 pop edx 5a9adaba pop ecx 5a9adabb pop ecx 5a9adabc mov fs:[eax], edx 5a9adabf jmp loc_5a9adb19 5a9adabf 5a9adabf ; --------------------------------------------------------- 5a9adabf 5a9adac1 jmp -$1a8fa2 ($5a804b24) ; System.@HandleAnyException 5a9adac1 5a9adac6 4979 push 1 5a9adac8 push 0 5a9adaca push 0 5a9adacc push 0 5a9adace push 0 5a9adad0 push 0 5a9adad2 push 0 5a9adad4 push 0 [...]