date/time : 2010-09-15, 15:47:17, 201ms computer name : HOME user name : me registered owner : me operating system : Windows Vista Service Pack 2 build 6002 system language : English system up time : 5 hours 36 minutes program up time : 17 seconds processors : 2x Intel(R) Pentium(R) 4 CPU 3.00GHz physical memory : 959/2045 MB (free/total) free disk space : (C:) 50.53 GB display mode : 1440x900, 32 bit process id : $1250 allocated memory : 115.09 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2010-07-12 04:50 compiled with : Delphi 2006/07 madExcept version : 3.0l contact name : tim contact email : lmm086gf@yahoo.com callstack crc : $3e0839f5, $d96eb256, $d96eb256 count : 5 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 0053C334 in module 'Armada2.exe'. Read of address 00000008. Main ($14ec): 0053c334 +084 Armada2.exe RtimeClass.Load 00401421 +021 Armada2.exe AiMission.LoadMission 00602608 +378 Armada2.exe LoadGame_MainLoad 00602fb4 +2a4 Armada2.exe LoadGame 00484d70 +030 Armada2.exe Program.GameOpenLoad 00485897 +117 Armada2.exe Program.GameOpen 00487246 +166 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 00476092 +122 Armada2.exe _WinMain@16 5a9f4dd5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 5048 +3 DebugException_Execute_New 5a9f4eba +052 FleetOpsHook.dll FleetOpsFunctionsHook 5084 +19 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 777ad0e7 +010 kernel32.dll BaseThreadInitThunk thread $145c: 77ca57ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $f1c: 77ca57ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $f34: 77ca560e +0a ntdll.dll NtWaitForMultipleObjects 777aa5d1 +ef kernel32.dll WaitForMultipleObjectsEx 777aa6eb +13 kernel32.dll WaitForMultipleObjects 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $156c: 77ca560e +0a ntdll.dll NtWaitForMultipleObjects 777aa5d1 +ef kernel32.dll WaitForMultipleObjectsEx 777aa6eb +13 kernel32.dll WaitForMultipleObjects 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $10bc: 77ca555e +0a ntdll.dll NtTraceControl 77c4f6bb +40 ntdll.dll EtwpNotificationThread 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $1460: 77ca560e +0a ntdll.dll NtWaitForMultipleObjects 777aa5d1 +ef kernel32.dll WaitForMultipleObjectsEx 777aa6eb +13 kernel32.dll WaitForMultipleObjects 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $9c8: 77ca560e +0a ntdll.dll NtWaitForMultipleObjects 777ad0e7 +10 kernel32.dll BaseThreadInitThunk thread $105c: 77ca560e +0a ntdll.dll NtWaitForMultipleObjects 777aa5d1 +ef kernel32.dll WaitForMultipleObjectsEx 777aa6eb +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 777ad0e7 +10 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 04070000 Tunngle.dll 1.0.3.1 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10100000 lgscroll.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 10d00000 GameHook.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 30000000 binkw32.dll 1.5.21.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 5a800000 FleetOpsHook.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations 64d20000 atiumdva.dll 7.14.10.218 C:\Windows\system32 651f0000 d3dx9_33.dll 9.18.904.15 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 65830000 AcGenral.DLL 6.0.6002.18244 C:\Windows\AppPatch 65d80000 d3d8.dll 6.0.6001.18000 C:\Windows\system32 66f20000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 672c0000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 67320000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 68920000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 69830000 ShimEng.dll 6.0.6000.16386 C:\Windows\system32 712d0000 MSVCR80.dll 8.0.50727.4053 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d 72700000 atiumdag.dll 8.14.10.647 C:\Windows\system32 731f0000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 73850000 Fwpuclnt.dll 6.0.6002.18005 C:\Windows\system32 73950000 sfc.dll 6.0.6000.16386 C:\Windows\system32 73980000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 739b0000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 73ce0000 pnrpnsp.dll 6.0.6001.18000 C:\Windows\system32 73ef0000 rasadhlp.dll 6.0.6000.16386 C:\Windows\system32 73f70000 winrnr.dll 6.0.6002.18005 C:\Windows\System32 73f80000 napinsp.dll 6.0.6001.18000 C:\Windows\system32 74120000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 74150000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 741c0000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 74760000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 74a30000 PROPSYS.dll 7.0.6002.18005 C:\Windows\system32 74cb0000 NLAapi.dll 6.0.6001.18000 C:\Windows\system32 74ce0000 MMDevApi.dll 6.0.6002.18005 C:\Windows\System32 74d10000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 74d90000 OLEACC.dll 7.0.6002.18155 C:\Windows\system32 74dd0000 WINMM.dll 6.0.6002.18005 C:\Windows\system32 75040000 COMCTL32.dll 6.10.6002.18005 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0 75340000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 75420000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 75440000 WINTRUST.dll 6.0.6002.18169 C:\Windows\system32 755d0000 wshtcpip.dll 6.0.6001.18000 C:\Windows\System32 755f0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 75610000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 75940000 mswsock.dll 6.0.6002.18005 C:\Windows\system32 759a0000 wship6.dll 6.0.6001.18000 C:\Windows\System32 759b0000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 75b00000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 75b30000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 75b40000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 75b80000 IPHLPAPI.DLL 6.0.6002.18005 C:\Windows\system32 75c20000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75d20000 MPR.dll 6.0.6002.18005 C:\Windows\system32 75d80000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75da0000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75dc0000 DNSAPI.dll 6.0.6002.18005 C:\Windows\system32 75fe0000 NETAPI32.dll 6.0.6002.18005 C:\Windows\system32 76120000 apphelp.dll 6.0.6002.18005 C:\Windows\system32 76180000 Secur32.dll 6.0.6002.18051 C:\Windows\system32 761a0000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 762e0000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 76370000 USP10.dll 1.626.6002.18244 C:\Windows\system32 763f0000 OLEAUT32.dll 6.0.6002.18005 C:\Windows\system32 76480000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 76550000 USER32.dll 6.0.6002.18005 C:\Windows\system32 765f0000 msvcrt.dll 7.0.6002.18005 C:\Windows\system32 766a0000 iertutil.dll 8.0.6001.18943 C:\Windows\system32 76890000 ole32.dll 6.0.6002.18005 C:\Windows\system32 769e0000 SHELL32.dll 6.0.6002.18287 C:\Windows\system32 774f0000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 776b0000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 77700000 SHLWAPI.dll 6.0.6002.18005 C:\Windows\system32 77760000 kernel32.dll 6.0.6002.18005 C:\Windows\system32 77840000 IMAGEHLP.dll 6.0.6001.18000 C:\Windows\system32 77870000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 778a0000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 77970000 urlmon.dll 8.0.6001.18943 C:\Windows\system32 77ab0000 SETUPAPI.dll 6.0.6002.18005 C:\Windows\system32 77c40000 ntdll.dll 6.0.6002.18005 C:\Windows\system32 77d70000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 77d90000 IMM32.dll 6.0.6002.18005 C:\Windows\system32 77db0000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 77dc0000 NSI.dll 6.0.6001.18000 C:\Windows\system32 77dd0000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 77e20000 comdlg32.dll 6.0.6002.18005 C:\Windows\system32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0190 smss.exe 0 0 0 0218 csrss.exe 0 0 0 0258 wininit.exe 0 0 0 0264 csrss.exe 1 0 0 0284 services.exe 0 0 0 0290 lsass.exe 0 0 0 0298 lsm.exe 0 0 0 02ec winlogon.exe 1 0 0 0350 svchost.exe 0 0 0 0398 svchost.exe 0 0 0 03bc svchost.exe 0 0 0 041c Ati2evxx.exe 0 0 0 0434 svchost.exe 0 0 0 0478 svchost.exe 0 0 0 0498 svchost.exe 0 0 0 04d8 audiodg.exe 0 0 0 04f0 svchost.exe 0 0 0 0504 SLsvc.exe 0 0 0 0544 svchost.exe 0 0 0 05c8 svchost.exe 0 0 0 0620 AvastSvc.exe 0 0 0 0644 AAWService.exe 0 0 0 0664 Ati2evxx.exe 1 0 0 07c8 spoolsv.exe 0 0 0 07e4 svchost.exe 0 0 0 0330 taskeng.exe 1 29 22 normal C:\Windows\system32 0110 Dwm.exe 1 14 2 high C:\Windows\system32 05fc Explorer.EXE 1 388 182 normal C:\Windows 08a0 LeverageService.exe 0 0 0 094c MSASCui.exe 1 99 98 normal C:\Program Files\Windows Defender 0970 MOM.exe 1 10 9 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 09a4 LWEMon.exe 1 24 14 normal C:\Program Files\Logitech\Gaming Software 09f4 jusched.exe 1 9 2 normal C:\Program Files\Common Files\Java\Java Update 0a3c AvastUI.exe 1 282 44 normal C:\Program Files\Alwil Software\Avast5 0a4c SetPoint.exe 1 21 24 normal C:\Program Files\Logitech\SetPoint 0a68 svchost.exe 0 0 0 0a8c svchost.exe 0 0 0 0ab4 TnglCtrl.exe 0 0 0 0b28 ViewpointService.exe 0 0 0 0b38 svchost.exe 0 0 0 0b68 SearchIndexer.exe 0 0 0 0b80 WUDFHost.exe 0 0 0 0ba8 XAudio.exe 0 0 0 0e0c KHALMNPR.EXE 1 9 17 normal C:\Program Files\Common Files\Logishrd\KHAL2 055c taskeng.exe 0 0 0 0988 CCC.exe 1 39 43 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 0a24 ViewMgr.exe 1 15 9 normal C:\Program Files\Viewpoint\Viewpoint Manager 0f90 mobsync.exe 1 12 8 normal C:\Windows\System32 0d2c unsecapp.exe 0 0 0 0c84 WmiPrvSE.exe 0 0 0 0fd4 wmpnscfg.exe 1 22 11 normal C:\Program Files\Windows Media Player 0cc4 wmpnetwk.exe 0 0 0 0650 AAWTray.exe 1 44 11 normal C:\Program Files\Lavasoft\Ad-Aware 1250 Armada2.exe 1 75 46 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data hardware: + Computer - ACPI x86-based PC + Disk drives - Generic USB CF Reader USB Device - Generic USB MS Reader USB Device - Generic USB SD Reader USB Device - Generic USB SM Reader USB Device - Hitachi HDS721616PLA380 ATA Device + Display adapters - Radeon X300/X550/X1050 Series (driver 8.593.100.0) - Radeon X300/X550/X1050 Series Secondary (driver 8.593.100.0) + DVD/CD-ROM drives - ATAPI DVD W DH16W1P ATA Device + Human Interface Devices - Logitech MOMO Racing (HID) (driver 5.4.108.0) - Logitech MOMO Racing USB (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) + IDE ATA/ATAPI controllers - IDE Channel - IDE Channel - IDE Channel - Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF - Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 + Keyboards - HID Keyboard Device - PS/2 Keyboard (driver 4.72.24.0) + Mice and other pointing devices - HID-compliant mouse - PS/2 Compatible Mouse (driver 4.72.24.0) + Modems - PCI Soft Data Fax Modem with SmartCP (driver 7.67.0.0) + Monitors - Generic Non-PnP Monitor + Network adapters - Intel(R) PRO/100 VE Network Connection - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - USB CF Reader - USB MS Reader - USB SD Reader - USB SM Reader + Ports (COM & LPT) - Communications Port (COM1) - Printer Port (LPT1) + Processors - Intel(R) Pentium(R) 4 CPU 3.00GHz - Intel(R) Pentium(R) 4 CPU 3.00GHz + Sound, video and game controllers - High Definition Audio Device + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Sleep Button - Advanced programmable interrupt controller - Direct memory access controller - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 244E - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D0 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D4 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D6 - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA - Intel(R) 82801GH (ICH7DH) LPC Interface Controller - 27B0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E2 - Intel(R) 945G/GZ/P/PL PCI Express Root Port - 2771 - Intel(R) 945G/GZ/P/PL Processor to I/O Controller - 2770 - Logitech Virtual Bus Enumerator (driver 5.4.108.0) - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB - Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 050f4e38 ecx = 00000080 edx = 00278da8 esi = 006f4c54 edi = 00278da8 eip = 0053c334 esp = 0012fa68 ebp = 0012faa4 stack dump: 0012fa68 88 92 e0 04 80 38 09 05 - 38 4e 0f 05 80 fa 12 00 .....8..8N...... 0012fa78 c1 ef 53 00 c0 25 00 be - b0 fa 12 00 de 86 48 00 ..S..%........H. 0012fa88 1d 87 48 00 80 38 09 05 - 01 00 00 00 53 eb 30 ae ..H..8......S.0. 0012fa98 00 00 00 00 00 00 00 00 - 00 00 00 00 b0 fa 12 00 ................ 0012faa8 26 14 40 00 38 4e 0f 05 - 38 fc 12 00 0d 26 60 00 &.@.8N..8....&`. 0012fab8 38 4e 0f 05 3d 35 60 76 - 03 9c 5f 76 00 00 27 00 8N..=5`v.._v..'. 0012fac8 00 00 00 00 10 9c 5f 76 - d8 61 18 bc ac 92 e0 04 ......_v.a...... 0012fad8 ac 92 e0 04 7c fe 12 00 - e2 69 18 bc 06 00 00 00 ....|....i...... 0012fae8 14 fb 12 00 9c 4a 0f 05 - d0 fa 12 00 9c 4a 0f 05 .....J.......J.. 0012faf8 60 fb 12 00 7d e4 60 76 - c8 06 55 ca fe ff ff ff `...}.`v..U..... 0012fb08 10 9c 5f 76 78 f2 f4 66 - 90 7d 13 05 09 00 00 00 .._vx..f.}...... 0012fb18 30 fb 12 00 e5 d6 f5 66 - 01 00 00 00 74 65 63 68 0......f....tech 0012fb28 31 2e 74 74 00 00 00 00 - 64 f4 13 00 cb af 54 00 1.tt....d.....T. 0012fb38 c8 f9 13 00 00 00 00 00 - 6c 2e 71 00 c8 f9 13 00 ........l.q..... 0012fb48 00 00 00 00 64 2e 71 00 - c8 f9 13 00 00 00 80 bf ....d.q......... 0012fb58 5c 2e 71 00 c8 f9 13 00 - 00 00 80 bf 54 2e 71 00 \.q.........T.q. 0012fb68 c8 f9 13 00 b8 80 de 0c - 01 fc c5 77 70 20 c1 77 ...........wp..w 0012fb78 00 00 00 00 00 00 00 00 - 00 00 00 00 40 f4 13 00 ............@... 0012fb88 e0 04 ab 05 e0 f9 13 00 - ce 22 6a 00 ff ff ff ff ........."j..... 0012fb98 78 f4 13 00 18 37 60 00 - c8 f9 13 00 66 65 64 65 x....7`.....fede disassembling: 5a9f4dac public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9f4dac 5045 push ebp 5a9f4dad mov ebp, esp 5a9f4daf push 0 5a9f4db1 push 0 5a9f4db3 push ebx 5a9f4db4 push esi 5a9f4db5 push edi 5a9f4db6 xor eax, eax 5a9f4db8 push ebp 5a9f4db9 push $5a9f4e5a ; System.@HandleFinally 5a9f4dbe push dword ptr fs:[eax] 5a9f4dc1 mov fs:[eax], esp 5a9f4dc4 5046 mov eax, [ebp+8] 5a9f4dc7 5047 xor edx, edx 5a9f4dc9 push ebp 5a9f4dca push $5a9f4de1 ; System.@HandleAnyException 5a9f4dcf push dword ptr fs:[edx] 5a9f4dd2 mov fs:[edx], esp 5a9f4dd5 5048 > call eax 5a9f4dd5 5a9f4dd7 xor eax, eax 5a9f4dd9 pop edx 5a9f4dda pop ecx 5a9f4ddb pop ecx 5a9f4ddc mov fs:[eax], edx 5a9f4ddf jmp loc_5a9f4e3c 5a9f4ddf 5a9f4ddf ; --------------------------------------------------------- 5a9f4ddf 5a9f4de1 jmp -$1f0272 ($5a804b74) ; System.@HandleAnyException 5a9f4de1 5a9f4de6 5050 push 1 5a9f4de8 push 0 5a9f4dea push 0 5a9f4dec push 0 5a9f4dee push 0 5a9f4df0 push 0 5a9f4df2 push 0 5a9f4df4 push 0 [...]