date/time : 2015-05-10, 21:58:09, 625ms computer name : BEN-HP user name : Ben registered owner : Ben / Hewlett-Packard operating system : Windows 7 x64 Service Pack 1 build 7601 system language : English system up time : 24 days 18 hours program up time : 23 minutes 5 seconds processors : 8x Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz physical memory : 5320/8140 MB (free/total) free disk space : (C:) 519.37 GB display mode : 1366x768, 32 bit process id : $332c allocated memory : 238.75 MB command line : "C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data\Armada2.exe" /mod "STA2 Upgrade Project 2014" executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2012-10-20 13:40 version : 3.2.7 mod : Star Trek Armada II: Upgrade Project 2014 contact name : Benjamin contact email : spartan078ben@gmail.com callstack crc : $de1fa33e, $ccd157f6, $ccd157f6 exception number : 1 exception class : EDivByZero exception message : Division by zero. main thread ($44b4): 0065e307 +027 Armada2.exe RandomSequence.GetUnsigned 004abca5 +035 Armada2.exe TradingStationClass.GetRandomCargoDesc 004aeb6a +07a Armada2.exe CargoShip.cGoods.cGoods 004ae257 +097 Armada2.exe CargoShip.LoadCargo 004be01c +0cc Armada2.exe TradingStation.SimDock 004d6e7c +01c Armada2.exe ResourceTransferInterface.SimDock 0053a910 +020 Armada2.exe MiningQueueManager.Activate 0053b867 +6e7 Armada2.exe OrientedQueueManager.Simulate 004d7000 +010 Armada2.exe ResourceTransferInterface.Simulate 004b4635 +055 Armada2.exe MiningStation.Simulate 004beb18 +228 Armada2.exe TradingStation.Simulate 004d4950 +060 Armada2.exe GameObject.SimulateAll 0048333b +0ab Armada2.exe Simulate 00483581 +131 Armada2.exe Program.GameProcess 00559b7a +0fa Armada2.exe TransportLocal.GameExecute 02aa856f +019 fmodex.dll ?setPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9adab5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4977 +3 DebugException_Execute_New 5a9adf13 +26b FleetOpsHook.dll FleetOpsFunctionsHook 5097 +75 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 75653368 +010 kernel32.dll BaseThreadInitThunk thread $2424: 77461f3b +0b ntdll.dll NtWaitForWorkViaWorkerFactory 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1eb0: 77461f3b +0b ntdll.dll NtWaitForWorkViaWorkerFactory 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1194: 77460152 +0e ntdll.dll NtWaitForMultipleObjects 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1134: 7745f8c6 +0e ntdll.dll NtWaitForSingleObject 76ba14a5 +92 KERNELBASE.dll WaitForSingleObjectEx 7565118f +3e kernel32.dll WaitForSingleObjectEx 75651143 +0d kernel32.dll WaitForSingleObject 76781323 +67 msvcrt.dll _endthreadex 75653368 +10 kernel32.dll BaseThreadInitThunk thread $3dec: 7745f8c6 +0e ntdll.dll NtWaitForSingleObject 76ba14a5 +92 KERNELBASE.dll WaitForSingleObjectEx 7565118f +3e kernel32.dll WaitForSingleObjectEx 75651143 +0d kernel32.dll WaitForSingleObject 76781323 +67 msvcrt.dll _endthreadex 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1590: 7745fd86 +0e ntdll.dll NtDelayExecution 76ba3bcf +5f KERNELBASE.dll SleepEx 76ba44a0 +0a KERNELBASE.dll Sleep 76781323 +67 msvcrt.dll _endthreadex 75653368 +10 kernel32.dll BaseThreadInitThunk thread $2af8: 77461f3b +0b ntdll.dll NtWaitForWorkViaWorkerFactory 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1680: 7745fd86 +0e ntdll.dll NtDelayExecution 76ba3bcf +5f KERNELBASE.dll SleepEx 76ba44a0 +0a KERNELBASE.dll Sleep 76781323 +67 msvcrt.dll _endthreadex 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1c34: 77460152 +0e ntdll.dll NtWaitForMultipleObjects 76ba15f1 +fa KERNELBASE.dll WaitForMultipleObjectsEx 756519f7 +89 kernel32.dll WaitForMultipleObjectsEx 756541d3 +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 75653368 +10 kernel32.dll BaseThreadInitThunk thread $453c: 7745f8c6 +0e ntdll.dll NtWaitForSingleObject 76ba14a5 +92 KERNELBASE.dll WaitForSingleObjectEx 7565118f +3e kernel32.dll WaitForSingleObjectEx 75651143 +0d kernel32.dll WaitForSingleObject 75653368 +10 kernel32.dll BaseThreadInitThunk thread $3768: 77460152 +0e ntdll.dll NtWaitForMultipleObjects 76ba15f1 +fa KERNELBASE.dll WaitForMultipleObjectsEx 756519f7 +89 kernel32.dll WaitForMultipleObjectsEx 756541d3 +13 kernel32.dll WaitForMultipleObjects 75653368 +10 kernel32.dll BaseThreadInitThunk thread $1c54: 77460152 +0e ntdll.dll NtWaitForMultipleObjects 76ba15f1 +fa KERNELBASE.dll WaitForMultipleObjectsEx 756519f7 +89 kernel32.dll WaitForMultipleObjectsEx 756541d3 +13 kernel32.dll WaitForMultipleObjects 75653368 +10 kernel32.dll BaseThreadInitThunk thread $4678: 7745fd86 +00e ntdll.dll NtDelayExecution 76ba3bcf +05f KERNELBASE.dll SleepEx 76ba44a0 +00a KERNELBASE.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction 75653368 +010 kernel32.dll BaseThreadInitThunk thread $3bf8: 77461f3b +0b ntdll.dll NtWaitForWorkViaWorkerFactory 75653368 +10 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 00800000 D3DX81ab.dll 8.1.0.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 009c0000 visicom_antiphishing.dll 1.0.1.15 C:\ProgramData\Anti-phishing Domain Advisor 02a90000 fmodex.dll 0.4.34.2 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 04ca0000 Tunngle.dll 1.0.6.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 05260000 BtMmHook.dll 6.3.0.6300 C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64 05410000 a2_fed02r.drl C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data\mods\STA2 Upgrade Project 2014\missions 05900000 a2_fed02s.dsl C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data\mods\STA2 Upgrade Project 2014\missions 10000000 NetworkManager.dll C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 18000000 binkw32.dll 1.9.16.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 4a800000 Win2kDisableTaskSwitch.dll 3.2.7.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 5a800000 FleetOpsHook.dll 3.2.7.0 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations 60090000 MSVFW32.dll 6.1.7601.17514 C:\Windows\system32 60ba0000 AVIFIL32.dll 6.1.7601.17514 C:\Windows\system32 610c0000 atiumdag.dll 7.14.10.855 C:\Windows\system32 635a0000 ltc_game32-94307.dll 1.0.0.1 C:\PROGRA~2\Raptr 63760000 d3dx9_43.dll 9.29.952.3111 C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 63960000 d3d8.dll 6.1.7600.16385 C:\Windows\system32 65f50000 atiumdva.dll 8.14.10.321 C:\Windows\system32 67a90000 MMDevApi.dll 6.1.7601.17514 C:\Windows\System32 6acc0000 ltc_help32-94307.dll 1.0.0.1 C:\PROGRA~2\Raptr 6af50000 DSOUND.dll 6.1.7600.16385 C:\Windows\system32 6b240000 aticfx32.dll 8.17.10.1091 C:\Windows\system32 6b620000 atiu9pag.dll 8.14.1.6226 C:\Windows\system32 6b630000 cryptnet.dll 6.1.7601.18741 C:\Windows\system32 6b650000 GPAPI.dll 6.1.7600.16385 C:\Windows\system32 6ba90000 d3d8thk.dll 6.1.7600.16385 C:\Windows\system32 6baa0000 d3d9.dll 6.1.7601.17514 C:\Windows\system32 6c250000 MSVCP60.dll 7.0.7600.16385 C:\Windows\system32 6c6a0000 midimap.dll 6.1.7600.16385 C:\Windows\system32 6c6b0000 msacm32.drv 6.1.7600.16385 C:\Windows\system32 6c8f0000 AVRT.dll 6.1.7600.16385 C:\Windows\system32 6c900000 ksuser.dll 6.1.7600.16385 C:\Windows\system32 6c910000 wdmaud.drv 6.1.7601.17514 C:\Windows\system32 6cc10000 SensApi.dll 6.1.7600.16385 C:\Windows\system32 6df50000 AUDIOSES.DLL 6.1.7601.18741 C:\Windows\system32 6dfa0000 propsys.dll 7.0.7601.17514 C:\Windows\system32 6e800000 POWRPROF.dll 6.1.7600.16385 C:\Windows\system32 6eac0000 MSACM32.dll 6.1.7600.16385 C:\Windows\system32 6edd0000 dbghelp.dll 6.1.7601.17514 C:\Windows\system32 6f980000 WINMM.dll 6.1.7601.17514 C:\Windows\system32 6fab0000 ncrypt.dll 6.1.7601.18798 C:\Windows\system32 6fe50000 bcryptprimitives.dll 6.1.7600.16385 C:\Windows\SysWOW64 70010000 COMCTL32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 701b0000 bcrypt.dll 6.1.7600.16385 C:\Windows\system32 70d20000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 70d60000 CRYPTSP.dll 6.1.7601.18741 C:\Windows\system32 74350000 VERSION.dll 6.1.7600.16385 C:\Windows\system32 74370000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 74420000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 74530000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 74bf0000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 74dc0000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\syswow64 74dd0000 SspiCli.dll 6.1.7601.18798 C:\Windows\syswow64 74e30000 IMM32.dll 6.1.7601.17514 C:\Windows\syswow64 74e90000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\syswow64 74f20000 OLEAUT32.dll 6.1.7601.18679 C:\Windows\syswow64 74fb0000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\syswow64 751e0000 PSAPI.DLL 6.1.7600.16385 C:\Windows\syswow64 751f0000 WINTRUST.dll 6.1.7601.18741 C:\Windows\syswow64 75220000 ole32.dll 6.1.7601.17514 C:\Windows\syswow64 75380000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75390000 WS2_32.dll 6.1.7601.17514 C:\Windows\syswow64 753d0000 CFGMGR32.dll 6.1.7601.17621 C:\Windows\syswow64 75400000 iertutil.dll 11.0.9600.17728 C:\Windows\syswow64 75640000 kernel32.dll 6.1.7601.18798 C:\Windows\syswow64 75750000 USER32.dll 6.1.7601.17514 C:\Windows\syswow64 75850000 wininet.dll 11.0.9600.17728 C:\Windows\syswow64 75a90000 USERENV.dll 6.1.7601.17514 C:\Windows\syswow64 75ab0000 DEVOBJ.dll 6.1.7601.17621 C:\Windows\syswow64 75ad0000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 75ae0000 MSASN1.dll 6.1.7601.17514 C:\Windows\syswow64 75af0000 sechost.dll 6.1.7600.16385 C:\Windows\SysWOW64 75b10000 SHELL32.dll 6.1.7601.18762 C:\Windows\syswow64 76760000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76770000 msvcrt.dll 7.0.7601.17744 C:\Windows\syswow64 76820000 IMAGEHLP.dll 6.1.7601.18288 C:\Windows\syswow64 76850000 CRYPT32.dll 6.1.7601.18741 C:\Windows\syswow64 76980000 normaliz.DLL 6.1.7600.16385 C:\Windows\syswow64 76990000 LPK.dll 6.1.7601.18768 C:\Windows\syswow64 76af0000 SHLWAPI.dll 6.1.7601.17514 C:\Windows\syswow64 76b50000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76b60000 NSI.dll 6.1.7600.16385 C:\Windows\syswow64 76b70000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492 C:\Windows\syswow64 76b90000 KERNELBASE.dll 6.1.7601.18798 C:\Windows\syswow64 76be0000 comdlg32.dll 6.1.7601.17514 C:\Windows\syswow64 76c60000 RPCRT4.dll 6.1.7601.18532 C:\Windows\syswow64 76d50000 WLDAP32.dll 6.1.7601.17514 C:\Windows\syswow64 76da0000 ADVAPI32.dll 6.1.7601.18247 C:\Windows\syswow64 76e40000 MSCTF.dll 6.1.7601.18731 C:\Windows\syswow64 76f10000 USP10.dll 1.626.7601.18454 C:\Windows\syswow64 76fb0000 GDI32.dll 6.1.7601.18778 C:\Windows\syswow64 77410000 profapi.dll 6.1.7600.16385 C:\Windows\syswow64 77440000 ntdll.dll 6.1.7601.18798 C:\Windows\SysWOW64 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0184 smss.exe 0 0 0 01fc csrss.exe 0 0 0 0270 wininit.exe 0 0 0 0284 csrss.exe 1 0 0 02b8 services.exe 0 0 0 02cc lsass.exe 0 0 0 02d4 lsm.exe 0 0 0 02f4 winlogon.exe 1 0 0 0364 svchost.exe 0 0 0 03e4 TrueSuiteService.exe 0 0 0 0150 svchost.exe 0 0 0 0208 atiesrxx.exe 0 0 0 0278 svchost.exe 0 0 0 02d0 svchost.exe 0 0 0 0428 svchost.exe 0 0 0 0458 svchost.exe 0 0 0 0480 stacsv64.exe 0 0 0 0520 svchost.exe 0 0 0 0578 hpservice.exe 0 0 0 05ac WUDFHost.exe 0 0 0 05fc svchost.exe 0 0 0 0654 wlanext.exe 0 0 0 0660 conhost.exe 0 0 0 06c4 spoolsv.exe 0 0 0 06e8 svchost.exe 0 0 0 07c4 armsvc.exe 0 0 0 07dc AESTSr64.exe 0 0 0 07f8 BtwRSupportService.exe 0 0 0 04b8 btwdins.exe 0 0 0 0424 svchost.exe 0 0 0 0808 lnssatt.exe 0 0 0 0888 HPClientServices.exe 0 0 0 089c HPDrvMntSvc.exe 0 0 0 08b4 HPSupportSolutionsFrameworkService.exe 0 0 0 0920 HPWMISVC.exe 0 0 0 0940 LSSrvc.exe 0 0 0 0958 McciCMService.exe 0 0 0 097c McciCMService.exe 0 0 0 09b0 PnkBstrA.exe 0 0 0 09d0 PnkBstrB.exe 0 0 0 0a00 rndlresolversvc.exe 0 0 0 0a20 rpdsvc.exe 0 0 0 0a38 RealPlayerUpdateSvc.exe 0 0 0 0a54 RNowSvc.exe 0 0 0 0a74 SBPIMSvc.exe 0 0 0 0abc ss_conn_service.exe 0 0 0 0ae4 svchost.exe 0 0 0 0afc svchost.exe 0 0 0 0b2c WLIDSVC.EXE 0 0 0 0bac WLIDSVCM.EXE 0 0 0 0dc4 svchost.exe 0 0 0 0ec0 SearchIndexer.exe 0 0 0 0ddc atieclxx.exe 1 0 0 084c taskhost.exe 1 31 22 normal 0c40 dwm.exe 1 32 7 high 0c5c explorer.exe 1 1776 1033 normal 0e68 TouchControl.exe 1 20 17 normal C:\Program Files (x86)\HP SimplePass 2011 0b6c BioMonitor.exe 1 9 5 normal C:\Program Files (x86)\HP SimplePass 2011 0be0 WmiPrvSE.exe 0 0 0 0b7c sttray64.exe 1 18 17 normal 0cc8 SynTPEnh.exe 1 96 50 above normal 0e6c hkcmd.exe 1 17 17 normal 0ea4 igfxpers.exe 1 12 5 normal 0f74 LightScribeControlPanel.exe 1 60 22 normal C:\Program Files (x86)\Common Files\LightScribe 1028 unsecapp.exe 1 9 3 normal 1030 AVG-Secure-Search-Update_0215tb.exe 1 35 36 normal C:\Program Files (x86)\AVG SafeGuard toolbar 103c CCleaner64.exe 1 56 38 normal 10c4 BTTray.exe 1 20 24 normal 10dc SynTPHelper.exe 1 9 3 above normal 11d0 rpsystray.exe 1 31 10 normal 11f8 IAStorIcon.exe 1 35 16 normal C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology 1208 nusb3mon.exe 1 21 9 normal C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application 1220 PDVD10Serv.exe 1 9 8 normal C:\Program Files (x86)\CyberLink\PowerDVD10 1230 brs.exe 1 9 5 normal C:\Program Files (x86)\CyberLink\Shared files 1238 HPMSGSVC.exe 1 12 8 normal C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch 1258 HPOSD.exe 1 29 15 normal C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display 1280 visicom_antiphishing.exe 1 9 2 normal C:\ProgramData\Anti-phishing Domain Advisor 12dc CNMNSST.exe 1 34 13 normal C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX 1304 SBAMTray.exe 1 117 47 normal C:\Program Files (x86)\VIPRE 13bc hpqWmiEx.exe 0 0 0 1174 SBAMSvc.exe 0 0 0 128c BTStackServer.exe 1 14 8 normal 1348 RunDll32.exe 1 19 6 normal C:\Windows\SysWOW64 12d8 BluetoothHeadsetProxy.exe 1 12 3 normal C:\Program Files\WIDCOMM\Bluetooth Software 14d0 svchost.exe 0 0 0 15c8 svchost.exe 0 0 0 0ea8 Steam.exe 1 440 89 normal C:\Program Files (x86)\Steam 1928 steamwebhelper.exe 1 12 13 normal C:\Program Files (x86)\Steam\bin 1b1c HPHC_Service.exe 0 0 0 1b64 HPWA_Main.exe 1 26 19 normal 1bac HPWA_Service.exe 0 0 0 1bdc IAStorDataMgrSvc.exe 0 0 0 175c LMS.exe 0 0 0 18e0 raptr.exe 1 278 142 normal C:\PROGRA~2\Raptr 1a44 raptr_im.exe 1 17 12 normal C:\PROGRA~2\Raptr 1b14 raptr_ep64.exe 1 9 3 normal 1780 hpCaslNotification.exe 1 35 19 normal 166c UNS.exe 0 0 0 054c mantle.exe 0 0 0 163c PresentationFontCache.exe 0 0 0 11c8 AcroRd32.exe 1 9 4 normal C:\Program Files (x86)\Adobe\Reader 10.0\Reader 2628 AcroRd32.exe 1 9 4 normal C:\Program Files (x86)\Adobe\Reader 10.0\Reader 1718 AcroRd32.exe 1 9 4 normal C:\Program Files (x86)\Adobe\Reader 10.0\Reader 1e40 AcroRd32.exe 1 9 4 normal C:\Program Files (x86)\Adobe\Reader 10.0\Reader 2d18 ArcOSOverlay.exe 1 0 0 normal 2f74 ArcOSOverlay.exe 1 0 0 normal 18bc Arc.exe 1 614 67 normal C:\Program Files (x86)\Arc 3df8 ArcOSBrowser.exe 1 23 26 normal C:\Program Files (x86)\Arc 2698 ArcOSBrowser.exe 1 15 3 normal C:\Program Files (x86)\Arc 1654 ArcOSBrowser.exe 1 78 1 normal C:\Program Files (x86)\Arc 25a4 ArcOSOverlay.exe 1 0 0 normal 23f0 WmiPrvSE.exe 0 0 0 4738 audiodg.exe 0 0 0 241c Armada2.exe 1 9 1 normal C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 332c Armada2.exe 1 79 57 normal C:\Program Files (x86)\Activision\Star Trek Armada II Fleet Operations\Data 1cdc taskeng.exe 0 0 0 4200 igfxsrvc.exe 1 9 3 normal hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Biometric Devices - Validity Sensors (WBF) (PID=0018) (driver 4.3.110.0) + Bluetooth Radios - Broadcom 2070 Bluetooth (driver 12.0.0.8041) - Microsoft Bluetooth Enumerator + Bluetooth Virtual Devices - Bluetooth L2CAP Interface (driver 6.3.0.3850) + Computer - ACPI x64-based PC + Disk drives - TOSHIBA MK1059GSM + Display adapters - Intel(R) HD Graphics Family (driver 8.882.2.3000) - Radeon (TM) HD 6770M (driver 8.882.2.3000) + DVD/CD-ROM drives - DTSOFT Virtual CdRom Device - hp DVDWBD TS-LB23L + Human Interface Devices - Bluetooth Remote Control (driver 6.3.0.6150) - HID-compliant consumer control device - HID-compliant device - HID-compliant device - USB Input Device - USB Input Device + IDE ATA/ATAPI controllers - Intel(R) Mobile Express Chipset SATA AHCI Controller (driver 10.0.0.1046) + Imaging devices - HP TrueVision HD + Keyboards - Standard PS/2 Keyboard + Memory technology driver - Realtek PCIE CardReader (driver 6.1.7600.74) + Mice and other pointing devices - HID-compliant mouse - Synaptics PS/2 Port TouchPad (driver 15.3.29.0) + Monitors - Generic PnP Monitor + Network adapters - Bluetooth Device (Personal Area Network) - Broadcom 4313 802.11b/g/n (driver 5.60.350.23) - Realtek PCIe GBE Family Controller (driver 7.30.1019.2010) + Processors - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz - Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz + Sound, video and game controllers - Bluetooth Hands-free Audio (driver 6.3.0.6150) - CyberLink WebCam Virtual Driver (driver 6.0.5600.0) - IDT High Definition Audio CODEC (driver 6.10.6315.0) - Intel(R) Display Audio (driver 6.14.0.3074) + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy + System devices - 2nd generation Intel® Core™ processor family DRAM Controller - 0104 (driver 9.2.0.1011) - 2nd generation Intel® Core™ processor family PCI Express Controller - 0101 (driver 9.2.0.1011) - ACPI Fixed Feature Button - ACPI Lid - ACPI Power Button - ACPI Thermal Zone - Composite Bus Enumerator - DAEMON Tools Virtual Bus (driver 4.47.1.282) - Direct memory access controller - File as Volume Driver - High Definition Audio Controller - High precision event timer - HP Mobile Data Protection Sensor (driver 4.2.2.1) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 1 - 1C10 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 2 - 1C12 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 3 - 1C14 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family PCI Express Root Port 4 - 1C16 (driver 9.2.0.1015) - Intel(R) 6 Series/C200 Series Chipset Family SMBus Controller - 1C22 (driver 9.2.0.1011) - Intel(R) 82802 Firmware Hub Device - Intel(R) HM65 Express Chipset Family LPC Interface Controller - 1C49 (driver 9.2.0.1015) - Intel(R) Management Engine Interface (driver 7.0.0.1144) - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Microsoft Windows Management Interface for ACPI - Motherboard resources - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - Pci Bus (driver 14.50.0.0) - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Generic USB Hub - Generic USB Hub - Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller - 1C26 (driver 9.2.0.1013) - Intel(R) 6 Series/C200 Series Chipset Family USB Enhanced Host Controller - 1C2D (driver 9.2.0.1013) - Renesas Electronics USB 3.0 Host Controller (driver 2.0.30.0) - USB Composite Device - USB Composite Device - USB Root Hub - USB Root Hub cpu registers: eax = 15f52b7b ebx = 1399cf38 ecx = 08a27058 edx = 00000000 esi = 0c2fa398 edi = 00000006 eip = 0065e307 esp = 0018f8a0 ebp = 0018f8a0 stack dump: 0018f8a0 b4 f8 18 00 aa bc 4a 00 - 00 00 00 00 06 00 00 00 ......J......... 0018f8b0 98 a3 2f 0c 10 f9 18 00 - 6f eb 4a 00 cc f8 18 00 ../.....o.J..... 0018f8c0 ae 88 87 0b 50 69 87 0b - f0 3e 38 0c 00 00 00 00 ....Pi...>8..... 0018f8d0 28 00 00 00 85 70 32 41 - f8 f8 18 00 45 9d 77 76 (....p2A....E.wv 0018f8e0 00 00 b0 00 00 00 00 00 - 20 00 00 00 ae 88 87 0b ................ 0018f8f0 f0 3e 38 0c 20 00 00 00 - 14 f9 18 00 a9 af 8e 5a .>8............Z 0018f900 20 00 00 00 50 69 87 0b - f0 3e 38 0c 58 f9 18 00 ....Pi...>8.X... 0018f910 38 f9 18 00 5c e2 4a 00 - 06 00 00 00 01 00 01 80 8...\.J......... 0018f920 50 69 87 0b ae 88 87 0b - 50 69 87 0b 6c fb 18 00 Pi......Pi..l... 0018f930 8b d9 69 00 ff ff ff ff - 50 f9 18 00 22 e0 4b 00 ..i.....P...".K. 0018f940 38 cf 99 13 01 00 c0 3f - 50 69 87 0b f0 3e 38 0c 8......?Pi...>8. 0018f950 6c f9 18 00 81 6e 4d 00 - 01 00 c0 3f 00 00 fa 43 l....nM....?...C 0018f960 50 69 87 0b 20 c1 64 0c - f0 3e 38 0c 84 f9 18 00 Pi....d..>8..... 0018f970 12 a9 53 00 50 69 87 0b - 91 c2 f5 3c 20 c1 64 0c ..S.Pi.....<..d. 0018f980 98 80 50 13 c4 fa 18 00 - 6a b8 53 00 50 69 87 0b ..P.....j.S.Pi.. 0018f990 91 c2 f5 3c 91 c2 f5 3c - f0 3e 38 0c 58 59 70 0c ...<...<.>8.XYp. 0018f9a0 dc fa 18 00 10 b2 53 00 - 00 00 00 00 91 c2 f5 3c ......S........< 0018f9b0 90 3f 38 0c 91 c2 f5 3c - 00 00 00 31 00 00 00 00 .?8....<...1.... 0018f9c0 00 00 00 80 00 00 00 00 - 62 70 9b 5a 91 c2 f5 3c ........bp.Z...< 0018f9d0 d4 85 87 0b d4 85 87 0b - 00 00 00 80 00 00 00 00 ................ disassembling: 5a9ada8c public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9ada8c 4974 push ebp 5a9ada8d mov ebp, esp 5a9ada8f push 0 5a9ada91 push 0 5a9ada93 push ebx 5a9ada94 push esi 5a9ada95 push edi 5a9ada96 xor eax, eax 5a9ada98 push ebp 5a9ada99 push $5a9adb37 ; System.@HandleFinally 5a9ada9e push dword ptr fs:[eax] 5a9adaa1 mov fs:[eax], esp 5a9adaa4 4975 mov eax, [ebp+8] 5a9adaa7 4976 xor edx, edx 5a9adaa9 push ebp 5a9adaaa push $5a9adac1 ; System.@HandleAnyException 5a9adaaf push dword ptr fs:[edx] 5a9adab2 mov fs:[edx], esp 5a9adab5 4977 > call eax 5a9adab5 5a9adab7 xor eax, eax 5a9adab9 pop edx 5a9adaba pop ecx 5a9adabb pop ecx 5a9adabc mov fs:[eax], edx 5a9adabf jmp loc_5a9adb19 5a9adabf 5a9adabf ; --------------------------------------------------------- 5a9adabf 5a9adac1 jmp -$1a8fa2 ($5a804b24) ; System.@HandleAnyException 5a9adac1 5a9adac6 4979 push 1 5a9adac8 push 0 5a9adaca push 0 5a9adacc push 0 5a9adace push 0 5a9adad0 push 0 5a9adad2 push 0 5a9adad4 push 0 [...]